CedarProof

Cedar Rule Card / No. 001

Before you buy,
who can change
the rules?

A token can move today and still have controls that change what happens tomorrow. See who holds which powers—and what the evidence leaves open.

Read the free snapshot

Checking a different project?
Request a 1.9 USDC check of up to three public claims. We confirm sources, scope and delivery before payment.
Request a project check

Free snapshot

Five controls worth understanding.

All identified material controls are free

USDC was not paused when read. Its reviewed contracts still allow pausing, blacklisting, changes to minting privileges and code upgrades. These controls are not a finding of fraud or a guarantee of safety.

01

Owner

Who holds the controls can change.

Can replace the pauser, blacklister and master minter, and transfer ownership.

02

Pauser

Ordinary transfers can stop.

Can pause and unpause. Ordinary transfer and transferFrom calls require the token to be unpaused.

03

Blacklister

Address restrictions can change.

Can add or remove addresses from the blacklist. Transfer checks apply to relevant sender, recipient and caller addresses.

04

Master minter

Issuance privileges can change.

Can configure authorized minters and their allowances, or remove minters. Configuring requires the token to be unpaused. This does not establish unlimited minting by this role.

05

Proxy admin

The code can be replaced.

Can replace the implementation through upgradeTo. This is a separate role from the token owner.

Know the boundary

What this snapshot
doesn’t establish.

No safety score. No buy or sell simulation. Only the dated Ethereum USDC example above is covered.

  • Who controls the role addresses, their custody arrangements, multisig thresholds or timelocks.
  • Current authorized minters and allowances, or any selected address’s blacklist status.
  • Every possible privilege, historical action or future change.
  • Whether you personally can transfer or sell. No such transaction was performed.

Observed runtime bytes matched Sourcify’s on-chain records. Source correspondence relies on its match result and the reviewed verified-artifact source; recompiled metadata differed. Cedar did not compile the contracts. This is not a complete security audit or investment recommendation.

Public source references

These links open source material; they do not initiate a scan or connect a wallet.

The full card

From “has a control”
to “what it means.”

A concise interpretation you can inspect and keep.

  1. The role and its practical effectObserved role addresses tied to what each control can do.
  2. A checkable evidence trailSource pointers, the observation window and verification limits.
  3. The next question to verifyWhat remains unknown, plus a structured JSON copy.

The important warnings are already on this page. The full card adds the explanation and evidence.

1.9
USDCOne fixed report · English
Pay on Base · Report about Ethereum

Payment uses native USDC on Base (chain 8453). The report covers Ethereum USDC (chain 1).

Check availability to continue

Check availability to continue. Checking availability does not connect a wallet or request a payment.

Nothing connects automatically. An equivalent XNO amount requires separate agreement before payment.

Exact product & payment details
Delivery language
English
Product
ethereum-usdc-permissions-v1
Version
20261006T154329Z-en-r2
Content SHA-256
5b146cc8568fa5ca4081dc30a11b1c7393131c5507c60a4c5744905273db828c
Payment asset · Base
0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Recipient
0x67F2512447Ad352638EeFeC0655fdEb6C436cAF3

A transfer signature does not sign the product terms. This product, version and content hash are pinned by the client and bound by the server to the accepted proof. Payment and delivery are not atomic.

Recover an existing order

Use only a Cedar recovery file you previously saved. Paste its JSON below. This stays in this page until you explicitly retry that original order. Never paste a wallet recovery phrase or private key.

Loading creates no new signature and sends nothing. Retrying is a separate action. This page does not save recovery data automatically.