TW
Tripwire
Find contracts. Test them. Review real vulns.
Confirmed Findings
2,205
crit 60 high 1157
All Findings
46,184
Across all runs
Chain
1
Mainnet focus
Signal Mix
24239
high severity in results
Findings
filter + triage
Reset
Quick filters: candidate lane confirmed only critical high detector codex
Severity Tool Title Address Value USD Validated Confirmed Found Run
medium cast DELEGATECALL present 0x3d64bd587300af85ae54007d350bfd293dc24581 $54,210.42 no — 3 months ago 019bb2d5-fd57-707f-a904-b2b419626a9c
high detector Untrusted CALL target/value reachable 0xaafdfa4a935d8511bf285af11a0544ce7e4a1199 $54,249.81 no no 3 months ago 019bb2d5-fd4f-7134-9797-5bc781704143
high detector ETH value transfer possible 0xaafdfa4a935d8511bf285af11a0544ce7e4a1199 $54,249.81 no no 3 months ago 019bb2d5-fd4f-7134-9797-5bc781704143
high detector Untrusted CALL target/value reachable 0x7578425460c842ca077544ffe224cf213c931241 $54,276.19 no no 3 months ago 019bb2d5-fd48-731a-858c-65a6ba51906e
high detector ETH value transfer possible 0x7578425460c842ca077544ffe224cf213c931241 $54,276.19 no no 3 months ago 019bb2d5-fd48-731a-858c-65a6ba51906e
medium detector CREATE/CREATE2 reachable 0x7578425460c842ca077544ffe224cf213c931241 $54,276.19 no no 3 months ago 019bb2d5-fd48-731a-858c-65a6ba51906e
low cast Contract creation opcode present 0x7578425460c842ca077544ffe224cf213c931241 $54,276.19 no — 3 months ago 019bb2d5-fd48-731a-858c-65a6ba51906e
info cast Heavy CALL-family usage 0x7578425460c842ca077544ffe224cf213c931241 $54,276.19 no — 3 months ago 019bb2d5-fd48-731a-858c-65a6ba51906e
info cast Heavy EXTCODE*/BALANCE usage 0x7578425460c842ca077544ffe224cf213c931241 $54,276.19 no — 3 months ago 019bb2d5-fd48-731a-858c-65a6ba51906e
high detector Authorization based on tx.origin 0x00055b597e0050405b27c90d21343b1eb5b74165 $54,364.06 no — 3 months ago 019bb2d5-fd3e-73af-81be-e1af5c6d5e38
medium detector Untrusted CALL target/value reachable 0x00055b597e0050405b27c90d21343b1eb5b74165 $54,364.06 no no 3 months ago 019bb2d5-fd3e-73af-81be-e1af5c6d5e38
medium detector ETH value transfer possible 0x00055b597e0050405b27c90d21343b1eb5b74165 $54,364.06 no no 3 months ago 019bb2d5-fd3e-73af-81be-e1af5c6d5e38
medium detector ETH value transfer possible 0xe9426198aec621203ba1fe07cf292b3796ba6248 $54,368.27 no no 3 months ago 019bb2d5-fd30-71f7-b28c-904f162f05ba
medium detector Untrusted CALL target/value reachable 0xe9426198aec621203ba1fe07cf292b3796ba6248 $54,368.27 no no 3 months ago 019bb2d5-fd30-71f7-b28c-904f162f05ba
critical detector Untrusted DELEGATECALL target reachable 0x3c43c421f08e2a48889ea3f75a747b7a7a366a0b $54,485.54 no no 3 months ago 019bb2d5-fd27-7219-8d7d-9d545f16545a
medium cast DELEGATECALL present 0x3c43c421f08e2a48889ea3f75a747b7a7a366a0b $54,485.54 no — 3 months ago 019bb2d5-fd27-7219-8d7d-9d545f16545a
high detector ETH value transfer possible 0x9c6d5a71fdd306329287a835e9b8edb7f0f17898 $54,518.67 no no 3 months ago 019bb2d5-fd1d-71c5-99a4-d8011bee64d6
high detector Untrusted CALL target/value reachable 0x9c6d5a71fdd306329287a835e9b8edb7f0f17898 $54,518.67 no no 3 months ago 019bb2d5-fd1d-71c5-99a4-d8011bee64d6
info cast Heavy CALL-family usage 0x9c6d5a71fdd306329287a835e9b8edb7f0f17898 $54,518.67 no — 3 months ago 019bb2d5-fd1d-71c5-99a4-d8011bee64d6
info cast Heavy EXTCODE*/BALANCE usage 0x9c6d5a71fdd306329287a835e9b8edb7f0f17898 $54,518.67 no — 3 months ago 019bb2d5-fd1d-71c5-99a4-d8011bee64d6
medium cast DELEGATECALL present 0x62714bd7cb0f167c5c27445a5107ef79a886239f $54,584.30 no — 3 months ago 019bb2d5-fd11-70b6-9e2a-e8a7ed77e0b7
high detector ETH value transfer possible 0xa29d18f6a73f6f65c9f0eeae2dd0563d6f615c0f $54,624.06 no no 3 months ago 019bb2d5-fd06-737e-8a9d-a5ad93185d85
high detector Untrusted CALL target/value reachable 0xa29d18f6a73f6f65c9f0eeae2dd0563d6f615c0f $54,624.06 no no 3 months ago 019bb2d5-fd06-737e-8a9d-a5ad93185d85
info cast Heavy EXTCODE*/BALANCE usage 0xa29d18f6a73f6f65c9f0eeae2dd0563d6f615c0f $54,624.06 no — 3 months ago 019bb2d5-fd06-737e-8a9d-a5ad93185d85
high detector Authorization based on tx.origin 0x000000000000040470635eb91b7ce4d132d616ed $54,720.31 no — 3 months ago 019bb2d5-fced-72a8-b292-cf03c66350e4
medium detector ETH value transfer possible 0x000000000000040470635eb91b7ce4d132d616ed $54,720.31 no no 3 months ago 019bb2d5-fced-72a8-b292-cf03c66350e4
medium detector Untrusted CALL target/value reachable 0x000000000000040470635eb91b7ce4d132d616ed $54,720.31 no no 3 months ago 019bb2d5-fced-72a8-b292-cf03c66350e4
info cast Heavy CALL-family usage 0x000000000000040470635eb91b7ce4d132d616ed $54,720.31 no — 3 months ago 019bb2d5-fced-72a8-b292-cf03c66350e4
info cast Heavy EXTCODE*/BALANCE usage 0x000000000000040470635eb91b7ce4d132d616ed $54,720.31 no — 3 months ago 019bb2d5-fced-72a8-b292-cf03c66350e4
high codex Unprotected initialize allows hostile takeover of clones 0x24d937143d3f5cf04c72ba112735151a8cae2262 $0.00 no — 3 months ago 019bb005-2254-73e9-85d1-87e7597e1544
medium codex `withdraw_admin_fees` can be reentered to withdraw fees multiple times 0x24d937143d3f5cf04c72ba112735151a8cae2262 $0.00 no — 3 months ago 019bb005-2254-73e9-85d1-87e7597e1544
low codex Unchecked ERC20 transfer result in `withdraw_admin_fees` can zero admin fees on failed transfer 0x24d937143d3f5cf04c72ba112735151a8cae2262 $0.00 no — 3 months ago 019bb005-2254-73e9-85d1-87e7597e1544
low codex External value-transferring CALLs with computed targets; reentrancy protection unclear 0x86e3f7bd35bbd635bd41834c73356e1d9803e53b $0.00 no — 3 months ago 019bb005-1c17-7327-878c-60f8b94db434
high codex Computed DELEGATECALL target reachable (possible arbitrary code execution) 0x9cea88ee39b6cc09c478942bbf83bfa77d87b5f3 $0.00 no — 3 months ago 019bb005-067a-72f6-9cc1-461f0f1a0847
medium codex Value-bearing external CALLs to computed targets without detected guard 0x9cea88ee39b6cc09c478942bbf83bfa77d87b5f3 $0.00 no — 3 months ago 019bb005-067a-72f6-9cc1-461f0f1a0847
high codex Buyout success never transfers listing tokens to offerer (tokens locked permanently) 0x90b6047da43a370a402fb1f88f4313faa34a923b $0.00 no — 3 months ago 019bb004-d430-731f-a526-9f72bf0d193b
medium codex Public initializer can be front‑run on uninitialized deployments 0x90b6047da43a370a402fb1f88f4313faa34a923b $0.00 no — 3 months ago 019bb004-d430-731f-a526-9f72bf0d193b
high slither CrowdfundWithEditionsLogic.sendValue(address,uint256) (contracts/producers/crowdfunds/crowdfund-with-editions/CrowdfundWithEditionsLogic.sol#165-177) sends eth to arbitrary user 0x0e41862deeca185f784b96a0bc44de21f0436306 $0.00 no — 3 months ago 019bb004-9839-71fb-bf53-cdb271c42b17
high slither CrowdfundWithEditionsStorage.fundingCap (contracts/producers/crowdfunds/crowdfund-with-editions/CrowdfundWithEditionsStorage.sol#42) is never initialized. It is used in: 0x0e41862deeca185f784b96a0bc44de21f0436306 $0.00 no — 3 months ago 019bb004-9839-71fb-bf53-cdb271c42b17
high slither CrowdfundWithEditionsStorage.operatorPercent (contracts/producers/crowdfunds/crowdfund-with-editions/CrowdfundWithEditionsStorage.sol#48) is never initialized. It is used in: 0x0e41862deeca185f784b96a0bc44de21f0436306 $0.00 no — 3 months ago 019bb004-9839-71fb-bf53-cdb271c42b17
high slither CrowdfundWithEditionsStorage.editions (contracts/producers/crowdfunds/crowdfund-with-editions/CrowdfundWithEditionsStorage.sol#58) is never initialized. It is used in: 0x0e41862deeca185f784b96a0bc44de21f0436306 $0.00 no — 3 months ago 019bb004-9839-71fb-bf53-cdb271c42b17
high slither CrowdfundWithEditionsStorage.operator (contracts/producers/crowdfunds/crowdfund-with-editions/CrowdfundWithEditionsStorage.sol#33) is never initialized. It is used in: 0x0e41862deeca185f784b96a0bc44de21f0436306 $0.00 no — 3 months ago 019bb004-9839-71fb-bf53-cdb271c42b17
high slither CrowdfundWithEditionsStorage.feePercentage (contracts/producers/crowdfunds/crowdfund-with-editions/CrowdfundWithEditionsStorage.sol#45) is never initialized. It is used in: 0x0e41862deeca185f784b96a0bc44de21f0436306 $0.00 no — 3 months ago 019bb004-9839-71fb-bf53-cdb271c42b17
high slither CrowdfundWithEditionsStorage.treasuryConfig (contracts/producers/crowdfunds/crowdfund-with-editions/CrowdfundWithEditionsStorage.sol#39) is never initialized. It is used in: 0x0e41862deeca185f784b96a0bc44de21f0436306 $0.00 no — 3 months ago 019bb004-9839-71fb-bf53-cdb271c42b17
medium codex Anyone can trigger withdrawals at any time, breaking funding cap and redemption backing 0x0e41862deeca185f784b96a0bc44de21f0436306 $0.00 no — 3 months ago 019bb004-9839-71fb-bf53-cdb271c42b17
low codex Reentrancy in _withdraw allows treasury to collect multiple fees 0x0e41862deeca185f784b96a0bc44de21f0436306 $0.00 no — 3 months ago 019bb004-9839-71fb-bf53-cdb271c42b17
medium slither Reentrancy in UniswapV3Pool.swap(address,bool,int256,uint160,bytes) (contracts/UniswapV3Pool.sol#596-788): 0xe9a3685b01aedafbdfeede070e5b02a0b8042569 $54,722.94 no — 3 months ago 019bb004-7b54-71b8-be12-7231bd94f8ea
medium slither Reentrancy in UniswapV3Pool.collectProtocol(address,uint128,uint128) (contracts/UniswapV3Pool.sol#848-868): 0xe9a3685b01aedafbdfeede070e5b02a0b8042569 $54,722.94 no — 3 months ago 019bb004-7b54-71b8-be12-7231bd94f8ea
medium codex Deposits credit the requested amount instead of actual tokens received 0x2f23228b905ceb4734eb42d9b42805296667c93b $54,734.89 no — 3 months ago 019bb004-7b4d-7161-b0f8-f40aa9087df9
high codex Unprotected initializer allows proxy takeover if not initialized atomically 0x828b154032950c8ff7cf8085d841723db2696056 $54,741.24 no — 3 months ago 019bb004-7b45-70c7-adb3-d1c5cb2846d2