Smart Contract Security Explanation
Project: IDENT.AI / EsportsGameMaketoken (EGM)
Prepared by: Liberal Mind Inc.
Date: July 25, 2026
Purpose of This Explanation
This explanation is provided in response to a CoinGecko listing rejection that referenced a suspected smart contract security risk. The project team understands that CoinGecko does not disclose exact internal security parameters. This document therefore summarizes the publicly verifiable contract information and explains why the contract is intended to operate as a standard ERC-20 utility token without hidden transfer restrictions, blacklist controls, sell-blocking behavior, tax controls, proxy upgrade controls, or post-deployment minting controls.
Public Verification Sources
| Item | Public Source |
|---|---|
| Etherscan Token Page | https://etherscan.io/token/0xdAfe3180Ef048a595474efC4272D69A0439d210a |
| Etherscan Contract Page | https://etherscan.io/address/0xdAfe3180Ef048a595474efC4272D69A0439d210a#code |
| Official Website | https://identai.io/ |
| Official Whitepaper | https://identai.io/egm_token_whitepaper_EN.pdf |
| BitMart Trading Pair | https://www.bitmart.com/en-US/trade/EGM_USDT |
| Official Email | contact@identai.io |
Verified Contract Information
The EGM token contract is publicly verified on Etherscan. The Etherscan contract page displays the contract as Source Code Verified with an Exact Match. The contract name shown on Etherscan is EsportsGameMaketoken, with compiler version v0.8.30+commit.73712a01 and MIT license.
The publicly visible ABI exposes standard ERC-20 and ERC-2612 Permit related methods, including name, symbol, decimals, totalSupply, balanceOf, allowance, approve, transfer, transferFrom, permit, nonces, DOMAIN_SEPARATOR, and eip712Domain.
Contract Risk Explanation
| Potential Risk Area | Project Explanation |
|---|---|
| Unverified contract | The contract source code is verified on Etherscan with an Exact Match status. This allows reviewers and users to inspect the deployed contract against the published source code. |
| Proxy or upgradeable behavior | The visible contract interface does not expose proxy administration, implementation upgrade, or owner-only upgrade functions. The project does not present this token as an upgradeable proxy token. |
| Honeypot or sell-blocking behavior | The visible contract interface includes standard ERC-20 transfer functions and does not expose blacklist, whitelist, trading-enable, anti-sell, or wallet-blocking control functions. The token is also listed for centralized exchange trading on BitMart under the EGM/USDT pair. |
| Post-deployment minting risk | The visible contract ABI does not expose a public or administrative mint function. The token supply is shown publicly on Etherscan as a fixed max total supply of 100,000,000,000 EGM. |
| Blacklist or pause controls | The visible contract ABI does not expose blacklist, setBlacklist, pause, unpause, or similar transfer-freezing functions. |
| Tax, fee, or hidden transfer deductions | The visible contract ABI does not expose fee-setting, tax-setting, fee-exclusion, or transfer-tax configuration functions. The token is intended to behave as a standard ERC-20 utility token. |
| Permit functionality | The contract includes ERC-2612 Permit related functions. Permit is a widely used ERC-20 extension that allows allowance approvals through signed messages. It does not by itself create minting, blacklist, or transfer-blocking controls. |
| Security audit status | No formal third-party contract audit has been submitted on Etherscan at this time. If CoinGecko requires a formal audit report for listing review, the project team can provide one after completion by a recognized third-party audit provider. |
Summary
Based on the publicly verifiable Etherscan metadata and visible contract interface, the EGM token contract appears to be a verified ERC-20 token contract with ERC-2612 Permit support. The visible interface does not expose administrative functions typically associated with hidden minting, blacklist restrictions, transfer pausing, fee/tax manipulation, proxy upgrades, or honeypot-style transfer blocking.
The project team respectfully requests that reviewers consider the verified Etherscan source code, visible ABI, official website, official whitepaper, and centralized exchange listing information when reassessing the token. If an internal security scanner continues to flag the contract, the project team is prepared to provide either a third-party security audit report or additional technical explanation as requested.
Contact
For verification or follow-up, please contact the project team through the official domain email: contact@identai.io.