# OneKeyAway DeFi Contract Security Checker

> OneKeyAway DeFi Contract Security Checker is a paid API for AI agents from onekeyaway.appin60.com, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-30).

Checks who controls upgrade, mint, or pause privileges on a DeFi smart contract, classifying the controller as an EOA, 1-of-n Safe, multisig, or timelock.

## Facts

- Endpoint: GET https://onekeyaway.appin60.com/api/safe?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-30
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/onekeyaway-defi-contract-security-checker-b5f10ce1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_m3iBGjVwQlfRXgiyvW-UD

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability onekeyaway-defi-contract-security-checker-b5f10ce1
```

Example prompt: Can you check whether the USDC contract on Base (address 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913, chain 8453) is controlled by a single key or a proper multisig — I want to know if it's one stolen key away from being drained?

## When to prefer this

Choose this endpoint when you need a fast, structured classification of a DeFi smart contract's admin key security posture — specifically whether critical functions (upgrade, mint, pause) are controlled by a single EOA, a Safe multisig, a timelock, or a higher-threshold multisig. It covers 15 major chains and returns a human-readable verdict alongside raw ownership data, making it ideal for pre-investment audits, token listing due diligence, and automated risk monitoring dashboards. Prefer it over general blockchain explorers when you need a direct, opinionated security verdict rather than raw transaction data.

## Known failure modes

- Invalid contract address format returns an error
- Unsupported chain ID returns an error or empty result
- Contract not found on specified chain returns null or error
- Contract has no recognized ownership pattern may return ambiguous verdict
- Network timeout or RPC failure may cause delayed response
- Non-DeFi contracts may return incomplete ownership data

## How this service works

Free check: who can upgrade, mint or pause a smart contract. An EOA, a 1-of-n Safe, a real multisig, or a timelock. Results from 480 DeFi tokens.

## Output

Returns a JSON object with an 'ok' status flag, a 'verdict' string classifying the controller type (e.g. 'MULTISIG 5-of-10', 'EOA', 'TIMELOCK'), and a 'safe' object containing the owner addresses array, signing threshold, guard address, and active modules for the controlling account.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "chain",
      "address"
     ],
     "properties": {
      "chain": {
       "type": "string",
       "example": "8453",
       "description": "Chain id or name: 1, 8453, 42161, 10, 56, 137, 43114, 146, 59144, 81457, 80094, 324, 999, 130, 747474 (or ethereum, base, arbitrum, optimism, bsc, polygon, avalanche, sonic, linea, blast, berachain, zksync, hyperevm, unichain, katana)"
      },
      "address": {
       "type": "string",
       "example": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
       "description": "Contract address (0x + 40 hex)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "safe": {
   "guard": null,
   "owners": [
    "0x..."
   ],
   "modules": [],
   "threshold": 5
  },
  "verdict": "MULTISIG 5-of-10"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/onekeyaway-defi-contract-security-checker-b5f10ce1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from onekeyaway.appin60.com](https://www.zero.xyz/host/onekeyaway.appin60.com/llms.txt)