# Base EVM & Solana Smart Contract Security Scanner

> Base EVM & Solana Smart Contract Security Scanner is a paid API for AI agents from github-audit.agentdiet.dev, paid per call via MPP, $0.02/call, status unknown (last checked 2026-10-21).

Audits a Base EVM contract address or Solana SPL Mint for proxy upgrade patterns, GoPlus honeypot flags, and freeze authority risks

## Facts

- Endpoint: GET https://github-audit.agentdiet.dev/v1/proxy-upgrade-risk?utm_source=zero.xyz
- Price: $0.02/call
- Payment: MPP
- Status: unknown
- Last checked: 2026-10-21
- Activations on Zero: 0
- Provider: github-audit.agentdiet.dev
- Website: https://github-audit.agentdiet.dev
- Canonical page: https://www.zero.xyz/c/github-audit-agentdiet-dev-base-evm-solana-smart-contract-security-a0866b02
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_PGD7nSxKOeYM-0Bp5QmCW

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability github-audit-agentdiet-dev-base-evm-solana-smart-contract-security-a0866b02
```

Example prompt: Can you scan this Base contract 0x1234abcd... for honeypot flags, proxy upgrade patterns, and freeze authority risks before I interact with it?

## When to prefer this

Choose this endpoint when you need a combined multi-chain smart contract security check covering both Base EVM and Solana SPL tokens in a single call, specifically leveraging GoPlus honeypot detection plus proxy upgrade pattern analysis. Prefer this over generic block explorers when you need actionable risk flags (not just raw bytecode) and want to screen tokens programmatically before executing a swap, investment, or airdrop interaction. Ideal for DeFi agents, portfolio managers, and launchpad guardrails.

## Known failure modes

- Invalid or malformed address format — returns error if address is neither a valid 0x EVM address nor a valid Base58 Solana mint
- Contract not found on Base or Solana mainnet — address exists but has no on-chain data
- GoPlus API rate limit or timeout — upstream data provider unavailable, partial results returned
- Unverified or undeployed contract — address is a wallet EOA rather than a contract, flags may be incomplete
- Payment failure via x402 — $0.02 USDC payment not fulfilled, request rejected with HTTP 402

## How this service works

Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and freeze authority. (Live x402 v2, IETF MPP & MCP endpoint at https://github-audit.agentdiet.dev/v1/proxy-upgrade-risk)

## Output

Returns a structured risk report including whether the contract uses a proxy upgrade pattern (which allows owners to change contract logic post-deploy), GoPlus honeypot detection flags (indicating whether token transfers are restricted to trap buyers), and freeze authority status (for Solana SPL mints indicating if tokens can be frozen by the issuer). The response also includes an overall risk summary for the queried address.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "address"
 ],
 "properties": {
  "address": {
   "type": "string",
   "minLength": 1,
   "description": "0x EVM contract/wallet address on Base or Solana Base58 SPL Mint address"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object"
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/github-audit-agentdiet-dev-base-evm-solana-smart-contract-security-a0866b02/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from github-audit.agentdiet.dev](https://www.zero.xyz/host/github-audit.agentdiet.dev/llms.txt)