Verify a contract

You approve USDC once, to one immutable contract. Here is how to be sure it is really us.

The MarketFactory is the only contract you ever approve USDC to. It is immutable and ownerless — no admin, no pause, no upgrade path — and it never holds funds: every pull transfers straight through to a contract it can prove is genuine, in the same transaction. So an unlimited approval to it can only ever be spent by a transaction you sign.

Paste any address below and this page checks it two ways — a read-only eth_call, no wallet, no signature — and fails toward caution:

Provenance — the canonical MarketFactory recognizes it (isMarket or isTrustedVault).
Operator identity — genuine bytecode alone is not enough: anyone can deploy a market or vault bound to their own operator, which would settle the pot to them. What nobody else can do is bind one to ours. So the page also reads the contract's bot() and requires it to equal the canonical Micro Markets operator.

A contract genuine but with a different operator is shown as “do not use”, never verified. Both creation paths are operator-authenticated — createMarket requires the caller to be that market's own bot (or a trusted vault of it), and deployVault requires the caller to be the operator — so a match means our key deployed it and holds its settle/payout authority. It still does not prove we currently list that exact contract: a superseded one matches too. Only ever act through the official bot / app.

Canonical addresses

Trust only these. Bookmark this page.

Loading…

Check an address

The published canonical list is also available as machine-readable JSON at /canonical-addresses.json.