019b3836-29c8-73b1-9f37-4d18c77af237
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 1487 | artifact.fetch | complete | 1 / 3 | 4 months ago |
| 1488 | tool.cast_disasm | complete | 1 / 3 | 4 months ago |
| 78703 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 78704 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 78705 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 78706 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x003d 0000000a: JUMPI 0000000b: PUSH1 0x00 0000000d: CALLDATALOAD 0000000e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 0000002c: SWAP1 0000002d: DIV 0000002e: DUP1 0000002f: PUSH4 0xc47bc007 00000034: EQ 00000035: PUSH2 0x00eb 00000038: JUMPI 00000039: PUSH2 0x003d 0000003c: JUMP 0000003d: JUMPDEST 0000003e: PUSH2 0x00e9 00000041: JUMPDEST 00000042: PUSH1 0x00 00000044: CALLVALUE 00000045: SWAP1 00000046: POP 00000047: ADDRESS 00000048: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000005d: AND 0000005e: BALANCE 0000005f: CALLVALUE 00000060: LT 00000061: ISZERO 00000062: PUSH2 0x0071 00000065: JUMPI 00000066: CALLVALUE 00000067: DUP2 00000068: ADD 00000069: SWAP1 0000006a: POP 0000006b: DUP1 0000006c: POP 0000006d: PUSH2 0x0090 00000070: JUMP 00000071: JUMPDEST 00000072: ADDRESS 00000073: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000088: AND 00000089: BALANCE 0000008a: DUP2 0000008b: ADD 0000008c: SWAP1 0000008d: POP 0000008e: DUP1 0000008f: POP 00000090: JUMPDEST 00000091: PUSH1 0x00 00000093: PUSH1 0x00 00000095: SWAP1 00000096: SLOAD 00000097: SWAP1 00000098: PUSH2 0x0100 0000009b: EXP 0000009c: SWAP1 0000009d: DIV 0000009e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000b3: AND 000000b4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000c9: AND 000000ca: PUSH1 0x00 000000cc: DUP3 000000cd: PUSH1 0x40 000000cf: MLOAD 000000d0: DUP1 000000d1: SWAP1 000000d2: POP 000000d3: PUSH1 0x00 000000d5: PUSH1 0x40 000000d7: MLOAD 000000d8: DUP1 000000d9: DUP4 000000da: SUB 000000db: DUP2 000000dc: DUP6 000000dd: DUP9 000000de: DUP9 000000df: CALL 000000e0: SWAP4 000000e1: POP 000000e2: POP 000000e3: POP 000000e4: POP 000000e5: POP 000000e6: JUMPDEST 000000e7: POP 000000e8: JUMP 000000e9: JUMPDEST 000000ea: STOP 000000eb: JUMPDEST 000000ec: PUSH2 0x00f8 000000ef: PUSH1 0x04 000000f1: DUP1 000000f2: POP 000000f3: POP 000000f4: PUSH2 0x00fa 000000f7: JUMP 000000f8: JUMPDEST 000000f9: STOP 000000fa: JUMPDEST 000000fb: PUSH32 0xce032f5604beaf87b0a3f2667fca1dcb271351c7ea0475026f4e5aa9beab88cd 0000011c: CALLVALUE 0000011d: PUSH1 0x40 0000011f: MLOAD 00000120: DUP1 00000121: DUP3 00000122: DUP2 00000123: MSTORE 00000124: PUSH1 0x20 00000126: ADD 00000127: SWAP2 00000128: POP 00000129: POP 0000012a: PUSH1 0x40 0000012c: MLOAD 0000012d: DUP1 0000012e: SWAP2 0000012f: SUB 00000130: SWAP1 00000131: LOG1 00000132: JUMPDEST 00000133: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x33f799b32e19f5c08288e1ff3f6261be9c83c254ba2561266a9c1355247c57bf
call_targets:
0x389e24d6481cfb4853f578feaa0eba9448b49420
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x33f799b32e19f5c08288e1ff3f6261be9c83c254ba2561266a9c1355247c57bf",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x389e24d6481cfb4853f578feaa0eba9448b49420"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xc47bc007",
"selector": "0xc47bc007",
"calldata_variants": [
"0xc47bc007",
"0xc47bc0070000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 223,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x33f799b32e19f5c08288e1ff3f6261be9c83c254ba2561266a9c1355247c57bf
call_targets:
0x389e24d6481cfb4853f578feaa0eba9448b49420
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x33f799b32e19f5c08288e1ff3f6261be9c83c254ba2561266a9c1355247c57bf",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x389e24d6481cfb4853f578feaa0eba9448b49420"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xc47bc007",
"selector": "0xc47bc007",
"calldata_variants": [
"0xc47bc007",
"0xc47bc0070000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 223,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|