Skip to content
FORENSIAWeb3 forensicsOpen workspace
FORENSIAOpen workspace
Menu
← The field guide
Control / Illustrated lesson

Changes to contract authority
Zero ETH can still change the rules.

Upgradeable contracts can change the code they use. A delegated call can execute other code in the caller’s storage context. The forensic question is which authority or state changed, and when.

Reading history stays in this browser. Manage it in My Explore.
  1. 01

    An authorized request executes

  2. 02

    Code runs in a storage context

  3. 03

    Later actions use the resulting rules

Illustrative sequence. This diagram is a teaching aid, not a captured transaction.

What to collect

  1. Operation, destination and input
  2. Code address versus storage address
  3. Historical implementation or storage change
Before drawing a conclusion

Current implementation metadata cannot alone prove a past control change. A decoded request describes intent, not every executed effect.

Test the idea

The outer transaction sends 0 ETH. Could it still change control of a wallet?

Reveal the explanation

Yes. The input can trigger contract actions. Inspect the operation and execution evidence before judging impact.

Open the related case ↗