019b3836-2898-732c-9003-9876c8d7ae86
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 1281 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 1282 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 78887 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 78888 | capability.graph | complete | 1 / 3 | 1 week ago |
| 78889 | detector.run | complete | 1 / 3 | 1 week ago |
| 78890 | validation.fork | complete | 1 / 3 | 1 week ago |
| 113588 | report.consolidate | complete | 1 / 6 | 1 week ago |
No slither job recorded yet.
OpenAI Codex v0.118.0 (research preview) -------- workdir: /tmp/codex-cl694vnm model: gpt-5.4 provider: openai approval: never sandbox: read-only reasoning effort: high reasoning summaries: none session id: 019d5c98-3f45-70b0-90a7-3390d98f7563 -------- user You are a security auditor. You ONLY have runtime bytecode + analysis artifacts. You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary, evidence bundle, callsites, storage slots, and detector findings. Special cases when reasoning from bytecode (be explicit about uncertainty): - Selector inference is best-effort; missing selectors are common. - Fallback/receive paths may be the only entrypoints. - CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage. - Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative. - Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown. - Guard detection is heuristic; absence of guards does NOT mean unguarded. - Returndata checking is unknown unless explicitly shown in evidence. - Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim. Output MUST be valid JSON matching the provided schema. - If you find nothing meaningful: set no_findings=true and findings=[]. - Otherwise: set no_findings=false and include findings with severity/category/title. - Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb". Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, accounting/invariant breaks, dangerous delegatecall, and untrusted external calls. Be conservative: if evidence is weak, mark severity low/medium and explain why. warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
{
"codex": {
"ran_at": "2026-04-05T07:42:56.423491+00:00",
"returncode": 1
},
"project": {
"mode": "bytecode",
"bytecode_length": 4098,
"bytecode_truncated": false,
"capability_graph_present": true,
"analysis_artifact_present": true
},
"summary": null,
"no_findings": null,
"schema_version": 1
}
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0056 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x27dc297e 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x0058 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x41c0e1b5 00000025: EQ 00000026: PUSH2 0x0169 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x6b3fdc5a 00000030: EQ 00000031: PUSH2 0x0190 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0xa2e62045 0000003b: EQ 0000003c: PUSH2 0x01d2 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0xb7764475 00000046: EQ 00000047: PUSH2 0x04db 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xd7c26adb 00000051: EQ 00000052: PUSH2 0x0539 00000055: JUMPI 00000056: JUMPDEST 00000057: STOP 00000058: JUMPDEST 00000059: PUSH1 0x40 0000005b: DUP1 0000005c: MLOAD 0000005d: PUSH1 0x20 0000005f: PUSH1 0x24 00000061: DUP1 00000062: CALLDATALOAD 00000063: PUSH1 0x04 00000065: DUP2 00000066: DUP2 00000067: ADD 00000068: CALLDATALOAD 00000069: PUSH1 0x1f 0000006b: DUP2 0000006c: ADD 0000006d: DUP6 0000006e: SWAP1 0000006f: DIV 00000070: DUP6 00000071: MUL 00000072: DUP7 00000073: ADD 00000074: DUP6 00000075: ADD 00000076: SWAP1 00000077: SWAP7 00000078: MSTORE 00000079: DUP6 0000007a: DUP6 0000007b: MSTORE 0000007c: PUSH2 0x0056 0000007f: SWAP6 00000080: DUP2 00000081: CALLDATALOAD 00000082: SWAP6 00000083: SWAP2 00000084: SWAP5 00000085: PUSH1 0x44 00000087: SWAP5 00000088: SWAP3 00000089: SWAP4 0000008a: SWAP1 0000008b: SWAP3 0000008c: ADD 0000008d: SWAP2 0000008e: DUP2 0000008f: SWAP1 00000090: DUP5 00000091: ADD 00000092: DUP4 00000093: DUP3 00000094: DUP1 00000095: DUP3 00000096: DUP5 00000097: CALLDATACOPY 00000098: POP 00000099: SWAP5 0000009a: SWAP7 0000009b: POP 0000009c: POP 0000009d: POP 0000009e: POP 0000009f: POP 000000a0: POP 000000a1: POP 000000a2: PUSH2 0x06c2 000000a5: PUSH1 0x40 000000a7: DUP1 000000a8: MLOAD 000000a9: PUSH1 0x00 000000ab: DUP1 000000ac: SLOAD 000000ad: PUSH1 0xe0 000000af: PUSH1 0x02 000000b1: EXP 000000b2: PUSH4 0x38cc4831 000000b7: MUL 000000b8: DUP4 000000b9: MSTORE 000000ba: SWAP3 000000bb: MLOAD 000000bc: SWAP1 000000bd: SWAP3 000000be: PUSH1 0x01 000000c0: PUSH1 0xa0 000000c2: PUSH1 0x02 000000c4: EXP 000000c5: SUB 000000c6: AND 000000c7: SWAP2 000000c8: PUSH4 0x38cc4831 000000cd: SWAP2 000000ce: PUSH1 0x04 000000d0: DUP3 000000d1: DUP2 000000d2: ADD 000000d3: SWAP3 000000d4: PUSH1 0x20 000000d6: SWAP3 000000d7: SWAP2 000000d8: SWAP1 000000d9: DUP3 000000da: SWAP1 000000db: SUB 000000dc: ADD 000000dd: DUP2 000000de: DUP8 000000df: DUP8 000000e0: PUSH2 0x61da 000000e3: GAS 000000e4: SUB 000000e5: CALL 000000e6: ISZERO 000000e7: PUSH2 0x0002 000000ea: JUMPI 000000eb: POP 000000ec: POP 000000ed: PUSH1 0x40 000000ef: DUP1 000000f0: MLOAD 000000f1: DUP1 000000f2: MLOAD 000000f3: PUSH1 0x01 000000f5: DUP1 000000f6: SLOAD 000000f7: PUSH1 0x01 000000f9: PUSH1 0xa0 000000fb: PUSH1 0x02 000000fd: EXP 000000fe: SUB 000000ff: NOT 00000100: AND 00000101: SWAP1 00000102: SWAP2 00000103: OR 00000104: SWAP1 00000105: DUP2 00000106: SWAP1 00000107: SSTORE 00000108: PUSH32 0xc281d19e00000000000000000000000000000000000000000000000000000000 00000129: DUP3 0000012a: MSTORE 0000012b: SWAP2 0000012c: MLOAD 0000012d: PUSH1 0x01 0000012f: PUSH1 0xa0 00000131: PUSH1 0x02 00000133: EXP 00000134: SUB 00000135: SWAP3 00000136: SWAP1 00000137: SWAP3 00000138: AND 00000139: SWAP3 0000013a: POP 0000013b: PUSH4 0xc281d19e 00000140: SWAP2 00000141: PUSH1 0x04 00000143: DUP3 00000144: DUP2 00000145: ADD 00000146: SWAP3 00000147: PUSH1 0x20 00000149: SWAP3 0000014a: SWAP2 0000014b: SWAP1 0000014c: DUP3 0000014d: SWAP1 0000014e: SUB 0000014f: ADD 00000150: DUP2 00000151: DUP8 00000152: DUP8 00000153: PUSH2 0x61da 00000156: GAS 00000157: SUB 00000158: CALL 00000159: ISZERO 0000015a: PUSH2 0x0002 0000015d: JUMPI 0000015e: POP 0000015f: POP 00000160: PUSH1 0x40 00000162: MLOAD 00000163: MLOAD 00000164: SWAP2 00000165: POP 00000166: POP 00000167: SWAP1 00000168: JUMP 00000169: JUMPDEST 0000016a: PUSH2 0x0056 0000016d: PUSH1 0x02 0000016f: SLOAD 00000170: PUSH1 0x01 00000172: PUSH1 0xa0 00000174: PUSH1 0x02 00000176: EXP 00000177: SUB 00000178: SWAP1 00000179: DUP2 0000017a: AND 0000017b: CALLER 0000017c: SWAP1 0000017d: SWAP2 0000017e: AND 0000017f: EQ 00000180: ISZERO 00000181: PUSH2 0x06c0 00000184: JUMPI 00000185: CALLER 00000186: PUSH1 0x01 00000188: PUSH1 0xa0 0000018a: PUSH1 0x02 0000018c: EXP 0000018d: SUB 0000018e: AND 0000018f: SELFDESTRUCT 00000190: JUMPDEST 00000191: PUSH2 0x060d 00000194: PUSH1 0x04 00000196: CALLDATALOAD 00000197: PUSH1 0x00 00000199: PUSH1 0xff 0000019b: DUP3 0000019c: AND 0000019d: PUSH1 0x01 0000019f: EQ 000001a0: ISZERO 000001a1: PUSH2 0x078a 000001a4: JUMPI 000001a5: DUP1 000001a6: SLOAD 000001a7: PUSH1 0x01 000001a9: PUSH1 0xa0 000001ab: PUSH1 0x02 000001ad: EXP 000001ae: SUB 000001af: NOT 000001b0: AND 000001b1: PUSH20 0x1d11e5eae3112dbd44f99266872ff1d07c77dce8 000001c6: OR 000001c7: DUP2 000001c8: SSTORE 000001c9: JUMPDEST 000001ca: POP 000001cb: PUSH1 0x01 000001cd: JUMPDEST 000001ce: SWAP2 000001cf: SWAP1 000001d0: POP 000001d1: JUMP 000001d2: JUMPDEST 000001d3: PUSH2 0x0056 000001d6: JUMPDEST 000001d7: PUSH1 0x40 000001d9: DUP1 000001da: MLOAD 000001db: DUP1 000001dc: DUP3 000001dd: ADD 000001de: DUP3 000001df: MSTORE 000001e0: PUSH1 0x03 000001e2: DUP2 000001e3: MSTORE 000001e4: PUSH32 0x55524c0000000000000000000000000000000000000000000000000000000000 00000205: PUSH1 0x20 00000207: DUP3 00000208: DUP2 00000209: ADD 0000020a: SWAP2 0000020b: SWAP1 0000020c: SWAP2 0000020d: MSTORE 0000020e: DUP3 0000020f: MLOAD 00000210: PUSH1 0x80 00000212: DUP2 00000213: ADD 00000214: DUP5 00000215: MSTORE 00000216: PUSH1 0x4c 00000218: DUP2 00000219: MSTORE 0000021a: PUSH32 0x6a736f6e2868747470733a2f2f6170692e6b72616b656e2e636f6d2f302f7075 0000023b: DUP2 0000023c: DUP4 0000023d: ADD 0000023e: MSTORE 0000023f: PUSH32 0x626c69632f5469636b65723f706169723d455448584254292e726573756c742e 00000260: DUP2 00000261: DUP6 00000262: ADD 00000263: MSTORE 00000264: PUSH32 0x58455448585842542e632e300000000000000000000000000000000000000000 00000285: PUSH1 0x60 00000287: DUP3 00000288: ADD 00000289: MSTORE 0000028a: DUP4 0000028b: MLOAD 0000028c: PUSH1 0x00 0000028e: DUP1 0000028f: SLOAD 00000290: PUSH1 0xe0 00000292: PUSH1 0x02 00000294: EXP 00000295: PUSH4 0x38cc4831 0000029a: MUL 0000029b: DUP4 0000029c: MSTORE 0000029d: SWAP6 0000029e: MLOAD 0000029f: PUSH2 0x060a 000002a2: SWAP7 000002a3: PUSH1 0x3c 000002a5: SWAP7 000002a6: SWAP6 000002a7: SWAP3 000002a8: SWAP4 000002a9: PUSH1 0x01 000002ab: PUSH1 0xa0 000002ad: PUSH1 0x02 000002af: EXP 000002b0: SUB 000002b1: SWAP2 000002b2: SWAP1 000002b3: SWAP2 000002b4: AND 000002b5: SWAP3 000002b6: PUSH4 0x38cc4831 000002bb: SWAP3 000002bc: PUSH1 0x04 000002be: DUP4 000002bf: DUP2 000002c0: ADD 000002c1: SWAP4 000002c2: DUP3 000002c3: SWAP1 000002c4: SUB 000002c5: ADD 000002c6: DUP2 000002c7: DUP8 000002c8: DUP8 000002c9: PUSH2 0x61da 000002cc: GAS 000002cd: SUB 000002ce: CALL 000002cf: ISZERO 000002d0: PUSH2 0x0002 000002d3: JUMPI 000002d4: POP 000002d5: POP 000002d6: POP 000002d7: PUSH1 0x40 000002d9: MLOAD 000002da: DUP1 000002db: MLOAD 000002dc: SWAP1 000002dd: PUSH1 0x20 000002df: ADD 000002e0: POP 000002e1: PUSH1 0x01 000002e3: PUSH1 0x00 000002e5: PUSH2 0x0100 000002e8: EXP 000002e9: DUP2 000002ea: SLOAD 000002eb: DUP2 000002ec: PUSH1 0x01 000002ee: PUSH1 0xa0 000002f0: PUSH1 0x02 000002f2: EXP 000002f3: SUB 000002f4: MUL 000002f5: NOT 000002f6: AND 000002f7: SWAP1 000002f8: DUP4 000002f9: MUL 000002fa: OR 000002fb: SWAP1 000002fc: SSTORE 000002fd: POP 000002fe: PUSH1 0x01 00000300: PUSH1 0x00 00000302: SWAP1 00000303: SLOAD 00000304: SWAP1 00000305: PUSH2 0x0100 00000308: EXP 00000309: SWAP1 0000030a: DIV 0000030b: PUSH1 0x01 0000030d: PUSH1 0xa0 0000030f: PUSH1 0x02 00000311: EXP 00000312: SUB 00000313: AND 00000314: PUSH1 0x01 00000316: PUSH1 0xa0 00000318: PUSH1 0x02 0000031a: EXP 0000031b: SUB 0000031c: AND 0000031d: PUSH4 0xadf59f99 00000322: PUSH1 0x01 00000324: PUSH1 0x00 00000326: SWAP1 00000327: SLOAD 00000328: SWAP1 00000329: PUSH2 0x0100 0000032c: EXP 0000032d: SWAP1 0000032e: DIV 0000032f: PUSH1 0x01 00000331: PUSH1 0xa0 00000333: PUSH1 0x02 00000335: EXP 00000336: SUB 00000337: AND 00000338: PUSH1 0x01 0000033a: PUSH1 0xa0 0000033c: PUSH1 0x02 0000033e: EXP 0000033f: SUB 00000340: AND 00000341: PUSH4 0x524f3889 00000346: DUP7 00000347: PUSH1 0x40 00000349: MLOAD 0000034a: DUP3 0000034b: PUSH1 0xe0 0000034d: PUSH1 0x02 0000034f: EXP 00000350: MUL 00000351: DUP2 00000352: MSTORE 00000353: PUSH1 0x04 00000355: ADD 00000356: DUP1 00000357: DUP1 00000358: PUSH1 0x20 0000035a: ADD 0000035b: DUP3 0000035c: DUP2 0000035d: SUB 0000035e: DUP3 0000035f: MSTORE 00000360: DUP4 00000361: DUP2 00000362: DUP2 00000363: MLOAD 00000364: DUP2 00000365: MSTORE 00000366: PUSH1 0x20 00000368: ADD 00000369: SWAP2 0000036a: POP 0000036b: DUP1 0000036c: MLOAD 0000036d: SWAP1 0000036e: PUSH1 0x20 00000370: ADD 00000371: SWAP1 00000372: DUP1 00000373: DUP4 00000374: DUP4 00000375: DUP3 00000376: SWAP1 00000377: PUSH1 0x00 00000379: PUSH1 0x04 0000037b: PUSH1 0x20 0000037d: DUP5 0000037e: PUSH1 0x1f 00000380: ADD 00000381: DIV 00000382: PUSH1 0x03 00000384: MUL 00000385: PUSH1 0x0f 00000387: ADD 00000388: CALL 00000389: POP 0000038a: SWAP1 0000038b: POP 0000038c: SWAP1 0000038d: DUP2 0000038e: ADD 0000038f: SWAP1 00000390: PUSH1 0x1f 00000392: AND 00000393: DUP1 00000394: ISZERO 00000395: PUSH2 0x03b2 00000398: JUMPI 00000399: DUP1 0000039a: DUP3 0000039b: SUB 0000039c: DUP1 0000039d: MLOAD 0000039e: PUSH1 0x01 000003a0: DUP4 000003a1: PUSH1 0x20 000003a3: SUB 000003a4: PUSH2 0x0100 000003a7: EXP 000003a8: SUB 000003a9: NOT 000003aa: AND 000003ab: DUP2 000003ac: MSTORE 000003ad: PUSH1 0x20 000003af: ADD 000003b0: SWAP2 000003b1: POP 000003b2: JUMPDEST 000003b3: POP 000003b4: SWAP3 000003b5: POP 000003b6: POP 000003b7: POP 000003b8: PUSH1 0x20 000003ba: PUSH1 0x40 000003bc: MLOAD 000003bd: DUP1 000003be: DUP4 000003bf: SUB 000003c0: DUP2 000003c1: PUSH1 0x00 000003c3: DUP8 000003c4: PUSH2 0x61da 000003c7: GAS 000003c8: SUB 000003c9: CALL 000003ca: ISZERO 000003cb: PUSH2 0x0002 000003ce: JUMPI 000003cf: POP 000003d0: POP 000003d1: POP 000003d2: PUSH1 0x40 000003d4: MLOAD 000003d5: DUP1 000003d6: MLOAD 000003d7: SWAP1 000003d8: PUSH1 0x20 000003da: ADD 000003db: POP 000003dc: DUP7 000003dd: DUP7 000003de: DUP7 000003df: PUSH1 0x40 000003e1: MLOAD 000003e2: DUP6 000003e3: PUSH1 0xe0 000003e5: PUSH1 0x02 000003e7: EXP 000003e8: MUL 000003e9: DUP2 000003ea: MSTORE 000003eb: PUSH1 0x04 000003ed: ADD 000003ee: DUP1 000003ef: DUP5 000003f0: DUP2 000003f1: MSTORE 000003f2: PUSH1 0x20 000003f4: ADD 000003f5: DUP1 000003f6: PUSH1 0x20 000003f8: ADD 000003f9: DUP1 000003fa: PUSH1 0x20 000003fc: ADD 000003fd: DUP4 000003fe: DUP2 000003ff: SUB 00000400: DUP4 00000401: MSTORE 00000402: DUP6 00000403: DUP2 00000404: DUP2 00000405: MLOAD 00000406: DUP2 00000407: MSTORE 00000408: PUSH1 0x20 0000040a: ADD 0000040b: SWAP2 0000040c: POP 0000040d: DUP1 0000040e: MLOAD 0000040f: SWAP1 00000410: PUSH1 0x20 00000412: ADD 00000413: SWAP1 00000414: DUP1 00000415: DUP4 00000416: DUP4 00000417: DUP3 00000418: SWAP1 00000419: PUSH1 0x00 0000041b: PUSH1 0x04 0000041d: PUSH1 0x20 0000041f: DUP5 00000420: PUSH1 0x1f 00000422: ADD 00000423: DIV 00000424: PUSH1 0x03 00000426: MUL 00000427: PUSH1 0x0f 00000429: ADD 0000042a: CALL 0000042b: POP 0000042c: SWAP1 0000042d: POP 0000042e: SWAP1 0000042f: DUP2 00000430: ADD 00000431: SWAP1 00000432: PUSH1 0x1f 00000434: AND 00000435: DUP1 00000436: ISZERO 00000437: PUSH2 0x0454 0000043a: JUMPI 0000043b: DUP1 0000043c: DUP3 0000043d: SUB 0000043e: DUP1 0000043f: MLOAD 00000440: PUSH1 0x01 00000442: DUP4 00000443: PUSH1 0x20 00000445: SUB 00000446: PUSH2 0x0100 00000449: EXP 0000044a: SUB 0000044b: NOT 0000044c: AND 0000044d: DUP2 0000044e: MSTORE 0000044f: PUSH1 0x20 00000451: ADD 00000452: SWAP2 00000453: POP 00000454: JUMPDEST 00000455: POP 00000456: DUP4 00000457: DUP2 00000458: SUB 00000459: DUP3 0000045a: MSTORE 0000045b: DUP5 0000045c: DUP2 0000045d: DUP2 0000045e: MLOAD 0000045f: DUP2 00000460: MSTORE 00000461: PUSH1 0x20 00000463: ADD 00000464: SWAP2 00000465: POP 00000466: DUP1 00000467: MLOAD 00000468: SWAP1 00000469: PUSH1 0x20 0000046b: ADD 0000046c: SWAP1 0000046d: DUP1 0000046e: DUP4 0000046f: DUP4 00000470: DUP3 00000471: SWAP1 00000472: PUSH1 0x00 00000474: PUSH1 0x04 00000476: PUSH1 0x20 00000478: DUP5 00000479: PUSH1 0x1f 0000047b: ADD 0000047c: DIV 0000047d: PUSH1 0x03 0000047f: MUL 00000480: PUSH1 0x0f 00000482: ADD 00000483: CALL 00000484: POP 00000485: SWAP1 00000486: POP 00000487: SWAP1 00000488: DUP2 00000489: ADD 0000048a: SWAP1 0000048b: PUSH1 0x1f 0000048d: AND 0000048e: DUP1 0000048f: ISZERO 00000490: PUSH2 0x04ad 00000493: JUMPI 00000494: DUP1 00000495: DUP3 00000496: SUB 00000497: DUP1 00000498: MLOAD 00000499: PUSH1 0x01 0000049b: DUP4 0000049c: PUSH1 0x20 0000049e: SUB 0000049f: PUSH2 0x0100 000004a2: EXP 000004a3: SUB 000004a4: NOT 000004a5: AND 000004a6: DUP2 000004a7: MSTORE 000004a8: PUSH1 0x20 000004aa: ADD 000004ab: SWAP2 000004ac: POP 000004ad: JUMPDEST 000004ae: POP 000004af: SWAP6 000004b0: POP 000004b1: POP 000004b2: POP 000004b3: POP 000004b4: POP 000004b5: POP 000004b6: PUSH1 0x20 000004b8: PUSH1 0x40 000004ba: MLOAD 000004bb: DUP1 000004bc: DUP4 000004bd: SUB 000004be: DUP2 000004bf: DUP6 000004c0: DUP9 000004c1: PUSH2 0x8502 000004c4: GAS 000004c5: SUB 000004c6: CALL 000004c7: ISZERO 000004c8: PUSH2 0x0002 000004cb: JUMPI 000004cc: POP 000004cd: POP 000004ce: PUSH1 0x40 000004d0: MLOAD 000004d1: MLOAD 000004d2: SWAP7 000004d3: SWAP6 000004d4: POP 000004d5: POP 000004d6: POP 000004d7: POP 000004d8: POP 000004d9: POP 000004da: JUMP 000004db: JUMPDEST 000004dc: PUSH1 0x40 000004de: DUP1 000004df: MLOAD 000004e0: PUSH1 0x03 000004e2: DUP1 000004e3: SLOAD 000004e4: PUSH1 0x20 000004e6: PUSH1 0x02 000004e8: PUSH1 0x01 000004ea: DUP4 000004eb: AND 000004ec: ISZERO 000004ed: PUSH2 0x0100 000004f0: MUL 000004f1: PUSH1 0x00 000004f3: NOT 000004f4: ADD 000004f5: SWAP1 000004f6: SWAP3 000004f7: AND 000004f8: SWAP2 000004f9: SWAP1 000004fa: SWAP2 000004fb: DIV 000004fc: PUSH1 0x1f 000004fe: DUP2 000004ff: ADD 00000500: DUP3 00000501: SWAP1 00000502: DIV 00000503: DUP3 00000504: MUL 00000505: DUP5 00000506: ADD 00000507: DUP3 00000508: ADD 00000509: SWAP1 0000050a: SWAP5 0000050b: MSTORE 0000050c: DUP4 0000050d: DUP4 0000050e: MSTORE 0000050f: PUSH2 0x061f 00000512: SWAP4 00000513: SWAP1 00000514: DUP4 00000515: ADD 00000516: DUP3 00000517: DUP3 00000518: DUP1 00000519: ISZERO 0000051a: PUSH2 0x06b8 0000051d: JUMPI 0000051e: DUP1 0000051f: PUSH1 0x1f 00000521: LT 00000522: PUSH2 0x068d 00000525: JUMPI 00000526: PUSH2 0x0100 00000529: DUP1 0000052a: DUP4 0000052b: SLOAD 0000052c: DIV 0000052d: MUL 0000052e: DUP4 0000052f: MSTORE 00000530: SWAP2 00000531: PUSH1 0x20 00000533: ADD 00000534: SWAP2 00000535: PUSH2 0x06b8 00000538: JUMP 00000539: JUMPDEST 0000053a: PUSH2 0x0056 0000053d: PUSH1 0x04 0000053f: CALLDATALOAD 00000540: PUSH1 0x00 00000542: PUSH1 0x00 00000544: SWAP1 00000545: SLOAD 00000546: SWAP1 00000547: PUSH2 0x0100 0000054a: EXP 0000054b: SWAP1 0000054c: DIV 0000054d: PUSH1 0x01 0000054f: PUSH1 0xa0 00000551: PUSH1 0x02 00000553: EXP 00000554: SUB 00000555: AND 00000556: PUSH1 0x01 00000558: PUSH1 0xa0 0000055a: PUSH1 0x02 0000055c: EXP 0000055d: SUB 0000055e: AND 0000055f: PUSH4 0x38cc4831 00000564: PUSH1 0x40 00000566: MLOAD 00000567: DUP2 00000568: PUSH1 0xe0 0000056a: PUSH1 0x02 0000056c: EXP 0000056d: MUL 0000056e: DUP2 0000056f: MSTORE 00000570: PUSH1 0x04 00000572: ADD 00000573: DUP1 00000574: SWAP1 00000575: POP 00000576: PUSH1 0x20 00000578: PUSH1 0x40 0000057a: MLOAD 0000057b: DUP1 0000057c: DUP4 0000057d: SUB 0000057e: DUP2 0000057f: PUSH1 0x00 00000581: DUP8 00000582: PUSH2 0x61da 00000585: GAS 00000586: SUB 00000587: CALL 00000588: ISZERO 00000589: PUSH2 0x0002 0000058c: JUMPI 0000058d: POP 0000058e: POP 0000058f: PUSH1 0x40 00000591: DUP1 00000592: MLOAD 00000593: DUP1 00000594: MLOAD 00000595: PUSH1 0x01 00000597: DUP1 00000598: SLOAD 00000599: PUSH1 0x01 0000059b: PUSH1 0xa0 0000059d: PUSH1 0x02 0000059f: EXP 000005a0: SUB 000005a1: NOT 000005a2: AND 000005a3: SWAP1 000005a4: SWAP2 000005a5: OR 000005a6: SWAP1 000005a7: DUP2 000005a8: SWAP1 000005a9: SSTORE 000005aa: PUSH32 0x688dcfd700000000000000000000000000000000000000000000000000000000 000005cb: DUP3 000005cc: MSTORE 000005cd: PUSH1 0x04 000005cf: DUP3 000005d0: ADD 000005d1: DUP6 000005d2: SWAP1 000005d3: MSTORE 000005d4: SWAP2 000005d5: MLOAD 000005d6: PUSH1 0x01 000005d8: PUSH1 0xa0 000005da: PUSH1 0x02 000005dc: EXP 000005dd: SUB 000005de: SWAP3 000005df: SWAP1 000005e0: SWAP3 000005e1: AND 000005e2: SWAP3 000005e3: POP 000005e4: PUSH4 0x688dcfd7 000005e9: SWAP2 000005ea: PUSH1 0x24 000005ec: DUP3 000005ed: DUP2 000005ee: ADD 000005ef: SWAP3 000005f0: PUSH1 0x00 000005f2: SWAP3 000005f3: SWAP2 000005f4: SWAP1 000005f5: DUP3 000005f6: SWAP1 000005f7: SUB 000005f8: ADD 000005f9: DUP2 000005fa: DUP4 000005fb: DUP8 000005fc: PUSH2 0x61da 000005ff: GAS 00000600: SUB 00000601: CALL 00000602: ISZERO 00000603: PUSH2 0x0002 00000606: JUMPI 00000607: POP 00000608: POP 00000609: POP 0000060a: JUMPDEST 0000060b: POP 0000060c: JUMP 0000060d: JUMPDEST 0000060e: PUSH1 0x40 00000610: DUP1 00000611: MLOAD 00000612: SWAP2 00000613: DUP3 00000614: MSTORE 00000615: MLOAD 00000616: SWAP1 00000617: DUP2 00000618: SWAP1 00000619: SUB 0000061a: PUSH1 0x20 0000061c: ADD 0000061d: SWAP1 0000061e: RETURN 0000061f: JUMPDEST 00000620: PUSH1 0x40 00000622: MLOAD 00000623: DUP1 00000624: DUP1 00000625: PUSH1 0x20 00000627: ADD 00000628: DUP3 00000629: DUP2 0000062a: SUB 0000062b: DUP3 0000062c: MSTORE 0000062d: DUP4 0000062e: DUP2 0000062f: DUP2 00000630: MLOAD 00000631: DUP2 00000632: MSTORE 00000633: PUSH1 0x20 00000635: ADD 00000636: SWAP2 00000637: POP 00000638: DUP1 00000639: MLOAD 0000063a: SWAP1 0000063b: PUSH1 0x20 0000063d: ADD 0000063e: SWAP1 0000063f: DUP1 00000640: DUP4 00000641: DUP4 00000642: DUP3 00000643: SWAP1 00000644: PUSH1 0x00 00000646: PUSH1 0x04 00000648: PUSH1 0x20 0000064a: DUP5 0000064b: PUSH1 0x1f 0000064d: ADD 0000064e: DIV 0000064f: PUSH1 0x03 00000651: MUL 00000652: PUSH1 0x0f 00000654: ADD 00000655: CALL 00000656: POP 00000657: SWAP1 00000658: POP 00000659: SWAP1 0000065a: DUP2 0000065b: ADD 0000065c: SWAP1 0000065d: PUSH1 0x1f 0000065f: AND 00000660: DUP1 00000661: ISZERO 00000662: PUSH2 0x067f 00000665: JUMPI 00000666: DUP1 00000667: DUP3 00000668: SUB 00000669: DUP1 0000066a: MLOAD 0000066b: PUSH1 0x01 0000066d: DUP4 0000066e: PUSH1 0x20 00000670: SUB 00000671: PUSH2 0x0100 00000674: EXP 00000675: SUB 00000676: NOT 00000677: AND 00000678: DUP2 00000679: MSTORE 0000067a: PUSH1 0x20 0000067c: ADD 0000067d: SWAP2 0000067e: POP 0000067f: JUMPDEST 00000680: POP 00000681: SWAP3 00000682: POP 00000683: POP 00000684: POP 00000685: PUSH1 0x40 00000687: MLOAD 00000688: DUP1 00000689: SWAP2 0000068a: SUB 0000068b: SWAP1 0000068c: RETURN 0000068d: JUMPDEST 0000068e: DUP3 0000068f: ADD 00000690: SWAP2 00000691: SWAP1 00000692: PUSH1 0x00 00000694: MSTORE 00000695: PUSH1 0x20 00000697: PUSH1 0x00 00000699: KECCAK256 0000069a: SWAP1 0000069b: JUMPDEST 0000069c: DUP2 0000069d: SLOAD 0000069e: DUP2 0000069f: MSTORE 000006a0: SWAP1 000006a1: PUSH1 0x01 000006a3: ADD 000006a4: SWAP1 000006a5: PUSH1 0x20 000006a7: ADD 000006a8: DUP1 000006a9: DUP4 000006aa: GT 000006ab: PUSH2 0x069b 000006ae: JUMPI 000006af: DUP3 000006b0: SWAP1 000006b1: SUB 000006b2: PUSH1 0x1f 000006b4: AND 000006b5: DUP3 000006b6: ADD 000006b7: SWAP2 000006b8: JUMPDEST 000006b9: POP 000006ba: POP 000006bb: POP 000006bc: POP 000006bd: POP 000006be: DUP2 000006bf: JUMP 000006c0: JUMPDEST 000006c1: JUMP 000006c2: JUMPDEST 000006c3: PUSH1 0x01 000006c5: PUSH1 0xa0 000006c7: PUSH1 0x02 000006c9: EXP 000006ca: SUB 000006cb: AND 000006cc: CALLER 000006cd: PUSH1 0x01 000006cf: PUSH1 0xa0 000006d1: PUSH1 0x02 000006d3: EXP 000006d4: SUB 000006d5: AND 000006d6: EQ 000006d7: ISZERO 000006d8: ISZERO 000006d9: PUSH2 0x06e1 000006dc: JUMPI 000006dd: PUSH2 0x0002 000006e0: JUMP 000006e1: JUMPDEST 000006e2: DUP1 000006e3: PUSH1 0x03 000006e5: PUSH1 0x00 000006e7: POP 000006e8: SWAP1 000006e9: DUP1 000006ea: MLOAD 000006eb: SWAP1 000006ec: PUSH1 0x20 000006ee: ADD 000006ef: SWAP1 000006f0: DUP3 000006f1: DUP1 000006f2: SLOAD 000006f3: PUSH1 0x01 000006f5: DUP2 000006f6: PUSH1 0x01 000006f8: AND 000006f9: ISZERO 000006fa: PUSH2 0x0100 000006fd: MUL 000006fe: SUB 000006ff: AND 00000700: PUSH1 0x02 00000702: SWAP1 00000703: DIV 00000704: SWAP1 00000705: PUSH1 0x00 00000707: MSTORE 00000708: PUSH1 0x20 0000070a: PUSH1 0x00 0000070c: KECCAK256 0000070d: SWAP1 0000070e: PUSH1 0x1f 00000710: ADD 00000711: PUSH1 0x20 00000713: SWAP1 00000714: DIV 00000715: DUP2 00000716: ADD 00000717: SWAP3 00000718: DUP3 00000719: PUSH1 0x1f 0000071b: LT 0000071c: PUSH2 0x0748 0000071f: JUMPI 00000720: DUP1 00000721: MLOAD 00000722: PUSH1 0xff 00000724: NOT 00000725: AND 00000726: DUP4 00000727: DUP1 00000728: ADD 00000729: OR 0000072a: DUP6 0000072b: SSTORE 0000072c: JUMPDEST 0000072d: POP 0000072e: PUSH2 0x0778 00000731: SWAP3 00000732: SWAP2 00000733: POP 00000734: JUMPDEST 00000735: DUP1 00000736: DUP3 00000737: GT 00000738: ISZERO 00000739: PUSH2 0x0782 0000073c: JUMPI 0000073d: PUSH1 0x00 0000073f: DUP2 00000740: SSTORE 00000741: PUSH1 0x01 00000743: ADD 00000744: PUSH2 0x0734 00000747: JUMP 00000748: JUMPDEST 00000749: DUP3 0000074a: DUP1 0000074b: ADD 0000074c: PUSH1 0x01 0000074e: ADD 0000074f: DUP6 00000750: SSTORE 00000751: DUP3 00000752: ISZERO 00000753: PUSH2 0x072c 00000756: JUMPI 00000757: SWAP2 00000758: DUP3 00000759: ADD 0000075a: JUMPDEST 0000075b: DUP3 0000075c: DUP2 0000075d: GT 0000075e: ISZERO 0000075f: PUSH2 0x072c 00000762: JUMPI 00000763: DUP3 00000764: MLOAD 00000765: DUP3 00000766: PUSH1 0x00 00000768: POP 00000769: SSTORE 0000076a: SWAP2 0000076b: PUSH1 0x20 0000076d: ADD 0000076e: SWAP2 0000076f: SWAP1 00000770: PUSH1 0x01 00000772: ADD 00000773: SWAP1 00000774: PUSH2 0x075a 00000777: JUMP 00000778: JUMPDEST 00000779: POP 0000077a: POP 0000077b: PUSH2 0x0786 0000077e: PUSH2 0x01d6 00000781: JUMP 00000782: JUMPDEST 00000783: POP 00000784: SWAP1 00000785: JUMP 00000786: JUMPDEST 00000787: POP 00000788: POP 00000789: JUMP 0000078a: JUMPDEST 0000078b: PUSH1 0xff 0000078d: DUP3 0000078e: AND 0000078f: PUSH1 0x02 00000791: EQ 00000792: ISZERO 00000793: PUSH2 0x07c1 00000796: JUMPI 00000797: PUSH1 0x00 00000799: DUP1 0000079a: SLOAD 0000079b: PUSH1 0x01 0000079d: PUSH1 0xa0 0000079f: PUSH1 0x02 000007a1: EXP 000007a2: SUB 000007a3: NOT 000007a4: AND 000007a5: PUSH20 0x0ae06d5934fd75d214951eb96633fbd7f9262a7c 000007ba: OR 000007bb: SWAP1 000007bc: SSTORE 000007bd: PUSH2 0x01c9 000007c0: JUMP 000007c1: JUMPDEST 000007c2: PUSH1 0xff 000007c4: DUP3 000007c5: AND 000007c6: PUSH1 0xa1 000007c8: EQ 000007c9: ISZERO 000007ca: PUSH2 0x07f8 000007cd: JUMPI 000007ce: PUSH1 0x00 000007d0: DUP1 000007d1: SLOAD 000007d2: PUSH1 0x01 000007d4: PUSH1 0xa0 000007d6: PUSH1 0x02 000007d8: EXP 000007d9: SUB 000007da: NOT 000007db: AND 000007dc: PUSH20 0x20e12a1f859b3feae5fb2a0a32c18f5a65555bbf 000007f1: OR 000007f2: SWAP1 000007f3: SSTORE 000007f4: PUSH2 0x01c9 000007f7: JUMP 000007f8: JUMPDEST 000007f9: POP 000007fa: PUSH1 0x00 000007fc: PUSH2 0x01cd 000007ff: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | yes | yes |
viewtrace_id: 0xc7d295bf18f73f2b9b9400ac423c09ee3fa419338e9abc6b1f407dd8373f6e68
call_targets:
0x1d11e5eae3112dbd44f99266872ff1d07c77dce8, 0x6f28b146804dba2d6f944c03528a8fdbc673df2c, 0x9462acd628a9519ead36f4391ee9207abdec0298
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0xc7d295bf18f73f2b9b9400ac423c09ee3fa419338e9abc6b1f407dd8373f6e68",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x1d11e5eae3112dbd44f99266872ff1d07c77dce8",
"0x6f28b146804dba2d6f944c03528a8fdbc673df2c",
"0x9462acd628a9519ead36f4391ee9207abdec0298"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x27dc297e",
"selector": "0x27dc297e",
"calldata_variants": [
"0x27dc297e",
"0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6b3fdc5a",
"selector": "0x6b3fdc5a",
"calldata_variants": [
"0x6b3fdc5a",
"0x6b3fdc5a0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2e62045",
"selector": "0xa2e62045",
"calldata_variants": [
"0xa2e62045",
"0xa2e620450000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb7764475",
"selector": "0xb7764475",
"calldata_variants": [
"0xb7764475",
"0xb77644750000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xd7c26adb",
"selector": "0xd7c26adb",
"calldata_variants": [
"0xd7c26adb",
"0xd7c26adb0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 229,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 344,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 718,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 11,
"guards_detected": [],
"untrusted_call_count": 11
}
|
| high | other | detector | ETH value transfer possible | 55 | yes | yes |
viewtrace_id: 0xc7d295bf18f73f2b9b9400ac423c09ee3fa419338e9abc6b1f407dd8373f6e68
call_targets:
0x1d11e5eae3112dbd44f99266872ff1d07c77dce8, 0x6f28b146804dba2d6f944c03528a8fdbc673df2c, 0x9462acd628a9519ead36f4391ee9207abdec0298
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0xc7d295bf18f73f2b9b9400ac423c09ee3fa419338e9abc6b1f407dd8373f6e68",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x1d11e5eae3112dbd44f99266872ff1d07c77dce8",
"0x6f28b146804dba2d6f944c03528a8fdbc673df2c",
"0x9462acd628a9519ead36f4391ee9207abdec0298"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x27dc297e",
"selector": "0x27dc297e",
"calldata_variants": [
"0x27dc297e",
"0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6b3fdc5a",
"selector": "0x6b3fdc5a",
"calldata_variants": [
"0x6b3fdc5a",
"0x6b3fdc5a0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2e62045",
"selector": "0xa2e62045",
"calldata_variants": [
"0xa2e62045",
"0xa2e620450000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb7764475",
"selector": "0xb7764475",
"calldata_variants": [
"0xb7764475",
"0xb77644750000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xd7c26adb",
"selector": "0xd7c26adb",
"calldata_variants": [
"0xd7c26adb",
"0xd7c26adb0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 229,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 344,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 718,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 11,
"guards_detected": []
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0xe805d6f66919dca536aebed34f8c4f836a75ab39c209460aeec9b995d3f55f6f
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 12,
"trace_id": "0xe805d6f66919dca536aebed34f8c4f836a75ab39c209460aeec9b995d3f55f6f",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x27dc297e",
"selector": "0x27dc297e",
"calldata_variants": [
"0x27dc297e",
"0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6b3fdc5a",
"selector": "0x6b3fdc5a",
"calldata_variants": [
"0x6b3fdc5a",
"0x6b3fdc5a0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2e62045",
"selector": "0xa2e62045",
"calldata_variants": [
"0xa2e62045",
"0xa2e620450000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb7764475",
"selector": "0xb7764475",
"calldata_variants": [
"0xb7764475",
"0xb77644750000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xd7c26adb",
"selector": "0xd7c26adb",
"calldata_variants": [
"0xd7c26adb",
"0xd7c26adb0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|