TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-2363-7341-a8ae-7917f5be745a

complete
Chain ID
1
Address
0x8b1b78b212fa7dbebe9fbb307b5fae1117053e9e
Block Number
—
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
461 artifact.fetch complete 1 / 3 4 months ago
462 tool.cast_disasm complete 1 / 3 4 months ago
78243 analysis.bundle complete 1 / 3 2 weeks ago
78244 capability.graph complete 1 / 3 2 weeks ago
78245 detector.run complete 1 / 3 2 weeks ago
78246 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
4
EXT*/BALANCE
2
Total opcodes
1409
Flags
No heuristic flags raised.
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00d7
0000000a: JUMPI
0000000b: PUSH1 0x00
0000000d: CALLDATALOAD
0000000e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002c: SWAP1
0000002d: DIV
0000002e: DUP1
0000002f: PUSH4 0x08ab2167
00000034: EQ
00000035: PUSH2 0x00d9
00000038: JUMPI
00000039: DUP1
0000003a: PUSH4 0x228cb733
0000003f: EQ
00000040: PUSH2 0x0101
00000043: JUMPI
00000044: DUP1
00000045: PUSH4 0x332d2b87
0000004a: EQ
0000004b: PUSH2 0x0122
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x43d0e1a4
00000055: EQ
00000056: PUSH2 0x0143
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0x4553b787
00000060: EQ
00000061: PUSH2 0x0164
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0x458734c7
0000006b: EQ
0000006c: PUSH2 0x0177
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0x60e65bae
00000076: EQ
00000077: PUSH2 0x0184
0000007a: JUMPI
0000007b: DUP1
0000007c: PUSH4 0x919840ad
00000081: EQ
00000082: PUSH2 0x01ab
00000085: JUMPI
00000086: DUP1
00000087: PUSH4 0x9b2c3af0
0000008c: EQ
0000008d: PUSH2 0x01cc
00000090: JUMPI
00000091: DUP1
00000092: PUSH4 0x9e0551c6
00000097: EQ
00000098: PUSH2 0x01ed
0000009b: JUMPI
0000009c: DUP1
0000009d: PUSH4 0xc5d315be
000000a2: EQ
000000a3: PUSH2 0x0231
000000a6: JUMPI
000000a7: DUP1
000000a8: PUSH4 0xd0dfec89
000000ad: EQ
000000ae: PUSH2 0x0244
000000b1: JUMPI
000000b2: DUP1
000000b3: PUSH4 0xe9d15932
000000b8: EQ
000000b9: PUSH2 0x0265
000000bc: JUMPI
000000bd: DUP1
000000be: PUSH4 0xee76be97
000000c3: EQ
000000c4: PUSH2 0x0286
000000c7: JUMPI
000000c8: DUP1
000000c9: PUSH4 0xf7c0b66e
000000ce: EQ
000000cf: PUSH2 0x02b3
000000d2: JUMPI
000000d3: PUSH2 0x00d7
000000d6: JUMP
000000d7: JUMPDEST
000000d8: STOP
000000d9: JUMPDEST
000000da: PUSH2 0x00e4
000000dd: PUSH1 0x04
000000df: POP
000000e0: PUSH2 0x083b
000000e3: JUMP
000000e4: JUMPDEST
000000e5: PUSH1 0x40
000000e7: MLOAD
000000e8: DUP1
000000e9: DUP4
000000ea: DUP2
000000eb: MSTORE
000000ec: PUSH1 0x20
000000ee: ADD
000000ef: DUP3
000000f0: DUP2
000000f1: MSTORE
000000f2: PUSH1 0x20
000000f4: ADD
000000f5: SWAP3
000000f6: POP
000000f7: POP
000000f8: POP
000000f9: PUSH1 0x40
000000fb: MLOAD
000000fc: DUP1
000000fd: SWAP2
000000fe: SUB
000000ff: SWAP1
00000100: RETURN
00000101: JUMPDEST
00000102: PUSH2 0x010c
00000105: PUSH1 0x04
00000107: POP
00000108: PUSH2 0x0331
0000010b: JUMP
0000010c: JUMPDEST
0000010d: PUSH1 0x40
0000010f: MLOAD
00000110: DUP1
00000111: DUP3
00000112: DUP2
00000113: MSTORE
00000114: PUSH1 0x20
00000116: ADD
00000117: SWAP2
00000118: POP
00000119: POP
0000011a: PUSH1 0x40
0000011c: MLOAD
0000011d: DUP1
0000011e: SWAP2
0000011f: SUB
00000120: SWAP1
00000121: RETURN
00000122: JUMPDEST
00000123: PUSH2 0x012d
00000126: PUSH1 0x04
00000128: POP
00000129: PUSH2 0x0328
0000012c: JUMP
0000012d: JUMPDEST
0000012e: PUSH1 0x40
00000130: MLOAD
00000131: DUP1
00000132: DUP3
00000133: DUP2
00000134: MSTORE
00000135: PUSH1 0x20
00000137: ADD
00000138: SWAP2
00000139: POP
0000013a: POP
0000013b: PUSH1 0x40
0000013d: MLOAD
0000013e: DUP1
0000013f: SWAP2
00000140: SUB
00000141: SWAP1
00000142: RETURN
00000143: JUMPDEST
00000144: PUSH2 0x014e
00000147: PUSH1 0x04
00000149: POP
0000014a: PUSH2 0x036a
0000014d: JUMP
0000014e: JUMPDEST
0000014f: PUSH1 0x40
00000151: MLOAD
00000152: DUP1
00000153: DUP3
00000154: DUP2
00000155: MSTORE
00000156: PUSH1 0x20
00000158: ADD
00000159: SWAP2
0000015a: POP
0000015b: POP
0000015c: PUSH1 0x40
0000015e: MLOAD
0000015f: DUP1
00000160: SWAP2
00000161: SUB
00000162: SWAP1
00000163: RETURN
00000164: JUMPDEST
00000165: PUSH2 0x0175
00000168: PUSH1 0x04
0000016a: DUP1
0000016b: CALLDATALOAD
0000016c: SWAP1
0000016d: PUSH1 0x20
0000016f: ADD
00000170: POP
00000171: PUSH2 0x03b3
00000174: JUMP
00000175: JUMPDEST
00000176: STOP
00000177: JUMPDEST
00000178: PUSH2 0x0182
0000017b: PUSH1 0x04
0000017d: POP
0000017e: PUSH2 0x039c
00000181: JUMP
00000182: JUMPDEST
00000183: STOP
00000184: JUMPDEST
00000185: PUSH2 0x0195
00000188: PUSH1 0x04
0000018a: DUP1
0000018b: CALLDATALOAD
0000018c: SWAP1
0000018d: PUSH1 0x20
0000018f: ADD
00000190: POP
00000191: PUSH2 0x03c8
00000194: JUMP
00000195: JUMPDEST
00000196: PUSH1 0x40
00000198: MLOAD
00000199: DUP1
0000019a: DUP3
0000019b: DUP2
0000019c: MSTORE
0000019d: PUSH1 0x20
0000019f: ADD
000001a0: SWAP2
000001a1: POP
000001a2: POP
000001a3: PUSH1 0x40
000001a5: MLOAD
000001a6: DUP1
000001a7: SWAP2
000001a8: SUB
000001a9: SWAP1
000001aa: RETURN
000001ab: JUMPDEST
000001ac: PUSH2 0x01b6
000001af: PUSH1 0x04
000001b1: POP
000001b2: PUSH2 0x0562
000001b5: JUMP
000001b6: JUMPDEST
000001b7: PUSH1 0x40
000001b9: MLOAD
000001ba: DUP1
000001bb: DUP3
000001bc: DUP2
000001bd: MSTORE
000001be: PUSH1 0x20
000001c0: ADD
000001c1: SWAP2
000001c2: POP
000001c3: POP
000001c4: PUSH1 0x40
000001c6: MLOAD
000001c7: DUP1
000001c8: SWAP2
000001c9: SUB
000001ca: SWAP1
000001cb: RETURN
000001cc: JUMPDEST
000001cd: PUSH2 0x01d7
000001d0: PUSH1 0x04
000001d2: POP
000001d3: PUSH2 0x037c
000001d6: JUMP
000001d7: JUMPDEST
000001d8: PUSH1 0x40
000001da: MLOAD
000001db: DUP1
000001dc: DUP3
000001dd: DUP2
000001de: MSTORE
000001df: PUSH1 0x20
000001e1: ADD
000001e2: SWAP2
000001e3: POP
000001e4: POP
000001e5: PUSH1 0x40
000001e7: MLOAD
000001e8: DUP1
000001e9: SWAP2
000001ea: SUB
000001eb: SWAP1
000001ec: RETURN
000001ed: JUMPDEST
000001ee: PUSH2 0x01fe
000001f1: PUSH1 0x04
000001f3: DUP1
000001f4: CALLDATALOAD
000001f5: SWAP1
000001f6: PUSH1 0x20
000001f8: ADD
000001f9: POP
000001fa: PUSH2 0x02da
000001fd: JUMP
000001fe: JUMPDEST
000001ff: PUSH1 0x40
00000201: MLOAD
00000202: DUP1
00000203: DUP4
00000204: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000219: AND
0000021a: DUP2
0000021b: MSTORE
0000021c: PUSH1 0x20
0000021e: ADD
0000021f: DUP3
00000220: DUP2
00000221: MSTORE
00000222: PUSH1 0x20
00000224: ADD
00000225: SWAP3
00000226: POP
00000227: POP
00000228: POP
00000229: PUSH1 0x40
0000022b: MLOAD
0000022c: DUP1
0000022d: SWAP2
0000022e: SUB
0000022f: SWAP1
00000230: RETURN
00000231: JUMPDEST
00000232: PUSH2 0x0242
00000235: PUSH1 0x04
00000237: DUP1
00000238: CALLDATALOAD
00000239: SWAP1
0000023a: PUSH1 0x20
0000023c: ADD
0000023d: POP
0000023e: PUSH2 0x038e
00000241: JUMP
00000242: JUMPDEST
00000243: STOP
00000244: JUMPDEST
00000245: PUSH2 0x024f
00000248: PUSH1 0x04
0000024a: POP
0000024b: PUSH2 0x0385
0000024e: JUMP
0000024f: JUMPDEST
00000250: PUSH1 0x40
00000252: MLOAD
00000253: DUP1
00000254: DUP3
00000255: DUP2
00000256: MSTORE
00000257: PUSH1 0x20
00000259: ADD
0000025a: SWAP2
0000025b: POP
0000025c: POP
0000025d: PUSH1 0x40
0000025f: MLOAD
00000260: DUP1
00000261: SWAP2
00000262: SUB
00000263: SWAP1
00000264: RETURN
00000265: JUMPDEST
00000266: PUSH2 0x0270
00000269: PUSH1 0x04
0000026b: POP
0000026c: PUSH2 0x0373
0000026f: JUMP
00000270: JUMPDEST
00000271: PUSH1 0x40
00000273: MLOAD
00000274: DUP1
00000275: DUP3
00000276: DUP2
00000277: MSTORE
00000278: PUSH1 0x20
0000027a: ADD
0000027b: SWAP2
0000027c: POP
0000027d: POP
0000027e: PUSH1 0x40
00000280: MLOAD
00000281: DUP1
00000282: SWAP2
00000283: SUB
00000284: SWAP1
00000285: RETURN
00000286: JUMPDEST
00000287: PUSH2 0x029d
0000028a: PUSH1 0x04
0000028c: DUP1
0000028d: CALLDATALOAD
0000028e: SWAP1
0000028f: PUSH1 0x20
00000291: ADD
00000292: DUP1
00000293: CALLDATALOAD
00000294: SWAP1
00000295: PUSH1 0x20
00000297: ADD
00000298: POP
00000299: PUSH2 0x033a
0000029c: JUMP
0000029d: JUMPDEST
0000029e: PUSH1 0x40
000002a0: MLOAD
000002a1: DUP1
000002a2: DUP3
000002a3: DUP2
000002a4: MSTORE
000002a5: PUSH1 0x20
000002a7: ADD
000002a8: SWAP2
000002a9: POP
000002aa: POP
000002ab: PUSH1 0x40
000002ad: MLOAD
000002ae: DUP1
000002af: SWAP2
000002b0: SUB
000002b1: SWAP1
000002b2: RETURN
000002b3: JUMPDEST
000002b4: PUSH2 0x02c4
000002b7: PUSH1 0x04
000002b9: DUP1
000002ba: CALLDATALOAD
000002bb: SWAP1
000002bc: PUSH1 0x20
000002be: ADD
000002bf: POP
000002c0: PUSH2 0x0452
000002c3: JUMP
000002c4: JUMPDEST
000002c5: PUSH1 0x40
000002c7: MLOAD
000002c8: DUP1
000002c9: DUP3
000002ca: DUP2
000002cb: MSTORE
000002cc: PUSH1 0x20
000002ce: ADD
000002cf: SWAP2
000002d0: POP
000002d1: POP
000002d2: PUSH1 0x40
000002d4: MLOAD
000002d5: DUP1
000002d6: SWAP2
000002d7: SUB
000002d8: SWAP1
000002d9: RETURN
000002da: JUMPDEST
000002db: PUSH1 0x00
000002dd: PUSH1 0x00
000002df: POP
000002e0: DUP2
000002e1: PUSH1 0x02
000002e3: DUP2
000002e4: LT
000002e5: ISZERO
000002e6: PUSH2 0x0002
000002e9: JUMPI
000002ea: SWAP1
000002eb: SWAP1
000002ec: PUSH1 0x02
000002ee: MUL
000002ef: ADD
000002f0: PUSH1 0x00
000002f2: SWAP2
000002f3: POP
000002f4: SWAP1
000002f5: POP
000002f6: DUP1
000002f7: PUSH1 0x00
000002f9: ADD
000002fa: PUSH1 0x00
000002fc: SWAP1
000002fd: SLOAD
000002fe: SWAP1
000002ff: PUSH2 0x0100
00000302: EXP
00000303: SWAP1
00000304: DIV
00000305: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000031a: AND
0000031b: SWAP1
0000031c: DUP1
0000031d: PUSH1 0x01
0000031f: ADD
00000320: PUSH1 0x00
00000322: POP
00000323: SLOAD
00000324: SWAP1
00000325: POP
00000326: DUP3
00000327: JUMP
00000328: JUMPDEST
00000329: PUSH1 0x04
0000032b: PUSH1 0x00
0000032d: POP
0000032e: SLOAD
0000032f: DUP2
00000330: JUMP
00000331: JUMPDEST
00000332: PUSH1 0x05
00000334: PUSH1 0x00
00000336: POP
00000337: SLOAD
00000338: DUP2
00000339: JUMP
0000033a: JUMPDEST
0000033b: PUSH1 0x06
0000033d: PUSH1 0x00
0000033f: POP
00000340: DUP3
00000341: PUSH1 0x03
00000343: DUP2
00000344: LT
00000345: ISZERO
00000346: PUSH2 0x0002
00000349: JUMPI
0000034a: SWAP1
0000034b: SWAP1
0000034c: PUSH1 0x03
0000034e: MUL
0000034f: ADD
00000350: PUSH1 0x00
00000352: POP
00000353: DUP2
00000354: PUSH1 0x03
00000356: DUP2
00000357: LT
00000358: ISZERO
00000359: PUSH2 0x0002
0000035c: JUMPI
0000035d: SWAP1
0000035e: SWAP1
0000035f: ADD
00000360: PUSH1 0x00
00000362: SWAP2
00000363: POP
00000364: SWAP2
00000365: POP
00000366: POP
00000367: SLOAD
00000368: DUP2
00000369: JUMP
0000036a: JUMPDEST
0000036b: PUSH1 0x0f
0000036d: PUSH1 0x00
0000036f: POP
00000370: SLOAD
00000371: DUP2
00000372: JUMP
00000373: JUMPDEST
00000374: PUSH1 0x10
00000376: PUSH1 0x00
00000378: POP
00000379: SLOAD
0000037a: DUP2
0000037b: JUMP
0000037c: JUMPDEST
0000037d: PUSH1 0x11
0000037f: PUSH1 0x00
00000381: POP
00000382: SLOAD
00000383: DUP2
00000384: JUMP
00000385: JUMPDEST
00000386: PUSH1 0x12
00000388: PUSH1 0x00
0000038a: POP
0000038b: SLOAD
0000038c: DUP2
0000038d: JUMP
0000038e: JUMPDEST
0000038f: DUP1
00000390: PUSH1 0x04
00000392: PUSH1 0x00
00000394: POP
00000395: DUP2
00000396: SWAP1
00000397: SSTORE
00000398: POP
00000399: JUMPDEST
0000039a: POP
0000039b: JUMP
0000039c: JUMPDEST
0000039d: PUSH1 0x04
0000039f: PUSH1 0x00
000003a1: DUP2
000003a2: DUP2
000003a3: POP
000003a4: SLOAD
000003a5: DUP1
000003a6: SWAP3
000003a7: SWAP2
000003a8: SWAP1
000003a9: PUSH1 0x01
000003ab: ADD
000003ac: SWAP2
000003ad: SWAP1
000003ae: POP
000003af: SSTORE
000003b0: POP
000003b1: JUMPDEST
000003b2: JUMP
000003b3: JUMPDEST
000003b4: CALLVALUE
000003b5: PUSH1 0x05
000003b7: PUSH1 0x00
000003b9: POP
000003ba: SLOAD
000003bb: ADD
000003bc: PUSH1 0x05
000003be: PUSH1 0x00
000003c0: POP
000003c1: DUP2
000003c2: SWAP1
000003c3: SSTORE
000003c4: POP
000003c5: JUMPDEST
000003c6: POP
000003c7: JUMP
000003c8: JUMPDEST
000003c9: PUSH1 0x00
000003cb: CALLVALUE
000003cc: PUSH1 0x05
000003ce: PUSH1 0x00
000003d0: POP
000003d1: SLOAD
000003d2: ADD
000003d3: PUSH1 0x05
000003d5: PUSH1 0x00
000003d7: POP
000003d8: DUP2
000003d9: SWAP1
000003da: SSTORE
000003db: POP
000003dc: CALLER
000003dd: PUSH1 0x00
000003df: PUSH1 0x00
000003e1: POP
000003e2: PUSH1 0x04
000003e4: PUSH1 0x00
000003e6: POP
000003e7: SLOAD
000003e8: PUSH1 0x02
000003ea: DUP2
000003eb: LT
000003ec: ISZERO
000003ed: PUSH2 0x0002
000003f0: JUMPI
000003f1: SWAP1
000003f2: SWAP1
000003f3: PUSH1 0x02
000003f5: MUL
000003f6: ADD
000003f7: PUSH1 0x00
000003f9: POP
000003fa: PUSH1 0x00
000003fc: ADD
000003fd: PUSH1 0x00
000003ff: PUSH2 0x0100
00000402: EXP
00000403: DUP2
00000404: SLOAD
00000405: DUP2
00000406: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000041b: MUL
0000041c: NOT
0000041d: AND
0000041e: SWAP1
0000041f: DUP4
00000420: MUL
00000421: OR
00000422: SWAP1
00000423: SSTORE
00000424: POP
00000425: DUP2
00000426: PUSH1 0x00
00000428: PUSH1 0x00
0000042a: POP
0000042b: PUSH1 0x04
0000042d: PUSH1 0x00
0000042f: POP
00000430: SLOAD
00000431: PUSH1 0x02
00000433: DUP2
00000434: LT
00000435: ISZERO
00000436: PUSH2 0x0002
00000439: JUMPI
0000043a: SWAP1
0000043b: SWAP1
0000043c: PUSH1 0x02
0000043e: MUL
0000043f: ADD
00000440: PUSH1 0x00
00000442: POP
00000443: PUSH1 0x01
00000445: ADD
00000446: PUSH1 0x00
00000448: POP
00000449: DUP2
0000044a: SWAP1
0000044b: SSTORE
0000044c: POP
0000044d: JUMPDEST
0000044e: SWAP2
0000044f: SWAP1
00000450: POP
00000451: JUMP
00000452: JUMPDEST
00000453: PUSH1 0x00
00000455: PUSH1 0x02
00000457: PUSH1 0x04
00000459: PUSH1 0x00
0000045b: POP
0000045c: SLOAD
0000045d: LT
0000045e: ISZERO
0000045f: PUSH2 0x0512
00000462: JUMPI
00000463: CALLVALUE
00000464: PUSH1 0x05
00000466: PUSH1 0x00
00000468: POP
00000469: SLOAD
0000046a: ADD
0000046b: PUSH1 0x05
0000046d: PUSH1 0x00
0000046f: POP
00000470: DUP2
00000471: SWAP1
00000472: SSTORE
00000473: POP
00000474: CALLER
00000475: PUSH1 0x00
00000477: PUSH1 0x00
00000479: POP
0000047a: PUSH1 0x04
0000047c: PUSH1 0x00
0000047e: POP
0000047f: SLOAD
00000480: PUSH1 0x02
00000482: DUP2
00000483: LT
00000484: ISZERO
00000485: PUSH2 0x0002
00000488: JUMPI
00000489: SWAP1
0000048a: SWAP1
0000048b: PUSH1 0x02
0000048d: MUL
0000048e: ADD
0000048f: PUSH1 0x00
00000491: POP
00000492: PUSH1 0x00
00000494: ADD
00000495: PUSH1 0x00
00000497: PUSH2 0x0100
0000049a: EXP
0000049b: DUP2
0000049c: SLOAD
0000049d: DUP2
0000049e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004b3: MUL
000004b4: NOT
000004b5: AND
000004b6: SWAP1
000004b7: DUP4
000004b8: MUL
000004b9: OR
000004ba: SWAP1
000004bb: SSTORE
000004bc: POP
000004bd: DUP2
000004be: PUSH1 0x00
000004c0: PUSH1 0x00
000004c2: POP
000004c3: PUSH1 0x04
000004c5: PUSH1 0x00
000004c7: POP
000004c8: SLOAD
000004c9: PUSH1 0x02
000004cb: DUP2
000004cc: LT
000004cd: ISZERO
000004ce: PUSH2 0x0002
000004d1: JUMPI
000004d2: SWAP1
000004d3: SWAP1
000004d4: PUSH1 0x02
000004d6: MUL
000004d7: ADD
000004d8: PUSH1 0x00
000004da: POP
000004db: PUSH1 0x01
000004dd: ADD
000004de: PUSH1 0x00
000004e0: POP
000004e1: DUP2
000004e2: SWAP1
000004e3: SSTORE
000004e4: POP
000004e5: PUSH1 0x01
000004e7: PUSH1 0x04
000004e9: PUSH1 0x00
000004eb: POP
000004ec: SLOAD
000004ed: ADD
000004ee: PUSH1 0x04
000004f0: PUSH1 0x00
000004f2: POP
000004f3: DUP2
000004f4: SWAP1
000004f5: SSTORE
000004f6: POP
000004f7: PUSH1 0x00
000004f9: PUSH1 0x10
000004fb: PUSH1 0x00
000004fd: POP
000004fe: DUP2
000004ff: SWAP1
00000500: SSTORE
00000501: POP
00000502: PUSH1 0x10
00000504: PUSH1 0x00
00000506: POP
00000507: SLOAD
00000508: SWAP1
00000509: POP
0000050a: PUSH2 0x055d
0000050d: JUMP
0000050e: PUSH2 0x055c
00000511: JUMP
00000512: JUMPDEST
00000513: PUSH1 0x14
00000515: PUSH1 0x04
00000517: PUSH1 0x00
00000519: DUP3
0000051a: DUP3
0000051b: DUP3
0000051c: POP
0000051d: SLOAD
0000051e: ADD
0000051f: SWAP3
00000520: POP
00000521: POP
00000522: DUP2
00000523: SWAP1
00000524: SSTORE
00000525: POP
00000526: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
00000547: PUSH1 0x10
00000549: PUSH1 0x00
0000054b: POP
0000054c: DUP2
0000054d: SWAP1
0000054e: SSTORE
0000054f: POP
00000550: PUSH1 0x10
00000552: PUSH1 0x00
00000554: POP
00000555: SLOAD
00000556: SWAP1
00000557: POP
00000558: PUSH2 0x055d
0000055b: JUMP
0000055c: JUMPDEST
0000055d: JUMPDEST
0000055e: SWAP2
0000055f: SWAP1
00000560: POP
00000561: JUMP
00000562: JUMPDEST
00000563: PUSH1 0x00
00000565: PUSH1 0x00
00000567: PUSH1 0x00
00000569: PUSH1 0x00
0000056b: PUSH1 0x00
0000056d: POP
0000056e: PUSH1 0x00
00000570: PUSH1 0x02
00000572: DUP2
00000573: LT
00000574: ISZERO
00000575: PUSH2 0x0002
00000578: JUMPI
00000579: SWAP1
0000057a: SWAP1
0000057b: PUSH1 0x02
0000057d: MUL
0000057e: ADD
0000057f: PUSH1 0x00
00000581: POP
00000582: PUSH1 0x01
00000584: ADD
00000585: PUSH1 0x00
00000587: POP
00000588: SLOAD
00000589: SWAP2
0000058a: POP
0000058b: PUSH1 0x00
0000058d: PUSH1 0x00
0000058f: POP
00000590: PUSH1 0x01
00000592: PUSH1 0x02
00000594: DUP2
00000595: LT
00000596: ISZERO
00000597: PUSH2 0x0002
0000059a: JUMPI
0000059b: SWAP1
0000059c: SWAP1
0000059d: PUSH1 0x02
0000059f: MUL
000005a0: ADD
000005a1: PUSH1 0x00
000005a3: POP
000005a4: PUSH1 0x01
000005a6: ADD
000005a7: PUSH1 0x00
000005a9: POP
000005aa: SLOAD
000005ab: SWAP1
000005ac: POP
000005ad: PUSH1 0x00
000005af: PUSH1 0x06
000005b1: PUSH1 0x00
000005b3: POP
000005b4: DUP4
000005b5: PUSH1 0x03
000005b7: DUP2
000005b8: LT
000005b9: ISZERO
000005ba: PUSH2 0x0002
000005bd: JUMPI
000005be: SWAP1
000005bf: SWAP1
000005c0: PUSH1 0x03
000005c2: MUL
000005c3: ADD
000005c4: PUSH1 0x00
000005c6: POP
000005c7: DUP3
000005c8: PUSH1 0x03
000005ca: DUP2
000005cb: LT
000005cc: ISZERO
000005cd: PUSH2 0x0002
000005d0: JUMPI
000005d1: SWAP1
000005d2: SWAP1
000005d3: ADD
000005d4: PUSH1 0x00
000005d6: POP
000005d7: SLOAD
000005d8: EQ
000005d9: ISZERO
000005da: PUSH2 0x066d
000005dd: JUMPI
000005de: PUSH1 0x00
000005e0: PUSH1 0x00
000005e2: POP
000005e3: PUSH1 0x00
000005e5: PUSH1 0x02
000005e7: DUP2
000005e8: LT
000005e9: ISZERO
000005ea: PUSH2 0x0002
000005ed: JUMPI
000005ee: SWAP1
000005ef: SWAP1
000005f0: PUSH1 0x02
000005f2: MUL
000005f3: ADD
000005f4: PUSH1 0x00
000005f6: POP
000005f7: PUSH1 0x00
000005f9: ADD
000005fa: PUSH1 0x00
000005fc: SWAP1
000005fd: SLOAD
000005fe: SWAP1
000005ff: PUSH2 0x0100
00000602: EXP
00000603: SWAP1
00000604: DIV
00000605: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000061a: AND
0000061b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000630: AND
00000631: PUSH1 0x00
00000633: PUSH1 0x05
00000635: PUSH1 0x00
00000637: POP
00000638: SLOAD
00000639: PUSH1 0x40
0000063b: MLOAD
0000063c: DUP1
0000063d: SWAP1
0000063e: POP
0000063f: PUSH1 0x00
00000641: PUSH1 0x40
00000643: MLOAD
00000644: DUP1
00000645: DUP4
00000646: SUB
00000647: DUP2
00000648: DUP6
00000649: DUP9
0000064a: DUP9
0000064b: CALL
0000064c: SWAP4
0000064d: POP
0000064e: POP
0000064f: POP
00000650: POP
00000651: POP
00000652: PUSH1 0x00
00000654: PUSH1 0x0f
00000656: PUSH1 0x00
00000658: POP
00000659: DUP2
0000065a: SWAP1
0000065b: SSTORE
0000065c: POP
0000065d: PUSH1 0x0f
0000065f: PUSH1 0x00
00000661: POP
00000662: SLOAD
00000663: SWAP3
00000664: POP
00000665: PUSH2 0x0836
00000668: JUMP
00000669: PUSH2 0x0835
0000066c: JUMP
0000066d: JUMPDEST
0000066e: PUSH1 0x01
00000670: PUSH1 0x06
00000672: PUSH1 0x00
00000674: POP
00000675: DUP4
00000676: PUSH1 0x03
00000678: DUP2
00000679: LT
0000067a: ISZERO
0000067b: PUSH2 0x0002
0000067e: JUMPI
0000067f: SWAP1
00000680: SWAP1
00000681: PUSH1 0x03
00000683: MUL
00000684: ADD
00000685: PUSH1 0x00
00000687: POP
00000688: DUP3
00000689: PUSH1 0x03
0000068b: DUP2
0000068c: LT
0000068d: ISZERO
0000068e: PUSH2 0x0002
00000691: JUMPI
00000692: SWAP1
00000693: SWAP1
00000694: ADD
00000695: PUSH1 0x00
00000697: POP
00000698: SLOAD
00000699: EQ
0000069a: ISZERO
0000069b: PUSH2 0x072e
0000069e: JUMPI
0000069f: PUSH1 0x00
000006a1: PUSH1 0x00
000006a3: POP
000006a4: PUSH1 0x01
000006a6: PUSH1 0x02
000006a8: DUP2
000006a9: LT
000006aa: ISZERO
000006ab: PUSH2 0x0002
000006ae: JUMPI
000006af: SWAP1
000006b0: SWAP1
000006b1: PUSH1 0x02
000006b3: MUL
000006b4: ADD
000006b5: PUSH1 0x00
000006b7: POP
000006b8: PUSH1 0x00
000006ba: ADD
000006bb: PUSH1 0x00
000006bd: SWAP1
000006be: SLOAD
000006bf: SWAP1
000006c0: PUSH2 0x0100
000006c3: EXP
000006c4: SWAP1
000006c5: DIV
000006c6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006db: AND
000006dc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006f1: AND
000006f2: PUSH1 0x00
000006f4: PUSH1 0x05
000006f6: PUSH1 0x00
000006f8: POP
000006f9: SLOAD
000006fa: PUSH1 0x40
000006fc: MLOAD
000006fd: DUP1
000006fe: SWAP1
000006ff: POP
00000700: PUSH1 0x00
00000702: PUSH1 0x40
00000704: MLOAD
00000705: DUP1
00000706: DUP4
00000707: SUB
00000708: DUP2
00000709: DUP6
0000070a: DUP9
0000070b: DUP9
0000070c: CALL
0000070d: SWAP4
0000070e: POP
0000070f: POP
00000710: POP
00000711: POP
00000712: POP
00000713: PUSH1 0x01
00000715: PUSH1 0x0f
00000717: PUSH1 0x00
00000719: POP
0000071a: DUP2
0000071b: SWAP1
0000071c: SSTORE
0000071d: POP
0000071e: PUSH1 0x0f
00000720: PUSH1 0x00
00000722: POP
00000723: SLOAD
00000724: SWAP3
00000725: POP
00000726: PUSH2 0x0836
00000729: JUMP
0000072a: PUSH2 0x0834
0000072d: JUMP
0000072e: JUMPDEST
0000072f: PUSH1 0x00
00000731: PUSH1 0x00
00000733: POP
00000734: PUSH1 0x00
00000736: PUSH1 0x02
00000738: DUP2
00000739: LT
0000073a: ISZERO
0000073b: PUSH2 0x0002
0000073e: JUMPI
0000073f: SWAP1
00000740: SWAP1
00000741: PUSH1 0x02
00000743: MUL
00000744: ADD
00000745: PUSH1 0x00
00000747: POP
00000748: PUSH1 0x00
0000074a: ADD
0000074b: PUSH1 0x00
0000074d: SWAP1
0000074e: SLOAD
0000074f: SWAP1
00000750: PUSH2 0x0100
00000753: EXP
00000754: SWAP1
00000755: DIV
00000756: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000076b: AND
0000076c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000781: AND
00000782: PUSH1 0x00
00000784: PUSH1 0x02
00000786: PUSH1 0x05
00000788: PUSH1 0x00
0000078a: POP
0000078b: SLOAD
0000078c: DIV
0000078d: PUSH1 0x40
0000078f: MLOAD
00000790: DUP1
00000791: SWAP1
00000792: POP
00000793: PUSH1 0x00
00000795: PUSH1 0x40
00000797: MLOAD
00000798: DUP1
00000799: DUP4
0000079a: SUB
0000079b: DUP2
0000079c: DUP6
0000079d: DUP9
0000079e: DUP9
0000079f: CALL
000007a0: SWAP4
000007a1: POP
000007a2: POP
000007a3: POP
000007a4: POP
000007a5: POP
000007a6: PUSH1 0x00
000007a8: PUSH1 0x00
000007aa: POP
000007ab: PUSH1 0x01
000007ad: PUSH1 0x02
000007af: DUP2
000007b0: LT
000007b1: ISZERO
000007b2: PUSH2 0x0002
000007b5: JUMPI
000007b6: SWAP1
000007b7: SWAP1
000007b8: PUSH1 0x02
000007ba: MUL
000007bb: ADD
000007bc: PUSH1 0x00
000007be: POP
000007bf: PUSH1 0x00
000007c1: ADD
000007c2: PUSH1 0x00
000007c4: SWAP1
000007c5: SLOAD
000007c6: SWAP1
000007c7: PUSH2 0x0100
000007ca: EXP
000007cb: SWAP1
000007cc: DIV
000007cd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007e2: AND
000007e3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007f8: AND
000007f9: PUSH1 0x00
000007fb: PUSH1 0x02
000007fd: PUSH1 0x05
000007ff: PUSH1 0x00
00000801: POP
00000802: SLOAD
00000803: DIV
00000804: PUSH1 0x40
00000806: MLOAD
00000807: DUP1
00000808: SWAP1
00000809: POP
0000080a: PUSH1 0x00
0000080c: PUSH1 0x40
0000080e: MLOAD
0000080f: DUP1
00000810: DUP4
00000811: SUB
00000812: DUP2
00000813: DUP6
00000814: DUP9
00000815: DUP9
00000816: CALL
00000817: SWAP4
00000818: POP
00000819: POP
0000081a: POP
0000081b: POP
0000081c: POP
0000081d: PUSH1 0x02
0000081f: PUSH1 0x0f
00000821: PUSH1 0x00
00000823: POP
00000824: DUP2
00000825: SWAP1
00000826: SSTORE
00000827: POP
00000828: PUSH1 0x0f
0000082a: PUSH1 0x00
0000082c: POP
0000082d: SLOAD
0000082e: SWAP3
0000082f: POP
00000830: PUSH2 0x0836
00000833: JUMP
00000834: JUMPDEST
00000835: JUMPDEST
00000836: JUMPDEST
00000837: POP
00000838: POP
00000839: SWAP1
0000083a: JUMP
0000083b: JUMPDEST
0000083c: PUSH1 0x00
0000083e: PUSH1 0x00
00000840: PUSH1 0x00
00000842: PUSH1 0x00
00000844: POP
00000845: PUSH1 0x01
00000847: PUSH1 0x02
00000849: DUP2
0000084a: LT
0000084b: ISZERO
0000084c: PUSH2 0x0002
0000084f: JUMPI
00000850: SWAP1
00000851: SWAP1
00000852: PUSH1 0x02
00000854: MUL
00000855: ADD
00000856: PUSH1 0x00
00000858: POP
00000859: PUSH1 0x00
0000085b: ADD
0000085c: PUSH1 0x00
0000085e: SWAP1
0000085f: SLOAD
00000860: SWAP1
00000861: PUSH2 0x0100
00000864: EXP
00000865: SWAP1
00000866: DIV
00000867: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000087c: AND
0000087d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000892: AND
00000893: BALANCE
00000894: PUSH1 0x11
00000896: PUSH1 0x00
00000898: POP
00000899: DUP2
0000089a: SWAP1
0000089b: SSTORE
0000089c: POP
0000089d: PUSH1 0x00
0000089f: PUSH1 0x00
000008a1: POP
000008a2: PUSH1 0x00
000008a4: PUSH1 0x02
000008a6: DUP2
000008a7: LT
000008a8: ISZERO
000008a9: PUSH2 0x0002
000008ac: JUMPI
000008ad: SWAP1
000008ae: SWAP1
000008af: PUSH1 0x02
000008b1: MUL
000008b2: ADD
000008b3: PUSH1 0x00
000008b5: POP
000008b6: PUSH1 0x00
000008b8: ADD
000008b9: PUSH1 0x00
000008bb: SWAP1
000008bc: SLOAD
000008bd: SWAP1
000008be: PUSH2 0x0100
000008c1: EXP
000008c2: SWAP1
000008c3: DIV
000008c4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008d9: AND
000008da: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008ef: AND
000008f0: BALANCE
000008f1: PUSH1 0x12
000008f3: PUSH1 0x00
000008f5: POP
000008f6: DUP2
000008f7: SWAP1
000008f8: SSTORE
000008f9: POP
000008fa: PUSH1 0x11
000008fc: PUSH1 0x00
000008fe: POP
000008ff: SLOAD
00000900: SWAP2
00000901: POP
00000902: DUP2
00000903: POP
00000904: PUSH1 0x12
00000906: PUSH1 0x00
00000908: POP
00000909: SLOAD
0000090a: SWAP1
0000090b: POP
0000090c: DUP1
0000090d: POP
0000090e: JUMPDEST
0000090f: SWAP1
00000910: SWAP2
00000911: JUMP
View stderr 
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xe7356c21ccbe8057db822c80564ce75146a5b7f3b3e3d9285043c1cb1c01d799
call_targets: 0x8b1b78b212fa7dbebe9fbb307b5fae1117053e9e
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xe7356c21ccbe8057db822c80564ce75146a5b7f3b3e3d9285043c1cb1c01d799",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8b1b78b212fa7dbebe9fbb307b5fae1117053e9e"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x08ab2167",
            "selector": "0x08ab2167",
            "calldata_variants": [
                "0x08ab2167",
                "0x08ab21670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x228cb733",
            "selector": "0x228cb733",
            "calldata_variants": [
                "0x228cb733",
                "0x228cb7330000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x332d2b87",
            "selector": "0x332d2b87",
            "calldata_variants": [
                "0x332d2b87",
                "0x332d2b870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x43d0e1a4",
            "selector": "0x43d0e1a4",
            "calldata_variants": [
                "0x43d0e1a4",
                "0x43d0e1a40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4553b787",
            "selector": "0x4553b787",
            "calldata_variants": [
                "0x4553b787",
                "0x4553b7870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x458734c7",
            "selector": "0x458734c7",
            "calldata_variants": [
                "0x458734c7",
                "0x458734c70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x60e65bae",
            "selector": "0x60e65bae",
            "calldata_variants": [
                "0x60e65bae",
                "0x60e65bae0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x919840ad",
            "selector": "0x919840ad",
            "calldata_variants": [
                "0x919840ad",
                "0x919840ad0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 1611,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1804,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1951,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 4,
    "guards_detected": [],
    "untrusted_call_count": 4
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xe7356c21ccbe8057db822c80564ce75146a5b7f3b3e3d9285043c1cb1c01d799
call_targets: 0x8b1b78b212fa7dbebe9fbb307b5fae1117053e9e
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xe7356c21ccbe8057db822c80564ce75146a5b7f3b3e3d9285043c1cb1c01d799",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8b1b78b212fa7dbebe9fbb307b5fae1117053e9e"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x08ab2167",
            "selector": "0x08ab2167",
            "calldata_variants": [
                "0x08ab2167",
                "0x08ab21670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x228cb733",
            "selector": "0x228cb733",
            "calldata_variants": [
                "0x228cb733",
                "0x228cb7330000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x332d2b87",
            "selector": "0x332d2b87",
            "calldata_variants": [
                "0x332d2b87",
                "0x332d2b870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x43d0e1a4",
            "selector": "0x43d0e1a4",
            "calldata_variants": [
                "0x43d0e1a4",
                "0x43d0e1a40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4553b787",
            "selector": "0x4553b787",
            "calldata_variants": [
                "0x4553b787",
                "0x4553b7870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x458734c7",
            "selector": "0x458734c7",
            "calldata_variants": [
                "0x458734c7",
                "0x458734c70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x60e65bae",
            "selector": "0x60e65bae",
            "calldata_variants": [
                "0x60e65bae",
                "0x60e65bae0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x919840ad",
            "selector": "0x919840ad",
            "calldata_variants": [
                "0x919840ad",
                "0x919840ad0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 1611,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1804,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1951,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 4,
    "guards_detected": []
}