{"uid":"cap_QMEtsAMFf_AHCKO_aY6UW","slug":"base-onchain-tools-contract-audit-6b4ecb0c","name":"Base Onchain Tools – Contract Audit","description":"Eleven read-only endpoints answering questions about Base mainnet that are tedious to assemble from raw RPC: what an unverified contract is actually able to do, whether a token transfer will revert and for what reason, what an arbitrary token is worth, and whether an address is safe to pay. Priced $0.001-$0.04 per call in USDC over x402. No account, no API key, no signup, no minimum, no rate limit to negotiate — the payTo address in the 402 response is the whole integration. Failed calls are not billed. The payment middleware cancels settlement on any 4xx or 5xx, so a malformed parameter or an upstream outage costs nothing. Answers are read live from Base mainnet at request time, with failover across five independent RPC providers. A batch that comes back incomplete is treated as a failure rather than returned with the missing entries as zeros, because a confident wrong answer costs a caller more than an error does. Scope is deliberately narrow: Base mainnet only, reads only, no keys held, nothing stored between requests.","url":"https://base-onchain-tools.dolerite.workers.dev/v1/base/contract-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["address"],"properties":{"address":{"type":"string","description":"Contract address on Base mainnet"},"follow_proxy":{"type":"string","description":"Optional, default true. Set to false to audit the proxy's own bytecode instead of its implementation."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"proxy":{"is_proxy":true,"implementation_address":"0x2ce6311ddae708829bc0784c967b7d77d19fd779"},"verdict":"review","standards":{"erc20":true,"eip2612_permit":true,"eip3009_gasless":true},"admin_powers":["can mint or burn supply","can blacklist or freeze specific addresses, blocking their transfers","can pause the contract"],"identified_count":28,"unidentified_count":31,"x402_payable_gaslessly":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.04","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.04/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.04","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.04","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_74QPWgopd80Ie11FKpzzk","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.04","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a Base mainnet smart contract address to identify its standards, admin powers, proxy structure, and overall risk verdict","exampleAgentPrompt":"Can you audit the Base mainnet contract at 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 and tell me what standards it supports, whether it has dangerous admin powers, and what the overall risk verdict is?","exampleUseCases":[{"title":"Pre-investment DeFi contract review","prompt":"Before I interact with this DeFi protocol on Base, can you audit the contract at 0x2Ae3F1Ec7F1F5012CFEab0185bfc7aa3cf0DEc22 and tell me if the team can mint tokens, freeze wallets, or pause the contract?"},{"title":"Token safety check before swap","prompt":"I'm about to swap into a new token on Base — can you audit the contract at 0x4200000000000000000000000000000000000006 and tell me if it's a real ERC20, whether it's a proxy, and whether there are any scary admin powers I should know about?"},{"title":"Verifying gasless transfer support","prompt":"Does the contract at 0xd9aAEc86B65D86f6A7B5B1b0c42FFA531710b6CA on Base support EIP-2612 permit or ERC-3009 gasless transfers? I want to know before building a gasless UX on top of it."}],"resultDescription":"Returns a JSON object with: proxy status and implementation address (if applicable), a risk verdict string (e.g. 'review'), a map of supported token standards (ERC20, EIP-2612, ERC-3009), a list of human-readable admin power descriptions (e.g. 'can mint or burn supply'), counts of identified and unidentified contract functions, and whether the contract is payable gaslessly via x402.","failureModes":["Invalid or non-existent contract address returns a 4xx error (not billed)","Non-contract address (EOA wallet) may return an error or empty result","RPC failover exhausted across all five providers results in a 5xx (not billed)","Incomplete batch data treated as failure rather than partial result","Unverified contracts with heavily obfuscated bytecode may have high unidentified_count"],"whenToPreferThis":"Use this endpoint when you need a structured, human-readable security summary of a Base mainnet contract without parsing raw bytecode or ABI yourself. It is especially valuable when evaluating tokens before swapping, auditing DeFi protocols before depositing, or checking admin privileges before building integrations. Unlike a raw RPC call, it synthesizes proxy resolution, standard detection, and admin power classification into a single response. Prefer this over manual RPC queries when you need a quick verdict rather than raw contract data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T00:38:36.404Z","isFirstParty":false,"canonicalSlug":"base-onchain-tools-contract-audit-6b4ecb0c"}