019b3836-2753-70af-9d86-ff73427c451a
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 1069 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 1070 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 44075 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 44076 | capability.graph | complete | 1 / 3 | 1 week ago |
| 44077 | detector.run | complete | 1 / 3 | 1 week ago |
| 44078 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x006c 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x13381fbf 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x006e 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x61203265 00000025: EQ 00000026: PUSH2 0x0086 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x705099b9 00000030: EQ 00000031: PUSH2 0x0098 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x83197ef0 0000003b: EQ 0000003c: PUSH2 0x00c4 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0xa977c71e 00000046: EQ 00000047: PUSH2 0x00ee 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xcebe09c9 00000051: EQ 00000052: PUSH2 0x0111 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0xec3a6f73 0000005c: EQ 0000005d: PUSH2 0x011a 00000060: JUMPI 00000061: DUP1 00000062: PUSH4 0xedca914c 00000067: EQ 00000068: PUSH2 0x0123 0000006b: JUMPI 0000006c: JUMPDEST 0000006d: STOP 0000006e: JUMPDEST 0000006f: PUSH2 0x013a 00000072: PUSH1 0x04 00000074: CALLDATALOAD 00000075: PUSH1 0x03 00000077: PUSH1 0x20 00000079: MSTORE 0000007a: PUSH1 0x00 0000007c: SWAP1 0000007d: DUP2 0000007e: MSTORE 0000007f: PUSH1 0x40 00000081: SWAP1 00000082: KECCAK256 00000083: SLOAD 00000084: DUP2 00000085: JUMP 00000086: JUMPDEST 00000087: PUSH2 0x014c 0000008a: PUSH1 0x00 0000008c: SLOAD 0000008d: PUSH1 0x01 0000008f: PUSH1 0xa0 00000091: PUSH1 0x02 00000093: EXP 00000094: SUB 00000095: AND 00000096: DUP2 00000097: JUMP 00000098: JUMPDEST 00000099: PUSH2 0x013a 0000009c: PUSH1 0x04 0000009e: CALLDATALOAD 0000009f: PUSH1 0x24 000000a1: CALLDATALOAD 000000a2: PUSH1 0x00 000000a4: DUP1 000000a5: SLOAD 000000a6: DUP2 000000a7: SWAP1 000000a8: PUSH1 0x01 000000aa: PUSH1 0xa0 000000ac: PUSH1 0x02 000000ae: EXP 000000af: SUB 000000b0: SWAP1 000000b1: DUP2 000000b2: AND 000000b3: CALLER 000000b4: SWAP2 000000b5: SWAP1 000000b6: SWAP2 000000b7: AND 000000b8: EQ 000000b9: PUSH2 0x01b6 000000bc: JUMPI 000000bd: JUMPDEST 000000be: POP 000000bf: SWAP3 000000c0: SWAP2 000000c1: POP 000000c2: POP 000000c3: JUMP 000000c4: JUMPDEST 000000c5: PUSH2 0x006c 000000c8: PUSH1 0x00 000000ca: SLOAD 000000cb: PUSH1 0x01 000000cd: PUSH1 0xa0 000000cf: PUSH1 0x02 000000d1: EXP 000000d2: SUB 000000d3: SWAP1 000000d4: DUP2 000000d5: AND 000000d6: CALLER 000000d7: SWAP2 000000d8: SWAP1 000000d9: SWAP2 000000da: AND 000000db: EQ 000000dc: ISZERO 000000dd: PUSH2 0x0281 000000e0: JUMPI 000000e1: PUSH1 0x00 000000e3: SLOAD 000000e4: PUSH1 0x01 000000e6: PUSH1 0xa0 000000e8: PUSH1 0x02 000000ea: EXP 000000eb: SUB 000000ec: AND 000000ed: SELFDESTRUCT 000000ee: JUMPDEST 000000ef: PUSH2 0x006c 000000f2: PUSH1 0x04 000000f4: CALLDATALOAD 000000f5: PUSH1 0x00 000000f7: SLOAD 000000f8: PUSH1 0x01 000000fa: PUSH1 0xa0 000000fc: PUSH1 0x02 000000fe: EXP 000000ff: SUB 00000100: SWAP1 00000101: DUP2 00000102: AND 00000103: CALLER 00000104: SWAP2 00000105: SWAP1 00000106: SWAP2 00000107: AND 00000108: EQ 00000109: PUSH2 0x0156 0000010c: JUMPI 0000010d: PUSH2 0x015c 00000110: JUMP 00000111: JUMPDEST 00000112: PUSH2 0x013a 00000115: PUSH1 0x01 00000117: SLOAD 00000118: DUP2 00000119: JUMP 0000011a: JUMPDEST 0000011b: PUSH2 0x013a 0000011e: PUSH1 0x02 00000120: SLOAD 00000121: DUP2 00000122: JUMP 00000123: JUMPDEST 00000124: PUSH2 0x013a 00000127: PUSH1 0x01 00000129: SLOAD 0000012a: PUSH1 0x02 0000012c: SLOAD 0000012d: PUSH1 0x00 0000012f: SWAP2 00000130: SWAP1 00000131: LT 00000132: PUSH2 0x015f 00000135: JUMPI 00000136: PUSH2 0x01b3 00000139: JUMP 0000013a: JUMPDEST 0000013b: PUSH1 0x40 0000013d: DUP1 0000013e: MLOAD 0000013f: SWAP2 00000140: DUP3 00000141: MSTORE 00000142: MLOAD 00000143: SWAP1 00000144: DUP2 00000145: SWAP1 00000146: SUB 00000147: PUSH1 0x20 00000149: ADD 0000014a: SWAP1 0000014b: RETURN 0000014c: JUMPDEST 0000014d: PUSH1 0x60 0000014f: SWAP1 00000150: DUP2 00000151: MSTORE 00000152: PUSH1 0x20 00000154: SWAP1 00000155: RETURN 00000156: JUMPDEST 00000157: PUSH1 0x01 00000159: DUP2 0000015a: SWAP1 0000015b: SSTORE 0000015c: JUMPDEST 0000015d: POP 0000015e: JUMP 0000015f: JUMPDEST 00000160: PUSH1 0x02 00000162: DUP1 00000163: SLOAD 00000164: PUSH1 0x01 00000166: ADD 00000167: SWAP1 00000168: SSTORE 00000169: PUSH1 0x01 0000016b: PUSH1 0xa0 0000016d: PUSH1 0x02 0000016f: EXP 00000170: SUB 00000171: CALLER 00000172: AND 00000173: DUP1 00000174: DUP3 00000175: MSTORE 00000176: PUSH1 0x03 00000178: PUSH1 0x20 0000017a: MSTORE 0000017b: PUSH1 0x40 0000017d: DUP1 0000017e: DUP4 0000017f: KECCAK256 00000180: CALLVALUE 00000181: SWAP1 00000182: DUP2 00000183: SWAP1 00000184: SSTORE 00000185: PUSH1 0x60 00000187: SWAP3 00000188: DUP4 00000189: MSTORE 0000018a: PUSH1 0x80 0000018c: MSTORE 0000018d: PUSH32 0xe1fffcc4923d04b559f4d29a8bfc6cda04eb5b0d3c460751c2402c5c5cc9109c 000001ae: SWAP2 000001af: LOG1 000001b0: POP 000001b1: PUSH1 0x01 000001b3: JUMPDEST 000001b4: SWAP1 000001b5: JUMP 000001b6: JUMPDEST 000001b7: PUSH1 0x01 000001b9: PUSH1 0xa0 000001bb: PUSH1 0x02 000001bd: EXP 000001be: SUB 000001bf: DUP5 000001c0: AND 000001c1: DUP2 000001c2: MSTORE 000001c3: PUSH1 0x03 000001c5: PUSH1 0x20 000001c7: MSTORE 000001c8: PUSH1 0x40 000001ca: DUP2 000001cb: KECCAK256 000001cc: SLOAD 000001cd: DUP4 000001ce: EQ 000001cf: ISZERO 000001d0: PUSH2 0x00bd 000001d3: JUMPI 000001d4: POP 000001d5: ADDRESS 000001d6: PUSH1 0x01 000001d8: PUSH1 0xa0 000001da: PUSH1 0x02 000001dc: EXP 000001dd: SUB 000001de: DUP2 000001df: AND 000001e0: BALANCE 000001e1: DUP4 000001e2: SWAP1 000001e3: LT 000001e4: PUSH2 0x00bd 000001e7: JUMPI 000001e8: PUSH1 0x01 000001ea: PUSH1 0xa0 000001ec: PUSH1 0x02 000001ee: EXP 000001ef: SUB 000001f0: DUP5 000001f1: AND 000001f2: DUP3 000001f3: DUP5 000001f4: PUSH1 0x60 000001f6: DUP3 000001f7: DUP2 000001f8: DUP2 000001f9: DUP2 000001fa: DUP6 000001fb: DUP9 000001fc: DUP4 000001fd: CALL 000001fe: POP 000001ff: POP 00000200: PUSH1 0x40 00000202: DUP1 00000203: MLOAD 00000204: SWAP4 00000205: DUP5 00000206: MSTORE 00000207: PUSH1 0x20 00000209: DUP5 0000020a: ADD 0000020b: SWAP2 0000020c: SWAP1 0000020d: SWAP2 0000020e: MSTORE 0000020f: DUP1 00000210: MLOAD 00000211: PUSH32 0xbb28353e4598c3b9199101a66e0989549b659a59a54d2c27fbb183f1932c8e6d 00000232: SWAP4 00000233: DUP2 00000234: SWAP1 00000235: SUB 00000236: SWAP1 00000237: SWAP2 00000238: ADD 00000239: SWAP2 0000023a: POP 0000023b: LOG1 0000023c: PUSH1 0x00 0000023e: PUSH1 0x03 00000240: PUSH1 0x00 00000242: POP 00000243: PUSH1 0x00 00000245: DUP7 00000246: PUSH1 0x01 00000248: PUSH1 0xa0 0000024a: PUSH1 0x02 0000024c: EXP 0000024d: SUB 0000024e: AND 0000024f: DUP2 00000250: MSTORE 00000251: PUSH1 0x20 00000253: ADD 00000254: SWAP1 00000255: DUP2 00000256: MSTORE 00000257: PUSH1 0x20 00000259: ADD 0000025a: PUSH1 0x00 0000025c: KECCAK256 0000025d: PUSH1 0x00 0000025f: POP 00000260: DUP2 00000261: SWAP1 00000262: SSTORE 00000263: POP 00000264: PUSH1 0x02 00000266: PUSH1 0x00 00000268: DUP2 00000269: DUP2 0000026a: POP 0000026b: SLOAD 0000026c: DUP1 0000026d: SWAP3 0000026e: SWAP2 0000026f: SWAP1 00000270: PUSH1 0x01 00000272: SWAP1 00000273: SUB 00000274: SWAP2 00000275: SWAP1 00000276: POP 00000277: SSTORE 00000278: POP 00000279: PUSH1 0x01 0000027b: SWAP2 0000027c: POP 0000027d: PUSH2 0x00bd 00000280: JUMP 00000281: JUMPDEST 00000282: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x3e4648223c6a5133bbe314541116fc8808d4415df7212932ec80140c481446de
call_targets:
0x91432862eefe4e4bb30269862c05f89cc4d32b64
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x3e4648223c6a5133bbe314541116fc8808d4415df7212932ec80140c481446de",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x91432862eefe4e4bb30269862c05f89cc4d32b64"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13381fbf",
"selector": "0x13381fbf",
"calldata_variants": [
"0x13381fbf",
"0x13381fbf0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x61203265",
"selector": "0x61203265",
"calldata_variants": [
"0x61203265",
"0x612032650000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x705099b9",
"selector": "0x705099b9",
"calldata_variants": [
"0x705099b9",
"0x705099b90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x83197ef0",
"selector": "0x83197ef0",
"calldata_variants": [
"0x83197ef0",
"0x83197ef00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa977c71e",
"selector": "0xa977c71e",
"calldata_variants": [
"0xa977c71e",
"0xa977c71e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcebe09c9",
"selector": "0xcebe09c9",
"calldata_variants": [
"0xcebe09c9",
"0xcebe09c90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xec3a6f73",
"selector": "0xec3a6f73",
"calldata_variants": [
"0xec3a6f73",
"0xec3a6f730000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xedca914c",
"selector": "0xedca914c",
"calldata_variants": [
"0xedca914c",
"0xedca914c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 509,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x3e4648223c6a5133bbe314541116fc8808d4415df7212932ec80140c481446de
call_targets:
0x91432862eefe4e4bb30269862c05f89cc4d32b64
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x3e4648223c6a5133bbe314541116fc8808d4415df7212932ec80140c481446de",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x91432862eefe4e4bb30269862c05f89cc4d32b64"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13381fbf",
"selector": "0x13381fbf",
"calldata_variants": [
"0x13381fbf",
"0x13381fbf0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x61203265",
"selector": "0x61203265",
"calldata_variants": [
"0x61203265",
"0x612032650000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x705099b9",
"selector": "0x705099b9",
"calldata_variants": [
"0x705099b9",
"0x705099b90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x83197ef0",
"selector": "0x83197ef0",
"calldata_variants": [
"0x83197ef0",
"0x83197ef00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa977c71e",
"selector": "0xa977c71e",
"calldata_variants": [
"0xa977c71e",
"0xa977c71e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcebe09c9",
"selector": "0xcebe09c9",
"calldata_variants": [
"0xcebe09c9",
"0xcebe09c90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xec3a6f73",
"selector": "0xec3a6f73",
"calldata_variants": [
"0xec3a6f73",
"0xec3a6f730000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xedca914c",
"selector": "0xedca914c",
"calldata_variants": [
"0xedca914c",
"0xedca914c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 509,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0xf4c9ec850d2e7266c13cf7d2fa990aa4f183f36ca64c52042f1183f33d008bd9
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 16,
"trace_id": "0xf4c9ec850d2e7266c13cf7d2fa990aa4f183f36ca64c52042f1183f33d008bd9",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13381fbf",
"selector": "0x13381fbf",
"calldata_variants": [
"0x13381fbf",
"0x13381fbf0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x61203265",
"selector": "0x61203265",
"calldata_variants": [
"0x61203265",
"0x612032650000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x705099b9",
"selector": "0x705099b9",
"calldata_variants": [
"0x705099b9",
"0x705099b90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x83197ef0",
"selector": "0x83197ef0",
"calldata_variants": [
"0x83197ef0",
"0x83197ef00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa977c71e",
"selector": "0xa977c71e",
"calldata_variants": [
"0xa977c71e",
"0xa977c71e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcebe09c9",
"selector": "0xcebe09c9",
"calldata_variants": [
"0xcebe09c9",
"0xcebe09c90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xec3a6f73",
"selector": "0xec3a6f73",
"calldata_variants": [
"0xec3a6f73",
"0xec3a6f730000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xedca914c",
"selector": "0xedca914c",
"calldata_variants": [
"0xedca914c",
"0xedca914c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|