019b3836-216d-725a-b449-917beb227cab
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 113 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 114 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 43271 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 43272 | capability.graph | complete | 1 / 3 | 1 week ago |
| 43273 | detector.run | complete | 1 / 3 | 1 week ago |
| 43274 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0061 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x3a98ef39 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x0148 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x42cde4e8 00000025: EQ 00000026: PUSH2 0x0151 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x960bfe04 00000030: EQ 00000031: PUSH2 0x015a 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0xa6f9dae1 0000003b: EQ 0000003c: PUSH2 0x0180 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0xab377daa 00000046: EQ 00000047: PUSH2 0x01c3 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xce7c2ac2 00000051: EQ 00000052: PUSH2 0x0209 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0xebf6a0fa 0000005c: EQ 0000005d: PUSH2 0x0221 00000060: JUMPI 00000061: JUMPDEST 00000062: PUSH2 0x02ae 00000065: PUSH1 0x00 00000067: PUSH1 0x00 00000069: PUSH1 0x02 0000006b: PUSH1 0x00 0000006d: POP 0000006e: SLOAD 0000006f: ADDRESS 00000070: PUSH1 0x01 00000072: PUSH1 0xa0 00000074: PUSH1 0x02 00000076: EXP 00000077: SUB 00000078: AND 00000079: BALANCE 0000007a: GT 0000007b: ISZERO 0000007c: PUSH2 0x02b0 0000007f: JUMPI 00000080: PUSH1 0x01 00000082: SLOAD 00000083: PUSH1 0x01 00000085: PUSH1 0xa0 00000087: PUSH1 0x02 00000089: EXP 0000008a: SUB 0000008b: ADDRESS 0000008c: AND 0000008d: BALANCE 0000008e: DIV 0000008f: SWAP2 00000090: POP 00000091: JUMPDEST 00000092: PUSH1 0x03 00000094: SLOAD 00000095: DUP2 00000096: LT 00000097: ISZERO 00000098: PUSH2 0x02b0 0000009b: JUMPI 0000009c: PUSH1 0x03 0000009e: DUP1 0000009f: SLOAD 000000a0: DUP3 000000a1: SWAP1 000000a2: DUP2 000000a3: LT 000000a4: ISZERO 000000a5: PUSH2 0x0002 000000a8: JUMPI 000000a9: PUSH1 0x00 000000ab: DUP3 000000ac: DUP2 000000ad: MSTORE 000000ae: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85b 000000cf: SWAP2 000000d0: SWAP1 000000d1: SWAP2 000000d2: ADD 000000d3: SLOAD 000000d4: DUP3 000000d5: SLOAD 000000d6: PUSH1 0x01 000000d8: PUSH1 0xa0 000000da: PUSH1 0x02 000000dc: EXP 000000dd: SUB 000000de: SWAP2 000000df: SWAP1 000000e0: SWAP2 000000e1: AND 000000e2: SWAP3 000000e3: DUP6 000000e4: SWAP2 000000e5: PUSH1 0x04 000000e7: SWAP2 000000e8: DUP5 000000e9: SWAP2 000000ea: DUP8 000000eb: SWAP1 000000ec: DUP2 000000ed: LT 000000ee: ISZERO 000000ef: PUSH2 0x0002 000000f2: JUMPI 000000f3: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85b 00000114: ADD 00000115: SLOAD 00000116: PUSH1 0x01 00000118: PUSH1 0xa0 0000011a: PUSH1 0x02 0000011c: EXP 0000011d: SUB 0000011e: AND 0000011f: DUP3 00000120: MSTORE 00000121: POP 00000122: PUSH1 0x20 00000124: SWAP2 00000125: SWAP1 00000126: SWAP2 00000127: MSTORE 00000128: POP 00000129: PUSH1 0x40 0000012b: DUP1 0000012c: DUP4 0000012d: KECCAK256 0000012e: SLOAD 0000012f: SWAP1 00000130: MLOAD 00000131: SWAP2 00000132: MUL 00000133: SWAP1 00000134: DUP3 00000135: DUP2 00000136: DUP2 00000137: DUP2 00000138: DUP6 00000139: DUP9 0000013a: DUP4 0000013b: CALL 0000013c: POP 0000013d: POP 0000013e: POP 0000013f: POP 00000140: POP 00000141: PUSH1 0x01 00000143: ADD 00000144: PUSH2 0x0091 00000147: JUMP 00000148: JUMPDEST 00000149: PUSH2 0x02b4 0000014c: PUSH1 0x01 0000014e: SLOAD 0000014f: DUP2 00000150: JUMP 00000151: JUMPDEST 00000152: PUSH2 0x02b4 00000155: PUSH1 0x02 00000157: SLOAD 00000158: DUP2 00000159: JUMP 0000015a: JUMPDEST 0000015b: PUSH2 0x02ae 0000015e: PUSH1 0x04 00000160: CALLDATALOAD 00000161: PUSH1 0x00 00000163: SLOAD 00000164: CALLER 00000165: PUSH1 0x01 00000167: PUSH1 0xa0 00000169: PUSH1 0x02 0000016b: EXP 0000016c: SUB 0000016d: SWAP1 0000016e: DUP2 0000016f: AND 00000170: SWAP2 00000171: AND 00000172: EQ 00000173: ISZERO 00000174: PUSH2 0x017d 00000177: JUMPI 00000178: PUSH1 0x02 0000017a: DUP2 0000017b: SWAP1 0000017c: SSTORE 0000017d: JUMPDEST 0000017e: POP 0000017f: JUMP 00000180: JUMPDEST 00000181: PUSH2 0x02b4 00000184: PUSH1 0x04 00000186: CALLDATALOAD 00000187: PUSH1 0x00 00000189: DUP1 0000018a: SLOAD 0000018b: CALLER 0000018c: PUSH1 0x01 0000018e: PUSH1 0xa0 00000190: PUSH1 0x02 00000192: EXP 00000193: SUB 00000194: SWAP1 00000195: DUP2 00000196: AND 00000197: SWAP2 00000198: AND 00000199: EQ 0000019a: ISZERO 0000019b: PUSH2 0x01be 0000019e: JUMPI 0000019f: DUP1 000001a0: SLOAD 000001a1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001b6: NOT 000001b7: AND 000001b8: DUP3 000001b9: OR 000001ba: SWAP1 000001bb: SSTORE 000001bc: PUSH1 0x01 000001be: JUMPDEST 000001bf: SWAP2 000001c0: SWAP1 000001c1: POP 000001c2: JUMP 000001c3: JUMPDEST 000001c4: PUSH2 0x02b4 000001c7: PUSH1 0x04 000001c9: CALLDATALOAD 000001ca: PUSH1 0x03 000001cc: DUP1 000001cd: SLOAD 000001ce: DUP3 000001cf: SWAP1 000001d0: DUP2 000001d1: LT 000001d2: ISZERO 000001d3: PUSH2 0x0002 000001d6: JUMPI 000001d7: POP 000001d8: PUSH1 0x00 000001da: MSTORE 000001db: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85b 000001fc: ADD 000001fd: SLOAD 000001fe: PUSH1 0x01 00000200: PUSH1 0xa0 00000202: PUSH1 0x02 00000204: EXP 00000205: SUB 00000206: AND 00000207: DUP2 00000208: JUMP 00000209: JUMPDEST 0000020a: PUSH2 0x02b4 0000020d: PUSH1 0x04 0000020f: CALLDATALOAD 00000210: PUSH1 0x04 00000212: PUSH1 0x20 00000214: MSTORE 00000215: PUSH1 0x00 00000217: SWAP1 00000218: DUP2 00000219: MSTORE 0000021a: PUSH1 0x40 0000021c: SWAP1 0000021d: KECCAK256 0000021e: SLOAD 0000021f: DUP2 00000220: JUMP 00000221: JUMPDEST 00000222: PUSH2 0x02b4 00000225: PUSH1 0x04 00000227: CALLDATALOAD 00000228: PUSH1 0x24 0000022a: CALLDATALOAD 0000022b: PUSH1 0x00 0000022d: DUP1 0000022e: SLOAD 0000022f: CALLER 00000230: PUSH1 0x01 00000232: PUSH1 0xa0 00000234: PUSH1 0x02 00000236: EXP 00000237: SUB 00000238: SWAP1 00000239: DUP2 0000023a: AND 0000023b: SWAP2 0000023c: AND 0000023d: EQ 0000023e: ISZERO 0000023f: PUSH2 0x02d9 00000242: JUMPI 00000243: PUSH1 0x01 00000245: PUSH1 0xa0 00000247: PUSH1 0x02 00000249: EXP 0000024a: SUB 0000024b: DUP4 0000024c: AND 0000024d: DUP2 0000024e: MSTORE 0000024f: PUSH1 0x04 00000251: PUSH1 0x20 00000253: MSTORE 00000254: PUSH1 0x40 00000256: DUP2 00000257: KECCAK256 00000258: SLOAD 00000259: DUP3 0000025a: GT 0000025b: ISZERO 0000025c: PUSH2 0x02df 0000025f: JUMPI 00000260: PUSH1 0x40 00000262: DUP2 00000263: KECCAK256 00000264: SLOAD 00000265: DUP2 00000266: EQ 00000267: ISZERO 00000268: PUSH2 0x032a 0000026b: JUMPI 0000026c: PUSH1 0x03 0000026e: DUP1 0000026f: SLOAD 00000270: PUSH1 0x01 00000272: DUP2 00000273: ADD 00000274: DUP1 00000275: DUP4 00000276: SSTORE 00000277: DUP6 00000278: SWAP3 00000279: SWAP2 0000027a: SWAP1 0000027b: DUP3 0000027c: SWAP1 0000027d: DUP3 0000027e: DUP1 0000027f: ISZERO 00000280: DUP3 00000281: SWAP1 00000282: GT 00000283: PUSH2 0x02f7 00000286: JUMPI 00000287: DUP2 00000288: DUP4 00000289: PUSH1 0x00 0000028b: MSTORE 0000028c: PUSH1 0x20 0000028e: PUSH1 0x00 00000290: KECCAK256 00000291: SWAP2 00000292: DUP3 00000293: ADD 00000294: SWAP2 00000295: ADD 00000296: PUSH2 0x02f7 00000299: SWAP2 0000029a: SWAP1 0000029b: JUMPDEST 0000029c: DUP1 0000029d: DUP3 0000029e: GT 0000029f: ISZERO 000002a0: PUSH2 0x0350 000002a3: JUMPI 000002a4: DUP9 000002a5: DUP2 000002a6: SSTORE 000002a7: PUSH1 0x01 000002a9: ADD 000002aa: PUSH2 0x029b 000002ad: JUMP 000002ae: JUMPDEST 000002af: STOP 000002b0: JUMPDEST 000002b1: POP 000002b2: POP 000002b3: JUMP 000002b4: JUMPDEST 000002b5: PUSH1 0x60 000002b7: SWAP1 000002b8: DUP2 000002b9: MSTORE 000002ba: PUSH1 0x20 000002bc: SWAP1 000002bd: RETURN 000002be: JUMPDEST 000002bf: PUSH1 0x40 000002c1: DUP2 000002c2: KECCAK256 000002c3: DUP1 000002c4: SLOAD 000002c5: PUSH1 0x01 000002c7: DUP1 000002c8: SLOAD 000002c9: SWAP2 000002ca: DUP6 000002cb: SWAP1 000002cc: SUB 000002cd: SWAP1 000002ce: SWAP2 000002cf: SUB 000002d0: SWAP1 000002d1: SSTORE 000002d2: DUP3 000002d3: SWAP1 000002d4: SSTORE 000002d5: JUMPDEST 000002d6: POP 000002d7: PUSH1 0x01 000002d9: JUMPDEST 000002da: SWAP3 000002db: SWAP2 000002dc: POP 000002dd: POP 000002de: JUMP 000002df: JUMPDEST 000002e0: PUSH1 0x40 000002e2: DUP2 000002e3: KECCAK256 000002e4: SLOAD 000002e5: DUP3 000002e6: EQ 000002e7: ISZERO 000002e8: PUSH2 0x02be 000002eb: JUMPI 000002ec: PUSH1 0x40 000002ee: DUP2 000002ef: KECCAK256 000002f0: DUP2 000002f1: SWAP1 000002f2: SSTORE 000002f3: PUSH2 0x02d5 000002f6: JUMP 000002f7: JUMPDEST 000002f8: POP 000002f9: POP 000002fa: POP 000002fb: DUP2 000002fc: SLOAD 000002fd: DUP2 000002fe: LT 000002ff: ISZERO 00000300: PUSH2 0x0002 00000303: JUMPI 00000304: SWAP1 00000305: PUSH1 0x00 00000307: MSTORE 00000308: PUSH1 0x20 0000030a: PUSH1 0x00 0000030c: KECCAK256 0000030d: SWAP1 0000030e: ADD 0000030f: PUSH1 0x00 00000311: PUSH2 0x0100 00000314: EXP 00000315: DUP2 00000316: SLOAD 00000317: DUP2 00000318: PUSH1 0x01 0000031a: PUSH1 0xa0 0000031c: PUSH1 0x02 0000031e: EXP 0000031f: SUB 00000320: MUL 00000321: NOT 00000322: AND 00000323: SWAP1 00000324: DUP4 00000325: MUL 00000326: OR 00000327: SWAP1 00000328: SSTORE 00000329: POP 0000032a: JUMPDEST 0000032b: PUSH1 0x40 0000032d: DUP2 0000032e: KECCAK256 0000032f: PUSH1 0x01 00000331: PUSH1 0xa0 00000333: PUSH1 0x02 00000335: EXP 00000336: SUB 00000337: DUP5 00000338: AND 00000339: DUP3 0000033a: MSTORE 0000033b: DUP1 0000033c: SLOAD 0000033d: PUSH1 0x01 0000033f: DUP1 00000340: SLOAD 00000341: SWAP2 00000342: DUP6 00000343: SUB 00000344: SWAP1 00000345: SWAP2 00000346: ADD 00000347: SWAP1 00000348: SSTORE 00000349: DUP3 0000034a: SWAP1 0000034b: SSTORE 0000034c: PUSH2 0x02d5 0000034f: JUMP 00000350: JUMPDEST 00000351: POP 00000352: SWAP1 00000353: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x3d32a14213fb2c6d83d7fc6fde82d1511f6229d47f566bb5ad58101e720c16c0
call_targets:
0x8527d9ffdc4947ee52c2717ff4ac01e3c06c71de
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x3d32a14213fb2c6d83d7fc6fde82d1511f6229d47f566bb5ad58101e720c16c0",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x8527d9ffdc4947ee52c2717ff4ac01e3c06c71de"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x3a98ef39",
"selector": "0x3a98ef39",
"calldata_variants": [
"0x3a98ef39",
"0x3a98ef390000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x42cde4e8",
"selector": "0x42cde4e8",
"calldata_variants": [
"0x42cde4e8",
"0x42cde4e80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x960bfe04",
"selector": "0x960bfe04",
"calldata_variants": [
"0x960bfe04",
"0x960bfe040000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa6f9dae1",
"selector": "0xa6f9dae1",
"calldata_variants": [
"0xa6f9dae1",
"0xa6f9dae10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xab377daa",
"selector": "0xab377daa",
"calldata_variants": [
"0xab377daa",
"0xab377daa0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xce7c2ac2",
"selector": "0xce7c2ac2",
"calldata_variants": [
"0xce7c2ac2",
"0xce7c2ac20000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xebf6a0fa",
"selector": "0xebf6a0fa",
"calldata_variants": [
"0xebf6a0fa",
"0xebf6a0fa0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 315,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x3d32a14213fb2c6d83d7fc6fde82d1511f6229d47f566bb5ad58101e720c16c0
call_targets:
0x8527d9ffdc4947ee52c2717ff4ac01e3c06c71de
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x3d32a14213fb2c6d83d7fc6fde82d1511f6229d47f566bb5ad58101e720c16c0",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x8527d9ffdc4947ee52c2717ff4ac01e3c06c71de"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x3a98ef39",
"selector": "0x3a98ef39",
"calldata_variants": [
"0x3a98ef39",
"0x3a98ef390000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x42cde4e8",
"selector": "0x42cde4e8",
"calldata_variants": [
"0x42cde4e8",
"0x42cde4e80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x960bfe04",
"selector": "0x960bfe04",
"calldata_variants": [
"0x960bfe04",
"0x960bfe040000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa6f9dae1",
"selector": "0xa6f9dae1",
"calldata_variants": [
"0xa6f9dae1",
"0xa6f9dae10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xab377daa",
"selector": "0xab377daa",
"calldata_variants": [
"0xab377daa",
"0xab377daa0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xce7c2ac2",
"selector": "0xce7c2ac2",
"calldata_variants": [
"0xce7c2ac2",
"0xce7c2ac20000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xebf6a0fa",
"selector": "0xebf6a0fa",
"calldata_variants": [
"0xebf6a0fa",
"0xebf6a0fa0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 315,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|