Analysis Run

OpenAI Codex v0.118.0 (research preview)
--------
workdir: /tmp/codex-0vding1t
model: gpt-5.4
provider: openai
approval: never
sandbox: read-only
reasoning effort: high
reasoning summaries: none
session id: 019d5c98-143f-7632-8711-e810ee993ffa
--------
user
You are a security auditor. You ONLY have runtime bytecode + analysis artifacts.
You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary,
evidence bundle, callsites, storage slots, and detector findings.

Special cases when reasoning from bytecode (be explicit about uncertainty):
- Selector inference is best-effort; missing selectors are common.
- Fallback/receive paths may be the only entrypoints.
- CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage.
- Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative.
- Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown.
- Guard detection is heuristic; absence of guards does NOT mean unguarded.
- Returndata checking is unknown unless explicitly shown in evidence.
- Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim.

Output MUST be valid JSON matching the provided schema.
- If you find nothing meaningful: set no_findings=true and findings=[].
- Otherwise: set no_findings=false and include findings with severity/category/title.
- Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb".

Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation,
accounting/invariant breaks, dangerous delegatecall, and untrusted external calls.
Be conservative: if evidence is weak, mark severity low/medium and explain why.
warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.

{
    "codex": {
        "ran_at": "2026-04-05T07:42:45.638688+00:00",
        "returncode": 1
    },
    "project": {
        "mode": "bytecode",
        "bytecode_length": 2710,
        "bytecode_truncated": false,
        "capability_graph_present": true,
        "analysis_artifact_present": true
    },
    "summary": null,
    "no_findings": null,
    "schema_version": 1
}

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0xe0
00000007: PUSH1 0x02
00000009: EXP
0000000a: PUSH1 0x00
0000000c: CALLDATALOAD
0000000d: DIV
0000000e: PUSH4 0x27dc297e
00000013: DUP2
00000014: EQ
00000015: PUSH2 0x003c
00000018: JUMPI
00000019: DUP1
0000001a: PUSH4 0x41c0e1b5
0000001f: EQ
00000020: PUSH2 0x0189
00000023: JUMPI
00000024: DUP1
00000025: PUSH4 0xa2e62045
0000002a: EQ
0000002b: PUSH2 0x01b0
0000002e: JUMPI
0000002f: DUP1
00000030: PUSH4 0xb7764475
00000035: EQ
00000036: PUSH2 0x03a4
00000039: JUMPI
0000003a: JUMPDEST
0000003b: STOP
0000003c: JUMPDEST
0000003d: PUSH1 0x40
0000003f: DUP1
00000040: MLOAD
00000041: PUSH1 0x20
00000043: PUSH1 0x24
00000045: DUP1
00000046: CALLDATALOAD
00000047: PUSH1 0x04
00000049: DUP2
0000004a: DUP2
0000004b: ADD
0000004c: CALLDATALOAD
0000004d: PUSH1 0x1f
0000004f: DUP2
00000050: ADD
00000051: DUP6
00000052: SWAP1
00000053: DIV
00000054: DUP6
00000055: MUL
00000056: DUP7
00000057: ADD
00000058: DUP6
00000059: ADD
0000005a: SWAP1
0000005b: SWAP7
0000005c: MSTORE
0000005d: DUP6
0000005e: DUP6
0000005f: MSTORE
00000060: PUSH2 0x003a
00000063: SWAP6
00000064: DUP2
00000065: CALLDATALOAD
00000066: SWAP6
00000067: SWAP2
00000068: SWAP5
00000069: PUSH1 0x44
0000006b: SWAP5
0000006c: SWAP3
0000006d: SWAP4
0000006e: SWAP1
0000006f: SWAP3
00000070: ADD
00000071: SWAP2
00000072: DUP2
00000073: SWAP1
00000074: DUP5
00000075: ADD
00000076: DUP4
00000077: DUP3
00000078: DUP1
00000079: DUP3
0000007a: DUP5
0000007b: CALLDATACOPY
0000007c: POP
0000007d: POP
0000007e: PUSH1 0x40
00000080: DUP1
00000081: MLOAD
00000082: PUSH32 0x38cc483100000000000000000000000000000000000000000000000000000000
000000a3: DUP2
000000a4: MSTORE
000000a5: SWAP1
000000a6: MLOAD
000000a7: SWAP6
000000a8: SWAP8
000000a9: PUSH20 0x1d11e5eae3112dbd44f99266872ff1d07c77dce8
000000be: SWAP8
000000bf: POP
000000c0: DUP8
000000c1: SWAP7
000000c2: PUSH4 0x38cc4831
000000c7: SWAP7
000000c8: POP
000000c9: DUP3
000000ca: DUP3
000000cb: ADD
000000cc: SWAP6
000000cd: POP
000000ce: PUSH1 0x20
000000d0: SWAP5
000000d1: POP
000000d2: SWAP3
000000d3: POP
000000d4: SWAP1
000000d5: DUP3
000000d6: SWAP1
000000d7: SUB
000000d8: ADD
000000d9: DUP2
000000da: PUSH1 0x00
000000dc: DUP8
000000dd: PUSH2 0x61da
000000e0: GAS
000000e1: SUB
000000e2: CALL
000000e3: ISZERO
000000e4: PUSH2 0x0002
000000e7: JUMPI
000000e8: POP
000000e9: POP
000000ea: PUSH1 0x40
000000ec: DUP1
000000ed: MLOAD
000000ee: DUP1
000000ef: MLOAD
000000f0: PUSH1 0x00
000000f2: DUP1
000000f3: SLOAD
000000f4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000109: NOT
0000010a: AND
0000010b: SWAP1
0000010c: SWAP2
0000010d: OR
0000010e: DUP1
0000010f: DUP3
00000110: SSTORE
00000111: PUSH32 0xc281d19e00000000000000000000000000000000000000000000000000000000
00000132: DUP4
00000133: MSTORE
00000134: SWAP3
00000135: MLOAD
00000136: PUSH1 0x01
00000138: PUSH1 0xa0
0000013a: PUSH1 0x02
0000013c: EXP
0000013d: SUB
0000013e: SWAP4
0000013f: SWAP1
00000140: SWAP4
00000141: AND
00000142: SWAP4
00000143: POP
00000144: PUSH4 0xc281d19e
00000149: SWAP3
0000014a: PUSH1 0x04
0000014c: DUP4
0000014d: DUP2
0000014e: ADD
0000014f: SWAP4
00000150: PUSH1 0x20
00000152: SWAP4
00000153: SWAP1
00000154: DUP4
00000155: SWAP1
00000156: SUB
00000157: SWAP1
00000158: SWAP2
00000159: ADD
0000015a: SWAP1
0000015b: DUP3
0000015c: SWAP1
0000015d: DUP8
0000015e: PUSH2 0x61da
00000161: GAS
00000162: SUB
00000163: CALL
00000164: ISZERO
00000165: PUSH2 0x0002
00000168: JUMPI
00000169: POP
0000016a: POP
0000016b: PUSH1 0x40
0000016d: MLOAD
0000016e: MLOAD
0000016f: PUSH1 0x01
00000171: PUSH1 0xa0
00000173: PUSH1 0x02
00000175: EXP
00000176: SUB
00000177: SWAP1
00000178: DUP2
00000179: AND
0000017a: CALLER
0000017b: SWAP1
0000017c: SWAP2
0000017d: AND
0000017e: EQ
0000017f: SWAP1
00000180: POP
00000181: PUSH2 0x04a0
00000184: JUMPI
00000185: PUSH2 0x0002
00000188: JUMP
00000189: JUMPDEST
0000018a: PUSH2 0x003a
0000018d: PUSH1 0x01
0000018f: SLOAD
00000190: PUSH1 0x01
00000192: PUSH1 0xa0
00000194: PUSH1 0x02
00000196: EXP
00000197: SUB
00000198: SWAP1
00000199: DUP2
0000019a: AND
0000019b: CALLER
0000019c: SWAP1
0000019d: SWAP2
0000019e: AND
0000019f: EQ
000001a0: ISZERO
000001a1: PUSH2 0x03a2
000001a4: JUMPI
000001a5: CALLER
000001a6: PUSH1 0x01
000001a8: PUSH1 0xa0
000001aa: PUSH1 0x02
000001ac: EXP
000001ad: SUB
000001ae: AND
000001af: SELFDESTRUCT
000001b0: JUMPDEST
000001b1: PUSH2 0x003a
000001b4: JUMPDEST
000001b5: PUSH1 0x00
000001b7: PUSH20 0x1d11e5eae3112dbd44f99266872ff1d07c77dce8
000001cc: SWAP1
000001cd: POP
000001ce: DUP1
000001cf: PUSH1 0x01
000001d1: PUSH1 0xa0
000001d3: PUSH1 0x02
000001d5: EXP
000001d6: SUB
000001d7: AND
000001d8: PUSH4 0x38cc4831
000001dd: PUSH1 0x40
000001df: MLOAD
000001e0: DUP2
000001e1: PUSH1 0xe0
000001e3: PUSH1 0x02
000001e5: EXP
000001e6: MUL
000001e7: DUP2
000001e8: MSTORE
000001e9: PUSH1 0x04
000001eb: ADD
000001ec: DUP1
000001ed: SWAP1
000001ee: POP
000001ef: PUSH1 0x20
000001f1: PUSH1 0x40
000001f3: MLOAD
000001f4: DUP1
000001f5: DUP4
000001f6: SUB
000001f7: DUP2
000001f8: PUSH1 0x00
000001fa: DUP8
000001fb: PUSH2 0x61da
000001fe: GAS
000001ff: SUB
00000200: CALL
00000201: ISZERO
00000202: PUSH2 0x0002
00000205: JUMPI
00000206: POP
00000207: POP
00000208: PUSH1 0x40
0000020a: DUP1
0000020b: MLOAD
0000020c: DUP1
0000020d: MLOAD
0000020e: PUSH1 0x00
00000210: DUP1
00000211: SLOAD
00000212: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000227: NOT
00000228: AND
00000229: SWAP1
0000022a: SWAP2
0000022b: OR
0000022c: DUP1
0000022d: DUP3
0000022e: SSTORE
0000022f: PUSH32 0x524f388900000000000000000000000000000000000000000000000000000000
00000250: DUP4
00000251: MSTORE
00000252: PUSH1 0x20
00000254: PUSH1 0x04
00000256: DUP5
00000257: ADD
00000258: DUP2
00000259: SWAP1
0000025a: MSTORE
0000025b: PUSH1 0x03
0000025d: PUSH1 0x24
0000025f: DUP6
00000260: ADD
00000261: MSTORE
00000262: PUSH1 0xea
00000264: PUSH1 0x02
00000266: EXP
00000267: PUSH3 0x155493
0000026b: MUL
0000026c: PUSH1 0x44
0000026e: DUP6
0000026f: ADD
00000270: MSTORE
00000271: SWAP4
00000272: MLOAD
00000273: PUSH1 0x01
00000275: PUSH1 0xa0
00000277: PUSH1 0x02
00000279: EXP
0000027a: SUB
0000027b: SWAP2
0000027c: SWAP1
0000027d: SWAP2
0000027e: AND
0000027f: SWAP5
00000280: POP
00000281: PUSH4 0xadf59f99
00000286: SWAP4
00000287: DUP6
00000288: SWAP4
00000289: PUSH4 0x524f3889
0000028e: SWAP4
0000028f: PUSH1 0x64
00000291: DUP3
00000292: DUP2
00000293: ADD
00000294: SWAP5
00000295: SWAP3
00000296: DUP4
00000297: SWAP1
00000298: SUB
00000299: ADD
0000029a: SWAP1
0000029b: DUP3
0000029c: SWAP1
0000029d: DUP8
0000029e: PUSH2 0x61da
000002a1: GAS
000002a2: SUB
000002a3: CALL
000002a4: ISZERO
000002a5: PUSH2 0x0002
000002a8: JUMPI
000002a9: POP
000002aa: POP
000002ab: PUSH1 0x40
000002ad: DUP1
000002ae: MLOAD
000002af: DUP1
000002b0: MLOAD
000002b1: PUSH32 0xadf59f9900000000000000000000000000000000000000000000000000000000
000002d2: DUP3
000002d3: MSTORE
000002d4: PUSH1 0x3c
000002d6: PUSH1 0x04
000002d8: DUP4
000002d9: ADD
000002da: MSTORE
000002db: PUSH1 0x60
000002dd: PUSH1 0x24
000002df: DUP4
000002e0: ADD
000002e1: MSTORE
000002e2: PUSH1 0x03
000002e4: PUSH1 0x64
000002e6: DUP4
000002e7: ADD
000002e8: MSTORE
000002e9: PUSH1 0xea
000002eb: PUSH1 0x02
000002ed: EXP
000002ee: PUSH3 0x155493
000002f2: MUL
000002f3: PUSH1 0x84
000002f5: DUP4
000002f6: ADD
000002f7: MSTORE
000002f8: PUSH1 0xa0
000002fa: PUSH1 0x44
000002fc: DUP4
000002fd: ADD
000002fe: MSTORE
000002ff: PUSH1 0x4c
00000301: PUSH1 0xa4
00000303: DUP4
00000304: ADD
00000305: MSTORE
00000306: PUSH32 0x6a736f6e2868747470733a2f2f6170692e6b72616b656e2e636f6d2f302f7075
00000327: PUSH1 0xc4
00000329: DUP4
0000032a: ADD
0000032b: MSTORE
0000032c: PUSH32 0x626c69632f5469636b65723f706169723d455448584254292e726573756c742e
0000034d: PUSH1 0xe4
0000034f: DUP4
00000350: ADD
00000351: MSTORE
00000352: PUSH32 0x58455448585842542e632e300000000000000000000000000000000000000000
00000373: PUSH2 0x0104
00000376: DUP4
00000377: ADD
00000378: MSTORE
00000379: SWAP2
0000037a: MLOAD
0000037b: SWAP2
0000037c: SWAP3
0000037d: POP
0000037e: PUSH2 0x0124
00000381: DUP1
00000382: DUP3
00000383: ADD
00000384: SWAP3
00000385: PUSH1 0x20
00000387: SWAP3
00000388: SWAP1
00000389: SWAP2
0000038a: SWAP1
0000038b: DUP3
0000038c: SWAP1
0000038d: SUB
0000038e: ADD
0000038f: DUP2
00000390: DUP6
00000391: DUP9
00000392: PUSH2 0x8502
00000395: GAS
00000396: SUB
00000397: CALL
00000398: ISZERO
00000399: PUSH2 0x0002
0000039c: JUMPI
0000039d: POP
0000039e: POP
0000039f: POP
000003a0: POP
000003a1: POP
000003a2: JUMPDEST
000003a3: JUMP
000003a4: JUMPDEST
000003a5: PUSH1 0x40
000003a7: DUP1
000003a8: MLOAD
000003a9: PUSH1 0x02
000003ab: DUP1
000003ac: SLOAD
000003ad: PUSH1 0x20
000003af: PUSH1 0x01
000003b1: DUP3
000003b2: AND
000003b3: ISZERO
000003b4: PUSH2 0x0100
000003b7: MUL
000003b8: PUSH1 0x00
000003ba: NOT
000003bb: ADD
000003bc: SWAP1
000003bd: SWAP2
000003be: AND
000003bf: DUP3
000003c0: SWAP1
000003c1: DIV
000003c2: PUSH1 0x1f
000003c4: DUP2
000003c5: ADD
000003c6: DUP3
000003c7: SWAP1
000003c8: DIV
000003c9: DUP3
000003ca: MUL
000003cb: DUP5
000003cc: ADD
000003cd: DUP3
000003ce: ADD
000003cf: SWAP1
000003d0: SWAP5
000003d1: MSTORE
000003d2: DUP4
000003d3: DUP4
000003d4: MSTORE
000003d5: PUSH2 0x03ff
000003d8: SWAP4
000003d9: SWAP1
000003da: DUP4
000003db: ADD
000003dc: DUP3
000003dd: DUP3
000003de: DUP1
000003df: ISZERO
000003e0: PUSH2 0x0498
000003e3: JUMPI
000003e4: DUP1
000003e5: PUSH1 0x1f
000003e7: LT
000003e8: PUSH2 0x046d
000003eb: JUMPI
000003ec: PUSH2 0x0100
000003ef: DUP1
000003f0: DUP4
000003f1: SLOAD
000003f2: DIV
000003f3: MUL
000003f4: DUP4
000003f5: MSTORE
000003f6: SWAP2
000003f7: PUSH1 0x20
000003f9: ADD
000003fa: SWAP2
000003fb: PUSH2 0x0498
000003fe: JUMP
000003ff: JUMPDEST
00000400: PUSH1 0x40
00000402: MLOAD
00000403: DUP1
00000404: DUP1
00000405: PUSH1 0x20
00000407: ADD
00000408: DUP3
00000409: DUP2
0000040a: SUB
0000040b: DUP3
0000040c: MSTORE
0000040d: DUP4
0000040e: DUP2
0000040f: DUP2
00000410: MLOAD
00000411: DUP2
00000412: MSTORE
00000413: PUSH1 0x20
00000415: ADD
00000416: SWAP2
00000417: POP
00000418: DUP1
00000419: MLOAD
0000041a: SWAP1
0000041b: PUSH1 0x20
0000041d: ADD
0000041e: SWAP1
0000041f: DUP1
00000420: DUP4
00000421: DUP4
00000422: DUP3
00000423: SWAP1
00000424: PUSH1 0x00
00000426: PUSH1 0x04
00000428: PUSH1 0x20
0000042a: DUP5
0000042b: PUSH1 0x1f
0000042d: ADD
0000042e: DIV
0000042f: PUSH1 0x03
00000431: MUL
00000432: PUSH1 0x0f
00000434: ADD
00000435: CALL
00000436: POP
00000437: SWAP1
00000438: POP
00000439: SWAP1
0000043a: DUP2
0000043b: ADD
0000043c: SWAP1
0000043d: PUSH1 0x1f
0000043f: AND
00000440: DUP1
00000441: ISZERO
00000442: PUSH2 0x045f
00000445: JUMPI
00000446: DUP1
00000447: DUP3
00000448: SUB
00000449: DUP1
0000044a: MLOAD
0000044b: PUSH1 0x01
0000044d: DUP4
0000044e: PUSH1 0x20
00000450: SUB
00000451: PUSH2 0x0100
00000454: EXP
00000455: SUB
00000456: NOT
00000457: AND
00000458: DUP2
00000459: MSTORE
0000045a: PUSH1 0x20
0000045c: ADD
0000045d: SWAP2
0000045e: POP
0000045f: JUMPDEST
00000460: POP
00000461: SWAP3
00000462: POP
00000463: POP
00000464: POP
00000465: PUSH1 0x40
00000467: MLOAD
00000468: DUP1
00000469: SWAP2
0000046a: SUB
0000046b: SWAP1
0000046c: RETURN
0000046d: JUMPDEST
0000046e: DUP3
0000046f: ADD
00000470: SWAP2
00000471: SWAP1
00000472: PUSH1 0x00
00000474: MSTORE
00000475: PUSH1 0x20
00000477: PUSH1 0x00
00000479: KECCAK256
0000047a: SWAP1
0000047b: JUMPDEST
0000047c: DUP2
0000047d: SLOAD
0000047e: DUP2
0000047f: MSTORE
00000480: SWAP1
00000481: PUSH1 0x01
00000483: ADD
00000484: SWAP1
00000485: PUSH1 0x20
00000487: ADD
00000488: DUP1
00000489: DUP4
0000048a: GT
0000048b: PUSH2 0x047b
0000048e: JUMPI
0000048f: DUP3
00000490: SWAP1
00000491: SUB
00000492: PUSH1 0x1f
00000494: AND
00000495: DUP3
00000496: ADD
00000497: SWAP2
00000498: JUMPDEST
00000499: POP
0000049a: POP
0000049b: POP
0000049c: POP
0000049d: POP
0000049e: DUP2
0000049f: JUMP
000004a0: JUMPDEST
000004a1: DUP2
000004a2: PUSH1 0x02
000004a4: PUSH1 0x00
000004a6: POP
000004a7: SWAP1
000004a8: DUP1
000004a9: MLOAD
000004aa: SWAP1
000004ab: PUSH1 0x20
000004ad: ADD
000004ae: SWAP1
000004af: DUP3
000004b0: DUP1
000004b1: SLOAD
000004b2: PUSH1 0x01
000004b4: DUP2
000004b5: PUSH1 0x01
000004b7: AND
000004b8: ISZERO
000004b9: PUSH2 0x0100
000004bc: MUL
000004bd: SUB
000004be: AND
000004bf: PUSH1 0x02
000004c1: SWAP1
000004c2: DIV
000004c3: SWAP1
000004c4: PUSH1 0x00
000004c6: MSTORE
000004c7: PUSH1 0x20
000004c9: PUSH1 0x00
000004cb: KECCAK256
000004cc: SWAP1
000004cd: PUSH1 0x1f
000004cf: ADD
000004d0: PUSH1 0x20
000004d2: SWAP1
000004d3: DIV
000004d4: DUP2
000004d5: ADD
000004d6: SWAP3
000004d7: DUP3
000004d8: PUSH1 0x1f
000004da: LT
000004db: PUSH2 0x0507
000004de: JUMPI
000004df: DUP1
000004e0: MLOAD
000004e1: PUSH1 0xff
000004e3: NOT
000004e4: AND
000004e5: DUP4
000004e6: DUP1
000004e7: ADD
000004e8: OR
000004e9: DUP6
000004ea: SSTORE
000004eb: JUMPDEST
000004ec: POP
000004ed: PUSH2 0x0537
000004f0: SWAP3
000004f1: SWAP2
000004f2: POP
000004f3: JUMPDEST
000004f4: DUP1
000004f5: DUP3
000004f6: GT
000004f7: ISZERO
000004f8: PUSH2 0x0541
000004fb: JUMPI
000004fc: PUSH1 0x00
000004fe: DUP2
000004ff: SSTORE
00000500: PUSH1 0x01
00000502: ADD
00000503: PUSH2 0x04f3
00000506: JUMP
00000507: JUMPDEST
00000508: DUP3
00000509: DUP1
0000050a: ADD
0000050b: PUSH1 0x01
0000050d: ADD
0000050e: DUP6
0000050f: SSTORE
00000510: DUP3
00000511: ISZERO
00000512: PUSH2 0x04eb
00000515: JUMPI
00000516: SWAP2
00000517: DUP3
00000518: ADD
00000519: JUMPDEST
0000051a: DUP3
0000051b: DUP2
0000051c: GT
0000051d: ISZERO
0000051e: PUSH2 0x04eb
00000521: JUMPI
00000522: DUP3
00000523: MLOAD
00000524: DUP3
00000525: PUSH1 0x00
00000527: POP
00000528: SSTORE
00000529: SWAP2
0000052a: PUSH1 0x20
0000052c: ADD
0000052d: SWAP2
0000052e: SWAP1
0000052f: PUSH1 0x01
00000531: ADD
00000532: SWAP1
00000533: PUSH2 0x0519
00000536: JUMP
00000537: JUMPDEST
00000538: POP
00000539: POP
0000053a: PUSH2 0x0545
0000053d: PUSH2 0x01b4
00000540: JUMP
00000541: JUMPDEST
00000542: POP
00000543: SWAP1
00000544: JUMP
00000545: JUMPDEST
00000546: POP
00000547: POP
00000548: POP
00000549: JUMP

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.