Tools Token Verdict

{
  "address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
  "adminPowers": {
    "level": "high",
    "note": "Informational centralization profile. Not counted in riskScore or grade. Regulated issuers and many legitimate tokens keep these powers.",
    "powers": [
      "upgradeable proxy",
      "owner not renounced",
      "mint",
      "blacklist",
      "pause"
    ]
  },
  "asOf": "2026-10-10T03:08:27.543Z",
  "chainId": 8453,
  "checks": [
    {
      "axis": "rugRisk",
      "detail": "USD Coin (USDC), 6 decimals, supply 4405234499.055562.",
      "evidence": {
        "codeBytes": 1852,
        "decimals": 6,
        "issuer": "Circle",
        "name": "USD Coin",
        "symbol": "USDC",
        "totalSupply": "4405234499055562",
        "totalSupplyFormatted": "4405234499.055562"
      },
      "id": "erc20",
      "name": "ERC20 contract",
      "status": "pass"
    },
    {
      "axis": "adminPowers",
      "detail": "Upgradeable OpenZeppelin legacy (zos) proxy, implementation 0x2ce6311ddae708829bc0784c967b7d77d19fd779, admin 0x4fc7850364958d97b4d3f5a08f79db2493f8ca44. Logic can be swapped.",
      "evidence": {
        "admin": "0x4fc7850364958d97b4d3f5a08f79db2493f8ca44",
        "adminSlotRead": true,
        "implementation": "0x2ce6311ddae708829bc0784c967b7d77d19fd779",
        "slotStandard": "OpenZeppelin legacy (zos)",
        "upgradeable": true
      },
      "id": "proxy",
      "name": "Proxy / upgradeable",
      "status": "caution"
    },
    {
      "axis": "adminPowers",
      "detail": "Ownership not renounced, externally owned account (EOA) owner 0x3abd6f64a422225e61e435bae41db12096106df7.",
      "evidence": {
        "owner": "0x3abd6f64a422225e61e435bae41db12096106df7",
        "ownerIsContract": false,
        "renounced": false
      },
      "id": "owner",
      "name": "Owner privileges",
      "status": "caution"
    },
    {
      "axis": "adminPowers",
      "detail": "Selectors found for: mint, blacklist/blocklist, pause.",
      "evidence": {
        "groupsFound": [
          "mint",
          "blacklist",
          "pause"
        ],
        "matches": {
          "blacklist": [
            "blacklist(address)",
            "isBlacklisted(address)"
          ],
          "mint": [
            "mint(address,uint256)"
          ],
          "pause": [
            "pause()",
            "unpause()",
            "paused()"
          ]
        },
        "note": "Selector presence shows a function exists in the code, not who can call it or that it is abused.",
        "scanned": [
          {
            "address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
            "bytes": 1852,
            "label": "token"
          },
          {
            "address": "0x2ce6311ddae708829bc0784c967b7d77d19fd779",
            "bytes": 23464,
            "label": "implementation"
          }
        ]
      },
      "id": "bytecode",
      "name": "Admin functions in bytecode",
      "status": "caution"
    },
    {
      "axis": "rugRisk",
      "detail": "No fee/tax setter or max-tx/wallet limit selectors found.",
      "evidence": {
        "groupsFound": [],
        "matches": {},
        "note": "Selector presence shows a function exists in the code, not who can call it or that it is abused.",
        "scanned": [
          {
            "address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
            "bytes": 1852,
            "label": "token"
          },
          {
            "address": "0x2ce6311ddae708829bc0784c967b7d77d19fd779",
            "bytes": 23464,
            "label": "implementation"
          }
        ]
      },
      "id": "honeypot",
      "name": "Honeypot-style signals",
      "status": "pass"
    },
    {
      "axis": "rugRisk",
      "detail": "$54,013,307 across 30 pair(s), top DEX aerodrome, oldest pair 1130.3 days old.",
      "evidence": {
        "oldestPairAgeDays": 1130.3,
        "oldestPairCreatedAt": "2023-09-05T20:12:19.000Z",
        "pairCount": 30,
        "topDex": "aerodrome",
        "topPairAddress": "0x6cDcb1C4A4D1C3C6d054b27AC5B77e89eAFb971d",
        "topPairLiquidityUsd": 43851825.6,
        "totalLiquidityUsd": 54013306.92
      },
      "id": "liquidity",
      "name": "DEX liquidity",
      "status": "pass"
    },
    {
      "axis": "rugRisk",
      "detail": "24h volume $193,436,586, 24h price change not reported.",
      "evidence": {
        "priceChange24hPct": null,
        "priceChangeAvailable": false,
        "priceSourcePair": "0x98c7A2338336d2d354663246F64676009c7bDa97",
        "priceUsd": 0.9998,
        "volume24hUsd": 193436586.41
      },
      "id": "market",
      "name": "24h market",
      "status": "pass"
    }
  ],
  "coverage": 1,
  "grade": "A",
  "issuer": {
    "name": "Circle",
    "symbol": "USDC",
    "verifiedBy": "address listed in known-issuer table and on-chain symbol() matches"
  },
  "riskScore": 0,
  "sources": [
    "https://mainnet.base.org",
    "https://api.dexscreener.com/latest/dex/tokens/0x833589fcd6edb6e08f4c7c32d4f71b54bda02913"
  ],
  "summary": "USDC (0x8335...2913) on Base: rug-risk grade A, 0/100. No rug-risk flags raised. Admin powers (not graded): high, upgradeable proxy, owner not renounced, mint, blacklist, pause. Issuer: Circle."
}

# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i -X POST 'https://token-verdict.x402supply.com/tools/token_verdict' \
  -H 'content-type: application/json' \
  --data-raw '{"address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"}'

# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - -X POST 'https://token-verdict.x402supply.com/tools/token_verdict' \
  -H 'content-type: application/json' \
  --data-raw '{"address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"}' \
  | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decode

// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

// Pays at most $0.01 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.01" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.01 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Ftoken-verdict.x402supply.com%2Ftools%2Ftoken_verdict&method=POST
const res = await pay("https://token-verdict.x402supply.com/tools/token_verdict", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
    "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
  }),
});
console.log(res.status, await res.text());

# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Pays at most $0.01 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.01"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))

with x402_requests(client) as session:
    res = session.post(
        "https://token-verdict.x402supply.com/tools/token_verdict",
        json={
            "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        },
    )
    print(res.status_code, res.text)