Is Shib Pass safe?
Red flag
0xb981cbb408cecd9d8a3a69b1012d4127ccd2c369
- Verdict
- Red flag
- Type
- free mint Agent ID
- Mints seen
- 438
- Paid sales seen
- 0
- First seen
- 09 Nov 2026, 16:06 UTC
- Checked
- 10 Nov 2026, 17:20 UTC
Findings
- A hard-coded address keeps special rights over setBaseURI(), even after the owner renounces.
- A hard-coded address can move funds through withdraw(), even after the owner renounces.
Privileged functions
Functions in the verified source that only some addresses may call.
setBaseURI() withdraw()
What to do
Do not send funds until you have read the source yourself. If there is no verified source, nobody can tell what this contract does.
Read it yourself
BscScan · Sourcify source · JSON for agents
Automatic reading of the verified source, not an audit. Red = unverified, upgradeable proxy, or a hard-coded address that can move funds.