{
 "ok": true,
 "chain": "arc",
 "chainId": 5042,
 "contract": "0x53fb2e89834050afaa9b3090a1fc9d1064615805",
 "measuredAt": "2026-09-18T03:02:36.699Z",
 "potUsdc": 5.11,
 "bytecodeBytes": 2549,
 "codeBytesWalked": 2496,
 "metadataBytesSkipped": 53,
 "opcodes": {
  "SELFDESTRUCT": 0,
  "DELEGATECALL": 0,
  "CALLCODE": 0,
  "CREATE": 0,
  "CREATE2": 0,
  "CALL": 1
 },
 "drainShapedFunctionsFound": [],
 "expectedFunctionsFound": [
  "pay(address)",
  "pot()",
  "setLimits(uint256,uint256)",
  "nextClaimAt(address)"
 ],
 "cannotBeDrained": true,
 "whatThisProves": "The deployed code contains no SELFDESTRUCT, no DELEGATECALL or CALLCODE, no CREATE or CREATE2, and not one withdraw-shaped function. There is exactly one outward CALL: the bounded claim payout. The balance cannot be taken out by anyone, including us — it can only leave as claims.",
 "method": "Read the deployed bytecode and walk it as opcodes, skipping PUSH1..PUSH32 operands and the CBOR metadata trailer. A naive byte scan gives false positives (it reports DELEGATECALL for any 0xf4 inside PUSH data) and would be a scare, not a proof. Selectors are keccak256 of the signature, first 4 bytes.",
 "checkItYourself": "eth_getCode on 0x53fb2e89834050afaa9b3090a1fc9d1064615805 at any Arc RPC, then look for 0xff / 0xf4 / 0xf2 / 0xf0 / 0xf5 as opcodes, not as bytes.",
 "anyoneCanFund": "The contract has a payable receive(): send USDC to it and it becomes claims. Nobody can send it back out, us included."
}