DeFi and tokens

A token contract: which owner rights should worry you

Updated 3 min read

In short

  • A token is a contract, and the contract owner can have more power over your tokens than you do.
  • An upgradeable proxy means the code you checked today can be replaced tomorrow.
  • Owner rights are not fraud by themselves. What matters is who the owner is, why they need the rights and what they stand to lose.

Rights to look at

  • mint — issuing new tokens. The owner can print any amount and sell it into the pool, crashing the price.
  • blacklist / freeze — banning transfers for chosen addresses.
  • pause — stopping all transfers.
  • setFee / setTax — changing the transfer or sell fee, up to 100 %, see honeypot tokens.
  • an upgradeable proxy — the token address is permanent, but the logic behind it changes at the administrator’s will.

When it is normal and when it is alarming

Large stablecoins have many of these rights. For example, the USDT issuer can freeze addresses at the request of law enforcement, see if USDT is blocked. This is a known, public risk backed by a company with a reputation and obligations.

On a new token with no team, website or history, the same rights mean something else: one anonymous person can take your money at any moment.

How to check

  1. Paste the contract address into GuardPay /check: you will see who issued the token and whether the contract and creator carry risk labels.
  2. See whether the owner renounced rights (the owner is the zero address) or handed them to a multisig and timelock.
  3. If the contract is a proxy, find out who the administrator is and whether there is a delay before an upgrade.
  4. If the token poses as a well-known one, compare the address with the official one, see fake USDT.

What a holder should do

  • Do not give contracts with such rights open-ended approvals on your USDT, see approvals in DeFi.
  • Keep only the amount you are ready to lose in risky tokens.
  • Watch the project’s announcements about contract upgrades: a proxy upgrade is a moment of higher risk.

Check an address for free

Trust score, risk labels, links to known scam addresses, fake tokens and granted approvals — in a minute, with no signature and no wallet connection.

Check an address

FAQ

If the owner “renounced rights”, is the token safe?

Safer, but not completely. Check that the renouncement is real and that there is no proxy administrator or second address with rights. A trap can also hide in immutable code.

Why can USDT freeze addresses, and is that normal?

The issuer publicly declares this right and uses it at law enforcement’s request. The risk is known in advance and backed by a company with obligations, not an anonymous owner.

This guide explains how schemes work and how to protect yourself. It is not legal or financial advice.

Read next