019b3836-2e92-71fb-bf95-a317e8b87f44
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 2295 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 2296 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 45520 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 45521 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 45522 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 45523 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0069 0000000a: JUMPI 0000000b: PUSH1 0x00 0000000d: CALLDATALOAD 0000000e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 0000002c: SWAP1 0000002d: DIV 0000002e: DUP1 0000002f: PUSH4 0x232a3060 00000034: EQ 00000035: PUSH2 0x00fa 00000038: JUMPI 00000039: DUP1 0000003a: PUSH4 0x69f384c4 0000003f: EQ 00000040: PUSH2 0x0112 00000043: JUMPI 00000044: DUP1 00000045: PUSH4 0x9d735286 0000004a: EQ 0000004b: PUSH2 0x0154 0000004e: JUMPI 0000004f: DUP1 00000050: PUSH4 0xa6f9dae1 00000055: EQ 00000056: PUSH2 0x0163 00000059: JUMPI 0000005a: DUP1 0000005b: PUSH4 0xfa89401a 00000060: EQ 00000061: PUSH2 0x017b 00000064: JUMPI 00000065: PUSH2 0x0069 00000068: JUMP 00000069: JUMPDEST 0000006a: PUSH2 0x00f8 0000006d: JUMPDEST 0000006e: NUMBER 0000006f: PUSH32 0x5d6ac9b7defd8fbb29ef2ab0f08c3744192b3777466dd98d1fd7daed5064b6db 00000090: CALLER 00000091: CALLVALUE 00000092: TIMESTAMP 00000093: PUSH1 0x40 00000095: MLOAD 00000096: DUP1 00000097: DUP5 00000098: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000ad: AND 000000ae: DUP2 000000af: MSTORE 000000b0: PUSH1 0x20 000000b2: ADD 000000b3: DUP4 000000b4: DUP2 000000b5: MSTORE 000000b6: PUSH1 0x20 000000b8: ADD 000000b9: DUP3 000000ba: DUP2 000000bb: MSTORE 000000bc: PUSH1 0x20 000000be: ADD 000000bf: SWAP4 000000c0: POP 000000c1: POP 000000c2: POP 000000c3: POP 000000c4: PUSH1 0x40 000000c6: MLOAD 000000c7: DUP1 000000c8: SWAP2 000000c9: SUB 000000ca: SWAP1 000000cb: LOG2 000000cc: PUSH1 0x01 000000ce: PUSH1 0x00 000000d0: PUSH1 0x14 000000d2: SWAP1 000000d3: SLOAD 000000d4: SWAP1 000000d5: PUSH2 0x0100 000000d8: EXP 000000d9: SWAP1 000000da: DIV 000000db: PUSH1 0xff 000000dd: AND 000000de: EQ 000000df: ISZERO 000000e0: PUSH2 0x00f0 000000e3: JUMPI 000000e4: PUSH2 0x00eb 000000e7: PUSH2 0x0370 000000ea: JUMP 000000eb: JUMPDEST 000000ec: PUSH2 0x00f5 000000ef: JUMP 000000f0: JUMPDEST 000000f1: PUSH2 0x0002 000000f4: JUMP 000000f5: JUMPDEST 000000f6: JUMPDEST 000000f7: JUMP 000000f8: JUMPDEST 000000f9: STOP 000000fa: JUMPDEST 000000fb: PUSH2 0x0110 000000fe: PUSH1 0x04 00000100: DUP1 00000101: DUP1 00000102: CALLDATALOAD 00000103: SWAP1 00000104: PUSH1 0x20 00000106: ADD 00000107: SWAP1 00000108: SWAP2 00000109: SWAP1 0000010a: POP 0000010b: POP 0000010c: PUSH2 0x0193 0000010f: JUMP 00000110: JUMPDEST 00000111: STOP 00000112: JUMPDEST 00000113: PUSH2 0x0128 00000116: PUSH1 0x04 00000118: DUP1 00000119: DUP1 0000011a: CALLDATALOAD 0000011b: SWAP1 0000011c: PUSH1 0x20 0000011e: ADD 0000011f: SWAP1 00000120: SWAP2 00000121: SWAP1 00000122: POP 00000123: POP 00000124: PUSH2 0x0241 00000127: JUMP 00000128: JUMPDEST 00000129: PUSH1 0x40 0000012b: MLOAD 0000012c: DUP1 0000012d: DUP3 0000012e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000143: AND 00000144: DUP2 00000145: MSTORE 00000146: PUSH1 0x20 00000148: ADD 00000149: SWAP2 0000014a: POP 0000014b: POP 0000014c: PUSH1 0x40 0000014e: MLOAD 0000014f: DUP1 00000150: SWAP2 00000151: SUB 00000152: SWAP1 00000153: RETURN 00000154: JUMPDEST 00000155: PUSH2 0x0161 00000158: PUSH1 0x04 0000015a: DUP1 0000015b: POP 0000015c: POP 0000015d: PUSH2 0x0370 00000160: JUMP 00000161: JUMPDEST 00000162: STOP 00000163: JUMPDEST 00000164: PUSH2 0x0179 00000167: PUSH1 0x04 00000169: DUP1 0000016a: DUP1 0000016b: CALLDATALOAD 0000016c: SWAP1 0000016d: PUSH1 0x20 0000016f: ADD 00000170: SWAP1 00000171: SWAP2 00000172: SWAP1 00000173: POP 00000174: POP 00000175: PUSH2 0x02e1 00000178: JUMP 00000179: JUMPDEST 0000017a: STOP 0000017b: JUMPDEST 0000017c: PUSH2 0x0191 0000017f: PUSH1 0x04 00000181: DUP1 00000182: DUP1 00000183: CALLDATALOAD 00000184: SWAP1 00000185: PUSH1 0x20 00000187: ADD 00000188: SWAP1 00000189: SWAP2 0000018a: SWAP1 0000018b: POP 0000018c: POP 0000018d: PUSH2 0x0401 00000190: JUMP 00000191: JUMPDEST 00000192: STOP 00000193: JUMPDEST 00000194: PUSH1 0x00 00000196: PUSH1 0x00 00000198: PUSH1 0x00 0000019a: SWAP1 0000019b: SLOAD 0000019c: SWAP1 0000019d: PUSH2 0x0100 000001a0: EXP 000001a1: SWAP1 000001a2: DIV 000001a3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001b8: AND 000001b9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001ce: AND 000001cf: CALLER 000001d0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001e5: AND 000001e6: EQ 000001e7: ISZERO 000001e8: PUSH2 0x0237 000001eb: JUMPI 000001ec: DUP2 000001ed: SWAP1 000001ee: POP 000001ef: DUP1 000001f0: PUSH1 0x01 000001f2: PUSH1 0x00 000001f4: PUSH2 0x0100 000001f7: EXP 000001f8: DUP2 000001f9: SLOAD 000001fa: DUP2 000001fb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000210: MUL 00000211: NOT 00000212: AND 00000213: SWAP1 00000214: DUP4 00000215: MUL 00000216: OR 00000217: SWAP1 00000218: SSTORE 00000219: POP 0000021a: PUSH1 0x01 0000021c: PUSH1 0x00 0000021e: PUSH1 0x14 00000220: PUSH2 0x0100 00000223: EXP 00000224: DUP2 00000225: SLOAD 00000226: DUP2 00000227: PUSH1 0xff 00000229: MUL 0000022a: NOT 0000022b: AND 0000022c: SWAP1 0000022d: DUP4 0000022e: MUL 0000022f: OR 00000230: SWAP1 00000231: SSTORE 00000232: POP 00000233: PUSH2 0x023c 00000236: JUMP 00000237: JUMPDEST 00000238: PUSH2 0x0002 0000023b: JUMP 0000023c: JUMPDEST 0000023d: JUMPDEST 0000023e: POP 0000023f: POP 00000240: JUMP 00000241: JUMPDEST 00000242: PUSH1 0x00 00000244: PUSH1 0x00 00000246: PUSH1 0x00 00000248: PUSH1 0x00 0000024a: SWAP1 0000024b: SLOAD 0000024c: SWAP1 0000024d: PUSH2 0x0100 00000250: EXP 00000251: SWAP1 00000252: DIV 00000253: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000268: AND 00000269: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000027e: AND 0000027f: CALLER 00000280: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000295: AND 00000296: EQ 00000297: ISZERO 00000298: PUSH2 0x02d5 0000029b: JUMPI 0000029c: DUP3 0000029d: SWAP1 0000029e: POP 0000029f: DUP1 000002a0: PUSH1 0x01 000002a2: PUSH1 0x00 000002a4: PUSH2 0x0100 000002a7: EXP 000002a8: DUP2 000002a9: SLOAD 000002aa: DUP2 000002ab: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000002c0: MUL 000002c1: NOT 000002c2: AND 000002c3: SWAP1 000002c4: DUP4 000002c5: MUL 000002c6: OR 000002c7: SWAP1 000002c8: SSTORE 000002c9: POP 000002ca: DUP1 000002cb: SWAP2 000002cc: POP 000002cd: PUSH2 0x02db 000002d0: JUMP 000002d1: PUSH2 0x02da 000002d4: JUMP 000002d5: JUMPDEST 000002d6: PUSH2 0x0002 000002d9: JUMP 000002da: JUMPDEST 000002db: JUMPDEST 000002dc: POP 000002dd: SWAP2 000002de: SWAP1 000002df: POP 000002e0: JUMP 000002e1: JUMPDEST 000002e2: PUSH1 0x00 000002e4: PUSH1 0x00 000002e6: SWAP1 000002e7: SLOAD 000002e8: SWAP1 000002e9: PUSH2 0x0100 000002ec: EXP 000002ed: SWAP1 000002ee: DIV 000002ef: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000304: AND 00000305: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000031a: AND 0000031b: CALLER 0000031c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000331: AND 00000332: EQ 00000333: ISZERO 00000334: PUSH2 0x0367 00000337: JUMPI 00000338: DUP1 00000339: PUSH1 0x00 0000033b: PUSH1 0x00 0000033d: PUSH2 0x0100 00000340: EXP 00000341: DUP2 00000342: SLOAD 00000343: DUP2 00000344: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000359: MUL 0000035a: NOT 0000035b: AND 0000035c: SWAP1 0000035d: DUP4 0000035e: MUL 0000035f: OR 00000360: SWAP1 00000361: SSTORE 00000362: POP 00000363: PUSH2 0x036c 00000366: JUMP 00000367: JUMPDEST 00000368: PUSH2 0x0002 0000036b: JUMP 0000036c: JUMPDEST 0000036d: JUMPDEST 0000036e: POP 0000036f: JUMP 00000370: JUMPDEST 00000371: PUSH1 0x01 00000373: PUSH1 0x00 00000375: PUSH1 0x14 00000377: SWAP1 00000378: SLOAD 00000379: SWAP1 0000037a: PUSH2 0x0100 0000037d: EXP 0000037e: SWAP1 0000037f: DIV 00000380: PUSH1 0xff 00000382: AND 00000383: EQ 00000384: ISZERO 00000385: PUSH2 0x03f9 00000388: JUMPI 00000389: PUSH1 0x01 0000038b: PUSH1 0x00 0000038d: SWAP1 0000038e: SLOAD 0000038f: SWAP1 00000390: PUSH2 0x0100 00000393: EXP 00000394: SWAP1 00000395: DIV 00000396: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003ab: AND 000003ac: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003c1: AND 000003c2: PUSH1 0x00 000003c4: ADDRESS 000003c5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003da: AND 000003db: BALANCE 000003dc: PUSH1 0x40 000003de: MLOAD 000003df: DUP1 000003e0: SWAP1 000003e1: POP 000003e2: PUSH1 0x00 000003e4: PUSH1 0x40 000003e6: MLOAD 000003e7: DUP1 000003e8: DUP4 000003e9: SUB 000003ea: DUP2 000003eb: DUP6 000003ec: DUP9 000003ed: DUP9 000003ee: CALL 000003ef: SWAP4 000003f0: POP 000003f1: POP 000003f2: POP 000003f3: POP 000003f4: POP 000003f5: PUSH2 0x03fe 000003f8: JUMP 000003f9: JUMPDEST 000003fa: PUSH2 0x0002 000003fd: JUMP 000003fe: JUMPDEST 000003ff: JUMPDEST 00000400: JUMP 00000401: JUMPDEST 00000402: PUSH1 0x00 00000404: PUSH1 0x00 00000406: SWAP1 00000407: SLOAD 00000408: SWAP1 00000409: PUSH2 0x0100 0000040c: EXP 0000040d: SWAP1 0000040e: DIV 0000040f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000424: AND 00000425: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000043a: AND 0000043b: CALLER 0000043c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000451: AND 00000452: EQ 00000453: ISZERO 00000454: PUSH2 0x04c9 00000457: JUMPI 00000458: PUSH32 0xb854f581145dc1eb640e9c943dd96947618be343eb869017cae7a0d959b41689 00000479: ADDRESS 0000047a: TIMESTAMP 0000047b: PUSH1 0x40 0000047d: MLOAD 0000047e: DUP1 0000047f: DUP4 00000480: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000495: AND 00000496: DUP2 00000497: MSTORE 00000498: PUSH1 0x20 0000049a: ADD 0000049b: DUP3 0000049c: DUP2 0000049d: MSTORE 0000049e: PUSH1 0x20 000004a0: ADD 000004a1: SWAP3 000004a2: POP 000004a3: POP 000004a4: POP 000004a5: PUSH1 0x40 000004a7: MLOAD 000004a8: DUP1 000004a9: SWAP2 000004aa: SUB 000004ab: SWAP1 000004ac: LOG1 000004ad: DUP1 000004ae: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004c3: AND 000004c4: SELFDESTRUCT 000004c5: PUSH2 0x04ce 000004c8: JUMP 000004c9: JUMPDEST 000004ca: PUSH2 0x0002 000004cd: JUMP 000004ce: JUMPDEST 000004cf: JUMPDEST 000004d0: POP 000004d1: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| medium | other | detector | Untrusted CALL target/value reachable | 45 | no | no |
viewtrace_id: 0xf974d9f5f5f3541e5e01c4998e950e526104be1ca828860326f57d97305cf082
call_targets:
0xe266e1e48137827fb369cf1df732f153d36e41c6
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xf974d9f5f5f3541e5e01c4998e950e526104be1ca828860326f57d97305cf082",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xe266e1e48137827fb369cf1df732f153d36e41c6"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x232a3060",
"selector": "0x232a3060",
"calldata_variants": [
"0x232a3060",
"0x232a30600000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x69f384c4",
"selector": "0x69f384c4",
"calldata_variants": [
"0x69f384c4",
"0x69f384c40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9d735286",
"selector": "0x9d735286",
"calldata_variants": [
"0x9d735286",
"0x9d7352860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa6f9dae1",
"selector": "0xa6f9dae1",
"calldata_variants": [
"0xa6f9dae1",
"0xa6f9dae10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfa89401a",
"selector": "0xfa89401a",
"calldata_variants": [
"0xfa89401a",
"0xfa89401a0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1006,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [
{
"pc": 463,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 639,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 795,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1083,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
],
"untrusted_call_count": 1
}
|
| medium | other | detector | ETH value transfer possible | 40 | no | no |
viewtrace_id: 0xf974d9f5f5f3541e5e01c4998e950e526104be1ca828860326f57d97305cf082
call_targets:
0xe266e1e48137827fb369cf1df732f153d36e41c6
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xf974d9f5f5f3541e5e01c4998e950e526104be1ca828860326f57d97305cf082",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xe266e1e48137827fb369cf1df732f153d36e41c6"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x232a3060",
"selector": "0x232a3060",
"calldata_variants": [
"0x232a3060",
"0x232a30600000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x69f384c4",
"selector": "0x69f384c4",
"calldata_variants": [
"0x69f384c4",
"0x69f384c40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9d735286",
"selector": "0x9d735286",
"calldata_variants": [
"0x9d735286",
"0x9d7352860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa6f9dae1",
"selector": "0xa6f9dae1",
"calldata_variants": [
"0xa6f9dae1",
"0xa6f9dae10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfa89401a",
"selector": "0xfa89401a",
"calldata_variants": [
"0xfa89401a",
"0xfa89401a0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1006,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": [
{
"pc": 463,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 639,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 795,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1083,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
]
}
|
| medium | other | detector | SELFDESTRUCT reachable | 45 | no | no |
viewtrace_id: 0x6a6649dde31b4e205607a7be3a99c38795ba75bebde268485615dd16e36a7889
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 10,
"trace_id": "0x6a6649dde31b4e205607a7be3a99c38795ba75bebde268485615dd16e36a7889",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x232a3060",
"selector": "0x232a3060",
"calldata_variants": [
"0x232a3060",
"0x232a30600000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x69f384c4",
"selector": "0x69f384c4",
"calldata_variants": [
"0x69f384c4",
"0x69f384c40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9d735286",
"selector": "0x9d735286",
"calldata_variants": [
"0x9d735286",
"0x9d7352860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa6f9dae1",
"selector": "0xa6f9dae1",
"calldata_variants": [
"0xa6f9dae1",
"0xa6f9dae10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfa89401a",
"selector": "0xfa89401a",
"calldata_variants": [
"0xfa89401a",
"0xfa89401a0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [
{
"pc": 463,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 639,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 795,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1083,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
],
"selfdestruct_count": 1
}
|