Dump Risk (Exit Liquidity)

"Top holder owns 18%" means nothing without: 18% of what, against how deep a pool. Values the largest live holders' bags (GoPlus % × Base supply × price; pools, lending, bridges, vaults, lockers, burn excluded; exchanges reported apart) and dumps them through every Base pool the token is in, constant-product. Impact if the top holder and top 3 exit; verdict resilient → exit_trap. USD stablecoins: not_applicable (see stablecoin-peg). Heuristic; not financial advice.

Use before an agent buys or swaps into a Base token: token-risk, sellability (honeypot, tax), swap route and price impact for your size, and deployer reputation in one GO/HOLD/STOP verdict with a receipt. GO only when every check ran clean; an outage is HOLD. Coinbase tokenized stocks get stock checks (transfer policy, wallet eligibility, premium vs reference). GO/HOLD return `enforce`: a Cobalt condition so Base never includes your trade if the pool is drained first. Bind this tool first.

🆕 Lists the newest B20 tokens created on Base (from the B20Factory precompile) — variant, symbol, decimals, block. B20 is Base's native token standard and dozens launch hourly. A discovery feed for agents hunting new B20 launches early. Run b20-safety on any address before touching it — new ≠ safe.

A quote shows today's price; it does NOT tell you a $5k buy into a $20k pool pays ~20% more. This takes the token's deepest Base pool, treats it as constant-product (Uniswap-V2 / Aerodrome volatile) and computes the exact x*y=k price impact for your USD size. Conservative — concentrated-liquidity pools usually do better. Also returns the largest size under 1% and 3% impact. Pass address= and size= (USD). An estimate; confirm with swap-route. Not financial advice.

The payer-trust mirror of x402-seller-check. Reads a wallet's outgoing USDC payments on Base over 90 days: distinct sellers paid (breadth), total payments and USDC (depth), and whether it ever paid the same payee twice. Breadth with no depth in a short burst is the crawler/sampler pattern; a repeat or sustained payer is the opposite. Sees only Base USDC; absence reads as 'thin', never bad. Not financial advice.

🆕 A B20 with a METADATA_ROLE holder can call updateName/updateSymbol — change its own identity after launch (an impersonation / bait-and-switch vector ERC-20 has no protocol equivalent for). Reads whether the metadata is mutable (role holder exists) AND whether it has ALREADY been renamed on-chain (NameUpdated/SymbolUpdated history). Trust the address, not the label.

Parse a bank CSV (comma/semicolon/tab, quoted fields) and map common headers (date/amount/debit/credit/balance/description, TR aliases) into one schema. Up to 500 rows. Best-effort.

🆕 One block on Base — height, hash, parent, timestamp and age in seconds, transaction count, gas used against the limit, and the base fee in gwei. Takes a block number, a 0x… block hash, or latest / finalized / safe / earliest. A block that isn't mined yet answers found:false with the reason rather than an error. Raw chain data, no interpretation.

Returns current Base gas fees (baseFee, maxPriorityFee) and three tiered suggestions (slow, normal, fast) in Gwei, derived live from the Base RPC. Built for agents that time or cost-estimate transactions.

Runs pre-trade-gate (risk, sellability, route, deployer), b20-gate (seize/freeze/pause; N/A for non-B20 tokens), owner-powers and dump-risk in parallel on a Base token, with clanker-token-audit as provenance that never moves the verdict. Returns GO/HOLD/STOP, what each check saw, an unverified list, a max size held to 2% impact on the exit-liquidity read, and a receipt. GO only if every applicable check ran clean; if a gating check could not run there is no GO and no charge.

Use when an agent asks "is this Base token safe?" before buying, holding or listing it. One scam/rug check read live from Base RPC + GoPlus: honeypot, buy/sell tax, hidden or reclaimable owner, pausable transfers, blacklist, holder concentration (sellable holders only), LP lock and upgradeable proxy. Returns a 0-100 score, flags and a GO/HOLD/STOP receipt. On established tokens (50k+ holders, $1M+ liquidity) admin controls are context, not risk.

Lists the NFT collections a Base wallet holds — name, count and floor value — spam-filtered, via Covalent. For agents profiling a wallet's NFT exposure.

🆕 b20-safety tells you WHICH powers a B20 has; this tells you WHO holds them. Reads the token's role-based access control (mint / burn / seize-via-burnBlocked / pause / admin) from onchain role events and reports the exact controllers, how centralized they are, and whether admin has been renounced. The issuer-control map an agent needs before holding a regulated Base-native asset.

🆕 A Base transaction by hash, unedited: from, to, value in wei and ETH, nonce, gas, fee caps, type, and the 4-byte method selector with the calldata size. Flags a contract creation (null to) and a still-pending transaction (null block) rather than leaving you to infer either. Unknown hashes answer found:false, not an error.

The other half of bridge-route. A bridge takes minutes with funds in flight, and from the source chain alone an agent cannot tell if it completed. Tracks a transfer by its source tx hash via the LiFi status API: completed (with the receiving tx), pending (poll again), failed (with the reason), or not-found (not a bridge tx, or too early to index). Pass from/to/bridge for a faster lookup. not-found reads as 'not indexed yet', never 'failed'. Not financial advice.

🆕 First tooling for Base's Commerce Payments protocol (AuthCaptureEscrow): reconciles two-phase auth/capture payments — in escrow, captured, charged, voided, refunded, or payer-RECLAIMABLE because the operator missed the capture window. Filter by payment= (infoHash), payer=, receiver= or operator=, or omit everything for the network feed. The order-reconciliation read merchants and agents need before trusting onchain commerce.

🆕 Commerce Payments flows are DRIVEN by an operator — it authorizes escrow, captures for merchants and takes the fees. This audits one before you rely on it: 90-day volumes, fees taken, capture-vs-reclaim record (missed capture windows = merchants left unpaid), distinct payers and merchants. verdict: healthy_operator / mixed / sloppy_operator / no_activity. No other tool reads this new Base commerce protocol.

Reads who controls a contract straight from chain: owner/getOwner/admin, pending owner, EIP-1967 proxy implementation + admin, and paused state — and whether the owner is a single EOA key (one compromise = total control) or a contract (multisig/timelock). Crucially: ownership 'renounced' is NOT safe if it is still an upgradeable proxy whose admin can swap the logic. The control-surface read before you trust a contract. Not financial advice.

The check before the riskiest moment — signing. Decodes raw unsigned calldata (approve / permit / transfer / setApprovalForAll), shows the exact intent (who gets power over what, and whether it's UNLIMITED), and screens the destination + spender for OFAC sanctions and dangerous owner powers, in one GO/HOLD/STOP verdict + receipt. No simulation needed — pure decode + onchain risk. Catches the unlimited-approval drain vector before it's signed.

🆕 Base Account spend permissions let an app or agent spend a scoped, recurring allowance from a wallet — the primitive behind autonomous agent payments on Base. This reconstructs a wallet's ACTIVE spend permissions from onchain approve/revoke events and flags the dangerous ones: unlimited allowance, no expiry, unrecognized spender. The Base-native, agent-era drain check that ERC-20 approval tools can't see.

Use when an agent hunts what is moving on Base. Up to 15 trending Base pools ranked by live DEX activity (GeckoTerminal): token address, pool, DEX, price, 24h change, volume, liquidity and trade count. Paid DexScreener promotions are listed separately, never mixed in. Trending is not safety: vet with token-risk before buying.

🆕 Since Pectra an EOA can carry EIP-7702 delegated code (the 0xef0100 designator): every call to the wallet executes the DELEGATE's contract with the wallet's funds — a malicious delegate is total takeover, invisible to approval tools. Reads the designator, resolves the delegate and verdicts it: not_delegated / delegated_known (Coinbase's EOA→SmartWallet path) / delegated_unknown (🚨) / smart_contract. The drain surface no other Base tool checks.

Not price momentum — ADOPTION. token-age tells you when a token was born; holder-distribution is a snapshot. Neither shows the TRAJECTORY. A token can pass every static check and still bleed users week over week — what a human sees watching for days, an agent can't. Reads weekly transfer counts and distinct participants over the last 28 days and calls it: accelerating, steady, cooling, dying, or low_activity. Activity ≠ price; pair with wash-trading. Not financial advice.

🆕 The receipt for a Base transaction: success or reverted, block, gas used, effective gas price, the fee in wei and ETH, how many logs it emitted and which contracts emitted them. A contract deployment reports the new address. No receipt yet means pending, dropped, or never here — and it says which is possible instead of failing.

Live Base chain snapshot: latest block, base fee + priority fee (Gwei), current ETH price, and the estimated USD cost of a simple ETH transfer. For agents timing or budgeting transactions.

🆕 What sits at a Base address: contract or plain wallet, and if a contract, whether it declares ERC-721 or ERC-1155 via ERC-165 or carries the ERC-20 shape, plus name, symbol, decimals and code size. Interface support is read from the contract's own declaration first and only inferred when there is none — the ordering matters, because NFTs answer totalSupply() too.

Resolves a 4-byte function selector (e.g. 0x70a08231) to candidate human-readable signatures via 4byte.directory. Accepts a bare selector or full calldata.

Computes the 4-byte selector for a function signature (e.g. transfer(address,uint256) → 0xa9059cbb). The inverse of the decoder — useful for agents building or matching calldata.

Before an agent pays or trusts a NEAR account: does it exist, what kind is it (named, implicit, 0x), how much NEAR it holds (available, staked, locked for storage), whether it is a contract or a NEP-141 token, and who controls it — full-access keys that can do anything, and function-call keys limited to one contract. Flags a wallet held by one key, a contract replaceable by key, and an account no one can sign for. Live from the NEAR RPC.

An indicative quote for swapping any asset NEAR Intents routes — NEAR, USDC, USDT, BTC, SOL and more, across chains. Name assets as a symbol (USDC = on NEAR, USDC@base for another chain), a NEAR token account, or a 1Click asset id. Returns amount out, minimum out, USD in and out, the rate, the cost in percent lost to fees and price impact, and the expected time. Nothing is reserved or paid.

Returns the latest tokens profiled on Base from the DexScreener feed — address, description, and links. Great for discovery bots hunting new launches early.

A token can look clean now — low tax, no honeypot, sells fine — and still leave the owner holding the switches to trap you later. sellability asks 'can I sell today'; this asks 'what can the owner do AFTER I buy'. Lists the mutable owner powers — raise sell tax to 100%, zero your balance, blacklist you, pause transfers, reclaim 'renounced' ownership, mint supply — each mapped to the attack it enables, plus whether a renounce is real. Not financial advice.

Not 'is this address sanctioned' (that's sanctions) but 'has it DEALT with one' — screens a wallet's USDC counterparties (both directions) against the OFAC SDN list. Taint by association: receiving from or routing through a wallet that transacts with sanctioned addresses carries sanctions risk. Returns the sanctioned counterparties found. Covers direct counterparties; pair with fund-trace for the multi-hop funding chain. Not financial advice.

Metadata for a Base token: name, symbol, logo image, official website and social links (X/Telegram/etc.) plus price & liquidity — from DexScreener. For agents and UIs enriching a token.

Pass a Base token contract address and get the current USD price, 24h change, liquidity, and volume from DexScreener (highest-liquidity pair auto-selected). No API key required.

The address-poisoning attack: a scammer sends dust from an address whose first/last characters match one you really use, hoping you copy-paste the poisoned one. An auto-paying agent is the perfect victim. This compares the recipient against the head/tail of addresses the wallet actually transacts with and flags a look-alike that is NOT a real counterparty. Pass wallet= (yours) and to= (the recipient). A heuristic — verify the full address regardless. Not financial advice.

A pre-payment gate for an agent about to send USDC. Screens the recipient (OFAC sanctions, Coinbase/Basename identity, wallet vs contract, fresh-address age) and escalates a fresh or anonymous recipient to STOP once the amount is material — a few cents to a new address is sampling, real size to one is the drain to avoid. Pass usd= for amount-aware guidance. One verdict (GO/REVIEW/STOP). Identity is not intent; not financial advice.

🆕 The complete fund-movement authority on a Base wallet in one call: ERC-20 approvals (a spender you approved can pull the token) PLUS Base Account spend permissions (the agent-era scoped recurring allowance) — one drain-surface verdict with the ERC-20 revoke queue to act on. Approval tools miss the spend permissions; spend-permission tools miss the approvals. The only combined check for agent wallets that must know their whole exposure before holding funds.

Ranks a wallet's active token approvals by USD-at-risk x unlimited-allowance x unlabelled-spender, and returns a prioritised revoke queue. Approvals are the #1 drain vector; this tells an agent exactly what to revoke first.

🆕 The next nonce for any Base address, plus its ETH balance and whether it is a contract. The count means different things either side of that line — transactions sent for a wallet, contracts deployed for a contract — so both are reported under their own name instead of one ambiguous number. What you need before building a transaction, or to tell a fresh address from a used one.

An executable swap on Base, routed by 0x across Uniswap, Aerodrome, Balancer, Curve and more. Returns the transaction for your own wallet to sign, plus the approval step if needed, minimum out, route and fees. We never hold funds. Name tokens as ETH, USDC, WETH, cbBTC, AERO… or a 0x address; buying an unknown token runs a sellability check first and refuses a honeypot unless force=1.

Forward + reverse Basename resolution read from the Base L2 Resolver: turn jesse.base.eth into an address, or an address into its primary Basename. No API key required.

Dividends and splits on a tokenized stock settle by moving its multiplier; balanceOf never changes, so a naive reader is silently wrong. Coinbase announces each one on chain days ahead. This lists every announced action across all tokenized stocks Coinbase lists, plus any ERC-8056 schedule, and with wallet= which touch that wallet's holdings. Lenders pause a stock's reserve while one is applied. Not financial advice.

x402 proves payment; this answers whether the wallet should be recognised. Resolves a wallet's onchain identity — Coinbase verification (a KYC'd attestation), Basename, and an ERC-8004 registry entry when configured — and corroborates with its payment track record. One verdict: recognised / named / anonymous / unknown. The identity leg alongside x402-seller-check (endpoint) and agent-reputation (behaviour). Identity is not intent; a degraded read is 'unknown'. Not financial advice.

Agents are the easiest MEV prey: predictable, public-mempool, a measured ~$50M/quarter tax. A sandwich only pays when a trade moves the pool enough to front-run (size vs pool depth). This returns an exposure read (low/elevated/high) and a protected-execution plan: a tight min-out, private/off-mempool inclusion (a Cobalt validity tx via validity-build), and splitting a large order into unattackable chunks. Pass tokenOut + amountUsd. Not financial advice.

An executable NEAR Intents swap: a binding quote with a deposit address. Send amountIn of the origin asset there before the deadline; the output goes to recipient, or it is refunded to refundTo. Funds never pass through us. Any asset NEAR Intents routes, across chains. Buying a NEAR token runs near-token-safety first and refuses a STOP token unless force=1. Track with near-swap-status.

Every dividend or split applied to a Coinbase tokenized stock on Base, with multiplier before/after and the share accrual, joined to Coinbase's own record; those announced but not yet applied; and each stock's cumulative accrual. The record cost-basis and NAV need. symbol= narrows to one stock. A failed warehouse read reads as degraded, never 'none'. Not financial advice.

Before your agent sends, approves or signs to an address — a wallet risk check with one GO/REVIEW/STOP verdict. Screens OFAC sanctions, Coinbase/Basename identity, wallet vs contract, how long the address has existed, and whether contract logic can be swapped AFTER you send. Every factor returns what it found and what it could not read — a check that did not run never reads as clean, so GO means everything material was actually screened. Not financial advice.

Generate N cryptographically-strong, url-safe random tokens server-side — session IDs, API nonces, one-time codes, coupon secrets. Pass count= for how many. A tiny paid utility for agents that need entropy without a crypto library.

owner-powers says the owner CAN mint; this says whether they ARE, and how fast. A token can advertise fixed supply and quietly inflate it, diluting holders before the dump. Sums zero-address mints and burns over a window (CDP SQL) against live on-chain totalSupply, annualised. Verdict from fixed_in_window / deflationary to hyperinflation. Honest: bridges, staking and LP programs mint legitimately — flags the RATE, not intent. Not financial advice.

When was this token born — its earliest transfer on Base — and how old is it in days, with a verdict: brand_new (<1d), very_new (<7d, where most rugs happen), new (<30d), established, or mature. New is not bad, but age is a first-order risk input every agent should have before sizing. Pairs with launch-snipers and token-risk. Not a safety verdict on its own. Not financial advice.

🆕 An ERC-20 balance on Base, in raw units and in decimals, with the token's symbol and decimals resolved in the same call. Zero is flagged explicitly, since it is the commonest answer and the one most easily confused with a failed read. An address that doesn't implement balanceOf answers found:false and says so.

Agents choose between tokens, not around them. Pass 2-5 Base token addresses → each gets a 0-100 quality score (safety-weighted: rug score first, then liquidity depth, then momentum), ranked best-first, with a named pick — or an honest 'none pass the gate'. One call returns a decision instead of a dozen data dumps.

🆕 totalSupply for any Base token, returned raw and scaled by its decimals, alongside the name and symbol. When a contract doesn't declare decimals the answer assumes 18 and marks that it assumed — a silent guess here quietly moves every downstream number by orders of magnitude. Non-token addresses answer found:false.

Turns raw LP-lock data into a forward calendar: each unlock with its date, the % of LP it frees, the locker (UNCX / Team Finance labelled), and days away — flagging imminent unlocks (<30 days). An LP unlock is a scheduled price event: the moment a rug becomes possible. For agents managing open positions.

b20-safety says a tokenized stock is a real issuance; this says what it trades at ON-CHAIN and whether there's liquidity for size. Pass symbol=AAPL (or AAPLc) for the deepest Base pool's price, aggregate liquidity, 24h move and volume; omit symbol for the full directory. Covers every stock Coinbase lists — the roster tops itself up from Coinbase's own API. This is the tradeable Base price, which can diverge from NYSE NAV. Not financial advice.

Provide a Base transaction hash and get a structured summary: from/to, ETH value, status, gas used, block, method selector, and nonce — straight from Base RPC.

Wallet age in days, first & last activity timestamps, and outgoing transaction count for any Base address — read straight from the Base archive, not a 30-day feed, so it dates wallets of any age. Counts and last-activity cover what the wallet SENT; inbound transfers don't raise the nonce and aren't counted. Built for sybil screening and counterparty trust checks.

x402 proves payment, not trust: an agent handed a URL pays blind, and the payee may be a real service or a burner that takes the USDC and vanishes. Give a url and/or a payTo wallet and get GO/WARN/STOP: is the URL a well-formed 402 resource, does its price match, and is the seller wallet sanctioned, a fresh throwaway, or paying a different address than you expected. Screens the PAYMENT side the protocol drops — not a guarantee the service returns good data.

🆕 The 'who am I dealing with?' check for agents. Reads Coinbase's ONCHAIN verification (an EAS attestation by verifications.coinbase.eth) — meaning the address is tied to a KYC'd Coinbase account, the strongest sybil-resistance signal on Base — plus the address's Basename. Returns a verified/named/anonymous verdict + trust score. Pair with sign-guard/spend-audit for a full pre-transaction gate. Identity is a signal, not proof of honesty.

🆕 The single call before trading a Base-native B20: seize (burnBlocked) + freeze (Policy Registry) + rebase + pause + uncapped-mint, collapsed into one GO/HOLD/STOP verdict with an auditable receipt. Pass wallet= to also check if YOUR address is already blocked on that token. The B20 tool to bind first.

🆕 Beryl (2026-06-25) cut the single-proof withdrawal window from 7 days to 5, with a dual-proof fast path at ~1 day. Given a Base withdrawal-initiation tx, this decodes the L2ToL1MessagePasser event (the withdrawalHash, target & value needed to prove/finalize on L1) and estimates the finalization windows under the post-Beryl rules. For agents managing cross-chain liquidity.

🆕 Resolves the complete Base identity behind an address or Basename: resolved address, avatar, description, website and social handles (X/Twitter, GitHub, Farcaster, Discord) read from Base's L2 Resolver text records. Lets an agent turn a counterparty address into a real profile — beyond just the name. Complements address-trust (verification) with the human context.

Combined counterparty screening for an address: direct OFAC sanctions match, EOA/contract profile, and (for contracts) risk flags — rolled into a single recommendation (blocked / review / clear). Built for compliance agents.

Checks Sourcify for a Base contract's verification status and returns its ABI as function/event name lists + item count (full or partial match). No API key required.

Reads a verified contract's ABI and flags owner-callable abuse functions: mint (dilute), pause (freeze exit), blacklist (block your wallet), setFee/setTax (tax you after entry), withdraw/sweep (pull funds), upgrade (swap logic). An unverified contract is itself a red flag. Diligence a price feed can't give.

Profiles the token's creator wallet: how much history it has, how much of the supply the creator still holds, and whether ownership is renounced — rolled into a 0-100 reputation score with signals. A fresh wallet holding 20% of supply with no renounce is the classic rug setup; this is the forensics layer other checks skip.

🆕 Funding provenance in one call. Traces a Base wallet back to its EARLIEST transaction and resolves who first funded it: a recognized exchange/bridge (real on-ramp, lower risk), an anon EOA (possible sybil/burner — trace the cluster), or a contract. Returns the first funder, whether it's a contract or EOA, the initial value, and wallet age. The sybil/origin screen no other Base tool gives — the counterparty check before you transact. wallet= required. Not financial advice.

Goes past 'top-10 = X%' to classify the holder base: how much the creator & owner still hold, which top holders are infrastructure (LP/CEX/bridge — benign) vs unlabelled wallets (the concentration that can actually dump the price), and the largest non-infra wallet. Separating benign from dangerous concentration is the analysis others skip.

Do two tokens share the same recent holders — the farm / sybil / coordinated-launch signal nobody else surfaces? Reads each token's recent recipients and returns the overlap as a share of the smaller set: independent (the few % unrelated tokens share via routers/power users), overlapping, or strongly_linked (a coordinated cohort — same farm, deployer community, or a sybil set rotating between them). Pass a= and b=. A signal, not proof. Not financial advice.

Top-10 holders with their %, holder count, concentration level (whale risk), and LP-lock %, from GoPlus. Lets agents judge how fairly a token is distributed before trading. No API key required.

Reads a token's EARLIEST transfers to judge how it was launched: many recipients in a single early block or a tight block span is a sniped/bundled launch (coordinated, expect correlated dumping); very few early holders is dangerous concentration; a spread is organic. Returns the first holders and a verdict. The launch-quality read that pairs with b20-launch-radar — a heuristic, not proof. Pass first= (default 40). Not financial advice.

Surfaces the LP holders, how much of the LP supply is locked or burned vs pullable, the lockers, and unlock dates. Unlocked liquidity is the clearest rug setup — this shows the detail a one-line 'LP locked: yes/no' hides.

Pass a comma-separated list of up to 10 Base token addresses and get USD price + 24h change for each in one call. Ideal for agents pricing a portfolio or watchlist.

Pulls a wallet's holdings and runs a risk check on each, flagging which positions are honeypots / high-risk / illiquid and the USD sitting in risky tokens. One call audits the whole wallet — 'which of the things you already hold could hurt you'.

Reads the EIP-1967 proxy slots live: is the contract upgradeable, what's the current implementation, and WHO can upgrade it. Flags the dangerous case — an EOA admin that can swap the logic at any block with no timelock/multisig. Upgradeability is a rug vector static scans miss.

Heuristic extraction from invoice/receipt text: totals, amounts, VAT hints, IBANs, dates, emails, invoice numbers. Not OCR — convert a scan to text first, then send it here.

Use when a trading agent wants one number for "will this Base token rug?": a deterministic 0-100 rug-pull probability from security flags (honeypot, tax, owner powers), holder concentration, LP lock and liquidity depth, with the exact signals that drove it and the sources that did not answer. Higher = riskier; a missing feed reads unknown, never low.

Use before an agent pays, receives from or onboards a wallet: an OFAC sanctions / AML screen of the address against the US Treasury SDN list of sanctioned digital-currency addresses. Direct-address match with a GO/STOP receipt, for compliance agents and payment bots that must screen counterparties before transacting. For many addresses at once use sanctions-batch; for a person or company name use sanctions-name. No API key.

Pass a comma-separated list of up to 25 addresses and get an OFAC sanctions result for each, plus the flagged subset. Built for compliance agents vetting whole counterparty lists in one call.

Lists a wallet's active token approvals — which contracts can spend its tokens, the allowance, USD value at risk and a risk factor (revoke.cash-style). Essential wallet-security check for agents and users.

Recent transfers of a specific token for a wallet — direction (in/out), amount, USD value, counterparty, tx hash and time, via Covalent. For agents tracking token flows and cost basis.

The latest transactions for a Base address — hash, time, from/to, ETH value, success — via Covalent. For agents tracking what a wallet is doing.

One GO/REVIEW/STOP across every drain vector: EIP-7702 delegation (a hostile delegate is total takeover), Base Account spend permissions (unbounded, non-expiring pulls), and ERC-20 approvals (unlimited allowance to unknown spenders). Composes wallet-delegation + spend-audit + approval-advisor so an agent checks its whole surface in one call instead of three; drill into each vector for detail. A vector that could not be read is 'unknown', never clear. Not financial advice.

Complete token portfolio for a Base address with USD values: every ERC-20 the wallet holds, priced from live DEX liquidity, plus native ETH — sorted by value with a total. Holdings nobody quotes are listed and counted separately rather than silently valued at zero.

Complete ERC-20 portfolio for a Base address — every non-zero token with balance, metadata and live USD value, plus a total. Token discovery via CDP Data API (Coinbase) with Alchemy fallback; USD from DexScreener.

Flow, not snapshot: the largest transfers of a Base token in the last 24h, classified by whether whales are sending INTO DEX pools (sell pressure) or pulling OUT (accumulation) — a net sell-pressure read that decays in hours. Complements holder-forensics ('who could dump') with 'is anyone dumping now'. CDP-indexed events.

EOA vs contract, ETH + USDC balance, transaction count and activity level — straight from Base RPC. Useful for counterparty and wallet checks.

What is this Base address? Matches a sourced registry of known protocol, exchange, bridge, locker and burn addresses (each with the docs/deployments/Basescan source it came from), then reads the chain: contract vs EOA (EIP-7702 delegation shown), ERC-4626 vault (asset()), Safe multisig (getThreshold), DEX pool interface (token0/token1). Unmatched addresses are reported as unlabelled, never guessed.

🆕 Live — B20 is Base's native precompile token standard, and unlike ERC-20 a B20 issuer can freeze holders (Policy Registry) and even SEIZE your balance (burnBlocked) at the protocol level. This reads those powers — seizable, freezable, paused, rebase, uncapped-mint — into one hold/caution/avoid verdict, and separates a real tokenized stock from one merely wearing an equity ticker by reading the transfer-policy admin on chain, not a list: all 13 Coinbase equities, and the next on day one.

Screen up to 10 Base tokens in a single paid call — each gets a 0-100 rug-probability score, risk level and top signals, sorted riskiest-first. Built for agents triaging a watchlist or portfolio without paying per token.

Reads the deployment records of Clanker's own factories on Base (v4 tokenDeploymentInfo, v3.1/v3/v2 deploymentInfoForToken; v0/v1 via the factory's TokenCreated in the deploy receipt) to verify a launch: version, factory, requester, pool, and whether the LP position NFTs are held by Clanker's locker. Cross-checked with clanker.world. Returns clanker_verified, not_clanker or unknown; RPC failure is not charged.

Forward + reverse ENS resolution on Ethereum mainnet: turn vitalik.eth into an address, or an address into its primary ENS name. Complements the Basename resolver for Base.

first-funder goes one hop; this walks the funding chain back up to 8 hops to a recognisable origin (a CEX/bridge on-ramp — lower-risk provenance) OR a SANCTIONED address (dirty money, taint by provenance) OR a dead-end of fresh anon EOAs (the sybil/burner-cluster shape). One verdict compliance can refuse on. Best-effort: internal-transfer funding is invisible and ends the walk, never guessed. A CEX origin is a signal, not identity. Not financial advice.

Use when an agent must know it can SELL a Base token before it buys: the honeypot check, answered three ways. Security simulation (honeypot, cannot-sell-all, sell/buy tax, pausable transfers), a live transfer simulation we run ourselves from a real holder (does it revert, is it taxed?), and exit liquidity. Returns a hard canSell verdict with reasons. Selling is where rugs hide.

Aave V4 and Morpho on Base lend USDC against tokenized stocks (AAPLc, NVDAc, TSLAc…), priced by a 24/5 oracle that freezes from Friday 20:00 to Sunday 20:00 ET while the tokens keep trading. This re-prices each collateral at the live Base DEX price: health factor now, projected at the reopen, the fall that liquidates, paused reserves and announced dividends. Pass wallet=. Not financial advice.

Tokenized stocks trade 24/7 on Base; their reference price (Chainlink, used by Aave and Morpho) freezes when the US market shuts. One call: the US session, the reference and its age, the DEX premium/discount in bps against it, pool depth and rough impact for amountUsd, paused features and any announced dividend. Covers every stock Coinbase lists. Not financial advice.

Retention in one call: pass up to 10 tokens to snapshot them and get a watchId; call again with that watchId to get only the DELTAS since last time — liquidity ±%, price ±%, became-honeypot, sell-tax spiked, liquidity pulled. The second call is worth more than the first. Built for agents holding positions that re-check daily.