019b3836-3019-706a-8b2c-7493930b8725
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 2553 | artifact.fetch | complete | 1 / 3 | 4 months ago |
| 2554 | tool.cast_disasm | complete | 1 / 3 | 4 months ago |
| 79999 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 80000 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 80001 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 80002 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x006c 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x13af4035 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x0077 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x35c1d349 00000025: EQ 00000026: PUSH2 0x00ac 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x8da5cb5b 00000030: EQ 00000031: PUSH2 0x00f1 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x9003adfe 0000003b: EQ 0000003c: PUSH2 0x0103 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0xa60f3588 00000046: EQ 00000047: PUSH2 0x010c 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xb69ef8a8 00000051: EQ 00000052: PUSH2 0x0115 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0xc8796572 0000005c: EQ 0000005d: PUSH2 0x011e 00000060: JUMPI 00000061: DUP1 00000062: PUSH4 0xe97dcb62 00000067: EQ 00000068: PUSH2 0x0148 0000006b: JUMPI 0000006c: JUMPDEST 0000006d: PUSH2 0x0186 00000070: PUSH2 0x0146 00000073: PUSH2 0x014c 00000076: JUMP 00000077: JUMPDEST 00000078: PUSH2 0x0186 0000007b: PUSH1 0x04 0000007d: CALLDATALOAD 0000007e: PUSH1 0x04 00000080: SLOAD 00000081: PUSH1 0x01 00000083: PUSH1 0xa0 00000085: PUSH1 0x02 00000087: EXP 00000088: SUB 00000089: SWAP1 0000008a: DUP2 0000008b: AND 0000008c: CALLER 0000008d: SWAP2 0000008e: SWAP1 0000008f: SWAP2 00000090: AND 00000091: EQ 00000092: ISZERO 00000093: PUSH2 0x00a9 00000096: JUMPI 00000097: PUSH1 0x04 00000099: DUP1 0000009a: SLOAD 0000009b: PUSH1 0x01 0000009d: PUSH1 0xa0 0000009f: PUSH1 0x02 000000a1: EXP 000000a2: SUB 000000a3: NOT 000000a4: AND 000000a5: DUP3 000000a6: OR 000000a7: SWAP1 000000a8: SSTORE 000000a9: JUMPDEST 000000aa: POP 000000ab: JUMP 000000ac: JUMPDEST 000000ad: PUSH2 0x0188 000000b0: PUSH1 0x04 000000b2: CALLDATALOAD 000000b3: PUSH1 0x00 000000b5: DUP1 000000b6: SLOAD 000000b7: DUP3 000000b8: SWAP1 000000b9: DUP2 000000ba: LT 000000bb: ISZERO 000000bc: PUSH2 0x0002 000000bf: JUMPI 000000c0: POP 000000c1: DUP1 000000c2: MSTORE 000000c3: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 000000e4: ADD 000000e5: SLOAD 000000e6: PUSH1 0x01 000000e8: PUSH1 0xa0 000000ea: PUSH1 0x02 000000ec: EXP 000000ed: SUB 000000ee: AND 000000ef: DUP2 000000f0: JUMP 000000f1: JUMPDEST 000000f2: PUSH2 0x0188 000000f5: PUSH1 0x04 000000f7: SLOAD 000000f8: PUSH1 0x01 000000fa: PUSH1 0xa0 000000fc: PUSH1 0x02 000000fe: EXP 000000ff: SUB 00000100: AND 00000101: DUP2 00000102: JUMP 00000103: JUMPDEST 00000104: PUSH2 0x01a5 00000107: PUSH1 0x02 00000109: SLOAD 0000010a: DUP2 0000010b: JUMP 0000010c: JUMPDEST 0000010d: PUSH2 0x01a5 00000110: PUSH1 0x01 00000112: SLOAD 00000113: DUP2 00000114: JUMP 00000115: JUMPDEST 00000116: PUSH2 0x01a5 00000119: PUSH1 0x03 0000011b: SLOAD 0000011c: DUP2 0000011d: JUMP 0000011e: JUMPDEST 0000011f: PUSH2 0x0186 00000122: PUSH1 0x04 00000124: SLOAD 00000125: PUSH1 0x01 00000127: PUSH1 0xa0 00000129: PUSH1 0x02 0000012b: EXP 0000012c: SUB 0000012d: SWAP1 0000012e: DUP2 0000012f: AND 00000130: CALLER 00000131: SWAP2 00000132: SWAP1 00000133: SWAP2 00000134: AND 00000135: EQ 00000136: ISZERO 00000137: PUSH2 0x0146 0000013a: JUMPI 0000013b: PUSH1 0x02 0000013d: SLOAD 0000013e: PUSH1 0x00 00000140: EQ 00000141: ISZERO 00000142: PUSH2 0x0365 00000145: JUMPI 00000146: JUMPDEST 00000147: JUMP 00000148: JUMPDEST 00000149: PUSH2 0x0186 0000014c: JUMPDEST 0000014d: PUSH8 0x0de0b6b3a7640000 00000156: PUSH1 0x00 00000158: DUP1 00000159: CALLVALUE 0000015a: DUP4 0000015b: SWAP1 0000015c: LT 0000015d: ISZERO 0000015e: PUSH2 0x01b7 00000161: JUMPI 00000162: PUSH1 0x40 00000164: MLOAD 00000165: PUSH1 0x01 00000167: PUSH1 0xa0 00000169: PUSH1 0x02 0000016b: EXP 0000016c: SUB 0000016d: CALLER 0000016e: AND 0000016f: SWAP1 00000170: DUP3 00000171: SWAP1 00000172: CALLVALUE 00000173: SWAP1 00000174: DUP3 00000175: DUP2 00000176: DUP2 00000177: DUP2 00000178: DUP6 00000179: DUP9 0000017a: DUP4 0000017b: CALL 0000017c: POP 0000017d: POP 0000017e: POP 0000017f: POP 00000180: POP 00000181: JUMPDEST 00000182: POP 00000183: POP 00000184: POP 00000185: JUMP 00000186: JUMPDEST 00000187: STOP 00000188: JUMPDEST 00000189: PUSH1 0x40 0000018b: DUP1 0000018c: MLOAD 0000018d: PUSH1 0x01 0000018f: PUSH1 0xa0 00000191: PUSH1 0x02 00000193: EXP 00000194: SUB 00000195: SWAP3 00000196: SWAP1 00000197: SWAP3 00000198: AND 00000199: DUP3 0000019a: MSTORE 0000019b: MLOAD 0000019c: SWAP1 0000019d: DUP2 0000019e: SWAP1 0000019f: SUB 000001a0: PUSH1 0x20 000001a2: ADD 000001a3: SWAP1 000001a4: RETURN 000001a5: JUMPDEST 000001a6: PUSH1 0x40 000001a8: DUP1 000001a9: MLOAD 000001aa: SWAP2 000001ab: DUP3 000001ac: MSTORE 000001ad: MLOAD 000001ae: SWAP1 000001af: DUP2 000001b0: SWAP1 000001b1: SUB 000001b2: PUSH1 0x20 000001b4: ADD 000001b5: SWAP1 000001b6: RETURN 000001b7: JUMPDEST 000001b8: DUP3 000001b9: CALLVALUE 000001ba: GT 000001bb: ISZERO 000001bc: PUSH2 0x01e3 000001bf: JUMPI 000001c0: PUSH1 0x40 000001c2: MLOAD 000001c3: PUSH1 0x01 000001c5: PUSH1 0xa0 000001c7: PUSH1 0x02 000001c9: EXP 000001ca: SUB 000001cb: CALLER 000001cc: AND 000001cd: SWAP1 000001ce: PUSH1 0x00 000001d0: SWAP1 000001d1: CALLVALUE 000001d2: DUP7 000001d3: SWAP1 000001d4: SUB 000001d5: SWAP1 000001d6: DUP3 000001d7: DUP2 000001d8: DUP2 000001d9: DUP2 000001da: DUP6 000001db: DUP9 000001dc: DUP4 000001dd: CALL 000001de: POP 000001df: POP 000001e0: POP 000001e1: POP 000001e2: POP 000001e3: JUMPDEST 000001e4: PUSH1 0x00 000001e6: DUP1 000001e7: SLOAD 000001e8: PUSH1 0x01 000001ea: DUP2 000001eb: ADD 000001ec: DUP1 000001ed: DUP4 000001ee: SSTORE 000001ef: SWAP1 000001f0: SWAP4 000001f1: POP 000001f2: SWAP1 000001f3: DUP2 000001f4: DUP5 000001f5: DUP1 000001f6: ISZERO 000001f7: DUP3 000001f8: SWAP1 000001f9: GT 000001fa: PUSH2 0x0230 000001fd: JUMPI 000001fe: DUP2 000001ff: DUP4 00000200: PUSH1 0x00 00000202: MSTORE 00000203: PUSH1 0x20 00000205: PUSH1 0x00 00000207: KECCAK256 00000208: SWAP2 00000209: DUP3 0000020a: ADD 0000020b: SWAP2 0000020c: ADD 0000020d: PUSH2 0x0230 00000210: SWAP2 00000211: SWAP1 00000212: JUMPDEST 00000213: DUP1 00000214: DUP3 00000215: GT 00000216: ISZERO 00000217: PUSH2 0x02d2 0000021a: JUMPI 0000021b: DUP1 0000021c: SLOAD 0000021d: PUSH1 0x01 0000021f: PUSH1 0xa0 00000221: PUSH1 0x02 00000223: EXP 00000224: SUB 00000225: NOT 00000226: AND 00000227: DUP2 00000228: SSTORE 00000229: PUSH1 0x01 0000022b: ADD 0000022c: PUSH2 0x0212 0000022f: JUMP 00000230: JUMPDEST 00000231: POP 00000232: POP 00000233: POP 00000234: POP 00000235: CALLER 00000236: PUSH1 0x00 00000238: PUSH1 0x00 0000023a: POP 0000023b: DUP4 0000023c: DUP2 0000023d: SLOAD 0000023e: DUP2 0000023f: LT 00000240: ISZERO 00000241: PUSH2 0x0002 00000244: JUMPI 00000245: DUP2 00000246: DUP1 00000247: MSTORE 00000248: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 00000269: ADD 0000026a: DUP1 0000026b: SLOAD 0000026c: PUSH1 0x01 0000026e: PUSH1 0xa0 00000270: PUSH1 0x02 00000272: EXP 00000273: SUB 00000274: NOT 00000275: AND 00000276: SWAP1 00000277: SWAP3 00000278: OR 00000279: SWAP1 0000027a: SWAP2 0000027b: SSTORE 0000027c: DUP3 0000027d: EQ 0000027e: PUSH2 0x02d6 00000281: JUMPI 00000282: PUSH1 0x02 00000284: DUP1 00000285: SLOAD 00000286: PUSH1 0x64 00000288: DUP6 00000289: DIV 0000028a: SWAP1 0000028b: DUP2 0000028c: ADD 0000028d: SWAP2 0000028e: DUP3 0000028f: SWAP1 00000290: SSTORE 00000291: PUSH1 0x03 00000293: DUP1 00000294: SLOAD 00000295: PUSH1 0x63 00000297: DUP4 00000298: MUL 00000299: ADD 0000029a: SWAP1 0000029b: SSTORE 0000029c: PUSH1 0x85 0000029e: MUL 0000029f: SWAP1 000002a0: LT 000002a1: PUSH2 0x02cd 000002a4: JUMPI 000002a5: PUSH1 0x04 000002a7: SLOAD 000002a8: PUSH1 0x40 000002aa: MLOAD 000002ab: PUSH1 0x02 000002ad: SLOAD 000002ae: PUSH1 0x01 000002b0: PUSH1 0xa0 000002b2: PUSH1 0x02 000002b4: EXP 000002b5: SUB 000002b6: SWAP3 000002b7: SWAP1 000002b8: SWAP3 000002b9: AND 000002ba: SWAP2 000002bb: PUSH1 0x00 000002bd: SWAP2 000002be: DUP3 000002bf: DUP2 000002c0: DUP2 000002c1: DUP2 000002c2: DUP6 000002c3: DUP9 000002c4: DUP4 000002c5: CALL 000002c6: POP 000002c7: POP 000002c8: POP 000002c9: PUSH1 0x02 000002cb: SSTORE 000002cc: POP 000002cd: JUMPDEST 000002ce: PUSH2 0x02df 000002d1: JUMP 000002d2: JUMPDEST 000002d3: POP 000002d4: SWAP1 000002d5: JUMP 000002d6: JUMPDEST 000002d7: PUSH1 0x02 000002d9: DUP1 000002da: SLOAD 000002db: CALLVALUE 000002dc: ADD 000002dd: SWAP1 000002de: SSTORE 000002df: JUMPDEST 000002e0: JUMPDEST 000002e1: PUSH1 0x03 000002e3: SLOAD 000002e4: PUSH1 0x64 000002e6: DUP5 000002e7: DIV 000002e8: PUSH1 0x85 000002ea: MUL 000002eb: SWAP1 000002ec: GT 000002ed: ISZERO 000002ee: PUSH2 0x0181 000002f1: JUMPI 000002f2: POP 000002f3: PUSH1 0x01 000002f5: SLOAD 000002f6: PUSH1 0x00 000002f8: DUP1 000002f9: SLOAD 000002fa: PUSH1 0x64 000002fc: DUP6 000002fd: DIV 000002fe: PUSH1 0x85 00000300: MUL 00000301: SWAP3 00000302: SWAP1 00000303: DUP2 00000304: LT 00000305: ISZERO 00000306: PUSH2 0x0002 00000309: JUMPI 0000030a: DUP2 0000030b: DUP1 0000030c: MSTORE 0000030d: PUSH1 0x40 0000030f: MLOAD 00000310: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 00000331: SWAP2 00000332: SWAP1 00000333: SWAP2 00000334: ADD 00000335: SLOAD 00000336: PUSH1 0x01 00000338: PUSH1 0xa0 0000033a: PUSH1 0x02 0000033c: EXP 0000033d: SUB 0000033e: AND 0000033f: SWAP2 00000340: SWAP1 00000341: DUP4 00000342: SWAP1 00000343: DUP3 00000344: DUP2 00000345: DUP2 00000346: DUP2 00000347: DUP6 00000348: DUP9 00000349: DUP4 0000034a: CALL 0000034b: POP 0000034c: POP 0000034d: PUSH1 0x03 0000034f: DUP1 00000350: SLOAD 00000351: SWAP2 00000352: SWAP1 00000353: SWAP2 00000354: SUB 00000355: SWAP1 00000356: SSTORE 00000357: POP 00000358: POP 00000359: PUSH1 0x01 0000035b: DUP1 0000035c: SLOAD 0000035d: DUP2 0000035e: ADD 0000035f: SWAP1 00000360: SSTORE 00000361: PUSH2 0x02e0 00000364: JUMP 00000365: JUMPDEST 00000366: PUSH1 0x04 00000368: SLOAD 00000369: PUSH1 0x02 0000036b: SLOAD 0000036c: PUSH1 0x40 0000036e: MLOAD 0000036f: PUSH1 0x01 00000371: PUSH1 0xa0 00000373: PUSH1 0x02 00000375: EXP 00000376: SUB 00000377: SWAP3 00000378: SWAP1 00000379: SWAP3 0000037a: AND 0000037b: SWAP2 0000037c: PUSH1 0x00 0000037e: SWAP2 0000037f: SWAP1 00000380: DUP3 00000381: DUP2 00000382: DUP2 00000383: DUP2 00000384: DUP6 00000385: DUP9 00000386: DUP4 00000387: CALL 00000388: POP 00000389: POP 0000038a: POP 0000038b: PUSH1 0x02 0000038d: SSTORE 0000038e: POP 0000038f: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x017f4b230c8895320c7663a1df5672c371d3037282a17415f9823f66192e933f
call_targets:
0x85c84c949b1c29c85b777f2873a19450dbb1a057
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x017f4b230c8895320c7663a1df5672c371d3037282a17415f9823f66192e933f",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x85c84c949b1c29c85b777f2873a19450dbb1a057"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x35c1d349",
"selector": "0x35c1d349",
"calldata_variants": [
"0x35c1d349",
"0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9003adfe",
"selector": "0x9003adfe",
"calldata_variants": [
"0x9003adfe",
"0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb69ef8a8",
"selector": "0xb69ef8a8",
"calldata_variants": [
"0xb69ef8a8",
"0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xc8796572",
"selector": "0xc8796572",
"calldata_variants": [
"0xc8796572",
"0xc87965720000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 379,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 477,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 709,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 5,
"guards_detected": [],
"untrusted_call_count": 5
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x017f4b230c8895320c7663a1df5672c371d3037282a17415f9823f66192e933f
call_targets:
0x85c84c949b1c29c85b777f2873a19450dbb1a057
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x017f4b230c8895320c7663a1df5672c371d3037282a17415f9823f66192e933f",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x85c84c949b1c29c85b777f2873a19450dbb1a057"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x35c1d349",
"selector": "0x35c1d349",
"calldata_variants": [
"0x35c1d349",
"0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9003adfe",
"selector": "0x9003adfe",
"calldata_variants": [
"0x9003adfe",
"0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb69ef8a8",
"selector": "0xb69ef8a8",
"calldata_variants": [
"0xb69ef8a8",
"0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xc8796572",
"selector": "0xc8796572",
"calldata_variants": [
"0xc8796572",
"0xc87965720000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 379,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 477,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 709,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 5,
"guards_detected": []
}
|