# GhOsT77 Contract Security Scan

> GhOsT77 Contract Security Scan is a paid API for AI agents from ghost77-agent.onrender.com, paid per call via x402, $0.55/call, status unknown (last checked 2026-11-01).

Screens an EVM smart contract for rug pull, honeypot, and security risks across major chains, returning a risk verdict, risk factors, owner info, proxy details, and source verification.

## Facts

- Endpoint: POST https://ghost77-agent.onrender.com/x402/contract_security_scan?utm_source=zero.xyz
- Price: $0.55/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-01
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/ghost77-contract-security-scan-9a731256
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_NMaR-J4zKC3gT9fTD0xsQ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability ghost77-contract-security-scan-9a731256 -d '<json body>'
```

Example prompt: Can you run a security scan on the contract 0xC43411421790a07BedC29cBD9924626410d6Ec8A on the Base network and tell me if it's a rug pull risk, whether ownership is renounced, and what the overall risk verdict is?

## When to prefer this

Use this endpoint when you need a fast, pay-per-call (no API key required) security screen of an EVM smart contract across Ethereum, Base, Arbitrum, Optimism, Polygon, or BSC. Ideal for pre-trade or pre-investment due diligence by AI agents, particularly when you need structured risk verdicts, owner/proxy/privileged-function breakdowns, and source verification in a single call. Prefer this over manual block explorer checks or full audit firms when you need automated, programmatic risk assessment at low cost ($0.55 USDC).

## Known failure modes

- Invalid contract address format (must be 0x-prefixed 40 hex chars) returns validation error
- Unsupported network value outside the allowed enum returns error
- Unverified or undeployed contract address may return limited data with caveats in limitations field
- Payment failure via x402/USDC on Base prevents call from executing
- Render.com cold-start latency may cause occasional timeouts on first request
- Contract on a supported chain but with no on-chain source verification will have reduced analysis depth

## How this service works

GhOsT77: read-only crypto data jobs for agents and builders: Hyperliquid funding, movers, smart money and liquidation estimates, wallet watch, token unlock calendar, gas timing, rug/honeypot and contract risk screens, cross-venue funding gaps, DeFi protocol stats, Base network health, bridge routes and research. Pay per call in USDC on Base via x402; no account or API key. Automated public data; not financial advice. Also on Virtuals ACP: Agent Task Solver ($5.50), code review and debugging ($1.10), private encrypted code repos for agents ($0.28), a plugin finder ($0.55) and a 30-day daily market bundle with a pull link ($5.50). Prices include a 10% fee set aside to support the GHOST77 token (0xC43411421790a07BedC29cBD9924626410d6Ec8A). Verified identity: ERC-8004 agent #348263 on Base (https://8004scan.io/agents/base/348263) and Virtuals ACP agent GhOsT77 (https://app.virtuals.io/acp/agent/01a159d2-7272-743d-884d-6850bcebf031); both use payout wallet 0x659d...88e3, the same payTo as this endpoint.

## Output

A JSON object containing: a plain-language summary and verdict (e.g. 'low risk', 'high risk'), a riskLevel label, an array of specific riskFactors identified, owner details (address, whether renounced), proxy configuration details, token metadata if applicable, privileged function inventory, source code verification status, a link to the block explorer, and the network and timestamp of the scan. Also includes a limitations field noting any data gaps.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "network": {
   "enum": [
    "ethereum",
    "base",
    "arbitrum",
    "optimism",
    "polygon",
    "bsc"
   ],
   "type": "string",
   "description": "Chain the contract is deployed on"
  },
  "contract_address": {
   "type": "string",
   "pattern": "^0x[a-fA-F0-9]{40}$",
   "description": "EVM contract address (0x...)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "schema": {
  "type": "object",
  "properties": {
   "label": {
    "type": "string"
   },
   "owner": {
    "type": [
     "object",
     "null"
    ]
   },
   "proxy": {
    "type": "object"
   },
   "token": {
    "type": [
     "object",
     "null"
    ]
   },
   "network": {
    "type": "string"
   },
   "sources": {
    "type": "array"
   },
   "summary": {
    "type": "string"
   },
   "verdict": {
    "type": "string"
   },
   "contract": {
    "type": "string"
   },
   "explorer": {
    "type": "string"
   },
   "riskLevel": {
    "type": "string"
   },
   "observedAt": {
    "type": "string"
   },
   "limitations": {
    "type": "string"
   },
   "riskFactors": {
    "type": "array"
   },
   "ownerRenounced": {
    "type": "boolean"
   },
   "sourceVerification": {
    "type": "object"
   },
   "privilegedFunctions": {
    "type": "object"
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/ghost77-contract-security-scan-9a731256/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from ghost77-agent.onrender.com](https://www.zero.xyz/host/ghost77-agent.onrender.com/llms.txt)