TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-21d3-71af-824a-c4ef21b1608b

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
175 artifact.fetch complete 1 / 3 3 months ago
176 tool.cast_disasm complete 1 / 3 3 months ago
43427 analysis.bundle complete 1 / 3 1 week ago
43428 capability.graph complete 1 / 3 1 week ago
43429 detector.run complete 1 / 3 1 week ago
43430 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
5
EXT*/BALANCE
4
Total opcodes
1085
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x006c
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x187c5903
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x006e
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x27e235e3
00000025: EQ
00000026: PUSH2 0x009c
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x444bdb1b
00000030: EQ
00000031: PUSH2 0x00b4
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x67c18aa1
0000003b: EQ
0000003c: PUSH2 0x00fe
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x6d4ce63c
00000046: EQ
00000047: PUSH2 0x01b1
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x6f7bc9be
00000051: EQ
00000052: PUSH2 0x01dd
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x89ac5d13
0000005c: EQ
0000005d: PUSH2 0x01f5
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0xe8b5e51f
00000067: EQ
00000068: PUSH2 0x0259
0000006b: JUMPI
0000006c: JUMPDEST
0000006d: STOP
0000006e: JUMPDEST
0000006f: PUSH2 0x006c
00000072: PUSH1 0x01
00000074: PUSH1 0xa0
00000076: PUSH1 0x02
00000078: EXP
00000079: SUB
0000007a: CALLER
0000007b: AND
0000007c: PUSH1 0x00
0000007e: SWAP1
0000007f: DUP2
00000080: MSTORE
00000081: PUSH1 0x0b
00000083: PUSH1 0x20
00000085: MSTORE
00000086: PUSH1 0x40
00000088: DUP2
00000089: KECCAK256
0000008a: SLOAD
0000008b: DUP2
0000008c: SWAP1
0000008d: DUP2
0000008e: SWAP1
0000008f: DUP2
00000090: SWAP1
00000091: DUP2
00000092: EQ
00000093: ISZERO
00000094: PUSH2 0x04bd
00000097: JUMPI
00000098: PUSH2 0x04b7
0000009b: JUMP
0000009c: JUMPDEST
0000009d: PUSH2 0x01cb
000000a0: PUSH1 0x04
000000a2: CALLDATALOAD
000000a3: PUSH1 0x05
000000a5: PUSH1 0x20
000000a7: MSTORE
000000a8: PUSH1 0x00
000000aa: SWAP1
000000ab: DUP2
000000ac: MSTORE
000000ad: PUSH1 0x40
000000af: SWAP1
000000b0: KECCAK256
000000b1: SLOAD
000000b2: DUP2
000000b3: JUMP
000000b4: JUMPDEST
000000b5: PUSH2 0x01cb
000000b8: PUSH1 0x00
000000ba: DUP1
000000bb: DUP1
000000bc: DUP1
000000bd: DUP1
000000be: JUMPDEST
000000bf: PUSH1 0x0c
000000c1: SLOAD
000000c2: DUP4
000000c3: LT
000000c4: ISZERO
000000c5: PUSH2 0x0558
000000c8: JUMPI
000000c9: PUSH1 0x05
000000cb: DUP2
000000cc: DUP1
000000cd: DUP6
000000ce: DUP4
000000cf: DUP2
000000d0: LT
000000d1: ISZERO
000000d2: PUSH2 0x0002
000000d5: JUMPI
000000d6: SLOAD
000000d7: PUSH1 0x01
000000d9: PUSH1 0xa0
000000db: PUSH1 0x02
000000dd: EXP
000000de: SUB
000000df: AND
000000e0: SWAP1
000000e1: MSTORE
000000e2: POP
000000e3: PUSH1 0x20
000000e5: DUP2
000000e6: SWAP1
000000e7: MSTORE
000000e8: PUSH1 0x40
000000ea: DUP3
000000eb: KECCAK256
000000ec: SLOAD
000000ed: MUL
000000ee: SWAP4
000000ef: SWAP1
000000f0: SWAP4
000000f1: ADD
000000f2: SWAP3
000000f3: PUSH1 0x01
000000f5: SWAP3
000000f6: SWAP1
000000f7: SWAP3
000000f8: ADD
000000f9: SWAP2
000000fa: PUSH2 0x00be
000000fd: JUMP
000000fe: JUMPDEST
000000ff: PUSH2 0x006c
00000102: PUSH1 0x04
00000104: CALLDATALOAD
00000105: PUSH1 0x24
00000107: CALLDATALOAD
00000108: PUSH1 0x00
0000010a: PUSH1 0x00
0000010c: DUP3
0000010d: GT
0000010e: ISZERO
0000010f: PUSH2 0x013e
00000112: JUMPI
00000113: PUSH1 0x01
00000115: PUSH1 0xa0
00000117: PUSH1 0x02
00000119: EXP
0000011a: SUB
0000011b: DUP4
0000011c: AND
0000011d: DUP1
0000011e: DUP3
0000011f: MSTORE
00000120: PUSH1 0x05
00000122: PUSH1 0x20
00000124: DUP2
00000125: SWAP1
00000126: MSTORE
00000127: PUSH1 0x40
00000129: DUP4
0000012a: KECCAK256
0000012b: SLOAD
0000012c: DUP4
0000012d: SWAP2
0000012e: MUL
0000012f: PUSH1 0x60
00000131: DUP3
00000132: DUP2
00000133: DUP2
00000134: DUP2
00000135: DUP6
00000136: DUP9
00000137: DUP4
00000138: CALL
00000139: POP
0000013a: POP
0000013b: POP
0000013c: POP
0000013d: POP
0000013e: JUMPDEST
0000013f: PUSH1 0x40
00000141: DUP2
00000142: KECCAK256
00000143: PUSH1 0x01
00000145: PUSH1 0xa0
00000147: PUSH1 0x02
00000149: EXP
0000014a: SUB
0000014b: DUP5
0000014c: AND
0000014d: DUP3
0000014e: MSTORE
0000014f: PUSH1 0x05
00000151: PUSH1 0x20
00000153: MSTORE
00000154: DUP2
00000155: SWAP1
00000156: SSTORE
00000157: JUMPDEST
00000158: PUSH1 0x0c
0000015a: SLOAD
0000015b: DUP2
0000015c: LT
0000015d: ISZERO
0000015e: PUSH2 0x044f
00000161: JUMPI
00000162: PUSH1 0x01
00000164: PUSH1 0xa0
00000166: PUSH1 0x02
00000168: EXP
00000169: SUB
0000016a: DUP4
0000016b: AND
0000016c: PUSH1 0x00
0000016e: DUP3
0000016f: PUSH1 0x05
00000171: DUP2
00000172: LT
00000173: ISZERO
00000174: PUSH2 0x0002
00000177: JUMPI
00000178: SLOAD
00000179: PUSH1 0x01
0000017b: PUSH1 0xa0
0000017d: PUSH1 0x02
0000017f: EXP
00000180: SUB
00000181: AND
00000182: SWAP1
00000183: SWAP2
00000184: EQ
00000185: ISZERO
00000186: SWAP1
00000187: POP
00000188: PUSH2 0x01a9
0000018b: JUMPI
0000018c: PUSH1 0x00
0000018e: DUP1
0000018f: DUP3
00000190: PUSH1 0x05
00000192: DUP2
00000193: LT
00000194: ISZERO
00000195: PUSH2 0x0002
00000198: JUMPI
00000199: DUP1
0000019a: SLOAD
0000019b: PUSH1 0x01
0000019d: PUSH1 0xa0
0000019f: PUSH1 0x02
000001a1: EXP
000001a2: SUB
000001a3: NOT
000001a4: AND
000001a5: SWAP1
000001a6: SSTORE
000001a7: POP
000001a8: POP
000001a9: JUMPDEST
000001aa: PUSH1 0x01
000001ac: ADD
000001ad: PUSH2 0x0157
000001b0: JUMP
000001b1: JUMPDEST
000001b2: CALLER
000001b3: PUSH1 0x01
000001b5: PUSH1 0xa0
000001b7: PUSH1 0x02
000001b9: EXP
000001ba: SUB
000001bb: AND
000001bc: PUSH1 0x00
000001be: SWAP1
000001bf: DUP2
000001c0: MSTORE
000001c1: PUSH1 0x05
000001c3: PUSH1 0x20
000001c5: MSTORE
000001c6: PUSH1 0x40
000001c8: SWAP1
000001c9: KECCAK256
000001ca: SLOAD
000001cb: JUMPDEST
000001cc: PUSH1 0x40
000001ce: DUP1
000001cf: MLOAD
000001d0: SWAP2
000001d1: DUP3
000001d2: MSTORE
000001d3: MLOAD
000001d4: SWAP1
000001d5: DUP2
000001d6: SWAP1
000001d7: SUB
000001d8: PUSH1 0x20
000001da: ADD
000001db: SWAP1
000001dc: RETURN
000001dd: JUMPDEST
000001de: PUSH2 0x01cb
000001e1: PUSH1 0x04
000001e3: CALLDATALOAD
000001e4: PUSH1 0x0b
000001e6: PUSH1 0x20
000001e8: MSTORE
000001e9: PUSH1 0x00
000001eb: SWAP1
000001ec: DUP2
000001ed: MSTORE
000001ee: PUSH1 0x40
000001f0: SWAP1
000001f1: KECCAK256
000001f2: SLOAD
000001f3: DUP2
000001f4: JUMP
000001f5: JUMPDEST
000001f6: PUSH1 0x04
000001f8: DUP1
000001f9: CALLDATALOAD
000001fa: SWAP1
000001fb: DUP2
000001fc: ADD
000001fd: CALLDATALOAD
000001fe: PUSH1 0x20
00000200: DUP2
00000201: MUL
00000202: PUSH1 0x80
00000204: DUP2
00000205: DUP2
00000206: ADD
00000207: PUSH1 0x40
00000209: MSTORE
0000020a: PUSH1 0x60
0000020c: DUP4
0000020d: DUP2
0000020e: MSTORE
0000020f: PUSH2 0x01cb
00000212: SWAP5
00000213: PUSH1 0x24
00000215: SWAP5
00000216: SWAP2
00000217: SWAP4
00000218: SWAP1
00000219: DUP6
0000021a: ADD
0000021b: SWAP3
0000021c: DUP3
0000021d: SWAP2
0000021e: DUP5
0000021f: SWAP1
00000220: DUP1
00000221: DUP3
00000222: DUP5
00000223: CALLDATACOPY
00000224: POP
00000225: SWAP5
00000226: SWAP6
00000227: CALLDATALOAD
00000228: SWAP5
00000229: POP
0000022a: POP
0000022b: POP
0000022c: POP
0000022d: POP
0000022e: PUSH1 0x01
00000230: PUSH1 0xa0
00000232: PUSH1 0x02
00000234: EXP
00000235: SUB
00000236: CALLER
00000237: AND
00000238: PUSH1 0x00
0000023a: SWAP1
0000023b: DUP2
0000023c: MSTORE
0000023d: PUSH1 0x05
0000023f: PUSH1 0x20
00000241: MSTORE
00000242: PUSH1 0x40
00000244: DUP2
00000245: KECCAK256
00000246: SLOAD
00000247: DUP2
00000248: SWAP1
00000249: DUP2
0000024a: SWAP1
0000024b: DUP2
0000024c: SWAP1
0000024d: DUP2
0000024e: SWAP1
0000024f: GT
00000250: ISZERO
00000251: PUSH2 0x03d7
00000254: JUMPI
00000255: PUSH2 0x03ce
00000258: JUMP
00000259: JUMPDEST
0000025a: PUSH2 0x006c
0000025d: PUSH1 0x01
0000025f: PUSH1 0xa0
00000261: PUSH1 0x02
00000263: EXP
00000264: SUB
00000265: CALLER
00000266: AND
00000267: PUSH1 0x00
00000269: SWAP1
0000026a: DUP2
0000026b: MSTORE
0000026c: PUSH1 0x0b
0000026e: PUSH1 0x20
00000270: MSTORE
00000271: PUSH1 0x40
00000273: DUP2
00000274: KECCAK256
00000275: SLOAD
00000276: EQ
00000277: ISZERO
00000278: PUSH2 0x02a8
0000027b: JUMPI
0000027c: PUSH1 0x0d
0000027e: SLOAD
0000027f: CALLER
00000280: SWAP1
00000281: PUSH1 0x06
00000283: SWAP1
00000284: PUSH1 0x05
00000286: DUP2
00000287: LT
00000288: ISZERO
00000289: PUSH2 0x0002
0000028c: JUMPI
0000028d: ADD
0000028e: DUP1
0000028f: SLOAD
00000290: PUSH1 0x01
00000292: PUSH1 0xa0
00000294: PUSH1 0x02
00000296: EXP
00000297: SUB
00000298: NOT
00000299: AND
0000029a: SWAP1
0000029b: SWAP2
0000029c: OR
0000029d: SWAP1
0000029e: SSTORE
0000029f: PUSH1 0x0d
000002a1: DUP1
000002a2: SLOAD
000002a3: PUSH1 0x01
000002a5: ADD
000002a6: SWAP1
000002a7: SSTORE
000002a8: JUMPDEST
000002a9: PUSH1 0x40
000002ab: PUSH1 0x00
000002ad: KECCAK256
000002ae: DUP1
000002af: SLOAD
000002b0: CALLVALUE
000002b1: ADD
000002b2: SWAP1
000002b3: SSTORE
000002b4: JUMP
000002b5: JUMPDEST
000002b6: PUSH20 0x3c94923400ccc528e8ab0f849edafca06fe332e5
000002cb: SWAP1
000002cc: POP
000002cd: DUP1
000002ce: PUSH1 0x01
000002d0: PUSH1 0xa0
000002d2: PUSH1 0x02
000002d4: EXP
000002d5: SUB
000002d6: AND
000002d7: PUSH4 0xb4aa6cc1
000002dc: DUP7
000002dd: PUSH2 0x2a30
000002e0: ADD
000002e1: DUP8
000002e2: PUSH2 0x2a30
000002e5: ADD
000002e6: PUSH1 0x01
000002e8: DUP11
000002e9: CALLER
000002ea: PUSH1 0x40
000002ec: MLOAD
000002ed: DUP7
000002ee: PUSH1 0xe0
000002f0: PUSH1 0x02
000002f2: EXP
000002f3: MUL
000002f4: DUP2
000002f5: MSTORE
000002f6: PUSH1 0x04
000002f8: ADD
000002f9: DUP1
000002fa: DUP7
000002fb: DUP2
000002fc: MSTORE
000002fd: PUSH1 0x20
000002ff: ADD
00000300: DUP6
00000301: DUP2
00000302: MSTORE
00000303: PUSH1 0x20
00000305: ADD
00000306: DUP5
00000307: DUP2
00000308: MSTORE
00000309: PUSH1 0x20
0000030b: ADD
0000030c: DUP1
0000030d: PUSH1 0x20
0000030f: ADD
00000310: DUP4
00000311: PUSH1 0x01
00000313: PUSH1 0xa0
00000315: PUSH1 0x02
00000317: EXP
00000318: SUB
00000319: AND
0000031a: DUP2
0000031b: MSTORE
0000031c: PUSH1 0x20
0000031e: ADD
0000031f: DUP3
00000320: DUP2
00000321: SUB
00000322: DUP3
00000323: MSTORE
00000324: DUP5
00000325: DUP2
00000326: DUP2
00000327: MLOAD
00000328: DUP2
00000329: MSTORE
0000032a: PUSH1 0x20
0000032c: ADD
0000032d: SWAP2
0000032e: POP
0000032f: DUP1
00000330: MLOAD
00000331: SWAP1
00000332: PUSH1 0x20
00000334: ADD
00000335: SWAP1
00000336: PUSH1 0x20
00000338: MUL
00000339: DUP1
0000033a: DUP4
0000033b: DUP4
0000033c: DUP3
0000033d: SWAP1
0000033e: PUSH1 0x00
00000340: PUSH1 0x04
00000342: PUSH1 0x20
00000344: DUP5
00000345: PUSH1 0x1f
00000347: ADD
00000348: DIV
00000349: PUSH1 0x03
0000034b: MUL
0000034c: PUSH1 0x0f
0000034e: ADD
0000034f: CALL
00000350: POP
00000351: SWAP1
00000352: POP
00000353: ADD
00000354: SWAP7
00000355: POP
00000356: POP
00000357: POP
00000358: POP
00000359: POP
0000035a: POP
0000035b: POP
0000035c: PUSH1 0x00
0000035e: PUSH1 0x40
00000360: MLOAD
00000361: DUP1
00000362: DUP4
00000363: SUB
00000364: DUP2
00000365: PUSH1 0x00
00000367: DUP8
00000368: PUSH2 0x61da
0000036b: GAS
0000036c: SUB
0000036d: CALL
0000036e: ISZERO
0000036f: PUSH2 0x0002
00000372: JUMPI
00000373: POP
00000374: POP
00000375: POP
00000376: CALLVALUE
00000377: PUSH1 0x05
00000379: PUSH1 0x00
0000037b: POP
0000037c: PUSH1 0x00
0000037e: CALLER
0000037f: PUSH1 0x01
00000381: PUSH1 0xa0
00000383: PUSH1 0x02
00000385: EXP
00000386: SUB
00000387: AND
00000388: DUP2
00000389: MSTORE
0000038a: PUSH1 0x20
0000038c: ADD
0000038d: SWAP1
0000038e: DUP2
0000038f: MSTORE
00000390: PUSH1 0x20
00000392: ADD
00000393: PUSH1 0x00
00000395: KECCAK256
00000396: PUSH1 0x00
00000398: POP
00000399: DUP2
0000039a: SWAP1
0000039b: SSTORE
0000039c: POP
0000039d: CALLER
0000039e: PUSH1 0x00
000003a0: PUSH1 0x00
000003a2: POP
000003a3: PUSH1 0x0c
000003a5: PUSH1 0x00
000003a7: POP
000003a8: SLOAD
000003a9: PUSH1 0x05
000003ab: DUP2
000003ac: LT
000003ad: ISZERO
000003ae: PUSH2 0x0002
000003b1: JUMPI
000003b2: DUP1
000003b3: SLOAD
000003b4: PUSH1 0x01
000003b6: PUSH1 0xa0
000003b8: PUSH1 0x02
000003ba: EXP
000003bb: SUB
000003bc: NOT
000003bd: AND
000003be: SWAP1
000003bf: SWAP3
000003c0: OR
000003c1: SWAP1
000003c2: SWAP2
000003c3: SSTORE
000003c4: POP
000003c5: PUSH1 0x0c
000003c7: DUP1
000003c8: SLOAD
000003c9: PUSH1 0x01
000003cb: ADD
000003cc: SWAP1
000003cd: SSTORE
000003ce: JUMPDEST
000003cf: POP
000003d0: POP
000003d1: POP
000003d2: SWAP3
000003d3: SWAP2
000003d4: POP
000003d5: POP
000003d6: JUMP
000003d7: JUMPDEST
000003d8: JUMPDEST
000003d9: PUSH1 0x0c
000003db: SLOAD
000003dc: DUP3
000003dd: LT
000003de: ISZERO
000003df: PUSH2 0x0413
000003e2: JUMPI
000003e3: PUSH1 0x05
000003e5: DUP2
000003e6: DUP1
000003e7: DUP5
000003e8: DUP4
000003e9: DUP2
000003ea: LT
000003eb: ISZERO
000003ec: PUSH2 0x0002
000003ef: JUMPI
000003f0: SLOAD
000003f1: PUSH1 0x01
000003f3: PUSH1 0xa0
000003f5: PUSH1 0x02
000003f7: EXP
000003f8: SUB
000003f9: AND
000003fa: SWAP1
000003fb: MSTORE
000003fc: POP
000003fd: PUSH1 0x40
000003ff: DUP3
00000400: KECCAK256
00000401: SLOAD
00000402: MUL
00000403: SWAP3
00000404: SWAP1
00000405: SWAP3
00000406: ADD
00000407: SWAP2
00000408: PUSH1 0x01
0000040a: SWAP2
0000040b: SWAP1
0000040c: SWAP2
0000040d: ADD
0000040e: SWAP1
0000040f: PUSH2 0x03d8
00000412: JUMP
00000413: JUMPDEST
00000414: CALLVALUE
00000415: PUSH1 0x05
00000417: MUL
00000418: DUP4
00000419: ADDRESS
0000041a: PUSH1 0x01
0000041c: PUSH1 0xa0
0000041e: PUSH1 0x02
00000420: EXP
00000421: SUB
00000422: AND
00000423: BALANCE
00000424: SUB
00000425: LT
00000426: ISZERO
00000427: PUSH2 0x02b5
0000042a: JUMPI
0000042b: PUSH1 0x40
0000042d: MLOAD
0000042e: PUSH1 0x01
00000430: PUSH1 0xa0
00000432: PUSH1 0x02
00000434: EXP
00000435: SUB
00000436: CALLER
00000437: AND
00000438: SWAP1
00000439: DUP3
0000043a: SWAP1
0000043b: CALLVALUE
0000043c: SWAP1
0000043d: DUP3
0000043e: DUP2
0000043f: DUP2
00000440: DUP2
00000441: DUP6
00000442: DUP9
00000443: DUP4
00000444: CALL
00000445: SWAP4
00000446: POP
00000447: POP
00000448: POP
00000449: POP
0000044a: POP
0000044b: PUSH2 0x03ce
0000044e: JUMP
0000044f: JUMPDEST
00000450: POP
00000451: POP
00000452: POP
00000453: JUMP
00000454: JUMPDEST
00000455: PUSH1 0x40
00000457: DUP2
00000458: KECCAK256
00000459: SLOAD
0000045a: PUSH1 0x01
0000045c: PUSH1 0xa0
0000045e: PUSH1 0x02
00000460: EXP
00000461: SUB
00000462: CALLER
00000463: DUP2
00000464: AND
00000465: DUP1
00000466: DUP5
00000467: MSTORE
00000468: PUSH1 0x0b
0000046a: PUSH1 0x20
0000046c: MSTORE
0000046d: ADDRESS
0000046e: SWAP1
0000046f: SWAP2
00000470: AND
00000471: BALANCE
00000472: DUP7
00000473: SWAP1
00000474: SUB
00000475: SWAP2
00000476: DUP5
00000477: SWAP1
00000478: DIV
00000479: SWAP2
0000047a: SWAP1
0000047b: SWAP2
0000047c: MUL
0000047d: SWAP2
0000047e: DUP3
0000047f: PUSH1 0x60
00000481: DUP3
00000482: DUP2
00000483: DUP2
00000484: DUP2
00000485: DUP6
00000486: DUP9
00000487: DUP4
00000488: CALL
00000489: SWAP4
0000048a: POP
0000048b: POP
0000048c: POP
0000048d: POP
0000048e: POP
0000048f: PUSH1 0x00
00000491: PUSH1 0x0b
00000493: PUSH1 0x00
00000495: POP
00000496: PUSH1 0x00
00000498: CALLER
00000499: PUSH1 0x01
0000049b: PUSH1 0xa0
0000049d: PUSH1 0x02
0000049f: EXP
000004a0: SUB
000004a1: AND
000004a2: DUP2
000004a3: MSTORE
000004a4: PUSH1 0x20
000004a6: ADD
000004a7: SWAP1
000004a8: DUP2
000004a9: MSTORE
000004aa: PUSH1 0x20
000004ac: ADD
000004ad: PUSH1 0x00
000004af: KECCAK256
000004b0: PUSH1 0x00
000004b2: POP
000004b3: DUP2
000004b4: SWAP1
000004b5: SSTORE
000004b6: POP
000004b7: JUMPDEST
000004b8: POP
000004b9: POP
000004ba: POP
000004bb: POP
000004bc: JUMP
000004bd: JUMPDEST
000004be: JUMPDEST
000004bf: PUSH1 0x0c
000004c1: SLOAD
000004c2: DUP4
000004c3: LT
000004c4: ISZERO
000004c5: PUSH2 0x04fe
000004c8: JUMPI
000004c9: PUSH1 0x05
000004cb: DUP2
000004cc: DUP1
000004cd: DUP6
000004ce: DUP4
000004cf: DUP2
000004d0: LT
000004d1: ISZERO
000004d2: PUSH2 0x0002
000004d5: JUMPI
000004d6: SLOAD
000004d7: PUSH1 0x01
000004d9: PUSH1 0xa0
000004db: PUSH1 0x02
000004dd: EXP
000004de: SUB
000004df: AND
000004e0: SWAP1
000004e1: MSTORE
000004e2: POP
000004e3: PUSH1 0x20
000004e5: DUP2
000004e6: SWAP1
000004e7: MSTORE
000004e8: PUSH1 0x40
000004ea: DUP3
000004eb: KECCAK256
000004ec: SLOAD
000004ed: MUL
000004ee: SWAP4
000004ef: SWAP1
000004f0: SWAP4
000004f1: ADD
000004f2: SWAP3
000004f3: PUSH1 0x01
000004f5: SWAP3
000004f6: SWAP1
000004f7: SWAP3
000004f8: ADD
000004f9: SWAP2
000004fa: PUSH2 0x04be
000004fd: JUMP
000004fe: JUMPDEST
000004ff: ADDRESS
00000500: PUSH1 0x01
00000502: PUSH1 0xa0
00000504: PUSH1 0x02
00000506: EXP
00000507: SUB
00000508: AND
00000509: BALANCE
0000050a: DUP5
0000050b: GT
0000050c: ISZERO
0000050d: PUSH2 0x0515
00000510: JUMPI
00000511: PUSH2 0x04b7
00000514: JUMP
00000515: JUMPDEST
00000516: SWAP2
00000517: POP
00000518: DUP1
00000519: JUMPDEST
0000051a: PUSH1 0x0d
0000051c: SLOAD
0000051d: DUP4
0000051e: LT
0000051f: ISZERO
00000520: PUSH2 0x0454
00000523: JUMPI
00000524: PUSH1 0x0b
00000526: DUP2
00000527: PUSH1 0x06
00000529: DUP6
0000052a: PUSH1 0x05
0000052c: DUP2
0000052d: LT
0000052e: ISZERO
0000052f: PUSH2 0x0002
00000532: JUMPI
00000533: ADD
00000534: SLOAD
00000535: PUSH1 0x01
00000537: PUSH1 0xa0
00000539: PUSH1 0x02
0000053b: EXP
0000053c: SUB
0000053d: AND
0000053e: SWAP1
0000053f: MSTORE
00000540: PUSH1 0x20
00000542: MSTORE
00000543: PUSH1 0x40
00000545: DUP2
00000546: KECCAK256
00000547: SLOAD
00000548: SWAP2
00000549: SWAP1
0000054a: SWAP2
0000054b: ADD
0000054c: SWAP1
0000054d: PUSH1 0x01
0000054f: SWAP3
00000550: SWAP1
00000551: SWAP3
00000552: ADD
00000553: SWAP2
00000554: PUSH2 0x0519
00000557: JUMP
00000558: JUMPDEST
00000559: SWAP2
0000055a: POP
0000055b: DUP1
0000055c: JUMPDEST
0000055d: PUSH1 0x0d
0000055f: SLOAD
00000560: DUP4
00000561: LT
00000562: ISZERO
00000563: PUSH2 0x059b
00000566: JUMPI
00000567: PUSH1 0x0b
00000569: DUP2
0000056a: PUSH1 0x06
0000056c: DUP6
0000056d: PUSH1 0x05
0000056f: DUP2
00000570: LT
00000571: ISZERO
00000572: PUSH2 0x0002
00000575: JUMPI
00000576: ADD
00000577: SLOAD
00000578: PUSH1 0x01
0000057a: PUSH1 0xa0
0000057c: PUSH1 0x02
0000057e: EXP
0000057f: SUB
00000580: AND
00000581: SWAP1
00000582: MSTORE
00000583: PUSH1 0x20
00000585: MSTORE
00000586: PUSH1 0x40
00000588: DUP2
00000589: KECCAK256
0000058a: SLOAD
0000058b: SWAP2
0000058c: SWAP1
0000058d: SWAP2
0000058e: ADD
0000058f: SWAP1
00000590: PUSH1 0x01
00000592: SWAP3
00000593: SWAP1
00000594: SWAP3
00000595: ADD
00000596: SWAP2
00000597: PUSH2 0x055c
0000059a: JUMP
0000059b: JUMPDEST
0000059c: POP
0000059d: ADDRESS
0000059e: PUSH1 0x01
000005a0: PUSH1 0xa0
000005a2: PUSH1 0x02
000005a4: EXP
000005a5: SUB
000005a6: AND
000005a7: BALANCE
000005a8: SWAP3
000005a9: SWAP1
000005aa: SWAP3
000005ab: SUB
000005ac: SWAP1
000005ad: SWAP2
000005ae: DIV
000005af: PUSH1 0x64
000005b1: MUL
000005b2: SWAP3
000005b3: SWAP2
000005b4: POP
000005b5: POP
000005b6: JUMP
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x681692be162ce9291a5dec7d2cca5449a2d3c7f69cb88ef0c080e821d99e4150
call_targets: 0xe4dd8d18ea2f0c5c33e77de90acfaf22c2792f63
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x681692be162ce9291a5dec7d2cca5449a2d3c7f69cb88ef0c080e821d99e4150",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xe4dd8d18ea2f0c5c33e77de90acfaf22c2792f63"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x187c5903",
            "selector": "0x187c5903",
            "calldata_variants": [
                "0x187c5903",
                "0x187c59030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x444bdb1b",
            "selector": "0x444bdb1b",
            "calldata_variants": [
                "0x444bdb1b",
                "0x444bdb1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x67c18aa1",
            "selector": "0x67c18aa1",
            "calldata_variants": [
                "0x67c18aa1",
                "0x67c18aa10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6d4ce63c",
            "selector": "0x6d4ce63c",
            "calldata_variants": [
                "0x6d4ce63c",
                "0x6d4ce63c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6f7bc9be",
            "selector": "0x6f7bc9be",
            "calldata_variants": [
                "0x6f7bc9be",
                "0x6f7bc9be0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x89ac5d13",
            "selector": "0x89ac5d13",
            "calldata_variants": [
                "0x89ac5d13",
                "0x89ac5d130000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe8b5e51f",
            "selector": "0xe8b5e51f",
            "calldata_variants": [
                "0xe8b5e51f",
                "0xe8b5e51f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 312,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 847,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 877,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 5,
    "guards_detected": [],
    "untrusted_call_count": 5
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x681692be162ce9291a5dec7d2cca5449a2d3c7f69cb88ef0c080e821d99e4150
call_targets: 0xe4dd8d18ea2f0c5c33e77de90acfaf22c2792f63
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x681692be162ce9291a5dec7d2cca5449a2d3c7f69cb88ef0c080e821d99e4150",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xe4dd8d18ea2f0c5c33e77de90acfaf22c2792f63"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x187c5903",
            "selector": "0x187c5903",
            "calldata_variants": [
                "0x187c5903",
                "0x187c59030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x444bdb1b",
            "selector": "0x444bdb1b",
            "calldata_variants": [
                "0x444bdb1b",
                "0x444bdb1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x67c18aa1",
            "selector": "0x67c18aa1",
            "calldata_variants": [
                "0x67c18aa1",
                "0x67c18aa10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6d4ce63c",
            "selector": "0x6d4ce63c",
            "calldata_variants": [
                "0x6d4ce63c",
                "0x6d4ce63c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6f7bc9be",
            "selector": "0x6f7bc9be",
            "calldata_variants": [
                "0x6f7bc9be",
                "0x6f7bc9be0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x89ac5d13",
            "selector": "0x89ac5d13",
            "calldata_variants": [
                "0x89ac5d13",
                "0x89ac5d130000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe8b5e51f",
            "selector": "0xe8b5e51f",
            "calldata_variants": [
                "0xe8b5e51f",
                "0xe8b5e51f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 312,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 847,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 877,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 5,
    "guards_detected": []
}