# defi.hugen.tokyo NFT Contract Security Audit

> defi.hugen.tokyo NFT Contract Security Audit is a paid API for AI agents from defi.hugen.tokyo, paid per call via x402, $0.010000/call, status unknown (last checked 2026-09-13).

Analyzes an NFT smart contract (ERC-721 or ERC-1155) for security vulnerabilities including privileged minting/burning, proxy upgradability, restricted approvals, self-destruct risks, and hidden transfer fees

## Facts

- Endpoint: GET https://defi.hugen.tokyo/defi/nft
- Price: $0.010000/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/defi-hugen-tokyo-dcbd9b73
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_XVsggdmVQRCNCNTz4WZfq

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability defi-hugen-tokyo-dcbd9b73
```

Example prompt: Can you run a security audit on this NFT contract at 0xBC4CA0EdA7647A8aB7C2061c2E118A18a936f13D on Ethereum — I want to know if it has privileged minting, hidden transfer fees, proxy upgradability, or any self-destruct risks?

## When to prefer this

Use this endpoint when you need a fast, automated security pre-check on an NFT contract before minting, purchasing, or integrating it — especially to catch hidden fees, admin backdoors, or upgrade traps. Prefer this over general dApp audits when the specific target is an NFT contract (ERC-721 or ERC-1155) and you need granular NFT-specific risk signals rather than a broad protocol-level review.

## Known failure modes

- Invalid or non-existent contract address returns an error
- Contract on unsupported chain cannot be analyzed
- Non-NFT contract address (e.g. ERC-20) may return irrelevant or empty results
- Network timeout if the target chain RPC is slow
- Payment failure if USDC balance is insufficient

## How this service works

NFT contract security audit — detect privileged minting/burning, proxy upgradability, restricted approval mechanisms, self-destruct risks, and hidden transfer fees. Covers ERC-721 and ERC-1155 on any EVM chain. No API keys needed. Accepts USDC payments on Base and Solana

## Output

A structured security report for the given NFT contract covering: whether privileged minting or burning is possible, proxy upgradability status, restricted approval mechanisms, self-destruct vulnerability presence, and hidden transfer fee detection — across ERC-721 and ERC-1155 standards on any EVM chain

## Request schema (JSON Schema)

```json
{
 "properties": {
  "input": {
   "required": [
    "method"
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/defi-hugen-tokyo-dcbd9b73/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from defi.hugen.tokyo](https://www.zero.xyz/host/defi.hugen.tokyo/llms.txt)