TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-32ee-70ee-9aa8-a25230e9da2f

complete
Chain ID
1
Address
0x152c21d6944f32c6b45605af12bb9b7231a456e7
Block Number
—
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
3029 artifact.fetch complete 1 / 3 4 months ago
3030 tool.cast_disasm complete 1 / 3 4 months ago
79715 analysis.bundle complete 1 / 3 2 weeks ago
79716 capability.graph complete 1 / 3 2 weeks ago
79717 detector.run complete 1 / 3 2 weeks ago
79718 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
4
EXT*/BALANCE
0
Total opcodes
1305
Flags
No heuristic flags raised.
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0xe0
00000007: PUSH1 0x02
00000009: EXP
0000000a: PUSH1 0x00
0000000c: CALLDATALOAD
0000000d: DIV
0000000e: PUSH4 0x13af4035
00000013: DUP2
00000014: EQ
00000015: PUSH2 0x0047
00000018: JUMPI
00000019: DUP1
0000001a: PUSH4 0x63f553b2
0000001f: EQ
00000020: PUSH2 0x0069
00000023: JUMPI
00000024: DUP1
00000025: PUSH4 0x81dcda88
0000002a: EQ
0000002b: PUSH2 0x00f3
0000002e: JUMPI
0000002f: DUP1
00000030: PUSH4 0xf0d4bc5c
00000035: EQ
00000036: PUSH2 0x011c
00000039: JUMPI
0000003a: DUP1
0000003b: PUSH4 0xf2a40db8
00000040: EQ
00000041: PUSH2 0x018d
00000044: JUMPI
00000045: JUMPDEST
00000046: STOP
00000047: JUMPDEST
00000048: PUSH2 0x020f
0000004b: PUSH1 0x04
0000004d: CALLDATALOAD
0000004e: PUSH1 0x00
00000050: DUP1
00000051: SLOAD
00000052: CALLER
00000053: PUSH1 0x01
00000055: PUSH1 0xa0
00000057: PUSH1 0x02
00000059: EXP
0000005a: SUB
0000005b: SWAP1
0000005c: DUP2
0000005d: AND
0000005e: SWAP2
0000005f: AND
00000060: EQ
00000061: PUSH2 0x06b2
00000064: JUMPI
00000065: PUSH2 0x06c8
00000068: JUMP
00000069: JUMPDEST
0000006a: PUSH2 0x0221
0000006d: PUSH1 0x04
0000006f: CALLDATALOAD
00000070: PUSH1 0x40
00000072: DUP1
00000073: MLOAD
00000074: PUSH1 0x20
00000076: DUP2
00000077: DUP2
00000078: ADD
00000079: DUP4
0000007a: MSTORE
0000007b: PUSH1 0x00
0000007d: DUP1
0000007e: DUP4
0000007f: MSTORE
00000080: PUSH1 0x01
00000082: PUSH1 0xa0
00000084: PUSH1 0x02
00000086: EXP
00000087: SUB
00000088: DUP6
00000089: AND
0000008a: DUP2
0000008b: MSTORE
0000008c: PUSH1 0x01
0000008e: SWAP1
0000008f: SWAP2
00000090: MSTORE
00000091: SWAP2
00000092: DUP3
00000093: KECCAK256
00000094: SLOAD
00000095: SWAP1
00000096: SWAP2
00000097: DUP2
00000098: GT
00000099: ISZERO
0000009a: PUSH2 0x0362
0000009d: JUMPI
0000009e: JUMPDEST
0000009f: PUSH1 0x02
000000a1: DUP1
000000a2: SLOAD
000000a3: DUP3
000000a4: SWAP1
000000a5: DUP2
000000a6: LT
000000a7: ISZERO
000000a8: PUSH2 0x0002
000000ab: JUMPI
000000ac: POP
000000ad: PUSH1 0x00
000000af: SWAP1
000000b0: DUP2
000000b1: MSTORE
000000b2: PUSH1 0x03
000000b4: DUP3
000000b5: MUL
000000b6: PUSH1 0x00
000000b8: DUP1
000000b9: MLOAD
000000ba: PUSH1 0x20
000000bc: PUSH2 0x06cd
000000bf: DUP4
000000c0: CODECOPY
000000c1: DUP2
000000c2: MLOAD
000000c3: SWAP2
000000c4: MSTORE
000000c5: ADD
000000c6: SLOAD
000000c7: EQ
000000c8: PUSH2 0x0368
000000cb: JUMPI
000000cc: PUSH1 0x02
000000ce: DUP1
000000cf: SLOAD
000000d0: DUP3
000000d1: SWAP1
000000d2: DUP2
000000d3: LT
000000d4: ISZERO
000000d5: PUSH2 0x0002
000000d8: JUMPI
000000d9: POP
000000da: POP
000000db: PUSH1 0x03
000000dd: MUL
000000de: PUSH1 0x00
000000e0: DUP1
000000e1: MLOAD
000000e2: PUSH1 0x20
000000e4: PUSH2 0x06cd
000000e7: DUP4
000000e8: CODECOPY
000000e9: DUP2
000000ea: MLOAD
000000eb: SWAP2
000000ec: MSTORE
000000ed: ADD
000000ee: SLOAD
000000ef: PUSH2 0x009e
000000f2: JUMP
000000f3: JUMPDEST
000000f4: PUSH2 0x020f
000000f7: PUSH1 0x04
000000f9: CALLDATALOAD
000000fa: PUSH1 0x24
000000fc: CALLDATALOAD
000000fd: PUSH1 0x00
000000ff: DUP1
00000100: SLOAD
00000101: DUP2
00000102: SWAP1
00000103: DUP2
00000104: SWAP1
00000105: CALLER
00000106: PUSH1 0x01
00000108: PUSH1 0xa0
0000010a: PUSH1 0x02
0000010c: EXP
0000010d: SUB
0000010e: SWAP1
0000010f: DUP2
00000110: AND
00000111: SWAP2
00000112: AND
00000113: EQ
00000114: PUSH2 0x0434
00000117: JUMPI
00000118: PUSH2 0x042c
0000011b: JUMP
0000011c: JUMPDEST
0000011d: PUSH1 0x40
0000011f: DUP1
00000120: MLOAD
00000121: PUSH1 0x20
00000123: PUSH1 0x24
00000125: DUP1
00000126: CALLDATALOAD
00000127: PUSH1 0x04
00000129: DUP2
0000012a: DUP2
0000012b: ADD
0000012c: CALLDATALOAD
0000012d: PUSH1 0x1f
0000012f: DUP2
00000130: ADD
00000131: DUP6
00000132: SWAP1
00000133: DIV
00000134: DUP6
00000135: MUL
00000136: DUP7
00000137: ADD
00000138: DUP6
00000139: ADD
0000013a: SWAP1
0000013b: SWAP7
0000013c: MSTORE
0000013d: DUP6
0000013e: DUP6
0000013f: MSTORE
00000140: PUSH2 0x020f
00000143: SWAP6
00000144: DUP2
00000145: CALLDATALOAD
00000146: SWAP6
00000147: SWAP2
00000148: SWAP5
00000149: PUSH1 0x44
0000014b: SWAP5
0000014c: SWAP3
0000014d: SWAP4
0000014e: SWAP1
0000014f: SWAP3
00000150: ADD
00000151: SWAP2
00000152: DUP2
00000153: SWAP1
00000154: DUP5
00000155: ADD
00000156: DUP4
00000157: DUP3
00000158: DUP1
00000159: DUP3
0000015a: DUP5
0000015b: CALLDATACOPY
0000015c: POP
0000015d: SWAP5
0000015e: SWAP7
0000015f: POP
00000160: POP
00000161: POP
00000162: POP
00000163: POP
00000164: POP
00000165: POP
00000166: PUSH1 0x01
00000168: PUSH1 0xa0
0000016a: PUSH1 0x02
0000016c: EXP
0000016d: SUB
0000016e: DUP3
0000016f: AND
00000170: PUSH1 0x00
00000172: SWAP1
00000173: DUP2
00000174: MSTORE
00000175: PUSH1 0x01
00000177: PUSH1 0x20
00000179: MSTORE
0000017a: PUSH1 0x40
0000017c: DUP2
0000017d: KECCAK256
0000017e: SLOAD
0000017f: DUP2
00000180: SWAP1
00000181: DUP2
00000182: SWAP1
00000183: GT
00000184: ISZERO
00000185: PUSH2 0x0512
00000188: JUMPI
00000189: PUSH2 0x050b
0000018c: JUMP
0000018d: JUMPDEST
0000018e: PUSH2 0x028f
00000191: PUSH1 0x04
00000193: CALLDATALOAD
00000194: PUSH1 0x02
00000196: DUP1
00000197: SLOAD
00000198: DUP3
00000199: SWAP1
0000019a: DUP2
0000019b: LT
0000019c: ISZERO
0000019d: PUSH2 0x0002
000001a0: JUMPI
000001a1: POP
000001a2: PUSH1 0x00
000001a4: MSTORE
000001a5: PUSH1 0x03
000001a7: MUL
000001a8: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ace
000001c9: DUP2
000001ca: ADD
000001cb: SLOAD
000001cc: PUSH1 0x00
000001ce: DUP1
000001cf: MLOAD
000001d0: PUSH1 0x20
000001d2: PUSH2 0x06cd
000001d5: DUP4
000001d6: CODECOPY
000001d7: DUP2
000001d8: MLOAD
000001d9: SWAP2
000001da: MSTORE
000001db: DUP3
000001dc: ADD
000001dd: SLOAD
000001de: PUSH1 0x01
000001e0: PUSH1 0xa0
000001e2: PUSH1 0x02
000001e4: EXP
000001e5: SUB
000001e6: SWAP1
000001e7: SWAP2
000001e8: AND
000001e9: SWAP2
000001ea: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5acf
0000020b: ADD
0000020c: SWAP1
0000020d: DUP4
0000020e: JUMP
0000020f: JUMPDEST
00000210: PUSH1 0x40
00000212: DUP1
00000213: MLOAD
00000214: SWAP2
00000215: DUP3
00000216: MSTORE
00000217: MLOAD
00000218: SWAP1
00000219: DUP2
0000021a: SWAP1
0000021b: SUB
0000021c: PUSH1 0x20
0000021e: ADD
0000021f: SWAP1
00000220: RETURN
00000221: JUMPDEST
00000222: PUSH1 0x40
00000224: MLOAD
00000225: DUP1
00000226: DUP1
00000227: PUSH1 0x20
00000229: ADD
0000022a: DUP3
0000022b: DUP2
0000022c: SUB
0000022d: DUP3
0000022e: MSTORE
0000022f: DUP4
00000230: DUP2
00000231: DUP2
00000232: MLOAD
00000233: DUP2
00000234: MSTORE
00000235: PUSH1 0x20
00000237: ADD
00000238: SWAP2
00000239: POP
0000023a: DUP1
0000023b: MLOAD
0000023c: SWAP1
0000023d: PUSH1 0x20
0000023f: ADD
00000240: SWAP1
00000241: DUP1
00000242: DUP4
00000243: DUP4
00000244: DUP3
00000245: SWAP1
00000246: PUSH1 0x00
00000248: PUSH1 0x04
0000024a: PUSH1 0x20
0000024c: DUP5
0000024d: PUSH1 0x1f
0000024f: ADD
00000250: DIV
00000251: PUSH1 0x0f
00000253: MUL
00000254: PUSH1 0x03
00000256: ADD
00000257: CALL
00000258: POP
00000259: SWAP1
0000025a: POP
0000025b: SWAP1
0000025c: DUP2
0000025d: ADD
0000025e: SWAP1
0000025f: PUSH1 0x1f
00000261: AND
00000262: DUP1
00000263: ISZERO
00000264: PUSH2 0x0281
00000267: JUMPI
00000268: DUP1
00000269: DUP3
0000026a: SUB
0000026b: DUP1
0000026c: MLOAD
0000026d: PUSH1 0x01
0000026f: DUP4
00000270: PUSH1 0x20
00000272: SUB
00000273: PUSH2 0x0100
00000276: EXP
00000277: SUB
00000278: NOT
00000279: AND
0000027a: DUP2
0000027b: MSTORE
0000027c: PUSH1 0x20
0000027e: ADD
0000027f: SWAP2
00000280: POP
00000281: JUMPDEST
00000282: POP
00000283: SWAP3
00000284: POP
00000285: POP
00000286: POP
00000287: PUSH1 0x40
00000289: MLOAD
0000028a: DUP1
0000028b: SWAP2
0000028c: SUB
0000028d: SWAP1
0000028e: RETURN
0000028f: JUMPDEST
00000290: PUSH1 0x40
00000292: DUP1
00000293: MLOAD
00000294: PUSH1 0x01
00000296: PUSH1 0xa0
00000298: PUSH1 0x02
0000029a: EXP
0000029b: SUB
0000029c: DUP6
0000029d: AND
0000029e: DUP2
0000029f: MSTORE
000002a0: SWAP1
000002a1: DUP2
000002a2: ADD
000002a3: DUP3
000002a4: SWAP1
000002a5: MSTORE
000002a6: PUSH1 0x60
000002a8: PUSH1 0x20
000002aa: DUP3
000002ab: ADD
000002ac: DUP2
000002ad: DUP2
000002ae: MSTORE
000002af: DUP5
000002b0: SLOAD
000002b1: PUSH1 0x02
000002b3: PUSH1 0x01
000002b5: DUP3
000002b6: AND
000002b7: ISZERO
000002b8: PUSH2 0x0100
000002bb: MUL
000002bc: PUSH1 0x00
000002be: NOT
000002bf: ADD
000002c0: SWAP1
000002c1: SWAP2
000002c2: AND
000002c3: DIV
000002c4: SWAP2
000002c5: DUP4
000002c6: ADD
000002c7: DUP3
000002c8: SWAP1
000002c9: MSTORE
000002ca: SWAP1
000002cb: PUSH1 0x80
000002cd: DUP4
000002ce: ADD
000002cf: SWAP1
000002d0: DUP6
000002d1: SWAP1
000002d2: DUP1
000002d3: ISZERO
000002d4: PUSH2 0x031e
000002d7: JUMPI
000002d8: DUP1
000002d9: PUSH1 0x1f
000002db: LT
000002dc: PUSH2 0x02f3
000002df: JUMPI
000002e0: PUSH2 0x0100
000002e3: DUP1
000002e4: DUP4
000002e5: SLOAD
000002e6: DIV
000002e7: MUL
000002e8: DUP4
000002e9: MSTORE
000002ea: SWAP2
000002eb: PUSH1 0x20
000002ed: ADD
000002ee: SWAP2
000002ef: PUSH2 0x031e
000002f2: JUMP
000002f3: JUMPDEST
000002f4: DUP3
000002f5: ADD
000002f6: SWAP2
000002f7: SWAP1
000002f8: PUSH1 0x00
000002fa: MSTORE
000002fb: PUSH1 0x20
000002fd: PUSH1 0x00
000002ff: KECCAK256
00000300: SWAP1
00000301: JUMPDEST
00000302: DUP2
00000303: SLOAD
00000304: DUP2
00000305: MSTORE
00000306: SWAP1
00000307: PUSH1 0x01
00000309: ADD
0000030a: SWAP1
0000030b: PUSH1 0x20
0000030d: ADD
0000030e: DUP1
0000030f: DUP4
00000310: GT
00000311: PUSH2 0x0301
00000314: JUMPI
00000315: DUP3
00000316: SWAP1
00000317: SUB
00000318: PUSH1 0x1f
0000031a: AND
0000031b: DUP3
0000031c: ADD
0000031d: SWAP2
0000031e: JUMPDEST
0000031f: POP
00000320: POP
00000321: SWAP5
00000322: POP
00000323: POP
00000324: POP
00000325: POP
00000326: POP
00000327: PUSH1 0x40
00000329: MLOAD
0000032a: DUP1
0000032b: SWAP2
0000032c: SUB
0000032d: SWAP1
0000032e: RETURN
0000032f: JUMPDEST
00000330: DUP3
00000331: ADD
00000332: SWAP2
00000333: SWAP1
00000334: PUSH1 0x00
00000336: MSTORE
00000337: PUSH1 0x20
00000339: PUSH1 0x00
0000033b: KECCAK256
0000033c: SWAP1
0000033d: JUMPDEST
0000033e: DUP2
0000033f: SLOAD
00000340: DUP2
00000341: MSTORE
00000342: SWAP1
00000343: PUSH1 0x01
00000345: ADD
00000346: SWAP1
00000347: PUSH1 0x20
00000349: ADD
0000034a: DUP1
0000034b: DUP4
0000034c: GT
0000034d: PUSH2 0x033d
00000350: JUMPI
00000351: DUP3
00000352: SWAP1
00000353: SUB
00000354: PUSH1 0x1f
00000356: AND
00000357: DUP3
00000358: ADD
00000359: SWAP2
0000035a: JUMPDEST
0000035b: POP
0000035c: POP
0000035d: POP
0000035e: POP
0000035f: POP
00000360: SWAP2
00000361: POP
00000362: JUMPDEST
00000363: POP
00000364: SWAP2
00000365: SWAP1
00000366: POP
00000367: JUMP
00000368: JUMPDEST
00000369: PUSH1 0x02
0000036b: DUP1
0000036c: SLOAD
0000036d: DUP3
0000036e: SWAP1
0000036f: DUP2
00000370: LT
00000371: ISZERO
00000372: PUSH2 0x0002
00000375: JUMPI
00000376: POP
00000377: PUSH1 0x00
00000379: DUP2
0000037a: SWAP1
0000037b: MSTORE
0000037c: PUSH1 0x40
0000037e: DUP1
0000037f: MLOAD
00000380: PUSH1 0x03
00000382: DUP5
00000383: MUL
00000384: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5acf
000003a5: ADD
000003a6: DUP1
000003a7: SLOAD
000003a8: PUSH1 0x20
000003aa: PUSH1 0x01
000003ac: DUP3
000003ad: AND
000003ae: ISZERO
000003af: PUSH2 0x0100
000003b2: MUL
000003b3: PUSH1 0x00
000003b5: NOT
000003b6: ADD
000003b7: SWAP1
000003b8: SWAP2
000003b9: AND
000003ba: SWAP5
000003bb: SWAP1
000003bc: SWAP5
000003bd: DIV
000003be: PUSH1 0x1f
000003c0: DUP2
000003c1: ADD
000003c2: DUP6
000003c3: SWAP1
000003c4: DIV
000003c5: DUP6
000003c6: MUL
000003c7: DUP4
000003c8: ADD
000003c9: DUP6
000003ca: ADD
000003cb: SWAP1
000003cc: SWAP4
000003cd: MSTORE
000003ce: DUP3
000003cf: DUP3
000003d0: MSTORE
000003d1: SWAP1
000003d2: SWAP3
000003d3: SWAP1
000003d4: SWAP2
000003d5: SWAP1
000003d6: DUP4
000003d7: ADD
000003d8: DUP3
000003d9: DUP3
000003da: DUP1
000003db: ISZERO
000003dc: PUSH2 0x035a
000003df: JUMPI
000003e0: DUP1
000003e1: PUSH1 0x1f
000003e3: LT
000003e4: PUSH2 0x032f
000003e7: JUMPI
000003e8: PUSH2 0x0100
000003eb: DUP1
000003ec: DUP4
000003ed: SLOAD
000003ee: DIV
000003ef: MUL
000003f0: DUP4
000003f1: MSTORE
000003f2: SWAP2
000003f3: PUSH1 0x20
000003f5: ADD
000003f6: SWAP2
000003f7: PUSH2 0x035a
000003fa: JUMP
000003fb: JUMPDEST
000003fc: DUP1
000003fd: PUSH1 0x02
000003ff: PUSH1 0x00
00000401: POP
00000402: DUP4
00000403: DUP2
00000404: SLOAD
00000405: DUP2
00000406: LT
00000407: ISZERO
00000408: PUSH2 0x0002
0000040b: JUMPI
0000040c: POP
0000040d: PUSH1 0x00
0000040f: MSTORE
00000410: POP
00000411: PUSH1 0x03
00000413: DUP3
00000414: MUL
00000415: PUSH1 0x00
00000417: DUP1
00000418: MLOAD
00000419: PUSH1 0x20
0000041b: PUSH2 0x06cd
0000041e: DUP4
0000041f: CODECOPY
00000420: DUP2
00000421: MLOAD
00000422: SWAP2
00000423: MSTORE
00000424: ADD
00000425: DUP2
00000426: SWAP1
00000427: SSTORE
00000428: PUSH1 0x01
0000042a: SWAP3
0000042b: POP
0000042c: JUMPDEST
0000042d: POP
0000042e: POP
0000042f: SWAP3
00000430: SWAP2
00000431: POP
00000432: POP
00000433: JUMP
00000434: JUMPDEST
00000435: POP
00000436: POP
00000437: PUSH1 0x01
00000439: PUSH1 0xa0
0000043b: PUSH1 0x02
0000043d: EXP
0000043e: SUB
0000043f: DUP4
00000440: DUP2
00000441: AND
00000442: PUSH1 0x00
00000444: SWAP1
00000445: DUP2
00000446: MSTORE
00000447: PUSH1 0x01
00000449: PUSH1 0x20
0000044b: MSTORE
0000044c: PUSH1 0x40
0000044e: DUP1
0000044f: DUP3
00000450: KECCAK256
00000451: SLOAD
00000452: SWAP3
00000453: DUP6
00000454: AND
00000455: DUP3
00000456: MSTORE
00000457: DUP2
00000458: KECCAK256
00000459: SLOAD
0000045a: SWAP1
0000045b: DUP3
0000045c: EQ
0000045d: DUP1
0000045e: PUSH2 0x0467
00000461: JUMPI
00000462: POP
00000463: DUP1
00000464: PUSH1 0x00
00000466: EQ
00000467: JUMPDEST
00000468: ISZERO
00000469: PUSH2 0x0475
0000046c: JUMPI
0000046d: PUSH1 0x00
0000046f: SWAP3
00000470: POP
00000471: PUSH2 0x042c
00000474: JUMP
00000475: JUMPDEST
00000476: PUSH1 0x00
00000478: PUSH1 0x02
0000047a: PUSH1 0x00
0000047c: POP
0000047d: DUP4
0000047e: DUP2
0000047f: SLOAD
00000480: DUP2
00000481: LT
00000482: ISZERO
00000483: PUSH2 0x0002
00000486: JUMPI
00000487: POP
00000488: DUP2
00000489: MSTORE
0000048a: PUSH1 0x03
0000048c: DUP4
0000048d: MUL
0000048e: PUSH1 0x00
00000490: DUP1
00000491: MLOAD
00000492: PUSH1 0x20
00000494: PUSH2 0x06cd
00000497: DUP4
00000498: CODECOPY
00000499: DUP2
0000049a: MLOAD
0000049b: SWAP2
0000049c: MSTORE
0000049d: ADD
0000049e: SLOAD
0000049f: GT
000004a0: DUP1
000004a1: PUSH2 0x04cf
000004a4: JUMPI
000004a5: POP
000004a6: PUSH1 0x00
000004a8: PUSH1 0x02
000004aa: PUSH1 0x00
000004ac: POP
000004ad: DUP3
000004ae: DUP2
000004af: SLOAD
000004b0: DUP2
000004b1: LT
000004b2: ISZERO
000004b3: PUSH2 0x0002
000004b6: JUMPI
000004b7: POP
000004b8: POP
000004b9: PUSH1 0x03
000004bb: DUP3
000004bc: MUL
000004bd: PUSH1 0x00
000004bf: DUP1
000004c0: MLOAD
000004c1: PUSH1 0x20
000004c3: PUSH2 0x06cd
000004c6: DUP4
000004c7: CODECOPY
000004c8: DUP2
000004c9: MLOAD
000004ca: SWAP2
000004cb: MSTORE
000004cc: ADD
000004cd: SLOAD
000004ce: GT
000004cf: JUMPDEST
000004d0: ISZERO
000004d1: PUSH2 0x03fb
000004d4: JUMPI
000004d5: PUSH1 0x00
000004d7: SWAP3
000004d8: POP
000004d9: PUSH2 0x042c
000004dc: JUMP
000004dd: JUMPDEST
000004de: POP
000004df: POP
000004e0: PUSH1 0x40
000004e2: SWAP2
000004e3: DUP3
000004e4: ADD
000004e5: MLOAD
000004e6: PUSH1 0x02
000004e8: SWAP2
000004e9: SWAP1
000004ea: SWAP2
000004eb: ADD
000004ec: SSTORE
000004ed: PUSH1 0x01
000004ef: PUSH1 0xa0
000004f1: PUSH1 0x02
000004f3: EXP
000004f4: SUB
000004f5: DUP6
000004f6: AND
000004f7: PUSH1 0x00
000004f9: SWAP1
000004fa: DUP2
000004fb: MSTORE
000004fc: PUSH1 0x01
000004fe: PUSH1 0x20
00000500: DUP2
00000501: SWAP1
00000502: MSTORE
00000503: SWAP2
00000504: SWAP1
00000505: KECCAK256
00000506: DUP3
00000507: SWAP1
00000508: SSTORE
00000509: SWAP2
0000050a: POP
0000050b: JUMPDEST
0000050c: POP
0000050d: SWAP3
0000050e: SWAP2
0000050f: POP
00000510: POP
00000511: JUMP
00000512: JUMPDEST
00000513: PUSH1 0x02
00000515: DUP1
00000516: SLOAD
00000517: PUSH1 0x01
00000519: DUP2
0000051a: ADD
0000051b: DUP1
0000051c: DUP4
0000051d: SSTORE
0000051e: SWAP1
0000051f: SWAP2
00000520: SWAP1
00000521: DUP3
00000522: DUP1
00000523: ISZERO
00000524: DUP3
00000525: SWAP1
00000526: GT
00000527: PUSH2 0x0549
0000052a: JUMPI
0000052b: PUSH1 0x03
0000052d: MUL
0000052e: DUP2
0000052f: PUSH1 0x03
00000531: MUL
00000532: DUP4
00000533: PUSH1 0x00
00000535: MSTORE
00000536: PUSH1 0x20
00000538: PUSH1 0x00
0000053a: KECCAK256
0000053b: SWAP2
0000053c: DUP3
0000053d: ADD
0000053e: SWAP2
0000053f: ADD
00000540: PUSH2 0x0549
00000543: SWAP2
00000544: SWAP1
00000545: PUSH2 0x060c
00000548: JUMP
00000549: JUMPDEST
0000054a: POP
0000054b: POP
0000054c: POP
0000054d: SWAP1
0000054e: POP
0000054f: PUSH1 0x60
00000551: PUSH1 0x40
00000553: MLOAD
00000554: SWAP1
00000555: DUP2
00000556: ADD
00000557: PUSH1 0x40
00000559: MSTORE
0000055a: DUP1
0000055b: DUP6
0000055c: DUP2
0000055d: MSTORE
0000055e: PUSH1 0x20
00000560: ADD
00000561: DUP5
00000562: DUP2
00000563: MSTORE
00000564: PUSH1 0x20
00000566: ADD
00000567: PUSH1 0x00
00000569: DUP2
0000056a: MSTORE
0000056b: PUSH1 0x20
0000056d: ADD
0000056e: POP
0000056f: PUSH1 0x02
00000571: PUSH1 0x00
00000573: POP
00000574: DUP3
00000575: DUP2
00000576: SLOAD
00000577: DUP2
00000578: LT
00000579: ISZERO
0000057a: PUSH2 0x0002
0000057d: JUMPI
0000057e: SWAP1
0000057f: PUSH1 0x00
00000581: MSTORE
00000582: PUSH1 0x20
00000584: PUSH1 0x00
00000586: KECCAK256
00000587: SWAP1
00000588: PUSH1 0x03
0000058a: MUL
0000058b: ADD
0000058c: PUSH1 0x00
0000058e: POP
0000058f: DUP2
00000590: MLOAD
00000591: DUP2
00000592: SLOAD
00000593: PUSH1 0x01
00000595: PUSH1 0xa0
00000597: PUSH1 0x02
00000599: EXP
0000059a: SUB
0000059b: NOT
0000059c: AND
0000059d: OR
0000059e: DUP2
0000059f: SSTORE
000005a0: PUSH1 0x20
000005a2: DUP3
000005a3: DUP2
000005a4: ADD
000005a5: MLOAD
000005a6: DUP1
000005a7: MLOAD
000005a8: PUSH1 0x01
000005aa: DUP5
000005ab: DUP2
000005ac: ADD
000005ad: DUP1
000005ae: SLOAD
000005af: PUSH1 0x00
000005b1: DUP3
000005b2: DUP2
000005b3: MSTORE
000005b4: DUP7
000005b5: SWAP1
000005b6: KECCAK256
000005b7: SWAP2
000005b8: SWAP6
000005b9: PUSH1 0x02
000005bb: SWAP4
000005bc: DUP3
000005bd: AND
000005be: ISZERO
000005bf: PUSH2 0x0100
000005c2: MUL
000005c3: PUSH1 0x00
000005c5: NOT
000005c6: ADD
000005c7: SWAP1
000005c8: SWAP2
000005c9: AND
000005ca: SWAP3
000005cb: SWAP1
000005cc: SWAP3
000005cd: DIV
000005ce: PUSH1 0x1f
000005d0: SWAP1
000005d1: DUP2
000005d2: ADD
000005d3: DUP4
000005d4: SWAP1
000005d5: DIV
000005d6: DUP3
000005d7: ADD
000005d8: SWAP5
000005d9: SWAP2
000005da: SWAP3
000005db: SWAP2
000005dc: SWAP1
000005dd: SWAP2
000005de: ADD
000005df: SWAP1
000005e0: DUP4
000005e1: SWAP1
000005e2: LT
000005e3: PUSH2 0x0682
000005e6: JUMPI
000005e7: DUP1
000005e8: MLOAD
000005e9: PUSH1 0xff
000005eb: NOT
000005ec: AND
000005ed: DUP4
000005ee: DUP1
000005ef: ADD
000005f0: OR
000005f1: DUP6
000005f2: SSTORE
000005f3: JUMPDEST
000005f4: POP
000005f5: PUSH2 0x04dd
000005f8: SWAP3
000005f9: SWAP2
000005fa: POP
000005fb: PUSH2 0x066a
000005fe: JUMP
000005ff: JUMPDEST
00000600: POP
00000601: POP
00000602: PUSH1 0x00
00000604: PUSH1 0x02
00000606: DUP3
00000607: ADD
00000608: SSTORE
00000609: PUSH1 0x01
0000060b: ADD
0000060c: JUMPDEST
0000060d: DUP1
0000060e: DUP3
0000060f: GT
00000610: ISZERO
00000611: PUSH2 0x067e
00000614: JUMPI
00000615: DUP1
00000616: SLOAD
00000617: PUSH1 0x01
00000619: PUSH1 0xa0
0000061b: PUSH1 0x02
0000061d: EXP
0000061e: SUB
0000061f: NOT
00000620: AND
00000621: DUP2
00000622: SSTORE
00000623: PUSH1 0x01
00000625: DUP2
00000626: DUP2
00000627: ADD
00000628: DUP1
00000629: SLOAD
0000062a: PUSH1 0x00
0000062c: DUP1
0000062d: DUP4
0000062e: SSTORE
0000062f: SWAP3
00000630: PUSH1 0x02
00000632: SWAP1
00000633: DUP3
00000634: AND
00000635: ISZERO
00000636: PUSH2 0x0100
00000639: MUL
0000063a: PUSH1 0x00
0000063c: NOT
0000063d: ADD
0000063e: SWAP1
0000063f: SWAP2
00000640: AND
00000641: DIV
00000642: PUSH1 0x1f
00000644: DUP2
00000645: SWAP1
00000646: LT
00000647: PUSH2 0x0650
0000064a: JUMPI
0000064b: POP
0000064c: PUSH2 0x05ff
0000064f: JUMP
00000650: JUMPDEST
00000651: PUSH1 0x1f
00000653: ADD
00000654: PUSH1 0x20
00000656: SWAP1
00000657: DIV
00000658: SWAP1
00000659: PUSH1 0x00
0000065b: MSTORE
0000065c: PUSH1 0x20
0000065e: PUSH1 0x00
00000660: KECCAK256
00000661: SWAP1
00000662: DUP2
00000663: ADD
00000664: SWAP1
00000665: PUSH2 0x05ff
00000668: SWAP2
00000669: SWAP1
0000066a: JUMPDEST
0000066b: DUP1
0000066c: DUP3
0000066d: GT
0000066e: ISZERO
0000066f: PUSH2 0x067e
00000672: JUMPI
00000673: PUSH1 0x00
00000675: DUP2
00000676: SSTORE
00000677: PUSH1 0x01
00000679: ADD
0000067a: PUSH2 0x066a
0000067d: JUMP
0000067e: JUMPDEST
0000067f: POP
00000680: SWAP1
00000681: JUMP
00000682: JUMPDEST
00000683: DUP3
00000684: DUP1
00000685: ADD
00000686: PUSH1 0x01
00000688: ADD
00000689: DUP6
0000068a: SSTORE
0000068b: DUP3
0000068c: ISZERO
0000068d: PUSH2 0x05f3
00000690: JUMPI
00000691: SWAP2
00000692: DUP3
00000693: ADD
00000694: JUMPDEST
00000695: DUP3
00000696: DUP2
00000697: GT
00000698: ISZERO
00000699: PUSH2 0x05f3
0000069c: JUMPI
0000069d: DUP3
0000069e: MLOAD
0000069f: DUP3
000006a0: PUSH1 0x00
000006a2: POP
000006a3: SSTORE
000006a4: SWAP2
000006a5: PUSH1 0x20
000006a7: ADD
000006a8: SWAP2
000006a9: SWAP1
000006aa: PUSH1 0x01
000006ac: ADD
000006ad: SWAP1
000006ae: PUSH2 0x0694
000006b1: JUMP
000006b2: JUMPDEST
000006b3: POP
000006b4: PUSH1 0x00
000006b6: DUP1
000006b7: SLOAD
000006b8: PUSH1 0x01
000006ba: PUSH1 0xa0
000006bc: PUSH1 0x02
000006be: EXP
000006bf: SUB
000006c0: NOT
000006c1: AND
000006c2: DUP3
000006c3: OR
000006c4: SWAP1
000006c5: SSTORE
000006c6: PUSH1 0x01
000006c8: JUMPDEST
000006c9: SWAP2
000006ca: SWAP1
000006cb: POP
000006cc: JUMP
000006cd: BLOCKHASH
000006ce: JUMPI
000006cf: DUP8
000006d0: STATICCALL
000006d1: SLT
000006d2: UNKNOWN(0xA8)
000006d3: UNKNOWN(0x23)
000006d4: UNKNOWN(0xE0)
000006d5: CALLCODE
000006d6: UNKNOWN(0xB7)
000006d7: PUSH4 0x1cc41b3b
000006dc: UNKNOWN(0xA8)
000006dd: DUP3
000006de: DUP12
000006df: CALLER
000006e0: UNKNOWN(0x21)
000006e1: UNKNOWN(0xCA)
000006e2: DUP2
000006e3: GT
000006e4: GT
000006e5: STATICCALL
000006e6: PUSH22
View stderr 
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x88efff86b7492750c44f83a8e01449a3f603697c746de10daccf44a09e9c3b9f
call_targets: 0x152c21d6944f32c6b45605af12bb9b7231a456e7
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x88efff86b7492750c44f83a8e01449a3f603697c746de10daccf44a09e9c3b9f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x152c21d6944f32c6b45605af12bb9b7231a456e7"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x13af4035",
            "selector": "0x13af4035",
            "calldata_variants": [
                "0x13af4035",
                "0x13af40350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x63f553b2",
            "selector": "0x63f553b2",
            "calldata_variants": [
                "0x63f553b2",
                "0x63f553b20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x81dcda88",
            "selector": "0x81dcda88",
            "calldata_variants": [
                "0x81dcda88",
                "0x81dcda880000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf0d4bc5c",
            "selector": "0xf0d4bc5c",
            "calldata_variants": [
                "0xf0d4bc5c",
                "0xf0d4bc5c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf2a40db8",
            "selector": "0xf2a40db8",
            "calldata_variants": [
                "0xf2a40db8",
                "0xf2a40db80000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 599,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1749,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x88efff86b7492750c44f83a8e01449a3f603697c746de10daccf44a09e9c3b9f
call_targets: 0x152c21d6944f32c6b45605af12bb9b7231a456e7
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x88efff86b7492750c44f83a8e01449a3f603697c746de10daccf44a09e9c3b9f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x152c21d6944f32c6b45605af12bb9b7231a456e7"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x13af4035",
            "selector": "0x13af4035",
            "calldata_variants": [
                "0x13af4035",
                "0x13af40350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x63f553b2",
            "selector": "0x63f553b2",
            "calldata_variants": [
                "0x63f553b2",
                "0x63f553b20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x81dcda88",
            "selector": "0x81dcda88",
            "calldata_variants": [
                "0x81dcda88",
                "0x81dcda880000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf0d4bc5c",
            "selector": "0xf0d4bc5c",
            "calldata_variants": [
                "0xf0d4bc5c",
                "0xf0d4bc5c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf2a40db8",
            "selector": "0xf2a40db8",
            "calldata_variants": [
                "0xf2a40db8",
                "0xf2a40db80000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 599,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1749,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}