High risk
Risk Index
60/ 100
This dApp appears to be related to token airdrops and smart wallet account management, including an upgradeable token contract.
The report is marked as High risk with a risk index of 60 due to several red flags: one contract is unverified, preventing full code review; the token proxy contract has owner-controlled functions allowing a single wallet to replace the contract code, indicating centralized control; and some checks like honeypot simulation, buy/sell tax, and ownership verification could not be performed. The scope covers all six contracts in the payload.
AIAI explanation, may be wrong
Red flags 3
Sorted by weight
-
+25
Contract code is not verified
The source code of unnamed contract (0xf852…67Ad) is not published on the explorer: nobody can check what the contract does.
-
+20
Owner-controlled functions in the code
The code has functions that let the owner change the rules: minting new tokens (FLX (0xe343…491D)), pausing (FLX (0xe343…491D)). They are not harmful by themselves, but dangerous in the hands of a single wallet.
-
+15
A single wallet can replace the contract code
The code of FLX (0xe343…491D) can be replaced at any time, and one wallet decides that, 0x3Af3e85f4f97De7AD0f000B724Fb77fE5ffc024B, not a multisig or a timelock.
Checklist
- Code verifiedNo
- Owner is a multisig or timelockNo
- Withdrawals not controlled by one walletUnknown
- Deployer is not a fresh walletYes
- Deployer has no abandoned projectsUnknown
- Contracts older than 7 daysYes
- Not a honeypotUnknown
Contracts 6 of 8
The contracts the site uses most
| Name | Role | Chain | Address | Verified | Owner | Age |
|---|---|---|---|---|---|---|
|
ClankerAirdropV2
This contract manages token airdrops, allowing users to claim tokens within certain time intervals and enabling admin functions to update airdrop parameters and Merkle roots. AI |
— | Arbitrum | 0x8Cb6…7014 | Yes | Unknown | 12mo |
|
ClankerAirdrop
This contract likely handles basic airdrop functionalities such as tracking available claim amounts and processing claims, serving as a simpler version of the airdrop mechanism. AI |
— | Arbitrum | 0x3034…7B71 | Yes | Unknown | 14mo |
|
Unnamed contract
This contract's purpose is unclear due to lack of verification and absence of function or event information; its role is guessed from limited data. AI |
— | Arbitrum | 0xf852…67Ad | No | Unknown | 21mo |
|
CoinbaseSmartWalletFactory
This contract creates and manages smart wallet accounts, emitting events when new accounts are created and providing utility functions to get account addresses. AI |
Factory | Arbitrum | 0xBA5E…5842 | Yes | Unknown | 15mo |
|
SemiModularAccount7702
This contract appears to be a modular smart account implementation supporting execution of user operations, signature validation, and upgradeability features. AI |
— | Arbitrum | 0x7702…0000 | Yes | Unknown | 57d |
|
FLX via proxy
This proxy contract manages an upgradeable token with administrative roles controlling minting, pausing, and supply adjustments, featuring complex authorization and role management. AI |
Token | Arbitrum | 0xe343…491D | Yes | Wallet | 17mo |
The site references 2 more contracts of its own. Aegis checks the 6 it uses most; the rest were not checked and do not count in the Risk Index.
Not checked
These never count as passed
-
Honeypot simulation
The check could not run · 6 contracts
-
Buy / sell tax
The check could not run · 6 contracts
-
Who owns the contract
The check could not run · 5 contracts
What Aegis knows about this team
-
0xD466…1Bd3 Deployer on Arbitrum
- Wallet age
- 14mo
- First funded by
- Relay solver
- Contracts created before
- 14
- Deployed here
- ClankerAirdropV2, ClankerAirdrop
- Its contracts in Aegis data
- 15
-
0xBE0A…fEe8 Deployer on Arbitrum
- Wallet age
- 21mo
- First funded by
- Across
- Contracts created before
- 0
- Deployed here
- Unnamed contract, CoinbaseSmartWalletFactory
- Its contracts in Aegis data
- 2
- Also behind
- treasure.lol (No red flags found)
-
0xDdF3…7A5C Deployer on Arbitrum
- Wallet age
- 3y
- First funded by
- 0x7060…6ae5
- Contracts created before
- 0
- Deployed here
- SemiModularAccount7702
- Its contracts in Aegis data
- 1
-
0x4b39…6aE5 Deployer on Arbitrum
- Wallet age
- 17mo
- First funded by
- 0x9195…dEbe
- Contracts created before
- 4
- Deployed here
- FLX
- Its contracts in Aegis data
- 5
Other sites that use the same contracts: treasure.lol (No red flags found). The same team, or one site copying the other: make sure you opened the address you meant to.
Links on the site
This report describes on-chain facts and risk signals found by automated checks. Not financial advice: do your own research before you sign anything.