{
 "ok": true,
 "product": "contract-powers",
 "chain": "ethereum",
 "chainId": 1,
 "address": "0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",
 "type": "contract",
 "explorer": "https://etherscan.io/address/0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48",
 "verified": true,
 "name": "FiatTokenProxy",
 "compiler": "v0.4.24+commit.e67f0147",
 "license": null,
 "sourceLookup": "etherscan-v2",
 "proxy": {
  "isProxy": true,
  "pattern": "zeppelinos.implementation",
  "implementation": "0x43506849d7c04f9138d1a2050bbf3a0c054402dd",
  "implementationVerified": true,
  "evidence": [
   {
    "slot": "zeppelinos.implementation",
    "value": "0x43506849d7c04f9138d1a2050bbf3a0c054402dd"
   }
  ],
  "implementationName": "FiatTokenV2_2"
 },
 "admin": {
  "owner": "0xfcb19e6a322b27c06842a71e8c725399f049ae3a",
  "source": "owner()",
  "ownerType": "eoa",
  "isContract": false,
  "note": "owner is a plain externally-owned account — a single private key controls it"
 },
 "powers": [
  {
   "power": "blacklist",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "blacklist(address)",
     "from": "implementation-abi"
    },
    {
     "sig": "unBlacklist(address)",
     "from": "implementation-abi"
    },
    {
     "selector": "0xf9f92be4",
     "sig": "blacklist(address)",
     "from": "implementation-bytecode"
    },
    {
     "selector": "0xfe575a87",
     "sig": "isBlacklisted(address)",
     "from": "implementation-bytecode"
    }
   ]
  },
  {
   "power": "mint",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "mint(address,uint256)",
     "from": "implementation-abi"
    },
    {
     "selector": "0x40c10f19",
     "sig": "mint(address,uint256)",
     "from": "implementation-bytecode"
    }
   ]
  },
  {
   "power": "ownership",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "transferOwnership(address)",
     "from": "implementation-abi"
    },
    {
     "selector": "0xf2fde38b",
     "sig": "transferOwnership(address)",
     "from": "implementation-bytecode"
    }
   ]
  },
  {
   "power": "pause",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "pause()",
     "from": "implementation-abi"
    },
    {
     "sig": "unpause()",
     "from": "implementation-abi"
    },
    {
     "selector": "0x8456cb59",
     "sig": "pause()",
     "from": "implementation-bytecode"
    },
    {
     "selector": "0x3f4ba83a",
     "sig": "unpause()",
     "from": "implementation-bytecode"
    }
   ]
  },
  {
   "power": "sweep",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "rescueERC20(address,address,uint256)",
     "from": "implementation-abi"
    },
    {
     "sig": "updateRescuer(address)",
     "from": "implementation-abi"
    }
   ]
  },
  {
   "power": "upgrade",
   "confidence": "declared",
   "evidence": [
    {
     "sig": "upgradeTo(address)",
     "from": "abi"
    },
    {
     "sig": "upgradeToAndCall(address,bytes)",
     "from": "abi"
    },
    {
     "sig": "changeAdmin(address)",
     "from": "abi"
    },
    {
     "selector": "0x3659cfe6",
     "sig": "upgradeTo(address)",
     "from": "bytecode-selector"
    }
   ]
  }
 ],
 "bytecode": {
  "sizeBytes": 2186,
  "delegatecall": true,
  "selfdestruct": false,
  "create2": false,
  "knownSelectors": 6,
  "implementationSizeBytes": 23464
 },
 "bounty": {
  "covered": false,
  "match": "none",
  "corpus": {
   "immunefi": 186,
   "cantina": 52
  },
  "note": "Matched the contract name against a corpus of live bug-bounty programs (Immunefi + Cantina). A name match is NOT proof this address is in scope — open the program page and check the asset list.",
  "programs": []
 },
 "summary": "upgradeable proxy (zeppelinos.implementation); admin key is a plain EOA; retained powers: blacklist, mint, ownership, pause, sweep, upgrade",
 "notAnAudit": "Facts read from chain state, bytecode and (where verified) the ABI. This is not a security audit, not a safety score, and not investment advice. Absence of a flag is not proof of absence.",
 "caveats": [
  "confidence=\"declared\" means the ABI exposes the function. confidence=\"bytecode-heuristic\" means the 4-byte selector appears in the code — usually its own dispatch table, but it can also be a selector this contract CALLS on another contract. Only a verified ABI settles it.",
  "admin.ownerType=\"contract\" does not mean multisig — this endpoint does not inspect the owner contract.",
  "bounty.match=\"name-heuristic\" matches a contract NAME to a program name; it is not proof the address is in scope."
 ],
 "latencyMs": 776,
 "builtAt": "2026-08-29T01:53:47.563Z",
 "canonical": "https://agent.zbang.net/c/ethereum/0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48/",
 "label": "USDC"
}