USDC On-Chain Risk Check

USD Coin · Ethereum · 0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48
12 / 18 On-chain Check
Checked 10 Oct 2026. On-chain Check, 18 of the 100-point ChainSift Score — what it covers.

Evidence

Risk factorFindingEvidenceDate
Sellable Yes Transfer simulation 10 Oct 2026
Buy tax 0% Contract 10 Oct 2026
Sell tax 0% Contract 10 Oct 2026
Admin mint Enabled Implementation code 10 Oct 2026
Transfers pausable Enabled Implementation code 10 Oct 2026
Address blacklist Enabled Implementation code 10 Oct 2026
Upgradeable proxy Yes — a single wallet can replace the code Proxy contract 10 Oct 2026
Source verified Yes Block explorer 10 Oct 2026
Top-10 holders 27.6% Holder distribution 10 Oct 2026
Holders 9264015 Token contract 10 Oct 2026

This contract — USDC

Deployed by0x95ba4c…e93911
Code can be replaced by0x807a96…6395d2 — a single wallet
Current code0x435068…4402dd
Holders9,264,015

Largest holders

RankAddressShare
#1 0x37305b…fd7341 9.18%
#2 · contract 0xe1940f…6929b6 3.50%
#3 · contract 0xffa69c…735a5e 3.26%
#4 · contract 0xad354c…329ef5 2.89%
#5 · contract 0x40ec5b…5bbbdf 2.08%

What this means

This automated check found several capabilities built into the contract that give its administrator a significant degree of control over the token. The contract allows the owner to mint new supply, meaning additional tokens can be created and the total supply increased at the administrator's discretion. Transfers can be paused by the owner, which means the ability to move or sell the token can be temporarily switched off for all holders. The contract also supports blacklisting, so specific wallet addresses can be blocked from transacting. Perhaps most significantly, the contract is an upgradeable proxy, which means a single wallet holds the power to replace the underlying contract code entirely — including removing or altering any of the mechanics listed here, for better or worse, at any future point. None of these capabilities were "detected as currently active against a specific wallet" in this check; they were detected as present in the code, meaning they exist as available functions regardless of whether they are currently being used. Top-10 wallets were found to hold 27.6% of the circulating supply, and the contract source code was verified on the block explorer, which allows this kind of review to take place at all.

It's worth being clear about what this check does not cover. This is an automated read of the contract's mechanics as written in code — it does not assess who operates the contract, how that operator has behaved historically, what the token is used for, how it is distributed or marketed, or whether any legal or regulatory structure sits behind it. A contract can score well on this kind of technical check while still carrying risks tied to governance decisions, business practices, or the intentions of whoever controls the admin keys. Conversely, having owner-controlled functions like minting or pausing does not by itself indicate malicious intent — many widely used tokens, including centrally issued stablecoins, are built this way by design.

Before putting money into any token, it's worth looking into who controls the admin and upgrade keys and whether that control sits with a single wallet or a multi-signature arrangement, what the issuer has publicly disclosed about how and when these functions have been used, whether there's independent reporting or audit history covering the contract and its operator, and how concentrated holder wallets are relative to daily trading volume. Reviewing the project's own documentation, any attestations or audits, and independent commentary alongside this check will give a fuller picture than contract mechanics alone can provide.

Team, tokenomics and legal structure are not assessed here — that is the other 82 points of the ChainSift Score. How this check works and what it misses.

Watch this contract

Contracts change after they are checked. Tell us where to reach you and we will say when this one does. Free for three contracts, no account.

We send one confirmation message and nothing else until something changes.

We checked 18 points out of 100.

The other 82 are where money is usually lost: who the team is, where the tokens sit, what the documents actually say, and what the project chose not to put on its front page.

Related guides

Contract data read from GoPlus Security and the Ethereum block explorer. Upgrade rights, the functions of the current code and the trade simulation are read by ChainSift directly from Ethereum — our data source doesn't analyse upgradeable contracts. Scores are calculated by fixed rules from that data — no language model decides them. Last updated 10 Oct 2026. A check describes a contract on the date shown; contracts can be changed afterwards.