Evidence investigation
ETHEREUM · EVM
This is public archived evidence, not a customer-paid report or a live security assessment. No calibrated score is issued.
Report context and scope
Executive summary
An archived Ethereum USD₮ investigation shows read-only code and supply observations alongside actual buy, transfer and sell execution in an isolated fork. Call trees and state differences are inspectable. Authority, source, holder, lock and calibration gaps prevent a complete risk assessment.
de0331df9ecee5fabb01fcebdebce19d74eda2d71f976c11e5d6470f088442e9Full report appendix · raw proofs, snapshots and methodology
Archived report snapshot & identity
- Target
0xdac17f958d2ee523a2206206994597c13d831ec7- Snapshot state
- 26238982
- Block hash
0x001a3cf139ae32a258094b3f34c0b3e6dab92b6bfad2f17579b3524a6646e9a3- Finality
- FINALIZED
- Generated UTC
- 2026-10-21T06:05:23.888Z
Change between archived captures
Actual archived public captures, not a customer Free to Deep run. Additional evidence is distinct from a change in the asset.
Core source observations only. Separate Deep execution, liquidity and control evidence appears in the investigation views. Equal sampled values do not establish continuous unchanged state.
onchain.totalSupplyRaw
88302623529979278PublicNode / Ethereum RPC2026-10-20T07:59:21.992ZField pinned to block 26232381Before field block hash
0x09c1ad25577b10d0daf5c4a9914deb806a5698fee1452ecea59142799350703288301265725970534PublicNode / Ethereum RPC2026-10-23T17:10:52.663ZField pinned to block 26256653After field block hash
0x4d0d9eba440ae23d1f4233e1c3632d1387fb3479a5b35fcfea62b451c0aac374Recorded delta · exact base units -1357804008744
Recorded observations do not establish the exact change transaction, continuous intermediate state or malicious intent.
Source & code verification
Exact root runtime reference matches · not an audit
Recorded provider response and bytecode binding
Expand this record to load its supplied JSON.
Source coverage along execution
Runtime code hashes are bound to the recorded execution state. Source matching is separate from a security audit; unreached code paths and custom authorities remain outside this view.
0x7a250d5630b4cf539739df2c5dacb4c659f2488d · OBSERVED_EXECUTION_ADDRESS · UNAVAILABLE
Expand this record to load its supplied JSON.
0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2 · OBSERVED_EXECUTION_ADDRESS · UNAVAILABLE
Expand this record to load its supplied JSON.
0xdac17f958d2ee523a2206206994597c13d831ec7 · ROOT · VERIFIED_RUNTIME
Expand this record to load its supplied JSON.
0x0d4a11d5eeaac28ec3f61d100daf4d40471f1852 · OBSERVED_EXECUTION_ADDRESS · UNAVAILABLE
Expand this record to load its supplied JSON.
0x00000000000000000000000000000000000c0ffe · OBSERVED_EXECUTION_ADDRESS · NOT_APPLICABLE
Expand this record to load its supplied JSON.
0x68b3465833fb72a70ecdf485e0e4c7bd8665fc45 · OBSERVED_EXECUTION_ADDRESS · UNAVAILABLE
Expand this record to load its supplied JSON.
0x4e68ccd3e89f51c3074ca5072bbac773960dfa36 · OBSERVED_EXECUTION_ADDRESS · UNAVAILABLE
Expand this record to load its supplied JSON.
Header-bound account & storage
The account leaf, runtime code hash and selected raw storage values match locally checked Ethereum trie proofs under the recorded header hash. Canonical history and finality still rely on the configured RPC. This adds no independent provider family or score increase.
Archived public proof at its own recorded block. This observation can differ from the report’s other snapshots.
- Proof block
- 26255313
- Block hash
0x89146a7ef6f2e7e97a5bc7f4b4df6fc1cb8f2987b1c76dcdf6686c207f166731- State root
0xae8dd5b6a63b6b500372398d0fd7e4d3e5b7436d7d079e7b7bb321fced90ef6c- Account
0xdac17f958d2ee523a2206206994597c13d831ec7- Runtime hash
0xb44fb4e949d0f78f87f79ee46428f23a2a5713ce6fc6e0beb3dda78c2ac1ea55- Native ETH balance (wei)
- 42
- Account nonce
- 1
- RPC family
- publicnode
- Observed UTC
- 2026-10-23T12:39:02.809Z
Selected raw storage
0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbcAbsent (raw zero)00xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103Absent (raw zero)00xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50Absent (raw zero)00x0000000000000000000000000000000000000000000000000000000000000000Present1134972014892877928712953364190483482895670224936Raw slot values do not establish storage layout, owner identity, active proxy behavior or absence of other administrative controls. The ETH account balance is separate from token supply and holder balances.
Inspect account/storage bindings and limits
Expand this record to load its supplied JSON.
Recorded contract creation
The signed transaction, recovered sender, computed CREATE address and successful receipt agree with the RPC canonical block list. This identifies the sender of this recorded direct creation. Beneficial ownership, current authority, reputation and uninterrupted runtime history remain unverified.
- Creation sender
0x36928500bc1dcd7af6a2b4008875cc336b927d57- Transaction
0x2f1c5c2b44f771e942a8506148e256f94f1a464babc938ae0690c6e34cd79190- Creation block
- 4634748
- Recorded UTC
- 2017-11-28T00:41:21.000Z
- Current code snapshot
- 26242144
- Runtime continuity
- UNVERIFIED
Inspect signed-transaction binding and limits
Expand this record to load its supplied JSON.
Canonicality relies on the recorded RPC provider. No transaction-trie or consensus proof is claimed. This context does not change Risk or Confidence scores.
Administrative capability experiments
These experiments impersonate the recorded owner only inside a local fork. They test technical effects under that assumption. Real multisig, timelock and role authorization remain unverified; capability does not establish abuse.
Experiment snapshot: block 26262941 · RPC_REPORTED_FINALIZED. Each experiment retains its own block; archived observations may differ from the report’s other snapshots.
0x12a5c25b0f82efe892984b26decd3fb67d288a92b90d2b084474a4aa03395d36Observed owner: 0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828 · Contract account
Supply expansion · Demonstrated with owner impersonation
Receipt success, state changes and an outsider control are required. A failed or unavailable pattern does not prove that this capability is absent.
issue · Effect demonstrated
Recorded state and local receipts
Expand this record to load its supplied JSON.
mint · Not demonstrated
Recorded state and local receipts
Expand this record to load its supplied JSON.
Transfer pause · Demonstrated with owner impersonation
Receipt success, state changes and an outsider control are required. A failed or unavailable pattern does not prove that this capability is absent.
pause · Effect demonstrated
Recorded state and local receipts
Expand this record to load its supplied JSON.
Address blocking · Demonstrated with owner impersonation
Receipt success, state changes and an outsider control are required. A failed or unavailable pattern does not prove that this capability is absent.
addBlackList · Effect demonstrated
Blacklisted balance destruction: Demonstrated with owner impersonation. This separate experiment requires a blacklisted funded subject, exact balance and supply reduction, and an outsider revert. It does not establish arbitrary balance editing or current governance authorization.
Recorded state and local receipts
Expand this record to load its supplied JSON.
These additional experiments do not change the Risk or Confidence score.
Methodology & limitations
Methodology versions and result provenance
Expand this record to load its supplied JSON.
- This archived example is not a complete token scan or calibrated risk assessment.
- Source and real governance authorization remain incomplete; owner impersonation bypasses multisig/timelock constraints.
- Global holder distribution, beneficial ownership and liquidity-lock evidence are unavailable.
- Different observations have their own recorded snapshots; they are not one synchronized risk run.
- Archived market observations include a structural-only USDC pair. Their reserve snapshot does not establish execution at that same block.
- Causal token-tax attribution remains unestablished. Reference quotes and local token getter deltas are separate observations.