019b3836-3056-733b-af47-9315200f6111
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 2599 | artifact.fetch | complete | 1 / 3 | 4 months ago |
| 2600 | tool.cast_disasm | complete | 1 / 3 | 4 months ago |
| 79915 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 79916 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 79917 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 79918 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x006c 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x13af4035 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x0077 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x35c1d349 00000025: EQ 00000026: PUSH2 0x00ac 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x8da5cb5b 00000030: EQ 00000031: PUSH2 0x00f1 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x9003adfe 0000003b: EQ 0000003c: PUSH2 0x0103 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0xa60f3588 00000046: EQ 00000047: PUSH2 0x010c 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xb69ef8a8 00000051: EQ 00000052: PUSH2 0x0115 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0xc8796572 0000005c: EQ 0000005d: PUSH2 0x011e 00000060: JUMPI 00000061: DUP1 00000062: PUSH4 0xe97dcb62 00000067: EQ 00000068: PUSH2 0x0148 0000006b: JUMPI 0000006c: JUMPDEST 0000006d: PUSH2 0x0186 00000070: PUSH2 0x0146 00000073: PUSH2 0x014c 00000076: JUMP 00000077: JUMPDEST 00000078: PUSH2 0x0186 0000007b: PUSH1 0x04 0000007d: CALLDATALOAD 0000007e: PUSH1 0x04 00000080: SLOAD 00000081: PUSH1 0x01 00000083: PUSH1 0xa0 00000085: PUSH1 0x02 00000087: EXP 00000088: SUB 00000089: SWAP1 0000008a: DUP2 0000008b: AND 0000008c: CALLER 0000008d: SWAP2 0000008e: SWAP1 0000008f: SWAP2 00000090: AND 00000091: EQ 00000092: ISZERO 00000093: PUSH2 0x00a9 00000096: JUMPI 00000097: PUSH1 0x04 00000099: DUP1 0000009a: SLOAD 0000009b: PUSH1 0x01 0000009d: PUSH1 0xa0 0000009f: PUSH1 0x02 000000a1: EXP 000000a2: SUB 000000a3: NOT 000000a4: AND 000000a5: DUP3 000000a6: OR 000000a7: SWAP1 000000a8: SSTORE 000000a9: JUMPDEST 000000aa: POP 000000ab: JUMP 000000ac: JUMPDEST 000000ad: PUSH2 0x0188 000000b0: PUSH1 0x04 000000b2: CALLDATALOAD 000000b3: PUSH1 0x00 000000b5: DUP1 000000b6: SLOAD 000000b7: DUP3 000000b8: SWAP1 000000b9: DUP2 000000ba: LT 000000bb: ISZERO 000000bc: PUSH2 0x0002 000000bf: JUMPI 000000c0: POP 000000c1: DUP1 000000c2: MSTORE 000000c3: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 000000e4: ADD 000000e5: SLOAD 000000e6: PUSH1 0x01 000000e8: PUSH1 0xa0 000000ea: PUSH1 0x02 000000ec: EXP 000000ed: SUB 000000ee: AND 000000ef: DUP2 000000f0: JUMP 000000f1: JUMPDEST 000000f2: PUSH2 0x0188 000000f5: PUSH1 0x04 000000f7: SLOAD 000000f8: PUSH1 0x01 000000fa: PUSH1 0xa0 000000fc: PUSH1 0x02 000000fe: EXP 000000ff: SUB 00000100: AND 00000101: DUP2 00000102: JUMP 00000103: JUMPDEST 00000104: PUSH2 0x01a5 00000107: PUSH1 0x02 00000109: SLOAD 0000010a: DUP2 0000010b: JUMP 0000010c: JUMPDEST 0000010d: PUSH2 0x01a5 00000110: PUSH1 0x01 00000112: SLOAD 00000113: DUP2 00000114: JUMP 00000115: JUMPDEST 00000116: PUSH2 0x01a5 00000119: PUSH1 0x03 0000011b: SLOAD 0000011c: DUP2 0000011d: JUMP 0000011e: JUMPDEST 0000011f: PUSH2 0x0186 00000122: PUSH1 0x04 00000124: SLOAD 00000125: PUSH1 0x01 00000127: PUSH1 0xa0 00000129: PUSH1 0x02 0000012b: EXP 0000012c: SUB 0000012d: SWAP1 0000012e: DUP2 0000012f: AND 00000130: CALLER 00000131: SWAP2 00000132: SWAP1 00000133: SWAP2 00000134: AND 00000135: EQ 00000136: ISZERO 00000137: PUSH2 0x0146 0000013a: JUMPI 0000013b: PUSH1 0x02 0000013d: SLOAD 0000013e: PUSH1 0x00 00000140: EQ 00000141: ISZERO 00000142: PUSH2 0x0359 00000145: JUMPI 00000146: JUMPDEST 00000147: JUMP 00000148: JUMPDEST 00000149: PUSH2 0x0186 0000014c: JUMPDEST 0000014d: PUSH8 0x8ac7230489e80000 00000156: PUSH1 0x00 00000158: DUP1 00000159: CALLVALUE 0000015a: DUP4 0000015b: SWAP1 0000015c: LT 0000015d: ISZERO 0000015e: PUSH2 0x01b7 00000161: JUMPI 00000162: PUSH1 0x40 00000164: MLOAD 00000165: PUSH1 0x01 00000167: PUSH1 0xa0 00000169: PUSH1 0x02 0000016b: EXP 0000016c: SUB 0000016d: CALLER 0000016e: AND 0000016f: SWAP1 00000170: DUP3 00000171: SWAP1 00000172: CALLVALUE 00000173: SWAP1 00000174: DUP3 00000175: DUP2 00000176: DUP2 00000177: DUP2 00000178: DUP6 00000179: DUP9 0000017a: DUP4 0000017b: CALL 0000017c: POP 0000017d: POP 0000017e: POP 0000017f: POP 00000180: POP 00000181: JUMPDEST 00000182: POP 00000183: POP 00000184: POP 00000185: JUMP 00000186: JUMPDEST 00000187: STOP 00000188: JUMPDEST 00000189: PUSH1 0x40 0000018b: DUP1 0000018c: MLOAD 0000018d: PUSH1 0x01 0000018f: PUSH1 0xa0 00000191: PUSH1 0x02 00000193: EXP 00000194: SUB 00000195: SWAP3 00000196: SWAP1 00000197: SWAP3 00000198: AND 00000199: DUP3 0000019a: MSTORE 0000019b: MLOAD 0000019c: SWAP1 0000019d: DUP2 0000019e: SWAP1 0000019f: SUB 000001a0: PUSH1 0x20 000001a2: ADD 000001a3: SWAP1 000001a4: RETURN 000001a5: JUMPDEST 000001a6: PUSH1 0x40 000001a8: DUP1 000001a9: MLOAD 000001aa: SWAP2 000001ab: DUP3 000001ac: MSTORE 000001ad: MLOAD 000001ae: SWAP1 000001af: DUP2 000001b0: SWAP1 000001b1: SUB 000001b2: PUSH1 0x20 000001b4: ADD 000001b5: SWAP1 000001b6: RETURN 000001b7: JUMPDEST 000001b8: DUP3 000001b9: CALLVALUE 000001ba: GT 000001bb: ISZERO 000001bc: PUSH2 0x01e3 000001bf: JUMPI 000001c0: PUSH1 0x40 000001c2: MLOAD 000001c3: PUSH1 0x01 000001c5: PUSH1 0xa0 000001c7: PUSH1 0x02 000001c9: EXP 000001ca: SUB 000001cb: CALLER 000001cc: AND 000001cd: SWAP1 000001ce: PUSH1 0x00 000001d0: SWAP1 000001d1: CALLVALUE 000001d2: DUP7 000001d3: SWAP1 000001d4: SUB 000001d5: SWAP1 000001d6: DUP3 000001d7: DUP2 000001d8: DUP2 000001d9: DUP2 000001da: DUP6 000001db: DUP9 000001dc: DUP4 000001dd: CALL 000001de: POP 000001df: POP 000001e0: POP 000001e1: POP 000001e2: POP 000001e3: JUMPDEST 000001e4: PUSH1 0x00 000001e6: DUP1 000001e7: SLOAD 000001e8: PUSH1 0x01 000001ea: DUP2 000001eb: ADD 000001ec: DUP1 000001ed: DUP4 000001ee: SSTORE 000001ef: SWAP1 000001f0: SWAP4 000001f1: POP 000001f2: SWAP1 000001f3: DUP2 000001f4: DUP5 000001f5: DUP1 000001f6: ISZERO 000001f7: DUP3 000001f8: SWAP1 000001f9: GT 000001fa: PUSH2 0x0230 000001fd: JUMPI 000001fe: DUP2 000001ff: DUP4 00000200: PUSH1 0x00 00000202: MSTORE 00000203: PUSH1 0x20 00000205: PUSH1 0x00 00000207: KECCAK256 00000208: SWAP2 00000209: DUP3 0000020a: ADD 0000020b: SWAP2 0000020c: ADD 0000020d: PUSH2 0x0230 00000210: SWAP2 00000211: SWAP1 00000212: JUMPDEST 00000213: DUP1 00000214: DUP3 00000215: GT 00000216: ISZERO 00000217: PUSH2 0x0355 0000021a: JUMPI 0000021b: DUP1 0000021c: SLOAD 0000021d: PUSH1 0x01 0000021f: PUSH1 0xa0 00000221: PUSH1 0x02 00000223: EXP 00000224: SUB 00000225: NOT 00000226: AND 00000227: DUP2 00000228: SSTORE 00000229: PUSH1 0x01 0000022b: ADD 0000022c: PUSH2 0x0212 0000022f: JUMP 00000230: JUMPDEST 00000231: POP 00000232: POP 00000233: POP 00000234: POP 00000235: CALLER 00000236: PUSH1 0x00 00000238: PUSH1 0x00 0000023a: POP 0000023b: DUP4 0000023c: DUP2 0000023d: SLOAD 0000023e: DUP2 0000023f: LT 00000240: ISZERO 00000241: PUSH2 0x0002 00000244: JUMPI 00000245: SWAP1 00000246: DUP1 00000247: MSTORE 00000248: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 00000269: ADD 0000026a: DUP1 0000026b: SLOAD 0000026c: PUSH1 0x01 0000026e: PUSH1 0xa0 00000270: PUSH1 0x02 00000272: EXP 00000273: SUB 00000274: NOT 00000275: AND 00000276: SWAP1 00000277: SWAP2 00000278: OR 00000279: SWAP1 0000027a: SSTORE 0000027b: PUSH1 0x02 0000027d: DUP1 0000027e: SLOAD 0000027f: PUSH1 0x64 00000281: DUP6 00000282: DIV 00000283: SWAP1 00000284: DUP2 00000285: ADD 00000286: SWAP2 00000287: DUP3 00000288: SWAP1 00000289: SSTORE 0000028a: PUSH1 0x03 0000028c: DUP1 0000028d: SLOAD 0000028e: PUSH1 0x63 00000290: SWAP3 00000291: SWAP1 00000292: SWAP3 00000293: MUL 00000294: SWAP1 00000295: SWAP2 00000296: ADD 00000297: SWAP1 00000298: SSTORE 00000299: PUSH2 0x03e8 0000029c: DUP5 0000029d: DIV 0000029e: PUSH1 0x85 000002a0: MUL 000002a1: SWAP1 000002a2: LT 000002a3: PUSH2 0x02cf 000002a6: JUMPI 000002a7: PUSH1 0x04 000002a9: SLOAD 000002aa: PUSH1 0x40 000002ac: MLOAD 000002ad: PUSH1 0x02 000002af: SLOAD 000002b0: PUSH1 0x01 000002b2: PUSH1 0xa0 000002b4: PUSH1 0x02 000002b6: EXP 000002b7: SUB 000002b8: SWAP3 000002b9: SWAP1 000002ba: SWAP3 000002bb: AND 000002bc: SWAP2 000002bd: PUSH1 0x00 000002bf: SWAP2 000002c0: DUP3 000002c1: DUP2 000002c2: DUP2 000002c3: DUP2 000002c4: DUP6 000002c5: DUP9 000002c6: DUP4 000002c7: CALL 000002c8: POP 000002c9: POP 000002ca: POP 000002cb: PUSH1 0x02 000002cd: SSTORE 000002ce: POP 000002cf: JUMPDEST 000002d0: JUMPDEST 000002d1: PUSH1 0x03 000002d3: SLOAD 000002d4: PUSH1 0x64 000002d6: DUP5 000002d7: DIV 000002d8: PUSH1 0x85 000002da: MUL 000002db: SWAP1 000002dc: GT 000002dd: ISZERO 000002de: PUSH2 0x0181 000002e1: JUMPI 000002e2: POP 000002e3: PUSH1 0x01 000002e5: SLOAD 000002e6: PUSH1 0x00 000002e8: DUP1 000002e9: SLOAD 000002ea: PUSH1 0x64 000002ec: DUP6 000002ed: DIV 000002ee: PUSH1 0x85 000002f0: MUL 000002f1: SWAP3 000002f2: SWAP1 000002f3: DUP2 000002f4: LT 000002f5: ISZERO 000002f6: PUSH2 0x0002 000002f9: JUMPI 000002fa: DUP2 000002fb: DUP1 000002fc: MSTORE 000002fd: PUSH1 0x40 000002ff: MLOAD 00000300: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 00000321: SWAP2 00000322: SWAP1 00000323: SWAP2 00000324: ADD 00000325: SLOAD 00000326: PUSH1 0x01 00000328: PUSH1 0xa0 0000032a: PUSH1 0x02 0000032c: EXP 0000032d: SUB 0000032e: AND 0000032f: SWAP2 00000330: SWAP1 00000331: DUP4 00000332: SWAP1 00000333: DUP3 00000334: DUP2 00000335: DUP2 00000336: DUP2 00000337: DUP6 00000338: DUP9 00000339: DUP4 0000033a: CALL 0000033b: POP 0000033c: POP 0000033d: PUSH1 0x03 0000033f: DUP1 00000340: SLOAD 00000341: SWAP2 00000342: SWAP1 00000343: SWAP2 00000344: SUB 00000345: SWAP1 00000346: SSTORE 00000347: POP 00000348: POP 00000349: PUSH1 0x01 0000034b: DUP1 0000034c: SLOAD 0000034d: DUP2 0000034e: ADD 0000034f: SWAP1 00000350: SSTORE 00000351: PUSH2 0x02d0 00000354: JUMP 00000355: JUMPDEST 00000356: POP 00000357: SWAP1 00000358: JUMP 00000359: JUMPDEST 0000035a: PUSH1 0x04 0000035c: SLOAD 0000035d: PUSH1 0x02 0000035f: SLOAD 00000360: PUSH1 0x40 00000362: MLOAD 00000363: PUSH1 0x01 00000365: PUSH1 0xa0 00000367: PUSH1 0x02 00000369: EXP 0000036a: SUB 0000036b: SWAP3 0000036c: SWAP1 0000036d: SWAP3 0000036e: AND 0000036f: SWAP2 00000370: PUSH1 0x00 00000372: SWAP2 00000373: SWAP1 00000374: DUP3 00000375: DUP2 00000376: DUP2 00000377: DUP2 00000378: DUP6 00000379: DUP9 0000037a: DUP4 0000037b: CALL 0000037c: POP 0000037d: POP 0000037e: POP 0000037f: PUSH1 0x02 00000381: SSTORE 00000382: POP 00000383: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x019cc0f587203d2a9521dae89ead1578f758d4cddd8ff34abf37da21b0744274
call_targets:
0xab7689c7be6d9b5428d6bf4c536dc699fc919260
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x019cc0f587203d2a9521dae89ead1578f758d4cddd8ff34abf37da21b0744274",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xab7689c7be6d9b5428d6bf4c536dc699fc919260"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x35c1d349",
"selector": "0x35c1d349",
"calldata_variants": [
"0x35c1d349",
"0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9003adfe",
"selector": "0x9003adfe",
"calldata_variants": [
"0x9003adfe",
"0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb69ef8a8",
"selector": "0xb69ef8a8",
"calldata_variants": [
"0xb69ef8a8",
"0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xc8796572",
"selector": "0xc8796572",
"calldata_variants": [
"0xc8796572",
"0xc87965720000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 379,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 477,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 711,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 5,
"guards_detected": [],
"untrusted_call_count": 5
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x019cc0f587203d2a9521dae89ead1578f758d4cddd8ff34abf37da21b0744274
call_targets:
0xab7689c7be6d9b5428d6bf4c536dc699fc919260
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x019cc0f587203d2a9521dae89ead1578f758d4cddd8ff34abf37da21b0744274",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xab7689c7be6d9b5428d6bf4c536dc699fc919260"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x35c1d349",
"selector": "0x35c1d349",
"calldata_variants": [
"0x35c1d349",
"0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9003adfe",
"selector": "0x9003adfe",
"calldata_variants": [
"0x9003adfe",
"0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb69ef8a8",
"selector": "0xb69ef8a8",
"calldata_variants": [
"0xb69ef8a8",
"0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xc8796572",
"selector": "0xc8796572",
"calldata_variants": [
"0xc8796572",
"0xc87965720000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 379,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 477,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 711,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 5,
"guards_detected": []
}
|