TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-21e8-722a-8bf6-09e86d5b740e

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
187 artifact.fetch complete 1 / 3 3 months ago
188 tool.cast_disasm complete 1 / 3 3 months ago
43371 analysis.bundle complete 1 / 3 1 week ago
43372 capability.graph complete 1 / 3 1 week ago
43373 detector.run complete 1 / 3 1 week ago
43374 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
5
EXT*/BALANCE
4
Total opcodes
1273
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00a3
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x187c5903
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00a5
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x1bccca14
00000025: EQ
00000026: PUSH2 0x00d5
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x27e235e3
00000030: EQ
00000031: PUSH2 0x00f6
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x29f8df0d
0000003b: EQ
0000003c: PUSH2 0x010e
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x444bdb1b
00000046: EQ
00000047: PUSH2 0x0117
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x67c18aa1
00000051: EQ
00000052: PUSH2 0x0161
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x6d4ce63c
0000005c: EQ
0000005d: PUSH2 0x0214
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x6e723e24
00000067: EQ
00000068: PUSH2 0x0240
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x6f7bc9be
00000072: EQ
00000073: PUSH2 0x0249
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x71ad7221
0000007d: EQ
0000007e: PUSH2 0x0261
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0x89ac5d13
00000088: EQ
00000089: PUSH2 0x0281
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xa32da9d1
00000093: EQ
00000094: PUSH2 0x02e5
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0xe8b5e51f
0000009e: EQ
0000009f: PUSH2 0x0306
000000a2: JUMPI
000000a3: JUMPDEST
000000a4: STOP
000000a5: JUMPDEST
000000a6: PUSH2 0x00a3
000000a9: PUSH1 0x01
000000ab: PUSH1 0xa0
000000ad: PUSH1 0x02
000000af: EXP
000000b0: SUB
000000b1: CALLER
000000b2: AND
000000b3: PUSH1 0x00
000000b5: SWAP1
000000b6: DUP2
000000b7: MSTORE
000000b8: PUSH1 0x0b
000000ba: PUSH1 0x20
000000bc: MSTORE
000000bd: PUSH1 0x40
000000bf: DUP2
000000c0: KECCAK256
000000c1: SLOAD
000000c2: DUP2
000000c3: SWAP1
000000c4: DUP2
000000c5: SWAP1
000000c6: DUP2
000000c7: SWAP1
000000c8: DUP2
000000c9: EQ
000000ca: ISZERO
000000cb: PUSH2 0x050f
000000ce: JUMPI
000000cf: JUMPDEST
000000d0: POP
000000d1: POP
000000d2: POP
000000d3: POP
000000d4: JUMP
000000d5: JUMPDEST
000000d6: PUSH2 0x0362
000000d9: PUSH1 0x04
000000db: CALLDATALOAD
000000dc: PUSH1 0x06
000000de: DUP2
000000df: PUSH1 0x05
000000e1: DUP2
000000e2: LT
000000e3: ISZERO
000000e4: PUSH2 0x0002
000000e7: JUMPI
000000e8: POP
000000e9: ADD
000000ea: SLOAD
000000eb: PUSH1 0x01
000000ed: PUSH1 0xa0
000000ef: PUSH1 0x02
000000f1: EXP
000000f2: SUB
000000f3: AND
000000f4: DUP2
000000f5: JUMP
000000f6: JUMPDEST
000000f7: PUSH2 0x022e
000000fa: PUSH1 0x04
000000fc: CALLDATALOAD
000000fd: PUSH1 0x05
000000ff: PUSH1 0x20
00000101: MSTORE
00000102: PUSH1 0x00
00000104: SWAP1
00000105: DUP2
00000106: MSTORE
00000107: PUSH1 0x40
00000109: SWAP1
0000010a: KECCAK256
0000010b: SLOAD
0000010c: DUP2
0000010d: JUMP
0000010e: JUMPDEST
0000010f: PUSH2 0x022e
00000112: PUSH1 0x0c
00000114: SLOAD
00000115: DUP2
00000116: JUMP
00000117: JUMPDEST
00000118: PUSH2 0x022e
0000011b: PUSH1 0x00
0000011d: DUP1
0000011e: DUP1
0000011f: DUP1
00000120: DUP1
00000121: JUMPDEST
00000122: PUSH1 0x0c
00000124: SLOAD
00000125: DUP4
00000126: LT
00000127: ISZERO
00000128: PUSH2 0x066f
0000012b: JUMPI
0000012c: PUSH1 0x05
0000012e: DUP2
0000012f: DUP1
00000130: DUP6
00000131: DUP4
00000132: DUP2
00000133: LT
00000134: ISZERO
00000135: PUSH2 0x0002
00000138: JUMPI
00000139: SLOAD
0000013a: PUSH1 0x01
0000013c: PUSH1 0xa0
0000013e: PUSH1 0x02
00000140: EXP
00000141: SUB
00000142: AND
00000143: SWAP1
00000144: MSTORE
00000145: POP
00000146: PUSH1 0x20
00000148: DUP2
00000149: SWAP1
0000014a: MSTORE
0000014b: PUSH1 0x40
0000014d: DUP3
0000014e: KECCAK256
0000014f: SLOAD
00000150: MUL
00000151: SWAP4
00000152: SWAP1
00000153: SWAP4
00000154: ADD
00000155: SWAP3
00000156: PUSH1 0x01
00000158: SWAP3
00000159: SWAP1
0000015a: SWAP3
0000015b: ADD
0000015c: SWAP2
0000015d: PUSH2 0x0121
00000160: JUMP
00000161: JUMPDEST
00000162: PUSH2 0x00a3
00000165: PUSH1 0x04
00000167: CALLDATALOAD
00000168: PUSH1 0x24
0000016a: CALLDATALOAD
0000016b: PUSH1 0x00
0000016d: PUSH1 0x00
0000016f: DUP3
00000170: GT
00000171: ISZERO
00000172: PUSH2 0x01a1
00000175: JUMPI
00000176: PUSH1 0x01
00000178: PUSH1 0xa0
0000017a: PUSH1 0x02
0000017c: EXP
0000017d: SUB
0000017e: DUP4
0000017f: AND
00000180: DUP1
00000181: DUP3
00000182: MSTORE
00000183: PUSH1 0x05
00000185: PUSH1 0x20
00000187: DUP2
00000188: SWAP1
00000189: MSTORE
0000018a: PUSH1 0x40
0000018c: DUP4
0000018d: KECCAK256
0000018e: SLOAD
0000018f: DUP4
00000190: SWAP2
00000191: MUL
00000192: PUSH1 0x60
00000194: DUP3
00000195: DUP2
00000196: DUP2
00000197: DUP2
00000198: DUP6
00000199: DUP9
0000019a: DUP4
0000019b: CALL
0000019c: POP
0000019d: POP
0000019e: POP
0000019f: POP
000001a0: POP
000001a1: JUMPDEST
000001a2: PUSH1 0x40
000001a4: DUP2
000001a5: KECCAK256
000001a6: PUSH1 0x01
000001a8: PUSH1 0xa0
000001aa: PUSH1 0x02
000001ac: EXP
000001ad: SUB
000001ae: DUP5
000001af: AND
000001b0: DUP3
000001b1: MSTORE
000001b2: PUSH1 0x05
000001b4: PUSH1 0x20
000001b6: MSTORE
000001b7: DUP2
000001b8: SWAP1
000001b9: SSTORE
000001ba: JUMPDEST
000001bb: PUSH1 0x0c
000001bd: SLOAD
000001be: DUP2
000001bf: LT
000001c0: ISZERO
000001c1: PUSH2 0x06ce
000001c4: JUMPI
000001c5: PUSH1 0x01
000001c7: PUSH1 0xa0
000001c9: PUSH1 0x02
000001cb: EXP
000001cc: SUB
000001cd: DUP4
000001ce: AND
000001cf: PUSH1 0x00
000001d1: DUP3
000001d2: PUSH1 0x05
000001d4: DUP2
000001d5: LT
000001d6: ISZERO
000001d7: PUSH2 0x0002
000001da: JUMPI
000001db: SLOAD
000001dc: PUSH1 0x01
000001de: PUSH1 0xa0
000001e0: PUSH1 0x02
000001e2: EXP
000001e3: SUB
000001e4: AND
000001e5: SWAP1
000001e6: SWAP2
000001e7: EQ
000001e8: ISZERO
000001e9: SWAP1
000001ea: POP
000001eb: PUSH2 0x020c
000001ee: JUMPI
000001ef: PUSH1 0x00
000001f1: DUP1
000001f2: DUP3
000001f3: PUSH1 0x05
000001f5: DUP2
000001f6: LT
000001f7: ISZERO
000001f8: PUSH2 0x0002
000001fb: JUMPI
000001fc: DUP1
000001fd: SLOAD
000001fe: PUSH1 0x01
00000200: PUSH1 0xa0
00000202: PUSH1 0x02
00000204: EXP
00000205: SUB
00000206: NOT
00000207: AND
00000208: SWAP1
00000209: SSTORE
0000020a: POP
0000020b: POP
0000020c: JUMPDEST
0000020d: PUSH1 0x01
0000020f: ADD
00000210: PUSH2 0x01ba
00000213: JUMP
00000214: JUMPDEST
00000215: CALLER
00000216: PUSH1 0x01
00000218: PUSH1 0xa0
0000021a: PUSH1 0x02
0000021c: EXP
0000021d: SUB
0000021e: AND
0000021f: PUSH1 0x00
00000221: SWAP1
00000222: DUP2
00000223: MSTORE
00000224: PUSH1 0x05
00000226: PUSH1 0x20
00000228: MSTORE
00000229: PUSH1 0x40
0000022b: SWAP1
0000022c: KECCAK256
0000022d: SLOAD
0000022e: JUMPDEST
0000022f: PUSH1 0x40
00000231: DUP1
00000232: MLOAD
00000233: SWAP2
00000234: DUP3
00000235: MSTORE
00000236: MLOAD
00000237: SWAP1
00000238: DUP2
00000239: SWAP1
0000023a: SUB
0000023b: PUSH1 0x20
0000023d: ADD
0000023e: SWAP1
0000023f: RETURN
00000240: JUMPDEST
00000241: PUSH2 0x022e
00000244: PUSH1 0x0d
00000246: SLOAD
00000247: DUP2
00000248: JUMP
00000249: JUMPDEST
0000024a: PUSH2 0x022e
0000024d: PUSH1 0x04
0000024f: CALLDATALOAD
00000250: PUSH1 0x0b
00000252: PUSH1 0x20
00000254: MSTORE
00000255: PUSH1 0x00
00000257: SWAP1
00000258: DUP2
00000259: MSTORE
0000025a: PUSH1 0x40
0000025c: SWAP1
0000025d: KECCAK256
0000025e: SLOAD
0000025f: DUP2
00000260: JUMP
00000261: JUMPDEST
00000262: PUSH1 0x04
00000264: CALLDATALOAD
00000265: PUSH1 0x01
00000267: PUSH1 0xa0
00000269: PUSH1 0x02
0000026b: EXP
0000026c: SUB
0000026d: AND
0000026e: PUSH1 0x00
00000270: SWAP1
00000271: DUP2
00000272: MSTORE
00000273: PUSH1 0x05
00000275: PUSH1 0x20
00000277: MSTORE
00000278: PUSH1 0x40
0000027a: SWAP1
0000027b: KECCAK256
0000027c: SLOAD
0000027d: PUSH2 0x022e
00000280: JUMP
00000281: JUMPDEST
00000282: PUSH1 0x04
00000284: DUP1
00000285: CALLDATALOAD
00000286: SWAP1
00000287: DUP2
00000288: ADD
00000289: CALLDATALOAD
0000028a: PUSH1 0x20
0000028c: DUP2
0000028d: MUL
0000028e: PUSH1 0x80
00000290: DUP2
00000291: DUP2
00000292: ADD
00000293: PUSH1 0x40
00000295: MSTORE
00000296: PUSH1 0x60
00000298: DUP4
00000299: DUP2
0000029a: MSTORE
0000029b: PUSH2 0x022e
0000029e: SWAP5
0000029f: PUSH1 0x24
000002a1: SWAP5
000002a2: SWAP2
000002a3: SWAP4
000002a4: SWAP1
000002a5: DUP6
000002a6: ADD
000002a7: SWAP3
000002a8: DUP3
000002a9: SWAP2
000002aa: DUP5
000002ab: SWAP1
000002ac: DUP1
000002ad: DUP3
000002ae: DUP5
000002af: CALLDATACOPY
000002b0: POP
000002b1: SWAP5
000002b2: SWAP6
000002b3: CALLDATALOAD
000002b4: SWAP5
000002b5: POP
000002b6: POP
000002b7: POP
000002b8: POP
000002b9: POP
000002ba: PUSH1 0x01
000002bc: PUSH1 0xa0
000002be: PUSH1 0x02
000002c0: EXP
000002c1: SUB
000002c2: CALLER
000002c3: AND
000002c4: PUSH1 0x00
000002c6: SWAP1
000002c7: DUP2
000002c8: MSTORE
000002c9: PUSH1 0x05
000002cb: PUSH1 0x20
000002cd: MSTORE
000002ce: PUSH1 0x40
000002d0: DUP2
000002d1: KECCAK256
000002d2: SLOAD
000002d3: DUP2
000002d4: SWAP1
000002d5: DUP2
000002d6: SWAP1
000002d7: DUP2
000002d8: SWAP1
000002d9: DUP2
000002da: SWAP1
000002db: GT
000002dc: ISZERO
000002dd: PUSH2 0x0497
000002e0: JUMPI
000002e1: PUSH2 0x048e
000002e4: JUMP
000002e5: JUMPDEST
000002e6: PUSH2 0x0362
000002e9: PUSH1 0x04
000002eb: CALLDATALOAD
000002ec: PUSH1 0x00
000002ee: DUP2
000002ef: PUSH1 0x05
000002f1: DUP2
000002f2: LT
000002f3: ISZERO
000002f4: PUSH2 0x0002
000002f7: JUMPI
000002f8: POP
000002f9: POP
000002fa: SLOAD
000002fb: PUSH1 0x01
000002fd: PUSH1 0xa0
000002ff: PUSH1 0x02
00000301: EXP
00000302: SUB
00000303: AND
00000304: DUP2
00000305: JUMP
00000306: JUMPDEST
00000307: PUSH2 0x00a3
0000030a: PUSH1 0x01
0000030c: PUSH1 0xa0
0000030e: PUSH1 0x02
00000310: EXP
00000311: SUB
00000312: CALLER
00000313: AND
00000314: PUSH1 0x00
00000316: SWAP1
00000317: DUP2
00000318: MSTORE
00000319: PUSH1 0x0b
0000031b: PUSH1 0x20
0000031d: MSTORE
0000031e: PUSH1 0x40
00000320: DUP2
00000321: KECCAK256
00000322: SLOAD
00000323: EQ
00000324: ISZERO
00000325: PUSH2 0x0355
00000328: JUMPI
00000329: PUSH1 0x0d
0000032b: SLOAD
0000032c: CALLER
0000032d: SWAP1
0000032e: PUSH1 0x06
00000330: SWAP1
00000331: PUSH1 0x05
00000333: DUP2
00000334: LT
00000335: ISZERO
00000336: PUSH2 0x0002
00000339: JUMPI
0000033a: ADD
0000033b: DUP1
0000033c: SLOAD
0000033d: PUSH1 0x01
0000033f: PUSH1 0xa0
00000341: PUSH1 0x02
00000343: EXP
00000344: SUB
00000345: NOT
00000346: AND
00000347: SWAP1
00000348: SWAP2
00000349: OR
0000034a: SWAP1
0000034b: SSTORE
0000034c: PUSH1 0x0d
0000034e: DUP1
0000034f: SLOAD
00000350: PUSH1 0x01
00000352: ADD
00000353: SWAP1
00000354: SSTORE
00000355: JUMPDEST
00000356: PUSH1 0x40
00000358: PUSH1 0x00
0000035a: KECCAK256
0000035b: DUP1
0000035c: SLOAD
0000035d: CALLVALUE
0000035e: ADD
0000035f: SWAP1
00000360: SSTORE
00000361: JUMP
00000362: JUMPDEST
00000363: PUSH1 0x01
00000365: PUSH1 0xa0
00000367: PUSH1 0x02
00000369: EXP
0000036a: SUB
0000036b: AND
0000036c: PUSH1 0x60
0000036e: SWAP1
0000036f: DUP2
00000370: MSTORE
00000371: PUSH1 0x20
00000373: SWAP1
00000374: RETURN
00000375: JUMPDEST
00000376: PUSH20 0x3c94923400ccc528e8ab0f849edafca06fe332e5
0000038b: SWAP1
0000038c: POP
0000038d: DUP1
0000038e: PUSH1 0x01
00000390: PUSH1 0xa0
00000392: PUSH1 0x02
00000394: EXP
00000395: SUB
00000396: AND
00000397: PUSH4 0xb4aa6cc1
0000039c: DUP7
0000039d: PUSH2 0x2a30
000003a0: ADD
000003a1: DUP8
000003a2: PUSH2 0x2a30
000003a5: ADD
000003a6: PUSH1 0x01
000003a8: DUP11
000003a9: CALLER
000003aa: PUSH1 0x40
000003ac: MLOAD
000003ad: DUP7
000003ae: PUSH1 0xe0
000003b0: PUSH1 0x02
000003b2: EXP
000003b3: MUL
000003b4: DUP2
000003b5: MSTORE
000003b6: PUSH1 0x04
000003b8: ADD
000003b9: DUP1
000003ba: DUP7
000003bb: DUP2
000003bc: MSTORE
000003bd: PUSH1 0x20
000003bf: ADD
000003c0: DUP6
000003c1: DUP2
000003c2: MSTORE
000003c3: PUSH1 0x20
000003c5: ADD
000003c6: DUP5
000003c7: DUP2
000003c8: MSTORE
000003c9: PUSH1 0x20
000003cb: ADD
000003cc: DUP1
000003cd: PUSH1 0x20
000003cf: ADD
000003d0: DUP4
000003d1: PUSH1 0x01
000003d3: PUSH1 0xa0
000003d5: PUSH1 0x02
000003d7: EXP
000003d8: SUB
000003d9: AND
000003da: DUP2
000003db: MSTORE
000003dc: PUSH1 0x20
000003de: ADD
000003df: DUP3
000003e0: DUP2
000003e1: SUB
000003e2: DUP3
000003e3: MSTORE
000003e4: DUP5
000003e5: DUP2
000003e6: DUP2
000003e7: MLOAD
000003e8: DUP2
000003e9: MSTORE
000003ea: PUSH1 0x20
000003ec: ADD
000003ed: SWAP2
000003ee: POP
000003ef: DUP1
000003f0: MLOAD
000003f1: SWAP1
000003f2: PUSH1 0x20
000003f4: ADD
000003f5: SWAP1
000003f6: PUSH1 0x20
000003f8: MUL
000003f9: DUP1
000003fa: DUP4
000003fb: DUP4
000003fc: DUP3
000003fd: SWAP1
000003fe: PUSH1 0x00
00000400: PUSH1 0x04
00000402: PUSH1 0x20
00000404: DUP5
00000405: PUSH1 0x1f
00000407: ADD
00000408: DIV
00000409: PUSH1 0x03
0000040b: MUL
0000040c: PUSH1 0x0f
0000040e: ADD
0000040f: CALL
00000410: POP
00000411: SWAP1
00000412: POP
00000413: ADD
00000414: SWAP7
00000415: POP
00000416: POP
00000417: POP
00000418: POP
00000419: POP
0000041a: POP
0000041b: POP
0000041c: PUSH1 0x00
0000041e: PUSH1 0x40
00000420: MLOAD
00000421: DUP1
00000422: DUP4
00000423: SUB
00000424: DUP2
00000425: PUSH1 0x00
00000427: DUP8
00000428: PUSH2 0x61da
0000042b: GAS
0000042c: SUB
0000042d: CALL
0000042e: ISZERO
0000042f: PUSH2 0x0002
00000432: JUMPI
00000433: POP
00000434: POP
00000435: POP
00000436: CALLVALUE
00000437: PUSH1 0x05
00000439: PUSH1 0x00
0000043b: POP
0000043c: PUSH1 0x00
0000043e: CALLER
0000043f: PUSH1 0x01
00000441: PUSH1 0xa0
00000443: PUSH1 0x02
00000445: EXP
00000446: SUB
00000447: AND
00000448: DUP2
00000449: MSTORE
0000044a: PUSH1 0x20
0000044c: ADD
0000044d: SWAP1
0000044e: DUP2
0000044f: MSTORE
00000450: PUSH1 0x20
00000452: ADD
00000453: PUSH1 0x00
00000455: KECCAK256
00000456: PUSH1 0x00
00000458: POP
00000459: DUP2
0000045a: SWAP1
0000045b: SSTORE
0000045c: POP
0000045d: CALLER
0000045e: PUSH1 0x00
00000460: PUSH1 0x00
00000462: POP
00000463: PUSH1 0x0c
00000465: PUSH1 0x00
00000467: POP
00000468: SLOAD
00000469: PUSH1 0x05
0000046b: DUP2
0000046c: LT
0000046d: ISZERO
0000046e: PUSH2 0x0002
00000471: JUMPI
00000472: DUP1
00000473: SLOAD
00000474: PUSH1 0x01
00000476: PUSH1 0xa0
00000478: PUSH1 0x02
0000047a: EXP
0000047b: SUB
0000047c: NOT
0000047d: AND
0000047e: SWAP1
0000047f: SWAP3
00000480: OR
00000481: SWAP1
00000482: SWAP2
00000483: SSTORE
00000484: POP
00000485: PUSH1 0x0c
00000487: DUP1
00000488: SLOAD
00000489: PUSH1 0x01
0000048b: ADD
0000048c: SWAP1
0000048d: SSTORE
0000048e: JUMPDEST
0000048f: POP
00000490: POP
00000491: POP
00000492: SWAP3
00000493: SWAP2
00000494: POP
00000495: POP
00000496: JUMP
00000497: JUMPDEST
00000498: JUMPDEST
00000499: PUSH1 0x0c
0000049b: SLOAD
0000049c: DUP3
0000049d: LT
0000049e: ISZERO
0000049f: PUSH2 0x04d3
000004a2: JUMPI
000004a3: PUSH1 0x05
000004a5: DUP2
000004a6: DUP1
000004a7: DUP5
000004a8: DUP4
000004a9: DUP2
000004aa: LT
000004ab: ISZERO
000004ac: PUSH2 0x0002
000004af: JUMPI
000004b0: SLOAD
000004b1: PUSH1 0x01
000004b3: PUSH1 0xa0
000004b5: PUSH1 0x02
000004b7: EXP
000004b8: SUB
000004b9: AND
000004ba: SWAP1
000004bb: MSTORE
000004bc: POP
000004bd: PUSH1 0x40
000004bf: DUP3
000004c0: KECCAK256
000004c1: SLOAD
000004c2: MUL
000004c3: SWAP3
000004c4: SWAP1
000004c5: SWAP3
000004c6: ADD
000004c7: SWAP2
000004c8: PUSH1 0x01
000004ca: SWAP2
000004cb: SWAP1
000004cc: SWAP2
000004cd: ADD
000004ce: SWAP1
000004cf: PUSH2 0x0498
000004d2: JUMP
000004d3: JUMPDEST
000004d4: CALLVALUE
000004d5: PUSH1 0x05
000004d7: MUL
000004d8: DUP4
000004d9: ADDRESS
000004da: PUSH1 0x01
000004dc: PUSH1 0xa0
000004de: PUSH1 0x02
000004e0: EXP
000004e1: SUB
000004e2: AND
000004e3: BALANCE
000004e4: SUB
000004e5: LT
000004e6: ISZERO
000004e7: PUSH2 0x0375
000004ea: JUMPI
000004eb: PUSH1 0x40
000004ed: MLOAD
000004ee: PUSH1 0x01
000004f0: PUSH1 0xa0
000004f2: PUSH1 0x02
000004f4: EXP
000004f5: SUB
000004f6: CALLER
000004f7: AND
000004f8: SWAP1
000004f9: DUP3
000004fa: SWAP1
000004fb: CALLVALUE
000004fc: SWAP1
000004fd: DUP3
000004fe: DUP2
000004ff: DUP2
00000500: DUP2
00000501: DUP6
00000502: DUP9
00000503: DUP4
00000504: CALL
00000505: SWAP4
00000506: POP
00000507: POP
00000508: POP
00000509: POP
0000050a: POP
0000050b: PUSH2 0x048e
0000050e: JUMP
0000050f: JUMPDEST
00000510: JUMPDEST
00000511: PUSH1 0x0c
00000513: SLOAD
00000514: DUP4
00000515: LT
00000516: ISZERO
00000517: PUSH2 0x0550
0000051a: JUMPI
0000051b: PUSH1 0x05
0000051d: DUP2
0000051e: DUP1
0000051f: DUP6
00000520: DUP4
00000521: DUP2
00000522: LT
00000523: ISZERO
00000524: PUSH2 0x0002
00000527: JUMPI
00000528: SLOAD
00000529: PUSH1 0x01
0000052b: PUSH1 0xa0
0000052d: PUSH1 0x02
0000052f: EXP
00000530: SUB
00000531: AND
00000532: SWAP1
00000533: MSTORE
00000534: POP
00000535: PUSH1 0x20
00000537: DUP2
00000538: SWAP1
00000539: MSTORE
0000053a: PUSH1 0x40
0000053c: DUP3
0000053d: KECCAK256
0000053e: SLOAD
0000053f: MUL
00000540: SWAP4
00000541: SWAP1
00000542: SWAP4
00000543: ADD
00000544: SWAP3
00000545: PUSH1 0x01
00000547: SWAP3
00000548: SWAP1
00000549: SWAP3
0000054a: ADD
0000054b: SWAP2
0000054c: PUSH2 0x0510
0000054f: JUMP
00000550: JUMPDEST
00000551: ADDRESS
00000552: PUSH1 0x01
00000554: PUSH1 0xa0
00000556: PUSH1 0x02
00000558: EXP
00000559: SUB
0000055a: AND
0000055b: BALANCE
0000055c: DUP5
0000055d: GT
0000055e: ISZERO
0000055f: PUSH2 0x0567
00000562: JUMPI
00000563: PUSH2 0x00cf
00000566: JUMP
00000567: JUMPDEST
00000568: SWAP2
00000569: POP
0000056a: DUP1
0000056b: JUMPDEST
0000056c: PUSH1 0x0d
0000056e: SLOAD
0000056f: DUP4
00000570: LT
00000571: ISZERO
00000572: PUSH2 0x05aa
00000575: JUMPI
00000576: PUSH1 0x0b
00000578: DUP2
00000579: PUSH1 0x06
0000057b: DUP6
0000057c: PUSH1 0x05
0000057e: DUP2
0000057f: LT
00000580: ISZERO
00000581: PUSH2 0x0002
00000584: JUMPI
00000585: ADD
00000586: SLOAD
00000587: PUSH1 0x01
00000589: PUSH1 0xa0
0000058b: PUSH1 0x02
0000058d: EXP
0000058e: SUB
0000058f: AND
00000590: SWAP1
00000591: MSTORE
00000592: PUSH1 0x20
00000594: MSTORE
00000595: PUSH1 0x40
00000597: DUP2
00000598: KECCAK256
00000599: SLOAD
0000059a: SWAP2
0000059b: SWAP1
0000059c: SWAP2
0000059d: ADD
0000059e: SWAP1
0000059f: PUSH1 0x01
000005a1: SWAP3
000005a2: SWAP1
000005a3: SWAP3
000005a4: ADD
000005a5: SWAP2
000005a6: PUSH2 0x056b
000005a9: JUMP
000005aa: JUMPDEST
000005ab: PUSH1 0x40
000005ad: DUP2
000005ae: KECCAK256
000005af: SLOAD
000005b0: PUSH1 0x01
000005b2: PUSH1 0xa0
000005b4: PUSH1 0x02
000005b6: EXP
000005b7: SUB
000005b8: CALLER
000005b9: DUP2
000005ba: AND
000005bb: DUP1
000005bc: DUP5
000005bd: MSTORE
000005be: PUSH1 0x0b
000005c0: PUSH1 0x20
000005c2: MSTORE
000005c3: ADDRESS
000005c4: SWAP1
000005c5: SWAP2
000005c6: AND
000005c7: BALANCE
000005c8: DUP7
000005c9: SWAP1
000005ca: SUB
000005cb: SWAP2
000005cc: DUP5
000005cd: SWAP1
000005ce: DIV
000005cf: SWAP2
000005d0: SWAP1
000005d1: SWAP2
000005d2: MUL
000005d3: SWAP2
000005d4: DUP3
000005d5: PUSH1 0x60
000005d7: DUP3
000005d8: DUP2
000005d9: DUP2
000005da: DUP2
000005db: DUP6
000005dc: DUP9
000005dd: DUP4
000005de: CALL
000005df: SWAP4
000005e0: POP
000005e1: POP
000005e2: POP
000005e3: POP
000005e4: POP
000005e5: PUSH1 0x00
000005e7: PUSH1 0x0b
000005e9: PUSH1 0x00
000005eb: POP
000005ec: PUSH1 0x00
000005ee: CALLER
000005ef: PUSH1 0x01
000005f1: PUSH1 0xa0
000005f3: PUSH1 0x02
000005f5: EXP
000005f6: SUB
000005f7: AND
000005f8: DUP2
000005f9: MSTORE
000005fa: PUSH1 0x20
000005fc: ADD
000005fd: SWAP1
000005fe: DUP2
000005ff: MSTORE
00000600: PUSH1 0x20
00000602: ADD
00000603: PUSH1 0x00
00000605: KECCAK256
00000606: PUSH1 0x00
00000608: POP
00000609: DUP2
0000060a: SWAP1
0000060b: SSTORE
0000060c: POP
0000060d: PUSH1 0x00
0000060f: SWAP3
00000610: POP
00000611: DUP3
00000612: POP
00000613: JUMPDEST
00000614: PUSH1 0x0d
00000616: SLOAD
00000617: DUP4
00000618: LT
00000619: ISZERO
0000061a: PUSH2 0x00cf
0000061d: JUMPI
0000061e: PUSH1 0x01
00000620: PUSH1 0xa0
00000622: PUSH1 0x02
00000624: EXP
00000625: SUB
00000626: CALLER
00000627: AND
00000628: PUSH1 0x06
0000062a: DUP5
0000062b: PUSH1 0x05
0000062d: DUP2
0000062e: LT
0000062f: ISZERO
00000630: PUSH2 0x0002
00000633: JUMPI
00000634: ADD
00000635: SLOAD
00000636: PUSH1 0x01
00000638: PUSH1 0xa0
0000063a: PUSH1 0x02
0000063c: EXP
0000063d: SUB
0000063e: AND
0000063f: EQ
00000640: ISZERO
00000641: PUSH2 0x0663
00000644: JUMPI
00000645: PUSH1 0x00
00000647: PUSH1 0x06
00000649: DUP5
0000064a: PUSH1 0x05
0000064c: DUP2
0000064d: LT
0000064e: ISZERO
0000064f: PUSH2 0x0002
00000652: JUMPI
00000653: ADD
00000654: DUP1
00000655: SLOAD
00000656: PUSH1 0x01
00000658: PUSH1 0xa0
0000065a: PUSH1 0x02
0000065c: EXP
0000065d: SUB
0000065e: NOT
0000065f: AND
00000660: SWAP1
00000661: SSTORE
00000662: POP
00000663: JUMPDEST
00000664: PUSH1 0x01
00000666: SWAP3
00000667: SWAP1
00000668: SWAP3
00000669: ADD
0000066a: SWAP2
0000066b: PUSH2 0x0613
0000066e: JUMP
0000066f: JUMPDEST
00000670: SWAP2
00000671: POP
00000672: DUP1
00000673: JUMPDEST
00000674: PUSH1 0x0d
00000676: SLOAD
00000677: DUP4
00000678: LT
00000679: ISZERO
0000067a: PUSH2 0x06b2
0000067d: JUMPI
0000067e: PUSH1 0x0b
00000680: DUP2
00000681: PUSH1 0x06
00000683: DUP6
00000684: PUSH1 0x05
00000686: DUP2
00000687: LT
00000688: ISZERO
00000689: PUSH2 0x0002
0000068c: JUMPI
0000068d: ADD
0000068e: SLOAD
0000068f: PUSH1 0x01
00000691: PUSH1 0xa0
00000693: PUSH1 0x02
00000695: EXP
00000696: SUB
00000697: AND
00000698: SWAP1
00000699: MSTORE
0000069a: PUSH1 0x20
0000069c: MSTORE
0000069d: PUSH1 0x40
0000069f: DUP2
000006a0: KECCAK256
000006a1: SLOAD
000006a2: SWAP2
000006a3: SWAP1
000006a4: SWAP2
000006a5: ADD
000006a6: SWAP1
000006a7: PUSH1 0x01
000006a9: SWAP3
000006aa: SWAP1
000006ab: SWAP3
000006ac: ADD
000006ad: SWAP2
000006ae: PUSH2 0x0673
000006b1: JUMP
000006b2: JUMPDEST
000006b3: POP
000006b4: ADDRESS
000006b5: PUSH1 0x01
000006b7: PUSH1 0xa0
000006b9: PUSH1 0x02
000006bb: EXP
000006bc: SUB
000006bd: AND
000006be: BALANCE
000006bf: SWAP3
000006c0: SWAP1
000006c1: SWAP3
000006c2: SUB
000006c3: SWAP1
000006c4: SWAP2
000006c5: DIV
000006c6: PUSH1 0x64
000006c8: MUL
000006c9: SWAP3
000006ca: SWAP2
000006cb: POP
000006cc: POP
000006cd: JUMP
000006ce: JUMPDEST
000006cf: POP
000006d0: POP
000006d1: POP
000006d2: JUMP
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xbf39871a2c7d65f8bc5354311b0afac8f56c228f68dbc11fdbc13482d8bba80b
call_targets: 0xc2822b283c74012d08888997cf66fadd1ca0b8c5
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xbf39871a2c7d65f8bc5354311b0afac8f56c228f68dbc11fdbc13482d8bba80b",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xc2822b283c74012d08888997cf66fadd1ca0b8c5"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x187c5903",
            "selector": "0x187c5903",
            "calldata_variants": [
                "0x187c5903",
                "0x187c59030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1bccca14",
            "selector": "0x1bccca14",
            "calldata_variants": [
                "0x1bccca14",
                "0x1bccca140000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x29f8df0d",
            "selector": "0x29f8df0d",
            "calldata_variants": [
                "0x29f8df0d",
                "0x29f8df0d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x444bdb1b",
            "selector": "0x444bdb1b",
            "calldata_variants": [
                "0x444bdb1b",
                "0x444bdb1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x67c18aa1",
            "selector": "0x67c18aa1",
            "calldata_variants": [
                "0x67c18aa1",
                "0x67c18aa10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6d4ce63c",
            "selector": "0x6d4ce63c",
            "calldata_variants": [
                "0x6d4ce63c",
                "0x6d4ce63c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6e723e24",
            "selector": "0x6e723e24",
            "calldata_variants": [
                "0x6e723e24",
                "0x6e723e240000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 411,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1039,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1069,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 5,
    "guards_detected": [],
    "untrusted_call_count": 5
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xbf39871a2c7d65f8bc5354311b0afac8f56c228f68dbc11fdbc13482d8bba80b
call_targets: 0xc2822b283c74012d08888997cf66fadd1ca0b8c5
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xbf39871a2c7d65f8bc5354311b0afac8f56c228f68dbc11fdbc13482d8bba80b",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xc2822b283c74012d08888997cf66fadd1ca0b8c5"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x187c5903",
            "selector": "0x187c5903",
            "calldata_variants": [
                "0x187c5903",
                "0x187c59030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1bccca14",
            "selector": "0x1bccca14",
            "calldata_variants": [
                "0x1bccca14",
                "0x1bccca140000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x29f8df0d",
            "selector": "0x29f8df0d",
            "calldata_variants": [
                "0x29f8df0d",
                "0x29f8df0d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x444bdb1b",
            "selector": "0x444bdb1b",
            "calldata_variants": [
                "0x444bdb1b",
                "0x444bdb1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x67c18aa1",
            "selector": "0x67c18aa1",
            "calldata_variants": [
                "0x67c18aa1",
                "0x67c18aa10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6d4ce63c",
            "selector": "0x6d4ce63c",
            "calldata_variants": [
                "0x6d4ce63c",
                "0x6d4ce63c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6e723e24",
            "selector": "0x6e723e24",
            "calldata_variants": [
                "0x6e723e24",
                "0x6e723e240000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 411,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1039,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1069,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 5,
    "guards_detected": []
}