Rug-risk verdict for a Base ERC20 address: 0-100 score, A-F grade, one-line summary, gr…
Rug-risk verdict for a Base ERC20 address: 0-100 score, A-F grade, one-line summary, graded checks (ERC20, honeypot selectors, liquidity, market) plus a separate ungraded adminPowers profile (proxy, owner, mint, blacklist, pause), each with raw evidence. No L…
by token-verdict.x402supply.com · discovered, not yet claimed by its owner · updated 2026-10-12
Mirrored from Coinbase's public x402 Bazaar. The description is the provider's own text and has not been reviewed here; the payment requirements are copied as published.
What it does
Rug-risk verdict for a Base ERC20 address: 0-100 score, A-F grade, one-line summary, graded checks (ERC20, honeypot selectors, liquidity, market) plus a separate ungraded adminPowers profile (proxy, owner, mint, blacklist, pause), each with raw evidence. No LLM.
Tags: bazaar
Call contract
- Method
- POST
- Input
- json
- Output
- json
- Last paid call
- 2026-10-12
{
"address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
}{
"address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
"adminPowers": {
"level": "high",
"note": "Informational centralization profile. Not counted in riskScore or grade. Regulated issuers and many legitimate tokens keep these powers.",
"powers": [
"upgradeable proxy",
"owner not renounced",
"mint",
"blacklist",
"pause"
]
},
"asOf": "2026-10-10T03:08:27.543Z",
"chainId": 8453,
"checks": [
{
"axis": "rugRisk",
"detail": "USD Coin (USDC), 6 decimals, supply 4405234499.055562.",
"evidence": {
"codeBytes": 1852,
"decimals": 6,
"issuer": "Circle",
"name": "USD Coin",
"symbol": "USDC",
"totalSupply": "4405234499055562",
"totalSupplyFormatted": "4405234499.055562"
},
"id": "erc20",
"name": "ERC20 contract",
"status": "pass"
},
{
"axis": "adminPowers",
"detail": "Upgradeable OpenZeppelin legacy (zos) proxy, implementation 0x2ce6311ddae708829bc0784c967b7d77d19fd779, admin 0x4fc7850364958d97b4d3f5a08f79db2493f8ca44. Logic can be swapped.",
"evidence": {
"admin": "0x4fc7850364958d97b4d3f5a08f79db2493f8ca44",
"adminSlotRead": true,
"implementation": "0x2ce6311ddae708829bc0784c967b7d77d19fd779",
"slotStandard": "OpenZeppelin legacy (zos)",
"upgradeable": true
},
"id": "proxy",
"name": "Proxy / upgradeable",
"status": "caution"
},
{
"axis": "adminPowers",
"detail": "Ownership not renounced, externally owned account (EOA) owner 0x3abd6f64a422225e61e435bae41db12096106df7.",
"evidence": {
"owner": "0x3abd6f64a422225e61e435bae41db12096106df7",
"ownerIsContract": false,
"renounced": false
},
"id": "owner",
"name": "Owner privileges",
"status": "caution"
},
{
"axis": "adminPowers",
"detail": "Selectors found for: mint, blacklist/blocklist, pause.",
"evidence": {
"groupsFound": [
"mint",
"blacklist",
"pause"
],
"matches": {
"blacklist": [
"blacklist(address)",
"isBlacklisted(address)"
],
"mint": [
"mint(address,uint256)"
],
"pause": [
"pause()",
"unpause()",
"paused()"
]
},
"note": "Selector presence shows a function exists in the code, not who can call it or that it is abused.",
"scanned": [
{
"address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
"bytes": 1852,
"label": "token"
},
{
"address": "0x2ce6311ddae708829bc0784c967b7d77d19fd779",
"bytes": 23464,
"label": "implementation"
}
]
},
"id": "bytecode",
"name": "Admin functions in bytecode",
"status": "caution"
},
{
"axis": "rugRisk",
"detail": "No fee/tax setter or max-tx/wallet limit selectors found.",
"evidence": {
"groupsFound": [],
"matches": {},
"note": "Selector presence shows a function exists in the code, not who can call it or that it is abused.",
"scanned": [
{
"address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
"bytes": 1852,
"label": "token"
},
{
"address": "0x2ce6311ddae708829bc0784c967b7d77d19fd779",
"bytes": 23464,
"label": "implementation"
}
]
},
"id": "honeypot",
"name": "Honeypot-style signals",
"status": "pass"
},
{
"axis": "rugRisk",
"detail": "$54,013,307 across 30 pair(s), top DEX aerodrome, oldest pair 1130.3 days old.",
"evidence": {
"oldestPairAgeDays": 1130.3,
"oldestPairCreatedAt": "2023-09-05T20:12:19.000Z",
"pairCount": 30,
"topDex": "aerodrome",
"topPairAddress": "0x6cDcb1C4A4D1C3C6d054b27AC5B77e89eAFb971d",
"topPairLiquidityUsd": 43851825.6,
"totalLiquidityUsd": 54013306.92
},
"id": "liquidity",
"name": "DEX liquidity",
"status": "pass"
},
{
"axis": "rugRisk",
"detail": "24h volume $193,436,586, 24h price change not reported.",
"evidence": {
"priceChange24hPct": null,
"priceChangeAvailable": false,
"priceSourcePair": "0x98c7A2338336d2d354663246F64676009c7bDa97",
"priceUsd": 0.9998,
"volume24hUsd": 193436586.41
},
"id": "market",
"name": "24h market",
"status": "pass"
}
],
"coverage": 1,
"grade": "A",
"issuer": {
"name": "Circle",
"symbol": "USDC",
"verifiedBy": "address listed in known-issuer table and on-chain symbol() matches"
},
"riskScore": 0,
"sources": [
"https://mainnet.base.org",
"https://api.dexscreener.com/latest/dex/tokens/0x833589fcd6edb6e08f4c7c32d4f71b54bda02913"
],
"summary": "USDC (0x8335...2913) on Base: rug-risk grade A, 0/100. No rug-risk flags raised. Admin powers (not graded): high, upgradeable proxy, owner not renounced, mint, blacklist, pause. Issuer: Circle."
}Use with an agent
- Discover. Agents find this listing with
GET https://bazaar.saylorinnovations.com/discovery/search?query=…, the MCP toolsearch_resources, or/discovery/resources. - Inspect. Fetch
/resources/53531.jsonfor the price and payment options. - Pay. Call
GET https://token-verdict.x402supply.com/tools/token_verdict. The provider answers402with its payment requirements. An x402 client signs one of the options below and retries withPAYMENT-SIGNATURE. - Execute. The provider returns
200with the data. Agent Bazaar is not in the request path and never sees your payment.
For humans
You don't need an account or an API key; you need a wallet holding a small amount of USDC on Base, and an x402-capable client (see the examples below). Call the endpoint unpaid first to see exactly what it asks for.
Pricing & payment
- Price
- $0.01 / request
- Protocol
- x402 v2
- Auth
- No account or API key. Pay per request.
- Networks
- Base
- Demand
- 1 calls · 1 unique payers in 30d (public x402 Bazaar data)
x402 payment requirements
| Scheme | Network | Asset | Amount | Pay to | Timeout |
|---|---|---|---|---|---|
| exact | Base eip155:8453 | USDC | $0.01 | 0x07fFB5044cF2Cd4352Be4655f578D0ba8cb754EB | 60s |
accepts[] (raw JSON)
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0x07fFB5044cF2Cd4352Be4655f578D0ba8cb754EB",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "10000",
"amountUsd": 0.01,
"maxTimeoutSeconds": 60
}
]Schemas
Output schema (JSON Schema)
{
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}Example shape — generated from the schema, not a captured live response
{
"example": {},
"type": "string"
}Examples
curl "https://token-verdict.x402supply.com/tools/token_verdict"
# -> 402 Payment Required, accepts[] lists how to pay
# retry with a PAYMENT-SIGNATURE (or PAYMENT header) once paidconst res = await fetch("https://token-verdict.x402supply.com/tools/token_verdict");
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}import httpx
res = httpx.get("https://token-verdict.x402supply.com/tools/token_verdict")
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerDetails
- Provider
- token-verdict.x402supply.com
- Endpoint
- https://token-verdict.x402supply.com/tools/token_verdict
- Machine-readable
/resources/53531.json