Paxos Gold (PAXG) Smart Contract Risk

Fee-on-Transfer / Rebasing

⚡ MEDIUM severity

Vulnerability

PAXG charges a fee on every transfer. The amount received is less than the amount sent, which can break protocols that assume transfer amount equals received amount.

Related: Unchecked Return Values

Safe integration

Measure actual received amounts using balance-before and balance-after checks instead of trusting the transfer amount parameter.

Contract addresses

ChainAddress
Ethereum 0x45804880de22913dafe09f4980848ece6ecbaf78

Audit any contract that interacts with PAXG: SmartContract.us automatically detects PAXG integration risks →

What this contract permits today

Read live from Ethereum on 2026-10-14. This is a different question from the integration risk above: not how to call the token safely, but what the holders of its keys are able to do to the people holding it.

QuestionAnswer
Can new tokens be created?Yes
Can transfers be blocked?Yes
Is there a trading tax?No
Can the logic be replaced?Yes
Can liquidity be withdrawn?Yes

The permissions above rest with 0x6D8B8f7eBD9860E80694665f05033dF06ddC3acC, itself a contract, which may be a multisig or a timelock. Whether that is acceptable depends on who holds it.

See the full check, with the evidence behind each answer →

← Back to Token Risk Profiles