What each tool reads, and what it does not, according to its own pages, read on 2026-10-12. No ranking: a tool that reads less can fit a question better. 17 neighbours and this one, in two groups: the tools whose pages state that they read administration rights of contracts, and the tools on neighbouring subjects.
| Tool | Subject | Reads | Does not read | Chains | Activity seen |
|---|---|---|---|---|---|
| Authority Risk Oracle (this site) | Who can change a contract, how many of them, how fast (administration rights) | Admin key, multisig threshold and signers, timelock delay, price-feed authority and shared control, for 197 contracts, scored 0 to 100 and published as files, one page per contract and a score a contract can read on-chain. | Off-chain operations, code quality, the identity of any signer. The score contracts run on testnets. | 8 EVM chains and Solana (an account read) | Watch run every 6 hours (signed). |
| SolGov | Administration rights of Solana programs and multisigs | Solana state: multisigs with thresholds and members, timelocks, upgrade authorities, config authorities, signer activity, freeze and mint authority changes on SPL tokens, queued upgrades, durable nonces, Token-2022 extensions. README figures: 50+ protocols, 63 multisigs, 183 programs. | Off-chain governance is not monitored (README). | Solana only | A changelog with entries in September 2026; MIT licence. |
| Hindenrank | Protocol grades A to F that include administration rights | Grades 711+ protocols from A to F across 8 dimensions; its pages describe admin keys, multisig configurations, timelock delays, emergency upgrade powers, validator concentration and oracle dependencies. | Per its page: individual wallet holdings and private keys, real-time prices (uses TVL snapshots), votes in progress, off-chain operations beyond public disclosures. | Ethereum, Solana, BNB Chain, Arbitrum, Optimism, Polygon, Avalanche, Base and others | Content refers to incidents through July 2026; no update date seen. |
| GoPlus Security (token security API) | Token security flags, including the owner address | For a token: owner_address, whether a previous owner can take ownership back, hidden owner, whether the owner can change balances, creator address. | The documentation has no field that separates a plain key from a multisig or another contract owner (a free-text note sometimes says "multisign"); it does not say whether timelocks are read. | Not stated on the page read. | Not seen. |
| Forta Risk Graph | Control closure and dependency concentration of tokenized assets | An AI-agent skill that queries the Forta Risk Graph MCP server about dependency concentration, control closure (contracts and admin keys that can cause user loss) and blast radius, over vaults, wallets, Safes, tokens, admin keys, oracles, lending markets, custody and bridge infrastructure. Reads are OAuth-gated. | Per its README: positions on any chain other than Ethereum mainnet, escrowed collateral; an empty answer means unknown, not zero. | Ethereum mainnet only (README) | MIT licence; no dates shown on the page read. |
| Hermes | Upgrade authorities on Base and Ethereum | A Rust binary that reads ERC-1967 storage slots and calls interface functions to trace upgrade authority through admin-controlled proxies, beacon proxies and UUPS proxies, and classifies the holder: plain key (including EIP-7702), Safe (owners, threshold), timelock (minimum delay), AccessControl role holder, ERC-4337 account. Discovers proxies from events, keeps history by block, computes blast radius, checks a policy file. | Per its README: no vulnerability audit, no prediction of an upgrade, non-standard upgrade mechanisms are not identified, walks stop after four links or a cycle, some AccessControl roles may be unindexed, the address sample comes from discovered proxies, not a full census. | Base (primary) and Ethereum (README) | README status dated 2026-09-29; progress log entry 2026-10-07; MIT licence. |
| RugHawk | Solana token forensics, including mint and freeze authority | Its home page lists an authority audit (mint and freeze authority, mutable metadata, Token-2022 permanent delegate, transfer hooks, fee changes, default-frozen, pausable), launch forensics, deployer wallet age and funding trails, holder classification, and site and logo analysis for drainer lures. | Not stated; the page lists no exclusions and carries the notices "Not financial advice" and "A low score is not a guarantee". | Solana. Tariffs listed: free 25 scans a day; $19 a month Pro; $99 a month API. | Not seen; the page cites a study of September 2026. |
| Tool | Subject | Reads | Does not read | Chains | Activity seen |
|---|---|---|---|---|---|
| DeFiScan | Protocol centralization and maturity reviews | Protocol centralization and maturity reviews written as markdown files, from a published methodology; names L2BEAT and DefiLlama as inputs. | Not stated on the pages read. | Not stated on the pages read. | The Collective's page says the work was discontinued, covering 2024 to July 2026, and that the framework and code remain public (the repository is labelled MIT). |
| Eagle Virtual (Eagle Eye) | Stablecoin freezes and blacklists | Stablecoin freeze, blacklist and seizure events with evidence: the site states 76,626 events for 107 coins from 63 issuers. | Not stated; admin keys, owners, multisigs and timelocks of the token contracts are not mentioned. | 41 chains (site figure) | Site states data as of 11 October 2026. |
| FreezeWatch | USDC and USDT freezes | Freeze and unfreeze events and blacklist status for USDC and USDT wallets, with a lookup by address. | No other stablecoin, no other asset; no authority of any contract. | Ethereum mainnet (interface header) | Unfreeze events shown a day before the snapshot. |
| Hypernative | Transaction and threat monitoring; lists ownership transfers, signer changes and admin key changes among its detections | Real-time on-chain and off-chain monitoring with automated response; the page lists detections for governance proposals, ownership transfers, signer changes, admin key changes, bridge imbalances, collateral health and stablecoin pegs. With Safe Shield, checks Safe transactions against policies and simulates their outcome. | Not stated; the pages read list no exclusions. | "70+ chains" (homepage); none named on the pages read | A blog post dated 20 November 2025 appears in search results; no date on the product pages read. |
| Blockaid | Transaction, address, token and dApp scanning | Scans transactions, addresses, tokens and dApps with machine learning on bytecode and activity patterns; products listed: end-user protection, on-chain monitoring, fraud prevention, cosigner, risk exposure. | Not stated; the pages read do not mention admin keys, owners, multisigs, timelocks or upgrade authority. | Ethereum, Base, Optimism, Polygon, Avalanche, Solana (homepage) | Homepage refers to posts from September 2026. |
| Gauntlet | Market risk and vault curation | Quantitative risk models for DeFi protocols (market risk, collateral), yield vaults and applied research. | Not stated; the homepage does not mention admin keys, upgrade authorities or owner addresses. | Ethereum, Base, Optimism, Arbitrum, Morph (homepage) | Not seen. |
| Chaos Labs | Risk parameter recommendations for lending protocols | A post of 26 November 2024 describes risk parameter recommendations (borrow rate parameters) applied to Aave through an injector contract; the current homepage text describes visibility into AI workflows. | Not stated; neither page discusses admin keys, multisig controls or ownership structures. | Ethereum (Aave v3 Lido instance, post); homepage: Not stated | Post dated 26 November 2024; homepage date not seen. |
| LlamaRisk | Market and collateral risk, advisory and research | Risk intelligence on market conditions, asset and wallet exposure, liquidations and oracle performance; advisory, research and a three-part suite (valuation, verification, enforcement). | Not stated; the homepage does not mention admin keys, owners, multisigs, timelocks or upgrade authorities. | Not stated | Not seen; footer shows 2026. |
| DeFiSafety | Process-quality ratings that include documented admin controls | Reviews six sections (smart contracts and team, documentation, testing, security, admin controls, oracle); the admin controls section rates how a protocol documents and discloses its special admin access. | Per its review page: no code audit, no developer funding accepted; scores measure adherence to practices and transparency, not code security alone. | Not stated | Not seen. |
| SECONDED | Pre-action checks for AI agents, answered by two AI models and paid per check | Sends each query to two AI models and returns a signed receipt when they agree. The products page lists 12 checks (trade, token, stock token, agent registry, address screening against OFAC lists, cross-chain compare, Morpho lending status and liquidation risk, escrow payout terms, x402 payment offers, bridge route, shielded route, scam). Its home page says the token check covers honeypots, sell taxes, impersonators and "admin key risks"; no page gives detail on what that covers. | Not stated. The products and pricing pages and the repository README name no check titled "Vault: who controls this vault, any pending changes?", which a builder update on the Colosseum Arena describes; none of the pages read says that a vault's keys, owner, multisig, timelock or pending changes are read. | Base, Arc, Robinhood Chain. Prices from $0.10 per check; $0.25 for trade, agent registry, lending, agent work payout and shielded route. | Latest commit stated in its README: 2026-10-06; the organisation's repositories show 2026-10-07. |
| ChainWard Attest | Address behaviour flags attested on Base | Per docs/ATTEST.md in its repository: ERC-20 transfer history over about 30-day windows, USDC flows and funding trails, x402 settlement records, wallet funding sources up to 4 hops; the site also lists OFAC sanctions matches. A report is a list of flags, each tied to the transactions behind it, "never a safety verdict". Reports with at least one flag from observed activity are attested with EAS on Base. | Per docs/ATTEST.md: contract owner or upgradeability status, and off-chain data. | Base (attestations); BNB Chain for risk checks; any EVM chain for OFAC screening. x402 paid check: 0.05 USDC per address. | Repository pushed 2026-10-12. |
Read from each tool's own pages on the date above by an automated reader and not checked with the tools' authors. A reading may be out of date or wrong: corrections are welcome and logged. To correct a row, open an issue with the source.
Not an audit, not investment advice. Back to the dashboard.