TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-2fc1-73b6-90ae-6eebdb575a36

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
2491 artifact.fetch complete 1 / 3 3 months ago
2492 tool.cast_disasm complete 1 / 3 3 months ago
96834 analysis.bundle complete 1 / 3 1 week ago
96835 capability.graph complete 1 / 3 1 week ago
96836 detector.run complete 1 / 3 1 week ago
96837 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
3
EXT*/BALANCE
0
Total opcodes
995
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0077
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x13af4035
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x0082
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x35c1d349
00000025: EQ
00000026: PUSH2 0x00bc
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x5d90d43b
00000030: EQ
00000031: PUSH2 0x010b
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x8da5cb5b
0000003b: EQ
0000003c: PUSH2 0x0235
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x9003adfe
00000046: EQ
00000047: PUSH2 0x0247
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0xa60f3588
00000051: EQ
00000052: PUSH2 0x0250
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0xb69ef8a8
0000005c: EQ
0000005d: PUSH2 0x0259
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0xc8796572
00000067: EQ
00000068: PUSH2 0x0262
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0xe97dcb62
00000072: EQ
00000073: PUSH2 0x0291
00000076: JUMPI
00000077: JUMPDEST
00000078: PUSH2 0x02c9
0000007b: PUSH2 0x028f
0000007e: PUSH2 0x0295
00000081: JUMP
00000082: JUMPDEST
00000083: PUSH2 0x02c9
00000086: PUSH1 0x04
00000088: CALLDATALOAD
00000089: PUSH1 0x04
0000008b: SLOAD
0000008c: CALLER
0000008d: PUSH1 0x01
0000008f: PUSH1 0xa0
00000091: PUSH1 0x02
00000093: EXP
00000094: SUB
00000095: SWAP1
00000096: DUP2
00000097: AND
00000098: SWAP2
00000099: AND
0000009a: EQ
0000009b: ISZERO
0000009c: PUSH2 0x0232
0000009f: JUMPI
000000a0: PUSH1 0x04
000000a2: DUP1
000000a3: SLOAD
000000a4: PUSH1 0x02
000000a6: DUP1
000000a7: SLOAD
000000a8: CALLVALUE
000000a9: ADD
000000aa: SWAP1
000000ab: SSTORE
000000ac: PUSH1 0x01
000000ae: PUSH1 0xa0
000000b0: PUSH1 0x02
000000b2: EXP
000000b3: SUB
000000b4: NOT
000000b5: AND
000000b6: DUP3
000000b7: OR
000000b8: SWAP1
000000b9: SSTORE
000000ba: POP
000000bb: JUMP
000000bc: JUMPDEST
000000bd: PUSH2 0x02cb
000000c0: PUSH1 0x04
000000c2: CALLDATALOAD
000000c3: PUSH1 0x00
000000c5: DUP1
000000c6: SLOAD
000000c7: DUP3
000000c8: SWAP1
000000c9: DUP2
000000ca: LT
000000cb: ISZERO
000000cc: PUSH2 0x0002
000000cf: JUMPI
000000d0: POP
000000d1: DUP1
000000d2: MSTORE
000000d3: PUSH1 0x02
000000d5: MUL
000000d6: PUSH1 0x00
000000d8: DUP1
000000d9: MLOAD
000000da: PUSH1 0x20
000000dc: PUSH2 0x050a
000000df: DUP4
000000e0: CODECOPY
000000e1: DUP2
000000e2: MLOAD
000000e3: SWAP2
000000e4: MSTORE
000000e5: DUP2
000000e6: ADD
000000e7: SLOAD
000000e8: PUSH1 0x00
000000ea: DUP1
000000eb: MLOAD
000000ec: PUSH1 0x20
000000ee: PUSH2 0x052a
000000f1: DUP4
000000f2: CODECOPY
000000f3: DUP2
000000f4: MLOAD
000000f5: SWAP2
000000f6: MSTORE
000000f7: SWAP2
000000f8: SWAP1
000000f9: SWAP2
000000fa: ADD
000000fb: SLOAD
000000fc: PUSH1 0x01
000000fe: PUSH1 0xa0
00000100: PUSH1 0x02
00000102: EXP
00000103: SUB
00000104: SWAP2
00000105: SWAP1
00000106: SWAP2
00000107: AND
00000108: SWAP1
00000109: DUP3
0000010a: JUMP
0000010b: JUMPDEST
0000010c: PUSH1 0x02
0000010e: DUP1
0000010f: SLOAD
00000110: PUSH1 0x32
00000112: CALLVALUE
00000113: SWAP1
00000114: DUP2
00000115: DIV
00000116: SWAP2
00000117: DUP3
00000118: ADD
00000119: SWAP1
0000011a: SWAP3
0000011b: SSTORE
0000011c: PUSH1 0x03
0000011e: DUP1
0000011f: SLOAD
00000120: SWAP2
00000121: SWAP1
00000122: SWAP3
00000123: SUB
00000124: ADD
00000125: SWAP1
00000126: SSTORE
00000127: PUSH1 0x01
00000129: SLOAD
0000012a: PUSH1 0x00
0000012c: DUP1
0000012d: SLOAD
0000012e: PUSH2 0x02c9
00000131: SWAP3
00000132: DUP3
00000133: SWAP2
00000134: DUP2
00000135: LT
00000136: ISZERO
00000137: PUSH2 0x0002
0000013a: JUMPI
0000013b: SWAP1
0000013c: DUP1
0000013d: MSTORE
0000013e: PUSH1 0x02
00000140: MUL
00000141: PUSH1 0x00
00000143: DUP1
00000144: MLOAD
00000145: PUSH1 0x20
00000147: PUSH2 0x050a
0000014a: DUP4
0000014b: CODECOPY
0000014c: DUP2
0000014d: MLOAD
0000014e: SWAP2
0000014f: MSTORE
00000150: ADD
00000151: DUP2
00000152: POP
00000153: PUSH1 0x01
00000155: ADD
00000156: PUSH1 0x00
00000158: POP
00000159: SLOAD
0000015a: PUSH1 0x02
0000015c: MUL
0000015d: PUSH1 0x03
0000015f: PUSH1 0x00
00000161: POP
00000162: SLOAD
00000163: GT
00000164: ISZERO
00000165: PUSH2 0x0232
00000168: JUMPI
00000169: PUSH1 0x01
0000016b: SLOAD
0000016c: PUSH1 0x00
0000016e: DUP1
0000016f: SLOAD
00000170: PUSH1 0x32
00000172: SWAP3
00000173: SWAP1
00000174: DUP2
00000175: LT
00000176: ISZERO
00000177: PUSH2 0x0002
0000017a: JUMPI
0000017b: DUP2
0000017c: DUP1
0000017d: MSTORE
0000017e: PUSH1 0x02
00000180: MUL
00000181: PUSH1 0x00
00000183: DUP1
00000184: MLOAD
00000185: PUSH1 0x20
00000187: PUSH2 0x050a
0000018a: DUP4
0000018b: CODECOPY
0000018c: DUP2
0000018d: MLOAD
0000018e: SWAP2
0000018f: MSTORE
00000190: ADD
00000191: SWAP1
00000192: POP
00000193: PUSH1 0x01
00000195: ADD
00000196: PUSH1 0x00
00000198: POP
00000199: SLOAD
0000019a: DIV
0000019b: PUSH1 0x00
0000019d: PUSH1 0x00
0000019f: POP
000001a0: PUSH1 0x01
000001a2: PUSH1 0x00
000001a4: POP
000001a5: SLOAD
000001a6: DUP2
000001a7: SLOAD
000001a8: DUP2
000001a9: LT
000001aa: ISZERO
000001ab: PUSH2 0x0002
000001ae: JUMPI
000001af: DUP2
000001b0: DUP1
000001b1: MSTORE
000001b2: PUSH1 0x02
000001b4: MUL
000001b5: PUSH1 0x00
000001b7: DUP1
000001b8: MLOAD
000001b9: PUSH1 0x20
000001bb: PUSH2 0x050a
000001be: DUP4
000001bf: CODECOPY
000001c0: DUP2
000001c1: MLOAD
000001c2: SWAP2
000001c3: MSTORE
000001c4: ADD
000001c5: SWAP1
000001c6: POP
000001c7: PUSH1 0x01
000001c9: ADD
000001ca: PUSH1 0x00
000001cc: POP
000001cd: SLOAD
000001ce: SUB
000001cf: PUSH1 0x02
000001d1: MUL
000001d2: SWAP1
000001d3: POP
000001d4: PUSH1 0x00
000001d6: PUSH1 0x00
000001d8: POP
000001d9: PUSH1 0x01
000001db: PUSH1 0x00
000001dd: POP
000001de: SLOAD
000001df: DUP2
000001e0: SLOAD
000001e1: DUP2
000001e2: LT
000001e3: ISZERO
000001e4: PUSH2 0x0002
000001e7: JUMPI
000001e8: DUP2
000001e9: DUP1
000001ea: MSTORE
000001eb: PUSH1 0x02
000001ed: MUL
000001ee: PUSH1 0x00
000001f0: DUP1
000001f1: MLOAD
000001f2: PUSH1 0x20
000001f4: PUSH2 0x050a
000001f7: DUP4
000001f8: CODECOPY
000001f9: DUP2
000001fa: MLOAD
000001fb: SWAP2
000001fc: MSTORE
000001fd: ADD
000001fe: SWAP1
000001ff: POP
00000200: PUSH1 0x40
00000202: MLOAD
00000203: SWAP1
00000204: SLOAD
00000205: PUSH1 0x01
00000207: PUSH1 0xa0
00000209: PUSH1 0x02
0000020b: EXP
0000020c: SUB
0000020d: AND
0000020e: SWAP1
0000020f: PUSH1 0x00
00000211: SWAP1
00000212: DUP4
00000213: SWAP1
00000214: DUP3
00000215: DUP2
00000216: DUP2
00000217: DUP2
00000218: DUP6
00000219: DUP9
0000021a: DUP4
0000021b: CALL
0000021c: POP
0000021d: POP
0000021e: PUSH1 0x03
00000220: DUP1
00000221: SLOAD
00000222: SWAP2
00000223: SWAP1
00000224: SWAP2
00000225: SUB
00000226: SWAP1
00000227: SSTORE
00000228: POP
00000229: POP
0000022a: PUSH1 0x01
0000022c: DUP1
0000022d: SLOAD
0000022e: DUP2
0000022f: ADD
00000230: SWAP1
00000231: SSTORE
00000232: JUMPDEST
00000233: POP
00000234: JUMP
00000235: JUMPDEST
00000236: PUSH2 0x02f1
00000239: PUSH1 0x04
0000023b: SLOAD
0000023c: PUSH1 0x01
0000023e: PUSH1 0xa0
00000240: PUSH1 0x02
00000242: EXP
00000243: SUB
00000244: AND
00000245: DUP2
00000246: JUMP
00000247: JUMPDEST
00000248: PUSH2 0x030e
0000024b: PUSH1 0x02
0000024d: SLOAD
0000024e: DUP2
0000024f: JUMP
00000250: JUMPDEST
00000251: PUSH2 0x030e
00000254: PUSH1 0x01
00000256: SLOAD
00000257: DUP2
00000258: JUMP
00000259: JUMPDEST
0000025a: PUSH2 0x030e
0000025d: PUSH1 0x03
0000025f: SLOAD
00000260: DUP2
00000261: JUMP
00000262: JUMPDEST
00000263: PUSH2 0x02c9
00000266: PUSH1 0x04
00000268: SLOAD
00000269: CALLER
0000026a: PUSH1 0x01
0000026c: PUSH1 0xa0
0000026e: PUSH1 0x02
00000270: EXP
00000271: SUB
00000272: SWAP1
00000273: DUP2
00000274: AND
00000275: SWAP2
00000276: AND
00000277: EQ
00000278: ISZERO
00000279: PUSH2 0x028f
0000027c: JUMPI
0000027d: PUSH1 0x02
0000027f: DUP1
00000280: SLOAD
00000281: CALLVALUE
00000282: ADD
00000283: SWAP1
00000284: DUP2
00000285: SWAP1
00000286: SSTORE
00000287: PUSH1 0x00
00000289: EQ
0000028a: ISZERO
0000028b: PUSH2 0x04df
0000028e: JUMPI
0000028f: JUMPDEST
00000290: JUMP
00000291: JUMPDEST
00000292: PUSH2 0x02c9
00000295: JUMPDEST
00000296: PUSH1 0x00
00000298: PUSH1 0x00
0000029a: PUSH8 0x0de0b6b3a7640000
000002a3: CALLVALUE
000002a4: LT
000002a5: ISZERO
000002a6: PUSH2 0x0480
000002a9: JUMPI
000002aa: PUSH1 0x02
000002ac: DUP1
000002ad: SLOAD
000002ae: PUSH1 0x32
000002b0: CALLVALUE
000002b1: SWAP1
000002b2: DUP2
000002b3: DIV
000002b4: SWAP2
000002b5: DUP3
000002b6: ADD
000002b7: SWAP1
000002b8: SWAP3
000002b9: SSTORE
000002ba: PUSH1 0x03
000002bc: DUP1
000002bd: SLOAD
000002be: SWAP2
000002bf: SWAP1
000002c0: SWAP3
000002c1: SUB
000002c2: ADD
000002c3: SWAP1
000002c4: SSTORE
000002c5: PUSH2 0x047c
000002c8: JUMP
000002c9: JUMPDEST
000002ca: STOP
000002cb: JUMPDEST
000002cc: PUSH1 0x40
000002ce: MLOAD
000002cf: DUP1
000002d0: DUP4
000002d1: PUSH1 0x01
000002d3: PUSH1 0xa0
000002d5: PUSH1 0x02
000002d7: EXP
000002d8: SUB
000002d9: AND
000002da: DUP2
000002db: MSTORE
000002dc: PUSH1 0x20
000002de: ADD
000002df: DUP3
000002e0: DUP2
000002e1: MSTORE
000002e2: PUSH1 0x20
000002e4: ADD
000002e5: SWAP3
000002e6: POP
000002e7: POP
000002e8: POP
000002e9: PUSH1 0x40
000002eb: MLOAD
000002ec: DUP1
000002ed: SWAP2
000002ee: SUB
000002ef: SWAP1
000002f0: RETURN
000002f1: JUMPDEST
000002f2: PUSH1 0x40
000002f4: DUP1
000002f5: MLOAD
000002f6: PUSH1 0x01
000002f8: PUSH1 0xa0
000002fa: PUSH1 0x02
000002fc: EXP
000002fd: SUB
000002fe: SWAP3
000002ff: SWAP1
00000300: SWAP3
00000301: AND
00000302: DUP3
00000303: MSTORE
00000304: MLOAD
00000305: SWAP1
00000306: DUP2
00000307: SWAP1
00000308: SUB
00000309: PUSH1 0x20
0000030b: ADD
0000030c: SWAP1
0000030d: RETURN
0000030e: JUMPDEST
0000030f: PUSH1 0x40
00000311: DUP1
00000312: MLOAD
00000313: SWAP2
00000314: DUP3
00000315: MSTORE
00000316: MLOAD
00000317: SWAP1
00000318: DUP2
00000319: SWAP1
0000031a: SUB
0000031b: PUSH1 0x20
0000031d: ADD
0000031e: SWAP1
0000031f: RETURN
00000320: JUMPDEST
00000321: POP
00000322: POP
00000323: POP
00000324: POP
00000325: CALLER
00000326: PUSH1 0x00
00000328: PUSH1 0x00
0000032a: POP
0000032b: DUP4
0000032c: DUP2
0000032d: SLOAD
0000032e: DUP2
0000032f: LT
00000330: ISZERO
00000331: PUSH2 0x0002
00000334: JUMPI
00000335: DUP2
00000336: DUP1
00000337: MSTORE
00000338: PUSH1 0x02
0000033a: MUL
0000033b: PUSH1 0x00
0000033d: DUP1
0000033e: MLOAD
0000033f: PUSH1 0x20
00000341: PUSH2 0x050a
00000344: DUP4
00000345: CODECOPY
00000346: DUP2
00000347: MLOAD
00000348: SWAP2
00000349: MSTORE
0000034a: ADD
0000034b: DUP1
0000034c: SLOAD
0000034d: PUSH1 0x01
0000034f: PUSH1 0xa0
00000351: PUSH1 0x02
00000353: EXP
00000354: SUB
00000355: NOT
00000356: AND
00000357: SWAP1
00000358: SWAP3
00000359: OR
0000035a: SWAP1
0000035b: SWAP2
0000035c: SSTORE
0000035d: DUP1
0000035e: SLOAD
0000035f: CALLVALUE
00000360: SWAP2
00000361: SWAP1
00000362: DUP5
00000363: SWAP1
00000364: DUP2
00000365: LT
00000366: ISZERO
00000367: PUSH2 0x0002
0000036a: JUMPI
0000036b: PUSH1 0x02
0000036d: MUL
0000036e: PUSH1 0x00
00000370: DUP1
00000371: MLOAD
00000372: PUSH1 0x20
00000374: PUSH2 0x052a
00000377: DUP4
00000378: CODECOPY
00000379: DUP2
0000037a: MLOAD
0000037b: SWAP2
0000037c: MSTORE
0000037d: ADD
0000037e: SWAP2
0000037f: SWAP1
00000380: SWAP2
00000381: SSTORE
00000382: PUSH1 0x01
00000384: SLOAD
00000385: DUP2
00000386: SLOAD
00000387: DUP2
00000388: LT
00000389: ISZERO
0000038a: PUSH2 0x0002
0000038d: JUMPI
0000038e: PUSH1 0x03
00000390: SLOAD
00000391: PUSH1 0x02
00000393: SWAP2
00000394: DUP3
00000395: MUL
00000396: PUSH1 0x00
00000398: DUP1
00000399: MLOAD
0000039a: PUSH1 0x20
0000039c: PUSH2 0x052a
0000039f: DUP4
000003a0: CODECOPY
000003a1: DUP2
000003a2: MLOAD
000003a3: SWAP2
000003a4: MSTORE
000003a5: ADD
000003a6: SLOAD
000003a7: SWAP1
000003a8: SWAP2
000003a9: MUL
000003aa: SWAP1
000003ab: GT
000003ac: ISZERO
000003ad: SWAP1
000003ae: POP
000003af: PUSH2 0x0460
000003b2: JUMPI
000003b3: PUSH1 0x01
000003b5: SLOAD
000003b6: PUSH1 0x00
000003b8: DUP1
000003b9: SLOAD
000003ba: PUSH1 0x14
000003bc: SWAP3
000003bd: SWAP1
000003be: DUP2
000003bf: LT
000003c0: ISZERO
000003c1: PUSH2 0x0002
000003c4: JUMPI
000003c5: PUSH1 0x01
000003c7: SLOAD
000003c8: DUP3
000003c9: SLOAD
000003ca: PUSH1 0x02
000003cc: SWAP3
000003cd: SWAP1
000003ce: SWAP3
000003cf: MUL
000003d0: PUSH1 0x00
000003d2: DUP1
000003d3: MLOAD
000003d4: PUSH1 0x20
000003d6: PUSH2 0x052a
000003d9: DUP4
000003da: CODECOPY
000003db: DUP2
000003dc: MLOAD
000003dd: SWAP2
000003de: MSTORE
000003df: ADD
000003e0: SLOAD
000003e1: SWAP4
000003e2: SWAP1
000003e3: SWAP4
000003e4: DIV
000003e5: SWAP3
000003e6: SWAP1
000003e7: DUP2
000003e8: LT
000003e9: ISZERO
000003ea: PUSH2 0x0002
000003ed: JUMPI
000003ee: PUSH1 0x01
000003f0: SLOAD
000003f1: DUP3
000003f2: SLOAD
000003f3: PUSH1 0x02
000003f5: SWAP3
000003f6: DUP4
000003f7: MUL
000003f8: PUSH1 0x00
000003fa: DUP1
000003fb: MLOAD
000003fc: PUSH1 0x20
000003fe: PUSH2 0x052a
00000401: DUP4
00000402: CODECOPY
00000403: DUP2
00000404: MLOAD
00000405: SWAP2
00000406: MSTORE
00000407: ADD
00000408: SLOAD
00000409: SWAP5
0000040a: SWAP1
0000040b: SWAP5
0000040c: SUB
0000040d: SWAP1
0000040e: SWAP2
0000040f: MUL
00000410: SWAP4
00000411: POP
00000412: SWAP1
00000413: SWAP2
00000414: DUP2
00000415: LT
00000416: ISZERO
00000417: PUSH2 0x0002
0000041a: JUMPI
0000041b: PUSH1 0x02
0000041d: MUL
0000041e: PUSH1 0x00
00000420: DUP1
00000421: MLOAD
00000422: PUSH1 0x20
00000424: PUSH2 0x050a
00000427: DUP4
00000428: CODECOPY
00000429: DUP2
0000042a: MLOAD
0000042b: SWAP2
0000042c: MSTORE
0000042d: ADD
0000042e: SLOAD
0000042f: PUSH1 0x40
00000431: MLOAD
00000432: PUSH1 0x01
00000434: PUSH1 0xa0
00000436: PUSH1 0x02
00000438: EXP
00000439: SUB
0000043a: SWAP2
0000043b: SWAP1
0000043c: SWAP2
0000043d: AND
0000043e: SWAP2
0000043f: SWAP1
00000440: DUP4
00000441: SWAP1
00000442: DUP3
00000443: DUP2
00000444: DUP2
00000445: DUP2
00000446: DUP6
00000447: DUP9
00000448: DUP4
00000449: CALL
0000044a: POP
0000044b: POP
0000044c: PUSH1 0x03
0000044e: DUP1
0000044f: SLOAD
00000450: SWAP2
00000451: SWAP1
00000452: SWAP2
00000453: SUB
00000454: SWAP1
00000455: SSTORE
00000456: POP
00000457: POP
00000458: PUSH1 0x01
0000045a: DUP1
0000045b: SLOAD
0000045c: DUP2
0000045d: ADD
0000045e: SWAP1
0000045f: SSTORE
00000460: JUMPDEST
00000461: PUSH1 0x02
00000463: DUP1
00000464: SLOAD
00000465: PUSH1 0x32
00000467: CALLVALUE
00000468: SWAP1
00000469: DUP2
0000046a: DIV
0000046b: SWAP2
0000046c: DUP3
0000046d: ADD
0000046e: SWAP1
0000046f: SWAP3
00000470: SSTORE
00000471: PUSH1 0x03
00000473: DUP1
00000474: SLOAD
00000475: SWAP2
00000476: SWAP1
00000477: SWAP3
00000478: SUB
00000479: ADD
0000047a: SWAP1
0000047b: SSTORE
0000047c: JUMPDEST
0000047d: POP
0000047e: POP
0000047f: JUMP
00000480: JUMPDEST
00000481: PUSH1 0x00
00000483: DUP1
00000484: SLOAD
00000485: PUSH1 0x01
00000487: DUP2
00000488: ADD
00000489: DUP1
0000048a: DUP4
0000048b: SSTORE
0000048c: SWAP1
0000048d: SWAP4
0000048e: POP
0000048f: SWAP1
00000490: DUP2
00000491: DUP5
00000492: DUP1
00000493: ISZERO
00000494: DUP3
00000495: SWAP1
00000496: GT
00000497: PUSH2 0x0320
0000049a: JUMPI
0000049b: PUSH1 0x02
0000049d: MUL
0000049e: DUP2
0000049f: PUSH1 0x02
000004a1: MUL
000004a2: DUP4
000004a3: PUSH1 0x00
000004a5: MSTORE
000004a6: PUSH1 0x20
000004a8: PUSH1 0x00
000004aa: KECCAK256
000004ab: SWAP2
000004ac: DUP3
000004ad: ADD
000004ae: SWAP2
000004af: ADD
000004b0: PUSH2 0x0320
000004b3: SWAP2
000004b4: SWAP1
000004b5: JUMPDEST
000004b6: DUP1
000004b7: DUP3
000004b8: GT
000004b9: ISZERO
000004ba: PUSH2 0x04db
000004bd: JUMPI
000004be: DUP1
000004bf: SLOAD
000004c0: PUSH1 0x01
000004c2: PUSH1 0xa0
000004c4: PUSH1 0x02
000004c6: EXP
000004c7: SUB
000004c8: NOT
000004c9: AND
000004ca: DUP2
000004cb: SSTORE
000004cc: PUSH1 0x00
000004ce: PUSH1 0x01
000004d0: SWAP2
000004d1: SWAP1
000004d2: SWAP2
000004d3: ADD
000004d4: SWAP1
000004d5: DUP2
000004d6: SSTORE
000004d7: PUSH2 0x04b5
000004da: JUMP
000004db: JUMPDEST
000004dc: POP
000004dd: SWAP1
000004de: JUMP
000004df: JUMPDEST
000004e0: PUSH1 0x04
000004e2: SLOAD
000004e3: PUSH1 0x02
000004e5: SLOAD
000004e6: PUSH1 0x40
000004e8: MLOAD
000004e9: PUSH1 0x01
000004eb: PUSH1 0xa0
000004ed: PUSH1 0x02
000004ef: EXP
000004f0: SUB
000004f1: SWAP3
000004f2: SWAP1
000004f3: SWAP3
000004f4: AND
000004f5: SWAP2
000004f6: PUSH1 0x00
000004f8: SWAP2
000004f9: SWAP1
000004fa: DUP3
000004fb: DUP2
000004fc: DUP2
000004fd: DUP2
000004fe: DUP6
000004ff: DUP9
00000500: DUP4
00000501: CALL
00000502: POP
00000503: POP
00000504: POP
00000505: PUSH1 0x02
00000507: SSTORE
00000508: POP
00000509: JUMP
0000050a: UNKNOWN(0x29)
0000050b: UNKNOWN(0x0D)
0000050c: UNKNOWN(0xEC)
0000050d: UNKNOWN(0xD9)
0000050e: SLOAD
0000050f: DUP12
00000510: PUSH3 0xa8d603
00000514: GASLIMIT
00000515: UNKNOWN(0xA9)
00000516: DUP9
00000517: CODESIZE
00000518: PUSH16 0xc84ba6bc95484008f6362f93160ef3e5
00000529: PUSH4 0x290decd9
0000052e: SLOAD
0000052f: DUP12
00000530: PUSH3 0xa8d603
00000534: GASLIMIT
00000535: UNKNOWN(0xA9)
00000536: DUP9
00000537: CODESIZE
00000538: PUSH16 0xc84ba6bc95484008f6362f93160ef3e5
00000549: PUSH5
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xee0dec9df1fd4f806eacded51f4a2140ae5668ec7f54471c3291ebeb93fdaed5
call_targets: 0x4c63ffdb88a5abd5d1ff7d0378697df8d9f65802
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xee0dec9df1fd4f806eacded51f4a2140ae5668ec7f54471c3291ebeb93fdaed5",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x4c63ffdb88a5abd5d1ff7d0378697df8d9f65802"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x13af4035",
            "selector": "0x13af4035",
            "calldata_variants": [
                "0x13af4035",
                "0x13af40350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x35c1d349",
            "selector": "0x35c1d349",
            "calldata_variants": [
                "0x35c1d349",
                "0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5d90d43b",
            "selector": "0x5d90d43b",
            "calldata_variants": [
                "0x5d90d43b",
                "0x5d90d43b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9003adfe",
            "selector": "0x9003adfe",
            "calldata_variants": [
                "0x9003adfe",
                "0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa60f3588",
            "selector": "0xa60f3588",
            "calldata_variants": [
                "0xa60f3588",
                "0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb69ef8a8",
            "selector": "0xb69ef8a8",
            "calldata_variants": [
                "0xb69ef8a8",
                "0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc8796572",
            "selector": "0xc8796572",
            "calldata_variants": [
                "0xc8796572",
                "0xc87965720000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 539,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1097,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1281,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 3
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xee0dec9df1fd4f806eacded51f4a2140ae5668ec7f54471c3291ebeb93fdaed5
call_targets: 0x4c63ffdb88a5abd5d1ff7d0378697df8d9f65802
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xee0dec9df1fd4f806eacded51f4a2140ae5668ec7f54471c3291ebeb93fdaed5",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x4c63ffdb88a5abd5d1ff7d0378697df8d9f65802"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x13af4035",
            "selector": "0x13af4035",
            "calldata_variants": [
                "0x13af4035",
                "0x13af40350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x35c1d349",
            "selector": "0x35c1d349",
            "calldata_variants": [
                "0x35c1d349",
                "0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5d90d43b",
            "selector": "0x5d90d43b",
            "calldata_variants": [
                "0x5d90d43b",
                "0x5d90d43b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9003adfe",
            "selector": "0x9003adfe",
            "calldata_variants": [
                "0x9003adfe",
                "0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa60f3588",
            "selector": "0xa60f3588",
            "calldata_variants": [
                "0xa60f3588",
                "0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb69ef8a8",
            "selector": "0xb69ef8a8",
            "calldata_variants": [
                "0xb69ef8a8",
                "0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc8796572",
            "selector": "0xc8796572",
            "calldata_variants": [
                "0xc8796572",
                "0xc87965720000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 539,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1097,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1281,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 3,
    "guards_detected": []
}