Notes / Audits and snapshots

Tempo: bridged TIP-20 token scouting, 2026-09-19 (closes METHODOLOGY.md section 7, open point 2)

Audits and snapshots2026-09-19Chain: Tempo

Source: chains/tempo/data/scouted_bridged_tokens_2026-09-19.md in the repository, rendered here without changes. Source file

Phase: maintenance (real deploy already done 2026-09-19, see ../deploy/README.md). Read-only Tempo mainnet (chain id 4217). No transaction, no key, no write. This is the follow-up to the open point left in ../METHODOLOGY.md section 7.2: "other, not-yet-scouted bridged TIP-20 tokens remain open for future scouting."

1. Sources (2 independent registries + 2 independent RPC endpoints)#

No token beyond these 34 exists on Tempo mainnet today: the official registry and the independent block explorer enumerate the identical 34 addresses, so this is treated as the complete set of TIP-20 tokens deployed on-chain, not a sample.

2. Already covered (9 of 34) -- not re-scouted#

USDC.e, USDT0, pathUSD, USDB, cbBTC, PRIME, DLUSD, EURC.e, cUSD (the 9 tokens already in TOKENS in ../scripts/methodology_test.py, live-scored in ../data/scored_targets_2026-09-18-controller-types.md and pushed for real 2026-09-19, see ../deploy/README.md). The open point's own text (METHODOLOGY.md 7.2) undercounted this list as "USDC.e, USDT0, pathUSD, cUSD" -- it was written 2026-09-17 before the 2026-09-18 pass added USDB/cbBTC/PRIME/DLUSD/EURC.e; those 5 are correctly excluded here too, not re-scouted as if new.

3. The other 25, ranked by on-chain totalSupply() (own peg currency, all 6-decimal TIP-20s)#

Holders from the explorer, read 2026-09-19. totalSupply()/decimals() from rpc.tempo.xyz, re-read on tempo-rpc.publicnode.com where noted.

4. Why none of these is added as a new scored target#

The comparison bar is the weakest already-covered independent token, not the strongest: DLUSD at $3.66M supply / 639 holders, or even cUSD at $50,337 supply / 332 holders (the smallest by value, but the smallest by holders too is EURC.e at 21 holders on $1.46M supply -- still a real, broadly-issued Stargate-bridged blue chip). No candidate above clears a comparable bar on both axes at once:

• The two tokens with a comparable dollar figure to cUSD (BRLA $50,100, GBPA $50,001) each sit in essentially one wallet (5 and 1 holders) -- a self-mint, not usage a scorer would be telling anyone anything new about.
• The one token with more holders than several already-covered tokens (senpathUSDE, 77 holders) is not bridged at all, and is a receipt token of an already-scored Morpho Vault V2 target -- scoring it would not surface a new authority surface, it would double-count the Sentora vault's own root control set under a different address.
• stcUSD is the same story one level down: Cap Protocol's own staked wrapper of the already-scored cUSD, same issuer.
• Every other token (20 of the 25) has under $1,120 of supply, several literally 0, and single- digit-to-zero holders -- these read as issuer test/demo mints made against a live mainnet token registry, not deployments with real usage to score.

Conclusion, honestly: nothing new and significant was found. The open point is closed by this negative result, not forced onto a weak target. ../scripts/methodology_test.py's TOKENS dict and ../scorers.py are unchanged this pass; nothing new was pushed to Moderato (no deploy/push_scores.py run without --dry-run); no key was used.

5. Re-check trigger (for whoever picks this open point up again)#

Re-scout when the official token list's version.patch in tokenlist.tempo.xyz/list/4217 increases past 34, or when a re-run of the totalSupply()/holders table above shows one of the 25 tokens above crossing roughly two orders of magnitude past where it sits today (i.e. moving from "hundreds of dollars, single-digit holders" into cUSD/DLUSD territory) -- not on a fixed calendar cadence, since nothing here suggests a schedule would catch a real change any better than the next session that touches this ecosystem checking the same 3 sources again.

Reproducing the reads#

curl -s https://tokenlist.tempo.xyz/list/4217 | python3 -m json.tool   # official registry, 34 tokens
# explore.tempo.xyz/tokens (3 pages) -- rendered page, read via browser tooling, not a JSON API
curl -s -X POST -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"eth_call","params":[{"to":"<TIP-20 address>","data":"0x18160ddd"},"latest"]}' \
  https://rpc.tempo.xyz                                                # totalSupply()
curl -s -X POST -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"eth_call","params":[{"to":"<TIP-20 address>","data":"0x313ce567"},"latest"]}' \
  https://rpc.tempo.xyz                                                # decimals()
curl -s https://stablecoins.llama.fi/stablecoin/<id>                   # DefiLlama cross-check

Not an audit, not investment advice. All notes · Back to the dashboard.