USD Coin $USDC
Share on X ↗- Contract
- 0x80e0…6cA8
- Website
- not supplied
- Chain state
- block 92,316,178
- Filed
- 2026-10-19 03:56 UTC
Final assessment
1 high-severity finding(s): EIP-1967 proxy — logic is upgradeable. 1 of 2 findings are directly confirmed; the rest are inferences from bytecode or script patterns. 2 question(s) remain open (see Unknowns). An incomplete scan does not establish safety.
I.Contract autopsy
- Source
- Verified on RobinScan
- Owner
- No owner() accessor
- Proxy
- EIP-1967
- Supply
- 340
- Bytecode
- 835 bytes
- Functions
- 21recovered by EVMole
highEIP-1967 proxy — logic is upgradeable● confirmed+
Token logic lives at 0xEf3b461697C6bd38c5458AFa31e1250C98fd0f5F. Whoever controls the admin can replace the token's code.
- Exh. E2Proxy storage slots at block 92316178
lowbridgeMint(address,uint256) — mint● inferred+
The implementation bytecode exposes a function matching bridgeMint(address,uint256), which mints bridged supply; on standard bridged tokens only the bridge gateway can call it. Selector inferred by EVMole; the name is a known-signature match, not verified source. Access control on this function is not established by this analysis.
- Exh. E80x8c2a993e (bridgeMint(address,uint256)) found by rea-evmole in implementation bytecode at offset 608
II.Website autopsy
No website supplied — this is a contract-only report.
III.Cross-layer findings
No cross-layer comparison was possible for this report.
IV.What remains unknown
- No owner() / getOwner() accessor. Control may use roles, a different accessor, or none.
- No website supplied: contract-only report, no cross-layer comparison.
V.Exhibits
- Exh. E1
eth_getCode at block 92316178: 835 bytes
chain read · eth_getCode · block 92316178
- Exh. E2
Proxy storage slots at block 92316178
chain read · eth_getStorageAt · block 92316178
- Exh. E3
RobinScan reports source verified (ClonableBeaconProxy)
robin.etherscan.io
open on explorer ↗ - Exh. E4
Saved token bytecode (835 bytes)
bytecode · A1 sha256 4cfcf8a81e94…
- Exh. E5
REA/EVMole inferred 0 function candidates on token
REA inspect_evm_interface · ev_bb16ab0877bdccb… · A2 sha256 8672532beaab…
- Exh. E6
Saved implementation bytecode (7439 bytes)
bytecode · A3 sha256 08fab2749893…
- Exh. E7
REA/EVMole inferred 21 function candidates on implementation
REA inspect_evm_interface · ev_46cd8496ca8254b… · A4 sha256 ea8b980e87ed…
- Exh. E8
0x8c2a993e (bridgeMint(address,uint256)) found by rea-evmole in implementation bytecode at offset 608
bytecode · selector 0x8c2a993e · offset 608 · A3 sha256 08fab2749893…
Provenance · 4 artifacts · REA 6.7.0 on linux-x64
- A1Runtime bytecode of token 0x80e0e24718dbFcad49ECAA6F1e6C89A190586cA8 at block 92316178sha256 4cfcf8a81e9473f1…
- A2REA inspect_evm_interface Evidence for tokensha256 8672532beaabc44d…
- A3Runtime bytecode of implementation 0xEf3b461697C6bd38c5458AFa31e1250C98fd0f5F at block 92316178sha256 08fab27498930a80…
- A4REA inspect_evm_interface Evidence for implementationsha256 ea8b980e87eded77…
- contract.metadata · ok115 ms
- contract.proxy · ok · EIP-1967177 ms
- contract.ownership · partial · no owner accessor175 ms
- contract.verification · ok · verified354 ms
- contract.evmole.token · ok · 0 functions1193 ms
- contract.evmole.implementation · ok · 21 functions1307 ms
- contract · ok3594 ms