Skip to main content
GET
Get smart-contract risk analysis for a token (honeypot, mint/blacklist authority, hidden fees, upgradeable proxy, and more) — powered by Hexens
5000 credits per request

  • An overall risk score (0–100) plus a detailed list of individual risk findings, each with a title, plain-English note, severity, and technical description.
  • Detection of common rug/scam vectors: centralized mint/burn, blacklist/whitelist, pausable/blockable transfers, hidden fees, upgradeable (proxy) contracts, ownership not renounced, balance manipulation, and more.
  • Powered by Hexens smart-contract security analysis.
  • Returns an empty results list when no risk data is available (e.g. non-EVM tokens or contracts not yet indexed).
  • Provide either coinId (CoinStats coin id, e.g. ethereum) or both contractAddress and chain.
  • chain: Blockchain identifier for contractAddress — e.g. ethereum, binance_smart, polygon-pos, base, arbitrum-one, optimism, avalanche.
  • sortBy: Set to severity to order findings critical → minor. Defaults to detected-risks-first.

Authorizations

X-API-KEY
string
header
required

API key required to access the endpoints. Generate one from your dashboard at https://openapi.coinstats.app and pass it in the X-API-KEY request header. Never expose your key in client-side code.

Query Parameters

coinId
string

CoinStats coin id (e.g. bitcoin, ethereum). When provided, the coin is resolved to its on-chain contract automatically. Either coinId or both contractAddress and chain are required.

Example:

"ethereum"

contractAddress
string

Token contract address. Required (together with chain) when coinId is not provided.

Example:

"0xdac17f958d2ee523a2206206994597c13d831ec7"

chain
string

Blockchain identifier for contractAddress (e.g. ethereum, binance_smart, polygon-pos, base, arbitrum-one, optimism, avalanche). Required (together with contractAddress) when coinId is not provided.

Example:

"ethereum"

sortBy
enum<string>

Sort the returned risk findings. severity orders by critical → high → medium → low → minor. Defaults to detected-risks-first.

Available options:
severity

Response

results
object[]
required

List of risk findings. Empty when no risk data is available for the token (e.g. non-EVM or unindexed contract).

score
number

Overall risk score (0–100). Higher means riskier. Absent when no risk data is available for the token.

Example:

80

marketEndorsed
boolean

Whether the token is endorsed by market consensus

Example:

false

ownershipRenounced
boolean

Whether contract ownership has been renounced

Example:

true

risksProviderUrl
string

Link to the risk-analysis provider (Hexens)

Example:

"https://hexens.io/blog/glider-api-new-benchmark-in-smart-contract-security"

Provider branding logos

learnMoreUrl
string

Link to documentation explaining the risk categories

Example:

"https://coinstats.app/blog/risks/"