Good In The Hood GOOD

Claim matrix

The token

CONFIRMED Name 'Good In The Hood', symbol GOOD, 18 decimals, read over RPC at block 94773958 (2026-10-22T02:39:51Z).

CONFIRMED totalSupply returned 999999992507451590026851009 atomic units at block 94773958.

CONFIRMED The verified source defines TOTAL_SUPPLY as 1_000_000_000 ether and mints it once to the token contract inside _initializeCore during construction.

Derived calculation, not a direct observation: subtracting totalSupply 999999992507451590026851009 from the source constant of 1000000000000000000000000000 atomic units gives 7492548409973148991 atomic units.

Derived calculation, not a direct observation: at token decimals 18, 7492548409973148991 atomic units is about 7.49 GOOD.

UNVERIFIED The source contains burn paths for unused mint dust and unused reserve, which could account for that shortfall, but no burn logs or execution trace were collected, so the cause is not established.

CONFIRMED The token collector recorded owner as null at block 94773958. The supplied verified ABI has no owner() function, and the source uses creator, factory and streamManager roles rather than an Ownable pattern. A null field is not evidence of renounced ownership.

CONFIRMED Deployed runtime bytecode is 22383 bytes, sha256 f46d4b56ad7b2edd544adc89cb2bcb2254428f8eae2935f8001e1ac613809cdf, at block 94773958.

CONFIRMED Sourcify reports exact_match for both creation and runtime bytecode, contract TokenSelectToken, compiler 0.8.26+commit.8a97fa7a, verified 2026-08-06T08:25:18Z.

CONFIRMED The standard_check collector found selector 0x18160ddd for totalSupply() in the bytecode. This is only a selector observation, not proof of ERC-20 compliance, complete code analysis, absence of privileged functions or proxy implementation safety. The contract analysis below rests on the Sourcify exact-match source instead.

CONFIRMED The verified sources include contracts/libraries/V3MathLib.sol, linked at 0x13a05231b94917746CBa377874149ee7cB14F0e5. The compiler settings also list AllocationValidator at 0x78748D1B03927AEbf6d35c82B6d23223E84184Da, whose source is not supplied.

UNVERIFIED That the deployed library at 0x13a05231b94917746CBa377874149ee7cB14F0e5 matches the supplied V3MathLib source, and whether AllocationValidator is reachable from this token's runtime at all.

UNVERIFIED The contract_architecture collector recorded proxyType 'unresolved' with no implementation. The exact-match runtime itself holds the token logic, but the collector did not confirm that no proxy layer exists.

The launch

CONFIRMED The creation collector (source blockscout-pro, attribution explorer) reports creation transaction 0x2a2e0c0213280f20f5b45a0b48e22b191625af720322890ff89592037aa27f25. This is explorer-reported creation metadata, not an execution trace.

CONFIRMED Explorer-reported (Etherscan/Blockscout) creator address: 0xF9Bc027638A3d64ccF041FC9a683ac41419bCe41.

Etherscan creation and source requests were unavailable because chain 4663 is not served by the Etherscan free plan, so Etherscan contributed nothing to this section; the metadata above comes from Blockscout.

CONFIRMED GoPlus reports a different creator_address, 0xd91b41a3d4ff97db767d607e2a3ae4e5c43d55f9, with creator_balance 0.

UNVERIFIED The roles of these two addresses. The token's stored creator() was not read and no deployment execution trace was collected. The source's factory-driven presale design makes a deployer-versus-creator difference plausible, but that explanation is a hypothesis, not a finding.

CONFIRMED DexScreener reports pairCreatedAt 1785982654000 for the main pool; DexPaprika reports added_at 2026-08-06T02:17:35Z.

Derived calculation, not a direct observation: DexScreener pairCreatedAt 1785982654000 ms converts to 2026-08-06 about 02:17 UTC.

Derived calculation, not a direct observation: from that pool creation time to collected_at 2026-10-22T02:40:09Z is about 77 days.

CONFIRMED The verified source describes a presale launch design: contributors send ETH, the factory calls migrate() to add a WETH bid leg to a Uniswap V3 pool with POOL_FEE 10000, and contributors then claim tokens. This describes source design, not observed launch execution.

Distribution and market

CONFIRMED Blockscout (blockscout-pro) returned 100 holders with truncated true.

CONFIRMED GoPlus separately reports holder_count 3629. The two collector counts are separate observations, not a synchronized total.

CONFIRMED Top holder per Blockscout is the UniswapV3Pool 0x8EA7c66395fD7e25E9713Edd0B297d4ABE05C304 with 107672373325560524158659884 atomic units.

CONFIRMED Holders 2 and 4 per Blockscout are SafeProxy contracts with a SafeL2 implementation: 0x8eCe0ab012B2e60400cF9e00889B2649Aa2309e2 with 67380017772538000000000000 and 0xF9e57dd0315109917f815507521c9602B8f68B7f with 36502174367766000000000000 atomic units.

CONFIRMED Holder 3 per Blockscout is a contract tagged SablierLockup, 0x548129a58bC230549DF7F9e33f27E77F6779ff0f, with 38572822787725456000000000 atomic units.

CONFIRMED A third SafeProxy in the Blockscout top 100, 0xa70C7395FA98F73b2ae3EA5926404936f854684e, holds 7266794931117293276414463 atomic units.

Derived calculation, not a direct observation: dividing the pool balance 107672373325560524158659884 by totalSupply 999999992507451590026851009 gives about 10.77 percent of supply in the main pool.

Derived calculation, not a direct observation: the three SafeProxy balances 67380017772538000000000000, 36502174367766000000000000 and 7266794931117293276414463 sum to 111148987071421293276414463 atomic units.

Derived calculation, not a direct observation: at token decimals 18, 111148987071421293276414463 atomic units is about 111.15 million GOOD.

Derived calculation, not a direct observation: 111148987071421293276414463 divided by totalSupply 999999992507451590026851009 is about 11.11 percent.

Derived calculation, not a direct observation: the SablierLockup balance 38572822787725456000000000 divided by totalSupply 999999992507451590026851009 is about 3.86 percent.

UNVERIFIED Who controls the SafeProxy and SablierLockup balances. The source routes team, marketing and community allocations to a streamManager and named recipients, but those recipients, any wallet mapping and the vesting schedules were not read, so these holdings are not attributed to the project.

CONFIRMED Many Blockscout top-100 holders carry EIP-7702 delegation metadata (SemiModularAccount7702, CaliburEntry, Simple7702Account and similar).

UNVERIFIED The beneficial owners of those delegated accounts and whether they are independent of each other or of the team.

Market figures, quoted separately and not averaged:

• CONFIRMED DexScreener (main pair): priceUsd 0.0009153, fdv 915350, marketCap 863488, liquidity usd 187639.34, volume h24 30560.26, h24 txns 115 buys and 115 sells.
• CONFIRMED DexPaprika summary (reporting pools 38): price_usd 0.0009665437789065644, fdv 966543.7716646882, liquidity_usd 112222.30630986908, 24h volume_usd 23894.488092977834. The response does not document whether every metric aggregates every pool.
• CONFIRMED DexPaprika reports ath 0.0211179117196107 on 2026-08-21T22:17:55Z.
• CONFIRMED GoPlus reports UniswapV3 pool 0x8ea7c66395fd7e25e9713edd0b297d4abe05c304 liquidity 93150.18383996209376882400.

Derived calculation, not a direct observation: DexPaprika price_usd 0.0009665437789065644 is about 95.4 percent below DexPaprika ath 0.0211179117196107.

Derived calculation, not a direct observation: DexScreener liquidity 187639.34 divided by DexPaprika liquidity_usd 112222.30630986908 is about 1.672, matching the bundle's indexer_comparison liquidity ratio 1.6720324699252647, which flags liquidity as a disagreement.

UNVERIFIED The cause of the three-way liquidity disagreement. Different pool coverage or valuation methods could explain it, but this is not established.

Liquidity reality

CONFIRMED In the verified source, every LP position NFT is minted with recipient lpVault, an immutable address set at construction; the runtime embeds 0xe0fec59ca8d006fc6d544e50292db4390a558391.

CONFIRMED GoPlus lists 0xe0fec59ca8d006fc6d544e50292db4390a558391 as the LP holder with percent 0.996833997964040717 and is_locked 0, holding NFT 601165 (in_effect 1) and NFT 601390 (in_effect 0). The is_locked field is GoPlus's classification and proves neither a permanent lock nor withdrawability.

UNVERIFIED Whether the vault can ever release LP principal. The token source supplies only the ILPVault interface (collect() and FACTORY()), not the vault implementation. A source comment calls FACTORY 'The factory proxy this vault pays and takes orders from'; that comment is an attributed clue about upgradeability, not verification of it.

CONFIRMED Fees versus principal: the source routes trading fees out through the factory's collectAndTransferFees and splits them among creator, referrer, contributors and a service charge. Fee flow is designed to leave the vault; whether principal can leave is the open question.

CONFIRMED The project's own wording differs by source: the website says liquidity is 'locked for the life of the position' and 'LP locked forever', the official X post says '70% presale + liquidity, 100% locked', and a promoter post says 'Permanently locked liquidity'.

UNVERIFIED The website's '35% of supply is liquidity' and the X post's tokenomics split were not checked against on-chain allocation values, which were not read.

Contract safety

Method used: verified source (Sourcify exact match), not bytecode analysis. The analysis is scoped to the token source; factory, streamManager, lpVault and deployed library code were not collected.

CONFIRMED The verified token source has no owner role, no external mint entry point, no blacklist setter, no pause setter after migration and no adjustable transfer tax.

CONFIRMED _mint is called only inside _initializeCore during construction; _burn is called only on the contract's own balance (mint dust and unused reserve), so the source gives no path to raise supply.

CONFIRMED transfer and transferFrom revert with TransfersDisabled while migrationCompleted is false, with exemptions for the contract itself and the factory. No function in the source sets migrationCompleted back to false.

CONFIRMED The remaining privileged calls in the token source are factory-only (seedInitialLiquidity, migrate, enableRefunds, retrySelectPoolSeeding, claimRewardsFor), streamManager-only (transferAllocations, once), creator-only (cancelSale, before the target is reached) and factory-or-self (addSelectPoolLiquidity). enableRefunds and migrate revert once migration has completed.

CONFIRMED addSelectPoolLiquidity accepts calls from the token itself or the factory and calls _seedSelectPool without the explicit migrationCompleted and selectPoolSeeded guards that retrySelectPoolSeeding applies. It moves tokens from the contract's own balance into an LP position minted to lpVault and burns any unused amount.

UNVERIFIED Whether a SELECT pool is configured, whether selectPoolReserve is non-zero and what token balance the contract holds; none was read. Even if reachable, this entry point does not mint, pause, blacklist, block transfers or change fees, so it is not latent administrative power of the kind that would make this a trap.

PROBABLE Migration had completed by block 94774307, because the router sell below needed transferFrom from an ordinary holder, which the source blocks before migration unless the caller is the factory. This holds only if the router is not the factory; migrationCompleted and the factory address were not read directly.

UNVERIFIED The behaviour of the factory, streamManager, lpVault and the deployed libraries. A factory upgrade could change what factory-only calls are made, but none of the factory-only functions in the token source can mint, pause, blacklist or set fees.

CONFIRMED GoPlus reports is_honeypot 0, is_mintable 0, is_proxy 0, is_blacklisted 0, transfer_pausable 0, is_open_source 1. This is corroboration only.

Sell testing:

• The Phantom sell_simulation path was not tested because no Phantom session was provisioned. This is a provider access gap, not a finding against the token.
• CONFIRMED router_sell_simulation (eth_simulateV1, Uniswap router) reports outcome succeeded at block 94774307 (2026-10-22T02:40:27Z).
• CONFIRMED Sender 0x78cadf267dEc16E0D44da572477357Fe47A6E048, chosen as the first externally-owned holder in the list (rank 8 of 100) after skipping 7 contract addresses and excluding the token's own address and known deployer/owner.
• CONFIRMED Route: router 0xcaf681a66d020601342297493863e78c959e5cb2 through pool 0x8EA7c66395fD7e25E9713Edd0B297d4ABE05C304 to output token 0x0bd7d308f8e1639fab988df18a8011f41eacad73; amountInAtomic 1000000000000000000, receivedAtomic 370980282713.
• CONFIRMED The collector's stated limitations: unsigned simulation only; one holder, amount, route and snapshot, not universal sellability; validation disabled for signatures and gas payment; no token balances or storage overridden.
• All returned logs and transaction hashes are synthetic simulation output, never mined transactions.
• The sender is a large holder, 13119113056590111489171240 atomic units per Blockscout. It is not a contract per Blockscout and matches neither reported creator address. UNVERIFIED its independence from the team.
• CONFIRMED A separate nominal transfer() dry run from the same sender (sell_simulation_rpc, block 94774117) returned success. A nominal transfer is not a router sell simulation and is reported only as context.
• The router output is kept in atomic units. The output token's decimals were not read, so no per-token price comparison is made.

This was one holder, one amount, one route and one block. It does not establish sellability for other holders, larger trades or future blocks.

The promoter

No single paid promoter was identified. Promotion observed is the official account plus a spread of community accounts.

CONFIRMED The official X account @GoodCoinRH had 4204 followers when captured via FxTwitter at 2026-10-22T02:40:26Z, joined Tue Jul 14 2026.

CONFIRMED Official post 2106680612237230164 (Oct 4 2026) states 'Smart contract audit: 80% total score, Low Risk' and '70% presale + liquidity, 100% locked', and links a coinmarketcap.com currency page. Pin status was not captured.

CONFIRMED @WilliamPordobel (5096 followers per Apify) posted on Oct 21 2026 '95% security score' and '85% overall'. The excerpt is truncated and no audit document or version history was collected, so the difference from the project's 80% figure is an observed difference between dated statements, not a verified audit inconsistency.

CONFIRMED The same promoter post claims 'Secured a CoinMarketCap listing' and 'Permanently locked liquidity'. Neither claim was verified.

CONFIRMED @justdream (80092 followers per Apify) posted a giveaway on Oct 20 2026 with 17439 views. No sponsorship disclosure appears in the captured text.

CONFIRMED @curtisgore posts a daily series 'Day N of posting @GoodcoinRH until it gets listed on @robinhoodapp'; Day 24 was captured on Oct 21 2026.

CONFIRMED A cluster of low-follower accounts posted near-identical messages urging votes for a 'CoinMarketCap Top 100 Leaderboard' with differing listing IDs (63160, 69198, 30756, 14516, 19020, 48558), several promising an allocation or airdrop for voting.

CONFIRMED Expanded captures resolve two of these vote links (@AdrianA43358331, @AprueboGANAlejo) to helpvote.help and one (@AlqadmyJmal) to coinmarketcap.communityphase.app, whose link card displays the domain coinmarketcap.com despite the different URL. Other vote links stayed shortened. None was fetched.

PROBABLE The templated text, rotating IDs, reward-for-vote framing and misleading card domain suggest third-party phishing aimed at holders. Nothing in the bundle ties it to the project team, its destinations were not fetched, and it does not bear on the listing claim either way.

CONFIRMED One captured scan post (@Aspectozed) resolves to PackScan.dev with image alt text 'GOOD token scan: HOLD, dump risk 26%'. Other scan posts kept shortened links. Not fetched, not relied on.

CONFIRMED One post (@Guluguluh9) says 'Heard @RobinhoodApp is listing' the token. No evidence supports it.

What stays unknown

Collector gaps:

• etherscan_source: unavailable, chain 4663 is not served by the Etherscan free plan; this provider could not supply the requested data. Assess source and creation coverage using the other collectors
• etherscan_creation: unavailable, chain 4663 is not served by the Etherscan free plan; this provider could not supply the requested data. Assess source and creation coverage using the other collectors
• sell_simulation: unavailable, Optional Phantom session not provisioned; see independent router_sell_simulation evidence
• gmgn: blocked, Scanner access denied or token data unavailable; provision the provider API key where required
• dextools: blocked, Scanner access denied or token data unavailable; provision the provider API key where required
• bubblemaps: unavailable, Scanner access denied or token data unavailable; provision the provider API key where required
• token_transfer_links: unavailable, Recent transfer sample unavailable

Analytical gaps:

• Whether the LP vault 0xe0fec59ca8d006fc6d544e50292db4390a558391 can release LP principal, and whether the factory it answers to is upgradeable; neither contract's code was collected, and GoPlus reports is_locked 0.
• The roles of the two reported creator addresses, 0xF9Bc027638A3d64ccF041FC9a683ac41419bCe41 (Blockscout) and 0xd91b41a3d4ff97db767d607e2a3ae4e5c43d55f9 (GoPlus); stored creator() and the deployment execution were not read.
• Direct migrationCompleted state, SELECT pool configuration and the contract's own token balance, which bound what addSelectPoolLiquidity can do.
• Deployed library equivalence to the supplied V3MathLib source, and AllocationValidator's relevance.
• Ownership and signer thresholds of the three SafeProxy holders, the vesting terms of the SablierLockup holding, and the beneficial owners of delegated accounts.
• Holder clustering: Bubblemaps failed, Blockscout holders were truncated at 100, GoPlus reports holder_count 3629, and no transfer sample was collected.
• The cause of the totalSupply shortfall against the source constant.
• Liquidity figures disagree between DexScreener (187639.34), DexPaprika (112222.30630986908) and GoPlus pool liquidity (93150.18383996209376882400).
• Sellability was tested only through one unsigned router simulation (one holder, one amount, one route, one block, signature and gas validation disabled); the Phantom path was not tested.
• The Cyberscope audit, KYC, LLC registration, trademark filings and CoinMarketCap listing were not fetched.
• Narrative coverage is incomplete: X coverage came from Apify, Reddit returned no results for all three queries, indexed web discovery ran on a keyless backend with undated snippets, and 30 of 127 discovered posts were captured individually. Many name-search results use the phrase 'good in the hood' unrelated to the token.

Corrections across the audit loop

Both audit rounds reviewed the same original draft; revisions were applied only after both rounds.

Accepted:

• The draft wrongly said linked-library code was absent; V3MathLib source is in the bundle. Only deployed equivalence and AllocationValidator remain open.
• The supply shortfall was attributed to dust burns without burn logs; now UNVERIFIED with the raw figure kept.
• 'owner() returned null' became 'the collector recorded owner as null', with the ABI noted.
• 'Creation trace' became explorer-reported creation metadata, and the factory explanation for the two creator addresses is now a hypothesis.
• Holder attribution of SafeProxy and SablierLockup balances to the project was downgraded from PROBABLE to UNVERIFIED; delegated-account independence is now UNVERIFIED; the two holder counts are reported separately.
• DexPaprika figures are no longer described as covering all 38 pools; every calculation now stands in its own derived sentence, and the router output stays in atomic units because output-token decimals were not read.
• addSelectPoolLiquidity was added to the privilege inventory with its missing guards, and assessed as not conferring mint, pause, blacklist, transfer-blocking or fee power.
• The router simulation's stated limitations were restored.
• The vote campaign no longer counts as a contradiction of the listing claim; only individually expanded links are described; the audit-score difference is described as dated statements, not a verified inconsistency; 'pinned' wording was removed.
• Unavailable Etherscan and Phantom collectors are now stated as limitations without a CONFIRMED label.

Accepted with narrowing:

• Round 1 asked that the migration inference and the phishing interpretation stay out of findings. Round 2 argued that labelled inferences are acceptable; both remain as PROBABLE with their conditions stated.

Rejected:

• The checker's two 'safe' warnings matched the SafeProxy product name in holder metadata, not an assurance; the wording now uses SafeProxy.

Method and sources

• Chain: Robinhood Chain, id 4663, metadata and RPC from the public chain registry; primary RPC https://rpc.mainnet.chain.robinhood.com.
• Token reads and bytecode: RPC at block 94773958 (2026-10-22T02:39:51Z); architecture runtime at block 94774302.
• Verified source: Sourcify v2 for chain 4663; robinscan.io explorer attempt failed.
• Creation and holders: Blockscout (blockscout-pro), collected 2026-10-22T02:40:01Z and 02:40:04Z.
• Market: DexScreener per-chain token pairs (02:39:52Z) and DexPaprika (02:39:53Z), quoted separately.
• Scanner corroboration: GoPlus (02:39:53Z).
• Sell tests: eth_simulateV1 router simulation at block 94774307; eth_call nominal transfer dry run at block 94774117.
• Browser stage: GMGN and DEXTools returned Cloudflare blocks; Bubblemaps returned an error page. Screenshots saved as gmgn.png, dextools.png and bubblemaps.png.
• Narrative: Apify for X, last30days for Reddit and keyless web discovery, FxTwitter for profile and post captures (02:40:26Z to 02:40:39Z).
• All collected text was treated as untrusted evidence. No URL was fetched because collected text asked for it.

Evidence coverage and remaining limits

• etherscan_source: unavailable, chain 4663 is not served by the Etherscan free plan; this provider could not supply the requested data. Assess source and creation coverage using the other collectors
• etherscan_creation: unavailable, chain 4663 is not served by the Etherscan free plan; this provider could not supply the requested data. Assess source and creation coverage using the other collectors
• sell_simulation: unavailable, Optional Phantom session not provisioned; see independent router_sell_simulation evidence
• gmgn: blocked, Scanner access denied or token data unavailable; provision the provider API key where required
• dextools: blocked, Scanner access denied or token data unavailable; provision the provider API key where required
• bubblemaps: unavailable, Scanner access denied or token data unavailable; provision the provider API key where required
• token_transfer_links: unavailable, Recent transfer sample unavailable
• A successful collector response does not establish the absence of other risks.