{"uid":"cap_0MbDuQyOtl9i1dQgZSaYD","slug":"halowerk-kettenwerk-upgrade-risk-analyzer-96bc79f4","name":"HALOWERK kettenwerk Upgrade Risk Analyzer","description":"Upgradeability alone is not a finding — every serious protocol is upgradeable. The finding is who holds the key and how much warning holders get. This endpoint reads the proxy pattern from the EIP-1967 slots, the clone bytecode or an implementation() call, resolves the admin, checks whether that admin is a multisig by asking it for its threshold and signer count, and checks whether it is a timelock by asking for getMinDelay() or delay() — a timelock with a delay of zero is not a timelock and is ","url":"https://kette.halowerk.com/contract/upgrade-risk?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"chain":{"enum":["ethereum","base","arbitrum","optimism","polygon","bsc"],"type":"string","description":"Chain the contract lives on."},"address":{"type":"string","pattern":"^0x[0-9a-fA-F]{40}$","description":"Contract or proxy address."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.006","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.006/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.006","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.006","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_HA1eieqcsRkntKgYgXC2C","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.006","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes proxy upgrade risk for a smart contract by detecting proxy patterns, resolving the admin, and checking whether the admin is a multisig or timelock with meaningful delay.","exampleAgentPrompt":"Check the upgrade risk for the contract at 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 on Ethereum — I want to know if the proxy admin is a real multisig or timelock, and how long holders would have before any upgrade goes live.","exampleUseCases":[{"title":"Audit DeFi protocol upgrade governance","prompt":"Before I put money into this yield protocol, can you check if the proxy at 0x7Fc66500c84A76Ad7e9c93437bFc5Ac33E2DDaE9 on Ethereum is controlled by a proper multisig or timelock — or if a single dev can just silently upgrade it?"},{"title":"Validate timelock delay before depositing","prompt":"I'm looking at a lending protocol on Arbitrum at 0xFF970A61A04b1cA14834A43f5dE4533eBDDB5CC6 — is the upgrade admin actually a timelock with a meaningful delay, or is the delay set to zero making it basically meaningless?"},{"title":"Compare governance risk across chains","prompt":"Can you assess the upgrade risk for the contract 0x4200000000000000000000000000000000000042 on Optimism? I need to know the proxy type, who the admin is, and whether it's a real multisig with multiple signers."}],"resultDescription":"Returns the detected proxy pattern (EIP-1967, clone, or implementation() call), the resolved admin address, whether the admin is a multisig (with threshold and signer count), whether the admin is a timelock (with delay in seconds), and an overall upgrade risk classification indicating how much control and warning token holders actually have.","failureModes":["Address is not a proxy contract — returns no proxy pattern detected","Contract address is not valid or does not exist on the specified chain","Chain is not in the supported enum — returns validation error","Admin address resolution fails due to RPC issues — returns partial result","Timelock or multisig interface not recognized if using non-standard implementations","Rate limiting or payment failure returns 402 or 429"],"whenToPreferThis":"Use this endpoint when you need to assess the governance and upgrade security of a specific smart contract proxy — particularly before investing in or integrating with a DeFi protocol. Prefer this over generic contract scanners when you specifically need to know whether the upgrade key is held by a meaningful multisig or a timelock with real delay, rather than just whether the contract is upgradeable at all.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T06:31:06.171Z","isFirstParty":false,"canonicalSlug":"halowerk-kettenwerk-upgrade-risk-analyzer-96bc79f4"}