Website report · 02 Nov 2026

www.serializedaudit.io

“Safe: Binance Pepe (BEPE) | Serialized Audit”

Template-written 47 evidence items Code reader analysed 2 scripts
What this means for you

Serialized Audit talked to 7 outside services on a first visit, including 3 that measure visits or show ads.E6E10E7

  • An AI agent used the site and saw 2 of 3 claimed features working.E39E40E41E43E44E45
  • AI / agents: audit pages labelled 'Analysis complete · Serialized AI engine': The BEPE page and the MeiMei audit page linked from the home feed both showed stored verdicts labelled 'Serialized AI engine'. On the MeiMei page, clicking 'Vulnerable Code' opened a decompiled upgradeToAndCall function. These were existing results, though: clicking ANALYZE on BEPE stayed on 'DETECTING', and 'RUN A SAMPLE SCAN' stayed on 'LOADING AUDIT'. In both cases only Cloudflare challenge reqE39E40E41E43E44E45E46
  • A working app / platform: LIVE, ENGINE, API, CHAINS, PROGRAMS, DOCS, API PORTAL, ANALYZE: The home page called /api/latest-audits and showed a live feed of recent verdicts, and the audit pages it links to loaded with details. The ANALYZE button and the sample scan did not return results during the test. The API portal loaded but needs a sign-in for usage and API keys.E40E42E43E44E45E47
  • Extra: API portal / API keys: /portal loaded and showed sign-in, create-account and 'I have an API key' options. Usage and API keys need an account.E47
  • Tech check: the site claims a working app / platform, and its public page shows matching evidence.E37E20
  • Tech check: the site mentions ai / agents, but we found nothing behind it in what its public page loads.E36
  • Before you click anything, the page loads analytics or ad services: Cloudflare Web Analytics and Google Analytics / Tag Manager.E6E10E7
  • 2 cookies were set in your browser, all by the site itself.E12E13

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

AI / agents

“…ource · Owner renounced Analysis complete · Serialized AI engine Share audit TOKEN 0x3f29…4568 CREATOR 0x34f9…d1…”E36

No matching code, calls or services in what loaded for us.

Evidence found

A working app / platform

“LIVE ENGINE API CHAINS PROGRAMS DOCS CONTACT API PORTAL ANALYZE Binanc…”E37

Calls to its own backend: /api/latest-auditsE20

Calls its own backend /api/latest-auditsE20
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What the AI agent tried

An AI agent (claude-opus-5-5) used the site in our sandbox for 9 steps and saw 2 of 3 claimed features working. It can't connect a wallet, pay, sign or log in, so those features count as "couldn't test". What it reports is what it observed, not a verdict.

Seen working

AI / agents: audit pages labelled 'Analysis complete · Serialized AI engine'

The BEPE page and the MeiMei audit page linked from the home feed both showed stored verdicts labelled 'Serialized AI engine'. On the MeiMei page, clicking 'Vulnerable Code' opened a decompiled upgradeToAndCall function. These were existing results, though: clicking ANALYZE on BEPE stayed on 'DETECTING', and 'RUN A SAMPLE SCAN' stayed on 'LOADING AUDIT'. In both cases only Cloudflare challenge reqE39E40E41E43E44E45E46

Seen working

A working app / platform: LIVE, ENGINE, API, CHAINS, PROGRAMS, DOCS, API PORTAL, ANALYZE

The home page called /api/latest-audits and showed a live feed of recent verdicts, and the audit pages it links to loaded with details. The ANALYZE button and the sample scan did not return results during the test. The API portal loaded but needs a sign-in for usage and API keys.E40E42E43E44E45E47

Couldn't test

Extra: API portal / API keys

/portal loaded and showed sign-in, create-account and 'I have an API key' options. Usage and API keys need an account.E47

What it is

  • The Internet Archive first saved this site on 2025-01-08 (663 days ago).E38
  • The site describes itself as: “No vulnerabilities found. Binance Smart Chain · audited Nov 2, 2026. Token launched on Four.Meme. No vulnerabilities were found in this toke”E2
  • It's built with React (common tools for building web apps).E14
  • In your browser it can copy text to your clipboard and saves small bits of data in your browser.E17E18
  • It has sections such as /portal, /reaudit, /privacy, /terms and /cookies.E25E26
  • While loading, it called 1 endpoint on its own servers, such as /api/latest-audits.E20

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 3
static.cloudflareinsights.comCloudflare Web Analytics: page-view counter 1×E6
www.google-analytics.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 3×E10
www.googletagmanager.comGoogle Analytics / Tag Manager: Google's visitor analytics and tag loader 1×E7
Consent & bot protectionCookie banners, CAPTCHAs and bot checks. 2
challenges.cloudflare.comCloudflare Turnstile / challenge: bot check 24×E5
brunhild.challenges.cloudflare.comCloudflare Turnstile / challenge: bot check 4×E11
Not identifiedServices we don't have in our list yet. 2
registry.naos.tradenot identified 1×E8
serialized.cloudnot identified 1×E9

How key features work

Loading its content

Its content loads from its own API while you browse (/api/latest-audits).E20

/api/latest-audits

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E19

canvas

Measuring what you do

Visits and clicks are measured with Cloudflare Web Analytics, Google Analytics / Tag Manager and Google tag (gtag.js) (found in its traffic or its code).E6E10E7E15

Cloudflare Web AnalyticsGoogle Analytics / Tag ManagerGoogle tag (gtag.js)

Saving data on your device

It saves data in your browser (localStorage), so some things persist between visits.E18

local_storage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
_gaE12serializedaudit.io about 400 daysthe site
_ga_K8P348FG1CE13serializedaudit.io about 400 daysthe site

Pages and API calls

Pages it links to

//portal/reaudit/privacy/terms/cookies//privacy/terms/cookies/404

Endpoints

Called while loading (seen) or named in the code (code).

www.serializedaudit.io/api/latest-auditsseenE20
/termscodeE21
/privacycodeE22
/cookiescodeE23
/404codeE24

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Safe: Binance Pepe (BEPE) | Serialized Audit
page title · https://www.serializedaudit.io/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568
E2
Page description: No vulnerabilities found. Binance Smart Chain · audited Nov 2, 2026. Token launched on Four.Meme. No vulnerabilities were found in this token.
page description · https://www.serializedaudit.io/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568
E3
Site name: Serialized Audit
page site_name · https://www.serializedaudit.io/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568
E4
6 request(s) to www.serializedaudit.io
types: 2 image, 1 document, 1 script
GET https://www.serializedaudit.io/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568 · image · 6 requests · network recording
E5
24 request(s) to challenges.cloudflare.com
types: 8 xhr, 6 document, 4 fetch
GET https://challenges.cloudflare.com/turnstile/v0/api.js · xhr · 24 requests · network recording
E6
1 request(s) to static.cloudflareinsights.com
types: 1 script
GET https://static.cloudflareinsights.com/beacon.min.js/vce701823e78c4301a35b7e07294d87301792088814092 · script · network recording
E7
1 request(s) to www.googletagmanager.com
types: 1 script
GET https://www.googletagmanager.com/gtag/js · script · network recording
E8
1 request(s) to registry.naos.trade
types: 1 image
GET https://registry.naos.trade/api/v1/registry/assets/dex/fourmeme-v5.6dcd5a70.webp · image · network recording
E9
1 request(s) to serialized.cloud
types: 1 image
GET https://serialized.cloud/token/9b08823a-93ba-4f7c-aaa9-4ead033bc0e5/icon · image · network recording
E10
3 request(s) to www.google-analytics.com
types: 3 fetch
GET https://www.google-analytics.com/g/collect · fetch · 3 requests · network recording
E11
4 request(s) to brunhild.challenges.cloudflare.com
types: 4 fetch
GET https://brunhild.challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/a542b43eeb8567dd/CvQwVGyCOBBpZyAf4ICAdB8SL51_-_JgMt4Uas… · fetch · 4 requests · network recording
E12
Cookie '_ga' set for serializedaudit.io
kept for about 400 days
cookie _ga on serializedaudit.io · value not stored
E13
Cookie '_ga_K8P348FG1C' set for serializedaudit.io
kept for about 400 days
cookie _ga_K8P348FG1C on serializedaudit.io · value not stored
E14
React detected by The code reader (react-runtime)
confidence: medium
www.serializedaudit.io/assets/index-b2gZW5IO.js · “react-runtime” · The code reader analyze-web-bundle 6.4.0
E15
Google tag (gtag.js) found in the code
www.serializedaudit.io/ (page HTML) @ 1:72 · “googletagmanager.com/gtag” · pattern scan
E16
Cloudflare Turnstile found in the code
www.serializedaudit.io/ (page HTML) @ 34:26 · “challenges.cloudflare.com/turnstile” · pattern scan
E17
Uses the browser ability: clipboard_write
can copy text to your clipboard
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 76:28322 · “clipboard.writeText(” · pattern scan
E18
Uses the browser ability: local_storage
saves small bits of data in your browser
www.serializedaudit.io/ (page HTML) @ 134:13 · “localStorage.setItem(” · pattern scan
E19
Uses the browser ability: canvas
draws graphics on a canvas
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 76:87298 · “getContext("2d"” · pattern scan
E20
The page called /api/latest-audits on www.serializedaudit.io (GET)
GET https://www.serializedaudit.io/api/latest-audits · fetch · network recording
E21
Code reader found the endpoint /terms
how: property:path
s00-index-b2gZW5IO.js · “/terms” · The code reader analyze-javascript-application 6.4.0
E22
Code reader found the endpoint /privacy
how: property:path
s00-index-b2gZW5IO.js · “/privacy” · The code reader analyze-javascript-application 6.4.0
E23
Code reader found the endpoint /cookies
how: property:path
s00-index-b2gZW5IO.js · “/cookies” · The code reader analyze-javascript-application 6.4.0
E24
Code reader found the endpoint /404
how: property:path
s00-index-b2gZW5IO.js · “/404” · The code reader analyze-javascript-application 6.4.0
E25
6 links to pages on the same site
page links · https://www.serializedaudit.io/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568 · /, /portal, /reaudit, /privacy, /terms, /cookies
E26
Code reader found the route /
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 32:41578 · “/” · The code reader analyze-web-bundle 6.4.0
E27
Code reader found the route /privacy
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 32:41890 · “/privacy” · The code reader analyze-web-bundle 6.4.0
E28
Code reader found the route /terms
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 32:42188 · “/terms” · The code reader analyze-web-bundle 6.4.0
E29
Code reader found the route /cookies
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 32:42507 · “/cookies” · The code reader analyze-web-bundle 6.4.0
E30
Code reader found the route /404
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 32:42795 · “/404” · The code reader analyze-web-bundle 6.4.0
E31
Address in code: 0x3f29447f3ee55398354e8dcf1b35f3cde09e4568
www.serializedaudit.io/ (page HTML) @ 14:68 · “0x3f29447f3ee55398354e8dcf1b35f3cde09e4568” · pattern scan
E32
Address in code: 0x34f9d0008566766a636355a3b3c8e5ef035cd13f
www.serializedaudit.io/ (page HTML) @ 39:27690 · “0x34f9d0008566766a636355a3b3c8e5ef035cd13f” · pattern scan
E33
Address in code: 0xca11bde05977b3631167028862be2a173976ca11 (Multicall3 (batches read calls))
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 32:26987 · “0xca11bde05977b3631167028862be2a173976ca11” · pattern scan
E34
Address in code: 0xf9cda624fbc7e059355ce98a31693d299facd963
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 32:29097 · “0xf9cda624fbc7e059355ce98a31693d299facd963” · pattern scan
E35
Address in code: 0x6d7401f6f1fb09ff24a048337ff44d890cdf86f8
www.serializedaudit.io/assets/index-b2gZW5IO.js @ 76:83569 · “0x6d7401f6f1fb09ff24a048337ff44d890cdf86f8” · pattern scan
E36
The site says: “…ource · Owner renounced Analysis complete · Serialized AI engine Share audit TOKEN 0x3f29…4568 CREATOR 0x34f9…d1…”
page text · https://www.serializedaudit.io/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568 · …ource · Owner renounced Analysis complete · Serialized AI engine Share audit TOKEN 0x3f29…4568 CREATOR 0x34f9…d1…
E37
The site says: “LIVE ENGINE API CHAINS PROGRAMS DOCS CONTACT API PORTAL ANALYZE Binanc…”
page text · https://www.serializedaudit.io/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568 · LIVE ENGINE API CHAINS PROGRAMS DOCS CONTACT API PORTAL ANALYZE Binanc…
E38
The Internet Archive first saved serializedaudit.io on 2025-01-08 and has snapshots from 13 different days
page web archive · https://web.archive.org/web/20250108150503/serializedaudit.io
E39
Agent step 1: view
AI agent step 1 · view on /0wn4x/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568
E40
Agent step 2: click ANALYZE
AI agent step 2 · click on /0wn4x/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568 · page called POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/3708973600:1793614459:DlQ8oC_Cc3FELLajrZxTX3gWLFYl4mSmEViPabAj9gs/a542b503dd3d15fd/Cv, GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a542b503dd3d15fd/1793617977376/0e64e3e551a6ed30d28f8dec324f85e7dce80414b3d555e567c4
E41
Agent step 3: view
AI agent step 3 · view on /0wn4x/bsc/0x3f29447f3ee55398354e8dcf1b35f3cde09e4568
E42
Agent step 4: go /
AI agent step 4 · go on / · page called POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/3708973600:1793614459:DlQ8oC_Cc3FELLajrZxTX3gWLFYl4mSmEViPabAj9gs/a542b5271e7115fd/Cq, POST www.google-analytics.com/g/collect, GET www.serializedaudit.io/api/latest-audits, POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b
E43
Agent step 5: click RUN A SAMPLE SCAN
AI agent step 5 · click on /base/0xa0fc7bb0df38543cc3d04cc7d718a8503e292f91 · page called POST www.google-analytics.com/g/collect, POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/3708973600:1793614459:DlQ8oC_Cc3FELLajrZxTX3gWLFYl4mSmEViPabAj9gs/a542b546bd1615fd/Cp, GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a542b546bd1615fd/1793617988113/8a1e0c77d72
E44
Agent step 6: view
AI agent step 6 · view on /base/0xa0fc7bb0df38543cc3d04cc7d718a8503e292f91
E45
Agent step 7: go /bsc/0xc6fde0cce82ca86de8a8072548e1d78a497bda27
AI agent step 7 · go on /rs3z7/bsc/0xc6fde0cce82ca86de8a8072548e1d78a497bda27 · page called POST www.google-analytics.com/g/collect, GET www.serializedaudit.io/api/latest-audits, POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/3708973600:1793614459:DlQ8oC_Cc3FELLajrZxTX3gWLFYl4mSmEViPabAj9gs/a542b570b80c15fd/Co, GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/
E46
Agent step 8: click Vulnerable Code
AI agent step 8 · click on /rs3z7/bsc/0xc6fde0cce82ca86de8a8072548e1d78a497bda27 · page called POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/3708973600:1793614459:DlQ8oC_Cc3FELLajrZxTX3gWLFYl4mSmEViPabAj9gs/a542b58d2a6215fd/Co, POST www.google-analytics.com/g/collect, GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a542b58d2a6215fd/1793617999405/f155e1559b8
E47
Agent step 9: go /portal
AI agent step 9 · go on /portal · page called POST www.google-analytics.com/g/collect, POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/fo/3708973600:1793614459:DlQ8oC_Cc3FELLajrZxTX3gWLFYl4mSmEViPabAj9gs/a542b5b1d98715fd/Cs, GET brunhild.challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/a542b5b1d98715fd/CsdZ4JCPZortToQ79b

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 1 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id tP1kJgmE.