---
title: "Analyze contract risk"
method: GET
path: "/v4/data/security/contract/risk"
tags: ["Security API"]
---

# Analyze contract risk

`GET /v4/data/security/contract/risk`

## Request

- Base URL: `https://api.tatum.io`
- URL: `https://api.tatum.io/v4/data/security/contract/risk`
- Auth: API key in header `x-api-key`

/v4/data/security/contract/risk

**60000 credits per API call**

Analyze a smart contract or token for scam and security risks. The analysis runs a set of on-chain and source-level risk checks (ERC-20 compliance, honeypot traits, owner privileges, liquidity risks, and more) and aggregates them into a single score.

**Response**

*   `score` — overall risk score, 0–100; higher means riskier.
*   `results` — every risk check that was evaluated, each with a machine-readable `key`, a boolean `value` (whether the risk was detected), and human-readable `title`/`sub_title`/`description`.

## Query parameters

- `chain` 'ethereum-mainnet' | 'bsc-mainnet' | 'polygon-mainnet' | 'optimism-mainnet' | 'arb-one-mainnet' | 'base-mainnet' | 'avax-mainnet' | 'celo-mainnet' | 'gno-mainnet' | 'xdc-mainnet' | 'unichain-mainnet' | 'sonic-mainnet' | 'berachain-mainnet', required
- `address` string, required

## Response `200`

OK

- SecurityContractRiskResponse: Contract risk analysis result.
  - `score` number: Overall risk score, 0–100. Higher means riskier.
  - `address` string: The analyzed contract address.
  - `chain` string: The chain the contract was analyzed on (Tatum chain name).
  - `results` object[]: Individual risk checks evaluated against the contract.
    - `key` string: Machine-readable identifier of the risk check.
    - `value` boolean: Whether the risk was detected.
    - `title` string
    - `sub_title` string
    - `description` string: Detailed explanation of the risk.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized. Not valid or inactive subscription key present in the HTTP Header.
- `403`: Forbidden. The request is authenticated, but it is not possible to perform the operation due to logical error or invalid permissions.
- `500`: Internal server error. There was an error on the server during the processing of the request.

## Changes

- **2026-11-03** `1a87afa0f639`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/tatum/apis/blockchain-data/changes/v4/data/security/contract/risk/get.md)

---

[API](https://skmtc.dev/tatum/apis/blockchain-data.md) - [All operations](https://skmtc.dev/tatum/apis/blockchain-data/llms.txt) - [OpenAPI document](https://skmtc.dev/tatum/apis/blockchain-data/revisions/1a87afa0f639?raw)