Under active development. We're continuously fixing and improving the metrics and parameters, so scores and ratings may change. See changelog

RWABeat

Invesco Short Duration US Government Securities Fund

Tokenized private fund (formerly the Superstate Short Duration US Government Securities Fund) that holds short-term US Treasury bills. Interest accrues into a rising NAV per share, which started at $10.

U.S. TreasuriesQualified purchasers onlyTransfer-restrictedOnchain dataIssued by Invesco Advisers, Inc. · Platform Superstate
JSON
Value
$472.0M
Stage
Stage 0
Disclosed
Single-key powers
11
Single key holds critical power
Oracle age
19h 22m
On schedule
Used as DeFi collateral
$5.9M· 1 markets

Control

Who can freeze, mint, pause or upgrade, and what stops them?

Red

A single key can replace the contract code.

  1. A single key can replace the contract code.

  2. A single key can create new tokens.

  3. A single key can destroy tokens in any wallet.

  4. A single key can change the onchain price.

  5. A single key can move the assets backing the token.

  6. A single key can grant or revoke every other role.

  7. A single key can freeze a holder's tokens.

  8. A single key can pause all transfers.

  9. A single key can change who may hold the token.

  10. The issuer doesn't document its admin powers; they're only visible onchain.

  11. Audited by 0xMacro (2025-07).

  • No public bug bounty.
  • Transfers are limited to allowlisted wallets.

Audits and bug bounty

  • 0xMacro · Superstate AllowlistV331 Jul 2025

No public bug bounty found.

Chains and bridges

Holders on a bridged chain also depend on the bridge.

  • ethereumIssued natively · Superstate
  • solana, plumeIssued natively · Superstate

Who controls USTB on Ethereum

Token and service contracts on the left, the accounts holding their powers on the right. Edge color is the risk status of that power.

Powers

Every privileged power we found, normalized to canonical power types.

  • UpgradeCriticalRed
    USTB ProxyAdminProxyAdmin0xb9d2…2146

    → EOA

    None · via Proxy upgrade · eip1967 admin

  • UpgradeCriticalRed
    ProxyAdmin0xbD09…BD46

    → EOA

    None · via Proxy upgrade · eip1967 admin

  • MintCriticalRed
    Superstate admin key (token + ProxyAdmin owner)EOA0xad30…CA83

    None · via FundToken.bulkMint · _requireAuth() (owner())

  • MintCriticalRed
    Superstate admin key (token + ProxyAdmin owner)EOA0xad30…CA83

    None · via FundToken.mint · onlyOwner (owner())

  • Burn from holderCriticalRed
    Superstate admin key (token + ProxyAdmin owner)EOA0xad30…CA83

    None · via FundToken.adminBurn · _requireAuth() (owner())

  • Set priceCriticalRed
    Superstate admin key (token + ProxyAdmin owner)EOA0xad30…CA83

    None · via FundToken.setMaximumOracleDelay, setOracle · _requireAuth() (owner())

  • Set priceCriticalRed
    NAV checkpoint writer (oracle owner)EOA0x4B1d…1395

    None · via SuperstateOracle.addCheckpoint, addCheckpoints, setMaximumAcceptablePriceDelta · onlyOwner (owner())

  • Allocate fundsCriticalRed
    Superstate admin key (token + ProxyAdmin owner)EOA0xad30…CA83

    None · via FundToken.setStablecoinConfig · _requireAuth() (owner())

  • Grant rolesCriticalRed
    Superstate admin key (token + ProxyAdmin owner)EOA0xad30…CA83

    None · via FundToken.transferOwnership · onlyOwner (owner())

  • Grant rolesCriticalRed
    Allowlist ownerEOA0x7747…b2Fe

    None · via AllowlistV4_2.transferOwnership · onlyOwner (owner())

  • Grant rolesCriticalRed
    NAV checkpoint writer (oracle owner)EOA0x4B1d…1395

    None · via SuperstateOracle.transferOwnership · onlyOwner (owner())

  • FreezeHighRed
    Allowlist ownerEOA0x7747…b2Fe

    None · via AllowlistV4_2.setAllowed, setAllowedBatch · onlyOwner (owner())

  • PauseHighYellow
    Superstate admin key (token + ProxyAdmin owner)EOA0xad30…CA83

    None · via FundToken.accountingPause, accountingUnpause · _requireAuth() (owner())

  • PauseHighYellow
    Superstate admin key (token + ProxyAdmin owner)EOA0xad30…CA83

    None · via FundToken.pause, unpause · onlyOwner (owner())

  • Set complianceHighYellow
    Superstate admin key (token + ProxyAdmin owner)EOA0xad30…CA83

    None · via FundToken.setAllowlist · _requireAuth() (owner())

For regulated securities, freeze and force-transfer powers are often legally required. Control rates who holds them and what checks exist, not whether they exist. A single key holding a critical power or freeze is red; a multisig with no timelock is yellow.

Discovered at block 26,183,258 · 13 Oct 2026 · tool discovery-0.2.0 · View raw JSON on GitHub ↗