Crypto glossary

Contract Verification

Contract verification means checking that a token's contract address and its published source code match the project's official information. It confirms you are dealing with the real contract and lets you see what that code does, but it does not prove the code is safe.

Auf Deutsch lesen

Two checks in one

The first check is identity: is this the right address? Because anyone can create a token with any name, the contract address is the only reliable identifier. You confirm it by comparing the address you are about to use with the one published on the project's official website or documentation, and with a block explorer or reputable data site.

The second check is the code. Smart contracts run as compiled bytecode that humans cannot easily read. On block explorers such as Etherscan, a developer can publish the original source code. The explorer compiles it and confirms that the result matches the bytecode on the chain. If it matches, the contract is marked as verified, and anyone can read what it does.

What you can learn from verified code

Even without programming skills, a verified contract gives clues. Explorers show who the owner is and list functions you can read. Look for powers that let the owner mint new tokens, block addresses, change transaction taxes, pause trading or upgrade the contract. Many token scanners summarise these risks. Unverified code is a warning sign in itself, because you cannot see what you are interacting with.

An example

Say you want to buy a token you read about. You copy the address from the project's official documentation and compare it with the one on the exchange: they match. On the block explorer, the contract shows as verified. Reading the owner functions, you notice the owner can set a sell tax of up to 99 percent. The contract is genuine and verified, yet it gives its owner the power to make selling pointless. Verification helped you see the risk; it did not remove it.

Limits to keep in mind

Verified does not mean audited or safe; it only means the source code matches. Proxy contracts can be upgraded, so the logic you read today may be replaced tomorrow. Official channels can be hacked and post a wrong address, so cross-check more than one source. And a clean contract says nothing about the team, the token distribution or the project's prospects.

Ask Coach about it

Coach is the AI on AtenaCrypto. It explains crypto with live market data, in plain words.

Which owner functions in a token contract should worry me, and how do I find them on a block explorer?Ask Coach →

Frequently asked questions

Does a verified contract mean the token is safe?

No. Verification only proves that the published source code matches what runs on the blockchain. The code itself can still contain harmful functions or bugs.

What is the difference between verification and an audit?

Verification makes code readable and checkable by anyone. An audit is a review by security specialists looking for bugs and design flaws, and even audits do not guarantee safety.

What does it mean if a contract is not verified?

You cannot see what the code does, only its bytecode. For tokens and apps that hold user funds, missing verification is a serious red flag.

Learn it step by step

AC Learning explains these ideas in interactive lessons — the first eight sections are free.

Open AC Learning → Create a free account

All glossary terms · Educational reference only — not investment, legal, tax or financial advice.