Analysis Run

019b3836-2498-72c7-a4eb-ecfe345638fc

complete

Chain ID

1

Address

0x288dcd4682d8f6b7fd849fb3dc9ba7fe57a8523e

Block Number

—

Created

Fri, Dec 19, 2025 8:03 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
653	artifact.fetch	complete	1 / 3	3 months ago
654	tool.cast_disasm	complete	1 / 3	3 months ago
43955	analysis.bundle	complete	1 / 3	1 week ago
43956	capability.graph	complete	1 / 3	1 week ago
43957	detector.run	complete	1 / 3	1 week ago
43958	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

5

EXT*/BALANCE

0

Total opcodes

1359

Flags

create_opcodes_present

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0xe0
00000007: PUSH1 0x02
00000009: EXP
0000000a: PUSH1 0x00
0000000c: CALLDATALOAD
0000000d: DIV
0000000e: PUSH4 0x6a030ca9
00000013: DUP2
00000014: EQ
00000015: PUSH2 0x0031
00000018: JUMPI
00000019: DUP1
0000001a: PUSH4 0xa73c50fa
0000001f: EQ
00000020: PUSH2 0x0052
00000023: JUMPI
00000024: DUP1
00000025: PUSH4 0xf851a440
0000002a: EQ
0000002b: PUSH2 0x01e6
0000002e: JUMPI
0000002f: JUMPDEST
00000030: STOP
00000031: JUMPDEST
00000032: PUSH2 0x01f8
00000035: PUSH1 0x04
00000037: CALLDATALOAD
00000038: PUSH1 0x00
0000003a: PUSH1 0x20
0000003c: DUP2
0000003d: SWAP1
0000003e: MSTORE
0000003f: SWAP1
00000040: DUP2
00000041: MSTORE
00000042: PUSH1 0x40
00000044: SWAP1
00000045: KECCAK256
00000046: SLOAD
00000047: PUSH1 0x01
00000049: PUSH1 0xa0
0000004b: PUSH1 0x02
0000004d: EXP
0000004e: SUB
0000004f: AND
00000050: DUP2
00000051: JUMP
00000052: JUMPDEST
00000053: PUSH2 0x002f
00000056: PUSH1 0x04
00000058: CALLDATALOAD
00000059: PUSH1 0x24
0000005b: CALLDATALOAD
0000005c: PUSH1 0x44
0000005e: CALLDATALOAD
0000005f: PUSH1 0x01
00000061: SLOAD
00000062: PUSH1 0x00
00000064: SWAP1
00000065: CALLER
00000066: PUSH1 0x01
00000068: PUSH1 0xa0
0000006a: PUSH1 0x02
0000006c: EXP
0000006d: SUB
0000006e: SWAP1
0000006f: DUP2
00000070: AND
00000071: SWAP2
00000072: AND
00000073: EQ
00000074: ISZERO
00000075: PUSH2 0x01e0
00000078: JUMPI
00000079: DUP4
0000007a: DUP2
0000007b: MSTORE
0000007c: PUSH1 0x20
0000007e: DUP2
0000007f: SWAP1
00000080: MSTORE
00000081: PUSH1 0x40
00000083: DUP2
00000084: KECCAK256
00000085: SLOAD
00000086: PUSH1 0x01
00000088: PUSH1 0xa0
0000008a: PUSH1 0x02
0000008c: EXP
0000008d: SUB
0000008e: AND
0000008f: DUP2
00000090: EQ
00000091: PUSH2 0x00f1
00000094: JUMPI
00000095: PUSH1 0x40
00000097: DUP2
00000098: KECCAK256
00000099: SLOAD
0000009a: PUSH32 0xcabfb93400000000000000000000000000000000000000000000000000000000
000000bb: PUSH1 0x60
000000bd: SWAP1
000000be: DUP2
000000bf: MSTORE
000000c0: PUSH1 0x01
000000c2: PUSH1 0xa0
000000c4: PUSH1 0x02
000000c6: EXP
000000c7: SUB
000000c8: DUP6
000000c9: DUP2
000000ca: AND
000000cb: PUSH1 0x64
000000cd: MSTORE
000000ce: SWAP2
000000cf: SWAP1
000000d0: SWAP2
000000d1: AND
000000d2: SWAP2
000000d3: DUP3
000000d4: SWAP2
000000d5: PUSH4 0xcabfb934
000000da: SWAP2
000000db: PUSH1 0x84
000000dd: SWAP2
000000de: PUSH1 0x24
000000e0: DUP2
000000e1: DUP4
000000e2: DUP8
000000e3: PUSH2 0x61da
000000e6: GAS
000000e7: SUB
000000e8: CALL
000000e9: ISZERO
000000ea: PUSH2 0x0002
000000ed: JUMPI
000000ee: POP
000000ef: POP
000000f0: POP
000000f1: JUMPDEST
000000f2: PUSH1 0x40
000000f4: PUSH1 0x00
000000f6: SWAP1
000000f7: DUP2
000000f8: KECCAK256
000000f9: DUP6
000000fa: DUP3
000000fb: MSTORE
000000fc: PUSH1 0x20
000000fe: DUP3
000000ff: SWAP1
00000100: MSTORE
00000101: DUP1
00000102: SLOAD
00000103: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000118: NOT
00000119: AND
0000011a: DUP6
0000011b: OR
0000011c: SWAP1
0000011d: SSTORE
0000011e: PUSH1 0x01
00000120: PUSH1 0xa0
00000122: PUSH1 0x02
00000124: EXP
00000125: SUB
00000126: DUP4
00000127: AND
00000128: EQ
00000129: ISZERO
0000012a: PUSH2 0x0193
0000012d: JUMPI
0000012e: PUSH1 0x40
00000130: MLOAD
00000131: PUSH2 0x0576
00000134: DUP1
00000135: PUSH2 0x020b
00000138: DUP4
00000139: CODECOPY
0000013a: DUP2
0000013b: ADD
0000013c: DUP2
0000013d: SWAP1
0000013e: SUB
0000013f: SWAP1
00000140: PUSH1 0x00
00000142: CREATE
00000143: SWAP2
00000144: POP
00000145: DUP2
00000146: POP
00000147: DUP2
00000148: PUSH1 0x01
0000014a: PUSH1 0xa0
0000014c: PUSH1 0x02
0000014e: EXP
0000014f: SUB
00000150: AND
00000151: PUSH4 0xf0350c04
00000156: DUP5
00000157: PUSH1 0x40
00000159: MLOAD
0000015a: DUP3
0000015b: PUSH1 0xe0
0000015d: PUSH1 0x02
0000015f: EXP
00000160: MUL
00000161: DUP2
00000162: MSTORE
00000163: PUSH1 0x04
00000165: ADD
00000166: DUP1
00000167: DUP3
00000168: PUSH1 0x01
0000016a: PUSH1 0xa0
0000016c: PUSH1 0x02
0000016e: EXP
0000016f: SUB
00000170: AND
00000171: DUP2
00000172: MSTORE
00000173: PUSH1 0x20
00000175: ADD
00000176: SWAP2
00000177: POP
00000178: POP
00000179: PUSH1 0x00
0000017b: PUSH1 0x40
0000017d: MLOAD
0000017e: DUP1
0000017f: DUP4
00000180: SUB
00000181: DUP2
00000182: PUSH1 0x00
00000184: DUP8
00000185: PUSH2 0x61da
00000188: GAS
00000189: SUB
0000018a: CALL
0000018b: ISZERO
0000018c: PUSH2 0x0002
0000018f: JUMPI
00000190: POP
00000191: POP
00000192: POP
00000193: JUMPDEST
00000194: DUP3
00000195: PUSH1 0x01
00000197: PUSH1 0xa0
00000199: PUSH1 0x02
0000019b: EXP
0000019c: SUB
0000019d: AND
0000019e: PUSH4 0xe7156dbe
000001a3: DUP4
000001a4: PUSH1 0x40
000001a6: MLOAD
000001a7: DUP3
000001a8: PUSH1 0xe0
000001aa: PUSH1 0x02
000001ac: EXP
000001ad: MUL
000001ae: DUP2
000001af: MSTORE
000001b0: PUSH1 0x04
000001b2: ADD
000001b3: DUP1
000001b4: DUP3
000001b5: PUSH1 0x01
000001b7: PUSH1 0xa0
000001b9: PUSH1 0x02
000001bb: EXP
000001bc: SUB
000001bd: AND
000001be: DUP2
000001bf: MSTORE
000001c0: PUSH1 0x20
000001c2: ADD
000001c3: SWAP2
000001c4: POP
000001c5: POP
000001c6: PUSH1 0x00
000001c8: PUSH1 0x40
000001ca: MLOAD
000001cb: DUP1
000001cc: DUP4
000001cd: SUB
000001ce: DUP2
000001cf: PUSH1 0x00
000001d1: DUP8
000001d2: PUSH2 0x61da
000001d5: GAS
000001d6: SUB
000001d7: CALL
000001d8: ISZERO
000001d9: PUSH2 0x0002
000001dc: JUMPI
000001dd: POP
000001de: POP
000001df: POP
000001e0: JUMPDEST
000001e1: POP
000001e2: POP
000001e3: POP
000001e4: POP
000001e5: JUMP
000001e6: JUMPDEST
000001e7: PUSH2 0x01f8
000001ea: PUSH1 0x01
000001ec: SLOAD
000001ed: PUSH1 0x01
000001ef: PUSH1 0xa0
000001f1: PUSH1 0x02
000001f3: EXP
000001f4: SUB
000001f5: AND
000001f6: DUP2
000001f7: JUMP
000001f8: JUMPDEST
000001f9: PUSH1 0x01
000001fb: PUSH1 0xa0
000001fd: PUSH1 0x02
000001ff: EXP
00000200: SUB
00000201: AND
00000202: PUSH1 0x60
00000204: SWAP1
00000205: DUP2
00000206: MSTORE
00000207: PUSH1 0x20
00000209: SWAP1
0000020a: RETURN
0000020b: PUSH1 0x60
0000020d: PUSH1 0x40
0000020f: MSTORE
00000210: PUSH1 0x00
00000212: DUP1
00000213: SLOAD
00000214: PUSH1 0x01
00000216: PUSH1 0xa0
00000218: PUSH1 0x02
0000021a: EXP
0000021b: SUB
0000021c: NOT
0000021d: AND
0000021e: CALLER
0000021f: OR
00000220: SWAP1
00000221: SSTORE
00000222: PUSH1 0x01
00000224: DUP1
00000225: SLOAD
00000226: DUP2
00000227: DUP1
00000228: SSTORE
00000229: DUP2
0000022a: SWAP1
0000022b: DUP2
0000022c: SWAP1
0000022d: DUP1
0000022e: ISZERO
0000022f: DUP3
00000230: SWAP1
00000231: GT
00000232: PUSH1 0x3a
00000234: JUMPI
00000235: DUP2
00000236: DUP4
00000237: PUSH1 0x00
00000239: MSTORE
0000023a: PUSH1 0x20
0000023c: PUSH1 0x00
0000023e: KECCAK256
0000023f: SWAP2
00000240: DUP3
00000241: ADD
00000242: SWAP2
00000243: ADD
00000244: POP
00000245: JUMPDEST
00000246: POP
00000247: POP
00000248: POP
00000249: POP
0000024a: PUSH2 0x052a
0000024d: DUP1
0000024e: PUSH2 0x004c
00000251: PUSH1 0x00
00000253: CODECOPY
00000254: PUSH1 0x00
00000256: RETURN
00000257: PUSH1 0x60
00000259: PUSH1 0x40
0000025b: MSTORE
0000025c: CALLDATASIZE
0000025d: ISZERO
0000025e: PUSH2 0x008d
00000261: JUMPI
00000262: PUSH1 0xe0
00000264: PUSH1 0x02
00000266: EXP
00000267: PUSH1 0x00
00000269: CALLDATALOAD
0000026a: DIV
0000026b: PUSH4 0x06661abd
00000270: DUP2
00000271: EQ
00000272: PUSH2 0x008f
00000275: JUMPI
00000276: DUP1
00000277: PUSH4 0x1a10cfc3
0000027c: EQ
0000027d: PUSH2 0x009e
00000280: JUMPI
00000281: DUP1
00000282: PUSH4 0x25010816
00000287: EQ
00000288: PUSH2 0x0138
0000028b: JUMPI
0000028c: DUP1
0000028d: PUSH4 0x41ee903e
00000292: EQ
00000293: PUSH2 0x0177
00000296: JUMPI
00000297: DUP1
00000298: PUSH4 0x505fb46c
0000029d: EQ
0000029e: PUSH2 0x01ef
000002a1: JUMPI
000002a2: DUP1
000002a3: PUSH4 0x58e59c32
000002a8: EQ
000002a9: PUSH2 0x0282
000002ac: JUMPI
000002ad: DUP1
000002ae: PUSH4 0x89029d8c
000002b3: EQ
000002b4: PUSH2 0x02d6
000002b7: JUMPI
000002b8: DUP1
000002b9: PUSH4 0x9c851ebc
000002be: EQ
000002bf: PUSH2 0x036f
000002c2: JUMPI
000002c3: DUP1
000002c4: PUSH4 0xcccf7a8e
000002c9: EQ
000002ca: PUSH2 0x03c0
000002cd: JUMPI
000002ce: DUP1
000002cf: PUSH4 0xf0350c04
000002d4: EQ
000002d5: PUSH2 0x03d0
000002d8: JUMPI
000002d9: DUP1
000002da: PUSH4 0xf851a440
000002df: EQ
000002e0: PUSH2 0x0411
000002e3: JUMPI
000002e4: JUMPDEST
000002e5: STOP
000002e6: JUMPDEST
000002e7: PUSH2 0x0423
000002ea: JUMPDEST
000002eb: PUSH1 0x01
000002ed: SLOAD
000002ee: PUSH1 0x00
000002f0: NOT
000002f1: ADD
000002f2: JUMPDEST
000002f3: SWAP1
000002f4: JUMP
000002f5: JUMPDEST
000002f6: PUSH2 0x008d
000002f9: PUSH1 0x04
000002fb: CALLDATALOAD
000002fc: PUSH1 0x24
000002fe: CALLDATALOAD
000002ff: PUSH1 0x44
00000301: CALLDATALOAD
00000302: PUSH1 0x00
00000304: DUP1
00000305: SLOAD
00000306: DUP2
00000307: SWAP1
00000308: PUSH1 0x01
0000030a: PUSH1 0xa0
0000030c: PUSH1 0x02
0000030e: EXP
0000030f: SUB
00000310: SWAP1
00000311: DUP2
00000312: AND
00000313: CALLER
00000314: SWAP1
00000315: SWAP2
00000316: AND
00000317: EQ
00000318: ISZERO
00000319: PUSH2 0x04d6
0000031c: JUMPI
0000031d: PUSH1 0x01
0000031f: DUP1
00000320: SLOAD
00000321: DUP7
00000322: SWAP1
00000323: DUP2
00000324: LT
00000325: ISZERO
00000326: PUSH2 0x0002
00000329: JUMPI
0000032a: POP
0000032b: POP
0000032c: POP
0000032d: DUP3
0000032e: DUP2
0000032f: MSTORE
00000330: PUSH1 0x00
00000332: DUP1
00000333: MLOAD
00000334: PUSH1 0x20
00000336: PUSH2 0x050a
00000339: DUP4
0000033a: CODECOPY
0000033b: DUP2
0000033c: MLOAD
0000033d: SWAP2
0000033e: MSTORE
0000033f: DUP5
00000340: ADD
00000341: PUSH1 0x20
00000343: MSTORE
00000344: PUSH1 0x40
00000346: SWAP1
00000347: KECCAK256
00000348: DUP2
00000349: JUMPDEST
0000034a: DUP2
0000034b: SLOAD
0000034c: PUSH1 0x01
0000034e: DUP3
0000034f: ADD
00000350: LT
00000351: ISZERO
00000352: PUSH2 0x04dd
00000355: JUMPI
00000356: DUP2
00000357: DUP2
00000358: PUSH1 0x01
0000035a: ADD
0000035b: DUP2
0000035c: SLOAD
0000035d: DUP2
0000035e: LT
0000035f: ISZERO
00000360: PUSH2 0x0002
00000363: JUMPI
00000364: SWAP1
00000365: PUSH1 0x00
00000367: MSTORE
00000368: PUSH1 0x20
0000036a: PUSH1 0x00
0000036c: KECCAK256
0000036d: SWAP1
0000036e: ADD
0000036f: PUSH1 0x00
00000371: POP
00000372: SLOAD
00000373: DUP3
00000374: DUP3
00000375: DUP2
00000376: SLOAD
00000377: DUP2
00000378: LT
00000379: ISZERO
0000037a: PUSH2 0x0002
0000037d: JUMPI
0000037e: POP
0000037f: POP
00000380: PUSH1 0x20
00000382: PUSH1 0x00
00000384: KECCAK256
00000385: DUP3
00000386: ADD
00000387: SSTORE
00000388: PUSH1 0x01
0000038a: ADD
0000038b: PUSH2 0x00f2
0000038e: JUMP
0000038f: JUMPDEST
00000390: PUSH2 0x0423
00000393: PUSH1 0x04
00000395: CALLDATALOAD
00000396: PUSH1 0x24
00000398: CALLDATALOAD
00000399: PUSH1 0x00
0000039b: PUSH1 0x01
0000039d: PUSH1 0x00
0000039f: POP
000003a0: DUP4
000003a1: DUP2
000003a2: SLOAD
000003a3: DUP2
000003a4: LT
000003a5: ISZERO
000003a6: PUSH2 0x0002
000003a9: JUMPI
000003aa: POP
000003ab: POP
000003ac: DUP2
000003ad: DUP2
000003ae: MSTORE
000003af: PUSH1 0x00
000003b1: DUP1
000003b2: MLOAD
000003b3: PUSH1 0x20
000003b5: PUSH2 0x050a
000003b8: DUP4
000003b9: CODECOPY
000003ba: DUP2
000003bb: MLOAD
000003bc: SWAP2
000003bd: MSTORE
000003be: DUP4
000003bf: ADD
000003c0: PUSH1 0x20
000003c2: MSTORE
000003c3: PUSH1 0x40
000003c5: SWAP1
000003c6: KECCAK256
000003c7: SLOAD
000003c8: JUMPDEST
000003c9: SWAP3
000003ca: SWAP2
000003cb: POP
000003cc: POP
000003cd: JUMP
000003ce: JUMPDEST
000003cf: PUSH2 0x008d
000003d2: PUSH1 0x04
000003d4: CALLDATALOAD
000003d5: PUSH1 0x24
000003d7: CALLDATALOAD
000003d8: PUSH1 0x00
000003da: SLOAD
000003db: PUSH1 0x01
000003dd: PUSH1 0xa0
000003df: PUSH1 0x02
000003e1: EXP
000003e2: SUB
000003e3: SWAP1
000003e4: DUP2
000003e5: AND
000003e6: CALLER
000003e7: SWAP1
000003e8: SWAP2
000003e9: AND
000003ea: EQ
000003eb: ISZERO
000003ec: PUSH2 0x04cd
000003ef: JUMPI
000003f0: PUSH1 0x00
000003f2: PUSH1 0x01
000003f4: PUSH1 0x00
000003f6: POP
000003f7: DUP4
000003f8: DUP2
000003f9: SLOAD
000003fa: DUP2
000003fb: LT
000003fc: ISZERO
000003fd: PUSH2 0x0002
00000400: JUMPI
00000401: POP
00000402: POP
00000403: DUP2
00000404: DUP2
00000405: MSTORE
00000406: PUSH1 0x00
00000408: DUP1
00000409: MLOAD
0000040a: PUSH1 0x20
0000040c: PUSH2 0x050a
0000040f: DUP4
00000410: CODECOPY
00000411: DUP2
00000412: MLOAD
00000413: SWAP2
00000414: MSTORE
00000415: DUP4
00000416: ADD
00000417: PUSH1 0x20
00000419: MSTORE
0000041a: PUSH1 0x40
0000041c: DUP2
0000041d: KECCAK256
0000041e: DUP1
0000041f: SLOAD
00000420: DUP3
00000421: DUP3
00000422: SSTORE
00000423: DUP3
00000424: SWAP1
00000425: DUP1
00000426: ISZERO
00000427: DUP3
00000428: SWAP1
00000429: GT
0000042a: PUSH2 0x04c8
0000042d: JUMPI
0000042e: DUP2
0000042f: DUP4
00000430: PUSH1 0x00
00000432: MSTORE
00000433: PUSH1 0x20
00000435: PUSH1 0x00
00000437: KECCAK256
00000438: SWAP2
00000439: DUP3
0000043a: ADD
0000043b: SWAP2
0000043c: ADD
0000043d: PUSH2 0x04c8
00000440: SWAP2
00000441: SWAP1
00000442: PUSH2 0x026e
00000445: JUMP
00000446: JUMPDEST
00000447: PUSH2 0x008d
0000044a: PUSH1 0x04
0000044c: CALLDATALOAD
0000044d: PUSH1 0x24
0000044f: CALLDATALOAD
00000450: PUSH1 0x44
00000452: CALLDATALOAD
00000453: PUSH1 0x00
00000455: DUP1
00000456: SLOAD
00000457: PUSH1 0x01
00000459: PUSH1 0xa0
0000045b: PUSH1 0x02
0000045d: EXP
0000045e: SUB
0000045f: SWAP1
00000460: DUP2
00000461: AND
00000462: CALLER
00000463: SWAP1
00000464: SWAP2
00000465: AND
00000466: EQ
00000467: ISZERO
00000468: PUSH2 0x04be
0000046b: JUMPI
0000046c: PUSH1 0x01
0000046e: DUP1
0000046f: SLOAD
00000470: DUP6
00000471: SWAP1
00000472: DUP2
00000473: LT
00000474: ISZERO
00000475: PUSH2 0x0002
00000478: JUMPI
00000479: POP
0000047a: DUP4
0000047b: DUP3
0000047c: MSTORE
0000047d: PUSH1 0x00
0000047f: DUP1
00000480: MLOAD
00000481: PUSH1 0x20
00000483: PUSH2 0x050a
00000486: DUP4
00000487: CODECOPY
00000488: DUP2
00000489: MLOAD
0000048a: SWAP2
0000048b: MSTORE
0000048c: DUP6
0000048d: ADD
0000048e: PUSH1 0x20
00000490: MSTORE
00000491: PUSH1 0x40
00000493: SWAP1
00000494: SWAP2
00000495: KECCAK256
00000496: DUP1
00000497: SLOAD
00000498: SWAP2
00000499: DUP3
0000049a: ADD
0000049b: DUP1
0000049c: DUP3
0000049d: SSTORE
0000049e: SWAP1
0000049f: SWAP2
000004a0: DUP4
000004a1: SWAP2
000004a2: DUP4
000004a3: SWAP2
000004a4: SWAP1
000004a5: DUP3
000004a6: SWAP1
000004a7: DUP3
000004a8: DUP1
000004a9: ISZERO
000004aa: DUP3
000004ab: SWAP1
000004ac: GT
000004ad: PUSH2 0x04a5
000004b0: JUMPI
000004b1: DUP2
000004b2: DUP4
000004b3: PUSH1 0x00
000004b5: MSTORE
000004b6: PUSH1 0x20
000004b8: PUSH1 0x00
000004ba: KECCAK256
000004bb: SWAP2
000004bc: DUP3
000004bd: ADD
000004be: SWAP2
000004bf: ADD
000004c0: PUSH2 0x04a5
000004c3: SWAP2
000004c4: SWAP1
000004c5: JUMPDEST
000004c6: DUP1
000004c7: DUP3
000004c8: GT
000004c9: ISZERO
000004ca: PUSH2 0x04c4
000004cd: JUMPI
000004ce: PUSH1 0x00
000004d0: DUP2
000004d1: SSTORE
000004d2: PUSH1 0x01
000004d4: ADD
000004d5: PUSH2 0x026e
000004d8: JUMP
000004d9: JUMPDEST
000004da: PUSH2 0x0423
000004dd: PUSH1 0x04
000004df: CALLDATALOAD
000004e0: PUSH1 0x24
000004e2: CALLDATALOAD
000004e3: PUSH1 0x44
000004e5: CALLDATALOAD
000004e6: PUSH1 0x00
000004e8: PUSH1 0x01
000004ea: PUSH1 0x00
000004ec: POP
000004ed: DUP5
000004ee: DUP2
000004ef: SLOAD
000004f0: DUP2
000004f1: LT
000004f2: ISZERO
000004f3: PUSH2 0x0002
000004f6: JUMPI
000004f7: POP
000004f8: POP
000004f9: DUP3
000004fa: DUP2
000004fb: MSTORE
000004fc: PUSH1 0x00
000004fe: DUP1
000004ff: MLOAD
00000500: PUSH1 0x20
00000502: PUSH2 0x050a
00000505: DUP4
00000506: CODECOPY
00000507: DUP2
00000508: MLOAD
00000509: SWAP2
0000050a: MSTORE
0000050b: DUP5
0000050c: ADD
0000050d: PUSH1 0x20
0000050f: MSTORE
00000510: PUSH1 0x40
00000512: DUP2
00000513: KECCAK256
00000514: DUP1
00000515: SLOAD
00000516: DUP4
00000517: SWAP1
00000518: DUP2
00000519: LT
0000051a: ISZERO
0000051b: PUSH2 0x0002
0000051e: JUMPI
0000051f: POP
00000520: DUP2
00000521: MSTORE
00000522: PUSH1 0x20
00000524: SWAP1
00000525: KECCAK256
00000526: ADD
00000527: SLOAD
00000528: SWAP3
00000529: SWAP2
0000052a: POP
0000052b: POP
0000052c: JUMP
0000052d: JUMPDEST
0000052e: PUSH2 0x0435
00000531: PUSH1 0x04
00000533: CALLDATALOAD
00000534: PUSH1 0x24
00000536: CALLDATALOAD
00000537: PUSH1 0x40
00000539: DUP1
0000053a: MLOAD
0000053b: PUSH1 0x20
0000053d: DUP2
0000053e: ADD
0000053f: SWAP1
00000540: SWAP2
00000541: MSTORE
00000542: PUSH1 0x00
00000544: DUP2
00000545: MSTORE
00000546: PUSH1 0x01
00000548: DUP1
00000549: SLOAD
0000054a: DUP5
0000054b: SWAP1
0000054c: DUP2
0000054d: LT
0000054e: ISZERO
0000054f: PUSH2 0x0002
00000552: JUMPI
00000553: POP
00000554: POP
00000555: PUSH1 0x00
00000557: DUP3
00000558: DUP2
00000559: MSTORE
0000055a: PUSH1 0x00
0000055c: DUP1
0000055d: MLOAD
0000055e: PUSH1 0x20
00000560: PUSH2 0x050a
00000563: DUP4
00000564: CODECOPY
00000565: DUP2
00000566: MLOAD
00000567: SWAP2
00000568: MSTORE
00000569: DUP5
0000056a: ADD
0000056b: PUSH1 0x20
0000056d: SWAP1
0000056e: DUP2
0000056f: MSTORE
00000570: PUSH1 0x40
00000572: SWAP2
00000573: DUP3
00000574: SWAP1
00000575: KECCAK256
00000576: DUP1
00000577: SLOAD
00000578: DUP4
00000579: MLOAD
0000057a: DUP2
0000057b: DUP5
0000057c: MUL
0000057d: DUP2
0000057e: ADD
0000057f: DUP5
00000580: ADD
00000581: SWAP1
00000582: SWAP5
00000583: MSTORE
00000584: DUP1
00000585: DUP5
00000586: MSTORE
00000587: SWAP1
00000588: SWAP2
00000589: DUP4
0000058a: ADD
0000058b: DUP3
0000058c: DUP3
0000058d: DUP1
0000058e: ISZERO
0000058f: PUSH2 0x0363
00000592: JUMPI
00000593: PUSH1 0x20
00000595: MUL
00000596: DUP3
00000597: ADD
00000598: SWAP2
00000599: SWAP1
0000059a: PUSH1 0x00
0000059c: MSTORE
0000059d: PUSH1 0x20
0000059f: PUSH1 0x00
000005a1: KECCAK256
000005a2: SWAP1
000005a3: JUMPDEST
000005a4: DUP2
000005a5: PUSH1 0x00
000005a7: POP
000005a8: SLOAD
000005a9: DUP2
000005aa: MSTORE
000005ab: PUSH1 0x20
000005ad: ADD
000005ae: SWAP1
000005af: PUSH1 0x01
000005b1: ADD
000005b2: SWAP1
000005b3: DUP1
000005b4: DUP4
000005b5: GT
000005b6: PUSH2 0x034c
000005b9: JUMPI
000005ba: JUMPDEST
000005bb: POP
000005bc: POP
000005bd: POP
000005be: POP
000005bf: POP
000005c0: SWAP1
000005c1: POP
000005c2: PUSH2 0x0171
000005c5: JUMP
000005c6: JUMPDEST
000005c7: PUSH2 0x0423
000005ca: PUSH1 0x00
000005cc: DUP1
000005cd: SLOAD
000005ce: PUSH1 0x01
000005d0: PUSH1 0xa0
000005d2: PUSH1 0x02
000005d4: EXP
000005d5: SUB
000005d6: SWAP1
000005d7: DUP2
000005d8: AND
000005d9: CALLER
000005da: SWAP1
000005db: SWAP2
000005dc: AND
000005dd: EQ
000005de: ISZERO
000005df: PUSH2 0x009b
000005e2: JUMPI
000005e3: PUSH1 0x01
000005e5: DUP1
000005e6: SLOAD
000005e7: DUP1
000005e8: DUP3
000005e9: ADD
000005ea: DUP1
000005eb: DUP4
000005ec: SSTORE
000005ed: SWAP1
000005ee: SWAP2
000005ef: SWAP1
000005f0: DUP3
000005f1: DUP1
000005f2: ISZERO
000005f3: DUP3
000005f4: SWAP1
000005f5: GT
000005f6: PUSH2 0x03b6
000005f9: JUMPI
000005fa: DUP3
000005fb: DUP6
000005fc: MSTORE
000005fd: PUSH1 0x00
000005ff: DUP1
00000600: MLOAD
00000601: PUSH1 0x20
00000603: PUSH2 0x050a
00000606: DUP4
00000607: CODECOPY
00000608: DUP2
00000609: MLOAD
0000060a: SWAP2
0000060b: MSTORE
0000060c: ADD
0000060d: JUMPDEST
0000060e: POP
0000060f: POP
00000610: POP
00000611: SWAP1
00000612: POP
00000613: PUSH2 0x009b
00000616: JUMP
00000617: JUMPDEST
00000618: PUSH2 0x0423
0000061b: PUSH1 0x04
0000061d: CALLDATALOAD
0000061e: PUSH1 0x00
00000620: PUSH2 0x049c
00000623: PUSH2 0x0093
00000626: JUMP
00000627: JUMPDEST
00000628: PUSH2 0x008d
0000062b: PUSH1 0x04
0000062d: CALLDATALOAD
0000062e: PUSH1 0x00
00000630: SLOAD
00000631: PUSH1 0x01
00000633: PUSH1 0xa0
00000635: PUSH1 0x02
00000637: EXP
00000638: SUB
00000639: SWAP1
0000063a: DUP2
0000063b: AND
0000063c: CALLER
0000063d: SWAP1
0000063e: SWAP2
0000063f: AND
00000640: EQ
00000641: ISZERO
00000642: PUSH2 0x040e
00000645: JUMPI
00000646: PUSH1 0x00
00000648: DUP1
00000649: SLOAD
0000064a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000065f: NOT
00000660: AND
00000661: DUP3
00000662: OR
00000663: SWAP1
00000664: SSTORE
00000665: JUMPDEST
00000666: POP
00000667: JUMP
00000668: JUMPDEST
00000669: PUSH2 0x047f
0000066c: PUSH1 0x00
0000066e: SLOAD
0000066f: PUSH1 0x01
00000671: PUSH1 0xa0
00000673: PUSH1 0x02
00000675: EXP
00000676: SUB
00000677: AND
00000678: DUP2
00000679: JUMP
0000067a: JUMPDEST
0000067b: PUSH1 0x40
0000067d: DUP1
0000067e: MLOAD
0000067f: SWAP2
00000680: DUP3
00000681: MSTORE
00000682: MLOAD
00000683: SWAP1
00000684: DUP2
00000685: SWAP1
00000686: SUB
00000687: PUSH1 0x20
00000689: ADD
0000068a: SWAP1
0000068b: RETURN
0000068c: JUMPDEST
0000068d: PUSH1 0x40
0000068f: MLOAD
00000690: DUP1
00000691: DUP1
00000692: PUSH1 0x20
00000694: ADD
00000695: DUP3
00000696: DUP2
00000697: SUB
00000698: DUP3
00000699: MSTORE
0000069a: DUP4
0000069b: DUP2
0000069c: DUP2
0000069d: MLOAD
0000069e: DUP2
0000069f: MSTORE
000006a0: PUSH1 0x20
000006a2: ADD
000006a3: SWAP2
000006a4: POP
000006a5: DUP1
000006a6: MLOAD
000006a7: SWAP1
000006a8: PUSH1 0x20
000006aa: ADD
000006ab: SWAP1
000006ac: PUSH1 0x20
000006ae: MUL
000006af: DUP1
000006b0: DUP4
000006b1: DUP4
000006b2: DUP3
000006b3: SWAP1
000006b4: PUSH1 0x00
000006b6: PUSH1 0x04
000006b8: PUSH1 0x20
000006ba: DUP5
000006bb: PUSH1 0x1f
000006bd: ADD
000006be: DIV
000006bf: PUSH1 0x03
000006c1: MUL
000006c2: PUSH1 0x0f
000006c4: ADD
000006c5: CALL
000006c6: POP
000006c7: SWAP1
000006c8: POP
000006c9: ADD
000006ca: SWAP3
000006cb: POP
000006cc: POP
000006cd: POP
000006ce: PUSH1 0x40
000006d0: MLOAD
000006d1: DUP1
000006d2: SWAP2
000006d3: SUB
000006d4: SWAP1
000006d5: RETURN
000006d6: JUMPDEST
000006d7: PUSH1 0x40
000006d9: DUP1
000006da: MLOAD
000006db: PUSH1 0x01
000006dd: PUSH1 0xa0
000006df: PUSH1 0x02
000006e1: EXP
000006e2: SUB
000006e3: SWAP3
000006e4: SWAP1
000006e5: SWAP3
000006e6: AND
000006e7: DUP3
000006e8: MSTORE
000006e9: MLOAD
000006ea: SWAP1
000006eb: DUP2
000006ec: SWAP1
000006ed: SUB
000006ee: PUSH1 0x20
000006f0: ADD
000006f1: SWAP1
000006f2: RETURN
000006f3: JUMPDEST
000006f4: SWAP1
000006f5: SWAP2
000006f6: GT
000006f7: ISZERO
000006f8: SWAP2
000006f9: SWAP1
000006fa: POP
000006fb: JUMP
000006fc: JUMPDEST
000006fd: POP
000006fe: POP
000006ff: POP
00000700: DUP2
00000701: SLOAD
00000702: DUP2
00000703: LT
00000704: ISZERO
00000705: PUSH2 0x0002
00000708: JUMPI
00000709: PUSH1 0x00
0000070b: SWAP2
0000070c: DUP3
0000070d: MSTORE
0000070e: PUSH1 0x20
00000710: SWAP1
00000711: SWAP2
00000712: KECCAK256
00000713: ADD
00000714: SSTORE
00000715: JUMPDEST
00000716: POP
00000717: POP
00000718: POP
00000719: POP
0000071a: JUMP
0000071b: JUMPDEST
0000071c: POP
0000071d: SWAP1
0000071e: JUMP
0000071f: JUMPDEST
00000720: POP
00000721: POP
00000722: POP
00000723: POP
00000724: JUMPDEST
00000725: POP
00000726: POP
00000727: JUMP
00000728: JUMPDEST
00000729: POP
0000072a: POP
0000072b: POP
0000072c: POP
0000072d: JUMPDEST
0000072e: POP
0000072f: POP
00000730: POP
00000731: POP
00000732: POP
00000733: JUMP
00000734: JUMPDEST
00000735: DUP2
00000736: SLOAD
00000737: PUSH1 0x00
00000739: NOT
0000073a: DUP2
0000073b: ADD
0000073c: DUP1
0000073d: DUP5
0000073e: SSTORE
0000073f: DUP4
00000740: SWAP1
00000741: DUP3
00000742: DUP1
00000743: ISZERO
00000744: DUP3
00000745: SWAP1
00000746: GT
00000747: PUSH2 0x04d1
0000074a: JUMPI
0000074b: PUSH1 0x00
0000074d: DUP4
0000074e: DUP2
0000074f: MSTORE
00000750: PUSH1 0x20
00000752: SWAP1
00000753: KECCAK256
00000754: PUSH2 0x04d1
00000757: SWAP2
00000758: DUP2
00000759: ADD
0000075a: SWAP1
0000075b: DUP4
0000075c: ADD
0000075d: PUSH2 0x026e
00000760: JUMP
00000761: UNKNOWN(0xB1)
00000762: UNKNOWN(0x0E)
00000763: UNKNOWN(0x2D)
00000764: MSTORE
00000765: PUSH23 0x12073b26eecdfd717e6a320cf44b4afac2b0732d9fcbe2
0000077d: UNKNOWN(0xB7)
0000077e: STATICCALL
0000077f: UNKNOWN(0x0C)
00000780: UNKNOWN(0xF6)

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x38588e09ea1795b2e907b63589b2147ffef8eac9b15f8f7ed8e3c242a80f20c3 call_targets: 0x288dcd4682d8f6b7fd849fb3dc9ba7fe57a8523e target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x38588e09ea1795b2e907b63589b2147ffef8eac9b15f8f7ed8e3c242a80f20c3", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x288dcd4682d8f6b7fd849fb3dc9ba7fe57a8523e" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x6a030ca9", "selector": "0x6a030ca9", "calldata_variants": [ "0x6a030ca9", "0x6a030ca90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa73c50fa", "selector": "0xa73c50fa", "calldata_variants": [ "0xa73c50fa", "0xa73c50fa0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf851a440", "selector": "0xf851a440", "calldata_variants": [ "0xf851a440", "0xf851a4400000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x06661abd", "selector": "0x06661abd", "calldata_variants": [ "0x06661abd", "0x06661abd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1a10cfc3", "selector": "0x1a10cfc3", "calldata_variants": [ "0x1a10cfc3", "0x1a10cfc30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x25010816", "selector": "0x25010816", "calldata_variants": [ "0x25010816", "0x250108160000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x41ee903e", "selector": "0x41ee903e", "calldata_variants": [ "0x41ee903e", "0x41ee903e0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x505fb46c", "selector": "0x505fb46c", "calldata_variants": [ "0x505fb46c", "0x505fb46c0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 232, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 394, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 471, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 4, "guards_detected": [], "untrusted_call_count": 4 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x38588e09ea1795b2e907b63589b2147ffef8eac9b15f8f7ed8e3c242a80f20c3 call_targets: 0x288dcd4682d8f6b7fd849fb3dc9ba7fe57a8523e target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x38588e09ea1795b2e907b63589b2147ffef8eac9b15f8f7ed8e3c242a80f20c3", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x288dcd4682d8f6b7fd849fb3dc9ba7fe57a8523e" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x6a030ca9", "selector": "0x6a030ca9", "calldata_variants": [ "0x6a030ca9", "0x6a030ca90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa73c50fa", "selector": "0xa73c50fa", "calldata_variants": [ "0xa73c50fa", "0xa73c50fa0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf851a440", "selector": "0xf851a440", "calldata_variants": [ "0xf851a440", "0xf851a4400000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x06661abd", "selector": "0x06661abd", "calldata_variants": [ "0x06661abd", "0x06661abd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1a10cfc3", "selector": "0x1a10cfc3", "calldata_variants": [ "0x1a10cfc3", "0x1a10cfc30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x25010816", "selector": "0x25010816", "calldata_variants": [ "0x25010816", "0x250108160000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x41ee903e", "selector": "0x41ee903e", "calldata_variants": [ "0x41ee903e", "0x41ee903e0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x505fb46c", "selector": "0x505fb46c", "calldata_variants": [ "0x505fb46c", "0x505fb46c0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 232, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 394, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 471, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 4, "guards_detected": [] }
medium	other	detector	CREATE/CREATE2 reachable	45	no	no	view trace_id: 0x8a71342c9803a5a447ca4be49b718a0a61bfbecc4089b56cd905b4434583f8e5 validation_json { "sink": "CREATE", "errors": 0, "status": "unknown", "attempts": 26, "trace_id": "0x8a71342c9803a5a447ca4be49b718a0a61bfbecc4089b56cd905b4434583f8e5", "confirmed": false, "trace_mode": "structLogs", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x6a030ca9", "selector": "0x6a030ca9", "calldata_variants": [ "0x6a030ca9", "0x6a030ca90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa73c50fa", "selector": "0xa73c50fa", "calldata_variants": [ "0xa73c50fa", "0xa73c50fa0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf851a440", "selector": "0xf851a440", "calldata_variants": [ "0xf851a440", "0xf851a4400000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x06661abd", "selector": "0x06661abd", "calldata_variants": [ "0x06661abd", "0x06661abd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1a10cfc3", "selector": "0x1a10cfc3", "calldata_variants": [ "0x1a10cfc3", "0x1a10cfc30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x25010816", "selector": "0x25010816", "calldata_variants": [ "0x25010816", "0x250108160000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x41ee903e", "selector": "0x41ee903e", "calldata_variants": [ "0x41ee903e", "0x41ee903e0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x505fb46c", "selector": "0x505fb46c", "calldata_variants": [ "0x505fb46c", "0x505fb46c0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "create_count": 1, "create2_count": 0 }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x38588e09ea1795b2e907b63589b2147ffef8eac9b15f8f7ed8e3c242a80f20c3

call_targets: 0x288dcd4682d8f6b7fd849fb3dc9ba7fe57a8523e

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x38588e09ea1795b2e907b63589b2147ffef8eac9b15f8f7ed8e3c242a80f20c3",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x288dcd4682d8f6b7fd849fb3dc9ba7fe57a8523e"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x6a030ca9",
            "selector": "0x6a030ca9",
            "calldata_variants": [
                "0x6a030ca9",
                "0x6a030ca90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa73c50fa",
            "selector": "0xa73c50fa",
            "calldata_variants": [
                "0xa73c50fa",
                "0xa73c50fa0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x06661abd",
            "selector": "0x06661abd",
            "calldata_variants": [
                "0x06661abd",
                "0x06661abd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1a10cfc3",
            "selector": "0x1a10cfc3",
            "calldata_variants": [
                "0x1a10cfc3",
                "0x1a10cfc30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x25010816",
            "selector": "0x25010816",
            "calldata_variants": [
                "0x25010816",
                "0x250108160000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41ee903e",
            "selector": "0x41ee903e",
            "calldata_variants": [
                "0x41ee903e",
                "0x41ee903e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x505fb46c",
            "selector": "0x505fb46c",
            "calldata_variants": [
                "0x505fb46c",
                "0x505fb46c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 232,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 394,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 471,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 4,
    "guards_detected": [],
    "untrusted_call_count": 4
}

high

other

detector

ETH value transfer possible

55

no

view

trace_id: 0x38588e09ea1795b2e907b63589b2147ffef8eac9b15f8f7ed8e3c242a80f20c3

call_targets: 0x288dcd4682d8f6b7fd849fb3dc9ba7fe57a8523e

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x38588e09ea1795b2e907b63589b2147ffef8eac9b15f8f7ed8e3c242a80f20c3",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x288dcd4682d8f6b7fd849fb3dc9ba7fe57a8523e"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x6a030ca9",
            "selector": "0x6a030ca9",
            "calldata_variants": [
                "0x6a030ca9",
                "0x6a030ca90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa73c50fa",
            "selector": "0xa73c50fa",
            "calldata_variants": [
                "0xa73c50fa",
                "0xa73c50fa0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x06661abd",
            "selector": "0x06661abd",
            "calldata_variants": [
                "0x06661abd",
                "0x06661abd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1a10cfc3",
            "selector": "0x1a10cfc3",
            "calldata_variants": [
                "0x1a10cfc3",
                "0x1a10cfc30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x25010816",
            "selector": "0x25010816",
            "calldata_variants": [
                "0x25010816",
                "0x250108160000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41ee903e",
            "selector": "0x41ee903e",
            "calldata_variants": [
                "0x41ee903e",
                "0x41ee903e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x505fb46c",
            "selector": "0x505fb46c",
            "calldata_variants": [
                "0x505fb46c",
                "0x505fb46c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 232,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 394,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 471,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 4,
    "guards_detected": []
}

medium

other

detector

CREATE/CREATE2 reachable

45

no

view

trace_id: 0x8a71342c9803a5a447ca4be49b718a0a61bfbecc4089b56cd905b4434583f8e5

validation_json

{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 26,
    "trace_id": "0x8a71342c9803a5a447ca4be49b718a0a61bfbecc4089b56cd905b4434583f8e5",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x6a030ca9",
            "selector": "0x6a030ca9",
            "calldata_variants": [
                "0x6a030ca9",
                "0x6a030ca90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa73c50fa",
            "selector": "0xa73c50fa",
            "calldata_variants": [
                "0xa73c50fa",
                "0xa73c50fa0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x06661abd",
            "selector": "0x06661abd",
            "calldata_variants": [
                "0x06661abd",
                "0x06661abd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1a10cfc3",
            "selector": "0x1a10cfc3",
            "calldata_variants": [
                "0x1a10cfc3",
                "0x1a10cfc30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x25010816",
            "selector": "0x25010816",
            "calldata_variants": [
                "0x25010816",
                "0x250108160000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41ee903e",
            "selector": "0x41ee903e",
            "calldata_variants": [
                "0x41ee903e",
                "0x41ee903e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x505fb46c",
            "selector": "0x505fb46c",
            "calldata_variants": [
                "0x505fb46c",
                "0x505fb46c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "create_count": 1,
    "create2_count": 0
}