Practice / Onchain evidence
Check a BNB Chain contract and assess a dApp without connecting
Match network, issuer and contract; inspect a dApp or fictional memecoin from public evidence without connecting a wallet or treating a verification label as a safety verdict.
You will learn
- Identify network and contract without trusting a ticker.
- Distinguish code matching, proxy logic and a security assessment.
- Interpret To, Transfer and decimals in a fictional receipt.
- Record address concentration and unresolved dApp risks without connecting a wallet.
Before you begin
Read networks, evidence and token permissions. This exercise needs no wallet connection, account or funds.
Identify the object you are investigating
Start with a narrow question: which contract on which network would this action involve? Record the intended application, asset and full contract address from the relevant issuer or project's documentation. A familiar ticker, logo or result near the top of a search page does not establish identity. An exchange listing also does not prove that every similarly named onchain representation is supported.
This is a read-only investigation, not a security audit or an instruction to use the application. BSC mainnet has chain ID 56. An address on another network can have different code and state, even when its text is identical. Record the network with the address. If documentation does not identify the object clearly, the useful result is an unresolved identity question before you authorize anything.
Evidence: BSC network data · BEP20 token-contract interface specification
Used only for the BEP20 token-contract interface and the methods/events named in the specification. It does not prove that a particular deployed contract conforms, is authentic, safe, issued by a named party, backed by reserves or equivalent to an asset on another network. The file contains historical Beacon Chain wording that is not treated as current migration guidance.
A read-only inspection sequence
Open the correct explorer from an independently checked source.
Search the complete contract address rather than selecting a token solely by its name. Compare the address in the explorer with the documented address you recorded. Do not paste a private key, phrase or authentication code into the search box. Ordinary public-record inspection does not need them.
Separate token information from contract information.
A token page may display symbol, decimals, transfers and holders. A contract view can display code and verification information. Record which object each field describes. A token’s market-value display is a different claim from the existence of its contract or a balance returned by it.
Stay in reading and record what remains unknown.
This exercise does not use Connect to Web3, Write Contract or a signing request. Those would be different operations. If a view offers a read-only query, first identify the contract and function being queried. Query output is information from that contract, not an independent guarantee about an issuer or service.
Evidence: Explorer interpretation · ERC-20 specification
This Binance Academy article is an orientation to BscScan; it does not verify any live token, holder, price, liquidity-lock or contract claim.
Code verification has a defined, limited scope
Verification provides a relationship between published source and deployed code under a particular matching process. Explorer documentation distinguishes types of match with different coverage. Read the displayed scope instead of treating any colored badge as the same result. Code visibility makes further analysis possible; it does not prove a token's economic backing, a team's identity or that every execution path is harmless.
A complete beginner is not expected to audit arbitrary code after opening a tab. Look for project documentation explaining administrative controls, upgrades, restrictions and relevant security reviews. Compare the review's contract, version and date with the actual object. Missing information should remain a question in the record. “Verified source available; behavior not assessed” is more precise than “verified, therefore safe.”
Evidence: Source-code match scope · Contract security · Explorer interpretation
This source describes Ethereum/Etherscan. It supports the stated EVM concept, not BSC fees, confirmation requirements or a claim that every explorer uses identical labels.
ethereum.org guidance describes general contract-security concepts; it is not an assessment of a particular BNB Smart Chain contract, token or application.
This Binance Academy article is an orientation to BscScan; it does not verify any live token, holder, price, liquidity-lock or contract claim.
A stable address can point to changing logic
A proxy can forward calls to a separate implementation. That distinction matters when comparing code, an audit and the address an app uses. Record the proxy and implementation when the explorer and project documentation identify them. Reading only the proxy's short source may not explain the behavior that the delegated call executes. Explorer recognition and labels are tools with their own limits.
Ask who can change implementation or exercise administrative roles, and where those rules are documented. Do not infer that powers are absent because you cannot find a familiar function name. This guide does not determine whether a particular upgrade system is acceptable. If you cannot identify the relevant logic or authority, stop at that documented uncertainty instead of signing to see what happens.
Evidence: Proxy and implementation · Contract security
This source describes Ethereum/Etherscan. It supports the stated EVM concept, not BSC fees, confirmation requirements or a claim that every explorer uses identical labels.
ethereum.org guidance describes general contract-security concepts; it is not an assessment of a particular BNB Smart Chain contract, token or application.
Read a fully fictional token receipt
Fictional identity record: issuer documentation names [ABC_CONTRACT] on BSC, with six decimals. A second contract [ABC_COPY] has the same symbol and a visible verified-code label. The symbol and badge do not make the second address the documented asset. This exercise keeps the two objects separate. Neither bracketed label is a real address, and no live contract was inspected for this example.
Now suppose a hypothetical receipt for [ABC_CONTRACT] shows Success, To [ABC_CONTRACT], native value 0 BNB and a Transfer event from [PAYER] to [RECIPIENT] with raw token quantity 12,500,000. With the stated six decimals, the human-readable quantity is 12.5 ABC: 12,500,000 divided by 1,000,000. Zero native value does not mean zero token movement; the event describes a contract-token transfer.
The interpretation establishes a result only within the fictional model: the chosen contract reports that transfer to that recipient. It does not establish exchange credit, market value or the absence of other risks. In a real investigation, compare the exact event-emitting contract, token metadata, transaction status and recipient before using the formatted amount. Gas is a separate native-network fee, not the token quantity in this event.
Fictional concentration exercise, not a real token or chain observation: MIMI-FICT has a displayed total supply of 100,000 units. Three displayed addresses hold 42,000, 18,000 and 12,000. Their sum is 72,000; 72,000 ÷ 100,000 = 72%. The defensible statement is “these three displayed addresses account for 72% of the hypothetical supply snapshot.” It does not establish three people, a coordinated owner, a locked pool, a future sale, or safety. The numbers are deliberately invented for arithmetic practice.
Evidence: ERC-20 specification · BEP20 token-contract interface specification · Contract-call input · Transaction model
Used only for the BEP20 token-contract interface and the methods/events named in the specification. It does not prove that a particular deployed contract conforms, is authentic, safe, issued by a named party, backed by reserves or equivalent to an asset on another network. The file contains historical Beacon Chain wording that is not treated as current migration guidance.
This source describes Ethereum/Etherscan. It supports the stated EVM concept, not BSC fees, confirmation requirements or a claim that every explorer uses identical labels.
Do not turn unrelated indicators into a verdict
Many holders do not necessarily mean many independent people. A large balance does not explain its owner's obligations. An explorer price estimate does not guarantee a redeemable value. A source-code label does not replace a scoped security review. Ask which specific question each indicator answers before putting it into a conclusion about the application.
An app can also request a spender different from the token contract or implementation you first inspected. Before a later permission decision, identify that requested counterparty separately. Reading a token page is not a complete review of every router, bridge, vault or signature mechanism the app may use. Use the permissions guide for that next question, without assuming this investigation authorized the action.
Evidence: Explorer interpretation · Token approvals
This Binance Academy article is an orientation to BscScan; it does not verify any live token, holder, price, liquidity-lock or contract claim.
MetaMask describes its own wallet and general token-approval concepts; other providers and token implementations can differ.
Assess a dApp or memecoin from public evidence
Keep this as a read-only screen. Start from project or issuer documentation reached independently, record the exact network and contract, and compare them with the explorer. A familiar name, social post, search ranking or matching logo does not establish that a domain or token is the real project. If the identity trail conflicts, stop and record the conflict; do not connect a wallet to reveal more.
For a dApp, note the contracts it says it uses, visible proxy or upgrade relationships, documented administrator powers, and the scope/version/date of any claimed review. For a token, record total supply and the largest displayed addresses only when the explorer exposes those values at a stated time. Check what a “locked” liquidity claim actually identifies: an address label is not proof that liquidity is locked, withdrawable, or governed as advertised. A public page cannot show you every future request the app might make.
Keep findings descriptive: contract code is matched or not; an authority is documented or unresolved; a displayed holder list has a particular concentration. No item in this checklist is an audit, a guarantee, or a buy/sell recommendation. If you cannot explain what a piece of evidence proves and what it leaves open, mark it unresolved.
Write the identity tuple.
Record project/domain, issuer claim, network name and chain ID, full token or app-contract address, source for that association, and the date you checked it. Do not treat a ticker as an identifier.
Separate code and control evidence.
Record source-match scope, proxy and implementation if identified, upgrade/admin roles, and any review report’s exact contract, version and date. “Not found” means unresolved, not absent.
Describe concentration without naming people.
If supply and holder figures are available, note the snapshot, add the selected address balances, and divide by displayed total supply. Say “addresses” unless the evidence establishes another owner; label exchange, pool or vesting addresses only with supporting evidence.
List claims you could not verify.
For liquidity, backing, lockups, audits, team identity, withdrawal conditions and app permissions, write down the source and the remaining gap. Do not sign or connect just to turn a gap into a result.
| Question | Public evidence to record | What it does not establish |
|---|---|---|
| Identity | Issuer/project documentation, network and full contract address | That the issuer is honest or that an exchange supports this representation |
| Code and control | Match scope, proxy/implementation, admin or upgrade documentation, review scope/date | That readable or matched code is harmless or that a review covers current deployed logic |
| Concentration | Dated supply and address balances; reproducible arithmetic | The number or identity of people, future distribution, or an investment outcome |
| Liquidity and permissions | Documented pool/lock contract and conditions; token, spender and request details when publicly documented | That a label proves an enforceable lock, that assets can be withdrawn, or what an unseen wallet request would do |
Evidence: Explorer interpretation · BEP20 token-contract interface specification · Source-code match scope · Proxy and implementation · Contract security · ERC-20 specification · Token approvals
This Binance Academy article is an orientation to BscScan; it does not verify any live token, holder, price, liquidity-lock or contract claim.
Used only for the BEP20 token-contract interface and the methods/events named in the specification. It does not prove that a particular deployed contract conforms, is authentic, safe, issued by a named party, backed by reserves or equivalent to an asset on another network. The file contains historical Beacon Chain wording that is not treated as current migration guidance.
This source describes Ethereum/Etherscan. It supports the stated EVM concept, not BSC fees, confirmation requirements or a claim that every explorer uses identical labels.
This source describes Ethereum/Etherscan. It supports the stated EVM concept, not BSC fees, confirmation requirements or a claim that every explorer uses identical labels.
ethereum.org guidance describes general contract-security concepts; it is not an assessment of a particular BNB Smart Chain contract, token or application.
MetaMask describes its own wallet and general token-approval concepts; other providers and token implementations can differ.
Write a result another reader can reproduce
Finish with network, full object address, primary identity source, verification scope, any proxy/implementation relationship, observed or fictional receipt fields, consultation date and unresolved questions. Separate what the documentation says from what you actually observed. This lesson used documentation and labeled examples, not a live wallet or a real transaction test.
A defensible result might be: “The documented network and contract agree; source is readable, but upgrade authority and current review coverage remain unresolved.” That is a completed reading record with clear limits, not a recommendation to deposit. If a site demands a signature merely to reveal public evidence or displays a security warning, stop the interaction and investigate through an appropriate official source.
Evidence: Security and scam prevention
Check your understanding
In a fictional example, three addresses hold 72% of a token supply. Does that prove three people control 72% or that the token is unsafe?
Show explanation
No. It is a concentration figure for three addresses in the stated snapshot. Addresses may represent contracts, exchanges or other arrangements, and the figure alone proves neither beneficial owners nor a safety or investment conclusion. Record the network, method and date, then keep other risks and unknowns separate.
Primary sources
- What is a token approval?MetaMask Help Center · 2026-10-25
MetaMask describes its own wallet and general token-approval concepts; other providers and token implementations can differ.
- BEP20: Tokens on BNB Smart ChainBNB Chain · 2026-10-26
Used only for the BEP20 token-contract interface and the methods/events named in the specification. It does not prove that a particular deployed contract conforms, is authentic, safe, issued by a named party, backed by reserves or equivalent to an asset on another network. The file contains historical Beacon Chain wording that is not treated as current migration guidance.
- Types of contract verificationEtherscan Information Center · 2026-10-26
This source describes Ethereum/Etherscan. It supports the stated EVM concept, not BSC fees, confirmation requirements or a claim that every explorer uses identical labels.
- Smart contract securityethereum.org · 2026-10-26
ethereum.org guidance describes general contract-security concepts; it is not an assessment of a particular BNB Smart Chain contract, token or application.
- ERC-20: token standardEthereum Improvement Proposals · 2026-10-26
- What is BscScan and how to use it?Binance Academy · 2026-10-26
This Binance Academy article is an orientation to BscScan; it does not verify any live token, holder, price, liquidity-lock or contract claim.
- Understanding transaction input dataEtherscan Information Center · 2026-10-25
This source describes Ethereum/Etherscan. It supports the stated EVM concept, not BSC fees, confirmation requirements or a claim that every explorer uses identical labels.
- Proxy contractsEtherscan Information Center · 2026-10-26
This source describes Ethereum/Etherscan. It supports the stated EVM concept, not BSC fees, confirmation requirements or a claim that every explorer uses identical labels.
- BNB Smart Chain JSON-RPC endpointsBNB Chain · 2026-10-26
- Ethereum security and scam preventionethereum.org · 2026-10-25
- Transactions: technical documentationethereum.org · 2026-10-25