Analysis Run

019b3836-2f28-721f-9799-344ec8c0c9f5

complete

Chain ID

1

Address

0xa96f7d29dc792359b1ce24c7c54230882dee1be2

Block Number

—

Created

Fri, Dec 19, 2025 8:03 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
2391	artifact.fetch	complete	1 / 3	3 months ago
2392	tool.cast_disasm	complete	1 / 3	3 months ago
97034	analysis.bundle	complete	1 / 3	1 week ago
97035	capability.graph	complete	1 / 3	1 week ago
97036	detector.run	complete	1 / 3	1 week ago
97037	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

2

EXT*/BALANCE

0

Total opcodes

665

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0098
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x090015d8
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00b5
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x20514abf
00000025: EQ
00000026: PUSH2 0x00c4
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x22e37189
00000030: EQ
00000031: PUSH2 0x00cd
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x256540cd
0000003b: EQ
0000003c: PUSH2 0x00d6
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x4311de8f
00000046: EQ
00000047: PUSH2 0x00df
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x4fb30d8b
00000051: EQ
00000052: PUSH2 0x00fe
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x656ca11d
0000005c: EQ
0000005d: PUSH2 0x0107
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x757007f6
00000067: EQ
00000068: PUSH2 0x010f
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x8bef5222
00000072: EQ
00000073: PUSH2 0x011d
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xbda5ea03
0000007d: EQ
0000007e: PUSH2 0x0126
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xc2314be4
00000088: EQ
00000089: PUSH2 0x012f
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xd77bf0cf
00000093: EQ
00000094: PUSH2 0x010f
00000097: JUMPI
00000098: JUMPDEST
00000099: PUSH2 0x0138
0000009c: PUSH1 0x00
0000009e: PUSH1 0x00
000000a0: PUSH1 0x00
000000a2: PUSH7 0x2386f26fc10000
000000aa: CALLVALUE
000000ab: LT
000000ac: ISZERO
000000ad: PUSH2 0x013a
000000b0: JUMPI
000000b1: PUSH2 0x0002
000000b4: JUMP
000000b5: JUMPDEST
000000b6: PUSH2 0x02d4
000000b9: PUSH8 0x8aa39c121a270000
000000c2: DUP2
000000c3: JUMP
000000c4: JUMPDEST
000000c5: PUSH2 0x02d4
000000c8: PUSH1 0x0b
000000ca: SLOAD
000000cb: DUP2
000000cc: JUMP
000000cd: JUMPDEST
000000ce: PUSH2 0x02d4
000000d1: PUSH1 0x0d
000000d3: SLOAD
000000d4: DUP2
000000d5: JUMP
000000d6: JUMPDEST
000000d7: PUSH2 0x02d4
000000da: PUSH1 0x0e
000000dc: SLOAD
000000dd: DUP2
000000de: JUMP
000000df: JUMPDEST
000000e0: PUSH2 0x0138
000000e3: PUSH1 0x00
000000e5: SLOAD
000000e6: PUSH1 0x01
000000e8: PUSH1 0xa0
000000ea: PUSH1 0x02
000000ec: EXP
000000ed: SUB
000000ee: SWAP1
000000ef: DUP2
000000f0: AND
000000f1: CALLER
000000f2: SWAP1
000000f3: SWAP2
000000f4: AND
000000f5: EQ
000000f6: PUSH2 0x02de
000000f9: JUMPI
000000fa: PUSH2 0x0002
000000fd: JUMP
000000fe: JUMPDEST
000000ff: PUSH2 0x02d4
00000102: PUSH1 0x0f
00000104: SLOAD
00000105: DUP2
00000106: JUMP
00000107: JUMPDEST
00000108: PUSH2 0x02d4
0000010b: PUSH1 0x05
0000010d: DUP2
0000010e: JUMP
0000010f: JUMPDEST
00000110: PUSH2 0x02d4
00000113: PUSH7 0x2386f26fc10000
0000011b: DUP2
0000011c: JUMP
0000011d: JUMPDEST
0000011e: PUSH2 0x02d4
00000121: PUSH2 0x03e7
00000124: DUP2
00000125: JUMP
00000126: JUMPDEST
00000127: PUSH2 0x02d4
0000012a: PUSH1 0x0c
0000012c: SLOAD
0000012d: DUP2
0000012e: JUMP
0000012f: JUMPDEST
00000130: PUSH2 0x02d4
00000133: PUSH2 0x03e8
00000136: DUP2
00000137: JUMP
00000138: JUMPDEST
00000139: STOP
0000013a: JUMPDEST
0000013b: PUSH1 0x09
0000013d: DUP1
0000013e: SLOAD
0000013f: PUSH4 0xfffffffb
00000144: PUSH4 0x10a860c1
00000149: SWAP1
0000014a: SWAP2
0000014b: MUL
0000014c: MOD
0000014d: SWAP1
0000014e: DUP2
0000014f: SWAP1
00000150: SSTORE
00000151: PUSH1 0x07
00000153: SLOAD
00000154: PUSH1 0x06
00000156: SLOAD
00000157: PUSH1 0x05
00000159: SLOAD
0000015a: PUSH13 0x01000000000000000000000000
00000168: PUSH1 0x01
0000016a: PUSH1 0xa0
0000016c: PUSH1 0x02
0000016e: EXP
0000016f: SUB
00000170: COINBASE
00000171: AND
00000172: MUL
00000173: PUSH1 0x60
00000175: SWAP1
00000176: DUP2
00000177: MSTORE
00000178: NUMBER
00000179: PUSH1 0x00
0000017b: NOT
0000017c: ADD
0000017d: BLOCKHASH
0000017e: PUSH1 0x74
00000180: SWAP1
00000181: DUP2
00000182: MSTORE
00000183: SWAP2
00000184: SWAP1
00000185: SWAP3
00000186: ADD
00000187: SWAP1
00000188: SWAP3
00000189: ADD
0000018a: PUSH1 0x94
0000018c: MSTORE
0000018d: PUSH1 0xb4
0000018f: SWAP3
00000190: SWAP1
00000191: SWAP3
00000192: MSTORE
00000193: SWAP1
00000194: KECCAK256
00000195: PUSH1 0x08
00000197: DUP1
00000198: SLOAD
00000199: SWAP1
0000019a: SWAP2
0000019b: XOR
0000019c: SWAP1
0000019d: SSTORE
0000019e: PUSH8 0x8aa39c121a270000
000001a7: CALLVALUE
000001a8: LT
000001a9: PUSH2 0x01b6
000001ac: JUMPI
000001ad: PUSH2 0x03e7
000001b0: SWAP3
000001b1: POP
000001b2: PUSH2 0x01c3
000001b5: JUMP
000001b6: JUMPDEST
000001b7: PUSH7 0x2386f26fc10000
000001bf: CALLVALUE
000001c0: DIV
000001c1: SWAP3
000001c2: POP
000001c3: JUMPDEST
000001c4: PUSH1 0x0e
000001c6: DUP1
000001c7: SLOAD
000001c8: PUSH7 0x2386f26fc10000
000001d0: DUP6
000001d1: MUL
000001d2: SWAP1
000001d3: DUP2
000001d4: ADD
000001d5: SWAP1
000001d6: SWAP2
000001d7: SSTORE
000001d8: PUSH1 0x0f
000001da: DUP1
000001db: SLOAD
000001dc: PUSH1 0x01
000001de: ADD
000001df: SWAP1
000001e0: SSTORE
000001e1: SWAP2
000001e2: POP
000001e3: CALLVALUE
000001e4: DUP3
000001e5: SWAP1
000001e6: SUB
000001e7: PUSH2 0x02a7
000001ea: DUP4
000001eb: DUP6
000001ec: DUP5
000001ed: DUP1
000001ee: DUP1
000001ef: DUP1
000001f0: DUP1
000001f1: DUP1
000001f2: DUP1
000001f3: DUP1
000001f4: DUP1
000001f5: JUMPDEST
000001f6: PUSH1 0x03
000001f8: DUP6
000001f9: LT
000001fa: ISZERO
000001fb: PUSH2 0x0318
000001fe: JUMPI
000001ff: PUSH1 0x0b
00000201: DUP1
00000202: SLOAD
00000203: PUSH1 0x0a
00000205: DUP13
00000206: MOD
00000207: SWAP1
00000208: DUP2
00000209: ADD
0000020a: SWAP1
0000020b: SWAP2
0000020c: SSTORE
0000020d: SWAP4
0000020e: POP
0000020f: DUP9
00000210: SWAP3
00000211: POP
00000212: JUMPDEST
00000213: DUP4
00000214: DUP4
00000215: LT
00000216: ISZERO
00000217: PUSH2 0x03a6
0000021a: JUMPI
0000021b: PUSH1 0x0a
0000021d: DUP1
0000021e: SLOAD
0000021f: PUSH4 0xfffffffb
00000224: PUSH4 0x10a860c1
00000229: SWAP2
0000022a: SWAP1
0000022b: SWAP2
0000022c: MUL
0000022d: MOD
0000022e: SWAP1
0000022f: DUP2
00000230: SWAP1
00000231: SSTORE
00000232: PUSH1 0x08
00000234: DUP1
00000235: SLOAD
00000236: SWAP1
00000237: SWAP2
00000238: XOR
00000239: SWAP1
0000023a: DUP2
0000023b: SWAP1
0000023c: SSTORE
0000023d: PUSH1 0x02
0000023f: SWAP1
00000240: MOD
00000241: DUP10
00000242: EQ
00000243: ISZERO
00000244: PUSH2 0x03b8
00000247: JUMPI
00000248: PUSH1 0x02
0000024a: PUSH1 0x05
0000024c: DUP7
0000024d: PUSH1 0x03
0000024f: DUP2
00000250: LT
00000251: ISZERO
00000252: PUSH2 0x0002
00000255: JUMPI
00000256: DUP2
00000257: ADD
00000258: SLOAD
00000259: PUSH1 0x01
0000025b: SWAP10
0000025c: SWAP1
0000025d: SWAP10
0000025e: ADD
0000025f: SWAP9
00000260: SWAP2
00000261: SWAP1
00000262: SWAP2
00000263: DIV
00000264: SWAP3
00000265: POP
00000266: PUSH2 0x03e8
00000269: DUP4
0000026a: DUP3
0000026b: MUL
0000026c: DIV
0000026d: SWAP2
0000026e: POP
0000026f: DUP3
00000270: SWAP1
00000271: DUP7
00000272: PUSH1 0x03
00000274: DUP2
00000275: LT
00000276: ISZERO
00000277: PUSH2 0x0002
0000027a: JUMPI
0000027b: ADD
0000027c: DUP1
0000027d: SLOAD
0000027e: SWAP2
0000027f: SWAP1
00000280: SWAP2
00000281: SUB
00000282: SWAP1
00000283: SSTORE
00000284: PUSH1 0x01
00000286: DUP1
00000287: SLOAD
00000288: DUP3
00000289: ADD
0000028a: SWAP1
0000028b: SSTORE
0000028c: PUSH1 0x02
0000028e: DUP6
0000028f: PUSH1 0x03
00000291: DUP2
00000292: LT
00000293: ISZERO
00000294: PUSH2 0x0002
00000297: JUMPI
00000298: ADD
00000299: SLOAD
0000029a: DUP2
0000029b: DUP4
0000029c: SUB
0000029d: ADD
0000029e: SWAP8
0000029f: SWAP1
000002a0: SWAP8
000002a1: ADD
000002a2: SWAP7
000002a3: PUSH2 0x03e2
000002a6: JUMP
000002a7: JUMPDEST
000002a8: ADD
000002a9: SWAP1
000002aa: DUP2
000002ab: GT
000002ac: ISZERO
000002ad: PUSH2 0x02cf
000002b0: JUMPI
000002b1: CALLER
000002b2: PUSH1 0x01
000002b4: PUSH1 0xa0
000002b6: PUSH1 0x02
000002b8: EXP
000002b9: SUB
000002ba: AND
000002bb: DUP2
000002bc: PUSH1 0x60
000002be: PUSH1 0x00
000002c0: DUP2
000002c1: DUP2
000002c2: DUP2
000002c3: DUP6
000002c4: DUP8
000002c5: PUSH2 0x8502
000002c8: GAS
000002c9: SUB
000002ca: CALL
000002cb: POP
000002cc: POP
000002cd: POP
000002ce: POP
000002cf: JUMPDEST
000002d0: POP
000002d1: POP
000002d2: POP
000002d3: JUMP
000002d4: JUMPDEST
000002d5: PUSH1 0x60
000002d7: SWAP1
000002d8: DUP2
000002d9: MSTORE
000002da: PUSH1 0x20
000002dc: SWAP1
000002dd: RETURN
000002de: JUMPDEST
000002df: PUSH1 0x01
000002e1: SLOAD
000002e2: PUSH1 0x00
000002e4: SWAP1
000002e5: GT
000002e6: ISZERO
000002e7: PUSH2 0x0316
000002ea: JUMPI
000002eb: PUSH1 0x00
000002ed: DUP1
000002ee: SLOAD
000002ef: PUSH1 0x01
000002f1: SLOAD
000002f2: PUSH1 0x01
000002f4: PUSH1 0xa0
000002f6: PUSH1 0x02
000002f8: EXP
000002f9: SUB
000002fa: SWAP2
000002fb: SWAP1
000002fc: SWAP2
000002fd: AND
000002fe: SWAP2
000002ff: PUSH1 0x60
00000301: SWAP1
00000302: DUP2
00000303: DUP2
00000304: DUP2
00000305: DUP6
00000306: DUP8
00000307: PUSH2 0x8502
0000030a: GAS
0000030b: SUB
0000030c: CALL
0000030d: POP
0000030e: POP
0000030f: PUSH1 0x00
00000311: PUSH1 0x01
00000313: SSTORE
00000314: POP
00000315: POP
00000316: JUMPDEST
00000317: JUMP
00000318: JUMPDEST
00000319: PUSH1 0x0c
0000031b: DUP1
0000031c: SLOAD
0000031d: DUP9
0000031e: ADD
0000031f: SWAP1
00000320: SSTORE
00000321: PUSH1 0x0d
00000323: DUP1
00000324: SLOAD
00000325: DUP8
00000326: ADD
00000327: SWAP1
00000328: SSTORE
00000329: PUSH2 0x03ee
0000032c: DUP8
0000032d: DUP8
0000032e: DUP14
0000032f: DUP12
00000330: PUSH1 0x0e
00000332: SLOAD
00000333: PUSH1 0x0c
00000335: SLOAD
00000336: PUSH1 0x0d
00000338: SLOAD
00000339: CALLER
0000033a: PUSH1 0x01
0000033c: PUSH1 0xa0
0000033e: PUSH1 0x02
00000340: EXP
00000341: SUB
00000342: AND
00000343: PUSH1 0x60
00000345: SWAP1
00000346: DUP2
00000347: MSTORE
00000348: PUSH4 0xffffffff
0000034d: TIMESTAMP
0000034e: AND
0000034f: PUSH1 0x80
00000351: MSTORE
00000352: PUSH1 0xff
00000354: DUP1
00000355: DUP10
00000356: AND
00000357: PUSH1 0xa0
00000359: MSTORE
0000035a: DUP8
0000035b: AND
0000035c: PUSH1 0xc0
0000035e: MSTORE
0000035f: PUSH1 0xe0
00000361: DUP7
00000362: SWAP1
00000363: MSTORE
00000364: PUSH2 0x0100
00000367: DUP6
00000368: SWAP1
00000369: MSTORE
0000036a: PUSH2 0x0120
0000036d: SWAP3
0000036e: DUP4
0000036f: MSTORE
00000370: PUSH2 0x0140
00000373: SWAP2
00000374: SWAP1
00000375: SWAP2
00000376: MSTORE
00000377: PUSH2 0x0160
0000037a: SWAP3
0000037b: SWAP1
0000037c: SWAP3
0000037d: MSTORE
0000037e: PUSH32 0x6030a674fe1394a06269212649d8b5692593d69523e6899123d8846381212e9a
0000039f: SWAP2
000003a0: LOG1
000003a1: POP
000003a2: POP
000003a3: POP
000003a4: POP
000003a5: JUMP
000003a6: JUMPDEST
000003a7: PUSH1 0x0a
000003a9: SWAP1
000003aa: SWAP10
000003ab: DIV
000003ac: SWAP9
000003ad: PUSH1 0x01
000003af: SWAP5
000003b0: SWAP1
000003b1: SWAP5
000003b2: ADD
000003b3: SWAP4
000003b4: PUSH2 0x01f5
000003b7: JUMP
000003b8: JUMPDEST
000003b9: PUSH1 0x01
000003bb: SWAP6
000003bc: SWAP1
000003bd: SWAP6
000003be: ADD
000003bf: SWAP5
000003c0: PUSH1 0x02
000003c2: DUP6
000003c3: PUSH1 0x03
000003c5: DUP2
000003c6: LT
000003c7: ISZERO
000003c8: PUSH2 0x0002
000003cb: JUMPI
000003cc: ADD
000003cd: SLOAD
000003ce: PUSH1 0x05
000003d0: DUP7
000003d1: PUSH1 0x03
000003d3: DUP2
000003d4: LT
000003d5: ISZERO
000003d6: PUSH2 0x0002
000003d9: JUMPI
000003da: ADD
000003db: DUP1
000003dc: SLOAD
000003dd: SWAP1
000003de: SWAP2
000003df: ADD
000003e0: SWAP1
000003e1: SSTORE
000003e2: JUMPDEST
000003e3: PUSH1 0x01
000003e5: SWAP3
000003e6: SWAP1
000003e7: SWAP3
000003e8: ADD
000003e9: SWAP2
000003ea: PUSH2 0x0212
000003ed: JUMP
000003ee: JUMPDEST
000003ef: POP
000003f0: SWAP6
000003f1: SWAP10
000003f2: SWAP9
000003f3: POP
000003f4: POP
000003f5: POP
000003f6: POP
000003f7: POP
000003f8: POP
000003f9: POP
000003fa: POP
000003fb: POP
000003fc: JUMP

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x1f368f648710c8f11211504e0e75d2c691704f0b15585900338a9706a96f650f call_targets: 0xa96f7d29dc792359b1ce24c7c54230882dee1be2 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x1f368f648710c8f11211504e0e75d2c691704f0b15585900338a9706a96f650f", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xa96f7d29dc792359b1ce24c7c54230882dee1be2" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x090015d8", "selector": "0x090015d8", "calldata_variants": [ "0x090015d8", "0x090015d80000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x20514abf", "selector": "0x20514abf", "calldata_variants": [ "0x20514abf", "0x20514abf0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x22e37189", "selector": "0x22e37189", "calldata_variants": [ "0x22e37189", "0x22e371890000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x256540cd", "selector": "0x256540cd", "calldata_variants": [ "0x256540cd", "0x256540cd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4311de8f", "selector": "0x4311de8f", "calldata_variants": [ "0x4311de8f", "0x4311de8f0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4fb30d8b", "selector": "0x4fb30d8b", "calldata_variants": [ "0x4fb30d8b", "0x4fb30d8b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x656ca11d", "selector": "0x656ca11d", "calldata_variants": [ "0x656ca11d", "0x656ca11d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x757007f6", "selector": "0x757007f6", "calldata_variants": [ "0x757007f6", "0x757007f60000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 714, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 780, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 2, "guards_detected": [], "untrusted_call_count": 2 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x1f368f648710c8f11211504e0e75d2c691704f0b15585900338a9706a96f650f call_targets: 0xa96f7d29dc792359b1ce24c7c54230882dee1be2 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x1f368f648710c8f11211504e0e75d2c691704f0b15585900338a9706a96f650f", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xa96f7d29dc792359b1ce24c7c54230882dee1be2" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x090015d8", "selector": "0x090015d8", "calldata_variants": [ "0x090015d8", "0x090015d80000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x20514abf", "selector": "0x20514abf", "calldata_variants": [ "0x20514abf", "0x20514abf0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x22e37189", "selector": "0x22e37189", "calldata_variants": [ "0x22e37189", "0x22e371890000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x256540cd", "selector": "0x256540cd", "calldata_variants": [ "0x256540cd", "0x256540cd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4311de8f", "selector": "0x4311de8f", "calldata_variants": [ "0x4311de8f", "0x4311de8f0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4fb30d8b", "selector": "0x4fb30d8b", "calldata_variants": [ "0x4fb30d8b", "0x4fb30d8b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x656ca11d", "selector": "0x656ca11d", "calldata_variants": [ "0x656ca11d", "0x656ca11d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x757007f6", "selector": "0x757007f6", "calldata_variants": [ "0x757007f6", "0x757007f60000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 714, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 780, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 2, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x1f368f648710c8f11211504e0e75d2c691704f0b15585900338a9706a96f650f

call_targets: 0xa96f7d29dc792359b1ce24c7c54230882dee1be2

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x1f368f648710c8f11211504e0e75d2c691704f0b15585900338a9706a96f650f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xa96f7d29dc792359b1ce24c7c54230882dee1be2"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x090015d8",
            "selector": "0x090015d8",
            "calldata_variants": [
                "0x090015d8",
                "0x090015d80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x20514abf",
            "selector": "0x20514abf",
            "calldata_variants": [
                "0x20514abf",
                "0x20514abf0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x22e37189",
            "selector": "0x22e37189",
            "calldata_variants": [
                "0x22e37189",
                "0x22e371890000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x256540cd",
            "selector": "0x256540cd",
            "calldata_variants": [
                "0x256540cd",
                "0x256540cd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4311de8f",
            "selector": "0x4311de8f",
            "calldata_variants": [
                "0x4311de8f",
                "0x4311de8f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4fb30d8b",
            "selector": "0x4fb30d8b",
            "calldata_variants": [
                "0x4fb30d8b",
                "0x4fb30d8b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x656ca11d",
            "selector": "0x656ca11d",
            "calldata_variants": [
                "0x656ca11d",
                "0x656ca11d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x757007f6",
            "selector": "0x757007f6",
            "calldata_variants": [
                "0x757007f6",
                "0x757007f60000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 714,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 780,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}