Get Started

USD Coin (USDC) Smart Contract Risk

Blocklist / Freezable

⚡ MEDIUM severity

Vulnerability

USDC includes a blocklist feature controlled by Circle. Addresses on the blocklist cannot send or receive USDC, which can break protocol accounting if a user address gets blocked.

Related: Access Control

Safe integration

Account for the possibility of blocked transfers. Use try/catch around USDC transfers and implement fallback mechanisms for blocked addresses.

Contract addresses

Chain	Address
Ethereum	`0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48`
Polygon	`0x3c499c542cef5e3811e1192ce70d8cc03d5c3359`
Arbitrum	`0xaf88d065e77c8cc2239327c5edb3a432268e5831`
Base	`0x833589fcd6edb6e08f4c7c32d4f71b54bda02913`

Audit any contract that interacts with USDC: SmartContract.us automatically detects USDC integration risks →

Chain & standard security guides

← Back to Token Risk Profiles

Security Resources
Vulnerability Glossary · Security Blog · Token Risk Profiles

Chain Guides
Ethereum · Polygon · Arbitrum · Base · BNB Chain

ERC Standard Security
ERC20 · ERC721 · ERC1155 · ERC777 · ERC4626 · ERC2612 · ERC4337