# EVM Token Security Snapshot (ARION service)

Given an ERC-20 contract address, produce a markdown security snapshot:
GoPlus contract flags (honeypot, mintable, proxy, hidden owner,
selfdestruct, balance-change, ownership-retake) plus DexScreener market
data (liquidity, price, FDV, pair count, 24h volume/txns, pair age).

**Honest scope:** public API screening signals + market data. This is a
snapshot, **not** a contract audit — byte-level review needs source
analysis, and screening APIs can lag or miss. Treat HIGH flags as
"investigate before touching", not as proof of malice; treat all-OK as
"nothing flagged by these feeds", not "safe".

## Coverage

- 11 chains: ethereum, bsc, polygon, arbitrum, optimism, base, avalanche,
  fantom, cronos, zksync (+ any chain GoPlus ids share).
- Chain auto-detect from DexScreener pairs (highest-liquidity supported
  pair wins), or pass the chain explicitly.
- GoPlus flag checks: `is_honeypot`, `is_mintable`, `hidden_owner`,
  `can_take_back_ownership`, `selfdestruct`, `owner_change_balance`
  (HIGH); `is_proxy` (WARN); `is_open_source`, `is_in_dex`,
  holder-count and liquidity notes (INFO/OK).
- Market block: pair count + top pair, price, FDV, aggregate liquidity,
  24h volume, 24h txn count, oldest pair age.

## Usage

```
python3 evm_token_security.py <0xADDR> [chain] [out.md]
```

Pure stdlib (urllib). No API keys. Runs anywhere Python 3.8+ exists.

Live-verified 2026-09-24 against USDC on Base
(`0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913`) — see
`sample-usdc-base.md` in this directory.