019b3836-2e45-7363-b504-570bdc4a4d5b
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 2243 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 2244 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 45644 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 45645 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 45646 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 45647 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x008d 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x090015d8 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x00b4 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x24de908d 00000025: EQ 00000026: PUSH2 0x00c3 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x386cd8f1 00000030: EQ 00000031: PUSH2 0x00cc 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x3910b881 0000003b: EQ 0000003c: PUSH2 0x00ec 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0x4311de8f 00000046: EQ 00000047: PUSH2 0x00f4 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0x4fb30d8b 00000051: EQ 00000052: PUSH2 0x0113 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0x656ca11d 0000005c: EQ 0000005d: PUSH2 0x011c 00000060: JUMPI 00000061: DUP1 00000062: PUSH4 0x6f22d6a5 00000067: EQ 00000068: PUSH2 0x0124 0000006b: JUMPI 0000006c: DUP1 0000006d: PUSH4 0x757007f6 00000072: EQ 00000073: PUSH2 0x012d 00000076: JUMPI 00000077: DUP1 00000078: PUSH4 0xc2314be4 0000007d: EQ 0000007e: PUSH2 0x013b 00000081: JUMPI 00000082: DUP1 00000083: PUSH4 0xd77bf0cf 00000088: EQ 00000089: PUSH2 0x012d 0000008c: JUMPI 0000008d: JUMPDEST 0000008e: PUSH2 0x0144 00000091: PUSH1 0x00 00000093: PUSH1 0x00 00000095: PUSH1 0x00 00000097: PUSH1 0x00 00000099: PUSH1 0x00 0000009b: PUSH1 0x00 0000009d: PUSH1 0x00 0000009f: PUSH1 0x00 000000a1: PUSH7 0x2386f26fc10000 000000a9: CALLVALUE 000000aa: LT 000000ab: ISZERO 000000ac: PUSH2 0x0146 000000af: JUMPI 000000b0: PUSH2 0x0002 000000b3: JUMP 000000b4: JUMPDEST 000000b5: PUSH2 0x031c 000000b8: PUSH8 0x0de0b6b3a7640000 000000c1: DUP2 000000c2: JUMP 000000c3: JUMPDEST 000000c4: PUSH2 0x031c 000000c7: PUSH1 0x07 000000c9: SLOAD 000000ca: DUP2 000000cb: JUMP 000000cc: JUMPDEST 000000cd: PUSH2 0x031c 000000d0: PUSH1 0x00 000000d2: DUP1 000000d3: SLOAD 000000d4: PUSH1 0x01 000000d6: PUSH1 0xa0 000000d8: PUSH1 0x02 000000da: EXP 000000db: SUB 000000dc: SWAP1 000000dd: DUP2 000000de: AND 000000df: CALLER 000000e0: SWAP1 000000e1: SWAP2 000000e2: AND 000000e3: EQ 000000e4: PUSH2 0x035b 000000e7: JUMPI 000000e8: PUSH2 0x0002 000000eb: JUMP 000000ec: JUMPDEST 000000ed: PUSH2 0x031c 000000f0: PUSH1 0x64 000000f2: DUP2 000000f3: JUMP 000000f4: JUMPDEST 000000f5: PUSH2 0x0144 000000f8: PUSH1 0x00 000000fa: SLOAD 000000fb: PUSH1 0x01 000000fd: PUSH1 0xa0 000000ff: PUSH1 0x02 00000101: EXP 00000102: SUB 00000103: SWAP1 00000104: DUP2 00000105: AND 00000106: CALLER 00000107: SWAP1 00000108: SWAP2 00000109: AND 0000010a: EQ 0000010b: PUSH2 0x0326 0000010e: JUMPI 0000010f: PUSH2 0x0002 00000112: JUMP 00000113: JUMPDEST 00000114: PUSH2 0x031c 00000117: PUSH1 0x06 00000119: SLOAD 0000011a: DUP2 0000011b: JUMP 0000011c: JUMPDEST 0000011d: PUSH2 0x031c 00000120: PUSH1 0x05 00000122: DUP2 00000123: JUMP 00000124: JUMPDEST 00000125: PUSH2 0x031c 00000128: PUSH1 0x08 0000012a: SLOAD 0000012b: DUP2 0000012c: JUMP 0000012d: JUMPDEST 0000012e: PUSH2 0x031c 00000131: PUSH7 0x2386f26fc10000 00000139: DUP2 0000013a: JUMP 0000013b: JUMPDEST 0000013c: PUSH2 0x031c 0000013f: PUSH2 0x03e8 00000142: DUP2 00000143: JUMP 00000144: JUMPDEST 00000145: STOP 00000146: JUMPDEST 00000147: PUSH1 0x04 00000149: DUP1 0000014a: SLOAD 0000014b: PUSH4 0xfffffffb 00000150: PUSH4 0x10a860c1 00000155: SWAP1 00000156: SWAP2 00000157: MUL 00000158: MOD 00000159: SWAP1 0000015a: DUP2 0000015b: SWAP1 0000015c: SSTORE 0000015d: PUSH1 0x01 0000015f: SLOAD 00000160: COINBASE 00000161: PUSH1 0x01 00000163: PUSH1 0xa0 00000165: PUSH1 0x02 00000167: EXP 00000168: SUB 00000169: AND 0000016a: PUSH13 0x01000000000000000000000000 00000178: MUL 00000179: PUSH1 0x60 0000017b: SWAP1 0000017c: DUP2 0000017d: MSTORE 0000017e: NUMBER 0000017f: PUSH1 0x00 00000181: NOT 00000182: ADD 00000183: BLOCKHASH 00000184: PUSH1 0x74 00000186: SWAP1 00000187: DUP2 00000188: MSTORE 00000189: PUSH1 0x94 0000018b: SWAP3 0000018c: SWAP1 0000018d: SWAP3 0000018e: MSTORE 0000018f: PUSH1 0xb4 00000191: SWAP3 00000192: SWAP1 00000193: SWAP3 00000194: MSTORE 00000195: SWAP1 00000196: KECCAK256 00000197: PUSH1 0x03 00000199: DUP1 0000019a: SLOAD 0000019b: SWAP1 0000019c: SWAP2 0000019d: XOR 0000019e: SWAP1 0000019f: SSTORE 000001a0: PUSH8 0x0de0b6b3a7640000 000001a9: CALLVALUE 000001aa: LT 000001ab: PUSH2 0x01b7 000001ae: JUMPI 000001af: PUSH1 0x64 000001b1: SWAP8 000001b2: POP 000001b3: PUSH2 0x01c4 000001b6: JUMP 000001b7: JUMPDEST 000001b8: PUSH7 0x2386f26fc10000 000001c0: CALLVALUE 000001c1: DIV 000001c2: SWAP8 000001c3: POP 000001c4: JUMPDEST 000001c5: PUSH7 0x2386f26fc10000 000001cd: DUP9 000001ce: MUL 000001cf: SWAP7 000001d0: POP 000001d1: JUMPDEST 000001d2: DUP8 000001d3: DUP4 000001d4: LT 000001d5: ISZERO 000001d6: PUSH2 0x0243 000001d9: JUMPI 000001da: PUSH1 0x05 000001dc: DUP1 000001dd: SLOAD 000001de: PUSH4 0xfffffffb 000001e3: PUSH4 0x10a860c1 000001e8: SWAP2 000001e9: SWAP1 000001ea: SWAP2 000001eb: MUL 000001ec: MOD 000001ed: SWAP1 000001ee: DUP2 000001ef: SWAP1 000001f0: SSTORE 000001f1: PUSH1 0x03 000001f3: DUP1 000001f4: SLOAD 000001f5: SWAP1 000001f6: SWAP2 000001f7: XOR 000001f8: SWAP1 000001f9: DUP2 000001fa: SWAP1 000001fb: SSTORE 000001fc: PUSH1 0x02 000001fe: SWAP1 000001ff: MOD 00000200: PUSH1 0x00 00000202: EQ 00000203: ISZERO 00000204: PUSH2 0x02fb 00000207: JUMPI 00000208: POP 00000209: POP 0000020a: PUSH1 0x01 0000020c: DUP1 0000020d: SLOAD 0000020e: PUSH1 0x02 00000210: DUP1 00000211: DUP3 00000212: DIV 00000213: SWAP2 00000214: DUP3 00000215: SWAP1 00000216: SUB 00000217: DUP4 00000218: SSTORE 00000219: DUP1 0000021a: SLOAD 0000021b: PUSH2 0x03e8 0000021e: PUSH1 0x05 00000220: DUP5 00000221: MUL 00000222: DIV 00000223: SWAP1 00000224: DUP2 00000225: ADD 00000226: SWAP1 00000227: SWAP2 00000228: SSTORE 00000229: DUP1 0000022a: DUP3 0000022b: SUB 0000022c: SWAP7 0000022d: SWAP1 0000022e: SWAP7 0000022f: ADD 00000230: PUSH7 0x2386f26fc10000 00000238: ADD 00000239: SWAP6 0000023a: SWAP5 0000023b: SWAP1 0000023c: SWAP2 0000023d: ADD 0000023e: SWAP4 0000023f: PUSH2 0x0310 00000242: JUMP 00000243: JUMPDEST 00000244: PUSH1 0x06 00000246: DUP1 00000247: SLOAD 00000248: DUP10 00000249: ADD 0000024a: SWAP1 0000024b: DUP2 0000024c: SWAP1 0000024d: SSTORE 0000024e: PUSH1 0x07 00000250: DUP1 00000251: SLOAD 00000252: DUP8 00000253: ADD 00000254: SWAP1 00000255: DUP2 00000256: SWAP1 00000257: SSTORE 00000258: PUSH1 0x08 0000025a: DUP1 0000025b: SLOAD 0000025c: DUP8 0000025d: ADD 0000025e: SWAP1 0000025f: SSTORE 00000260: CALLER 00000261: PUSH1 0x01 00000263: PUSH1 0xa0 00000265: PUSH1 0x02 00000267: EXP 00000268: SUB 00000269: AND 0000026a: PUSH1 0x60 0000026c: SWAP1 0000026d: DUP2 0000026e: MSTORE 0000026f: PUSH4 0xffffffff 00000274: TIMESTAMP 00000275: AND 00000276: PUSH1 0x80 00000278: MSTORE 00000279: PUSH1 0xff 0000027b: DUP1 0000027c: DUP10 0000027d: AND 0000027e: PUSH1 0xa0 00000280: MSTORE 00000281: DUP8 00000282: AND 00000283: PUSH1 0xc0 00000285: MSTORE 00000286: PUSH1 0xe0 00000288: DUP11 00000289: SWAP1 0000028a: MSTORE 0000028b: PUSH2 0x0100 0000028e: DUP10 0000028f: DUP2 00000290: MSTORE 00000291: PUSH2 0x0120 00000294: SWAP3 00000295: SWAP1 00000296: SWAP3 00000297: MSTORE 00000298: PUSH2 0x0140 0000029b: SWAP3 0000029c: SWAP1 0000029d: SWAP3 0000029e: MSTORE 0000029f: PUSH32 0x47d3bb6e6d9d334a9a626a631f46bb05ff1a4a79ab480f67b348d68cfc4734a2 000002c0: SWAP2 000002c1: LOG1 000002c2: CALLVALUE 000002c3: DUP8 000002c4: SWAP1 000002c5: SUB 000002c6: SWAP1 000002c7: SWAP6 000002c8: ADD 000002c9: SWAP5 000002ca: PUSH1 0x00 000002cc: DUP7 000002cd: GT 000002ce: ISZERO 000002cf: PUSH2 0x02f1 000002d2: JUMPI 000002d3: CALLER 000002d4: PUSH1 0x01 000002d6: PUSH1 0xa0 000002d8: PUSH1 0x02 000002da: EXP 000002db: SUB 000002dc: AND 000002dd: DUP7 000002de: PUSH1 0x60 000002e0: PUSH1 0x00 000002e2: DUP2 000002e3: DUP2 000002e4: DUP2 000002e5: DUP6 000002e6: DUP8 000002e7: PUSH2 0x8502 000002ea: GAS 000002eb: SUB 000002ec: CALL 000002ed: POP 000002ee: POP 000002ef: POP 000002f0: POP 000002f1: JUMPDEST 000002f2: POP 000002f3: POP 000002f4: POP 000002f5: POP 000002f6: POP 000002f7: POP 000002f8: POP 000002f9: POP 000002fa: JUMP 000002fb: JUMPDEST 000002fc: PUSH1 0x01 000002fe: DUP1 000002ff: SLOAD 00000300: PUSH7 0x2386f26fc10000 00000308: ADD 00000309: DUP2 0000030a: SSTORE 0000030b: SWAP4 0000030c: SWAP1 0000030d: SWAP4 0000030e: ADD 0000030f: SWAP3 00000310: JUMPDEST 00000311: PUSH1 0x01 00000313: SWAP3 00000314: SWAP1 00000315: SWAP3 00000316: ADD 00000317: SWAP2 00000318: PUSH2 0x01d1 0000031b: JUMP 0000031c: JUMPDEST 0000031d: PUSH1 0x60 0000031f: SWAP1 00000320: DUP2 00000321: MSTORE 00000322: PUSH1 0x20 00000324: SWAP1 00000325: RETURN 00000326: JUMPDEST 00000327: PUSH1 0x02 00000329: SLOAD 0000032a: PUSH1 0x00 0000032c: SWAP1 0000032d: GT 0000032e: ISZERO 0000032f: PUSH2 0x0359 00000332: JUMPI 00000333: PUSH1 0x00 00000335: DUP1 00000336: SLOAD 00000337: PUSH1 0x02 00000339: SLOAD 0000033a: PUSH1 0x01 0000033c: PUSH1 0xa0 0000033e: PUSH1 0x02 00000340: EXP 00000341: SUB 00000342: SWAP2 00000343: SWAP1 00000344: SWAP2 00000345: AND 00000346: SWAP2 00000347: PUSH1 0x60 00000349: SWAP1 0000034a: DUP2 0000034b: DUP2 0000034c: DUP2 0000034d: DUP6 0000034e: DUP8 0000034f: PUSH2 0x8502 00000352: GAS 00000353: SUB 00000354: CALL 00000355: POP 00000356: POP 00000357: POP 00000358: POP 00000359: JUMPDEST 0000035a: JUMP 0000035b: JUMPDEST 0000035c: POP 0000035d: PUSH1 0x02 0000035f: SLOAD 00000360: SWAP1 00000361: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x850ed1f99b5432128bd900b340bf584e799f0d29d1fb5dfe180c00e26b737c44
call_targets:
0x80ac23742431ec60a1f1e6878e17bd8a8e2f384b
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x850ed1f99b5432128bd900b340bf584e799f0d29d1fb5dfe180c00e26b737c44",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x80ac23742431ec60a1f1e6878e17bd8a8e2f384b"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x090015d8",
"selector": "0x090015d8",
"calldata_variants": [
"0x090015d8",
"0x090015d80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x24de908d",
"selector": "0x24de908d",
"calldata_variants": [
"0x24de908d",
"0x24de908d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x386cd8f1",
"selector": "0x386cd8f1",
"calldata_variants": [
"0x386cd8f1",
"0x386cd8f10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3910b881",
"selector": "0x3910b881",
"calldata_variants": [
"0x3910b881",
"0x3910b8810000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4311de8f",
"selector": "0x4311de8f",
"calldata_variants": [
"0x4311de8f",
"0x4311de8f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4fb30d8b",
"selector": "0x4fb30d8b",
"calldata_variants": [
"0x4fb30d8b",
"0x4fb30d8b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x656ca11d",
"selector": "0x656ca11d",
"calldata_variants": [
"0x656ca11d",
"0x656ca11d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6f22d6a5",
"selector": "0x6f22d6a5",
"calldata_variants": [
"0x6f22d6a5",
"0x6f22d6a50000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 748,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 852,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 2,
"guards_detected": [],
"untrusted_call_count": 2
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x850ed1f99b5432128bd900b340bf584e799f0d29d1fb5dfe180c00e26b737c44
call_targets:
0x80ac23742431ec60a1f1e6878e17bd8a8e2f384b
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x850ed1f99b5432128bd900b340bf584e799f0d29d1fb5dfe180c00e26b737c44",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x80ac23742431ec60a1f1e6878e17bd8a8e2f384b"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x090015d8",
"selector": "0x090015d8",
"calldata_variants": [
"0x090015d8",
"0x090015d80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x24de908d",
"selector": "0x24de908d",
"calldata_variants": [
"0x24de908d",
"0x24de908d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x386cd8f1",
"selector": "0x386cd8f1",
"calldata_variants": [
"0x386cd8f1",
"0x386cd8f10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3910b881",
"selector": "0x3910b881",
"calldata_variants": [
"0x3910b881",
"0x3910b8810000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4311de8f",
"selector": "0x4311de8f",
"calldata_variants": [
"0x4311de8f",
"0x4311de8f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4fb30d8b",
"selector": "0x4fb30d8b",
"calldata_variants": [
"0x4fb30d8b",
"0x4fb30d8b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x656ca11d",
"selector": "0x656ca11d",
"calldata_variants": [
"0x656ca11d",
"0x656ca11d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6f22d6a5",
"selector": "0x6f22d6a5",
"calldata_variants": [
"0x6f22d6a5",
"0x6f22d6a50000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 748,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 852,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 2,
"guards_detected": []
}
|