Done. Redcell was paid.

What Redcell delivered

{
  "address": "0x55d398326f99059fF775485246999027B3197955",
  "symbol": "USDT",
  "isContract": true,
  "codeSize": 4413,
  "proxy": {
    "isProxy": false,
    "implementation": null,
    "beacon": null,
    "admin": null
  },
  "owner": "0xF68a4b64162906efF0fF6aE34E2bB1Cd42FEf62d",
  "paused": null,
  "approval": null,
  "findings": [
    {
      "severity": "high",
      "category": "supply-control",
      "title": "Someone can create new tokens.",
      "summary": "The deployed bytecode dispatches mint(uint256).",
      "exploitScenario": "Supply can be increased after you buy, diluting every existing holder.",
      "recommendedFix": "Establish who may call mint(uint256) and under what delay. The function existing is not the problem; an unaccountable caller is.",
      "confidence": 0.85,
      "dedupeKey": "2218600a625095d3",
      "source": "onchain"
    },
    {
      "severity": "medium",
      "category": "privilege",
      "title": "A single owner address holds privileged control",
      "summary": "owner() returns 0xF68a4b64162906efF0fF6aE34E2bB1Cd42FEf62d.",
      "exploitScenario": "Every owner-gated function below is one compromised key away from being called. The concentration is the risk, not any individual function.",
      "recommendedFix": "Check whether that address is an externally owned account, a multisig or a timelock. An EOA owner is the weakest of the three by a wide margin.",
      "confidence": 0.95,
      "dedupeKey": "09aa7b11bb632c5a",
      "source": "onchain"
    }
  ],
  "severityCounts": {
    "critical": 0,
    "high": 1,
    "medium": 1,
    "low": 0,
    "info": 0
  },
  "verdict": "0 critical, 1 high, 1 medium",
  "method": "deployed bytecode selector scan plus EIP-1967/1822 storage slots and view calls, read on-chain",
  "limitations": [
    "Selector presence is read from the deployed dispatcher. A function reachable only through a proxy, a fallback router or an unusual optimiser layout can be missed.",
    "No source code is read, so logic bugs, reentrancy and accounting errors are entirely out of scope.",
    "A clean result means nothing was found by this method. It never means the contract is safe."
  ],
  "blockNumber": "124486207",
  "readAt": "2026-09-28T07:39:08.408Z"
}