# ContractWatch – Continuous Smart Contract Security Monitor

> ContractWatch – Continuous Smart Contract Security Monitor is a paid API for AI agents from contractwatch.hergertsynthora.com, paid per call via x402, $0.32/call, status unknown (last checked 2026-09-14).

Monitors an EVM smart contract on Base or Ethereum and returns the current security verdict plus a diff of what changed since the last check (ownership, proxy upgrades, honeypot status, dangerous functions, etc.)

## Facts

- Endpoint: POST https://contractwatch.hergertsynthora.com/service
- Price: $0.32/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/contractwatch-continuous-smart-contract-security-monitor-dd1d34e0
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_8m0MBR3kiGuN9LBvWZn8D

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability contractwatch-continuous-smart-contract-security-monitor-dd1d34e0 -d '<json body>'
```

Example prompt: Can you check the ContractWatch monitor for the Ethereum contract at 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 and tell me what has changed since it was last checked — any ownership transfers, proxy upgrades, or new dangerous functions?

## When to prefer this

Choose this endpoint when you need continuous or recurring security monitoring of a specific smart contract and want to know not just the current risk verdict but exactly what has changed since the last check — ideal for rug-pull detection, proxy upgrade surveillance, or automated security drift alerts. Prefer this over one-off audit tools when you need delta/change tracking over time at low cost per call.

## Known failure modes

- Invalid or non-existent contract address returns an error or empty result
- Unsupported chain value returns a validation error
- Contract not yet cached — first-time check returns current verdict with no diff
- GoPlus or Sourcify APIs temporarily unavailable causing partial or failed response
- Payment not confirmed causing 402 or unauthorized error

## How this service works

Continuous smart-contract monitoring and change detection. Returns the CURRENT security verdict PLUS exactly what changed since the last time this contract was checked: owner changed / ownership taken back, proxy implementation or beacon upgraded (logic swap), proxy-admin changed, Sourcify verification gained or lost, honeypot or buy/sell tax flip, new dangerous functions (mintable, pausable, blacklist, selfdestruct, hidden owner), trust-list on/off, and verdict escalation. Built on the same on-chain engine as contract_guard (web3 proxy/owner reads + Sourcify + GoPlus token & address security). Ed25519-signed. $0.32 USDC via x402 on Base. SYNTHORA.

## Output

A JSON payload containing the current security verdict for the contract (honeypot status, buy/sell tax, dangerous functions, trust-list flag, proxy info, source verification) and a structured diff listing exactly what changed since the last time this contract was checked — including owner changes, proxy implementation swaps, admin changes, Sourcify verification gains/losses, honeypot or tax flips, new dangerous function appearances, and verdict escalations. Results are Ed25519-signed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "input": {
   "type": "string",
   "description": "SYNTHORA contractwatch: verdict de seguridad de contrato on-chain que SI lee el bytecode (eth_getCode) y slots de proxy (EIP-1967/zeppelinos/UUPS/beacon), owner() y privilegios ocultos: honeypot, rug-"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "schema": {
  "type": "object",
  "required": [
   "ok",
   "niche"
  ],
  "properties": {
   "ok": {
    "type": "boolean"
   },
   "error": {
    "type": "string"
   },
   "niche": {
    "type": "string"
   },
   "result": {
    "type": "object",
    "properties": {
     "chain": {
      "type": "string"
     },
     "flags": {
      "type": "array"
     },
     "owner": {
      "type": "string"
     },
     "proxy": {
      "type": "boolean"
     },
     "address": {
      "type": "string"
     },
     "changed": {
      "type": "boolean"
     },
     "changes": {
      "type": "array"
     },
     "verdict": {
      "type": "string"
     },
     "verified": {
      "type": "boolean"
     },
     "rationale": {
      "type": "string"
     },
     "proxy_standard": {
      "type": "string"
     }
    }
   },
   "receipt": {
    "type": "object"
   }
  }
 },
 "example": {
  "ok": true,
  "niche": "contract_guard",
  "result": {
   "chain": "base",
   "flags": [
    "código NO verificado en Sourcify",
    "PROXY actualizable (zeppelinos) — el admin/owner puede cambiar la lógica (impl 0x2Ce6311d…)",
    "..."
   ],
   "owner": "0x3ABd6f64A422225E61E435baE41db12096106df7",
   "proxy": true,
   "address": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
   "verdict": "medium",
   "verified": false,
   "rationale": "SIN verificar. Proxy actualizable (zeppelinos: riesgo de cambio de lógica). Tiene owner/control centralizado.",
   "disclaimer": "No es consejo financiero. Análisis automatizado de seguridad on-chain con procedencia firmada.",
   "proxy_standard": "zeppelinos"
  },
  "provenance": "<3 fuentes independientes>"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/contractwatch-continuous-smart-contract-security-monitor-dd1d34e0/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from contractwatch.hergertsynthora.com](https://www.zero.xyz/host/contractwatch.hergertsynthora.com/llms.txt)