019b3836-2e8a-70bb-9a8e-ba1fd86ac8d7
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 2289 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 2290 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 45536 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 45537 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 45538 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 45539 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x005e 0000000a: JUMPI 0000000b: PUSH1 0x00 0000000d: CALLDATALOAD 0000000e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 0000002c: SWAP1 0000002d: DIV 0000002e: DUP1 0000002f: PUSH4 0x232a3060 00000034: EQ 00000035: PUSH2 0x00e6 00000038: JUMPI 00000039: DUP1 0000003a: PUSH4 0x9d735286 0000003f: EQ 00000040: PUSH2 0x00fe 00000043: JUMPI 00000044: DUP1 00000045: PUSH4 0xa6f9dae1 0000004a: EQ 0000004b: PUSH2 0x010d 0000004e: JUMPI 0000004f: DUP1 00000050: PUSH4 0xfa89401a 00000055: EQ 00000056: PUSH2 0x0125 00000059: JUMPI 0000005a: PUSH2 0x005e 0000005d: JUMP 0000005e: JUMPDEST 0000005f: PUSH2 0x00e4 00000062: JUMPDEST 00000063: NUMBER 00000064: PUSH32 0x5d6ac9b7defd8fbb29ef2ab0f08c3744192b3777466dd98d1fd7daed5064b6db 00000085: CALLER 00000086: CALLVALUE 00000087: TIMESTAMP 00000088: PUSH1 0x40 0000008a: MLOAD 0000008b: DUP1 0000008c: DUP5 0000008d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000a2: AND 000000a3: DUP2 000000a4: MSTORE 000000a5: PUSH1 0x20 000000a7: ADD 000000a8: DUP4 000000a9: DUP2 000000aa: MSTORE 000000ab: PUSH1 0x20 000000ad: ADD 000000ae: DUP3 000000af: DUP2 000000b0: MSTORE 000000b1: PUSH1 0x20 000000b3: ADD 000000b4: SWAP4 000000b5: POP 000000b6: POP 000000b7: POP 000000b8: POP 000000b9: PUSH1 0x40 000000bb: MLOAD 000000bc: DUP1 000000bd: SWAP2 000000be: SUB 000000bf: SWAP1 000000c0: LOG2 000000c1: PUSH1 0x01 000000c3: PUSH1 0x01 000000c5: PUSH1 0x14 000000c7: SWAP1 000000c8: SLOAD 000000c9: SWAP1 000000ca: PUSH2 0x0100 000000cd: EXP 000000ce: SWAP1 000000cf: DIV 000000d0: PUSH1 0xff 000000d2: AND 000000d3: EQ 000000d4: ISZERO 000000d5: PUSH2 0x00e1 000000d8: JUMPI 000000d9: PUSH2 0x00e0 000000dc: PUSH2 0x0262 000000df: JUMP 000000e0: JUMPDEST 000000e1: JUMPDEST 000000e2: JUMPDEST 000000e3: JUMP 000000e4: JUMPDEST 000000e5: STOP 000000e6: JUMPDEST 000000e7: PUSH2 0x00fc 000000ea: PUSH1 0x04 000000ec: DUP1 000000ed: DUP1 000000ee: CALLDATALOAD 000000ef: SWAP1 000000f0: PUSH1 0x20 000000f2: ADD 000000f3: SWAP1 000000f4: SWAP2 000000f5: SWAP1 000000f6: POP 000000f7: POP 000000f8: PUSH2 0x013d 000000fb: JUMP 000000fc: JUMPDEST 000000fd: STOP 000000fe: JUMPDEST 000000ff: PUSH2 0x010b 00000102: PUSH1 0x04 00000104: DUP1 00000105: POP 00000106: POP 00000107: PUSH2 0x0262 0000010a: JUMP 0000010b: JUMPDEST 0000010c: STOP 0000010d: JUMPDEST 0000010e: PUSH2 0x0123 00000111: PUSH1 0x04 00000113: DUP1 00000114: DUP1 00000115: CALLDATALOAD 00000116: SWAP1 00000117: PUSH1 0x20 00000119: ADD 0000011a: SWAP1 0000011b: SWAP2 0000011c: SWAP1 0000011d: POP 0000011e: POP 0000011f: PUSH2 0x01dc 00000122: JUMP 00000123: JUMPDEST 00000124: STOP 00000125: JUMPDEST 00000126: PUSH2 0x013b 00000129: PUSH1 0x04 0000012b: DUP1 0000012c: DUP1 0000012d: CALLDATALOAD 0000012e: SWAP1 0000012f: PUSH1 0x20 00000131: ADD 00000132: SWAP1 00000133: SWAP2 00000134: SWAP1 00000135: POP 00000136: POP 00000137: PUSH2 0x02d1 0000013a: JUMP 0000013b: JUMPDEST 0000013c: STOP 0000013d: JUMPDEST 0000013e: PUSH1 0x00 00000140: PUSH1 0x00 00000142: SWAP1 00000143: SLOAD 00000144: SWAP1 00000145: PUSH2 0x0100 00000148: EXP 00000149: SWAP1 0000014a: DIV 0000014b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000160: AND 00000161: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000176: AND 00000177: CALLER 00000178: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000018d: AND 0000018e: EQ 0000018f: ISZERO 00000190: PUSH2 0x01d8 00000193: JUMPI 00000194: DUP1 00000195: PUSH1 0x01 00000197: PUSH1 0x00 00000199: PUSH2 0x0100 0000019c: EXP 0000019d: DUP2 0000019e: SLOAD 0000019f: DUP2 000001a0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001b5: MUL 000001b6: NOT 000001b7: AND 000001b8: SWAP1 000001b9: DUP4 000001ba: MUL 000001bb: OR 000001bc: SWAP1 000001bd: SSTORE 000001be: POP 000001bf: PUSH1 0x01 000001c1: PUSH1 0x01 000001c3: PUSH1 0x14 000001c5: PUSH2 0x0100 000001c8: EXP 000001c9: DUP2 000001ca: SLOAD 000001cb: DUP2 000001cc: PUSH1 0xff 000001ce: MUL 000001cf: NOT 000001d0: AND 000001d1: SWAP1 000001d2: DUP4 000001d3: MUL 000001d4: OR 000001d5: SWAP1 000001d6: SSTORE 000001d7: POP 000001d8: JUMPDEST 000001d9: JUMPDEST 000001da: POP 000001db: JUMP 000001dc: JUMPDEST 000001dd: PUSH1 0x00 000001df: PUSH1 0x00 000001e1: SWAP1 000001e2: SLOAD 000001e3: SWAP1 000001e4: PUSH2 0x0100 000001e7: EXP 000001e8: SWAP1 000001e9: DIV 000001ea: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001ff: AND 00000200: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000215: AND 00000216: CALLER 00000217: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000022c: AND 0000022d: EQ 0000022e: ISZERO 0000022f: PUSH2 0x025e 00000232: JUMPI 00000233: DUP1 00000234: PUSH1 0x00 00000236: PUSH1 0x00 00000238: PUSH2 0x0100 0000023b: EXP 0000023c: DUP2 0000023d: SLOAD 0000023e: DUP2 0000023f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000254: MUL 00000255: NOT 00000256: AND 00000257: SWAP1 00000258: DUP4 00000259: MUL 0000025a: OR 0000025b: SWAP1 0000025c: SSTORE 0000025d: POP 0000025e: JUMPDEST 0000025f: JUMPDEST 00000260: POP 00000261: JUMP 00000262: JUMPDEST 00000263: PUSH1 0x01 00000265: PUSH1 0x00 00000267: SWAP1 00000268: SLOAD 00000269: SWAP1 0000026a: PUSH2 0x0100 0000026d: EXP 0000026e: SWAP1 0000026f: DIV 00000270: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000285: AND 00000286: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000029b: AND 0000029c: PUSH1 0x00 0000029e: ADDRESS 0000029f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000002b4: AND 000002b5: BALANCE 000002b6: PUSH1 0x40 000002b8: MLOAD 000002b9: DUP1 000002ba: SWAP1 000002bb: POP 000002bc: PUSH1 0x00 000002be: PUSH1 0x40 000002c0: MLOAD 000002c1: DUP1 000002c2: DUP4 000002c3: SUB 000002c4: DUP2 000002c5: DUP6 000002c6: DUP9 000002c7: DUP9 000002c8: CALL 000002c9: SWAP4 000002ca: POP 000002cb: POP 000002cc: POP 000002cd: POP 000002ce: POP 000002cf: JUMPDEST 000002d0: JUMP 000002d1: JUMPDEST 000002d2: PUSH1 0x00 000002d4: PUSH1 0x00 000002d6: SWAP1 000002d7: SLOAD 000002d8: SWAP1 000002d9: PUSH2 0x0100 000002dc: EXP 000002dd: SWAP1 000002de: DIV 000002df: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000002f4: AND 000002f5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000030a: AND 0000030b: CALLER 0000030c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000321: AND 00000322: EQ 00000323: ISZERO 00000324: PUSH2 0x0340 00000327: JUMPI 00000328: DUP1 00000329: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000033e: AND 0000033f: SELFDESTRUCT 00000340: JUMPDEST 00000341: JUMPDEST 00000342: POP 00000343: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| medium | other | detector | Untrusted CALL target/value reachable | 45 | no | no |
viewtrace_id: 0x34839e324b75f29437693eeaecdb2a17242c5576679ce6fdd97382a2a342a3e2
call_targets:
0x1a5fd5263b9d6850e465b10846c4a8be5b5eaa54
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x34839e324b75f29437693eeaecdb2a17242c5576679ce6fdd97382a2a342a3e2",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x1a5fd5263b9d6850e465b10846c4a8be5b5eaa54"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x232a3060",
"selector": "0x232a3060",
"calldata_variants": [
"0x232a3060",
"0x232a30600000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9d735286",
"selector": "0x9d735286",
"calldata_variants": [
"0x9d735286",
"0x9d7352860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa6f9dae1",
"selector": "0xa6f9dae1",
"calldata_variants": [
"0xa6f9dae1",
"0xa6f9dae10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfa89401a",
"selector": "0xfa89401a",
"calldata_variants": [
"0xfa89401a",
"0xfa89401a0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 712,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [
{
"pc": 375,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 534,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 779,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
],
"untrusted_call_count": 1
}
|
| medium | other | detector | ETH value transfer possible | 40 | no | no |
viewtrace_id: 0x34839e324b75f29437693eeaecdb2a17242c5576679ce6fdd97382a2a342a3e2
call_targets:
0x1a5fd5263b9d6850e465b10846c4a8be5b5eaa54
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x34839e324b75f29437693eeaecdb2a17242c5576679ce6fdd97382a2a342a3e2",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x1a5fd5263b9d6850e465b10846c4a8be5b5eaa54"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x232a3060",
"selector": "0x232a3060",
"calldata_variants": [
"0x232a3060",
"0x232a30600000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9d735286",
"selector": "0x9d735286",
"calldata_variants": [
"0x9d735286",
"0x9d7352860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa6f9dae1",
"selector": "0xa6f9dae1",
"calldata_variants": [
"0xa6f9dae1",
"0xa6f9dae10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfa89401a",
"selector": "0xfa89401a",
"calldata_variants": [
"0xfa89401a",
"0xfa89401a0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 712,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": [
{
"pc": 375,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 534,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 779,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
]
}
|
| medium | other | detector | SELFDESTRUCT reachable | 45 | no | no |
viewtrace_id: 0x058f20c14e6ecf9c155e01e51f17f40d6fc11ee27ecadbea0a1492483f3a0818
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 8,
"trace_id": "0x058f20c14e6ecf9c155e01e51f17f40d6fc11ee27ecadbea0a1492483f3a0818",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x232a3060",
"selector": "0x232a3060",
"calldata_variants": [
"0x232a3060",
"0x232a30600000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9d735286",
"selector": "0x9d735286",
"calldata_variants": [
"0x9d735286",
"0x9d7352860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa6f9dae1",
"selector": "0xa6f9dae1",
"calldata_variants": [
"0xa6f9dae1",
"0xa6f9dae10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfa89401a",
"selector": "0xfa89401a",
"calldata_variants": [
"0xfa89401a",
"0xfa89401a0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [
{
"pc": 375,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 534,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 779,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
],
"selfdestruct_count": 1
}
|