(a) Problem the project solves

PEPE solves no technical problem and makes no claim to. The project states one mission, to make memecoins great again, and describes itself as a community-based memecoin created to honor the Pepe the Frog meme with the goal of becoming the most memeable memecoin in existence, fueled purely by memetic power. PEPE was marketed with a no-tax design and with no pretense of deeper utility, and the project addresses the demand for a memecoin launched without a presale, without a team tax, and without a venture allocation rather than any protocol-level problem.

(Source: Etherscan PEPE Token, Cube Exchange PEPE Guide, Trust Wallet PEPE Guide)

(b) Operational priorities

The project's stated operational priorities are securing centralized exchange listings, funding bridges and liquidity pools, and running community and meme distribution. The 6.9 percent of supply held in the team multisig, tracked under the ENS name pepecexwallet.eth, exists for exactly those three uses. Supply reduction became a second priority after the August 2023 multisig theft, and the remaining team burned 6.9 trillion PEPE on 24 October 2023 and moved the remaining 10 trillion PEPE out of the compromised multisig into a new wallet. The Form S-1 registration statement filed with the SEC by Canary Capital in April 2026 states that approximately 25 percent of the original multisig assets remain and are used for administrative costs and promotional campaigns.

(Source: Trust Wallet PEPE Guide, BSCN Memecoin Deepdive, CoinDesk Token Burn, Crypto.news Burn Report, Canary PEPE ETF S-1)

(c) High-level project overview

PEPE is an ERC-20 token on Ethereum at contract address 0x6982508145454ce325ddbe47a25d4ec3d2311933 with 18 decimals. It launched on 14 April 2023 as a fair launch with no presale and no transaction tax. The team sent 93.1 percent of supply to a Uniswap V2 liquidity pool and burned the liquidity provider tokens, which makes that liquidity permanent, and held the remaining 6.9 percent in a team multisig for exchange listings, bridges, and liquidity. The token runs no protocol, no staking, no governance module, and no fee mechanism. PEPE trades on Binance, Coinbase, OKX, Gate, KuCoin, and WhiteBIT, and bridged representations circulate on BNB Smart Chain, Arbitrum One, and Avalanche. The token had 556,499 holders as of 9 June 2026.

(Source: Etherscan PEPE Token, Trust Wallet PEPE Guide, CoinGecko PEPE, Coinbase PEPE, Changelly PEPE Guide)

(d) Primary token functions

PEPE has one function, transfer of value between holders. The token confers no governance right, pays no staking reward, entitles the holder to no fee share, and grants no access to any product or service. It is not used to pay gas, because gas on Ethereum is paid in ether, and it is not collateral in any protocol operated by the project. Holders acquire PEPE for speculation and for use as a medium of exchange within the memecoin market.

(Source: Etherscan PEPE Token, Cube Exchange PEPE Guide, LearnCrypto PEPE Explainer)

(e) Control surface reliance

PEPE relies on no control surface at the token level. The contract has no mint function available to any party, no owner-controlled transfer tax, no pause role, no blacklist, and no upgrade proxy, and the supply is fixed at 420,689,899,653,542.539491331875576506 PEPE. Ownership of the contract is renounced and the Uniswap V2 liquidity provider tokens are burned, so no party can withdraw the primary liquidity. The one control surface that exists sits outside the contract, in the team multisig holding the 6.9 percent listing allocation, and that multisig is the surface that failed in August 2023 when its signing threshold was reduced from five of eight to two of eight and 16 trillion PEPE were removed.

(Source: Trust Wallet PEPE Guide, Etherscan PEPE Token, NFT Now Multisig Report, CoinDesk Transfers Report)

Labs / DevCo

Foundation

DAO / Onchain Governance

(a) IP ownership & control

PEPE has no DAO, so no DAO owns or controls any intellectual property. No entity holds an assignment of the PEPE contract code, and the contract is deployed and ownership-renounced on Ethereum, so the code operates without a controlling party. The Pepe the Frog character the project references is the creation of the cartoonist Matt Furie and is not owned by the project or by any tokenholder, and the project has published no license covering its use. No trademark filing, brand license, or repository assignment covering PEPE has been disclosed.

(Source: Etherscan PEPE Token, Trust Wallet PEPE Guide, IQ.wiki PEPE Entry)

(b) Contract/admin powers

PEPE has no DAO, so no DAO holds any contract or administrative power. No party holds a mint role, a pause role, a blacklist role, a fee-setting role, or an upgrade authority over the token, because the contract exposes none of them and ownership is renounced. The Uniswap V2 liquidity provider tokens covering 93.1 percent of supply are burned, so no party can remove that liquidity. The only administrative power in the system is signature authority over the team multisig holding the 6.9 percent listing allocation, which is exercised by anonymous signers with no holder oversight, and its signing threshold has already been changed once without holder consent.

(Source: Etherscan PEPE Token, Trust Wallet PEPE Guide, NFT Now Multisig Report)

(c) Locked-token rights (conditional)

N/A

(d) Value accrual & holder rights

PEPE holders hold no economic rights. The token pays no dividend, distributes no fee revenue, carries no redemption right, confers no claim against any entity, and grants no voting or veto power. No mechanism directs any revenue to holders, because the project operates no product that generates revenue. The only value change mechanism outside the market is discretionary supply reduction by the team, which burned 6.9 trillion PEPE on 24 October 2023, and holders cannot compel, schedule, or vote on any future burn. The supply is capped at 420,689,899,653,542.539491331875576506 PEPE with no issuance mechanism, so holders are protected against dilution.

(Source: Etherscan PEPE Token, CoinDesk Token Burn, Crypto.news Burn Report, LearnCrypto PEPE Explainer)

(e) Dissolution authority

PEPE has no DAO and no legal entity, so no dissolution mechanism exists and no party can wind the project up. The token contract cannot be paused, disabled, or destroyed by any party, and it will continue to operate on Ethereum whether or not the anonymous team remains active. No treasury wind-up procedure has been published for the assets held in the team multisig.

(Source: Etherscan PEPE Token, Trust Wallet PEPE Guide)

(a) Entity

PEPE does not operate a foundation entity. No foundation was involved in the launch of the token on 14 April 2023, and no foundation legal name, entity type, or jurisdiction of formation has ever been published. Because the entity does not exist, items (b) through (f) do not apply, and each is answered below to state that explicitly.

(Source: Trust Wallet PEPE Guide, Changelly PEPE Guide)

(b) IP ownership & control

No foundation exists, so no foundation owns or controls repositories, code, trademarks, or brand rights, and no foundation subsidiary entities exist.

(Source: Trust Wallet PEPE Guide)

(c) Powers over DAO, treasury, protocol-controlled resources, and token administration

No foundation exists, so no foundation holds powers over governance, a treasury, protocol-controlled resources, or token administration. PEPE has no DAO, and the token contract exposes no administrative role to any party because ownership is renounced.

(Source: Etherscan PEPE Token, Trust Wallet PEPE Guide)

(d) Powers over DevCo

No foundation exists and no DevCo exists, so no foundation can exert direct or indirect influence over a DevCo. The token was launched by an anonymous team organized under no legal entity.

(Source: Trust Wallet PEPE Guide, CoinChapter Rogue Developers)

(e) Contract/admin powers

No foundation exists, so no foundation holds pause, upgrade, mint, or executor authority, and no foundation signs on the team multisig holding the 6.9 percent listing allocation.

(Source: Etherscan PEPE Token, Trust Wallet PEPE Guide)

(f) Current economic arrangements and distribution policies

No foundation exists, so no mechanism directs protocol-controlled resources, treasury assets, fees, revenue, rewards, or token distributions to a foundation, its equityholders, or its contributors. No such mechanism has been adopted and none is pending.

(Source: Trust Wallet PEPE Guide, Etherscan PEPE Token)

(a) Entity

PEPE does not operate a primary development company. No labs entity, development company, or other legal entity was formed to build or issue PEPE, and none was involved in the token's launch on 14 April 2023. The project was created by an anonymous team that has never disclosed a legal name, a jurisdiction, or the identity of any member. Because no DevCo entity exists, items (b) through (f) do not apply, and each is answered below to state that explicitly.

(Source: Trust Wallet PEPE Guide, Changelly PEPE Guide, CoinChapter Rogue Developers)

(b) IP ownership & control

No DevCo exists, so no DevCo owns or controls repositories, code, trademarks, or brand rights, and no DevCo subsidiary entities exist. The contract is deployed with ownership renounced and is not controlled by any company.

(Source: Etherscan PEPE Token, Trust Wallet PEPE Guide)

(c) Powers over DAO, treasury, protocol-controlled resources, and token administration

No DevCo exists, so no DevCo holds formal powers over governance, a treasury, protocol-controlled resources, or token administration. PEPE has no DAO and no protocol-controlled resources. The anonymous team exercises practical control over the 6.9 percent listing allocation through the multisig it operates, and it does so without any corporate form, board, or accountability structure.

(Source: Trust Wallet PEPE Guide, NFT Now Multisig Report, Etherscan PEPE Token)

(d) Powers over Foundation

No DevCo exists and no foundation exists, so no DevCo can exert direct or indirect influence over a foundation's decision making.

(Source: Trust Wallet PEPE Guide, Changelly PEPE Guide)

(e) Contract/admin powers

No DevCo exists, so no DevCo holds pause, upgrade, mint, or executor authority. The token contract exposes none of those roles, ownership is renounced, and the Uniswap V2 liquidity provider tokens are burned. The anonymous team retains signature authority over the multisig holding the 6.9 percent listing allocation, and it changed that multisig's signing threshold from five of eight to two of eight in August 2023.

(Source: Etherscan PEPE Token, NFT Now Multisig Report, Trust Wallet PEPE Guide)

(f) Current economic arrangements and distribution policies

No DevCo exists, so no governance-approved, contractual, or programmatic mechanism directs protocol-controlled resources, treasury assets, fees, revenue, rewards, or token distributions to a DevCo or its equityholders. The token charges no transaction tax, so no revenue stream reaches the team from token transfers. The team's only economic position is the 6.9 percent launch allocation held in its multisig, of which 16 trillion PEPE were removed by three signers in August 2023 and 6.9 trillion PEPE were burned in October 2023.

(Source: Trust Wallet PEPE Guide, Cointelegraph Transfers Report, CoinDesk Token Burn)

(a) Planned but not yet executed airdrop

This sub-item does not apply. PEPE has no planned airdrop, so there is no forward-looking recipient wallet list to commit to publishing quarterly.

(Source: Trust Wallet PEPE Guide, MEXC PEPE Tokenomics)

(b) Executed airdrop

This sub-item does not apply. PEPE has never executed an airdrop, so no user segments, allocation methods, or per-address allocation source exist to disclose.

(Source: Trust Wallet PEPE Guide, Changelly PEPE Guide)

(c) No airdrop planned or conducted

PEPE has never conducted an airdrop and has no airdrop planned. The entire supply entered circulation through two transactions at launch on 14 April 2023, with 93.1 percent placed in a Uniswap V2 pool whose liquidity provider tokens were burned and 6.9 percent placed in a team multisig for exchange listings, bridges, and liquidity. No claim contract, no Merkle distributor, and no snapshot has ever been deployed for PEPE.

(Source: Trust Wallet PEPE Guide, BSCN Memecoin Deepdive, Etherscan PEPE Token)

No market-maker name is publicly disclosed. PEPE has never disclosed an agreement or a deal with any market maker. No token allocation or loaned amount to a market maker is publicly disclosed. The launch allocation had exactly two destinations, the Uniswap V2 pool at 93.1 percent and the team multisig at 6.9 percent, and no portion of either has been identified as committed to a market maker. No duration or term is publicly disclosed, because no market-maker agreement is publicly disclosed. No agreement structure is publicly disclosed. No loan, option, call, or retainer arrangement with a market maker has been identified.

(Source: Trust Wallet PEPE Guide, MEXC PEPE Tokenomics, BSCN Memecoin Deepdive)

PEPE trades on Binance, OKX, Gate, KuCoin, and WhiteBIT in PEPE against USDT pairs, on Coinbase against USD, and onchain through the Uniswap V2 PEPE pool on Ethereum that holds the burned-liquidity position, plus pools on BNB Smart Chain, Arbitrum One, and Avalanche. PEPE has not disclosed a listing agreement with any named venue, and no individual exchange has been identified as a counterparty to an agreement with the project. The project reserved 6.9 percent of total supply, roughly 29 trillion PEPE, in a team multisig tracked under the ENS name pepecexwallet.eth explicitly for centralized exchange listings, bridges, and liquidity pools. PEPE has not disclosed how much of that reserve went to any named exchange, what any individual venue received, or whether any venue received tokens at all. The reserve was reduced by the 16 trillion PEPE removed by three signers in August 2023 and by the 6.9 trillion PEPE burned in October 2023. The Canary PEPE ETF registration statement filed with the SEC states that approximately 25 percent of the original reserve remains and is used for administrative costs and promotional campaigns rather than committed to any disclosed listing agreement. No listing lockup term, liquidity program term, or incentive program term is publicly disclosed. The Uniswap V2 liquidity position representing 93.1 percent of supply is permanent rather than term-limited, because its liquidity provider tokens are burned. No listing fees paid in PEPE are publicly disclosed. No recipient, amount, percentage of supply, vesting term, or lock term tied to an exchange partnership has been published.

(Source: CoinGecko PEPE, Coinbase PEPE, Etherscan PEPE Token, Trust Wallet PEPE Guide, BSCN Memecoin Deepdive, Cointelegraph Transfers Report, CoinDesk Token Burn, Canary PEPE ETF S-1, MEXC PEPE Tokenomics, BSCN Memecoin Deepdive)

No prior token sale series exists. PEPE launched as a fair launch with no presale, no private round, no public sale, and no initial exchange offering, and the entire supply went to a Uniswap V2 pool and a team multisig at deployment on 14 April 2023. No OTC sale by the project and no discounted sale to any investor has been publicly disclosed. No early-stage investment instrument was used. No SAFT, STAMP, SAFE, SAFE with token warrant, or token purchase agreement covering PEPE has been publicly disclosed, and no legal entity existed to execute one. No sale occurred, so no sale date exists. The only distribution event was the launch deployment on 14 April 2023. Zero PEPE were sold by the project. The 16 trillion PEPE removed from the team multisig in August 2023 were sent to addresses associated with Binance, OKX, and Bybit and to one unverified wallet, and that was a theft by three former signers rather than a sale by the project. Reported destinations were 8.2 million dollars of PEPE to OKX, 6.5 million dollars to Binance, 434,000 dollars to Bybit, and 400,000 dollars to an unknown wallet. No vesting schedule exists, because no PEPE was sold to any purchaser. No allocation at launch carried a cliff, a linear vest, or a time lock.

(Source: Trust Wallet PEPE Guide, Changelly PEPE Guide, MEXC PEPE Tokenomics, Etherscan PEPE Token, Cointelegraph Transfers Report, CoinChapter Rogue Developers, CoinDesk Transfers Report)

(a) Date & component affected

The incident occurred on 24 August 2023 on Ethereum. The affected component was the PEPE team multisig wallet holding the 6.9 percent launch allocation, tracked under the ENS name pepecexwallet.eth. The PEPE token contract at 0x6982508145454ce325ddbe47a25d4ec3d2311933 was not affected, no code defect was involved, and the Uniswap V2 liquidity position holding 93.1 percent of supply was untouched because its liquidity provider tokens are burned.

(Source: NFT Now Multisig Report, CoinDesk Transfers Report, Etherscan PEPE Token)

(b) Exploit vector summary

The vector was insider abuse of multisig signing authority rather than a code exploit. The multisig had required five of eight designated signers to authorize a transaction, and the threshold was reduced to two of eight, which let a minority of signers act alone. Three of the project's own team members then moved 16 trillion PEPE out of the wallet to addresses associated with Binance, OKX, and Bybit and to one unverified address. A remaining team member posted the following day on the project's official account identifying the transfers as theft by three other team members. The Canary PEPE ETF registration statement filed with the SEC describes the incident as three now former team members transferring approximately 16 trillion tokens, 3.8 percent of total supply, to exchanges with the intent to sell, after which the remaining founder assumed control of the wallet.

(Source: NFT Now Multisig Report, Cointelegraph Transfers Report, CoinChapter Rogue Developers, Canary PEPE ETF S-1)

(c) Quantified impact

The three signers removed 16 trillion PEPE, approximately 3.8 percent of total supply, valued at roughly 15 to 16.9 million dollars at the time. Reported destinations were 8.2 million dollars of PEPE to OKX, 6.5 million dollars to Binance, 434,000 dollars to Bybit, and 400,000 dollars to an unknown wallet. PEPE fell between 12 and 16 percent on the news. No individual holder balance was taken and total supply was unchanged, because the loss fell entirely on the project's own reserve.

(Source: Cointelegraph Transfers Report, CoinDesk Transfers Report, Web3 Is Going Great Entry, Ethereum World News Report)

(d) Remediation/response taken

The remaining team removed the three signers from the project and took two concrete actions on 24 October 2023. They burned 6.9 trillion PEPE, worth approximately 5.5 million dollars at the time, permanently destroying that portion of the reserve. They announced that the remaining 10 trillion PEPE would be moved out of the compromised multisig into a new wallet where the tokens would rest until a use or a burn arises. PEPE rose approximately 31 percent following the burn. The project has not published the new wallet's signer set, its signing threshold, or any timelock, and it has not published an independent post-mortem or an audit of its key management.

(Source: CoinDesk Token Burn, NFT Now Burn Report, Crypto.news Burn Report)

(e) Current status

The incident is closed operationally and the stolen tokens were not recovered. The three former signers were removed from the project, the compromised multisig was emptied, and 6.9 trillion PEPE of the surviving reserve was burned. No compensation was paid to holders because holder balances were never touched, and the project has announced no litigation or law enforcement outcome against the three individuals, who have never been publicly named. The Canary PEPE ETF registration statement filed in April 2026 restates the incident as a historical event with approximately 25 percent of the original wallet assets remaining, which confirms no recovery of the stolen tokens through that date.

(Source: CoinDesk Token Burn, CoinChapter Rogue Developers, NFT Now Burn Report, Canary PEPE ETF S-1)

(f) References (optional)

Public reporting on the incident is available from CoinDesk, Cointelegraph, NFT Now, CoinChapter, Ethereum World News, and Web3 Is Going Great, a retrospective security analysis is published by Gate, and the incident is described in the Canary PEPE ETF Form S-1 registration statement filed with the SEC on 8 April 2026.

(Source: CoinDesk Transfers Report, Cointelegraph Transfers Report, NFT Now Multisig Report, CoinChapter Rogue Developers, Gate Security Analysis, Canary PEPE ETF S-1)

One incident has affected PEPE, the August 2023 theft from the project's team multisig by three of its own signers.

(Source: NFT Now Multisig Report, CoinDesk Transfers Report)

(a) Regulatory, Legal & Tax Risks

(a) Impact of Regulatory Change on TGE and Listings

PEPE's token generation event completed on 14 April 2023 with no sale and no purchaser, so no regulatory change can block a delivery obligation. Listing access is the live exposure. PEPE depends entirely on venues it does not control, and Binance, Coinbase, OKX, Gate, KuCoin, and WhiteBIT each decide independently whether to keep the pair open. A regulator that classifies memecoins as securities, that imposes issuer-disclosure duties on listed assets, or that requires an identifiable issuer for a listed token would leave PEPE unable to comply, because no entity exists to register, to file, or to answer. That is a concrete delisting risk rather than a theoretical one, since a venue facing an unidentifiable issuer resolves the ambiguity by removing the pair. The bridged PEPE representations on BNB Smart Chain, Arbitrum One, and Avalanche add a second surface, because a regulator can act against a bridge operator without touching the Ethereum contract. Regulated US market access is now in motion in one direction. On 8 April 2026 Canary Capital Group LLC filed a Form S-1 with the SEC for the Canary PEPE ETF, a Delaware statutory trust formed on 23 January 2026 that would hold PEPE directly with a small ether balance for network fees, and the application remains under SEC review with no decision timeline. The filing was made by a third-party sponsor without the participation of any PEPE entity, because none exists, and its outcome will shape institutional access to the token without the project holding any ability to influence the process.

(Source: CoinGecko PEPE, Trust Wallet PEPE Guide, Changelly PEPE Guide, Canary PEPE ETF S-1, The Defiant ETF Filing Report, CoinMarketCap ETF Filing Report)

(b) Entity-Level Regulatory Impact

PEPE has no foundation, no development company, and no DAO, so no entity can be licensed, fined, restructured, or compelled to disclose, and equally no entity can hold a license, maintain a compliance program, respond to a subpoena, or defend the token before a regulator. The exposure lands on individuals instead. The anonymous signers of the team multisig hold and move a reserve worth millions of dollars without any corporate form, and a regulator or a court that identifies them can pursue them personally for unregistered securities activity, for money transmission, or for the August 2023 removal of 16 trillion PEPE. Holders have no recourse against the project in any forum, because there is no counterparty to sue and no jurisdiction in which the project is organized. The token contract itself is immutable and ownership-renounced, so it continues to operate regardless of any enforcement action, which protects transferability while leaving holders with no remedy.

(Source: Trust Wallet PEPE Guide, Etherscan PEPE Token, CoinChapter Rogue Developers, Cointelegraph Transfers Report)

(c) Tokenholder Tax Treatment

Tax treatment of PEPE is unsettled and varies by jurisdiction. PEPE pays no staking reward, distributes no fee revenue, and conducted no airdrop, so holders face no income-recognition question at receipt and the analysis reduces to acquisition and disposal. Each purchase establishes basis and each sale, swap, or spend is a disposal that may trigger capital gains treatment. Bridging PEPE to its BNB Smart Chain, Arbitrum One, or Avalanche representation is a taxable exchange in some jurisdictions and a non-event in others. The October 2023 burn of 6.9 trillion PEPE created no taxable event for holders because no holder gave up tokens, though it changes basis arithmetic where pooled cost rules apply. Each tokenholder is responsible for understanding and meeting their own tax obligations, and no PEPE entity provides tax advice, issues tax forms, or reports on a holder's behalf, because no entity exists.

(Source: Etherscan PEPE Token, CoinDesk Token Burn, CoinGecko PEPE)

(d) Jurisdictional & User Access Restrictions

PEPE applies no jurisdictional restriction and no user-type restriction. The contract has no blacklist, no freeze function, no allowlist, and no transfer hook, ownership is renounced, and no party can prevent any address anywhere from holding or transferring PEPE. Restrictions arise only at the venues a user chooses. Binance, Coinbase, OKX, Gate, KuCoin, and WhiteBIT each apply their own onboarding, sanctions screening, and jurisdictional exclusion rules, and a user in an excluded jurisdiction can lose venue access without any change to the token. The risk this creates for users is dependence on intermediaries the project cannot influence. The risk in the other direction is that no party can exclude a sanctioned address from holding PEPE, and a regulator can treat that permanence as a compliance failure, which then pushes the compliance burden onto the exchanges and increases delisting pressure.

(Source: Etherscan PEPE Token, CoinGecko PEPE, Trust Wallet PEPE Guide)

(b) Protocol, Technology & Security Risks

(a) Bugs and Design Flaws

The PEPE token contract is a plain ERC-20 with no mint function, no transaction tax, no pause role, no blacklist, and no upgrade proxy, and ownership is renounced, which removes the categories of flaw that most often destroy a memecoin. The demonstrated flaw sits in the project's key management rather than in its code. The team multisig holding 6.9 percent of supply had its signing threshold reduced from five of eight to two of eight, which let three signers move 16 trillion PEPE on 24 August 2023, and the project has not published the signer set or the threshold of the replacement wallet, so the same class of failure remains possible against the surviving reserve. Two further risks are structural. Because the contract is immutable and ownership is renounced, any latent defect in it can never be patched by anyone. Because the 93.1 percent Uniswap V2 liquidity position has its liquidity provider tokens burned, a defect in that pool contract would strand liquidity that no party has authority to migrate. The bridged PEPE representations on BNB Smart Chain, Arbitrum One, and Avalanche each depend on a bridge outside the project's control, and a bridge key compromise would let an attacker mint unbacked PEPE on that chain without any defect on Ethereum.

(Source: Etherscan PEPE Token, NFT Now Multisig Report, Trust Wallet PEPE Guide, CoinGecko PEPE)

(b) Security Measures & Their Limitations

Three security measures are in place, and all three are properties of the launch rather than ongoing programs. The contract has no mint function, so supply can never be inflated. Ownership is renounced, so no privileged address can alter transfer behavior, impose a tax, or blacklist a holder. The Uniswap V2 liquidity provider tokens covering 93.1 percent of supply are burned, so the primary liquidity cannot be pulled. PEPE has not publicly disclosed a third-party audit, a formal verification effort, a bug bounty program, or a monitoring arrangement, and it operates no security team because it operates no legal entity. The limits of the existing measures are established by the August 2023 incident. Immutability protects the token and does nothing for assets held off-contract, and the entire 16 trillion PEPE loss occurred with every one of the three measures fully intact. Renounced ownership also removes any emergency response capability, so no party can freeze a compromised address, pause transfers, or recover stolen tokens. The absence of a bug bounty means a defect in the pool or in a bridge is likelier to be found by an attacker than reported by a researcher, and the absence of any entity means there is nobody to report a defect to.

(Source: Etherscan PEPE Token, Trust Wallet PEPE Guide, Cointelegraph Transfers Report, Gate Security Analysis)

(c) Token Economics, Unlocks & Incentive Risks

(a) Critical Economic Assumptions

PEPE rests on one assumption, that speculative demand for the Pepe meme persists. The token generates no revenue, pays no yield, and produces no cash flow, so its entire value depends on the willingness of the next holder to buy it. Nothing in the design creates demand independent of sentiment. There is no fee sink, no staking lock to reduce float, no product whose users must hold PEPE, and no burn mechanism funded by activity, so supply reduction happens only when a discretionary holder chooses to burn, as the team did once on 24 October 2023. A second assumption is that exchange liquidity persists. Roughly half of PEPE's reported trading volume concentrates on Binance and OKX, and losing either venue would materially reduce the market's depth without any change to the token. Holder concentration compounds that assumption. The Canary PEPE ETF registration statement discloses that the ten largest PEPE wallet addresses held approximately 41 percent of circulating supply as of January 2026, so a small number of holders can move the market with a single sale. A third assumption is that the burned Uniswap V2 liquidity position remains adequate, and because the liquidity provider tokens are destroyed, no party can add to, rebalance, or migrate that position if it becomes too thin for the market it serves. The offsetting strength is that supply is genuinely fixed at 420,689,899,653,542.539491331875576506 PEPE with no mint function, so holders bear no dilution risk from issuance.

(Source: Etherscan PEPE Token, CoinGecko PEPE, CoinDesk Token Burn, LearnCrypto PEPE Explainer, Canary PEPE ETF S-1)

(b) Governance Control over Monetary Policy & Rewards

No governance body controls PEPE's monetary policy, because no governance body exists and no monetary policy levers exist. The contract has no mint function, charges no transaction tax, and pays no rewards, so no party can inflate supply, redirect a fee stream, or reduce a yield. Ownership is renounced, which means the terms holders bought under cannot be changed by anyone, including by the original team. The residual discretion that does exist is unaccountable rather than governed. The anonymous signers of the team multisig decide alone what happens to the surviving launch reserve, and they can sell it into the market, use it for a listing, move it again, or burn it, with no holder vote, no timelock, no notice period, and no published policy. Holders have no mechanism to compel a burn, to block a sale, or to remove a signer. The August 2023 removal of 16 trillion PEPE and the October 2023 burn of 6.9 trillion PEPE were both decisions taken by signers, and both moved the market, which establishes that the reserve is a live risk to holders rather than a dormant one.

(Source: Etherscan PEPE Token, Trust Wallet PEPE Guide, NFT Now Multisig Report, CoinDesk Token Burn)