019b3836-23ed-7024-bc7f-2f641555f752
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 545 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 546 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 78399 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 78400 | capability.graph | complete | 1 / 3 | 1 week ago |
| 78401 | detector.run | complete | 1 / 3 | 1 week ago |
| 78402 | validation.fork | complete | 1 / 3 | 1 week ago |
| 113573 | report.consolidate | complete | 1 / 6 | 1 week ago |
No slither job recorded yet.
OpenAI Codex v0.118.0 (research preview) -------- workdir: /tmp/codex-4xtnwbax model: gpt-5.4 provider: openai approval: never sandbox: read-only reasoning effort: high reasoning summaries: none session id: 019d5c97-c217-7503-8295-e887fd5d4545 -------- user You are a security auditor. You ONLY have runtime bytecode + analysis artifacts. You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary, evidence bundle, callsites, storage slots, and detector findings. Special cases when reasoning from bytecode (be explicit about uncertainty): - Selector inference is best-effort; missing selectors are common. - Fallback/receive paths may be the only entrypoints. - CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage. - Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative. - Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown. - Guard detection is heuristic; absence of guards does NOT mean unguarded. - Returndata checking is unknown unless explicitly shown in evidence. - Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim. Output MUST be valid JSON matching the provided schema. - If you find nothing meaningful: set no_findings=true and findings=[]. - Otherwise: set no_findings=false and include findings with severity/category/title. - Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb". Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, accounting/invariant breaks, dangerous delegatecall, and untrusted external calls. Be conservative: if evidence is weak, mark severity low/medium and explain why. warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
{
"codex": {
"ran_at": "2026-04-05T07:42:24.481215+00:00",
"returncode": 1
},
"project": {
"mode": "bytecode",
"bytecode_length": 2678,
"bytecode_truncated": false,
"capability_graph_present": true,
"analysis_artifact_present": true
},
"summary": null,
"no_findings": null,
"schema_version": 1
}
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0xe0 00000007: PUSH1 0x02 00000009: EXP 0000000a: PUSH1 0x00 0000000c: CALLDATALOAD 0000000d: DIV 0000000e: PUSH4 0x27dc297e 00000013: DUP2 00000014: EQ 00000015: PUSH2 0x003c 00000018: JUMPI 00000019: DUP1 0000001a: PUSH4 0x41c0e1b5 0000001f: EQ 00000020: PUSH2 0x0189 00000023: JUMPI 00000024: DUP1 00000025: PUSH4 0xa2e62045 0000002a: EQ 0000002b: PUSH2 0x01b0 0000002e: JUMPI 0000002f: DUP1 00000030: PUSH4 0xb7764475 00000035: EQ 00000036: PUSH2 0x0394 00000039: JUMPI 0000003a: JUMPDEST 0000003b: STOP 0000003c: JUMPDEST 0000003d: PUSH1 0x40 0000003f: DUP1 00000040: MLOAD 00000041: PUSH1 0x20 00000043: PUSH1 0x24 00000045: DUP1 00000046: CALLDATALOAD 00000047: PUSH1 0x04 00000049: DUP2 0000004a: DUP2 0000004b: ADD 0000004c: CALLDATALOAD 0000004d: PUSH1 0x1f 0000004f: DUP2 00000050: ADD 00000051: DUP6 00000052: SWAP1 00000053: DIV 00000054: DUP6 00000055: MUL 00000056: DUP7 00000057: ADD 00000058: DUP6 00000059: ADD 0000005a: SWAP1 0000005b: SWAP7 0000005c: MSTORE 0000005d: DUP6 0000005e: DUP6 0000005f: MSTORE 00000060: PUSH2 0x003a 00000063: SWAP6 00000064: DUP2 00000065: CALLDATALOAD 00000066: SWAP6 00000067: SWAP2 00000068: SWAP5 00000069: PUSH1 0x44 0000006b: SWAP5 0000006c: SWAP3 0000006d: SWAP4 0000006e: SWAP1 0000006f: SWAP3 00000070: ADD 00000071: SWAP2 00000072: DUP2 00000073: SWAP1 00000074: DUP5 00000075: ADD 00000076: DUP4 00000077: DUP3 00000078: DUP1 00000079: DUP3 0000007a: DUP5 0000007b: CALLDATACOPY 0000007c: POP 0000007d: POP 0000007e: PUSH1 0x40 00000080: DUP1 00000081: MLOAD 00000082: PUSH32 0x38cc483100000000000000000000000000000000000000000000000000000000 000000a3: DUP2 000000a4: MSTORE 000000a5: SWAP1 000000a6: MLOAD 000000a7: SWAP6 000000a8: SWAP8 000000a9: PUSH20 0x1d11e5eae3112dbd44f99266872ff1d07c77dce8 000000be: SWAP8 000000bf: POP 000000c0: DUP8 000000c1: SWAP7 000000c2: PUSH4 0x38cc4831 000000c7: SWAP7 000000c8: POP 000000c9: DUP3 000000ca: DUP3 000000cb: ADD 000000cc: SWAP6 000000cd: POP 000000ce: PUSH1 0x20 000000d0: SWAP5 000000d1: POP 000000d2: SWAP3 000000d3: POP 000000d4: SWAP1 000000d5: DUP3 000000d6: SWAP1 000000d7: SUB 000000d8: ADD 000000d9: DUP2 000000da: PUSH1 0x00 000000dc: DUP8 000000dd: PUSH2 0x61da 000000e0: GAS 000000e1: SUB 000000e2: CALL 000000e3: ISZERO 000000e4: PUSH2 0x0002 000000e7: JUMPI 000000e8: POP 000000e9: POP 000000ea: PUSH1 0x40 000000ec: DUP1 000000ed: MLOAD 000000ee: DUP1 000000ef: MLOAD 000000f0: PUSH1 0x00 000000f2: DUP1 000000f3: SLOAD 000000f4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000109: NOT 0000010a: AND 0000010b: SWAP1 0000010c: SWAP2 0000010d: OR 0000010e: DUP1 0000010f: DUP3 00000110: SSTORE 00000111: PUSH32 0x4c77379500000000000000000000000000000000000000000000000000000000 00000132: DUP4 00000133: MSTORE 00000134: SWAP3 00000135: MLOAD 00000136: PUSH1 0x01 00000138: PUSH1 0xa0 0000013a: PUSH1 0x02 0000013c: EXP 0000013d: SUB 0000013e: SWAP4 0000013f: SWAP1 00000140: SWAP4 00000141: AND 00000142: SWAP4 00000143: POP 00000144: PUSH4 0x4c773795 00000149: SWAP3 0000014a: PUSH1 0x04 0000014c: DUP4 0000014d: DUP2 0000014e: ADD 0000014f: SWAP4 00000150: PUSH1 0x20 00000152: SWAP4 00000153: SWAP1 00000154: DUP4 00000155: SWAP1 00000156: SUB 00000157: SWAP1 00000158: SWAP2 00000159: ADD 0000015a: SWAP1 0000015b: DUP3 0000015c: SWAP1 0000015d: DUP8 0000015e: PUSH2 0x61da 00000161: GAS 00000162: SUB 00000163: CALL 00000164: ISZERO 00000165: PUSH2 0x0002 00000168: JUMPI 00000169: POP 0000016a: POP 0000016b: PUSH1 0x40 0000016d: MLOAD 0000016e: MLOAD 0000016f: PUSH1 0x01 00000171: PUSH1 0xa0 00000173: PUSH1 0x02 00000175: EXP 00000176: SUB 00000177: SWAP1 00000178: DUP2 00000179: AND 0000017a: CALLER 0000017b: SWAP1 0000017c: SWAP2 0000017d: AND 0000017e: EQ 0000017f: SWAP1 00000180: POP 00000181: PUSH2 0x0490 00000184: JUMPI 00000185: PUSH2 0x0002 00000188: JUMP 00000189: JUMPDEST 0000018a: PUSH2 0x003a 0000018d: PUSH1 0x01 0000018f: SLOAD 00000190: PUSH1 0x01 00000192: PUSH1 0xa0 00000194: PUSH1 0x02 00000196: EXP 00000197: SUB 00000198: SWAP1 00000199: DUP2 0000019a: AND 0000019b: CALLER 0000019c: SWAP1 0000019d: SWAP2 0000019e: AND 0000019f: EQ 000001a0: ISZERO 000001a1: PUSH2 0x0392 000001a4: JUMPI 000001a5: CALLER 000001a6: PUSH1 0x01 000001a8: PUSH1 0xa0 000001aa: PUSH1 0x02 000001ac: EXP 000001ad: SUB 000001ae: AND 000001af: SELFDESTRUCT 000001b0: JUMPDEST 000001b1: PUSH2 0x003a 000001b4: JUMPDEST 000001b5: PUSH1 0x00 000001b7: PUSH20 0x1d11e5eae3112dbd44f99266872ff1d07c77dce8 000001cc: SWAP1 000001cd: POP 000001ce: DUP1 000001cf: PUSH1 0x01 000001d1: PUSH1 0xa0 000001d3: PUSH1 0x02 000001d5: EXP 000001d6: SUB 000001d7: AND 000001d8: PUSH4 0x38cc4831 000001dd: PUSH1 0x40 000001df: MLOAD 000001e0: DUP2 000001e1: PUSH1 0xe0 000001e3: PUSH1 0x02 000001e5: EXP 000001e6: MUL 000001e7: DUP2 000001e8: MSTORE 000001e9: PUSH1 0x04 000001eb: ADD 000001ec: DUP1 000001ed: SWAP1 000001ee: POP 000001ef: PUSH1 0x20 000001f1: PUSH1 0x40 000001f3: MLOAD 000001f4: DUP1 000001f5: DUP4 000001f6: SUB 000001f7: DUP2 000001f8: PUSH1 0x00 000001fa: DUP8 000001fb: PUSH2 0x61da 000001fe: GAS 000001ff: SUB 00000200: CALL 00000201: ISZERO 00000202: PUSH2 0x0002 00000205: JUMPI 00000206: POP 00000207: POP 00000208: PUSH1 0x40 0000020a: DUP1 0000020b: MLOAD 0000020c: DUP1 0000020d: MLOAD 0000020e: PUSH1 0x00 00000210: DUP1 00000211: SLOAD 00000212: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000227: NOT 00000228: AND 00000229: SWAP1 0000022a: SWAP2 0000022b: OR 0000022c: DUP1 0000022d: DUP3 0000022e: SSTORE 0000022f: PUSH32 0x524f388900000000000000000000000000000000000000000000000000000000 00000250: DUP4 00000251: MSTORE 00000252: PUSH1 0x20 00000254: PUSH1 0x04 00000256: DUP5 00000257: ADD 00000258: DUP2 00000259: SWAP1 0000025a: MSTORE 0000025b: PUSH1 0x03 0000025d: PUSH1 0x24 0000025f: DUP6 00000260: ADD 00000261: MSTORE 00000262: PUSH1 0xea 00000264: PUSH1 0x02 00000266: EXP 00000267: PUSH3 0x155493 0000026b: MUL 0000026c: PUSH1 0x44 0000026e: DUP6 0000026f: ADD 00000270: MSTORE 00000271: SWAP4 00000272: MLOAD 00000273: PUSH1 0x01 00000275: PUSH1 0xa0 00000277: PUSH1 0x02 00000279: EXP 0000027a: SUB 0000027b: SWAP2 0000027c: SWAP1 0000027d: SWAP2 0000027e: AND 0000027f: SWAP5 00000280: POP 00000281: SWAP1 00000282: SWAP3 00000283: DUP5 00000284: SWAP3 00000285: PUSH4 0x524f3889 0000028a: SWAP3 0000028b: PUSH1 0x64 0000028d: DUP3 0000028e: DUP2 0000028f: ADD 00000290: SWAP4 00000291: SWAP3 00000292: DUP3 00000293: SWAP1 00000294: SUB 00000295: ADD 00000296: DUP2 00000297: DUP8 00000298: DUP8 00000299: PUSH2 0x61da 0000029c: GAS 0000029d: SUB 0000029e: CALL 0000029f: ISZERO 000002a0: PUSH2 0x0002 000002a3: JUMPI 000002a4: POP 000002a5: POP 000002a6: PUSH1 0x40 000002a8: MLOAD 000002a9: DUP1 000002aa: MLOAD 000002ab: SWAP2 000002ac: POP 000002ad: DUP3 000002ae: DUP2 000002af: DUP2 000002b0: DUP2 000002b1: DUP6 000002b2: DUP9 000002b3: DUP4 000002b4: CALL 000002b5: POP 000002b6: DUP3 000002b7: SLOAD 000002b8: PUSH32 0xadf59f9900000000000000000000000000000000000000000000000000000000 000002d9: DUP3 000002da: MSTORE 000002db: PUSH1 0x3c 000002dd: PUSH1 0x04 000002df: DUP4 000002e0: ADD 000002e1: MSTORE 000002e2: PUSH1 0x60 000002e4: PUSH1 0x24 000002e6: DUP4 000002e7: ADD 000002e8: MSTORE 000002e9: PUSH1 0x03 000002eb: PUSH1 0x64 000002ed: DUP4 000002ee: ADD 000002ef: MSTORE 000002f0: PUSH1 0xea 000002f2: PUSH1 0x02 000002f4: EXP 000002f5: PUSH3 0x155493 000002f9: MUL 000002fa: PUSH1 0x84 000002fc: DUP4 000002fd: ADD 000002fe: MSTORE 000002ff: PUSH1 0xa0 00000301: PUSH1 0x44 00000303: DUP4 00000304: ADD 00000305: MSTORE 00000306: PUSH1 0x32 00000308: PUSH1 0xa4 0000030a: DUP4 0000030b: ADD 0000030c: MSTORE 0000030d: PUSH32 0x68747470733a2f2f6170692e6b72616b656e2e636f6d2f302f7075626c69632f 0000032e: PUSH1 0xc4 00000330: DUP4 00000331: ADD 00000332: MSTORE 00000333: PUSH32 0x5469636b65723f706169723d4554485842540000000000000000000000000000 00000354: PUSH1 0xe4 00000356: DUP4 00000357: ADD 00000358: MSTORE 00000359: PUSH1 0x40 0000035b: MLOAD 0000035c: PUSH1 0x01 0000035e: PUSH1 0xa0 00000360: PUSH1 0x02 00000362: EXP 00000363: SUB 00000364: SWAP2 00000365: SWAP1 00000366: SWAP2 00000367: AND 00000368: SWAP5 00000369: POP 0000036a: PUSH4 0xadf59f99 0000036f: SWAP4 00000370: PUSH2 0x0104 00000373: DUP1 00000374: DUP5 00000375: ADD 00000376: SWAP5 00000377: POP 00000378: PUSH1 0x20 0000037a: SWAP4 0000037b: DUP4 0000037c: SWAP1 0000037d: SUB 0000037e: ADD 0000037f: SWAP1 00000380: DUP3 00000381: SWAP1 00000382: DUP8 00000383: PUSH2 0x61da 00000386: GAS 00000387: SUB 00000388: CALL 00000389: ISZERO 0000038a: PUSH2 0x0002 0000038d: JUMPI 0000038e: POP 0000038f: POP 00000390: POP 00000391: POP 00000392: JUMPDEST 00000393: JUMP 00000394: JUMPDEST 00000395: PUSH1 0x40 00000397: DUP1 00000398: MLOAD 00000399: PUSH1 0x02 0000039b: DUP1 0000039c: SLOAD 0000039d: PUSH1 0x20 0000039f: PUSH1 0x01 000003a1: DUP3 000003a2: AND 000003a3: ISZERO 000003a4: PUSH2 0x0100 000003a7: MUL 000003a8: PUSH1 0x00 000003aa: NOT 000003ab: ADD 000003ac: SWAP1 000003ad: SWAP2 000003ae: AND 000003af: DUP3 000003b0: SWAP1 000003b1: DIV 000003b2: PUSH1 0x1f 000003b4: DUP2 000003b5: ADD 000003b6: DUP3 000003b7: SWAP1 000003b8: DIV 000003b9: DUP3 000003ba: MUL 000003bb: DUP5 000003bc: ADD 000003bd: DUP3 000003be: ADD 000003bf: SWAP1 000003c0: SWAP5 000003c1: MSTORE 000003c2: DUP4 000003c3: DUP4 000003c4: MSTORE 000003c5: PUSH2 0x03ef 000003c8: SWAP4 000003c9: SWAP1 000003ca: DUP4 000003cb: ADD 000003cc: DUP3 000003cd: DUP3 000003ce: DUP1 000003cf: ISZERO 000003d0: PUSH2 0x0488 000003d3: JUMPI 000003d4: DUP1 000003d5: PUSH1 0x1f 000003d7: LT 000003d8: PUSH2 0x045d 000003db: JUMPI 000003dc: PUSH2 0x0100 000003df: DUP1 000003e0: DUP4 000003e1: SLOAD 000003e2: DIV 000003e3: MUL 000003e4: DUP4 000003e5: MSTORE 000003e6: SWAP2 000003e7: PUSH1 0x20 000003e9: ADD 000003ea: SWAP2 000003eb: PUSH2 0x0488 000003ee: JUMP 000003ef: JUMPDEST 000003f0: PUSH1 0x40 000003f2: MLOAD 000003f3: DUP1 000003f4: DUP1 000003f5: PUSH1 0x20 000003f7: ADD 000003f8: DUP3 000003f9: DUP2 000003fa: SUB 000003fb: DUP3 000003fc: MSTORE 000003fd: DUP4 000003fe: DUP2 000003ff: DUP2 00000400: MLOAD 00000401: DUP2 00000402: MSTORE 00000403: PUSH1 0x20 00000405: ADD 00000406: SWAP2 00000407: POP 00000408: DUP1 00000409: MLOAD 0000040a: SWAP1 0000040b: PUSH1 0x20 0000040d: ADD 0000040e: SWAP1 0000040f: DUP1 00000410: DUP4 00000411: DUP4 00000412: DUP3 00000413: SWAP1 00000414: PUSH1 0x00 00000416: PUSH1 0x04 00000418: PUSH1 0x20 0000041a: DUP5 0000041b: PUSH1 0x1f 0000041d: ADD 0000041e: DIV 0000041f: PUSH1 0x03 00000421: MUL 00000422: PUSH1 0x0f 00000424: ADD 00000425: CALL 00000426: POP 00000427: SWAP1 00000428: POP 00000429: SWAP1 0000042a: DUP2 0000042b: ADD 0000042c: SWAP1 0000042d: PUSH1 0x1f 0000042f: AND 00000430: DUP1 00000431: ISZERO 00000432: PUSH2 0x044f 00000435: JUMPI 00000436: DUP1 00000437: DUP3 00000438: SUB 00000439: DUP1 0000043a: MLOAD 0000043b: PUSH1 0x01 0000043d: DUP4 0000043e: PUSH1 0x20 00000440: SUB 00000441: PUSH2 0x0100 00000444: EXP 00000445: SUB 00000446: NOT 00000447: AND 00000448: DUP2 00000449: MSTORE 0000044a: PUSH1 0x20 0000044c: ADD 0000044d: SWAP2 0000044e: POP 0000044f: JUMPDEST 00000450: POP 00000451: SWAP3 00000452: POP 00000453: POP 00000454: POP 00000455: PUSH1 0x40 00000457: MLOAD 00000458: DUP1 00000459: SWAP2 0000045a: SUB 0000045b: SWAP1 0000045c: RETURN 0000045d: JUMPDEST 0000045e: DUP3 0000045f: ADD 00000460: SWAP2 00000461: SWAP1 00000462: PUSH1 0x00 00000464: MSTORE 00000465: PUSH1 0x20 00000467: PUSH1 0x00 00000469: KECCAK256 0000046a: SWAP1 0000046b: JUMPDEST 0000046c: DUP2 0000046d: SLOAD 0000046e: DUP2 0000046f: MSTORE 00000470: SWAP1 00000471: PUSH1 0x01 00000473: ADD 00000474: SWAP1 00000475: PUSH1 0x20 00000477: ADD 00000478: DUP1 00000479: DUP4 0000047a: GT 0000047b: PUSH2 0x046b 0000047e: JUMPI 0000047f: DUP3 00000480: SWAP1 00000481: SUB 00000482: PUSH1 0x1f 00000484: AND 00000485: DUP3 00000486: ADD 00000487: SWAP2 00000488: JUMPDEST 00000489: POP 0000048a: POP 0000048b: POP 0000048c: POP 0000048d: POP 0000048e: DUP2 0000048f: JUMP 00000490: JUMPDEST 00000491: DUP2 00000492: PUSH1 0x02 00000494: PUSH1 0x00 00000496: POP 00000497: SWAP1 00000498: DUP1 00000499: MLOAD 0000049a: SWAP1 0000049b: PUSH1 0x20 0000049d: ADD 0000049e: SWAP1 0000049f: DUP3 000004a0: DUP1 000004a1: SLOAD 000004a2: PUSH1 0x01 000004a4: DUP2 000004a5: PUSH1 0x01 000004a7: AND 000004a8: ISZERO 000004a9: PUSH2 0x0100 000004ac: MUL 000004ad: SUB 000004ae: AND 000004af: PUSH1 0x02 000004b1: SWAP1 000004b2: DIV 000004b3: SWAP1 000004b4: PUSH1 0x00 000004b6: MSTORE 000004b7: PUSH1 0x20 000004b9: PUSH1 0x00 000004bb: KECCAK256 000004bc: SWAP1 000004bd: PUSH1 0x1f 000004bf: ADD 000004c0: PUSH1 0x20 000004c2: SWAP1 000004c3: DIV 000004c4: DUP2 000004c5: ADD 000004c6: SWAP3 000004c7: DUP3 000004c8: PUSH1 0x1f 000004ca: LT 000004cb: PUSH2 0x04f7 000004ce: JUMPI 000004cf: DUP1 000004d0: MLOAD 000004d1: PUSH1 0xff 000004d3: NOT 000004d4: AND 000004d5: DUP4 000004d6: DUP1 000004d7: ADD 000004d8: OR 000004d9: DUP6 000004da: SSTORE 000004db: JUMPDEST 000004dc: POP 000004dd: PUSH2 0x0527 000004e0: SWAP3 000004e1: SWAP2 000004e2: POP 000004e3: JUMPDEST 000004e4: DUP1 000004e5: DUP3 000004e6: GT 000004e7: ISZERO 000004e8: PUSH2 0x0531 000004eb: JUMPI 000004ec: PUSH1 0x00 000004ee: DUP2 000004ef: SSTORE 000004f0: PUSH1 0x01 000004f2: ADD 000004f3: PUSH2 0x04e3 000004f6: JUMP 000004f7: JUMPDEST 000004f8: DUP3 000004f9: DUP1 000004fa: ADD 000004fb: PUSH1 0x01 000004fd: ADD 000004fe: DUP6 000004ff: SSTORE 00000500: DUP3 00000501: ISZERO 00000502: PUSH2 0x04db 00000505: JUMPI 00000506: SWAP2 00000507: DUP3 00000508: ADD 00000509: JUMPDEST 0000050a: DUP3 0000050b: DUP2 0000050c: GT 0000050d: ISZERO 0000050e: PUSH2 0x04db 00000511: JUMPI 00000512: DUP3 00000513: MLOAD 00000514: DUP3 00000515: PUSH1 0x00 00000517: POP 00000518: SSTORE 00000519: SWAP2 0000051a: PUSH1 0x20 0000051c: ADD 0000051d: SWAP2 0000051e: SWAP1 0000051f: PUSH1 0x01 00000521: ADD 00000522: SWAP1 00000523: PUSH2 0x0509 00000526: JUMP 00000527: JUMPDEST 00000528: POP 00000529: POP 0000052a: PUSH2 0x0535 0000052d: PUSH2 0x01b4 00000530: JUMP 00000531: JUMPDEST 00000532: POP 00000533: SWAP1 00000534: JUMP 00000535: JUMPDEST 00000536: POP 00000537: POP 00000538: POP 00000539: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | yes | yes |
viewtrace_id: 0xf0393f0c44992fd32629756f2b7d6d881b2614997df78eab7f1f55eaab24c275
call_targets:
0x13fe4cfe98096cd8af740646c419ec6edb4a33b1, 0x1d11e5eae3112dbd44f99266872ff1d07c77dce8, 0x6f28b146804dba2d6f944c03528a8fdbc673df2c
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0xf0393f0c44992fd32629756f2b7d6d881b2614997df78eab7f1f55eaab24c275",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x13fe4cfe98096cd8af740646c419ec6edb4a33b1",
"0x1d11e5eae3112dbd44f99266872ff1d07c77dce8",
"0x6f28b146804dba2d6f944c03528a8fdbc673df2c"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x27dc297e",
"selector": "0x27dc297e",
"calldata_variants": [
"0x27dc297e",
"0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2e62045",
"selector": "0xa2e62045",
"calldata_variants": [
"0xa2e62045",
"0xa2e620450000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb7764475",
"selector": "0xb7764475",
"calldata_variants": [
"0xb7764475",
"0xb77644750000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 226,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 355,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 512,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 7,
"guards_detected": [],
"untrusted_call_count": 7
}
|
| high | other | detector | ETH value transfer possible | 55 | yes | yes |
viewtrace_id: 0xf0393f0c44992fd32629756f2b7d6d881b2614997df78eab7f1f55eaab24c275
call_targets:
0x13fe4cfe98096cd8af740646c419ec6edb4a33b1, 0x1d11e5eae3112dbd44f99266872ff1d07c77dce8, 0x6f28b146804dba2d6f944c03528a8fdbc673df2c
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0xf0393f0c44992fd32629756f2b7d6d881b2614997df78eab7f1f55eaab24c275",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x13fe4cfe98096cd8af740646c419ec6edb4a33b1",
"0x1d11e5eae3112dbd44f99266872ff1d07c77dce8",
"0x6f28b146804dba2d6f944c03528a8fdbc673df2c"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x27dc297e",
"selector": "0x27dc297e",
"calldata_variants": [
"0x27dc297e",
"0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2e62045",
"selector": "0xa2e62045",
"calldata_variants": [
"0xa2e62045",
"0xa2e620450000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb7764475",
"selector": "0xb7764475",
"calldata_variants": [
"0xb7764475",
"0xb77644750000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 226,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 355,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 512,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 7,
"guards_detected": []
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0x36e87ba09ee31380f62b9446dea50553d20a3acb2e611d49ba2dfbc1cd27d960
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 8,
"trace_id": "0x36e87ba09ee31380f62b9446dea50553d20a3acb2e611d49ba2dfbc1cd27d960",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x27dc297e",
"selector": "0x27dc297e",
"calldata_variants": [
"0x27dc297e",
"0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2e62045",
"selector": "0xa2e62045",
"calldata_variants": [
"0xa2e62045",
"0xa2e620450000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb7764475",
"selector": "0xb7764475",
"calldata_variants": [
"0xb7764475",
"0xb77644750000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|