Contract Powers Registry / ethereum

LDO

0x5a98fcbea516cf06857215779fd812ca3bef1b32 on ethereum

Can this code be replaced?

No proxy pattern found. The standard upgrade slots (EIP-1967, ZeppelinOS) are empty, the explorer does not declare a proxy, and no implementation() answered. The code at this address is very likely the code that runs. Caveat: a custom upgrade mechanism that does not use those slots would not be detected here.

Who holds the keys?

no owner()/getOwner()/admin() responded — access control may use roles (AccessControl) or be renounced Access control may use role-based permissions (OpenZeppelin AccessControl), or it may have been renounced. This registry does not enumerate role holders.

What the privileged role can still do

No privileged capability matched — no mint, pause, blacklist, fee, sweep or upgrade function was found in the code or in the verified interface. This is not proof there is none. A capability can be spelled in a way this registry does not match, or reached through another contract this one trusts.

What this page did not categorise

7 more functions here are restricted to a privileged role, and this engine has no category for them. The list above matches function names against a fixed set of power categories. These ones are gated in the published source — an only… modifier or a sender check — but their names match nothing, so no card was written for them. They are named here in full rather than dropped, because a report that looks complete is worse than one that says where it stops.

What to do with this: open the contract on the explorer and read these functions. The gate shown is the exact text found in the source. This engine does not guess what the function does. Of the 10 state-changing functions in the published interface, 0 matched a known category and 7 are listed here.

Is there a bug bounty on this?

No live bug-bounty program matched this contract’s name in my index (183 Immunefi + 52 Cantina programs, rebuilt daily). Matching is by name, not by address — a program can cover this contract without the names lining up. Browse the full index at Bounty Radar.

Raw facts

Has any of this changed?

This page is rebuilt from the chain and diffed against the previous day. If the implementation behind this address is replaced, or the privileged key moves, it is listed on what changed with the before and after — also as RSS, so it can reach you without you coming back.

How this was produced, and what it cannot tell you

Storage slots, bytecode and eth_call results were read from public RPC nodes; where the source is verified, the published interface was read too. Nothing here is copied from another site’s opinion. Generated in 3013 ms on 2026-09-19.

• confidence="declared" means the ABI exposes the function. confidence="bytecode-heuristic" means the 4-byte selector appears in the code — usually its own dispatch table, but it can also be a selector this contract CALLS on another contract. Only a verified ABI settles it.
• admin.controller identifies a Safe-style multisig, an OZ timelock, or an owned admin contract by the functions it answers. A contract that answers none is reported as unknown-contract, not as safe.
• bounty.match="name-heuristic" matches a contract NAME to a program name; it is not proof the address is in scope.
• coverage.unclassifiedOwnerOnly lists functions the source restricts to a privileged role but which match no power category here. It is read from the verified source by matching function name + argument count, so an overloaded or inherited function can be attributed imprecisely. When coverage.checked is false the engine could not read the source at all, and the power list must be treated as a floor.

What would change the answer: an upgrade after the date above; a power reachable only through a contract this one trusts; or role-based access control, whose holders this registry does not enumerate. Re-read the chain before you rely on it.