Coinbase Wrapped Staked ETH cbETH

Ethereum · 0xbe9895146f7af43049ca1c1ae358b0541ea49704

Scan summary

7 verified controls require attention No overall score - Not enough verified information for a score · 13 required checks unavailable
Verified controls7
Checks completed27
Checks unavailable13
Evidence updated06 Aug 2026, 10:33 UTC

VetMyToken provides automated technical and market observations from public data. It does not guarantee that a token is safe or fraudulent and is not financial advice.

What this scan established

Token identified

Coinbase Wrapped Staked ETH (cbETH) was identified on Ethereum at the exact address shown below.

7 verified controls found

These controls are backed by the finalized evidence listed in this report.

Market activity observed

Market and liquidity data is shown separately and never reduces contract risk.

Holder preview available

A bounded preview contains 10 addresses; classifications may be incomplete.

Multi-dimensional assessment

Administrative control6 verified controls
Upgradeability3 verified controls
Supply control1 verified control
Transfer control2 verified controls
Trading observationsHistorical or simulated paths limited
Holder concentrationBounded preview
Liquidity conditionMarket observation available
Source verificationThis check is not available yet
Historical coverageVerified observations available
Evidence confidencePartial verification

Key controls and risks

An administrator can block selected addresses from transferring tokens.

A blacklist authority may be able to prevent selected addresses from transferring tokens.

Current verified control · evidence confidence: finalized deterministic observation.

An administrator still controls the legacy upgradeable proxy.

An upgrade or administrator authority may be able to change the contract behaviour after this scan.

Current verified control · evidence confidence: finalized deterministic observation.

An administrator controls who can create additional tokens.

An active supply authority may be able to create additional tokens or change supply-related conditions.

Current verified control · evidence confidence: finalized deterministic observation.

An administrator can pause token transfers.

An active pause or freeze authority may be able to stop some token transfers.

Current verified control · evidence confidence: finalized deterministic observation.

The contract can be changed through a legacy upgradeable proxy.

An upgrade or administrator authority may be able to change the contract behaviour after this scan.

Current verified control · evidence confidence: finalized deterministic observation.

The detected implementation exposes a current owner.

An upgrade or administrator authority may be able to change the contract behaviour after this scan.

Current verified control · evidence confidence: finalized deterministic observation.

A standard owner address is currently set.

A privileged account still controls part of the token's behaviour; review who controls that account.

Current verified control · evidence confidence: finalized deterministic observation.

Authorities and administrators

AuthorityStateCurrent value
ERC-1967 administratorNot detected by the supported checks{"address": null, "zero_address": true}
Legacy ZeppelinOS administratorVerified0xded1f5e7fb71c1740aebc09b6b0a5e24b0cb71d1
Beacon ownerNot detected by the supported checks{"address": null, "beacon": null}
Implementation ownerVerified0x0000000000000000000000000000000000000001
Implementation administratorNot detected by the supported checks{"address": null, "zero_address": true}
Circle FiatToken pauserVerified0x46574f57f3f5dfccd296f80407b3f4778414f8f5
Circle FiatToken blacklisterVerified0xbe3c68821d585cf1552214897a1c091014b1eb0a
Circle FiatToken master minterVerified0xd0f73e06e7b88c8e1da291bb744c4eebaf9af59f
Standard ownerVerified0xd0f9b590eae80815b81be857a21f69d07453560e
Ownable2Step pending ownerCould not verifyUnavailable
Enumerable standard rolesCould not verify{"absence_of_custom_roles_proven": false, "enumerable": null, "roles": []}

Checks completed

Not detected means the behaviour was not found within VetMyToken's supported checks. It does not prove the behaviour is impossible.

CheckResultObserved value
Finalized chain contextVerified{"block_hash": "0x19fc8b582758d2df5b0d76e927d05ec0533df0c59215d5bfa44ecde366a6af36", "block_number": 25695257}
Runtime bytecodeVerifiedContract code: yes; size: 1852 bytes; SHA-256: 76bcd86b160a3cd8740d07c985eedc4c3b044c0fb9123c8f90f49ac17185fba8
Metadata-stripped bytecodeVerifiedSHA-256: c47922617e5a15a7ecad02ee78fb8e956993e6d86c983ba37a9d36ada833601f; size: 1799 bytes
Runtime Opcode SignalsVerified{"limitations": "Opcode presence does not prove reachability, authorization, or contract behaviour.", "opcode_counts": {"call": 1, "callcode": 1, "create": 0, "create2": 0, "delegatecall": 1, "selfdestruct": 0, "staticcall": 0}}
Exact bytecode matchesVerified3 exact match(es)
ERC-1967 implementationNot detected by the supported checks{"address": null, "zero_address": true}
ERC-1967 administratorNot detected by the supported checks{"address": null, "zero_address": true}
ERC-1967 beaconNot detected by the supported checks{"address": null, "zero_address": true}
Beacon implementationNot detected by the supported checks{"address": null, "beacon": null}
Beacon ownerNot detected by the supported checks{"address": null, "beacon": null}
Implementation runtime bytecodeVerifiedContract code: yes; size: 22677 bytes; SHA-256: 9bb45eb15fad4e5692fe5cabf8fa08c0e356940422a9ae1bb9992abb23fd7c58
Nested ERC-1967 implementationNot detected by the supported checks{"address": null, "zero_address": true}
Implementation administratorNot detected by the supported checks{"address": null, "zero_address": true}
Implementation beaconNot detected by the supported checks{"address": null, "zero_address": true}
Circle FiatToken paused stateVerifiedNo
ERC-1167 minimal proxyNot detected by the supported checks{"implementation": null}
Token nameVerifiedCoinbase Wrapped Staked ETH
Token symbolVerifiedcbETH
Token decimalsVerified18
Total supplyVerified393750601365061869784889

What could not be verified

CheckPublic stateWhy it is limited
Source verificationThis check is not available yetNo self-hosted Sourcify instance is configured.
ERC-1822 proxiable implementation signalCould not verifyUnavailable
EIP-2535 facet addressesCould not verifyUnavailable
Ownable2Step pending ownerCould not verifyUnavailable
Enumerable standard rolesCould not verify{"absence_of_custom_roles_proven": false, "enumerable": null, "roles": []}
Ownership historySome checks could not be completedEvent history adapter not enabled.
Enumerable rolesSome checks could not be completedOnly DEFAULT_ADMIN_ROLE, MINTER_ROLE and PAUSER_ROLE are bounded after positive IAccessControlEnumerable evidence; custom and non-enumerable roles remain unknown.
Supply-change historySome checks could not be completedCanonical event indexing is not complete.
Holder concentrationSome checks could not be completedHolder coverage incomplete - concentration conclusion withheld.
Holder reconciliationSome checks could not be completedCanonical Transfer-event reconstruction is not complete.
Liquidity controlSome checks could not be completedNo tested block-pinned DEX/locker adapter is enabled.
LP distributionSome checks could not be completedNo tested block-pinned DEX LP adapter is enabled.
Locker verificationSome checks could not be completedNo locker adapter has verified contract, amount, beneficiary, identifier and unlock time.
Deep analysis incomplete

Basic checks never wait for source compilation, static analysis, historical reconstruction or simulation. Cached deeper evidence appears automatically when the bounded worker completes it.

Market and liquidity

Price, liquidity and volume are venue-reported observations and can change rapidly. They are separate from contract-risk evidence.

$2,174.99 +2.14% (24h)
Reference-pool liquidity$681,597 · paired with WETH
24h volume$9,471
24h activity5 buys / 22 sells
Pool coverage7 pair(s) returned · selected reference pool only
SourceExisting external market feed · Venue reported
Observed06 Aug 2026, 10:33 UTC

Holder and supply intelligence

Total supply393750.601365061869784889
Visible holder count55010
MintabilityCould not verify nonstandard minting paths
Holder coverageBounded top-address preview
AddressReported shareClassification
0x3154cf16ccdb4c6d922629664174b904d80f2c3518.18% Contract
0x51dd50f9bdfebd6ce8b96f41763e805f12f1acd43.83% Unclassified address
0xd253bed96c6610c2351fb260a71eda0dadcfb5bc2.50% Unclassified address
0xfdf84b1ee4b35d76a24da33bf5cfb0194192e5311.99% Unclassified address
0xdb9348836288a665e7aab62328f64c22a927593c1.99% Unclassified address
0xce7c8db05f630a9bf7e161037b6897849d05e44b1.99% Unclassified address
0xc15203ff0092bae4c9790f918e9f4c9702dc80ee1.99% Unclassified address
0xb9c08649deaa2eb318b0b66178f41612dccf31411.99% Unclassified address
0xabd92152d2b7c2b43259b213dc5784fe3cd1db841.99% Unclassified address
0x90a0f023090dabdae28ad5f0e17dc15913aa48da1.99% Unclassified address

Address classifications may be incomplete. Contract, exchange, bridge and treasury addresses can affect apparent concentration.

Liquidity ownership

AddressReported LP shareThird-party lock flag
0x1a6ea3a36087fef4d56ebc9e11bf1b0a3a6a743752.10%Not reported locked
0xed65f556f971d36cf168d0edd1e183a052b32c6c24.62%Not reported locked
0x76809deb9333b256398f04e9b06759d3f55944cb19.08%Not reported locked
0xc59f6e94bd0254f7c2c333a13c01762c723a412e2.67%Not reported locked
0xcf08d48b3e9fcad7ebc81358da8796ee6793b9b01.03%Not reported locked
0x89c84ac9121550a5d73a65989835f55ed06815d00.16%Not reported locked
0x13f4dc963ddd2ec0160f6473c69b704b0e8674fc0.14%Not reported locked
0x6a7965e980282511ada141524290e7722414f4510.12%Not reported locked
0x7c476cc13932492c6e7384d7d3907eb4187348c90.08%Not reported locked
0x5f98c5ace8efe4063658a46143864184528084570.00%Not reported locked

Trading and transfer behaviour

Path or controlCurrent evidence state
Ordinary transferCould not test
TransferFromCould not test
Buy pathCould not test
Sell pathCould not test
Pair-to-user pathCould not test
User-to-pair pathCould not test
Buy taxCould not verify
Sell taxCould not verify
Maximum transactionNot supported
Maximum walletNot supported
Cooldown or anti-botNot supported
Fee exemptions or privileged bypassNot supported
Router, pair or external-controller restrictionsNot supported

A successful historical or simulated transaction does not guarantee future transactions will succeed. A reverted simulation does not by itself prove a honeypot; allowance, liquidity, router configuration, historical state or address-specific restrictions may affect the result.

Contract and source intelligence

CheckStateResult
Runtime bytecodeVerifiedContract code: yes; size: 1852 bytes; SHA-256: 76bcd86b160a3cd8740d07c985eedc4c3b044c0fb9123c8f90f49ac17185fba8
Metadata-stripped bytecodeVerifiedSHA-256: c47922617e5a15a7ecad02ee78fb8e956993e6d86c983ba37a9d36ada833601f; size: 1799 bytes
Source verificationThis check is not available yetNo self-hosted Sourcify instance is configured.
Implementation runtime bytecodeVerifiedContract code: yes; size: 22677 bytes; SHA-256: 9bb45eb15fad4e5692fe5cabf8fa08c0e356940422a9ae1bb9992abb23fd7c58

Published source code is not considered self-verified unless VetMyToken reproduces the deployed runtime bytecode. Static findings remain advisory unless runtime matching, reachability, authority and validation pass.

Historical timeline

No verified state change was found between the stored observations.

Stored evidence begins at finalized block 25695257. Earlier changes could not be reconstructed from the available evidence.

Relationship intelligence

RelationshipChainAddressEvidence
Exact runtime-bytecode matchBase0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913Verified
Exact runtime-bytecode matchArbitrum0xaf88d065e77c8cC2239327C5EDb3A432268e5831Verified
Exact runtime-bytecode matchPolygon0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359Verified

Shared ownership, code or infrastructure does not by itself establish fraud or malicious coordination.

Technical details
Finalized context25695257
Provider agreementVerified · 3 provider(s)
Exact completeness62.5%

Block or slot hash: 0x19fc8b582758d2df5b0d76e927d05ec0533df0c59215d5bfa44ecde366a6af36 · rules vmt-control-2.

FindingStateNormalized valueWhy we found this
Finalized chain contextVerified{"block_hash": "0x19fc8b582758d2df5b0d76e927d05ec0533df0c59215d5bfa44ecde366a6af36", "block_number": 25695257}rpc:eth_getBlockByNumber:25695257
Runtime bytecodeVerifiedContract code: yes; size: 1852 bytes; SHA-256: 76bcd86b160a3cd8740d07c985eedc4c3b044c0fb9123c8f90f49ac17185fba8rpc:eth_getCode:25695257:runtime_bytecode
Metadata-stripped bytecodeVerifiedSHA-256: c47922617e5a15a7ecad02ee78fb8e956993e6d86c983ba37a9d36ada833601f; size: 1799 bytessha256:c47922617e5a15a7ecad02ee78fb8e956993e6d86c983ba37a9d36ada833601f
Runtime Opcode SignalsVerified{"limitations": "Opcode presence does not prove reachability, authorization, or contract behaviour.", "opcode_counts": {"call": 1, "callcode": 1, "create": 0, "create2": 0, "delegatecall": 1, "selfdestruct": 0, "staticcall": 0}}rpc:eth_getCode:25695257:opcodes
Exact bytecode matchesVerified3 exact match(es)local:bytecode:c47922617e5a15a7ecad02ee78fb8e956993e6d86c983ba37a9d36ada833601f
Source verificationThis check is not available yetNo self-hosted Sourcify instance is configured.sourcify:self-hosted:not-configured
ERC-1967 implementationNot detected by the supported checks{"address": null, "zero_address": true}rpc:eth_getStorageAt:25695257:erc1967_implementation
ERC-1967 administratorNot detected by the supported checks{"address": null, "zero_address": true}rpc:eth_getStorageAt:25695257:erc1967_administrator
ERC-1967 beaconNot detected by the supported checks{"address": null, "zero_address": true}rpc:eth_getStorageAt:25695257:erc1967_beacon
Legacy ZeppelinOS implementationVerified0x31724ca0c982a31fbb5c57f4217ab585271fc9a5rpc:eth_getStorageAt:25695257:zeppelinos_implementation
Legacy ZeppelinOS administratorVerified0xded1f5e7fb71c1740aebc09b6b0a5e24b0cb71d1rpc:eth_getStorageAt:25695257:zeppelinos_administrator
Beacon implementationNot detected by the supported checks{"address": null, "beacon": null}rpc:eth_call:25695257:erc1967_beacon_implementation
Beacon ownerNot detected by the supported checks{"address": null, "beacon": null}rpc:eth_call:25695257:erc1967_beacon_owner
Implementation runtime bytecodeVerifiedContract code: yes; size: 22677 bytes; SHA-256: 9bb45eb15fad4e5692fe5cabf8fa08c0e356940422a9ae1bb9992abb23fd7c58rpc:eth_getCode:25695257:implementation_runtime_bytecode
Implementation ownerVerified0x0000000000000000000000000000000000000001rpc:eth_call:25695257:implementation_owner
ERC-1822 proxiable implementation signalCould not verifyUnavailablerpc:eth_call:25695257:uups_proxiable_uuid
Nested ERC-1967 implementationNot detected by the supported checks{"address": null, "zero_address": true}rpc:eth_getStorageAt:25695257:nested_implementation
Implementation administratorNot detected by the supported checks{"address": null, "zero_address": true}rpc:eth_getStorageAt:25695257:implementation_administrator
Implementation beaconNot detected by the supported checks{"address": null, "zero_address": true}rpc:eth_getStorageAt:25695257:implementation_beacon
Circle FiatToken pauserVerified0x46574f57f3f5dfccd296f80407b3f4778414f8f5rpc:eth_call:25695257:circle_fiat_token_pauser
Circle FiatToken blacklisterVerified0xbe3c68821d585cf1552214897a1c091014b1eb0arpc:eth_call:25695257:circle_fiat_token_blacklister
Circle FiatToken master minterVerified0xd0f73e06e7b88c8e1da291bb744c4eebaf9af59frpc:eth_call:25695257:circle_fiat_token_master_minter
Circle FiatToken paused stateVerifiedNorpc:eth_call:25695257:circle_fiat_token_paused
EIP-2535 facet addressesCould not verifyUnavailablerpc:eth_call:25695257:eip2535_facets
ERC-1167 minimal proxyNot detected by the supported checks{"implementation": null}rpc:eth_getCode:25695257:erc1167
Standard ownerVerified0xd0f9b590eae80815b81be857a21f69d07453560erpc:eth_call:25695257:standard_owner
Ownable2Step pending ownerCould not verifyUnavailablerpc:eth_call:25695257:ownable2step_pending_owner
Token nameVerifiedCoinbase Wrapped Staked ETHrpc:eth_call:25695257:token_name
Token symbolVerifiedcbETHrpc:eth_call:25695257:token_symbol
Token decimalsVerified18rpc:eth_call:25695257:token_decimals
Total supplyVerified393750601365061869784889rpc:eth_call:25695257:token_total_supply
Enumerable standard rolesCould not verify{"absence_of_custom_roles_proven": false, "enumerable": null, "roles": []}rpc:eth_call:25695257:access-control-enumerable
Ownership historySome checks could not be completedEvent history adapter not enabled.unsupported:ownership_history
Enumerable rolesSome checks could not be completedOnly DEFAULT_ADMIN_ROLE, MINTER_ROLE and PAUSER_ROLE are bounded after positive IAccessControlEnumerable evidence; custom and non-enumerable roles remain unknown.unsupported:enumerable_roles
Supply-change historySome checks could not be completedCanonical event indexing is not complete.unsupported:supply_change_history
Holder concentrationSome checks could not be completedHolder coverage incomplete - concentration conclusion withheld.unsupported:holder_concentration
Holder reconciliationSome checks could not be completedCanonical Transfer-event reconstruction is not complete.unsupported:holder_supply_reconciliation
Liquidity controlSome checks could not be completedNo tested block-pinned DEX/locker adapter is enabled.unsupported:liquidity_control
LP distributionSome checks could not be completedNo tested block-pinned DEX LP adapter is enabled.unsupported:lp_distribution
Locker verificationSome checks could not be completedNo locker adapter has verified contract, amount, beneficiary, identifier and unlock time.unsupported:locker_verification

About Coinbase Wrapped Staked ETH

Coinbase Wrapped Staked ETH (cbETH) is a token on Ethereum. Its main trading pair has existed for 1442 days on uniswap. The selected venue feed reports a price of $2,174.99, $681,597 in liquidity and $9,471 of 24-hour volume across 7 pair(s). An external provider reports roughly 55010 holders; VetMyToken has not reconstructed the complete holder set. An external provider reports published source code; VetMyToken has not independently verified that source. Contract controls, holder coverage, liquidity control and market quality are assessed separately; market activity does not improve or reduce the security-risk assessment.

Exact address0xbe9895146f7af43049ca1c1ae358b0541ea49704
NetworkEthereum
Main observed pair created24 Aug 2022

Community notes