Base Token Safety

Endpoints (3 live)

• GET /v1/transfer-check — Check a Base ERC-20 for a honeypot-style transfer cost before a swap or send. Input: one token address. Output: allow, warn, or block. Block: not a contract or not an ERC-20. Warn: bytecode contains taxFee, liquidityFee, sellFee, buyFee, transferFee, isBlacklisted, or maxTxAmount. USDC warns because it contains isBlacklisted(address). A selector does not prove the fee, blacklist, or cap runs on every transfer, and this check does not simulate one. (0.01 USDC on Base)
• GET /v1/counterparty-check — Check a Base address before an agent pays or approves it. Input: one address. Output: allow or warn. Reports wallet or contract, whether the wallet has sent a transaction, whether a contract already had code 7 days ago, and whether it is a proxy (EIP-1967, EIP-1167, or implementation()). Warns on contract_is_new, proxy, or no_outgoing_transactions. Wallet age is unknown. A deleted contract looks like a wallet. Not proof of theft. (0.01 USDC on Base)
• GET /v1/token-check — Base ERC-20 check before an agent buys or holds a token. Input: one contract address. Output: allow, warn, or block. Block: not a contract, not an ERC-20, zero supply, or the owner or token contract holds at least 50 percent. Warn: 20 to 50 percent held, proxy (EIP-1967, EIP-1167, or implementation()), or bytecode contains mint or pause. A selector does not prove the public can call it. Concentration covers only the owner and the token contract. Not an audit. (0.01 USDC on Base)