Who Can Freeze, Mint, or Upgrade Your Tokens?

Short answer: Most major tokens are not as immutable as holders assume. We checked 49 widely held tokens on Ethereum, Base, and Arbitrum directly on-chain on 2026-10-29. 8 can freeze or blacklist addresses, 9 can pause transfers, 13 can have their logic upgraded, and 33 expose a function that can mint new supply. Those powers are concentrated in stablecoins: USDC, USDT, FDUSD, PYUSD, USDP, EURC, PAXG have all four. Only 14 of the 49 showed none of the four controls.

Admin controls are not automatically bad. A regulated stablecoin issuer is expected to freeze stolen funds, and a governance token may mint on a schedule set by its DAO. What matters is who holds each power and what limits it. This report shows which powers exist so you know what to check.

Key Findings

• Every issuer-backed dollar, euro, or gold token we checked can freeze addresses. USDC, USDT, FDUSD, PYUSD, USDP, TUSD, EURC, PAXG all expose a freeze or blacklist function. USDe, DAI, and USDS can mint but not freeze.
• Upgradeability is mostly a stablecoin feature. 9 of the 12 stablecoins and wrapped assets are upgradeable. Outside that group, only ZK, ARB, SNX, MORPHO are.
• Minting is common in DeFi. 14 of 17 DeFi tokens expose a mint function, usually restricted to governance, a minter contract, or an emissions schedule.
• Four common control checks returned no matches for 14 tokens. APE, BAT, BLUR, BRETT, ENJ, ETHFI, LINK, PENDLE, RPL, SAFE, SHIB, WETH, WLD, ZRO showed none of the checked selectors or upgrade patterns. This does not establish fixed supply: WETH, for example, creates tokens through deposits rather than a function named mint.
• Custom mechanisms hide from simple checks. USDT is not a standard proxy, but its deprecate(address) function lets the owner forward all calls to a new contract. SNX's ProxyERC20 lets the owner repoint it with setTarget(address). We count both as upgradeable.

Results by Category

Full Results

Each token links to its overview page with the contract address, notes on each control, and a free Sentinel scan.

What Each Control Means for Holders

• Freeze or blacklist. The issuer can stop a specific address from sending or receiving the token. This is how stablecoin issuers respond to hacks and sanctions, and it also means your balance depends on the issuer's policy.
• Pause. An admin can halt all transfers at once, usually as an emergency brake.
• Mint. New tokens can be created. Check whether minting is capped, time-locked, or limited to a governance-approved schedule, since uncapped minting dilutes holders.
• Upgradeable. The token's code can be replaced. Whoever controls the upgrade can change any behavior, including adding controls that do not exist today. Check whether upgrades go through a timelock or multisig.

How to Check Any Token Yourself

1. Find the contract address from the project's official site, not from search results or social posts.
2. Paste it into Sentinel, Firepan's free token risk checker, for owner permissions, proxy status, honeypot signals, holder concentration, and liquidity.
3. On the chain explorer, look up who holds the owner, admin, or minter role. A multisig or timelock is a better sign than a single wallet.
4. For an upgradeable token, check the proxy admin and whether upgrades are delayed.
5. Recheck before large transactions. Roles and implementations change.

If you are building a token, run a free smart contract scan on your repository before launch to see how these controls look in your own code.

For a step-by-step guide, see how to check if a token is safe, and for other scanners, rug pull checkers compared.

Method and Limits

• What we checked. For each token we read the contract bytecode and storage over public RPC endpoints on 2026-10-29. We read decimals(), checked the EIP-1967, beacon, and ZeppelinOS proxy storage slots, followed the implementation where present, and looked for the function signatures of common mint, pause, and freeze or blacklist functions. We then checked custom mechanisms such as USDT's deprecate and SNX's setTarget by hand.
• What "Yes" means. The function exists in the deployed code. It does not mean anyone can call it: most are restricted to an owner, role, or governance contract.
• What "—" means. None of the common signatures were found. Custom-named functions can still exist, so "—" is not proof that a power is absent.
• Scope. 49 tokens on Ethereum, Base, and Arbitrum with published Sentinel reports. Bridged copies of the same token on other chains can have different controls.
• Not a safety rating. This report covers admin controls only. It does not score liquidity, holder concentration, issuer reserves, or market risk, and it is not investment advice.

Frequently Asked Questions

Q: Can USDT and USDC be frozen?

A: Yes. Both contracts include a function that lets the issuer freeze or blacklist specific addresses. USDC is also an upgradeable proxy, and USDT has a deprecate path that can forward calls to a new contract.

---

Q: Which major stablecoins cannot freeze funds?

A: Of the stablecoins we checked, DAI, USDS, and USDe showed no freeze or blacklist function. They have other risks: USDe depends on collateral and hedging positions, and DAI and USDS depend on Sky governance and collateral.

---

Q: Is an upgradeable token unsafe?

A: Not by itself. Upgradeability lets a team fix bugs, but it also means the code can change. Check who controls upgrades and whether changes are delayed by a timelock so holders can react.

---

Q: How do I check if a token can be frozen or minted?

A: Paste the contract address into Firepan Sentinel for a free scan of owner permissions, proxy status, and other risk signals, then confirm the roles on the chain explorer.

---

Q: How often is this data updated?

A: This edition reflects an on-chain check on 2026-10-29. Each token's overview page carries the same date, and we plan to refresh the data periodically.

Sources

• EIP-1967: Proxy storage slots
• Firepan Sentinel token overviews (per-token contract addresses and notes)
• On-chain reads via public Ethereum, Base, and Arbitrum RPC endpoints on 2026-10-29