019b3836-308c-70c8-9f36-802f1051a6cc
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 2639 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 2640 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 46148 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 46149 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 46150 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 46151 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0xe0 00000007: PUSH1 0x02 00000009: EXP 0000000a: PUSH1 0x00 0000000c: CALLDATALOAD 0000000d: DIV 0000000e: PUSH4 0x2f54bf6e 00000013: DUP2 00000014: EQ 00000015: PUSH2 0x0031 00000018: JUMPI 00000019: DUP1 0000001a: PUSH4 0x797af627 0000001f: EQ 00000020: PUSH2 0x00a0 00000023: JUMPI 00000024: DUP1 00000025: PUSH4 0xb61d27f6 0000002a: EQ 0000002b: PUSH2 0x00b1 0000002e: JUMPI 0000002f: JUMPDEST 00000030: STOP 00000031: JUMPDEST 00000032: PUSH2 0x00d2 00000035: PUSH1 0x04 00000037: CALLDATALOAD 00000038: JUMPDEST 00000039: PUSH1 0x00 0000003b: DUP1 0000003c: JUMPDEST 0000003d: PUSH1 0x01 0000003f: SLOAD 00000040: DUP2 00000041: LT 00000042: ISZERO 00000043: PUSH2 0x00e4 00000046: JUMPI 00000047: DUP3 00000048: PUSH1 0x01 0000004a: PUSH1 0xa0 0000004c: PUSH1 0x02 0000004e: EXP 0000004f: SUB 00000050: AND 00000051: PUSH1 0x01 00000053: PUSH1 0x00 00000055: POP 00000056: DUP3 00000057: DUP2 00000058: SLOAD 00000059: DUP2 0000005a: LT 0000005b: ISZERO 0000005c: PUSH2 0x0002 0000005f: JUMPI 00000060: PUSH1 0x00 00000062: SWAP2 00000063: SWAP1 00000064: SWAP2 00000065: MSTORE 00000066: PUSH32 0xb10e2d527612073b26eecdfd717e6a320cf44b4afac2b0732d9fcbe2b7fa0cf6 00000087: ADD 00000088: SLOAD 00000089: PUSH1 0x01 0000008b: PUSH1 0xa0 0000008d: PUSH1 0x02 0000008f: EXP 00000090: SUB 00000091: AND 00000092: EQ 00000093: ISZERO 00000094: PUSH2 0x00ef 00000097: JUMPI 00000098: PUSH1 0x01 0000009a: SWAP2 0000009b: POP 0000009c: PUSH2 0x00e9 0000009f: JUMP 000000a0: JUMPDEST 000000a1: PUSH2 0x00d2 000000a4: PUSH1 0x04 000000a6: CALLDATALOAD 000000a7: PUSH1 0x00 000000a9: PUSH2 0x0205 000000ac: CALLER 000000ad: PUSH2 0x0038 000000b0: JUMP 000000b1: JUMPDEST 000000b2: PUSH2 0x00d2 000000b5: PUSH1 0x04 000000b7: DUP1 000000b8: CALLDATALOAD 000000b9: SWAP1 000000ba: PUSH1 0x24 000000bc: DUP1 000000bd: CALLDATALOAD 000000be: SWAP2 000000bf: PUSH1 0x44 000000c1: CALLDATALOAD 000000c2: SWAP2 000000c3: DUP3 000000c4: ADD 000000c5: SWAP2 000000c6: ADD 000000c7: CALLDATALOAD 000000c8: PUSH1 0x00 000000ca: PUSH2 0x00f7 000000cd: CALLER 000000ce: PUSH2 0x0038 000000d1: JUMP 000000d2: JUMPDEST 000000d3: PUSH1 0x40 000000d5: DUP1 000000d6: MLOAD 000000d7: SWAP2 000000d8: DUP3 000000d9: MSTORE 000000da: MLOAD 000000db: SWAP1 000000dc: DUP2 000000dd: SWAP1 000000de: SUB 000000df: PUSH1 0x20 000000e1: ADD 000000e2: SWAP1 000000e3: RETURN 000000e4: JUMPDEST 000000e5: PUSH1 0x00 000000e7: SWAP2 000000e8: POP 000000e9: JUMPDEST 000000ea: POP 000000eb: SWAP2 000000ec: SWAP1 000000ed: POP 000000ee: JUMP 000000ef: JUMPDEST 000000f0: PUSH1 0x01 000000f2: ADD 000000f3: PUSH2 0x003c 000000f6: JUMP 000000f7: JUMPDEST 000000f8: ISZERO 000000f9: PUSH2 0x01c9 000000fc: JUMPI 000000fd: PUSH1 0x00 000000ff: CALLDATASIZE 00000100: NUMBER 00000101: PUSH1 0x40 00000103: MLOAD 00000104: DUP1 00000105: DUP5 00000106: DUP5 00000107: DUP1 00000108: DUP3 00000109: DUP5 0000010a: CALLDATACOPY 0000010b: POP 0000010c: POP 0000010d: POP 0000010e: SWAP1 0000010f: SWAP2 00000110: ADD 00000111: SWAP1 00000112: DUP2 00000113: MSTORE 00000114: PUSH1 0x40 00000116: DUP1 00000117: MLOAD 00000118: SWAP2 00000119: DUP3 0000011a: SWAP1 0000011b: SUB 0000011c: PUSH1 0x20 0000011e: SWAP1 0000011f: DUP2 00000120: ADD 00000121: SWAP1 00000122: SWAP3 00000123: KECCAK256 00000124: DUP1 00000125: DUP5 00000126: MSTORE 00000127: DUP4 00000128: DUP4 00000129: MSTORE 0000012a: SWAP1 0000012b: DUP4 0000012c: KECCAK256 0000012d: DUP1 0000012e: SLOAD 0000012f: PUSH1 0x01 00000131: PUSH1 0xa0 00000133: PUSH1 0x02 00000135: EXP 00000136: SUB 00000137: NOT 00000138: AND 00000139: DUP10 0000013a: OR 0000013b: DUP2 0000013c: SSTORE 0000013d: PUSH1 0x01 0000013f: DUP2 00000140: DUP2 00000141: ADD 00000142: DUP10 00000143: SWAP1 00000144: SSTORE 00000145: PUSH1 0x02 00000147: SWAP2 00000148: DUP3 00000149: ADD 0000014a: DUP1 0000014b: SLOAD 0000014c: DUP2 0000014d: DUP8 0000014e: MSTORE 0000014f: SWAP6 00000150: DUP6 00000151: SWAP1 00000152: KECCAK256 00000153: SWAP4 00000154: SWAP7 00000155: POP 00000156: SWAP5 00000157: SWAP1 00000158: DUP2 00000159: AND 0000015a: ISZERO 0000015b: PUSH2 0x0100 0000015e: MUL 0000015f: PUSH1 0x00 00000161: NOT 00000162: ADD 00000163: AND 00000164: DIV 00000165: PUSH1 0x1f 00000167: SWAP1 00000168: DUP2 00000169: ADD 0000016a: SWAP3 0000016b: SWAP1 0000016c: SWAP3 0000016d: DIV 0000016e: DUP2 0000016f: ADD 00000170: SWAP2 00000171: DUP6 00000172: SWAP2 00000173: SWAP1 00000174: DUP8 00000175: SWAP1 00000176: DUP4 00000177: SWAP1 00000178: LT 00000179: PUSH2 0x01d1 0000017c: JUMPI 0000017d: DUP3 0000017e: DUP1 0000017f: ADD 00000180: DUP2 00000181: CALLDATALOAD 00000182: PUSH1 0xff 00000184: NOT 00000185: AND 00000186: OR 00000187: DUP6 00000188: SSTORE 00000189: JUMPDEST 0000018a: POP 0000018b: PUSH2 0x01a5 0000018e: SWAP3 0000018f: SWAP2 00000190: POP 00000191: JUMPDEST 00000192: DUP1 00000193: DUP3 00000194: GT 00000195: ISZERO 00000196: PUSH2 0x0201 00000199: JUMPI 0000019a: PUSH1 0x00 0000019c: DUP2 0000019d: SSTORE 0000019e: PUSH1 0x01 000001a0: ADD 000001a1: PUSH2 0x0191 000001a4: JUMP 000001a5: JUMPDEST 000001a6: POP 000001a7: POP 000001a8: PUSH1 0x00 000001aa: DUP2 000001ab: DUP2 000001ac: MSTORE 000001ad: PUSH1 0x20 000001af: DUP2 000001b0: SWAP1 000001b1: MSTORE 000001b2: PUSH1 0x40 000001b4: SWAP1 000001b5: KECCAK256 000001b6: PUSH1 0x03 000001b8: ADD 000001b9: DUP1 000001ba: SLOAD 000001bb: PUSH1 0x01 000001bd: PUSH1 0xa0 000001bf: PUSH1 0x02 000001c1: EXP 000001c2: SUB 000001c3: NOT 000001c4: AND 000001c5: CALLER 000001c6: OR 000001c7: SWAP1 000001c8: SSTORE 000001c9: JUMPDEST 000001ca: SWAP5 000001cb: SWAP4 000001cc: POP 000001cd: POP 000001ce: POP 000001cf: POP 000001d0: JUMP 000001d1: JUMPDEST 000001d2: DUP3 000001d3: DUP1 000001d4: ADD 000001d5: PUSH1 0x01 000001d7: ADD 000001d8: DUP6 000001d9: SSTORE 000001da: DUP3 000001db: ISZERO 000001dc: PUSH2 0x0189 000001df: JUMPI 000001e0: SWAP2 000001e1: DUP3 000001e2: ADD 000001e3: JUMPDEST 000001e4: DUP3 000001e5: DUP2 000001e6: GT 000001e7: ISZERO 000001e8: PUSH2 0x0189 000001eb: JUMPI 000001ec: DUP3 000001ed: CALLDATALOAD 000001ee: DUP3 000001ef: PUSH1 0x00 000001f1: POP 000001f2: SSTORE 000001f3: SWAP2 000001f4: PUSH1 0x20 000001f6: ADD 000001f7: SWAP2 000001f8: SWAP1 000001f9: PUSH1 0x01 000001fb: ADD 000001fc: SWAP1 000001fd: PUSH2 0x01e3 00000200: JUMP 00000201: JUMPDEST 00000202: POP 00000203: SWAP1 00000204: JUMP 00000205: JUMPDEST 00000206: ISZERO 00000207: PUSH2 0x02d8 0000020a: JUMPI 0000020b: PUSH1 0x00 0000020d: DUP3 0000020e: DUP2 0000020f: MSTORE 00000210: PUSH1 0x20 00000212: DUP2 00000213: SWAP1 00000214: MSTORE 00000215: PUSH1 0x40 00000217: DUP2 00000218: KECCAK256 00000219: SLOAD 0000021a: PUSH1 0x01 0000021c: PUSH1 0xa0 0000021e: PUSH1 0x02 00000220: EXP 00000221: SUB 00000222: AND 00000223: EQ 00000224: ISZERO 00000225: PUSH2 0x02dd 00000228: JUMPI 00000229: POP 0000022a: PUSH1 0x00 0000022c: PUSH2 0x02d8 0000022f: JUMP 00000230: JUMPDEST 00000231: DUP3 00000232: ADD 00000233: SWAP2 00000234: SWAP1 00000235: PUSH1 0x00 00000237: MSTORE 00000238: PUSH1 0x20 0000023a: PUSH1 0x00 0000023c: KECCAK256 0000023d: SWAP1 0000023e: JUMPDEST 0000023f: DUP2 00000240: SLOAD 00000241: DUP2 00000242: MSTORE 00000243: SWAP1 00000244: PUSH1 0x01 00000246: ADD 00000247: SWAP1 00000248: PUSH1 0x20 0000024a: ADD 0000024b: DUP1 0000024c: DUP4 0000024d: GT 0000024e: PUSH2 0x023e 00000251: JUMPI 00000252: DUP3 00000253: SWAP1 00000254: SUB 00000255: PUSH1 0x1f 00000257: AND 00000258: DUP3 00000259: ADD 0000025a: SWAP2 0000025b: JUMPDEST 0000025c: POP 0000025d: POP 0000025e: SWAP2 0000025f: POP 00000260: POP 00000261: PUSH1 0x00 00000263: PUSH1 0x40 00000265: MLOAD 00000266: DUP1 00000267: DUP4 00000268: SUB 00000269: DUP2 0000026a: DUP6 0000026b: DUP8 0000026c: PUSH2 0x8502 0000026f: GAS 00000270: SUB 00000271: CALL 00000272: POP 00000273: POP 00000274: POP 00000275: PUSH1 0x00 00000277: DUP4 00000278: DUP2 00000279: MSTORE 0000027a: PUSH1 0x20 0000027c: DUP2 0000027d: SWAP1 0000027e: MSTORE 0000027f: PUSH1 0x40 00000281: DUP2 00000282: KECCAK256 00000283: DUP1 00000284: SLOAD 00000285: PUSH1 0x01 00000287: PUSH1 0xa0 00000289: PUSH1 0x02 0000028b: EXP 0000028c: SUB 0000028d: NOT 0000028e: AND 0000028f: DUP2 00000290: SSTORE 00000291: PUSH1 0x01 00000293: DUP2 00000294: DUP2 00000295: ADD 00000296: DUP4 00000297: SWAP1 00000298: SSTORE 00000299: PUSH1 0x02 0000029b: DUP3 0000029c: DUP2 0000029d: ADD 0000029e: DUP1 0000029f: SLOAD 000002a0: DUP6 000002a1: DUP3 000002a2: SSTORE 000002a3: SWAP4 000002a4: SWAP6 000002a5: POP 000002a6: SWAP3 000002a7: SWAP2 000002a8: DUP3 000002a9: AND 000002aa: ISZERO 000002ab: PUSH2 0x0100 000002ae: MUL 000002af: PUSH1 0x00 000002b1: NOT 000002b2: ADD 000002b3: SWAP1 000002b4: SWAP2 000002b5: AND 000002b6: DIV 000002b7: PUSH1 0x1f 000002b9: DUP2 000002ba: SWAP1 000002bb: LT 000002bc: PUSH2 0x0374 000002bf: JUMPI 000002c0: POP 000002c1: JUMPDEST 000002c2: POP 000002c3: POP 000002c4: PUSH1 0x03 000002c6: ADD 000002c7: DUP1 000002c8: SLOAD 000002c9: PUSH1 0x01 000002cb: PUSH1 0xa0 000002cd: PUSH1 0x02 000002cf: EXP 000002d0: SUB 000002d1: NOT 000002d2: AND 000002d3: SWAP1 000002d4: SSTORE 000002d5: POP 000002d6: PUSH1 0x01 000002d8: JUMPDEST 000002d9: SWAP2 000002da: SWAP1 000002db: POP 000002dc: JUMP 000002dd: JUMPDEST 000002de: PUSH1 0x00 000002e0: DUP3 000002e1: DUP2 000002e2: MSTORE 000002e3: PUSH1 0x20 000002e5: DUP2 000002e6: SWAP1 000002e7: MSTORE 000002e8: PUSH1 0x40 000002ea: SWAP1 000002eb: KECCAK256 000002ec: PUSH1 0x03 000002ee: ADD 000002ef: SLOAD 000002f0: PUSH1 0x01 000002f2: PUSH1 0xa0 000002f4: PUSH1 0x02 000002f6: EXP 000002f7: SUB 000002f8: SWAP1 000002f9: DUP2 000002fa: AND 000002fb: CALLER 000002fc: SWAP2 000002fd: SWAP1 000002fe: SWAP2 000002ff: AND 00000300: EQ 00000301: ISZERO 00000302: PUSH2 0x030d 00000305: JUMPI 00000306: POP 00000307: PUSH1 0x00 00000309: PUSH2 0x02d8 0000030c: JUMP 0000030d: JUMPDEST 0000030e: PUSH1 0x00 00000310: DUP3 00000311: DUP2 00000312: MSTORE 00000313: PUSH1 0x20 00000315: DUP2 00000316: SWAP1 00000317: MSTORE 00000318: PUSH1 0x40 0000031a: SWAP1 0000031b: DUP2 0000031c: SWAP1 0000031d: KECCAK256 0000031e: DUP1 0000031f: SLOAD 00000320: PUSH1 0x01 00000322: DUP3 00000323: DUP2 00000324: ADD 00000325: SLOAD 00000326: SWAP4 00000327: MLOAD 00000328: PUSH1 0x02 0000032a: SWAP4 0000032b: DUP5 0000032c: ADD 0000032d: DUP1 0000032e: SLOAD 0000032f: PUSH1 0x01 00000331: PUSH1 0xa0 00000333: PUSH1 0x02 00000335: EXP 00000336: SUB 00000337: SWAP5 00000338: SWAP1 00000339: SWAP5 0000033a: AND 0000033b: SWAP6 0000033c: SWAP5 0000033d: SWAP1 0000033e: SWAP4 0000033f: SWAP2 00000340: SWAP3 00000341: DUP4 00000342: SWAP3 00000343: DUP6 00000344: SWAP3 00000345: SWAP2 00000346: DUP2 00000347: AND 00000348: ISZERO 00000349: PUSH2 0x0100 0000034c: MUL 0000034d: PUSH1 0x00 0000034f: NOT 00000350: ADD 00000351: AND 00000352: DIV 00000353: DUP1 00000354: ISZERO 00000355: PUSH2 0x025b 00000358: JUMPI 00000359: DUP1 0000035a: PUSH1 0x1f 0000035c: LT 0000035d: PUSH2 0x0230 00000360: JUMPI 00000361: PUSH2 0x0100 00000364: DUP1 00000365: DUP4 00000366: SLOAD 00000367: DIV 00000368: MUL 00000369: DUP4 0000036a: MSTORE 0000036b: SWAP2 0000036c: PUSH1 0x20 0000036e: ADD 0000036f: SWAP2 00000370: PUSH2 0x025b 00000373: JUMP 00000374: JUMPDEST 00000375: PUSH1 0x1f 00000377: ADD 00000378: PUSH1 0x20 0000037a: SWAP1 0000037b: DIV 0000037c: SWAP1 0000037d: PUSH1 0x00 0000037f: MSTORE 00000380: PUSH1 0x20 00000382: PUSH1 0x00 00000384: KECCAK256 00000385: SWAP1 00000386: DUP2 00000387: ADD 00000388: SWAP1 00000389: PUSH2 0x02c1 0000038c: SWAP2 0000038d: SWAP1 0000038e: PUSH2 0x0191 00000391: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x18f5963e84c8ddfe67d02a224007f83fa3c3af9b008804b973cb40a7b4e648d6
call_targets:
0xd4e5d079a822b55c475d1827a9c39a8c8d8cc457
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x18f5963e84c8ddfe67d02a224007f83fa3c3af9b008804b973cb40a7b4e648d6",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xd4e5d079a822b55c475d1827a9c39a8c8d8cc457"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x2f54bf6e",
"selector": "0x2f54bf6e",
"calldata_variants": [
"0x2f54bf6e",
"0x2f54bf6e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x797af627",
"selector": "0x797af627",
"calldata_variants": [
"0x797af627",
"0x797af6270000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb61d27f6",
"selector": "0xb61d27f6",
"calldata_variants": [
"0xb61d27f6",
"0xb61d27f60000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 625,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x18f5963e84c8ddfe67d02a224007f83fa3c3af9b008804b973cb40a7b4e648d6
call_targets:
0xd4e5d079a822b55c475d1827a9c39a8c8d8cc457
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x18f5963e84c8ddfe67d02a224007f83fa3c3af9b008804b973cb40a7b4e648d6",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xd4e5d079a822b55c475d1827a9c39a8c8d8cc457"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x2f54bf6e",
"selector": "0x2f54bf6e",
"calldata_variants": [
"0x2f54bf6e",
"0x2f54bf6e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x797af627",
"selector": "0x797af627",
"calldata_variants": [
"0x797af627",
"0x797af6270000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb61d27f6",
"selector": "0xb61d27f6",
"calldata_variants": [
"0xb61d27f6",
"0xb61d27f60000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 625,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|