Analysis Run

019b3836-315e-720d-b7a4-aad83eb7e326

complete

Chain ID

1

Address

0x0ef8a6fe45cac0e6ab8d8303617422eb10154c0e

Block Number

—

Created

Fri, Dec 19, 2025 8:03 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
2779	artifact.fetch	complete	1 / 3	4 months ago
2780	tool.cast_disasm	complete	1 / 3	4 months ago
80035	analysis.bundle	complete	1 / 3	2 weeks ago
80036	capability.graph	complete	1 / 3	2 weeks ago
80037	detector.run	complete	1 / 3	2 weeks ago
80038	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

9

EXT*/BALANCE

0

Total opcodes

1603

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0148
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x04b52931
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x014a
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x0c2141c4
00000025: EQ
00000026: PUSH2 0x0153
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x0de78f53
00000030: EQ
00000031: PUSH2 0x0165
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x228cb733
0000003b: EQ
0000003c: PUSH2 0x016e
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x332d2b87
00000046: EQ
00000047: PUSH2 0x0177
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x4082de67
00000051: EQ
00000052: PUSH2 0x0180
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x4bb278f3
0000005c: EQ
0000005d: PUSH2 0x0317
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x52f62631
00000067: EQ
00000068: PUSH2 0x0399
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x53bfd0e9
00000072: EQ
00000073: PUSH2 0x03a2
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x6335ec5b
0000007d: EQ
0000007e: PUSH2 0x03ab
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0x6563079b
00000088: EQ
00000089: PUSH2 0x03b4
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0x6ba04322
00000093: EQ
00000094: PUSH2 0x03bd
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0x8bd1762b
0000009e: EQ
0000009f: PUSH2 0x03c6
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0x986588c1
000000a9: EQ
000000aa: PUSH2 0x048b
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0x9e0551c6
000000b4: EQ
000000b5: PUSH2 0x0773
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0x9e7bd827
000000bf: EQ
000000c0: PUSH2 0x07b2
000000c3: JUMPI
000000c4: DUP1
000000c5: PUSH4 0xb1936aa4
000000ca: EQ
000000cb: PUSH2 0x07bb
000000ce: JUMPI
000000cf: DUP1
000000d0: PUSH4 0xc42dff7e
000000d5: EQ
000000d6: PUSH2 0x07c4
000000d9: JUMPI
000000da: DUP1
000000db: PUSH4 0xc57f10c7
000000e0: EQ
000000e1: PUSH2 0x07cd
000000e4: JUMPI
000000e5: DUP1
000000e6: PUSH4 0xcb8a9a5f
000000eb: EQ
000000ec: PUSH2 0x07d6
000000ef: JUMPI
000000f0: DUP1
000000f1: PUSH4 0xcfb3ec31
000000f6: EQ
000000f7: PUSH2 0x07df
000000fa: JUMPI
000000fb: DUP1
000000fc: PUSH4 0xd8a6203b
00000101: EQ
00000102: PUSH2 0x07e8
00000105: JUMPI
00000106: DUP1
00000107: PUSH4 0xdfbf53ae
0000010c: EQ
0000010d: PUSH2 0x07f1
00000110: JUMPI
00000111: DUP1
00000112: PUSH4 0xe8223650
00000117: EQ
00000118: PUSH2 0x07fa
0000011b: JUMPI
0000011c: DUP1
0000011d: PUSH4 0xea448c55
00000122: EQ
00000123: PUSH2 0x0803
00000126: JUMPI
00000127: DUP1
00000128: PUSH4 0xee76be97
0000012d: EQ
0000012e: PUSH2 0x080c
00000131: JUMPI
00000132: DUP1
00000133: PUSH4 0xfd140e76
00000138: EQ
00000139: PUSH2 0x0842
0000013c: JUMPI
0000013d: DUP1
0000013e: PUSH4 0xfd77fdfb
00000143: EQ
00000144: PUSH2 0x084b
00000147: JUMPI
00000148: JUMPDEST
00000149: STOP
0000014a: JUMPDEST
0000014b: PUSH2 0x0854
0000014e: PUSH1 0x24
00000150: SLOAD
00000151: DUP2
00000152: JUMP
00000153: JUMPDEST
00000154: PUSH2 0x0854
00000157: PUSH1 0x1a
00000159: SLOAD
0000015a: PUSH1 0x01
0000015c: PUSH1 0xa0
0000015e: PUSH1 0x02
00000160: EXP
00000161: SUB
00000162: AND
00000163: DUP2
00000164: JUMP
00000165: JUMPDEST
00000166: PUSH2 0x0854
00000169: PUSH1 0x19
0000016b: SLOAD
0000016c: DUP2
0000016d: JUMP
0000016e: JUMPDEST
0000016f: PUSH2 0x0854
00000172: PUSH1 0x0b
00000174: SLOAD
00000175: DUP2
00000176: JUMP
00000177: JUMPDEST
00000178: PUSH2 0x0854
0000017b: PUSH1 0x09
0000017d: SLOAD
0000017e: DUP2
0000017f: JUMP
00000180: JUMPDEST
00000181: PUSH2 0x0148
00000184: PUSH1 0x04
00000186: CALLDATALOAD
00000187: PUSH1 0x24
00000189: CALLDATALOAD
0000018a: PUSH1 0x09
0000018c: SLOAD
0000018d: PUSH1 0x02
0000018f: EQ
00000190: PUSH2 0x019a
00000193: JUMPI
00000194: PUSH1 0x00
00000196: NOT
00000197: PUSH1 0x16
00000199: SSTORE
0000019a: JUMPDEST
0000019b: PUSH1 0x01
0000019d: SLOAD
0000019e: PUSH1 0x01
000001a0: PUSH1 0xa0
000001a2: PUSH1 0x02
000001a4: EXP
000001a5: SUB
000001a6: SWAP1
000001a7: DUP2
000001a8: AND
000001a9: CALLER
000001aa: SWAP1
000001ab: SWAP2
000001ac: AND
000001ad: EQ
000001ae: ISZERO
000001af: PUSH2 0x089a
000001b2: JUMPI
000001b3: PUSH1 0x00
000001b5: PUSH1 0x0a
000001b7: SSTORE
000001b8: JUMPDEST
000001b9: PUSH1 0x1a
000001bb: DUP1
000001bc: SLOAD
000001bd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001d2: NOT
000001d3: AND
000001d4: CALLER
000001d5: SWAP1
000001d6: DUP2
000001d7: OR
000001d8: SWAP1
000001d9: SWAP2
000001da: SSTORE
000001db: PUSH1 0x18
000001dd: DUP4
000001de: SWAP1
000001df: SSTORE
000001e0: PUSH1 0x19
000001e2: DUP3
000001e3: SWAP1
000001e4: SSTORE
000001e5: PUSH1 0x01
000001e7: PUSH1 0xa0
000001e9: PUSH1 0x02
000001eb: EXP
000001ec: SUB
000001ed: AND
000001ee: PUSH1 0x60
000001f0: PUSH1 0x02
000001f2: EXP
000001f3: MUL
000001f4: PUSH1 0x60
000001f6: DUP2
000001f7: DUP2
000001f8: MSTORE
000001f9: PUSH1 0x74
000001fb: DUP5
000001fc: DUP2
000001fd: MSTORE
000001fe: PUSH1 0x94
00000200: DUP5
00000201: SWAP1
00000202: MSTORE
00000203: PUSH1 0x54
00000205: DUP3
00000206: KECCAK256
00000207: PUSH1 0x1b
00000209: SSTORE
0000020a: DUP3
0000020b: DUP3
0000020c: MSTORE
0000020d: PUSH1 0x14
0000020f: DUP3
00000210: KECCAK256
00000211: PUSH1 0x1d
00000213: SSTORE
00000214: DUP5
00000215: DUP2
00000216: MSTORE
00000217: PUSH1 0x34
00000219: DUP3
0000021a: KECCAK256
0000021b: PUSH1 0x1e
0000021d: SSTORE
0000021e: DUP3
0000021f: DUP3
00000220: MSTORE
00000221: PUSH1 0xf8
00000223: PUSH1 0x02
00000225: EXP
00000226: DUP2
00000227: MSTORE
00000228: PUSH1 0x15
0000022a: DUP1
0000022b: DUP4
0000022c: KECCAK256
0000022d: PUSH1 0x1f
0000022f: SSTORE
00000230: SWAP3
00000231: DUP3
00000232: MSTORE
00000233: PUSH32 0x3100000000000000000000000000000000000000000000000000000000000000
00000254: SWAP1
00000255: MSTORE
00000256: KECCAK256
00000257: PUSH1 0x20
00000259: SSTORE
0000025a: PUSH1 0x0a
0000025c: SLOAD
0000025d: PUSH1 0x01
0000025f: SWAP1
00000260: PUSH1 0x02
00000262: DUP2
00000263: LT
00000264: ISZERO
00000265: PUSH2 0x0002
00000268: JUMPI
00000269: PUSH1 0x04
0000026b: MUL
0000026c: PUSH1 0x02
0000026e: SWAP1
0000026f: DUP2
00000270: ADD
00000271: SLOAD
00000272: PUSH1 0x1c
00000274: SSTORE
00000275: PUSH1 0x0a
00000277: SLOAD
00000278: SWAP1
00000279: DUP2
0000027a: LT
0000027b: ISZERO
0000027c: PUSH2 0x0002
0000027f: JUMPI
00000280: PUSH1 0x04
00000282: MUL
00000283: PUSH1 0x02
00000285: ADD
00000286: SLOAD
00000287: CALLER
00000288: PUSH1 0x01
0000028a: PUSH1 0xa0
0000028c: PUSH1 0x02
0000028e: EXP
0000028f: SUB
00000290: AND
00000291: PUSH1 0x60
00000293: PUSH1 0x02
00000295: EXP
00000296: MUL
00000297: PUSH1 0x60
00000299: SWAP1
0000029a: DUP2
0000029b: MSTORE
0000029c: PUSH1 0x74
0000029e: DUP6
0000029f: SWAP1
000002a0: MSTORE
000002a1: PUSH1 0x54
000002a3: SWAP1
000002a4: KECCAK256
000002a5: EQ
000002a6: SWAP1
000002a7: POP
000002a8: DUP1
000002a9: ISZERO
000002aa: PUSH2 0x02cd
000002ad: JUMPI
000002ae: POP
000002af: PUSH1 0x0a
000002b1: SLOAD
000002b2: PUSH1 0x01
000002b4: SWAP1
000002b5: PUSH1 0x02
000002b7: DUP2
000002b8: LT
000002b9: ISZERO
000002ba: PUSH2 0x0002
000002bd: JUMPI
000002be: PUSH1 0x04
000002c0: MUL
000002c1: ADD
000002c2: PUSH1 0x00
000002c4: POP
000002c5: PUSH1 0x03
000002c7: ADD
000002c8: SLOAD
000002c9: PUSH1 0xff
000002cb: AND
000002cc: ISZERO
000002cd: JUMPDEST
000002ce: ISZERO
000002cf: PUSH2 0x08c7
000002d2: JUMPI
000002d3: PUSH1 0x0a
000002d5: SLOAD
000002d6: DUP3
000002d7: SWAP1
000002d8: PUSH1 0x01
000002da: SWAP1
000002db: PUSH1 0x02
000002dd: DUP2
000002de: LT
000002df: ISZERO
000002e0: PUSH2 0x0002
000002e3: JUMPI
000002e4: PUSH1 0x04
000002e6: MUL
000002e7: PUSH1 0x03
000002e9: ADD
000002ea: SWAP2
000002eb: SWAP1
000002ec: SWAP2
000002ed: SSTORE
000002ee: PUSH1 0x0a
000002f0: SLOAD
000002f1: DUP2
000002f2: SWAP1
000002f3: PUSH1 0x02
000002f5: DUP2
000002f6: LT
000002f7: ISZERO
000002f8: PUSH2 0x0002
000002fb: JUMPI
000002fc: PUSH1 0x04
000002fe: SWAP1
000002ff: DUP2
00000300: MUL
00000301: ADD
00000302: DUP1
00000303: SLOAD
00000304: PUSH1 0xff
00000306: NOT
00000307: AND
00000308: SWAP1
00000309: SWAP2
0000030a: OR
0000030b: SWAP1
0000030c: SSTORE
0000030d: POP
0000030e: PUSH1 0x00
00000310: PUSH1 0x16
00000312: SSTORE
00000313: PUSH2 0x08ce
00000316: JUMP
00000317: JUMPDEST
00000318: PUSH1 0x04
0000031a: SLOAD
0000031b: PUSH2 0x0148
0000031e: SWAP1
0000031f: PUSH1 0x00
00000321: SWAP1
00000322: DUP2
00000323: SWAP1
00000324: PUSH1 0xff
00000326: AND
00000327: DUP1
00000328: ISZERO
00000329: PUSH2 0x0334
0000032c: JUMPI
0000032d: POP
0000032e: PUSH1 0x08
00000330: SLOAD
00000331: PUSH1 0xff
00000333: AND
00000334: JUMPDEST
00000335: ISZERO
00000336: PUSH2 0x08ce
00000339: JUMPI
0000033a: POP
0000033b: POP
0000033c: PUSH1 0x03
0000033e: DUP1
0000033f: SLOAD
00000340: PUSH1 0x07
00000342: SLOAD
00000343: SWAP1
00000344: SWAP2
00000345: PUSH1 0x0c
00000347: SWAP1
00000348: DUP4
00000349: SWAP1
0000034a: DUP2
0000034b: LT
0000034c: ISZERO
0000034d: PUSH2 0x0002
00000350: JUMPI
00000351: SWAP1
00000352: SWAP1
00000353: PUSH1 0x03
00000355: MUL
00000356: ADD
00000357: PUSH1 0x00
00000359: POP
0000035a: DUP2
0000035b: PUSH1 0x03
0000035d: DUP2
0000035e: LT
0000035f: ISZERO
00000360: PUSH2 0x0002
00000363: JUMPI
00000364: SWAP1
00000365: SWAP1
00000366: ADD
00000367: PUSH1 0x00
00000369: SWAP1
0000036a: SLOAD
0000036b: EQ
0000036c: ISZERO
0000036d: PUSH2 0x08d2
00000370: JUMPI
00000371: PUSH1 0x01
00000373: PUSH1 0x00
00000375: PUSH1 0x0b
00000377: SLOAD
00000378: SWAP2
00000379: SLOAD
0000037a: PUSH1 0x01
0000037c: PUSH1 0xa0
0000037e: PUSH1 0x02
00000380: EXP
00000381: SUB
00000382: AND
00000383: SWAP2
00000384: PUSH1 0x60
00000386: DUP3
00000387: DUP2
00000388: DUP2
00000389: DUP2
0000038a: DUP6
0000038b: DUP9
0000038c: DUP4
0000038d: CALL
0000038e: POP
0000038f: POP
00000390: POP
00000391: PUSH1 0x17
00000393: SSTORE
00000394: POP
00000395: PUSH2 0x08ce
00000398: JUMP
00000399: JUMPDEST
0000039a: PUSH2 0x0854
0000039d: PUSH1 0x1b
0000039f: SLOAD
000003a0: DUP2
000003a1: JUMP
000003a2: JUMPDEST
000003a3: PUSH2 0x0854
000003a6: PUSH1 0x1d
000003a8: SLOAD
000003a9: DUP2
000003aa: JUMP
000003ab: JUMPDEST
000003ac: PUSH2 0x0854
000003af: PUSH1 0x25
000003b1: SLOAD
000003b2: DUP2
000003b3: JUMP
000003b4: JUMPDEST
000003b5: PUSH2 0x0854
000003b8: PUSH1 0x0a
000003ba: SLOAD
000003bb: DUP2
000003bc: JUMP
000003bd: JUMPDEST
000003be: PUSH2 0x0854
000003c1: PUSH1 0x20
000003c3: SLOAD
000003c4: DUP2
000003c5: JUMP
000003c6: JUMPDEST
000003c7: PUSH2 0x0148
000003ca: PUSH1 0x04
000003cc: CALLDATALOAD
000003cd: PUSH1 0x09
000003cf: SLOAD
000003d0: PUSH1 0x02
000003d2: SWAP1
000003d3: LT
000003d4: DUP1
000003d5: ISZERO
000003d6: PUSH2 0x03e1
000003d9: JUMPI
000003da: POP
000003db: PUSH1 0x00
000003dd: SLOAD
000003de: CALLVALUE
000003df: LT
000003e0: ISZERO
000003e1: JUMPDEST
000003e2: ISZERO
000003e3: PUSH2 0x0874
000003e6: JUMPI
000003e7: PUSH1 0x09
000003e9: SLOAD
000003ea: PUSH1 0x0b
000003ec: DUP1
000003ed: SLOAD
000003ee: CALLVALUE
000003ef: ADD
000003f0: SWAP1
000003f1: SSTORE
000003f2: CALLER
000003f3: SWAP1
000003f4: PUSH1 0x01
000003f6: SWAP1
000003f7: PUSH1 0x02
000003f9: DUP2
000003fa: LT
000003fb: ISZERO
000003fc: PUSH2 0x0002
000003ff: JUMPI
00000400: SWAP1
00000401: SWAP1
00000402: PUSH1 0x04
00000404: MUL
00000405: ADD
00000406: PUSH1 0x00
00000408: POP
00000409: DUP1
0000040a: SLOAD
0000040b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000420: NOT
00000421: AND
00000422: SWAP1
00000423: SWAP2
00000424: OR
00000425: SWAP1
00000426: SSTORE
00000427: PUSH1 0x09
00000429: SLOAD
0000042a: DUP2
0000042b: SWAP1
0000042c: PUSH1 0x01
0000042e: SWAP1
0000042f: PUSH1 0x02
00000431: DUP2
00000432: LT
00000433: ISZERO
00000434: PUSH2 0x0002
00000437: JUMPI
00000438: PUSH1 0x04
0000043a: MUL
0000043b: PUSH1 0x02
0000043d: ADD
0000043e: SWAP2
0000043f: SWAP1
00000440: SWAP2
00000441: SSTORE
00000442: PUSH1 0x09
00000444: DUP1
00000445: SLOAD
00000446: SWAP1
00000447: SWAP2
00000448: ADD
00000449: SWAP1
0000044a: SSTORE
0000044b: PUSH1 0x00
0000044d: DUP1
0000044e: SLOAD
0000044f: CALLVALUE
00000450: SUB
00000451: GT
00000452: ISZERO
00000453: PUSH2 0x0481
00000456: JUMPI
00000457: PUSH1 0x00
00000459: DUP1
0000045a: SLOAD
0000045b: CALLER
0000045c: PUSH1 0x01
0000045e: PUSH1 0xa0
00000460: PUSH1 0x02
00000462: EXP
00000463: SUB
00000464: AND
00000465: SWAP2
00000466: SWAP1
00000467: CALLVALUE
00000468: SUB
00000469: PUSH1 0x60
0000046b: DUP3
0000046c: DUP2
0000046d: DUP2
0000046e: DUP2
0000046f: DUP6
00000470: DUP9
00000471: DUP4
00000472: CALL
00000473: POP
00000474: POP
00000475: PUSH1 0x0b
00000477: DUP1
00000478: SLOAD
00000479: SWAP2
0000047a: SWAP1
0000047b: SWAP2
0000047c: SUB
0000047d: SWAP1
0000047e: SSTORE
0000047f: POP
00000480: POP
00000481: JUMPDEST
00000482: PUSH1 0x00
00000484: PUSH1 0x15
00000486: SSTORE
00000487: PUSH2 0x0897
0000048a: JUMP
0000048b: JUMPDEST
0000048c: PUSH1 0x20
0000048e: PUSH1 0x84
00000490: CALLDATALOAD
00000491: PUSH1 0x04
00000493: DUP2
00000494: DUP2
00000495: ADD
00000496: CALLDATALOAD
00000497: PUSH1 0x1f
00000499: DUP2
0000049a: ADD
0000049b: DUP5
0000049c: SWAP1
0000049d: DIV
0000049e: SWAP1
0000049f: SWAP4
000004a0: MUL
000004a1: PUSH1 0x80
000004a3: SWAP1
000004a4: DUP2
000004a5: ADD
000004a6: PUSH1 0x40
000004a8: MSTORE
000004a9: PUSH1 0x60
000004ab: DUP5
000004ac: DUP2
000004ad: MSTORE
000004ae: PUSH2 0x0148
000004b1: SWAP5
000004b2: DUP4
000004b3: CALLDATALOAD
000004b4: SWAP5
000004b5: PUSH1 0x24
000004b7: DUP1
000004b8: CALLDATALOAD
000004b9: SWAP6
000004ba: PUSH1 0x44
000004bc: CALLDATALOAD
000004bd: SWAP6
000004be: PUSH1 0x64
000004c0: CALLDATALOAD
000004c1: SWAP6
000004c2: SWAP2
000004c3: SWAP5
000004c4: PUSH1 0xa4
000004c6: SWAP5
000004c7: SWAP3
000004c8: SWAP4
000004c9: SWAP3
000004ca: SWAP1
000004cb: SWAP3
000004cc: ADD
000004cd: SWAP2
000004ce: SWAP1
000004cf: DUP2
000004d0: SWAP1
000004d1: DUP4
000004d2: DUP3
000004d3: DUP1
000004d4: DUP3
000004d5: DUP5
000004d6: CALLDATACOPY
000004d7: POP
000004d8: POP
000004d9: PUSH1 0x40
000004db: DUP1
000004dc: MLOAD
000004dd: PUSH1 0x20
000004df: SWAP8
000004e0: CALLDATALOAD
000004e1: DUP1
000004e2: DUP11
000004e3: ADD
000004e4: CALLDATALOAD
000004e5: PUSH1 0x1f
000004e7: DUP2
000004e8: ADD
000004e9: DUP11
000004ea: SWAP1
000004eb: DIV
000004ec: DUP11
000004ed: MUL
000004ee: DUP4
000004ef: ADD
000004f0: DUP11
000004f1: ADD
000004f2: SWAP1
000004f3: SWAP4
000004f4: MSTORE
000004f5: DUP3
000004f6: DUP3
000004f7: MSTORE
000004f8: SWAP7
000004f9: SWAP9
000004fa: SWAP8
000004fb: PUSH1 0xc4
000004fd: SWAP8
000004fe: SWAP2
000004ff: SWAP7
00000500: POP
00000501: PUSH1 0x24
00000503: SWAP2
00000504: SWAP1
00000505: SWAP2
00000506: ADD
00000507: SWAP5
00000508: POP
00000509: SWAP1
0000050a: SWAP3
0000050b: POP
0000050c: DUP3
0000050d: SWAP2
0000050e: POP
0000050f: DUP5
00000510: ADD
00000511: DUP4
00000512: DUP3
00000513: DUP1
00000514: DUP3
00000515: DUP5
00000516: CALLDATACOPY
00000517: POP
00000518: SWAP5
00000519: SWAP7
0000051a: POP
0000051b: POP
0000051c: POP
0000051d: POP
0000051e: POP
0000051f: POP
00000520: POP
00000521: PUSH1 0x40
00000523: DUP1
00000524: MLOAD
00000525: PUSH1 0xf0
00000527: PUSH1 0x02
00000529: EXP
0000052a: PUSH2 0xffff
0000052d: DUP1
0000052e: DUP11
0000052f: AND
00000530: DUP3
00000531: MUL
00000532: DUP4
00000533: MSTORE
00000534: DUP4
00000535: MLOAD
00000536: SWAP3
00000537: DUP4
00000538: SWAP1
00000539: SUB
0000053a: PUSH1 0x02
0000053c: SWAP1
0000053d: DUP2
0000053e: ADD
0000053f: DUP5
00000540: KECCAK256
00000541: PUSH1 0x1b
00000543: SSTORE
00000544: SWAP1
00000545: DUP10
00000546: AND
00000547: SWAP1
00000548: SWAP2
00000549: MUL
0000054a: DUP3
0000054b: MSTORE
0000054c: DUP3
0000054d: MLOAD
0000054e: SWAP2
0000054f: DUP3
00000550: SWAP1
00000551: SUB
00000552: ADD
00000553: DUP2
00000554: KECCAK256
00000555: PUSH1 0x1d
00000557: SSTORE
00000558: PUSH1 0x60
0000055a: PUSH1 0x02
0000055c: EXP
0000055d: PUSH1 0x01
0000055f: PUSH1 0xa0
00000561: PUSH1 0x02
00000563: EXP
00000564: SUB
00000565: DUP8
00000566: AND
00000567: MUL
00000568: DUP2
00000569: MSTORE
0000056a: DUP2
0000056b: MLOAD
0000056c: SWAP1
0000056d: DUP2
0000056e: SWAP1
0000056f: SUB
00000570: PUSH1 0x14
00000572: SWAP1
00000573: DUP2
00000574: ADD
00000575: DUP3
00000576: KECCAK256
00000577: PUSH1 0x1e
00000579: SSTORE
0000057a: PUSH32 0x3770943f442a0bb4e34862653f93e5615dcf7887000000000000000000000000
0000059b: DUP3
0000059c: MSTORE
0000059d: DUP3
0000059e: MLOAD
0000059f: SWAP2
000005a0: DUP3
000005a1: SWAP1
000005a2: SUB
000005a3: ADD
000005a4: DUP2
000005a5: KECCAK256
000005a6: PUSH1 0x1f
000005a8: SWAP1
000005a9: DUP2
000005aa: SSTORE
000005ab: PUSH32 0x3078333737303934336634343261306262346533343836323635336639336535
000005cc: DUP3
000005cd: MSTORE
000005ce: PUSH32 0x3631356463663738383700000000000000000000000000000000000000000000
000005ef: PUSH1 0x20
000005f1: DUP4
000005f2: DUP2
000005f3: ADD
000005f4: SWAP2
000005f5: SWAP1
000005f6: SWAP2
000005f7: MSTORE
000005f8: DUP4
000005f9: MLOAD
000005fa: SWAP3
000005fb: DUP4
000005fc: SWAP1
000005fd: SUB
000005fe: PUSH1 0x2a
00000600: ADD
00000601: DUP4
00000602: KECCAK256
00000603: DUP2
00000604: SSTORE
00000605: PUSH32 0x3337373039343366343432613062623465333438363236353366393365353631
00000626: DUP4
00000627: MSTORE
00000628: PUSH32 0x3564636637383837000000000000000000000000000000000000000000000000
00000649: DUP4
0000064a: DUP3
0000064b: ADD
0000064c: MSTORE
0000064d: DUP4
0000064e: MLOAD
0000064f: SWAP3
00000650: DUP4
00000651: SWAP1
00000652: SUB
00000653: PUSH1 0x28
00000655: ADD
00000656: DUP4
00000657: KECCAK256
00000658: PUSH1 0x21
0000065a: SSTORE
0000065b: DUP7
0000065c: DUP4
0000065d: MSTORE
0000065e: SWAP3
0000065f: MLOAD
00000660: SWAP2
00000661: DUP3
00000662: SWAP1
00000663: SUB
00000664: DUP4
00000665: ADD
00000666: DUP3
00000667: KECCAK256
00000668: PUSH1 0x22
0000066a: SSTORE
0000066b: DUP5
0000066c: MLOAD
0000066d: DUP6
0000066e: SWAP4
0000066f: DUP4
00000670: SWAP3
00000671: PUSH1 0x80
00000673: SWAP3
00000674: SWAP2
00000675: DUP3
00000676: SWAP2
00000677: DUP6
00000678: SWAP2
00000679: DUP4
0000067a: SWAP2
0000067b: DUP7
0000067c: SWAP2
0000067d: PUSH1 0x00
0000067f: SWAP2
00000680: PUSH1 0x04
00000682: SWAP2
00000683: PUSH1 0x0f
00000685: SWAP2
00000686: DUP7
00000687: ADD
00000688: DIV
00000689: MUL
0000068a: PUSH1 0x03
0000068c: ADD
0000068d: CALL
0000068e: POP
0000068f: SWAP1
00000690: POP
00000691: ADD
00000692: SWAP2
00000693: POP
00000694: POP
00000695: PUSH1 0x40
00000697: MLOAD
00000698: DUP1
00000699: SWAP2
0000069a: SUB
0000069b: SWAP1
0000069c: KECCAK256
0000069d: PUSH1 0x23
0000069f: PUSH1 0x00
000006a1: POP
000006a2: DUP2
000006a3: SWAP1
000006a4: SSTORE
000006a5: POP
000006a6: DUP1
000006a7: PUSH1 0x40
000006a9: MLOAD
000006aa: DUP1
000006ab: DUP3
000006ac: DUP1
000006ad: MLOAD
000006ae: SWAP1
000006af: PUSH1 0x20
000006b1: ADD
000006b2: SWAP1
000006b3: DUP1
000006b4: DUP4
000006b5: DUP4
000006b6: DUP3
000006b7: SWAP1
000006b8: PUSH1 0x00
000006ba: PUSH1 0x04
000006bc: PUSH1 0x20
000006be: DUP5
000006bf: PUSH1 0x1f
000006c1: ADD
000006c2: DIV
000006c3: PUSH1 0x0f
000006c5: MUL
000006c6: PUSH1 0x03
000006c8: ADD
000006c9: CALL
000006ca: POP
000006cb: SWAP1
000006cc: POP
000006cd: ADD
000006ce: SWAP2
000006cf: POP
000006d0: POP
000006d1: PUSH1 0x40
000006d3: MLOAD
000006d4: DUP1
000006d5: SWAP2
000006d6: SUB
000006d7: SWAP1
000006d8: KECCAK256
000006d9: PUSH1 0x24
000006db: PUSH1 0x00
000006dd: POP
000006de: DUP2
000006df: SWAP1
000006e0: SSTORE
000006e1: POP
000006e2: PUSH2 0x6768
000006e5: PUSH1 0x40
000006e7: MLOAD
000006e8: DUP1
000006e9: DUP3
000006ea: PUSH1 0xf0
000006ec: PUSH1 0x02
000006ee: EXP
000006ef: MUL
000006f0: DUP2
000006f1: MSTORE
000006f2: PUSH1 0x02
000006f4: ADD
000006f5: SWAP2
000006f6: POP
000006f7: POP
000006f8: PUSH1 0x40
000006fa: MLOAD
000006fb: DUP1
000006fc: SWAP2
000006fd: SUB
000006fe: SWAP1
000006ff: KECCAK256
00000700: PUSH1 0x25
00000702: PUSH1 0x00
00000704: POP
00000705: DUP2
00000706: SWAP1
00000707: SSTORE
00000708: POP
00000709: PUSH2 0x7094
0000070c: PUSH1 0x40
0000070e: MLOAD
0000070f: DUP1
00000710: DUP3
00000711: PUSH1 0xf0
00000713: PUSH1 0x02
00000715: EXP
00000716: MUL
00000717: DUP2
00000718: MSTORE
00000719: PUSH1 0x02
0000071b: ADD
0000071c: SWAP2
0000071d: POP
0000071e: POP
0000071f: PUSH1 0x40
00000721: MLOAD
00000722: DUP1
00000723: SWAP2
00000724: SUB
00000725: SWAP1
00000726: KECCAK256
00000727: PUSH1 0x26
00000729: PUSH1 0x00
0000072b: POP
0000072c: DUP2
0000072d: SWAP1
0000072e: SSTORE
0000072f: POP
00000730: DUP2
00000731: PUSH1 0x40
00000733: MLOAD
00000734: DUP1
00000735: DUP3
00000736: DUP1
00000737: MLOAD
00000738: SWAP1
00000739: PUSH1 0x20
0000073b: ADD
0000073c: SWAP1
0000073d: DUP1
0000073e: DUP4
0000073f: DUP4
00000740: DUP3
00000741: SWAP1
00000742: PUSH1 0x00
00000744: PUSH1 0x04
00000746: PUSH1 0x20
00000748: DUP5
00000749: PUSH1 0x1f
0000074b: ADD
0000074c: DIV
0000074d: PUSH1 0x0f
0000074f: MUL
00000750: PUSH1 0x03
00000752: ADD
00000753: CALL
00000754: POP
00000755: SWAP1
00000756: POP
00000757: ADD
00000758: SWAP2
00000759: POP
0000075a: POP
0000075b: PUSH1 0x40
0000075d: MLOAD
0000075e: DUP1
0000075f: SWAP2
00000760: SUB
00000761: SWAP1
00000762: KECCAK256
00000763: PUSH1 0x27
00000765: PUSH1 0x00
00000767: POP
00000768: DUP2
00000769: SWAP1
0000076a: SSTORE
0000076b: POP
0000076c: POP
0000076d: POP
0000076e: POP
0000076f: POP
00000770: POP
00000771: POP
00000772: JUMP
00000773: JUMPDEST
00000774: PUSH2 0x085e
00000777: PUSH1 0x04
00000779: CALLDATALOAD
0000077a: PUSH1 0x01
0000077c: DUP2
0000077d: PUSH1 0x02
0000077f: DUP2
00000780: LT
00000781: ISZERO
00000782: PUSH2 0x0002
00000785: JUMPI
00000786: POP
00000787: PUSH1 0x04
00000789: SWAP2
0000078a: DUP3
0000078b: MUL
0000078c: SWAP1
0000078d: DUP2
0000078e: ADD
0000078f: SLOAD
00000790: PUSH1 0x02
00000792: DUP3
00000793: ADD
00000794: SLOAD
00000795: PUSH1 0x03
00000797: DUP4
00000798: ADD
00000799: SLOAD
0000079a: SWAP3
0000079b: SWAP1
0000079c: SWAP4
0000079d: ADD
0000079e: SLOAD
0000079f: PUSH1 0x01
000007a1: PUSH1 0xa0
000007a3: PUSH1 0x02
000007a5: EXP
000007a6: SUB
000007a7: SWAP1
000007a8: SWAP2
000007a9: AND
000007aa: SWAP3
000007ab: SWAP2
000007ac: SWAP1
000007ad: PUSH1 0xff
000007af: AND
000007b0: DUP5
000007b1: JUMP
000007b2: JUMPDEST
000007b3: PUSH2 0x0854
000007b6: PUSH1 0x26
000007b8: SLOAD
000007b9: DUP2
000007ba: JUMP
000007bb: JUMPDEST
000007bc: PUSH2 0x0854
000007bf: PUSH1 0x1f
000007c1: SLOAD
000007c2: DUP2
000007c3: JUMP
000007c4: JUMPDEST
000007c5: PUSH2 0x0854
000007c8: PUSH1 0x1c
000007ca: SLOAD
000007cb: DUP2
000007cc: JUMP
000007cd: JUMPDEST
000007ce: PUSH2 0x0854
000007d1: PUSH1 0x27
000007d3: SLOAD
000007d4: DUP2
000007d5: JUMP
000007d6: JUMPDEST
000007d7: PUSH2 0x0854
000007da: PUSH1 0x16
000007dc: SLOAD
000007dd: DUP2
000007de: JUMP
000007df: JUMPDEST
000007e0: PUSH2 0x0854
000007e3: PUSH1 0x22
000007e5: SLOAD
000007e6: DUP2
000007e7: JUMP
000007e8: JUMPDEST
000007e9: PUSH2 0x0854
000007ec: PUSH1 0x23
000007ee: SLOAD
000007ef: DUP2
000007f0: JUMP
000007f1: JUMPDEST
000007f2: PUSH2 0x0854
000007f5: PUSH1 0x17
000007f7: SLOAD
000007f8: DUP2
000007f9: JUMP
000007fa: JUMPDEST
000007fb: PUSH2 0x0854
000007fe: PUSH1 0x1e
00000800: SLOAD
00000801: DUP2
00000802: JUMP
00000803: JUMPDEST
00000804: PUSH2 0x0854
00000807: PUSH1 0x21
00000809: SLOAD
0000080a: DUP2
0000080b: JUMP
0000080c: JUMPDEST
0000080d: PUSH2 0x0854
00000810: PUSH1 0x04
00000812: CALLDATALOAD
00000813: PUSH1 0x24
00000815: CALLDATALOAD
00000816: PUSH1 0x0c
00000818: DUP3
00000819: PUSH1 0x03
0000081b: DUP2
0000081c: LT
0000081d: ISZERO
0000081e: PUSH2 0x0002
00000821: JUMPI
00000822: SWAP1
00000823: SWAP1
00000824: PUSH1 0x03
00000826: MUL
00000827: ADD
00000828: PUSH1 0x00
0000082a: POP
0000082b: DUP2
0000082c: PUSH1 0x03
0000082e: DUP2
0000082f: LT
00000830: ISZERO
00000831: PUSH2 0x0002
00000834: JUMPI
00000835: SWAP1
00000836: SWAP1
00000837: ADD
00000838: PUSH1 0x00
0000083a: SWAP2
0000083b: POP
0000083c: SWAP2
0000083d: POP
0000083e: POP
0000083f: SLOAD
00000840: DUP2
00000841: JUMP
00000842: JUMPDEST
00000843: PUSH2 0x0854
00000846: PUSH1 0x18
00000848: SLOAD
00000849: DUP2
0000084a: JUMP
0000084b: JUMPDEST
0000084c: PUSH2 0x0854
0000084f: PUSH1 0x15
00000851: SLOAD
00000852: DUP2
00000853: JUMP
00000854: JUMPDEST
00000855: PUSH1 0x60
00000857: SWAP1
00000858: DUP2
00000859: MSTORE
0000085a: PUSH1 0x20
0000085c: SWAP1
0000085d: RETURN
0000085e: JUMPDEST
0000085f: PUSH1 0x60
00000861: SWAP4
00000862: DUP5
00000863: MSTORE
00000864: PUSH1 0x80
00000866: SWAP3
00000867: DUP4
00000868: MSTORE
00000869: PUSH1 0xa0
0000086b: SWAP2
0000086c: SWAP1
0000086d: SWAP2
0000086e: MSTORE
0000086f: PUSH1 0xc0
00000871: MSTORE
00000872: SWAP1
00000873: RETURN
00000874: JUMPDEST
00000875: CALLER
00000876: PUSH1 0x01
00000878: PUSH1 0xa0
0000087a: PUSH1 0x02
0000087c: EXP
0000087d: SUB
0000087e: AND
0000087f: PUSH1 0x00
00000881: CALLVALUE
00000882: PUSH1 0x60
00000884: DUP3
00000885: DUP2
00000886: DUP2
00000887: DUP2
00000888: DUP6
00000889: DUP9
0000088a: DUP4
0000088b: CALL
0000088c: POP
0000088d: POP
0000088e: PUSH1 0x00
00000890: NOT
00000891: PUSH1 0x15
00000893: SSTORE
00000894: POP
00000895: POP
00000896: POP
00000897: JUMPDEST
00000898: POP
00000899: JUMP
0000089a: JUMPDEST
0000089b: PUSH1 0x05
0000089d: SLOAD
0000089e: PUSH1 0x01
000008a0: PUSH1 0xa0
000008a2: PUSH1 0x02
000008a4: EXP
000008a5: SUB
000008a6: SWAP1
000008a7: DUP2
000008a8: AND
000008a9: CALLER
000008aa: SWAP1
000008ab: SWAP2
000008ac: AND
000008ad: EQ
000008ae: ISZERO
000008af: PUSH2 0x08bc
000008b2: JUMPI
000008b3: PUSH1 0x01
000008b5: PUSH1 0x0a
000008b7: SSTORE
000008b8: PUSH2 0x01b8
000008bb: JUMP
000008bc: JUMPDEST
000008bd: PUSH1 0x00
000008bf: NOT
000008c0: PUSH1 0x16
000008c2: SSTORE
000008c3: PUSH2 0x08ce
000008c6: JUMP
000008c7: JUMPDEST
000008c8: PUSH1 0x00
000008ca: NOT
000008cb: PUSH1 0x16
000008cd: SSTORE
000008ce: JUMPDEST
000008cf: POP
000008d0: POP
000008d1: JUMP
000008d2: JUMPDEST
000008d3: PUSH1 0x0c
000008d5: DUP3
000008d6: PUSH1 0x03
000008d8: DUP2
000008d9: LT
000008da: ISZERO
000008db: PUSH2 0x0002
000008de: JUMPI
000008df: SWAP1
000008e0: SWAP1
000008e1: PUSH1 0x03
000008e3: MUL
000008e4: ADD
000008e5: PUSH1 0x00
000008e7: POP
000008e8: DUP2
000008e9: PUSH1 0x03
000008eb: DUP2
000008ec: LT
000008ed: ISZERO
000008ee: PUSH2 0x0002
000008f1: JUMPI
000008f2: SWAP1
000008f3: SWAP1
000008f4: ADD
000008f5: PUSH1 0x00
000008f7: POP
000008f8: SLOAD
000008f9: PUSH1 0x01
000008fb: EQ
000008fc: ISZERO
000008fd: PUSH2 0x092d
00000900: JUMPI
00000901: PUSH1 0x0b
00000903: SLOAD
00000904: PUSH1 0x05
00000906: SLOAD
00000907: PUSH1 0x01
00000909: PUSH1 0xa0
0000090b: PUSH1 0x02
0000090d: EXP
0000090e: SUB
0000090f: AND
00000910: SWAP1
00000911: PUSH1 0x00
00000913: SWAP1
00000914: PUSH1 0x60
00000916: DUP3
00000917: DUP2
00000918: DUP2
00000919: DUP2
0000091a: DUP6
0000091b: DUP9
0000091c: DUP4
0000091d: CALL
0000091e: POP
0000091f: POP
00000920: PUSH1 0x01
00000922: PUSH1 0x17
00000924: SSTORE
00000925: POP
00000926: PUSH2 0x08ce
00000929: SWAP2
0000092a: POP
0000092b: POP
0000092c: JUMP
0000092d: JUMPDEST
0000092e: PUSH1 0x01
00000930: PUSH1 0x00
00000932: PUSH1 0x0b
00000934: SLOAD
00000935: SWAP2
00000936: SLOAD
00000937: PUSH1 0x01
00000939: PUSH1 0xa0
0000093b: PUSH1 0x02
0000093d: EXP
0000093e: SUB
0000093f: AND
00000940: SWAP2
00000941: PUSH1 0x02
00000943: SWAP1
00000944: DIV
00000945: PUSH1 0x60
00000947: DUP3
00000948: DUP2
00000949: DUP2
0000094a: DUP2
0000094b: DUP6
0000094c: DUP9
0000094d: DUP4
0000094e: CALL
0000094f: POP
00000950: POP
00000951: PUSH1 0x05
00000953: SLOAD
00000954: PUSH1 0x40
00000956: MLOAD
00000957: PUSH1 0x01
00000959: PUSH1 0xa0
0000095b: PUSH1 0x02
0000095d: EXP
0000095e: SUB
0000095f: SWAP2
00000960: SWAP1
00000961: SWAP2
00000962: AND
00000963: SWAP4
00000964: POP
00000965: DUP3
00000966: DUP2
00000967: DUP2
00000968: DUP2
00000969: DUP6
0000096a: DUP9
0000096b: DUP4
0000096c: CALL
0000096d: POP
0000096e: POP
0000096f: PUSH1 0x02
00000971: PUSH1 0x17
00000973: SSTORE
00000974: POP
00000975: POP
00000976: POP
00000977: POP
00000978: POP
00000979: JUMP

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x59a2016478ca7c2dbd900787c1900b4fc82ff2f8753add4bfc08a6f614269a80 call_targets: 0x0ef8a6fe45cac0e6ab8d8303617422eb10154c0e target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x59a2016478ca7c2dbd900787c1900b4fc82ff2f8753add4bfc08a6f614269a80", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x0ef8a6fe45cac0e6ab8d8303617422eb10154c0e" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x04b52931", "selector": "0x04b52931", "calldata_variants": [ "0x04b52931", "0x04b529310000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0c2141c4", "selector": "0x0c2141c4", "calldata_variants": [ "0x0c2141c4", "0x0c2141c40000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0de78f53", "selector": "0x0de78f53", "calldata_variants": [ "0x0de78f53", "0x0de78f530000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x228cb733", "selector": "0x228cb733", "calldata_variants": [ "0x228cb733", "0x228cb7330000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x332d2b87", "selector": "0x332d2b87", "calldata_variants": [ "0x332d2b87", "0x332d2b870000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4082de67", "selector": "0x4082de67", "calldata_variants": [ "0x4082de67", "0x4082de670000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4bb278f3", "selector": "0x4bb278f3", "calldata_variants": [ "0x4bb278f3", "0x4bb278f30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x52f62631", "selector": "0x52f62631", "calldata_variants": [ "0x52f62631", "0x52f626310000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 909, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1138, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1677, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 9, "guards_detected": [], "untrusted_call_count": 9 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x59a2016478ca7c2dbd900787c1900b4fc82ff2f8753add4bfc08a6f614269a80 call_targets: 0x0ef8a6fe45cac0e6ab8d8303617422eb10154c0e target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x59a2016478ca7c2dbd900787c1900b4fc82ff2f8753add4bfc08a6f614269a80", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x0ef8a6fe45cac0e6ab8d8303617422eb10154c0e" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x04b52931", "selector": "0x04b52931", "calldata_variants": [ "0x04b52931", "0x04b529310000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0c2141c4", "selector": "0x0c2141c4", "calldata_variants": [ "0x0c2141c4", "0x0c2141c40000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0de78f53", "selector": "0x0de78f53", "calldata_variants": [ "0x0de78f53", "0x0de78f530000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x228cb733", "selector": "0x228cb733", "calldata_variants": [ "0x228cb733", "0x228cb7330000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x332d2b87", "selector": "0x332d2b87", "calldata_variants": [ "0x332d2b87", "0x332d2b870000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4082de67", "selector": "0x4082de67", "calldata_variants": [ "0x4082de67", "0x4082de670000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4bb278f3", "selector": "0x4bb278f3", "calldata_variants": [ "0x4bb278f3", "0x4bb278f30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x52f62631", "selector": "0x52f62631", "calldata_variants": [ "0x52f62631", "0x52f626310000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 909, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1138, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1677, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 9, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x59a2016478ca7c2dbd900787c1900b4fc82ff2f8753add4bfc08a6f614269a80

call_targets: 0x0ef8a6fe45cac0e6ab8d8303617422eb10154c0e

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x59a2016478ca7c2dbd900787c1900b4fc82ff2f8753add4bfc08a6f614269a80",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0ef8a6fe45cac0e6ab8d8303617422eb10154c0e"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x04b52931",
            "selector": "0x04b52931",
            "calldata_variants": [
                "0x04b52931",
                "0x04b529310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0c2141c4",
            "selector": "0x0c2141c4",
            "calldata_variants": [
                "0x0c2141c4",
                "0x0c2141c40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0de78f53",
            "selector": "0x0de78f53",
            "calldata_variants": [
                "0x0de78f53",
                "0x0de78f530000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x228cb733",
            "selector": "0x228cb733",
            "calldata_variants": [
                "0x228cb733",
                "0x228cb7330000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x332d2b87",
            "selector": "0x332d2b87",
            "calldata_variants": [
                "0x332d2b87",
                "0x332d2b870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4082de67",
            "selector": "0x4082de67",
            "calldata_variants": [
                "0x4082de67",
                "0x4082de670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4bb278f3",
            "selector": "0x4bb278f3",
            "calldata_variants": [
                "0x4bb278f3",
                "0x4bb278f30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x52f62631",
            "selector": "0x52f62631",
            "calldata_variants": [
                "0x52f62631",
                "0x52f626310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 909,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1138,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1677,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 9,
    "guards_detected": [],
    "untrusted_call_count": 9
}