019b3836-2181-7305-8cc9-cf997badaf3f
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 125 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 126 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 43211 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 43212 | capability.graph | complete | 1 / 3 | 1 week ago |
| 43213 | detector.run | complete | 1 / 3 | 1 week ago |
| 43214 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0082 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x2f29d8c5 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x00b3 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x55234ec0 00000025: EQ 00000026: PUSH2 0x00c0 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x806b984f 00000030: EQ 00000031: PUSH2 0x00d0 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x8a6a952a 0000003b: EQ 0000003c: PUSH2 0x00d9 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0x967ff23e 00000046: EQ 00000047: PUSH2 0x0116 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xa035b1fe 00000051: EQ 00000052: PUSH2 0x011f 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0xa2fb1175 0000005c: EQ 0000005d: PUSH2 0x0128 00000060: JUMPI 00000061: DUP1 00000062: PUSH4 0xb72481f8 00000067: EQ 00000068: PUSH2 0x016e 0000006b: JUMPI 0000006c: DUP1 0000006d: PUSH4 0xbcc941b6 00000072: EQ 00000073: PUSH2 0x0177 00000076: JUMPI 00000077: DUP1 00000078: PUSH4 0xe3450e13 0000007d: EQ 0000007e: PUSH2 0x0182 00000081: JUMPI 00000082: JUMPDEST 00000083: PUSH2 0x0194 00000086: PUSH1 0x00 00000088: DUP1 00000089: DUP1 0000008a: CALLVALUE 0000008b: PUSH1 0x01 0000008d: PUSH1 0xa0 0000008f: PUSH1 0x02 00000091: EXP 00000092: SUB 00000093: ADDRESS 00000094: AND 00000095: BALANCE 00000096: GT 00000097: ISZERO 00000098: PUSH2 0x00ab 0000009b: JUMPI 0000009c: CALLVALUE 0000009d: PUSH1 0x01 0000009f: PUSH1 0xa0 000000a1: PUSH1 0x02 000000a3: EXP 000000a4: SUB 000000a5: ADDRESS 000000a6: AND 000000a7: BALANCE 000000a8: SUB 000000a9: SWAP3 000000aa: POP 000000ab: JUMPDEST 000000ac: PUSH2 0x021f 000000af: PUSH2 0x00c4 000000b2: JUMP 000000b3: JUMPDEST 000000b4: PUSH2 0x0383 000000b7: JUMPDEST 000000b8: PUSH1 0x02 000000ba: SLOAD 000000bb: NUMBER 000000bc: SUB 000000bd: JUMPDEST 000000be: SWAP1 000000bf: JUMP 000000c0: JUMPDEST 000000c1: PUSH2 0x0383 000000c4: JUMPDEST 000000c5: PUSH1 0x00 000000c7: PUSH1 0x00 000000c9: PUSH2 0x03b2 000000cc: PUSH2 0x00b7 000000cf: JUMP 000000d0: JUMPDEST 000000d1: PUSH2 0x0383 000000d4: PUSH1 0x02 000000d6: SLOAD 000000d7: DUP2 000000d8: JUMP 000000d9: JUMPDEST 000000da: PUSH2 0x0383 000000dd: PUSH1 0x04 000000df: CALLDATALOAD 000000e0: PUSH1 0x07 000000e2: DUP1 000000e3: SLOAD 000000e4: DUP3 000000e5: SWAP1 000000e6: DUP2 000000e7: LT 000000e8: ISZERO 000000e9: PUSH2 0x0002 000000ec: JUMPI 000000ed: POP 000000ee: PUSH1 0x00 000000f0: MSTORE 000000f1: PUSH32 0xa66cc928b5edb82af9bd49922954155ab7b0942694bea4ce44661d9a8736c688 00000112: ADD 00000113: SLOAD 00000114: DUP2 00000115: JUMP 00000116: JUMPDEST 00000117: PUSH2 0x0383 0000011a: PUSH1 0x03 0000011c: SLOAD 0000011d: DUP2 0000011e: JUMP 0000011f: JUMPDEST 00000120: PUSH2 0x0383 00000123: PUSH1 0x04 00000125: SLOAD 00000126: DUP2 00000127: JUMP 00000128: JUMPDEST 00000129: PUSH2 0x0395 0000012c: PUSH1 0x04 0000012e: CALLDATALOAD 0000012f: PUSH1 0x06 00000131: DUP1 00000132: SLOAD 00000133: DUP3 00000134: SWAP1 00000135: DUP2 00000136: LT 00000137: ISZERO 00000138: PUSH2 0x0002 0000013b: JUMPI 0000013c: POP 0000013d: PUSH1 0x00 0000013f: MSTORE 00000140: PUSH32 0xf652222313e28459528d920b65115c16c04f3efc82aaedc97be59f3f377c0d3f 00000161: ADD 00000162: SLOAD 00000163: PUSH1 0x01 00000165: PUSH1 0xa0 00000167: PUSH1 0x02 00000169: EXP 0000016a: SUB 0000016b: AND 0000016c: DUP2 0000016d: JUMP 0000016e: JUMPDEST 0000016f: PUSH2 0x0383 00000172: PUSH1 0x05 00000174: SLOAD 00000175: DUP2 00000176: JUMP 00000177: JUMPDEST 00000178: PUSH2 0x0383 0000017b: PUSH1 0x06 0000017d: SLOAD 0000017e: PUSH2 0x00bd 00000181: JUMP 00000182: JUMPDEST 00000183: PUSH2 0x0395 00000186: PUSH1 0x01 00000188: SLOAD 00000189: PUSH1 0x01 0000018b: PUSH1 0xa0 0000018d: PUSH1 0x02 0000018f: EXP 00000190: SUB 00000191: AND 00000192: DUP2 00000193: JUMP 00000194: JUMPDEST 00000195: STOP 00000196: JUMPDEST 00000197: POP 00000198: POP 00000199: POP 0000019a: DUP2 0000019b: SLOAD 0000019c: DUP2 0000019d: LT 0000019e: ISZERO 0000019f: PUSH2 0x0002 000001a2: JUMPI 000001a3: PUSH1 0x00 000001a5: SWAP2 000001a6: DUP3 000001a7: MSTORE 000001a8: PUSH1 0x20 000001aa: SWAP1 000001ab: SWAP2 000001ac: KECCAK256 000001ad: ADD 000001ae: SSTORE 000001af: PUSH1 0x05 000001b1: DUP1 000001b2: SLOAD 000001b3: DUP3 000001b4: ADD 000001b5: SWAP1 000001b6: SSTORE 000001b7: JUMPDEST 000001b8: PUSH1 0x04 000001ba: SLOAD 000001bb: CALLVALUE 000001bc: LT 000001bd: PUSH2 0x021a 000001c0: JUMPI 000001c1: PUSH1 0x01 000001c3: DUP1 000001c4: SLOAD 000001c5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001da: NOT 000001db: AND 000001dc: CALLER 000001dd: OR 000001de: SWAP1 000001df: SSTORE 000001e0: NUMBER 000001e1: PUSH1 0x02 000001e3: SSTORE 000001e4: PUSH1 0x04 000001e6: SLOAD 000001e7: CALLVALUE 000001e8: GT 000001e9: ISZERO 000001ea: PUSH2 0x021a 000001ed: JUMPI 000001ee: PUSH1 0x04 000001f0: SLOAD 000001f1: PUSH1 0x01 000001f3: SLOAD 000001f4: PUSH1 0x40 000001f6: MLOAD 000001f7: PUSH1 0x01 000001f9: PUSH1 0xa0 000001fb: PUSH1 0x02 000001fd: EXP 000001fe: SUB 000001ff: SWAP2 00000200: SWAP1 00000201: SWAP2 00000202: AND 00000203: SWAP2 00000204: PUSH1 0x00 00000206: SWAP2 00000207: CALLVALUE 00000208: SWAP2 00000209: SWAP1 0000020a: SWAP2 0000020b: SUB 0000020c: SWAP1 0000020d: DUP3 0000020e: DUP2 0000020f: DUP2 00000210: DUP2 00000211: DUP6 00000212: DUP9 00000213: DUP4 00000214: CALL 00000215: POP 00000216: POP 00000217: POP 00000218: POP 00000219: POP 0000021a: JUMPDEST 0000021b: POP 0000021c: POP 0000021d: POP 0000021e: JUMP 0000021f: JUMPDEST 00000220: PUSH1 0x00 00000222: EQ 00000223: DUP1 00000224: ISZERO 00000225: PUSH2 0x023c 00000228: JUMPI 00000229: POP 0000022a: PUSH1 0x01 0000022c: SLOAD 0000022d: PUSH1 0x00 0000022f: PUSH1 0x01 00000231: PUSH1 0xa0 00000233: PUSH1 0x02 00000235: EXP 00000236: SUB 00000237: SWAP2 00000238: SWAP1 00000239: SWAP2 0000023a: AND 0000023b: GT 0000023c: JUMPDEST 0000023d: DUP1 0000023e: ISZERO 0000023f: PUSH2 0x0249 00000242: JUMPI 00000243: POP 00000244: PUSH1 0x64 00000246: DUP4 00000247: LT 00000248: ISZERO 00000249: JUMPDEST 0000024a: ISZERO 0000024b: PUSH2 0x01b7 0000024e: JUMPI 0000024f: POP 00000250: POP 00000251: PUSH1 0x40 00000253: MLOAD 00000254: PUSH1 0x00 00000256: DUP1 00000257: SLOAD 00000258: PUSH1 0x64 0000025a: DUP5 0000025b: DIV 0000025c: SWAP3 0000025d: DUP4 0000025e: DUP6 0000025f: SUB 00000260: SWAP3 00000261: PUSH1 0x01 00000263: PUSH1 0xa0 00000265: PUSH1 0x02 00000267: EXP 00000268: SUB 00000269: SWAP3 0000026a: SWAP1 0000026b: SWAP3 0000026c: AND 0000026d: SWAP2 0000026e: SWAP1 0000026f: DUP5 00000270: SWAP1 00000271: DUP3 00000272: DUP2 00000273: DUP2 00000274: DUP2 00000275: DUP6 00000276: DUP9 00000277: DUP4 00000278: CALL 00000279: POP 0000027a: PUSH1 0x01 0000027c: SLOAD 0000027d: PUSH1 0x01 0000027f: PUSH1 0xa0 00000281: PUSH1 0x02 00000283: EXP 00000284: SUB 00000285: AND 00000286: SWAP4 00000287: POP 00000288: DUP5 00000289: SWAP2 0000028a: POP 0000028b: DUP3 0000028c: DUP2 0000028d: DUP2 0000028e: DUP2 0000028f: DUP6 00000290: DUP9 00000291: DUP4 00000292: CALL 00000293: POP 00000294: POP 00000295: PUSH1 0x06 00000297: DUP1 00000298: SLOAD 00000299: PUSH1 0x01 0000029b: DUP2 0000029c: ADD 0000029d: DUP1 0000029e: DUP4 0000029f: SSTORE 000002a0: SWAP2 000002a1: SWAP4 000002a2: POP 000002a3: SWAP2 000002a4: POP 000002a5: DUP3 000002a6: SWAP1 000002a7: DUP3 000002a8: DUP1 000002a9: ISZERO 000002aa: DUP3 000002ab: SWAP1 000002ac: GT 000002ad: PUSH2 0x02f5 000002b0: JUMPI 000002b1: PUSH1 0x00 000002b3: DUP4 000002b4: SWAP1 000002b5: MSTORE 000002b6: PUSH2 0x02f5 000002b9: SWAP1 000002ba: PUSH32 0xf652222313e28459528d920b65115c16c04f3efc82aaedc97be59f3f377c0d3f 000002db: SWAP1 000002dc: DUP2 000002dd: ADD 000002de: SWAP1 000002df: DUP4 000002e0: ADD 000002e1: JUMPDEST 000002e2: DUP1 000002e3: DUP3 000002e4: GT 000002e5: ISZERO 000002e6: PUSH2 0x037f 000002e9: JUMPI 000002ea: PUSH1 0x00 000002ec: DUP2 000002ed: SSTORE 000002ee: PUSH1 0x01 000002f0: ADD 000002f1: PUSH2 0x02e1 000002f4: JUMP 000002f5: JUMPDEST 000002f6: POP 000002f7: POP 000002f8: POP 000002f9: DUP2 000002fa: SLOAD 000002fb: DUP2 000002fc: LT 000002fd: ISZERO 000002fe: PUSH2 0x0002 00000301: JUMPI 00000302: PUSH1 0x00 00000304: SWAP2 00000305: DUP3 00000306: MSTORE 00000307: PUSH1 0x20 00000309: SWAP1 0000030a: SWAP2 0000030b: KECCAK256 0000030c: ADD 0000030d: DUP1 0000030e: SLOAD 0000030f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000324: NOT 00000325: AND 00000326: SWAP1 00000327: SWAP2 00000328: OR 00000329: SWAP1 0000032a: SSTORE 0000032b: PUSH1 0x07 0000032d: DUP1 0000032e: SLOAD 0000032f: PUSH1 0x01 00000331: DUP2 00000332: ADD 00000333: DUP1 00000334: DUP4 00000335: SSTORE 00000336: DUP4 00000337: SWAP3 00000338: SWAP2 00000339: SWAP1 0000033a: DUP3 0000033b: SWAP1 0000033c: DUP3 0000033d: DUP1 0000033e: ISZERO 0000033f: DUP3 00000340: SWAP1 00000341: GT 00000342: PUSH2 0x0196 00000345: JUMPI 00000346: PUSH1 0x00 00000348: DUP4 00000349: SWAP1 0000034a: MSTORE 0000034b: PUSH2 0x0196 0000034e: SWAP1 0000034f: PUSH32 0xa66cc928b5edb82af9bd49922954155ab7b0942694bea4ce44661d9a8736c688 00000370: SWAP1 00000371: DUP2 00000372: ADD 00000373: SWAP1 00000374: DUP4 00000375: ADD 00000376: PUSH2 0x02e1 00000379: JUMP 0000037a: JUMPDEST 0000037b: PUSH1 0x00 0000037d: SWAP2 0000037e: POP 0000037f: JUMPDEST 00000380: POP 00000381: SWAP1 00000382: JUMP 00000383: JUMPDEST 00000384: PUSH1 0x40 00000386: DUP1 00000387: MLOAD 00000388: SWAP2 00000389: DUP3 0000038a: MSTORE 0000038b: MLOAD 0000038c: SWAP1 0000038d: DUP2 0000038e: SWAP1 0000038f: SUB 00000390: PUSH1 0x20 00000392: ADD 00000393: SWAP1 00000394: RETURN 00000395: JUMPDEST 00000396: PUSH1 0x40 00000398: DUP1 00000399: MLOAD 0000039a: PUSH1 0x01 0000039c: PUSH1 0xa0 0000039e: PUSH1 0x02 000003a0: EXP 000003a1: SUB 000003a2: SWAP3 000003a3: SWAP1 000003a4: SWAP3 000003a5: AND 000003a6: DUP3 000003a7: MSTORE 000003a8: MLOAD 000003a9: SWAP1 000003aa: DUP2 000003ab: SWAP1 000003ac: SUB 000003ad: PUSH1 0x20 000003af: ADD 000003b0: SWAP1 000003b1: RETURN 000003b2: JUMPDEST 000003b3: SWAP1 000003b4: POP 000003b5: DUP1 000003b6: PUSH1 0x03 000003b8: PUSH1 0x00 000003ba: POP 000003bb: SLOAD 000003bc: GT 000003bd: ISZERO 000003be: PUSH2 0x037a 000003c1: JUMPI 000003c2: PUSH2 0x03c9 000003c5: PUSH2 0x00b7 000003c8: JUMP 000003c9: JUMPDEST 000003ca: PUSH1 0x03 000003cc: SLOAD 000003cd: SUB 000003ce: SWAP2 000003cf: POP 000003d0: PUSH2 0x037f 000003d3: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x65eec27eb3b894969e720b271d3275cccf37c30ab9cb6c832fa94a7ca4be9221
call_targets:
0xbcb85c78d7fc5ce21b188dd657f4ac295a426884
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x65eec27eb3b894969e720b271d3275cccf37c30ab9cb6c832fa94a7ca4be9221",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xbcb85c78d7fc5ce21b188dd657f4ac295a426884"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x2f29d8c5",
"selector": "0x2f29d8c5",
"calldata_variants": [
"0x2f29d8c5",
"0x2f29d8c50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x55234ec0",
"selector": "0x55234ec0",
"calldata_variants": [
"0x55234ec0",
"0x55234ec00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x806b984f",
"selector": "0x806b984f",
"calldata_variants": [
"0x806b984f",
"0x806b984f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8a6a952a",
"selector": "0x8a6a952a",
"calldata_variants": [
"0x8a6a952a",
"0x8a6a952a0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x967ff23e",
"selector": "0x967ff23e",
"calldata_variants": [
"0x967ff23e",
"0x967ff23e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa035b1fe",
"selector": "0xa035b1fe",
"calldata_variants": [
"0xa035b1fe",
"0xa035b1fe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2fb1175",
"selector": "0xa2fb1175",
"calldata_variants": [
"0xa2fb1175",
"0xa2fb11750000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb72481f8",
"selector": "0xb72481f8",
"calldata_variants": [
"0xb72481f8",
"0xb72481f80000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 532,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 632,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 658,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 3,
"guards_detected": [],
"untrusted_call_count": 3
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x65eec27eb3b894969e720b271d3275cccf37c30ab9cb6c832fa94a7ca4be9221
call_targets:
0xbcb85c78d7fc5ce21b188dd657f4ac295a426884
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x65eec27eb3b894969e720b271d3275cccf37c30ab9cb6c832fa94a7ca4be9221",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xbcb85c78d7fc5ce21b188dd657f4ac295a426884"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x2f29d8c5",
"selector": "0x2f29d8c5",
"calldata_variants": [
"0x2f29d8c5",
"0x2f29d8c50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x55234ec0",
"selector": "0x55234ec0",
"calldata_variants": [
"0x55234ec0",
"0x55234ec00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x806b984f",
"selector": "0x806b984f",
"calldata_variants": [
"0x806b984f",
"0x806b984f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8a6a952a",
"selector": "0x8a6a952a",
"calldata_variants": [
"0x8a6a952a",
"0x8a6a952a0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x967ff23e",
"selector": "0x967ff23e",
"calldata_variants": [
"0x967ff23e",
"0x967ff23e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa035b1fe",
"selector": "0xa035b1fe",
"calldata_variants": [
"0xa035b1fe",
"0xa035b1fe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2fb1175",
"selector": "0xa2fb1175",
"calldata_variants": [
"0xa2fb1175",
"0xa2fb11750000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb72481f8",
"selector": "0xb72481f8",
"calldata_variants": [
"0xb72481f8",
"0xb72481f80000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 532,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 632,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 658,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 3,
"guards_detected": []
}
|