ContractLens

Free checks before you buy a token: who controls it, can they mint, blacklist you or raise the sell tax, and is there real liquidity? No sign-up, no wallet.

Token risk check (about 2 seconds)

Owner type (renounced, single key, Safe, timelock), upgradeable proxy, admin functions found in the bytecode, source verification, DEX liquidity and pair age. Static checks only: no buy/sell simulation. Free, up to 30 checks a day.

x402 sellers: can buyers actually pay your endpoint? (free checker and monitor) · See it run over the 250 largest Base tokens: Who holds the keys to Base's top tokens.

Deep contract scan (Slither, 5-60 s)

Works for any contract with verified source on Sourcify. Proxies are followed to the implementation. You get every finding and every admin function. Free, up to 10 scans a day.

Key-change alerts (not built yet)

Most of the risk in a token is a key someone can turn later. Alerts would email you when a token you hold upgrades its implementation, changes owner or proxy admin (for example from a Safe to a single key), lowers its Safe threshold or blacklists an address.

This is not built. If you want it, leave your email and we will write to you once if it ships.

What it checks

Who holds the keys now: current owner() and proxy admin, and whether each is renounced, a single-key EOA, or a Safe multisig (with its threshold).
Admin powers: every state-changing function gated by owner/role/admin modifiers or msg.sender checks (mint, pause, blacklist, setFee, upgradeTo...).
Upgradeability: proxy type and current implementation (from Sourcify).
Static analysis: about 90 Slither detectors (reentrancy, arbitrary ETH sends, unchecked transfers, uninitialized storage, dangerous delegatecall, shadowing...), ranked by impact.

For AI agents: x402 API, priced per call

The same checks are an HTTP API for AI agents, paid per call in USDC on Base or Arbitrum over x402. No API key, no signup. Bad input and unverified contracts are rejected before payment.

GET {API}/token?chainId=8453&address=0x... token risk verdict, $0.005
GET {API}/scan?chainId=8453&address=0x... full contract scan, $0.01
GET {API}/address $0.002 · /gas $0.001 · /payability $0.01 · /audit $0.25 · /monitor $0.99

Docs: llms.txt · openapi.json · sample output. Free remote MCP server for agents: {API}/mcp (tool check_token, 50 a day).

Automated static analysis, not a manual audit. Expect false positives and treat findings as leads to review. Not financial advice. Contact: contractlens@appin60.com