A token contract can give its owner powers far beyond what a normal coin has. We check for the ones that matter:
- Hidden owner: the contract says ownership was given up, but a backdoor still lets someone control it.
- Can take back ownership: "renounced" today, reclaimed tomorrow.
- Owner can change balances: the owner can edit how many tokens you hold. Yes, really.
- Self-destruct: the contract can be deleted, taking every balance with it.
- Upgradeable proxy: the code can be swapped for different code later. Fine for big, audited projects; dangerous for an anonymous launch.
- External calls: the contract calls other contracts during trades, so its behavior can change without the code changing.
Renounced ownership
When an owner renounces, owner-only powers can no longer be used. We downgrade pause, blacklist and tax-change flags to "low" when ownership is renounced, because the switch exists but nobody can flip it.
The question to askIf the creator decided to take everyone's money tonight, could the code let them? If yes, the only thing protecting you is their good will.