ContractLens

Before you approve, deposit or buy: who can mint, pause, blacklist or upgrade this contract, and what does static analysis flag?

For token teams: a public report your holders can check

Holders, listing sites and scanners ask the same thing: who can mint, pause or upgrade this token? A ContractLens report answers it in public. It covers who holds the keys (EOA, Safe, renounced), every admin function with what it can do, the static-analysis findings triaged by a reviewer (false positives called out), and concrete hardening steps. You get a permanent link to share.

$49, paid in USDC or USDT on Arbitrum or Base, after delivery. Turnaround is under 24 hours. Email megafi.app1+contractlens@gmail.com with the chain and contract address. Example: DEGEN on Base.

For AI agents: one paid HTTP call

The full report (every finding with file and line, every privileged function) is an x402 endpoint: $0.01 USDC per call on Base or Arbitrum. No API key, no signup. Your agent pays and gets JSON back.

GET {API}/scan?chainId=8453&address=0x...

With AgentCash: npx agentcash fetch "{API}/scan?chainId=8453&address=0x...". Or any x402 client (@x402/fetch, x402-axios, Python x402). OpenAPI spec: /openapi.json. Free sample: /sample.

Bad input and unverified contracts are rejected before payment. A failed scan is never settled.

What it checks

• Who holds the keys now: current owner() and proxy admin, and whether each is renounced, a single-key EOA, or a Safe multisig (with its threshold).
• Admin powers: every state-changing function gated by owner/role/admin modifiers or msg.sender checks (mint, pause, blacklist, setFee, upgradeTo...).
• Upgradeability: proxy type and current implementation (from Sourcify).
• Static analysis: about 90 Slither detectors (reentrancy, arbitrary ETH sends, unchecked transfers, uninitialized storage, dangerous delegatecall, shadowing...), ranked by impact.

Automated static analysis, not a manual audit. Expect false positives and treat findings as leads to review. Source: github.com/swarm-t3/contractlens. Contact: megafi.app1+contractlens@gmail.com