Proxy Contract

A proxy contract delegates its logic to a separate implementation address that can be swapped, making the token upgradeable.

Using the EIP-1967 proxy pattern, the token forwards calls via delegatecall to an implementation contract whose address an admin can change. Upgradeability means the code can be replaced after launch, so a token that scans clean today could gain malicious logic tomorrow. A clean scan of a proxy is only valid for its current implementation.

Deep dive: Token Ownership & Privileged Functions: Is "Renounced" Safe? →