{
 "ok": true,
 "product": "contract-powers",
 "chain": "base",
 "chainId": 8453,
 "address": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
 "type": "contract",
 "explorer": "https://basescan.org/address/0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
 "verified": true,
 "name": "FiatTokenProxy",
 "compiler": "v0.6.12+commit.27d51765",
 "license": null,
 "sourceLookup": "etherscan-v2",
 "proxy": {
  "isProxy": true,
  "pattern": "zeppelinos.implementation",
  "implementation": "0x2ce6311ddae708829bc0784c967b7d77d19fd779",
  "implementationVerified": true,
  "evidence": [
   {
    "slot": "zeppelinos.implementation",
    "value": "0x2ce6311ddae708829bc0784c967b7d77d19fd779"
   }
  ],
  "implementationName": "FiatTokenV2_2"
 },
 "admin": {
  "owner": "0x3abd6f64a422225e61e435bae41db12096106df7",
  "source": "owner()",
  "ownerType": "eoa",
  "isContract": false,
  "note": "owner is a plain externally-owned account — a single private key controls it"
 },
 "powers": [
  {
   "power": "blacklist",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "blacklist(address)",
     "from": "implementation-abi"
    },
    {
     "sig": "unBlacklist(address)",
     "from": "implementation-abi"
    },
    {
     "selector": "0xf9f92be4",
     "sig": "blacklist(address)",
     "from": "implementation-bytecode"
    },
    {
     "selector": "0xfe575a87",
     "sig": "isBlacklisted(address)",
     "from": "implementation-bytecode"
    }
   ]
  },
  {
   "power": "mint",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "mint(address,uint256)",
     "from": "implementation-abi"
    },
    {
     "selector": "0x40c10f19",
     "sig": "mint(address,uint256)",
     "from": "implementation-bytecode"
    }
   ]
  },
  {
   "power": "ownership",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "transferOwnership(address)",
     "from": "implementation-abi"
    },
    {
     "selector": "0xf2fde38b",
     "sig": "transferOwnership(address)",
     "from": "implementation-bytecode"
    }
   ]
  },
  {
   "power": "pause",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "pause()",
     "from": "implementation-abi"
    },
    {
     "sig": "unpause()",
     "from": "implementation-abi"
    },
    {
     "selector": "0x8456cb59",
     "sig": "pause()",
     "from": "implementation-bytecode"
    },
    {
     "selector": "0x3f4ba83a",
     "sig": "unpause()",
     "from": "implementation-bytecode"
    }
   ]
  },
  {
   "power": "sweep",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "rescueERC20(address,address,uint256)",
     "from": "implementation-abi"
    },
    {
     "sig": "updateRescuer(address)",
     "from": "implementation-abi"
    }
   ]
  },
  {
   "power": "upgrade",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "changeAdmin(address)",
     "from": "abi"
    },
    {
     "sig": "upgradeTo(address)",
     "from": "abi"
    },
    {
     "sig": "upgradeToAndCall(address,bytes)",
     "from": "abi"
    },
    {
     "selector": "0x8f283970",
     "sig": "changeAdmin(address)",
     "from": "bytecode-selector"
    }
   ]
  }
 ],
 "bytecode": {
  "sizeBytes": 1852,
  "delegatecall": true,
  "selfdestruct": false,
  "create2": false,
  "knownSelectors": 6,
  "implementationSizeBytes": 23464
 },
 "bounty": {
  "covered": false,
  "match": "none",
  "corpus": {
   "immunefi": 186,
   "cantina": 52
  },
  "note": "Matched the contract name against a corpus of live bug-bounty programs (Immunefi + Cantina). A name match is NOT proof this address is in scope — open the program page and check the asset list.",
  "programs": []
 },
 "summary": "upgradeable proxy (zeppelinos.implementation); admin key is a plain EOA; retained powers: blacklist, mint, ownership, pause, sweep, upgrade",
 "notAnAudit": "Facts read from chain state, bytecode and (where verified) the ABI. This is not a security audit, not a safety score, and not investment advice. Absence of a flag is not proof of absence.",
 "caveats": [
  "confidence=\"declared\" means the ABI exposes the function. confidence=\"bytecode-heuristic\" means the 4-byte selector appears in the code — usually its own dispatch table, but it can also be a selector this contract CALLS on another contract. Only a verified ABI settles it.",
  "admin.ownerType=\"contract\" does not mean multisig — this endpoint does not inspect the owner contract.",
  "bounty.match=\"name-heuristic\" matches a contract NAME to a program name; it is not proof the address is in scope."
 ],
 "latencyMs": 1164,
 "builtAt": "2026-08-29T01:53:38.819Z",
 "canonical": "https://agent.zbang.net/c/base/0x833589fcd6edb6e08f4c7c32d4f71b54bda02913/",
 "label": "USDC (Base)"
}