WETH $WETH
Share on X ↗- Contract
- 0x0Bd7…AD73
- Website
- not supplied
- Chain state
- block 92,316,117
- Filed
- 2026-10-19 03:56 UTC
Final assessment
1 high-severity finding(s): EIP-1967 proxy — logic is upgradeable. 1 of 2 findings are directly confirmed; the rest are inferences from bytecode or script patterns. 2 question(s) remain open (see Unknowns). An incomplete scan does not establish safety.
I.Contract autopsy
- Source
- Verified on RobinScan
- Owner
- No owner() accessor
- Proxy
- EIP-1967
- Supply
- 37,697
- Bytecode
- 2,202 bytes
- Functions
- 24recovered by EVMole
highEIP-1967 proxy — logic is upgradeable● confirmed+
Token logic lives at 0xC6B81b429797E0f555440b70cD99e032D7AE947e; upgrade admin 0xa3Acd31AFb851B4eB9DAD00F5204c01D924267dF. Whoever controls the admin can replace the token's code.
- Exh. E2Proxy storage slots at block 92316117
lowbridgeMint(address,uint256) — mint● inferred+
The implementation bytecode exposes a function matching bridgeMint(address,uint256), which mints bridged supply; on standard bridged tokens only the bridge gateway can call it. Selector inferred by EVMole; the name is a known-signature match, not verified source. Access control on this function is not established by this analysis.
- Exh. E80x8c2a993e (bridgeMint(address,uint256)) found by rea-evmole in implementation bytecode at offset 811
II.Website autopsy
No website supplied — this is a contract-only report.
III.Cross-layer findings
No cross-layer comparison was possible for this report.
IV.What remains unknown
- No owner() / getOwner() accessor. Control may use roles, a different accessor, or none.
- No website supplied: contract-only report, no cross-layer comparison.
V.Exhibits
- Exh. E1
eth_getCode at block 92316117: 2202 bytes
chain read · eth_getCode · block 92316117
- Exh. E2
Proxy storage slots at block 92316117
chain read · eth_getStorageAt · block 92316117
- Exh. E3
RobinScan reports source verified (TransparentUpgradeableProxy)
robin.etherscan.io
open on explorer ↗ - Exh. E4
Saved token bytecode (2202 bytes)
bytecode · A1 sha256 e980519ff078…
- Exh. E5
REA/EVMole inferred 0 function candidates on token
REA inspect_evm_interface · ev_524ee4d0364a186… · A2 sha256 5efc3caf23fe…
- Exh. E6
Saved implementation bytecode (6961 bytes)
bytecode · A3 sha256 8864076cce6d…
- Exh. E7
REA/EVMole inferred 24 function candidates on implementation
REA inspect_evm_interface · ev_5b84c3a295657fb… · A4 sha256 c0b9f60c7df0…
- Exh. E8
0x8c2a993e (bridgeMint(address,uint256)) found by rea-evmole in implementation bytecode at offset 811
bytecode · selector 0x8c2a993e · offset 811 · A3 sha256 8864076cce6d…
Provenance · 4 artifacts · REA 6.7.0 on linux-x64
- A1Runtime bytecode of token 0x0Bd7D308f8E1639FAb988df18A8011f41EAcAD73 at block 92316117sha256 e980519ff078267d…
- A2REA inspect_evm_interface Evidence for tokensha256 5efc3caf23feeb9c…
- A3Runtime bytecode of implementation 0xC6B81b429797E0f555440b70cD99e032D7AE947e at block 92316117sha256 8864076cce6d17be…
- A4REA inspect_evm_interface Evidence for implementationsha256 c0b9f60c7df0e399…
- contract.metadata · ok108 ms
- contract.proxy · ok · EIP-196795 ms
- contract.ownership · partial · no owner accessor177 ms
- contract.verification · ok · verified368 ms
- contract.evmole.token · ok · 0 functions1165 ms
- contract.evmole.implementation · ok · 24 functions1209 ms
- contract · ok3394 ms