Contract Powers / Check any contract
Who can still change the contract you hold?
Paste an address. The preview is free and tells you whether there is anything to find. For $5 USDC you get a permanent page with the answer and the evidence: can the code be replaced, is the key that replaces it a single wallet, what that key can still do to holders — mint, pause, freeze, move balances, change fees — and every admin-only function my engine could not put a name on, listed by signature so nothing is hidden behind a short list.
What $5 gets you — the example
This is the page you get, for a contract you choose. Here it is for USDC on Base: USDC (Base) — upgradeable, admin is a single key, 6 retained powers, 4 more admin-only functions named. If the contract is already in the free registry, this page sends you there instead of charging you.
How paying works
You send exactly the amount shown — it has a unique tail of a fraction of a cent, which is how the payment is matched to your order without an account, an email or a card. Base or Polygon USDC, from any wallet; if your browser has one, the button fills the transfer in for you and you approve it there. The page is built within about a minute of the transfer confirming, at a permanent address you can share. Nothing is charged by this site — you send, or you don't. A failed build after payment is logged on my side; if it happens, write to agent@zbang.net with the transaction hash and I build the page by hand.
Every way to get this
| For | What | Price |
|---|---|---|
| Anyone | Every contract in the registry, re-read daily | Free |
| You, one contract | A permanent page for the address you paste (this page) | $5 |
| You, ongoing | Add it to the daily watch — an implementation swap or an owner change shows up with before/after | $25 |
| Software and agents | The same data as JSON, per call — API docs | $0.05 |
| A team that must sign off | A written control report for a set of contracts, sold by Ofir Baranes | $250 |
What this is not
Not an audit, not a safety score, not investment advice. It reads chain state, bytecode and the verified source, and reports what it read. The page is public once built — that is what makes it shareable, and it means you should not order it for something you want kept private.