019b3836-26cc-7101-9532-b2b482282cf4
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 981 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 982 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 108862 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 108863 | capability.graph | complete | 1 / 3 | 1 week ago |
| 108864 | detector.run | complete | 1 / 3 | 1 week ago |
| 108865 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0061 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x13af4035 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x0063 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x1b88094d 00000025: EQ 00000026: PUSH2 0x00a6 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x3bbed4a0 00000030: EQ 00000031: PUSH2 0x00b9 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x3ed48679 0000003b: EQ 0000003c: PUSH2 0x00fc 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0x651e723c 00000046: EQ 00000047: PUSH2 0x021c 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0x893d20e8 00000051: EQ 00000052: PUSH2 0x02e3 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0x93423e9c 0000005c: EQ 0000005d: PUSH2 0x02f7 00000060: JUMPI 00000061: JUMPDEST 00000062: STOP 00000063: JUMPDEST 00000064: PUSH2 0x0368 00000067: PUSH1 0x04 00000069: CALLDATALOAD 0000006a: PUSH1 0x00 0000006c: DUP1 0000006d: SLOAD 0000006e: CALLER 0000006f: PUSH1 0x01 00000071: PUSH1 0xa0 00000073: PUSH1 0x02 00000075: EXP 00000076: SUB 00000077: SWAP1 00000078: DUP2 00000079: AND 0000007a: SWAP2 0000007b: AND 0000007c: EQ 0000007d: ISZERO 0000007e: PUSH2 0x00a1 00000081: JUMPI 00000082: DUP1 00000083: SLOAD 00000084: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000099: NOT 0000009a: AND 0000009b: DUP3 0000009c: OR 0000009d: SWAP1 0000009e: SSTORE 0000009f: PUSH1 0x01 000000a1: JUMPDEST 000000a2: SWAP2 000000a3: SWAP1 000000a4: POP 000000a5: JUMP 000000a6: JUMPDEST 000000a7: PUSH2 0x037a 000000aa: PUSH1 0x01 000000ac: SLOAD 000000ad: PUSH1 0x01 000000af: PUSH1 0xa0 000000b1: PUSH1 0x02 000000b3: EXP 000000b4: SUB 000000b5: AND 000000b6: JUMPDEST 000000b7: SWAP1 000000b8: JUMP 000000b9: JUMPDEST 000000ba: PUSH2 0x0368 000000bd: PUSH1 0x04 000000bf: CALLDATALOAD 000000c0: PUSH1 0x00 000000c2: DUP1 000000c3: SLOAD 000000c4: CALLER 000000c5: PUSH1 0x01 000000c7: PUSH1 0xa0 000000c9: PUSH1 0x02 000000cb: EXP 000000cc: SUB 000000cd: SWAP1 000000ce: DUP2 000000cf: AND 000000d0: SWAP2 000000d1: AND 000000d2: EQ 000000d3: ISZERO 000000d4: PUSH2 0x00a1 000000d7: JUMPI 000000d8: POP 000000d9: PUSH1 0x01 000000db: DUP1 000000dc: SLOAD 000000dd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000f2: NOT 000000f3: AND 000000f4: DUP3 000000f5: OR 000000f6: DUP2 000000f7: SSTORE 000000f8: PUSH2 0x00a1 000000fb: JUMP 000000fc: JUMPDEST 000000fd: PUSH1 0x44 000000ff: CALLDATALOAD 00000100: PUSH1 0x04 00000102: DUP2 00000103: DUP2 00000104: ADD 00000105: CALLDATALOAD 00000106: PUSH1 0x20 00000108: DUP2 00000109: MUL 0000010a: PUSH1 0x80 0000010c: DUP2 0000010d: DUP2 0000010e: ADD 0000010f: PUSH1 0x40 00000111: MSTORE 00000112: PUSH1 0x60 00000114: DUP4 00000115: DUP2 00000116: MSTORE 00000117: PUSH2 0x0368 0000011a: SWAP6 0000011b: DUP6 0000011c: CALLDATALOAD 0000011d: SWAP6 0000011e: PUSH1 0x24 00000120: DUP1 00000121: CALLDATALOAD 00000122: SWAP7 00000123: SWAP2 00000124: SWAP6 00000125: PUSH1 0x64 00000127: SWAP6 00000128: SWAP4 00000129: SWAP1 0000012a: SWAP2 0000012b: ADD 0000012c: SWAP3 0000012d: DUP3 0000012e: SWAP2 0000012f: DUP5 00000130: SWAP1 00000131: DUP1 00000132: DUP3 00000133: DUP5 00000134: CALLDATACOPY 00000135: POP 00000136: POP 00000137: PUSH1 0x40 00000139: DUP1 0000013a: MLOAD 0000013b: SWAP7 0000013c: CALLDATALOAD 0000013d: DUP1 0000013e: DUP10 0000013f: ADD 00000140: CALLDATALOAD 00000141: PUSH1 0x20 00000143: DUP2 00000144: DUP2 00000145: MUL 00000146: DUP1 00000147: DUP12 00000148: ADD 00000149: DUP3 0000014a: ADD 0000014b: SWAP1 0000014c: SWAP5 0000014d: MSTORE 0000014e: DUP2 0000014f: DUP11 00000150: MSTORE 00000151: SWAP8 00000152: SWAP10 00000153: SWAP9 00000154: PUSH1 0x84 00000156: SWAP9 00000157: SWAP1 00000158: SWAP8 00000159: POP 0000015a: PUSH1 0x24 0000015c: SWAP3 0000015d: SWAP1 0000015e: SWAP3 0000015f: ADD 00000160: SWAP6 00000161: POP 00000162: SWAP4 00000163: POP 00000164: DUP4 00000165: SWAP3 00000166: POP 00000167: DUP6 00000168: ADD 00000169: SWAP1 0000016a: DUP5 0000016b: SWAP1 0000016c: DUP1 0000016d: DUP3 0000016e: DUP5 0000016f: CALLDATACOPY 00000170: POP 00000171: SWAP5 00000172: SWAP7 00000173: POP 00000174: POP 00000175: SWAP4 00000176: CALLDATALOAD 00000177: SWAP4 00000178: POP 00000179: POP 0000017a: PUSH1 0xa4 0000017c: CALLDATALOAD 0000017d: SWAP2 0000017e: POP 0000017f: POP 00000180: PUSH1 0x00 00000182: DUP1 00000183: SLOAD 00000184: DUP2 00000185: SWAP1 00000186: CALLER 00000187: PUSH1 0x01 00000189: PUSH1 0xa0 0000018b: PUSH1 0x02 0000018d: EXP 0000018e: SUB 0000018f: SWAP1 00000190: DUP2 00000191: AND 00000192: SWAP2 00000193: AND 00000194: EQ 00000195: ISZERO 00000196: PUSH2 0x038d 00000199: JUMPI 0000019a: POP 0000019b: PUSH1 0x40 0000019d: DUP1 0000019e: MLOAD 0000019f: PUSH1 0x01 000001a1: SLOAD 000001a2: PUSH32 0xbeabacc800000000000000000000000000000000000000000000000000000000 000001c3: DUP3 000001c4: MSTORE 000001c5: PUSH1 0x01 000001c7: PUSH1 0xa0 000001c9: PUSH1 0x02 000001cb: EXP 000001cc: SUB 000001cd: DUP1 000001ce: DUP12 000001cf: AND 000001d0: PUSH1 0x04 000001d2: DUP5 000001d3: ADD 000001d4: MSTORE 000001d5: DUP7 000001d6: DUP2 000001d7: AND 000001d8: PUSH1 0x24 000001da: DUP5 000001db: ADD 000001dc: MSTORE 000001dd: PUSH1 0x44 000001df: DUP4 000001e0: ADD 000001e1: DUP7 000001e2: SWAP1 000001e3: MSTORE 000001e4: SWAP3 000001e5: MLOAD 000001e6: SWAP3 000001e7: AND 000001e8: SWAP2 000001e9: DUP3 000001ea: SWAP2 000001eb: PUSH4 0xbeabacc8 000001f0: SWAP2 000001f1: PUSH1 0x64 000001f3: DUP3 000001f4: DUP2 000001f5: ADD 000001f6: SWAP3 000001f7: PUSH1 0x20 000001f9: SWAP3 000001fa: SWAP2 000001fb: SWAP1 000001fc: DUP3 000001fd: SWAP1 000001fe: SUB 000001ff: ADD 00000200: DUP2 00000201: DUP9 00000202: DUP8 00000203: PUSH2 0x61da 00000206: GAS 00000207: SUB 00000208: CALL 00000209: ISZERO 0000020a: PUSH2 0x0002 0000020d: JUMPI 0000020e: POP 0000020f: POP 00000210: PUSH1 0x40 00000212: MLOAD 00000213: MLOAD 00000214: SWAP3 00000215: POP 00000216: PUSH2 0x038d 00000219: SWAP1 0000021a: POP 0000021b: JUMP 0000021c: JUMPDEST 0000021d: PUSH1 0x44 0000021f: CALLDATALOAD 00000220: PUSH1 0x04 00000222: DUP2 00000223: DUP2 00000224: ADD 00000225: CALLDATALOAD 00000226: PUSH1 0x20 00000228: DUP2 00000229: MUL 0000022a: PUSH1 0x80 0000022c: DUP2 0000022d: DUP2 0000022e: ADD 0000022f: PUSH1 0x40 00000231: MSTORE 00000232: PUSH1 0x60 00000234: DUP4 00000235: DUP2 00000236: MSTORE 00000237: PUSH2 0x0368 0000023a: SWAP6 0000023b: DUP6 0000023c: CALLDATALOAD 0000023d: SWAP6 0000023e: PUSH1 0x24 00000240: DUP1 00000241: CALLDATALOAD 00000242: SWAP7 00000243: SWAP2 00000244: SWAP6 00000245: PUSH1 0x64 00000247: SWAP6 00000248: SWAP4 00000249: SWAP1 0000024a: SWAP2 0000024b: ADD 0000024c: SWAP3 0000024d: DUP3 0000024e: SWAP2 0000024f: DUP5 00000250: SWAP1 00000251: DUP1 00000252: DUP3 00000253: DUP5 00000254: CALLDATACOPY 00000255: POP 00000256: POP 00000257: PUSH1 0x40 00000259: DUP1 0000025a: MLOAD 0000025b: SWAP7 0000025c: CALLDATALOAD 0000025d: DUP1 0000025e: DUP10 0000025f: ADD 00000260: CALLDATALOAD 00000261: PUSH1 0x20 00000263: DUP2 00000264: DUP2 00000265: MUL 00000266: DUP1 00000267: DUP12 00000268: ADD 00000269: DUP3 0000026a: ADD 0000026b: SWAP1 0000026c: SWAP5 0000026d: MSTORE 0000026e: DUP2 0000026f: DUP11 00000270: MSTORE 00000271: SWAP8 00000272: SWAP10 00000273: SWAP9 00000274: PUSH1 0x84 00000276: SWAP9 00000277: SWAP1 00000278: SWAP8 00000279: POP 0000027a: PUSH1 0x24 0000027c: SWAP3 0000027d: SWAP1 0000027e: SWAP3 0000027f: ADD 00000280: SWAP6 00000281: POP 00000282: SWAP4 00000283: POP 00000284: DUP4 00000285: SWAP3 00000286: POP 00000287: DUP6 00000288: ADD 00000289: SWAP1 0000028a: DUP5 0000028b: SWAP1 0000028c: DUP1 0000028d: DUP3 0000028e: DUP5 0000028f: CALLDATACOPY 00000290: POP 00000291: POP 00000292: PUSH1 0x40 00000294: DUP1 00000295: MLOAD 00000296: PUSH1 0xa4 00000298: CALLDATALOAD 00000299: DUP1 0000029a: DUP11 0000029b: ADD 0000029c: CALLDATALOAD 0000029d: PUSH1 0x20 0000029f: DUP2 000002a0: DUP2 000002a1: MUL 000002a2: DUP5 000002a3: DUP2 000002a4: ADD 000002a5: DUP3 000002a6: ADD 000002a7: SWAP1 000002a8: SWAP6 000002a9: MSTORE 000002aa: DUP2 000002ab: DUP5 000002ac: MSTORE 000002ad: SWAP9 000002ae: SWAP11 000002af: SWAP10 000002b0: CALLDATALOAD 000002b1: SWAP10 000002b2: SWAP9 000002b3: PUSH1 0xc4 000002b5: SWAP9 000002b6: POP 000002b7: SWAP3 000002b8: SWAP7 000002b9: POP 000002ba: PUSH1 0x24 000002bc: SWAP2 000002bd: SWAP1 000002be: SWAP2 000002bf: ADD 000002c0: SWAP5 000002c1: POP 000002c2: SWAP3 000002c3: POP 000002c4: DUP3 000002c5: SWAP2 000002c6: SWAP1 000002c7: DUP6 000002c8: ADD 000002c9: SWAP1 000002ca: DUP5 000002cb: SWAP1 000002cc: DUP1 000002cd: DUP3 000002ce: DUP5 000002cf: CALLDATACOPY 000002d0: POP 000002d1: PUSH1 0x01 000002d3: SWAP14 000002d4: SWAP13 000002d5: POP 000002d6: POP 000002d7: POP 000002d8: POP 000002d9: POP 000002da: POP 000002db: POP 000002dc: POP 000002dd: POP 000002de: POP 000002df: POP 000002e0: POP 000002e1: POP 000002e2: JUMP 000002e3: JUMPDEST 000002e4: PUSH2 0x037a 000002e7: PUSH1 0x00 000002e9: SLOAD 000002ea: PUSH1 0x01 000002ec: PUSH1 0xa0 000002ee: PUSH1 0x02 000002f0: EXP 000002f1: SUB 000002f2: AND 000002f3: PUSH2 0x00b6 000002f6: JUMP 000002f7: JUMPDEST 000002f8: PUSH2 0x0368 000002fb: PUSH1 0x04 000002fd: CALLDATALOAD 000002fe: PUSH1 0x01 00000300: SLOAD 00000301: PUSH32 0x93423e9c00000000000000000000000000000000000000000000000000000000 00000322: PUSH1 0x60 00000324: SWAP1 00000325: DUP2 00000326: MSTORE 00000327: PUSH1 0x01 00000329: PUSH1 0xa0 0000032b: PUSH1 0x02 0000032d: EXP 0000032e: SUB 0000032f: DUP1 00000330: DUP5 00000331: AND 00000332: PUSH1 0x64 00000334: MSTORE 00000335: PUSH1 0x00 00000337: SWAP3 00000338: AND 00000339: SWAP1 0000033a: DUP3 0000033b: SWAP1 0000033c: DUP3 0000033d: SWAP1 0000033e: PUSH4 0x93423e9c 00000343: SWAP1 00000344: PUSH1 0x84 00000346: SWAP1 00000347: PUSH1 0x20 00000349: SWAP1 0000034a: PUSH1 0x24 0000034c: DUP2 0000034d: DUP8 0000034e: DUP8 0000034f: PUSH2 0x61da 00000352: GAS 00000353: SUB 00000354: CALL 00000355: ISZERO 00000356: PUSH2 0x0002 00000359: JUMPI 0000035a: POP 0000035b: POP 0000035c: PUSH1 0x40 0000035e: MLOAD 0000035f: MLOAD 00000360: SWAP6 00000361: SWAP5 00000362: POP 00000363: POP 00000364: POP 00000365: POP 00000366: POP 00000367: JUMP 00000368: JUMPDEST 00000369: PUSH1 0x40 0000036b: DUP1 0000036c: MLOAD 0000036d: SWAP2 0000036e: DUP3 0000036f: MSTORE 00000370: MLOAD 00000371: SWAP1 00000372: DUP2 00000373: SWAP1 00000374: SUB 00000375: PUSH1 0x20 00000377: ADD 00000378: SWAP1 00000379: RETURN 0000037a: JUMPDEST 0000037b: PUSH1 0x01 0000037d: PUSH1 0xa0 0000037f: PUSH1 0x02 00000381: EXP 00000382: SUB 00000383: AND 00000384: PUSH1 0x60 00000386: SWAP1 00000387: DUP2 00000388: MSTORE 00000389: PUSH1 0x20 0000038b: SWAP1 0000038c: RETURN 0000038d: JUMPDEST 0000038e: POP 0000038f: SWAP7 00000390: SWAP6 00000391: POP 00000392: POP 00000393: POP 00000394: POP 00000395: POP 00000396: POP 00000397: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x6b97bc0f7f948b411bf5220e83bbe8bab7b1d36b6e50cf6ac1acc28ebd54249a
call_targets:
0x759d0f38ba05d28892f3bf0e5cbdd806266fb4a4
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x6b97bc0f7f948b411bf5220e83bbe8bab7b1d36b6e50cf6ac1acc28ebd54249a",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x759d0f38ba05d28892f3bf0e5cbdd806266fb4a4"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x1b88094d",
"selector": "0x1b88094d",
"calldata_variants": [
"0x1b88094d",
"0x1b88094d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3bbed4a0",
"selector": "0x3bbed4a0",
"calldata_variants": [
"0x3bbed4a0",
"0x3bbed4a00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3ed48679",
"selector": "0x3ed48679",
"calldata_variants": [
"0x3ed48679",
"0x3ed486790000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x651e723c",
"selector": "0x651e723c",
"calldata_variants": [
"0x651e723c",
"0x651e723c0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x893d20e8",
"selector": "0x893d20e8",
"calldata_variants": [
"0x893d20e8",
"0x893d20e80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x93423e9c",
"selector": "0x93423e9c",
"calldata_variants": [
"0x93423e9c",
"0x93423e9c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 520,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 852,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "storage-derived"
}
],
"call_count": 2,
"guards_detected": [],
"untrusted_call_count": 2
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x6b97bc0f7f948b411bf5220e83bbe8bab7b1d36b6e50cf6ac1acc28ebd54249a
call_targets:
0x759d0f38ba05d28892f3bf0e5cbdd806266fb4a4
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x6b97bc0f7f948b411bf5220e83bbe8bab7b1d36b6e50cf6ac1acc28ebd54249a",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x759d0f38ba05d28892f3bf0e5cbdd806266fb4a4"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x1b88094d",
"selector": "0x1b88094d",
"calldata_variants": [
"0x1b88094d",
"0x1b88094d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3bbed4a0",
"selector": "0x3bbed4a0",
"calldata_variants": [
"0x3bbed4a0",
"0x3bbed4a00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3ed48679",
"selector": "0x3ed48679",
"calldata_variants": [
"0x3ed48679",
"0x3ed486790000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x651e723c",
"selector": "0x651e723c",
"calldata_variants": [
"0x651e723c",
"0x651e723c0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x893d20e8",
"selector": "0x893d20e8",
"calldata_variants": [
"0x893d20e8",
"0x893d20e80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x93423e9c",
"selector": "0x93423e9c",
"calldata_variants": [
"0x93423e9c",
"0x93423e9c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 520,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 852,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "storage-derived"
}
],
"eth_value_calls": 2,
"guards_detected": []
}
|