Contaminated supply % is (sum of token balance held by flagged holders) ÷ (token total supply) × 100. We only look at the top 1,000 holders with balance ≥ 100 token units. So the number is a true share of total supply, but when there are very few holders in that set (e.g. 1–10), 100% just means "all of the holders we see are flagged"—not that the whole token is widely contaminated.

A holder is counted as contaminated if their Webacy risk score is ≥80 or their profile contains labels such as: sanction, OFAC, mixer, Tornado, drainer, phish, hack, exploit, scam, fraud. Contaminated supply % = share of token supply held by those addresses; contaminated address % = share of holder addresses flagged. Exchanges, custodians, bridges, and CEXs are excluded from the risk tags.