Base Unverified Contract Bytecode AuditGET /v1/base/contract-audit · x402 API by base-onchain-tools
What an UNVERIFIED Base contract can actually do, which is exactly where block explorers show nothing. Disassembles the deployed bytecode with a PUSH-aware opcode walk, strips the Solidity metadata trailer, recovers function selectors from the dispatch table and names them against a keccak-derived signature database, then reports admin powers (mint, blacklist, freeze, pause, trading switches, adjustable fees, upgrade hooks), dangerous opcodes (DELEGATECALL, SELFDESTRUCT, CALLCODE, CREATE2), which token standards it genuinely implements, and whether it supports EIP-3009 so it can be paid gaslessly over x402. Proxies are detected and followed to their implementation. Query param: address.
What does this x402 API do?
Base Unverified Contract Bytecode Audit. This is an x402-gated GET API resource from base-onchain-tools. TOLL·402 confirmed a protocol-valid HTTP 402 quote on 2026-08-25. The listing records $0.04 USD-denominated per request on Base. No settled paid call has been verified.
- Published price
- $0.04 USD-denominated per request
- Networks
- Base
- Latest evidence
- TOLL·402 confirmed a protocol-valid HTTP 402 quote on 2026-08-25
- Resource ID
- 6bf83f682b04894848fe97cd
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://base-onchain-tools.dolerite.workers.dev/v1/base/contract-audit", {
method: "GET",
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.This sends no payment. Inspect the 402 response before adding a wallet-enabled client.
- Live 402 quote confirmed
GET returned a protocol-valid 402 quote (402). No payment was made.
- Origin reachable
HEAD https://base-onchain-tools.dolerite.workers.dev/ returned 200.
- Observed in 402-index
Discovered through self-registered.
- Registry record checked
Registry health: healthy.
What evidence supports this listing?
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →
Which networks and payment options does it accept?
The normalized listing price is $0.04 USD-denominated per request. Raw protocol requirements remain visible below for implementation and audit use.