Does SPYon / USDC match its issuer's published contract?

QED signs a canonical JSON payload. Fetch the public key from /.well-known/qed.json, then check the signature against this payload.

Canonical JSON

{"block":26229364,"chain":"ethereum","checked_at":"2026-10-19T21:39:34Z","dev":false,"expires_at":"2026-10-20T21:39:34Z","issuer":"Ondo","pool":{"base":{"address":"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","balance":"47889726136","decimals":6,"symbol":"USDC"},"chain":"ethereum","dex":"uniswap-v3","pool":"0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB","quote":{"address":"0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","balance":"48134497165073799150","decimals":18,"symbol":"SPYon"}},"quote_share_of_supply":0.000898752433608219,"reads":[{"block":26229364,"method":"eth_blockNumber","params":[],"result_hash":"4c55a6ecf860b1a03d85b9aa74673ea9609d63c431b3eea499703b58bfcdbd96","slot":null},{"block":null,"method":"eth_call","params":["0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB","token0()"],"raw_result":"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48","result_hash":"6239f262cd1d947b947081c9eba6e8771378942478e1d48654f4f132ebb96021","slot":null},{"block":null,"method":"eth_call","params":["0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB","token1()"],"raw_result":"0xfedc5f4a6c38211c1338aa411018dfaf26612c08","result_hash":"44b5f1443d379ebaf6b0ecdc72e5af715192041a71ba98054dc4424637fe43d7","slot":null},{"block":null,"method":"eth_call","params":["0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB","getReserves()"],"raw_result":"false","result_hash":"076de6e730df0b4c3860877a0f619c6ac11f8aefd78313ac793a2a703c026869","slot":null},{"block":null,"method":"eth_call","params":["0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB","slot0()"],"raw_result":"true","result_hash":"18d10c7d2b4b04aaf04254d1ae5d655a5dc0407cbcdd5a8c3986e985370f36ee","slot":null},{"block":null,"method":"eth_call","params":["0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB","factory()"],"raw_result":"0x1f98431c8ad98523631ae4a59f267346ea31f984","result_hash":"24b698329e82b3994906dfbd01281d9a6f12f65aa59de65831657e6e928d4c80","slot":null},{"block":null,"method":"eth_call","params":["0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB","fee()"],"raw_result":"3000","result_hash":"53232d7da9fd2a1931dcd44af08ec415dd52ab8ecc4037ef5e68eb3753978a2e","slot":null},{"block":null,"method":"eth_call","params":["0x1F98431c8aD98523631AE4a59f267346ea31F984","getPool","0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","0xbb8"],"raw_result":"0x5638bbde046ec2efc7c8f3fd8dc5a9a1016f7eeb","result_hash":"3c2f0694d17a66c6c3b2e11ff6640767bb90df1d330ecb85fed22bfdf3556432","slot":null},{"block":null,"method":"eth_call","params":["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","symbol()"],"raw_result":"Some(\"USDC\")","result_hash":"a3c9e246b0832b52e41efce041d8614251f5e288cdd4b192e85bfd3dfcb748ff","slot":null},{"block":null,"method":"eth_call","params":["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","decimals()"],"raw_result":"Some(6)","result_hash":"c68fe6989b1835302197d0af5be845dfab10ed9f9632205eb4ab5b949b9e1a6a","slot":null},{"block":null,"method":"eth_call","params":["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","balanceOf","0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB"],"raw_result":"Some(\"47889726136\")","result_hash":"e94425179757ba6602b66d2e69d8d404baf25da54049ab97f36fd8c8ddc58128","slot":null},{"block":null,"method":"eth_call","params":["0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","symbol()"],"raw_result":"Some(\"SPYon\")","result_hash":"3d167a822bc2707e7dd38e22388e801aa3fa8afd06c0830b7e8e9fd01f918420","slot":null},{"block":null,"method":"eth_call","params":["0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","decimals()"],"raw_result":"Some(18)","result_hash":"c14f173ff30df32f36fac2ea29d9a20482082428fd32b58be5433d310884f764","slot":null},{"block":null,"method":"eth_call","params":["0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","balanceOf","0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB"],"raw_result":"Some(\"48134497165073799150\")","result_hash":"20c1161e6cca5a36b66581299e9d1b484a9e32e87fb770a7a89d6dfb96832db0","slot":null},{"block":null,"method":"eth_call","params":["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","symbol()"],"raw_result":"Some(\"USDC\")","result_hash":"a3c9e246b0832b52e41efce041d8614251f5e288cdd4b192e85bfd3dfcb748ff","slot":null},{"block":null,"method":"eth_call","params":["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","name()"],"raw_result":"Some(\"USD Coin\")","result_hash":"fe94af15dc887a2c9df1fb0d6d276e6c586ca9d430ffeac0d05e4baee0637fd1","slot":null},{"block":null,"method":"eth_call","params":["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","decimals()"],"raw_result":"Some(6)","result_hash":"c68fe6989b1835302197d0af5be845dfab10ed9f9632205eb4ab5b949b9e1a6a","slot":null},{"block":null,"method":"eth_call","params":["0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48","totalSupply()"],"raw_result":"Some(\"47869357265912988\")","result_hash":"0dd033791a44f37048c9d4a14699518bac044d7eb4e388f2fbc15e95899f6012","slot":null},{"block":null,"method":"eth_call","params":["0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","symbol()"],"raw_result":"Some(\"SPYon\")","result_hash":"3d167a822bc2707e7dd38e22388e801aa3fa8afd06c0830b7e8e9fd01f918420","slot":null},{"block":null,"method":"eth_call","params":["0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","name()"],"raw_result":"Some(\"SPDR S&P 500 ETF (Ondo Tokenized)\")","result_hash":"cfbb201091a44bc39f2c8c4fc891ef189d76588ee10408cb469f0d43664eaab6","slot":null},{"block":null,"method":"eth_call","params":["0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","decimals()"],"raw_result":"Some(18)","result_hash":"c14f173ff30df32f36fac2ea29d9a20482082428fd32b58be5433d310884f764","slot":null},{"block":null,"method":"eth_call","params":["0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","totalSupply()"],"raw_result":"Some(\"53557014551636157720890\")","result_hash":"a56a6b95b657169cc713d2602e8e2168a916c83b3aa7fc9c13b2e35e5c354268","slot":null},{"block":null,"method":"eth_getCode","params":["0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","latest"],"result_hash":"8538a8190a64db88a5e0ec4c95f0129f9eecd6f3a3aacb869262b82d01d123ec","slot":null},{"block":null,"method":"eth_getCode","params":["0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","latest"],"result_hash":"8538a8190a64db88a5e0ec4c95f0129f9eecd6f3a3aacb869262b82d01d123ec","slot":null}],"registry_entry":{"chain":"ethereum","contract":"0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","decimals":null,"issuer":"Ondo","last_checked":"2026-10-18T20:40:22Z","name":"SPDR S&P 500 ETF (Ondo Tokenized)","official_deployments":[{"address":"0xFeDC5f4a6c38211c1338aa411018DFAf26612c08","network":"Ethereum"},{"address":"0x6a708EAD771238919D85930b5a0f10454E1C331a","network":"BNB Chain"},{"address":"k18WJUULWheRkSpSquYGdNNmtuE2Vbw1hpuUi92ondo","network":"Solana"},{"address":"0x32eC2792aeC02122eDD9f28866B720db1e1c1B54","network":"HyperEVM"}],"source":"https://docs.ondo.finance/addresses.md","source_url":"https://www.dropbox.com/scl/fi/qjfxyg748mx0dwi6up86d/EXTERNAL-Ondo-GM-Tokens-Ondo-GM-Tokens.csv?rlkey=n3no1w78wrah3umsl0nr9s77i&e=2&st=spdit2q1&dl=1","ticker":"SPY"},"registry_hash":"ec814fa92798a593ad5e6f9f4b7dbb22f489a5f439cf1b1999433b413a193021","signer":"GJWKkiUd3zj1pJGfeE7JitiPiwDJC6XmNFvpJWJuvvpn","slot":null,"subject":"0x5638bbDE046EC2EFC7C8f3fd8DC5A9A1016f7EEB","ticker":"SPY","verdict":{"Verified":{"issuer":"Ondo","ticker":"SPY"}},"version":1}

Signature

+7fqXh09dWYEOjRfd1fNTW3HZqRvWWXm533czG70XXtn69SJIG0u4XBaRLvx4NatO+KOm6OXtHP2Mw/6pUYxDg==

API call

GET /api/attest/2a1b413771848f1949117acf00b3f83ffaa0baffa441e65ecb3a7ff043920970

1. Fetch the public key and attestation JSON, then verify the signature with the published key.
2. Canonicalize the payload with sorted object keys and no whitespace, then verify its SHA-256 attestation id.
3. Run the API call above and compare the returned payload, serial, signer, and signature with this certificate.