Contract risk · updated

Owner privileges explained: mint, pause, blacklist

The contract powers that decide whether your position is really yours.

In short

  • Each privilege is a specific, checkable capability — not a vague governance concern.
  • Who holds the key matters as much as which keys exist.
  • A privilege that exists but is unused today is still a live exposure.

The powers, one at a time

Mint creates new tokens. Unlimited minting means your share of supply can be diluted at will, and in the extreme it means the supply figure you based a valuation on is not a fact about the token.

Pause stops transfers. A pause switch means trading can be halted, and a halt during a fall is indistinguishable from a lock-in.

Blacklist and whitelist gate individual addresses. A blacklist can single out a holder and prevent that specific address from selling, which is a honeypot targeted at one person rather than at everybody.

Tax setters change the buy or sell tax after launch. The tax value observed at scan time matters far less than whether it can be changed, because a changeable tax can be raised to a confiscatory level at any moment.

Ownership-regain routes let a renounce be undone. Where one is detectable it is reported, because a reversible renounce presented as permanent buys trust it has not earned.

Who holds the key

A privilege is only as dangerous as the process required to use it. A single externally-owned account can act in one transaction with no warning and no second opinion. A multisig needs several signers to agree. A timelock has to announce a change and wait before it can execute, which gives holders time to react.

The owner's account type is reported alongside the privileges for this reason. The same list of powers held by a timelock and by an anonymous single key are two different risk profiles, and collapsing them into one 'has owner privileges' flag would lose the part that matters.

Unused is not absent

A power that exists and has never been used is still a power. Reports describe what the deployed code permits, not what has happened so far, because the history of a contract is not a constraint on its future.

The reasonable response is proportionate rather than absolute. Plenty of legitimate projects retain administrative functions for genuine operational reasons. The question is whether the powers, the key holder and the stated purpose are consistent with one another.

Run this check

Honeypot checker

A honeypot is a token you can buy and cannot sell. ScanZX tests the sell side directly — it simulates a sell path read-only against the chain's main router — and then reports the contract powers that could block a sell later even when today's simulation succeeds. Both halves matter: a passing simulation is a statement about right now, not a promise about after you buy.

Keep reading

This guide is educational. Cryptoassets are high risk and you could lose all money used to buy them. ScanZX reports observed warning signs and data gaps — it never certifies that a token is safe. Nothing here is financial advice or a recommendation to buy or sell.