GoPlus Security

GoPlus' early product was not a blockchain. It was an intelligence layer: query a token, address, NFT, approval or dApp and receive risk flags before a user acts. The current developer support page still offers that API free at 30 calls per minute, while higher limits require access arrangements.

That operating product matters because later token language can make the whole service look newly decentralized. GPS does not produce each risk verdict inside its ERC-20 contract. The verdict comes from GoPlus data, engines and delivery systems; the token is meant to price and coordinate contributors around them.

GPS began trading on January 16, 2025 with a 10 billion maximum. The Base contract is unusually simple: its constructor minted all 10 billion to the deployer, and verified source exposes no owner, pause, blacklist or later mint entry point.

Distribution is more complicated than code. Of supply, 60.67% is assigned to ecosystem/community categories—24.67% community/development, 10% ecosystem growth, 6% marketing/growth, 10% airdrop, 7% liquidity and 3% advisers. Team receives 20% and early backers 19.33%. The team paragraph says a 6-month cliff plus 2 years monthly vesting, then says early contributors take 7 years from the beginning. Without an explanatory schedule, both cannot be compressed into one certain unlock date.

Official tokenomics says users and businesses can pay GPS for transaction protection, intelligence, AgentGuard, DeepScan and SafeToken services. The MiCAR paper likewise describes subscriptions and per-transaction Security Gas. Those statements establish intended utility, not universal live settlement.

The same official API support says the public service is free at 30 calls per minute. GoPlus also accepts supported payment models for newer products. A page view, risk response or product revenue therefore should not be translated automatically into GPS burned, bought or distributed until fee contracts and flows are shown.

The GoPlus-AVS repository publishes an Ethereum mainnet deployment: ServiceManager 0xa3F64D3102a035db35c42A9001BBc83e08c7a366, ProxyAdmin 0xd55bda80D67b0FC64181F746136A97C3625CF17f and related registries. Its operator model sends gateway-signed tasks through selected operators, executes SecWare and returns signed results for gateway consensus.

That is stronger evidence than a roadmap slide, yet it also reveals trust surfaces. ProxyAdmin and ServiceManager owner are listed as 0x0A33f7Ad41A2Ed3510EF5a65b6B4397c6307e410. Operators depend on gateway task selection and enabled software versions. Data and compute pages describe stake, reward and slashing, but reviewed sources do not expose a complete, measurable GPS reward economy.

On Base, the 10-billion token contract cannot be upgraded and contains no token-level freeze switch. Distribution wallets and application contracts can still be controlled elsewhere, but the supply code itself is fixed.

The BNB Chain address is different. It is an EIP-1967 proxy: on September 5, 2026 the implementation slot pointed to 0xa8b87eda0d68b6103f5df1ba1b697b24c7f0e29c, admin to 0xa8fc0deb641770ee07f31ec23e1b63f04ce448b9 and logic owner() to 0x6165a96b34d0a8fd3df31a43f88166b7ec6491ce. It reported about 179.557 million GPS. This representation can change through keys that the Base ERC-20 does not have, and its supply should not be blindly added to Base issuance as new global emission.

The governance design gives stakers voting weight and asks data providers, compute operators and SecWare developers to bond GPS. Current roadmap text says staking and the data layer were delivered but describes the governance portal as planning. No reviewed source proves that every proxy upgrade, treasury transfer or Foundation decision is executed by a GPS vote.

The legal boundary is clearer. The MiCAR paper names Cayman Goplus Foundation as admission applicant and BVI TOPS LABS LTD as issuer. It describes service access, staking and governance, but not shares, debt, ownership of intellectual property or fixed-value treasury redemption. It also warns that the token may lose all value, become illiquid or fail to buy promised services, without EU investor compensation or deposit guarantee.