019b3836-242c-71f1-b043-ef0f36fcd254
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 585 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 586 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 78307 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 78308 | capability.graph | complete | 1 / 3 | 1 week ago |
| 78309 | detector.run | complete | 1 / 3 | 1 week ago |
| 78310 | validation.fork | complete | 1 / 3 | 1 week ago |
| 113572 | report.consolidate | complete | 1 / 6 | 1 week ago |
No slither job recorded yet.
OpenAI Codex v0.118.0 (research preview) -------- workdir: /tmp/codex-btannzl0 model: gpt-5.4 provider: openai approval: never sandbox: read-only reasoning effort: high reasoning summaries: none session id: 019d5c97-ba1c-7012-b6cb-59a1faf83034 -------- user You are a security auditor. You ONLY have runtime bytecode + analysis artifacts. You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary, evidence bundle, callsites, storage slots, and detector findings. Special cases when reasoning from bytecode (be explicit about uncertainty): - Selector inference is best-effort; missing selectors are common. - Fallback/receive paths may be the only entrypoints. - CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage. - Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative. - Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown. - Guard detection is heuristic; absence of guards does NOT mean unguarded. - Returndata checking is unknown unless explicitly shown in evidence. - Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim. Output MUST be valid JSON matching the provided schema. - If you find nothing meaningful: set no_findings=true and findings=[]. - Otherwise: set no_findings=false and include findings with severity/category/title. - Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb". Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, accounting/invariant breaks, dangerous delegatecall, and untrusted external calls. Be conservative: if evidence is weak, mark severity low/medium and explain why. warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
{
"codex": {
"ran_at": "2026-04-05T07:42:22.371350+00:00",
"returncode": 1
},
"project": {
"mode": "bytecode",
"bytecode_length": 2756,
"bytecode_truncated": false,
"capability_graph_present": true,
"analysis_artifact_present": true
},
"summary": null,
"no_findings": null,
"schema_version": 1
}
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0xe0 00000007: PUSH1 0x02 00000009: EXP 0000000a: PUSH1 0x00 0000000c: CALLDATALOAD 0000000d: DIV 0000000e: PUSH4 0x27dc297e 00000013: DUP2 00000014: EQ 00000015: PUSH2 0x003c 00000018: JUMPI 00000019: DUP1 0000001a: PUSH4 0x41c0e1b5 0000001f: EQ 00000020: PUSH2 0x0189 00000023: JUMPI 00000024: DUP1 00000025: PUSH4 0xa2e62045 0000002a: EQ 0000002b: PUSH2 0x01b0 0000002e: JUMPI 0000002f: DUP1 00000030: PUSH4 0xb7764475 00000035: EQ 00000036: PUSH2 0x03bb 00000039: JUMPI 0000003a: JUMPDEST 0000003b: STOP 0000003c: JUMPDEST 0000003d: PUSH1 0x40 0000003f: DUP1 00000040: MLOAD 00000041: PUSH1 0x20 00000043: PUSH1 0x24 00000045: DUP1 00000046: CALLDATALOAD 00000047: PUSH1 0x04 00000049: DUP2 0000004a: DUP2 0000004b: ADD 0000004c: CALLDATALOAD 0000004d: PUSH1 0x1f 0000004f: DUP2 00000050: ADD 00000051: DUP6 00000052: SWAP1 00000053: DIV 00000054: DUP6 00000055: MUL 00000056: DUP7 00000057: ADD 00000058: DUP6 00000059: ADD 0000005a: SWAP1 0000005b: SWAP7 0000005c: MSTORE 0000005d: DUP6 0000005e: DUP6 0000005f: MSTORE 00000060: PUSH2 0x003a 00000063: SWAP6 00000064: DUP2 00000065: CALLDATALOAD 00000066: SWAP6 00000067: SWAP2 00000068: SWAP5 00000069: PUSH1 0x44 0000006b: SWAP5 0000006c: SWAP3 0000006d: SWAP4 0000006e: SWAP1 0000006f: SWAP3 00000070: ADD 00000071: SWAP2 00000072: DUP2 00000073: SWAP1 00000074: DUP5 00000075: ADD 00000076: DUP4 00000077: DUP3 00000078: DUP1 00000079: DUP3 0000007a: DUP5 0000007b: CALLDATACOPY 0000007c: POP 0000007d: POP 0000007e: PUSH1 0x40 00000080: DUP1 00000081: MLOAD 00000082: PUSH32 0x38cc483100000000000000000000000000000000000000000000000000000000 000000a3: DUP2 000000a4: MSTORE 000000a5: SWAP1 000000a6: MLOAD 000000a7: SWAP6 000000a8: SWAP8 000000a9: PUSH20 0x1d11e5eae3112dbd44f99266872ff1d07c77dce8 000000be: SWAP8 000000bf: POP 000000c0: DUP8 000000c1: SWAP7 000000c2: PUSH4 0x38cc4831 000000c7: SWAP7 000000c8: POP 000000c9: DUP3 000000ca: DUP3 000000cb: ADD 000000cc: SWAP6 000000cd: POP 000000ce: PUSH1 0x20 000000d0: SWAP5 000000d1: POP 000000d2: SWAP3 000000d3: POP 000000d4: SWAP1 000000d5: DUP3 000000d6: SWAP1 000000d7: SUB 000000d8: ADD 000000d9: DUP2 000000da: PUSH1 0x00 000000dc: DUP8 000000dd: PUSH2 0x61da 000000e0: GAS 000000e1: SUB 000000e2: CALL 000000e3: ISZERO 000000e4: PUSH2 0x0002 000000e7: JUMPI 000000e8: POP 000000e9: POP 000000ea: PUSH1 0x40 000000ec: DUP1 000000ed: MLOAD 000000ee: DUP1 000000ef: MLOAD 000000f0: PUSH1 0x00 000000f2: DUP1 000000f3: SLOAD 000000f4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000109: NOT 0000010a: AND 0000010b: SWAP1 0000010c: SWAP2 0000010d: OR 0000010e: DUP1 0000010f: DUP3 00000110: SSTORE 00000111: PUSH32 0x4c77379500000000000000000000000000000000000000000000000000000000 00000132: DUP4 00000133: MSTORE 00000134: SWAP3 00000135: MLOAD 00000136: PUSH1 0x01 00000138: PUSH1 0xa0 0000013a: PUSH1 0x02 0000013c: EXP 0000013d: SUB 0000013e: SWAP4 0000013f: SWAP1 00000140: SWAP4 00000141: AND 00000142: SWAP4 00000143: POP 00000144: PUSH4 0x4c773795 00000149: SWAP3 0000014a: PUSH1 0x04 0000014c: DUP4 0000014d: DUP2 0000014e: ADD 0000014f: SWAP4 00000150: PUSH1 0x20 00000152: SWAP4 00000153: SWAP1 00000154: DUP4 00000155: SWAP1 00000156: SUB 00000157: SWAP1 00000158: SWAP2 00000159: ADD 0000015a: SWAP1 0000015b: DUP3 0000015c: SWAP1 0000015d: DUP8 0000015e: PUSH2 0x61da 00000161: GAS 00000162: SUB 00000163: CALL 00000164: ISZERO 00000165: PUSH2 0x0002 00000168: JUMPI 00000169: POP 0000016a: POP 0000016b: PUSH1 0x40 0000016d: MLOAD 0000016e: MLOAD 0000016f: PUSH1 0x01 00000171: PUSH1 0xa0 00000173: PUSH1 0x02 00000175: EXP 00000176: SUB 00000177: SWAP1 00000178: DUP2 00000179: AND 0000017a: CALLER 0000017b: SWAP1 0000017c: SWAP2 0000017d: AND 0000017e: EQ 0000017f: SWAP1 00000180: POP 00000181: PUSH2 0x04b7 00000184: JUMPI 00000185: PUSH2 0x0002 00000188: JUMP 00000189: JUMPDEST 0000018a: PUSH2 0x003a 0000018d: PUSH1 0x01 0000018f: SLOAD 00000190: PUSH1 0x01 00000192: PUSH1 0xa0 00000194: PUSH1 0x02 00000196: EXP 00000197: SUB 00000198: SWAP1 00000199: DUP2 0000019a: AND 0000019b: CALLER 0000019c: SWAP1 0000019d: SWAP2 0000019e: AND 0000019f: EQ 000001a0: ISZERO 000001a1: PUSH2 0x03b9 000001a4: JUMPI 000001a5: CALLER 000001a6: PUSH1 0x01 000001a8: PUSH1 0xa0 000001aa: PUSH1 0x02 000001ac: EXP 000001ad: SUB 000001ae: AND 000001af: SELFDESTRUCT 000001b0: JUMPDEST 000001b1: PUSH2 0x003a 000001b4: JUMPDEST 000001b5: PUSH1 0x00 000001b7: PUSH20 0x1d11e5eae3112dbd44f99266872ff1d07c77dce8 000001cc: SWAP1 000001cd: POP 000001ce: DUP1 000001cf: PUSH1 0x01 000001d1: PUSH1 0xa0 000001d3: PUSH1 0x02 000001d5: EXP 000001d6: SUB 000001d7: AND 000001d8: PUSH4 0x38cc4831 000001dd: PUSH1 0x40 000001df: MLOAD 000001e0: DUP2 000001e1: PUSH1 0xe0 000001e3: PUSH1 0x02 000001e5: EXP 000001e6: MUL 000001e7: DUP2 000001e8: MSTORE 000001e9: PUSH1 0x04 000001eb: ADD 000001ec: DUP1 000001ed: SWAP1 000001ee: POP 000001ef: PUSH1 0x20 000001f1: PUSH1 0x40 000001f3: MLOAD 000001f4: DUP1 000001f5: DUP4 000001f6: SUB 000001f7: DUP2 000001f8: PUSH1 0x00 000001fa: DUP8 000001fb: PUSH2 0x61da 000001fe: GAS 000001ff: SUB 00000200: CALL 00000201: ISZERO 00000202: PUSH2 0x0002 00000205: JUMPI 00000206: POP 00000207: POP 00000208: PUSH1 0x40 0000020a: DUP1 0000020b: MLOAD 0000020c: DUP1 0000020d: MLOAD 0000020e: PUSH1 0x00 00000210: DUP1 00000211: SLOAD 00000212: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000227: NOT 00000228: AND 00000229: SWAP1 0000022a: SWAP2 0000022b: OR 0000022c: DUP1 0000022d: DUP3 0000022e: SSTORE 0000022f: PUSH32 0x524f388900000000000000000000000000000000000000000000000000000000 00000250: DUP4 00000251: MSTORE 00000252: PUSH1 0x20 00000254: PUSH1 0x04 00000256: DUP5 00000257: ADD 00000258: DUP2 00000259: SWAP1 0000025a: MSTORE 0000025b: PUSH1 0x03 0000025d: PUSH1 0x24 0000025f: DUP6 00000260: ADD 00000261: MSTORE 00000262: PUSH1 0xea 00000264: PUSH1 0x02 00000266: EXP 00000267: PUSH3 0x155493 0000026b: MUL 0000026c: PUSH1 0x44 0000026e: DUP6 0000026f: ADD 00000270: MSTORE 00000271: SWAP4 00000272: MLOAD 00000273: PUSH1 0x01 00000275: PUSH1 0xa0 00000277: PUSH1 0x02 00000279: EXP 0000027a: SUB 0000027b: SWAP2 0000027c: SWAP1 0000027d: SWAP2 0000027e: AND 0000027f: SWAP5 00000280: POP 00000281: SWAP1 00000282: SWAP3 00000283: DUP5 00000284: SWAP3 00000285: PUSH4 0x524f3889 0000028a: SWAP3 0000028b: PUSH1 0x64 0000028d: DUP3 0000028e: DUP2 0000028f: ADD 00000290: SWAP4 00000291: SWAP3 00000292: DUP3 00000293: SWAP1 00000294: SUB 00000295: ADD 00000296: DUP2 00000297: DUP8 00000298: DUP8 00000299: PUSH2 0x61da 0000029c: GAS 0000029d: SUB 0000029e: CALL 0000029f: ISZERO 000002a0: PUSH2 0x0002 000002a3: JUMPI 000002a4: POP 000002a5: POP 000002a6: PUSH1 0x40 000002a8: MLOAD 000002a9: DUP1 000002aa: MLOAD 000002ab: SWAP2 000002ac: POP 000002ad: DUP3 000002ae: DUP2 000002af: DUP2 000002b0: DUP2 000002b1: DUP6 000002b2: DUP9 000002b3: DUP4 000002b4: CALL 000002b5: POP 000002b6: DUP3 000002b7: SLOAD 000002b8: PUSH32 0xadf59f9900000000000000000000000000000000000000000000000000000000 000002d9: DUP3 000002da: MSTORE 000002db: PUSH1 0x3c 000002dd: PUSH1 0x04 000002df: DUP4 000002e0: ADD 000002e1: MSTORE 000002e2: PUSH1 0x60 000002e4: PUSH1 0x24 000002e6: DUP4 000002e7: ADD 000002e8: MSTORE 000002e9: PUSH1 0x03 000002eb: PUSH1 0x64 000002ed: DUP4 000002ee: ADD 000002ef: MSTORE 000002f0: PUSH1 0xea 000002f2: PUSH1 0x02 000002f4: EXP 000002f5: PUSH3 0x155493 000002f9: MUL 000002fa: PUSH1 0x84 000002fc: DUP4 000002fd: ADD 000002fe: MSTORE 000002ff: PUSH1 0xa0 00000301: PUSH1 0x44 00000303: DUP4 00000304: ADD 00000305: MSTORE 00000306: PUSH1 0x4c 00000308: PUSH1 0xa4 0000030a: DUP4 0000030b: ADD 0000030c: MSTORE 0000030d: PUSH32 0x6a736f6e2868747470733a2f2f6170692e6b72616b656e2e636f6d2f302f7075 0000032e: PUSH1 0xc4 00000330: DUP4 00000331: ADD 00000332: MSTORE 00000333: PUSH32 0x626c69632f5469636b65723f706169723d455448584254292e726573756c742e 00000354: PUSH1 0xe4 00000356: DUP4 00000357: ADD 00000358: MSTORE 00000359: PUSH32 0x58455448585842542e632e300000000000000000000000000000000000000000 0000037a: PUSH2 0x0104 0000037d: DUP4 0000037e: ADD 0000037f: MSTORE 00000380: PUSH1 0x40 00000382: MLOAD 00000383: PUSH1 0x01 00000385: PUSH1 0xa0 00000387: PUSH1 0x02 00000389: EXP 0000038a: SUB 0000038b: SWAP2 0000038c: SWAP1 0000038d: SWAP2 0000038e: AND 0000038f: SWAP5 00000390: POP 00000391: PUSH4 0xadf59f99 00000396: SWAP4 00000397: PUSH2 0x0124 0000039a: DUP1 0000039b: DUP5 0000039c: ADD 0000039d: SWAP5 0000039e: POP 0000039f: PUSH1 0x20 000003a1: SWAP4 000003a2: DUP4 000003a3: SWAP1 000003a4: SUB 000003a5: ADD 000003a6: SWAP1 000003a7: DUP3 000003a8: SWAP1 000003a9: DUP8 000003aa: PUSH2 0x61da 000003ad: GAS 000003ae: SUB 000003af: CALL 000003b0: ISZERO 000003b1: PUSH2 0x0002 000003b4: JUMPI 000003b5: POP 000003b6: POP 000003b7: POP 000003b8: POP 000003b9: JUMPDEST 000003ba: JUMP 000003bb: JUMPDEST 000003bc: PUSH1 0x40 000003be: DUP1 000003bf: MLOAD 000003c0: PUSH1 0x02 000003c2: DUP1 000003c3: SLOAD 000003c4: PUSH1 0x20 000003c6: PUSH1 0x01 000003c8: DUP3 000003c9: AND 000003ca: ISZERO 000003cb: PUSH2 0x0100 000003ce: MUL 000003cf: PUSH1 0x00 000003d1: NOT 000003d2: ADD 000003d3: SWAP1 000003d4: SWAP2 000003d5: AND 000003d6: DUP3 000003d7: SWAP1 000003d8: DIV 000003d9: PUSH1 0x1f 000003db: DUP2 000003dc: ADD 000003dd: DUP3 000003de: SWAP1 000003df: DIV 000003e0: DUP3 000003e1: MUL 000003e2: DUP5 000003e3: ADD 000003e4: DUP3 000003e5: ADD 000003e6: SWAP1 000003e7: SWAP5 000003e8: MSTORE 000003e9: DUP4 000003ea: DUP4 000003eb: MSTORE 000003ec: PUSH2 0x0416 000003ef: SWAP4 000003f0: SWAP1 000003f1: DUP4 000003f2: ADD 000003f3: DUP3 000003f4: DUP3 000003f5: DUP1 000003f6: ISZERO 000003f7: PUSH2 0x04af 000003fa: JUMPI 000003fb: DUP1 000003fc: PUSH1 0x1f 000003fe: LT 000003ff: PUSH2 0x0484 00000402: JUMPI 00000403: PUSH2 0x0100 00000406: DUP1 00000407: DUP4 00000408: SLOAD 00000409: DIV 0000040a: MUL 0000040b: DUP4 0000040c: MSTORE 0000040d: SWAP2 0000040e: PUSH1 0x20 00000410: ADD 00000411: SWAP2 00000412: PUSH2 0x04af 00000415: JUMP 00000416: JUMPDEST 00000417: PUSH1 0x40 00000419: MLOAD 0000041a: DUP1 0000041b: DUP1 0000041c: PUSH1 0x20 0000041e: ADD 0000041f: DUP3 00000420: DUP2 00000421: SUB 00000422: DUP3 00000423: MSTORE 00000424: DUP4 00000425: DUP2 00000426: DUP2 00000427: MLOAD 00000428: DUP2 00000429: MSTORE 0000042a: PUSH1 0x20 0000042c: ADD 0000042d: SWAP2 0000042e: POP 0000042f: DUP1 00000430: MLOAD 00000431: SWAP1 00000432: PUSH1 0x20 00000434: ADD 00000435: SWAP1 00000436: DUP1 00000437: DUP4 00000438: DUP4 00000439: DUP3 0000043a: SWAP1 0000043b: PUSH1 0x00 0000043d: PUSH1 0x04 0000043f: PUSH1 0x20 00000441: DUP5 00000442: PUSH1 0x1f 00000444: ADD 00000445: DIV 00000446: PUSH1 0x03 00000448: MUL 00000449: PUSH1 0x0f 0000044b: ADD 0000044c: CALL 0000044d: POP 0000044e: SWAP1 0000044f: POP 00000450: SWAP1 00000451: DUP2 00000452: ADD 00000453: SWAP1 00000454: PUSH1 0x1f 00000456: AND 00000457: DUP1 00000458: ISZERO 00000459: PUSH2 0x0476 0000045c: JUMPI 0000045d: DUP1 0000045e: DUP3 0000045f: SUB 00000460: DUP1 00000461: MLOAD 00000462: PUSH1 0x01 00000464: DUP4 00000465: PUSH1 0x20 00000467: SUB 00000468: PUSH2 0x0100 0000046b: EXP 0000046c: SUB 0000046d: NOT 0000046e: AND 0000046f: DUP2 00000470: MSTORE 00000471: PUSH1 0x20 00000473: ADD 00000474: SWAP2 00000475: POP 00000476: JUMPDEST 00000477: POP 00000478: SWAP3 00000479: POP 0000047a: POP 0000047b: POP 0000047c: PUSH1 0x40 0000047e: MLOAD 0000047f: DUP1 00000480: SWAP2 00000481: SUB 00000482: SWAP1 00000483: RETURN 00000484: JUMPDEST 00000485: DUP3 00000486: ADD 00000487: SWAP2 00000488: SWAP1 00000489: PUSH1 0x00 0000048b: MSTORE 0000048c: PUSH1 0x20 0000048e: PUSH1 0x00 00000490: KECCAK256 00000491: SWAP1 00000492: JUMPDEST 00000493: DUP2 00000494: SLOAD 00000495: DUP2 00000496: MSTORE 00000497: SWAP1 00000498: PUSH1 0x01 0000049a: ADD 0000049b: SWAP1 0000049c: PUSH1 0x20 0000049e: ADD 0000049f: DUP1 000004a0: DUP4 000004a1: GT 000004a2: PUSH2 0x0492 000004a5: JUMPI 000004a6: DUP3 000004a7: SWAP1 000004a8: SUB 000004a9: PUSH1 0x1f 000004ab: AND 000004ac: DUP3 000004ad: ADD 000004ae: SWAP2 000004af: JUMPDEST 000004b0: POP 000004b1: POP 000004b2: POP 000004b3: POP 000004b4: POP 000004b5: DUP2 000004b6: JUMP 000004b7: JUMPDEST 000004b8: DUP2 000004b9: PUSH1 0x02 000004bb: PUSH1 0x00 000004bd: POP 000004be: SWAP1 000004bf: DUP1 000004c0: MLOAD 000004c1: SWAP1 000004c2: PUSH1 0x20 000004c4: ADD 000004c5: SWAP1 000004c6: DUP3 000004c7: DUP1 000004c8: SLOAD 000004c9: PUSH1 0x01 000004cb: DUP2 000004cc: PUSH1 0x01 000004ce: AND 000004cf: ISZERO 000004d0: PUSH2 0x0100 000004d3: MUL 000004d4: SUB 000004d5: AND 000004d6: PUSH1 0x02 000004d8: SWAP1 000004d9: DIV 000004da: SWAP1 000004db: PUSH1 0x00 000004dd: MSTORE 000004de: PUSH1 0x20 000004e0: PUSH1 0x00 000004e2: KECCAK256 000004e3: SWAP1 000004e4: PUSH1 0x1f 000004e6: ADD 000004e7: PUSH1 0x20 000004e9: SWAP1 000004ea: DIV 000004eb: DUP2 000004ec: ADD 000004ed: SWAP3 000004ee: DUP3 000004ef: PUSH1 0x1f 000004f1: LT 000004f2: PUSH2 0x051e 000004f5: JUMPI 000004f6: DUP1 000004f7: MLOAD 000004f8: PUSH1 0xff 000004fa: NOT 000004fb: AND 000004fc: DUP4 000004fd: DUP1 000004fe: ADD 000004ff: OR 00000500: DUP6 00000501: SSTORE 00000502: JUMPDEST 00000503: POP 00000504: PUSH2 0x054e 00000507: SWAP3 00000508: SWAP2 00000509: POP 0000050a: JUMPDEST 0000050b: DUP1 0000050c: DUP3 0000050d: GT 0000050e: ISZERO 0000050f: PUSH2 0x0558 00000512: JUMPI 00000513: PUSH1 0x00 00000515: DUP2 00000516: SSTORE 00000517: PUSH1 0x01 00000519: ADD 0000051a: PUSH2 0x050a 0000051d: JUMP 0000051e: JUMPDEST 0000051f: DUP3 00000520: DUP1 00000521: ADD 00000522: PUSH1 0x01 00000524: ADD 00000525: DUP6 00000526: SSTORE 00000527: DUP3 00000528: ISZERO 00000529: PUSH2 0x0502 0000052c: JUMPI 0000052d: SWAP2 0000052e: DUP3 0000052f: ADD 00000530: JUMPDEST 00000531: DUP3 00000532: DUP2 00000533: GT 00000534: ISZERO 00000535: PUSH2 0x0502 00000538: JUMPI 00000539: DUP3 0000053a: MLOAD 0000053b: DUP3 0000053c: PUSH1 0x00 0000053e: POP 0000053f: SSTORE 00000540: SWAP2 00000541: PUSH1 0x20 00000543: ADD 00000544: SWAP2 00000545: SWAP1 00000546: PUSH1 0x01 00000548: ADD 00000549: SWAP1 0000054a: PUSH2 0x0530 0000054d: JUMP 0000054e: JUMPDEST 0000054f: POP 00000550: POP 00000551: PUSH2 0x055c 00000554: PUSH2 0x01b4 00000557: JUMP 00000558: JUMPDEST 00000559: POP 0000055a: SWAP1 0000055b: JUMP 0000055c: JUMPDEST 0000055d: POP 0000055e: POP 0000055f: POP 00000560: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | yes | yes |
viewtrace_id: 0x8b2e4c767fdf5d8bcc40a7b73e403d1da2cd8c3d93253378b63984c4e639cbf1
call_targets:
0x1d11e5eae3112dbd44f99266872ff1d07c77dce8, 0x386382301f8a66301b9024df591b2db4f488027c, 0x6f28b146804dba2d6f944c03528a8fdbc673df2c
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x8b2e4c767fdf5d8bcc40a7b73e403d1da2cd8c3d93253378b63984c4e639cbf1",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x1d11e5eae3112dbd44f99266872ff1d07c77dce8",
"0x386382301f8a66301b9024df591b2db4f488027c",
"0x6f28b146804dba2d6f944c03528a8fdbc673df2c"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x27dc297e",
"selector": "0x27dc297e",
"calldata_variants": [
"0x27dc297e",
"0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2e62045",
"selector": "0xa2e62045",
"calldata_variants": [
"0xa2e62045",
"0xa2e620450000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb7764475",
"selector": "0xb7764475",
"calldata_variants": [
"0xb7764475",
"0xb77644750000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 226,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 355,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 512,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 7,
"guards_detected": [],
"untrusted_call_count": 7
}
|
| high | other | detector | ETH value transfer possible | 55 | yes | yes |
viewtrace_id: 0x8b2e4c767fdf5d8bcc40a7b73e403d1da2cd8c3d93253378b63984c4e639cbf1
call_targets:
0x1d11e5eae3112dbd44f99266872ff1d07c77dce8, 0x386382301f8a66301b9024df591b2db4f488027c, 0x6f28b146804dba2d6f944c03528a8fdbc673df2c
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x8b2e4c767fdf5d8bcc40a7b73e403d1da2cd8c3d93253378b63984c4e639cbf1",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x1d11e5eae3112dbd44f99266872ff1d07c77dce8",
"0x386382301f8a66301b9024df591b2db4f488027c",
"0x6f28b146804dba2d6f944c03528a8fdbc673df2c"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x27dc297e",
"selector": "0x27dc297e",
"calldata_variants": [
"0x27dc297e",
"0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2e62045",
"selector": "0xa2e62045",
"calldata_variants": [
"0xa2e62045",
"0xa2e620450000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb7764475",
"selector": "0xb7764475",
"calldata_variants": [
"0xb7764475",
"0xb77644750000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 226,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 355,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 512,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 7,
"guards_detected": []
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0xe368686d266376727b414b41fd12e54610776277a452e269b2e9b8809752028a
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 8,
"trace_id": "0xe368686d266376727b414b41fd12e54610776277a452e269b2e9b8809752028a",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x27dc297e",
"selector": "0x27dc297e",
"calldata_variants": [
"0x27dc297e",
"0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2e62045",
"selector": "0xa2e62045",
"calldata_variants": [
"0xa2e62045",
"0xa2e620450000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb7764475",
"selector": "0xb7764475",
"calldata_variants": [
"0xb7764475",
"0xb77644750000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|