019b3836-3482-7079-a1d7-44007ac03d5f
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 3269 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 3270 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 46904 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 46905 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 46906 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 46907 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0061 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x61203265 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x0063 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x705099b9 00000025: EQ 00000026: PUSH2 0x0075 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x83197ef0 00000030: EQ 00000031: PUSH2 0x009c 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0xa977c71e 0000003b: EQ 0000003c: PUSH2 0x00c6 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0xcebe09c9 00000046: EQ 00000047: PUSH2 0x00e9 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xec3a6f73 00000051: EQ 00000052: PUSH2 0x00f2 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0xedca914c 0000005c: EQ 0000005d: PUSH2 0x00fb 00000060: JUMPI 00000061: JUMPDEST 00000062: STOP 00000063: JUMPDEST 00000064: PUSH2 0x0112 00000067: PUSH1 0x00 00000069: SLOAD 0000006a: PUSH1 0x01 0000006c: PUSH1 0xa0 0000006e: PUSH1 0x02 00000070: EXP 00000071: SUB 00000072: AND 00000073: DUP2 00000074: JUMP 00000075: JUMPDEST 00000076: PUSH2 0x0061 00000079: PUSH1 0x04 0000007b: CALLDATALOAD 0000007c: PUSH1 0x24 0000007e: CALLDATALOAD 0000007f: PUSH1 0x00 00000081: DUP1 00000082: SLOAD 00000083: PUSH1 0x01 00000085: PUSH1 0xa0 00000087: PUSH1 0x02 00000089: EXP 0000008a: SUB 0000008b: SWAP1 0000008c: DUP2 0000008d: AND 0000008e: CALLER 0000008f: SWAP2 00000090: SWAP1 00000091: SWAP2 00000092: AND 00000093: EQ 00000094: PUSH2 0x0184 00000097: JUMPI 00000098: PUSH2 0x0220 0000009b: JUMP 0000009c: JUMPDEST 0000009d: PUSH2 0x0061 000000a0: PUSH1 0x00 000000a2: SLOAD 000000a3: PUSH1 0x01 000000a5: PUSH1 0xa0 000000a7: PUSH1 0x02 000000a9: EXP 000000aa: SUB 000000ab: SWAP1 000000ac: DUP2 000000ad: AND 000000ae: CALLER 000000af: SWAP2 000000b0: SWAP1 000000b1: SWAP2 000000b2: AND 000000b3: EQ 000000b4: ISZERO 000000b5: PUSH2 0x011c 000000b8: JUMPI 000000b9: PUSH1 0x00 000000bb: SLOAD 000000bc: PUSH1 0x01 000000be: PUSH1 0xa0 000000c0: PUSH1 0x02 000000c2: EXP 000000c3: SUB 000000c4: AND 000000c5: SELFDESTRUCT 000000c6: JUMPDEST 000000c7: PUSH2 0x0061 000000ca: PUSH1 0x04 000000cc: CALLDATALOAD 000000cd: PUSH1 0x00 000000cf: SLOAD 000000d0: PUSH1 0x01 000000d2: PUSH1 0xa0 000000d4: PUSH1 0x02 000000d6: EXP 000000d7: SUB 000000d8: SWAP1 000000d9: DUP2 000000da: AND 000000db: CALLER 000000dc: SWAP2 000000dd: SWAP1 000000de: SWAP2 000000df: AND 000000e0: EQ 000000e1: PUSH2 0x017b 000000e4: JUMPI 000000e5: PUSH2 0x0181 000000e8: JUMP 000000e9: JUMPDEST 000000ea: PUSH2 0x0112 000000ed: PUSH1 0x03 000000ef: SLOAD 000000f0: DUP2 000000f1: JUMP 000000f2: JUMPDEST 000000f3: PUSH2 0x0112 000000f6: PUSH1 0x02 000000f8: SLOAD 000000f9: DUP2 000000fa: JUMP 000000fb: JUMPDEST 000000fc: PUSH2 0x0112 000000ff: PUSH1 0x03 00000101: SLOAD 00000102: PUSH1 0x02 00000104: SLOAD 00000105: PUSH1 0x00 00000107: SWAP2 00000108: SWAP1 00000109: LT 0000010a: PUSH2 0x011e 0000010d: JUMPI 0000010e: PUSH2 0x0178 00000111: JUMP 00000112: JUMPDEST 00000113: PUSH1 0x60 00000115: SWAP1 00000116: DUP2 00000117: MSTORE 00000118: PUSH1 0x20 0000011a: SWAP1 0000011b: RETURN 0000011c: JUMPDEST 0000011d: JUMP 0000011e: JUMPDEST 0000011f: PUSH1 0x01 00000121: PUSH1 0xa0 00000123: PUSH1 0x02 00000125: EXP 00000126: SUB 00000127: CALLER 00000128: AND 00000129: DUP1 0000012a: DUP3 0000012b: MSTORE 0000012c: PUSH1 0x01 0000012e: PUSH1 0x20 00000130: DUP2 00000131: SWAP1 00000132: MSTORE 00000133: PUSH1 0x40 00000135: DUP1 00000136: DUP5 00000137: KECCAK256 00000138: CALLVALUE 00000139: SWAP1 0000013a: DUP2 0000013b: SWAP1 0000013c: SSTORE 0000013d: PUSH1 0x02 0000013f: DUP1 00000140: SLOAD 00000141: SWAP1 00000142: SWAP4 00000143: ADD 00000144: SWAP1 00000145: SWAP3 00000146: SSTORE 00000147: PUSH1 0x60 00000149: SWAP3 0000014a: DUP4 0000014b: MSTORE 0000014c: PUSH1 0x80 0000014e: SWAP2 0000014f: SWAP1 00000150: SWAP2 00000151: MSTORE 00000152: PUSH32 0xe1fffcc4923d04b559f4d29a8bfc6cda04eb5b0d3c460751c2402c5c5cc9109c 00000173: SWAP2 00000174: LOG1 00000175: POP 00000176: PUSH1 0x01 00000178: JUMPDEST 00000179: SWAP1 0000017a: JUMP 0000017b: JUMPDEST 0000017c: PUSH1 0x03 0000017e: DUP2 0000017f: SWAP1 00000180: SSTORE 00000181: JUMPDEST 00000182: POP 00000183: JUMP 00000184: JUMPDEST 00000185: PUSH1 0x01 00000187: PUSH1 0xa0 00000189: PUSH1 0x02 0000018b: EXP 0000018c: SUB 0000018d: DUP4 0000018e: AND 0000018f: DUP2 00000190: MSTORE 00000191: PUSH1 0x01 00000193: PUSH1 0x20 00000195: MSTORE 00000196: PUSH1 0x40 00000198: DUP2 00000199: KECCAK256 0000019a: SLOAD 0000019b: DUP3 0000019c: EQ 0000019d: ISZERO 0000019e: PUSH2 0x0220 000001a1: JUMPI 000001a2: POP 000001a3: ADDRESS 000001a4: PUSH1 0x01 000001a6: PUSH1 0xa0 000001a8: PUSH1 0x02 000001aa: EXP 000001ab: SUB 000001ac: DUP2 000001ad: AND 000001ae: BALANCE 000001af: DUP3 000001b0: SWAP1 000001b1: LT 000001b2: PUSH2 0x0220 000001b5: JUMPI 000001b6: PUSH1 0x01 000001b8: PUSH1 0xa0 000001ba: PUSH1 0x02 000001bc: EXP 000001bd: SUB 000001be: DUP4 000001bf: AND 000001c0: PUSH1 0x00 000001c2: DUP4 000001c3: PUSH1 0x60 000001c5: DUP3 000001c6: DUP2 000001c7: DUP2 000001c8: DUP2 000001c9: DUP6 000001ca: DUP9 000001cb: DUP4 000001cc: CALL 000001cd: POP 000001ce: POP 000001cf: PUSH1 0x40 000001d1: DUP1 000001d2: DUP4 000001d3: KECCAK256 000001d4: DUP5 000001d5: DUP5 000001d6: MSTORE 000001d7: PUSH1 0x01 000001d9: PUSH1 0x20 000001db: SWAP1 000001dc: DUP2 000001dd: MSTORE 000001de: SWAP4 000001df: SWAP1 000001e0: SSTORE 000001e1: PUSH1 0x02 000001e3: DUP1 000001e4: SLOAD 000001e5: PUSH1 0x00 000001e7: NOT 000001e8: ADD 000001e9: SWAP1 000001ea: SSTORE 000001eb: DUP1 000001ec: MLOAD 000001ed: SWAP4 000001ee: DUP5 000001ef: MSTORE 000001f0: SWAP2 000001f1: DUP4 000001f2: ADD 000001f3: MSTORE 000001f4: DUP1 000001f5: MLOAD 000001f6: PUSH32 0xbb28353e4598c3b9199101a66e0989549b659a59a54d2c27fbb183f1932c8e6d 00000217: SWAP3 00000218: DUP2 00000219: SWAP1 0000021a: SUB 0000021b: SWAP1 0000021c: SWAP2 0000021d: ADD 0000021e: SWAP1 0000021f: LOG1 00000220: JUMPDEST 00000221: POP 00000222: POP 00000223: POP 00000224: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xfb6c81bdbfed5f34e096d71b485392147e2e0332d79edcedc5fd356fd9cc8aaf
call_targets:
0xfff5e27a31ffae108d25015043a7e1145316bac8
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xfb6c81bdbfed5f34e096d71b485392147e2e0332d79edcedc5fd356fd9cc8aaf",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xfff5e27a31ffae108d25015043a7e1145316bac8"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x61203265",
"selector": "0x61203265",
"calldata_variants": [
"0x61203265",
"0x612032650000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x705099b9",
"selector": "0x705099b9",
"calldata_variants": [
"0x705099b9",
"0x705099b90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x83197ef0",
"selector": "0x83197ef0",
"calldata_variants": [
"0x83197ef0",
"0x83197ef00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa977c71e",
"selector": "0xa977c71e",
"calldata_variants": [
"0xa977c71e",
"0xa977c71e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcebe09c9",
"selector": "0xcebe09c9",
"calldata_variants": [
"0xcebe09c9",
"0xcebe09c90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xec3a6f73",
"selector": "0xec3a6f73",
"calldata_variants": [
"0xec3a6f73",
"0xec3a6f730000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xedca914c",
"selector": "0xedca914c",
"calldata_variants": [
"0xedca914c",
"0xedca914c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 460,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xfb6c81bdbfed5f34e096d71b485392147e2e0332d79edcedc5fd356fd9cc8aaf
call_targets:
0xfff5e27a31ffae108d25015043a7e1145316bac8
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xfb6c81bdbfed5f34e096d71b485392147e2e0332d79edcedc5fd356fd9cc8aaf",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xfff5e27a31ffae108d25015043a7e1145316bac8"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x61203265",
"selector": "0x61203265",
"calldata_variants": [
"0x61203265",
"0x612032650000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x705099b9",
"selector": "0x705099b9",
"calldata_variants": [
"0x705099b9",
"0x705099b90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x83197ef0",
"selector": "0x83197ef0",
"calldata_variants": [
"0x83197ef0",
"0x83197ef00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa977c71e",
"selector": "0xa977c71e",
"calldata_variants": [
"0xa977c71e",
"0xa977c71e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcebe09c9",
"selector": "0xcebe09c9",
"calldata_variants": [
"0xcebe09c9",
"0xcebe09c90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xec3a6f73",
"selector": "0xec3a6f73",
"calldata_variants": [
"0xec3a6f73",
"0xec3a6f730000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xedca914c",
"selector": "0xedca914c",
"calldata_variants": [
"0xedca914c",
"0xedca914c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 460,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0xcbfe228eb822a56fc1c510207bfba64a7b41f0f2b6f8b702c7f00a11814ff4c5
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 14,
"trace_id": "0xcbfe228eb822a56fc1c510207bfba64a7b41f0f2b6f8b702c7f00a11814ff4c5",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x61203265",
"selector": "0x61203265",
"calldata_variants": [
"0x61203265",
"0x612032650000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x705099b9",
"selector": "0x705099b9",
"calldata_variants": [
"0x705099b9",
"0x705099b90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x83197ef0",
"selector": "0x83197ef0",
"calldata_variants": [
"0x83197ef0",
"0x83197ef00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa977c71e",
"selector": "0xa977c71e",
"calldata_variants": [
"0xa977c71e",
"0xa977c71e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcebe09c9",
"selector": "0xcebe09c9",
"calldata_variants": [
"0xcebe09c9",
"0xcebe09c90000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xec3a6f73",
"selector": "0xec3a6f73",
"calldata_variants": [
"0xec3a6f73",
"0xec3a6f730000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xedca914c",
"selector": "0xedca914c",
"calldata_variants": [
"0xedca914c",
"0xedca914c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|