This is a filterable list of smart contracts reviewed and rated by @CardilloSamuel , CTO of RTFKT Studios, with the intent of helping collectors to understand NFTs they are collecting but also developers to avoid doing mistakes.

The rating is done by a very simple look at the smart contract initial code. What is looked into mainly are: 1) centralization of assets ; 2) absence of watchdogs in the smart contract functions ; 3) potential security vulnerability/weird stuff

What does "centralization of assets" means ?

The image/video/... of your NFT, as well as its metadata, might actually not be living on the blockchain but instead off chain in a centralized system which, in case of failure, would cause the loss of your NFT. This is why using IPFS, ARWEAVE or on-chain capabilities is MORE than recommended.

What does "absence of watchdogs" means ?

If the code in the smart contract allow the modification of some metadata, including medias. for specific reasons (like a lootbox), watch dogs should be in place to make sure no abuse could ever be done on those functions.

REVIEW A SMART CONTRACT : Contact @CardilloSamuel on Twitter to request a quick smart contract review

You can donate on this addresss if you wish to support my work :

0x1ae6A4d3078b951438d1aa64DE6C1E4e033913D6

HIGHLY SUGGEST GOING ON CRYPTOZOMBIE TO LEARN THE BASICS OF SOLIDITY (https://cryptozombies.io/)

THIS LIST WILL SOON CHANGE. TO SEE ADVISE ON GAS OPTIMISATION AND WEB3 PLEASE CHECK THE 2 OTHER TABS

https://opensea.io/assets/avastar

https://etherscan.io/address/0xf3e778f839934fc819cfa1040aabacecba01e049

The Rollsroyce of the smart contracts in terms of decentralization and longetivity. Everything is on chain.

https://opensea.io/assets/cryptobabypunksopensea

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e

Centralized contract, assets can be lost if the platform closes. Metadata are hosted on a dabatase.

https://opensea.io/assets/thecryptobabypunks

https://etherscan.io/address/0x20c34eb95ebec100ac7c7ad934435f2002fe2703

Migrated contract from CBP OS. Works well. Decentralized assets on IPFS

https://opensea.io/collection/cryptowiener-4

https://etherscan.io/address/0xe73c9d94a542b1708450e13d12d4b38204dfd72c#code

Centralized contract, assets can be lost if the platform closes. Metadata are hosted on a dabatase.

https://opensea.io/collection/pixel-kitty-supercar-club

https://etherscan.io/address/0xED00Ef96bD0f6db10fd8b392BAc230B7463b5403#code

1. Contract is copy-paste, no function names have been changed from the Boring Banan Co. ; 2. setBaseUri can be called at anytime by the owner (but not by tokenid so that is good)

https://opensea.io/collection/cryptocannabisclub

https://etherscan.io/address/0x80a4b80c653112b789517eb28ac111519b608b19#code

Assets are on IPFS, contract is pretty well coded. The only thing is the setBaseUri that can be called at anytime by the owner.

https://opensea.io/collection/satoshibles

https://etherscan.io/address/0x0b0b186841c55d8a09d53db48dc8cab9dbf4dbd6#code

Metadata are set later but locked by a variable (great usage of a watchdog). Good contract overall!

https://opensea.io/collection/red-army-punks

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e#comments

Centralized contract with openly editable metadata by the collection creator: STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/collection/zunks

https://etherscan.io/address/0x031920cc2d9f5c10b444fd44009cd64f829e7be2#code

Another rollsroyce of smart contracts : amazing way to save gas fees, everything is on chain, super smart code

https://opensea.io/assets/cool-cats-nft

https://etherscan.io/address/0x1a92f7381b9f03921564a437210bb9396471050c#code

Clean code, well documented and simple! The only is is the setBaseUri without watchdogs

https://opensea.io/collection/spacepoggers

https://etherscan.io/address/0x4a8b01e437c65fa8612e8b699266c0e0a98ff65c#code

Code is pretty much a mess.Honestly. I don't know what else to write beside that. It is pretty much a mess.

https://opensea.io/collection/ceopunks

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e

Centralized contract, assets can be lost if the platform closes. Metadata are hosted on a dabatase.

https://opensea.io/collection/bored-mummy-waking-up

https://etherscan.io/address/0xf621b26ce64ed28f42231bcb578a8089f7958372#contracts

Good contract. The B is because the tokenURI (so the metadata of the NFT) can be changed at ANYTIME (no watchdogs) by the collection owner. Don't do that when you code reveleable NFTs. Instead, put a boolean like "revealed" that turn true and makes the function uncallable again else your NFT is mutable.

https://opensea.io/collection/whelpsnft

https://etherscan.io/address/0xa8934086a260f8ece9166296967d18bd9c8474a5#code

Another gem! Properties are on chain, visual data are on IPFS, they are using clever computation to assemble the URI (smart!) - GGWP to the team behind!

https://opensea.io/collection/punk-lovers

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e

Centralized contract with openly editable metadata by the collection creator: STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/collection/deebies

https://etherscan.io/address/0x400e2073b4ac13d6f11c15697df7fc609db93809#code

Assets are stored on Google storage - so not decentralized. setBaseUri that can be called at anytime by the owner.

https://opensea.io/collection/pownft

https://etherscan.io/address/0x9abb7bddc43fa67c76a62d8c016513827f59be1b#code

Assets are not decentralized - using some appspot for the video. Contract is pretty smart tho.

https://opensea.io/collection/cryptinies

https://etherscan.io/address/0xcd223812722faf45848a431a6e0387de7ffbc2b2

Contract is good, assets are on IPFS. setBaseUri that can be called at anytime by the owner.

https://opensea.io/collection/robotos-official

https://etherscan.io/address/0x099689220846644f87d1137665cded7bf3422747#code

Bad thinking on the mint function (with the condition to withdrawAll) but assets are on IPFS and contract is pretty small and smart. setBaseUri that can be called at anytime by the owner.

https://opensea.io/collection/fvck-crystal

https://etherscan.io/address/0x7afeda4c714e1c0a2a1248332c100924506ac8e6#code

Heavy contract (manifold), that much code might be a bit overkill (i always enjoy clean and concise code) but smart one and content is on ARWEAVE.

https://opensea.io/collection/nouns

https://etherscan.io/address/0x9c8ff314c9bc7f6e59a9d9225fb22946427edc03#code

The kind of smart contract that is out of this galaxy. Just pure perfection. Everything decentralized, on chain, generated in a SUPER clever way... there is too much good things to say - actually ONLY good things. Good job!

https://opensea.io/collection/meet-the-bloomps

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e#code

Centralized contract with openly editable metadata by the collection creator: STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/collection/crypto-coinfactory-collection

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e#code

Centralized contract with openly editable metadata by the collection creator: STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/collection/illusation-and-reality

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e

Centralized contract with openly editable metadata by the collection creator: STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/assets/biomes

https://etherscan.io/address/0x2e394a23ba638DF19A9DAf81b4A2A1f4F4398d3C

Migrated contract from CBP OS. Works well. Decentralized assets on IPFS

https://opensea.io/collection/hyades

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e

Centralized contract, assets can be lost if the platform closes. Metadata are hosted on a dabatase.

https://opensea.io/collection/hunnys

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e

Centralized contract, assets can be lost if the platform closes. Metadata are hosted on a dabatase.

https://opensea.io/collection/moondogs-odyssey

https://etherscan.io/address/0xfc007068c862e69213dc7aa817063b1803d4e941

Assets are stored on DigitalOcean - so not decentralized. setBaseUri that can be called at anytime by the owner.

https://opensea.io/collection/pudgypenguins

https://etherscan.io/address/0xbd3531da5cf5857e7cfaa92426877b022e612cf8#code

Assets are stored on a private server - so not decentralized. setBaseUri that can be called at anytime by the owner.

https://opensea.io/collection/monster-blocks

https://etherscan.io/address/0xa56a4f2b9807311ac401c6afba695d3b0c31079d#code

Assets are stored on chain, smart usage of Chainlink for RNG, clean code: that is an A+ !

https://opensea.io/collection/pudgycollabs

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e#code

Centralized contract with openly editable metadata by the collection creator: STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/collection/were-iz-dildo

https://etherscan.io/address/0x6bb11ad45e9fb6f2dccb010a765ac4161ba84b53#code

Assets are decentralized, great usage of watchdogs, VERY WEIRD CODING STYLE (but funny) - sad that Chainlink was not used for the RNG

https://opensea.io/collection/vogu

https://etherscan.io/address/0x18c7766a10df15df8c971f6e8c1d2bba7c7a410b#code

Assets are decentralized, Chainlink is used - super cool BUT setBaseUri that can be called at anytime by the owner therefore there is uncontrolled mutability of the NFT

https://opensea.io/collection/lonelyalienspaceclub

https://etherscan.io/address/0x343f999eaacdfa1f201fb8e43ebb35c99d9ae0c1#code

Centralized assets can be lost if the Amazon server close. setBaseURI can be called at anytime. Code is a bit messy - lot of commented parts and stuff

https://opensea.io/collection/0xmons-xyz

https://etherscan.io/address/0x0427743df720801825a5c82e0582b1e915e0f750#code

Assets are on IPFS & on chain, contract is pretty well coded. The only thing is the setBaseUri that can be called at anytime by the owner.

https://opensea.io/collection/sunken-squids

https://etherscan.io/address/0x37f21981afcde1342b8a56d536cfbfe8e4b5d48a#code

Assets are on IPFS but the metadata call is not, contract is based on Bored Banana. setBaseUri that can be called at anytime by the owner.

https://opensea.io/collection/happyland-gummy-bears-official

https://etherscan.io/address/0xf32e1bde889ecf672ffae863721c8f7d280f853b#code

Centralized assets can be lost if the Amazon server close. setBaseURI can be called at anytime. Contract seems based on Bored Banana with some changes so it gain a point for that.

https://opensea.io/collection/topdogbeachclub

https://etherscan.io/address/0x6f0365ca2c1dd63473f898a60f878a07e0f68a26#code

Semi-centralized assets (metadata is using a centralized API but assets are on IPFS). setBaseURI can be called at anytime. Contract seems well coded so : good point on that. - Reason of mutability: https://twitter.com/TopDogBeachClub/status/1427994269944586240

https://opensea.io/collection/hedgie

https://etherscan.io/token/0x452b2bc7c94515720b36d304ce33909a8323f3e3

Centralized contract with setTokenURIPrefix callable anytime by the collection creator: STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/collection/world-of-women-nft

https://etherscan.io/address/0xe785e82358879f061bc3dcac6f0444462d4b5330#code

Semi-centralized assets (metadata is using a centralized API but assets are on IPFS). setBaseURI can be called at anytime. Contract seems well coded so : good point on that.

https://opensea.io/collection/0n1-force

https://etherscan.io/address/0x3bf2922f4520a8BA0c2eFC3D2a1539678DaD5e9D#code

setContractUri, setBaseUri, setRevealedBaseUri can all be called anytime by the collection owner, no watchdog, which makes the contract mutable. Smart contract is well developed beside that.

https://opensea.io/collection/fameladysquad

https://etherscan.io/address/0xf3e6dbbe461c6fa492cea7cb1f5c5ea660eb1b47#code

Assets are decentralized but "changeBaseURI" can be called anytime which makes the assets mutable. Beside that, good contract.

https://opensea.io/collection/gauntlets/

https://etherscan.io/address/0x74ecb5f64363bd663abd3ef08df75dd22d853bfc#code

Assets are centralized and both "setProvenanceHash" and "setBaseURI" can be called anytime making the entire thing super mutable.

https://opensea.io/collection/veefriends

https://etherscan.io/address/0xa3aee8bce55beea1951ef834b99f3ac60d1abeeb#code

Very good smart contract, sad for the metadata that are not on IPFS but very good contract anyway

https://opensea.io/assets/0x882a47e6070aca3f38ce6929501f4787803a072b/5716

https://etherscan.io/address/0x882a47e6070aca3f38ce6929501f4787803a072b#code

Assets are centralized and both "setProvenanceHash" and "setBaseURI" can be called anytime making the entire thing super mutable.

https://etherscan.io/address/0x16f5a35647d6f03d5d3da7b35409d65ba03af3b2#code

Assets are fuilly on-chain, super good usage of watchdogs (contractSealed variable). It is a pretty smart way of doing things instead of forcing migration - kudos to LarvaLabs

https://opensea.io/collection/pixel-headz

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e

Centralized contract with openly editable metadata by the collection creator: STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/collection/untamed-elephants

https://etherscan.io/address/0x613e5136a22206837d12ef7a85f7de2825de1334#code

Assets are decentralized but setBaseUri can be called at anytime by collection owner which makes the contract mutable.

https://opensea.io/collection/9021collective

https://etherscan.io/address/0x248de15e3a0da895f4f82cd24bff89964e4aa381#code

Assets are decentralized but too many functions inside the contract allow mutability of the assets - also the contract is a bit of a mess

https://opensea.io/collection/ready-player-cat-nft

https://etherscan.io/address/0xcdb7c1a6fe7e112210ca548c214f656763e13533#code

Assets are centralized and contract is "upgradeable" meaning that it can be changed AT ANYTIME. STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/collection/peepeeboy

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e

Centralized contract with setTokenURIPrefix callable anytime by the collection creator: STAY AWAY FROM SUCH CONTRACT!

https://opensea.io/collection/luchadores-io

https://etherscan.io/address/0x8b4616926705fb61e9c4eeac07cd946a5d4b0760#code

Great contract, data are immutable because on-chain but the visual parts is mutable because not hosted on IPFS. Still good tho.

https://opensea.io/collection/obitsofficial

https://etherscan.io/address/0x30cdac3871c41a63767247c8d1a2de59f5714e78

Assets are decentralized, great usage of watchdogs,

https://tubbyreindeer.com/

https://cchain.explorer.avax.network/address/0xA5A0958Aac97C89406ae14666A42EEF91D8801d4/transactions

Assets are decentralized, great usage of watchdogs,

https://opensea.io/collection/8-bit-sport-football

https://etherscan.io/address/0x495f947276749ce646f68ac8c248420045cb7b5e

Centralized contract, assets can be lost if the platform closes. Metadata are hosted on a dabatase.