Dangerous Opcode Scanner

Reads deployed bytecode and disassembles it, reporting only the opcodes that change what a contract can do to you — SELFDESTRUCT, DELEGATECALL, CREATE2 — with what each one’s presence actually means rather than a raw count. It also extracts function selectors from the dispatch table, skipping the data carried by PUSH instructions, because counting bytes naively finds opcode values inside that data and reports functions the contract does not have. Recognised selectors are named, and discretionary powers such as mint, pause, blacklist and fee changes are listed separately, since those exist in the code whether or not your address can call them. Works on unverified contracts, which is exactly when you most need it.