TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-358e-72f7-a599-27669f7a002b

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
3443 artifact.fetch complete 1 / 3 3 months ago
3444 tool.cast_disasm complete 1 / 3 3 months ago
46516 analysis.bundle complete 1 / 3 2 weeks ago
46517 capability.graph complete 1 / 3 2 weeks ago
46518 detector.run complete 1 / 3 2 weeks ago
46519 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
1
Total opcodes
1209
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x008a
0000000a: JUMPI
0000000b: PUSH1 0x00
0000000d: CALLDATALOAD
0000000e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002c: SWAP1
0000002d: DIV
0000002e: DUP1
0000002f: PUSH4 0x095ea7b3
00000034: EQ
00000035: PUSH2 0x00b8
00000038: JUMPI
00000039: DUP1
0000003a: PUSH4 0x18160ddd
0000003f: EQ
00000040: PUSH2 0x00ed
00000043: JUMPI
00000044: DUP1
00000045: PUSH4 0x23b872dd
0000004a: EQ
0000004b: PUSH2 0x0110
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x2e1a7d4d
00000055: EQ
00000056: PUSH2 0x014e
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0x70a08231
00000060: EQ
00000061: PUSH2 0x017a
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0xa9059cbb
0000006b: EQ
0000006c: PUSH2 0x01a6
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0xd0e30db0
00000076: EQ
00000077: PUSH2 0x01db
0000007a: JUMPI
0000007b: DUP1
0000007c: PUSH4 0xdd62ed3e
00000081: EQ
00000082: PUSH2 0x01fe
00000085: JUMPI
00000086: PUSH2 0x008a
00000089: JUMP
0000008a: JUMPDEST
0000008b: PUSH2 0x00a2
0000008e: JUMPDEST
0000008f: PUSH1 0x00
00000091: PUSH2 0x0098
00000094: PUSH2 0x0887
00000097: JUMP
00000098: JUMPDEST
00000099: SWAP1
0000009a: POP
0000009b: PUSH2 0x009f
0000009e: JUMP
0000009f: JUMPDEST
000000a0: SWAP1
000000a1: JUMP
000000a2: JUMPDEST
000000a3: PUSH1 0x40
000000a5: MLOAD
000000a6: DUP1
000000a7: DUP3
000000a8: DUP2
000000a9: MSTORE
000000aa: PUSH1 0x20
000000ac: ADD
000000ad: SWAP2
000000ae: POP
000000af: POP
000000b0: PUSH1 0x40
000000b2: MLOAD
000000b3: DUP1
000000b4: SWAP2
000000b5: SUB
000000b6: SWAP1
000000b7: RETURN
000000b8: JUMPDEST
000000b9: PUSH2 0x00d7
000000bc: PUSH1 0x04
000000be: DUP1
000000bf: DUP1
000000c0: CALLDATALOAD
000000c1: SWAP1
000000c2: PUSH1 0x20
000000c4: ADD
000000c5: SWAP1
000000c6: SWAP2
000000c7: SWAP1
000000c8: DUP1
000000c9: CALLDATALOAD
000000ca: SWAP1
000000cb: PUSH1 0x20
000000cd: ADD
000000ce: SWAP1
000000cf: SWAP2
000000d0: SWAP1
000000d1: POP
000000d2: POP
000000d3: PUSH2 0x061a
000000d6: JUMP
000000d7: JUMPDEST
000000d8: PUSH1 0x40
000000da: MLOAD
000000db: DUP1
000000dc: DUP3
000000dd: DUP2
000000de: MSTORE
000000df: PUSH1 0x20
000000e1: ADD
000000e2: SWAP2
000000e3: POP
000000e4: POP
000000e5: PUSH1 0x40
000000e7: MLOAD
000000e8: DUP1
000000e9: SWAP2
000000ea: SUB
000000eb: SWAP1
000000ec: RETURN
000000ed: JUMPDEST
000000ee: PUSH2 0x00fa
000000f1: PUSH1 0x04
000000f3: DUP1
000000f4: POP
000000f5: POP
000000f6: PUSH2 0x0757
000000f9: JUMP
000000fa: JUMPDEST
000000fb: PUSH1 0x40
000000fd: MLOAD
000000fe: DUP1
000000ff: DUP3
00000100: DUP2
00000101: MSTORE
00000102: PUSH1 0x20
00000104: ADD
00000105: SWAP2
00000106: POP
00000107: POP
00000108: PUSH1 0x40
0000010a: MLOAD
0000010b: DUP1
0000010c: SWAP2
0000010d: SUB
0000010e: SWAP1
0000010f: RETURN
00000110: JUMPDEST
00000111: PUSH2 0x0138
00000114: PUSH1 0x04
00000116: DUP1
00000117: DUP1
00000118: CALLDATALOAD
00000119: SWAP1
0000011a: PUSH1 0x20
0000011c: ADD
0000011d: SWAP1
0000011e: SWAP2
0000011f: SWAP1
00000120: DUP1
00000121: CALLDATALOAD
00000122: SWAP1
00000123: PUSH1 0x20
00000125: ADD
00000126: SWAP1
00000127: SWAP2
00000128: SWAP1
00000129: DUP1
0000012a: CALLDATALOAD
0000012b: SWAP1
0000012c: PUSH1 0x20
0000012e: ADD
0000012f: SWAP1
00000130: SWAP2
00000131: SWAP1
00000132: POP
00000133: POP
00000134: PUSH2 0x03df
00000137: JUMP
00000138: JUMPDEST
00000139: PUSH1 0x40
0000013b: MLOAD
0000013c: DUP1
0000013d: DUP3
0000013e: DUP2
0000013f: MSTORE
00000140: PUSH1 0x20
00000142: ADD
00000143: SWAP2
00000144: POP
00000145: POP
00000146: PUSH1 0x40
00000148: MLOAD
00000149: DUP1
0000014a: SWAP2
0000014b: SUB
0000014c: SWAP1
0000014d: RETURN
0000014e: JUMPDEST
0000014f: PUSH2 0x0164
00000152: PUSH1 0x04
00000154: DUP1
00000155: DUP1
00000156: CALLDATALOAD
00000157: SWAP1
00000158: PUSH1 0x20
0000015a: ADD
0000015b: SWAP1
0000015c: SWAP2
0000015d: SWAP1
0000015e: POP
0000015f: POP
00000160: PUSH2 0x077b
00000163: JUMP
00000164: JUMPDEST
00000165: PUSH1 0x40
00000167: MLOAD
00000168: DUP1
00000169: DUP3
0000016a: DUP2
0000016b: MSTORE
0000016c: PUSH1 0x20
0000016e: ADD
0000016f: SWAP2
00000170: POP
00000171: POP
00000172: PUSH1 0x40
00000174: MLOAD
00000175: DUP1
00000176: SWAP2
00000177: SUB
00000178: SWAP1
00000179: RETURN
0000017a: JUMPDEST
0000017b: PUSH2 0x0190
0000017e: PUSH1 0x04
00000180: DUP1
00000181: DUP1
00000182: CALLDATALOAD
00000183: SWAP1
00000184: PUSH1 0x20
00000186: ADD
00000187: SWAP1
00000188: SWAP2
00000189: SWAP1
0000018a: POP
0000018b: POP
0000018c: PUSH2 0x0233
0000018f: JUMP
00000190: JUMPDEST
00000191: PUSH1 0x40
00000193: MLOAD
00000194: DUP1
00000195: DUP3
00000196: DUP2
00000197: MSTORE
00000198: PUSH1 0x20
0000019a: ADD
0000019b: SWAP2
0000019c: POP
0000019d: POP
0000019e: PUSH1 0x40
000001a0: MLOAD
000001a1: DUP1
000001a2: SWAP2
000001a3: SUB
000001a4: SWAP1
000001a5: RETURN
000001a6: JUMPDEST
000001a7: PUSH2 0x01c5
000001aa: PUSH1 0x04
000001ac: DUP1
000001ad: DUP1
000001ae: CALLDATALOAD
000001af: SWAP1
000001b0: PUSH1 0x20
000001b2: ADD
000001b3: SWAP1
000001b4: SWAP2
000001b5: SWAP1
000001b6: DUP1
000001b7: CALLDATALOAD
000001b8: SWAP1
000001b9: PUSH1 0x20
000001bb: ADD
000001bc: SWAP1
000001bd: SWAP2
000001be: SWAP1
000001bf: POP
000001c0: POP
000001c1: PUSH2 0x0271
000001c4: JUMP
000001c5: JUMPDEST
000001c6: PUSH1 0x40
000001c8: MLOAD
000001c9: DUP1
000001ca: DUP3
000001cb: DUP2
000001cc: MSTORE
000001cd: PUSH1 0x20
000001cf: ADD
000001d0: SWAP2
000001d1: POP
000001d2: POP
000001d3: PUSH1 0x40
000001d5: MLOAD
000001d6: DUP1
000001d7: SWAP2
000001d8: SUB
000001d9: SWAP1
000001da: RETURN
000001db: JUMPDEST
000001dc: PUSH2 0x01e8
000001df: PUSH1 0x04
000001e1: DUP1
000001e2: POP
000001e3: POP
000001e4: PUSH2 0x0887
000001e7: JUMP
000001e8: JUMPDEST
000001e9: PUSH1 0x40
000001eb: MLOAD
000001ec: DUP1
000001ed: DUP3
000001ee: DUP2
000001ef: MSTORE
000001f0: PUSH1 0x20
000001f2: ADD
000001f3: SWAP2
000001f4: POP
000001f5: POP
000001f6: PUSH1 0x40
000001f8: MLOAD
000001f9: DUP1
000001fa: SWAP2
000001fb: SUB
000001fc: SWAP1
000001fd: RETURN
000001fe: JUMPDEST
000001ff: PUSH2 0x021d
00000202: PUSH1 0x04
00000204: DUP1
00000205: DUP1
00000206: CALLDATALOAD
00000207: SWAP1
00000208: PUSH1 0x20
0000020a: ADD
0000020b: SWAP1
0000020c: SWAP2
0000020d: SWAP1
0000020e: DUP1
0000020f: CALLDATALOAD
00000210: SWAP1
00000211: PUSH1 0x20
00000213: ADD
00000214: SWAP1
00000215: SWAP2
00000216: SWAP1
00000217: POP
00000218: POP
00000219: PUSH2 0x06ee
0000021c: JUMP
0000021d: JUMPDEST
0000021e: PUSH1 0x40
00000220: MLOAD
00000221: DUP1
00000222: DUP3
00000223: DUP2
00000224: MSTORE
00000225: PUSH1 0x20
00000227: ADD
00000228: SWAP2
00000229: POP
0000022a: POP
0000022b: PUSH1 0x40
0000022d: MLOAD
0000022e: DUP1
0000022f: SWAP2
00000230: SUB
00000231: SWAP1
00000232: RETURN
00000233: JUMPDEST
00000234: PUSH1 0x00
00000236: PUSH1 0x00
00000238: PUSH1 0x00
0000023a: POP
0000023b: PUSH1 0x00
0000023d: DUP4
0000023e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000253: AND
00000254: DUP2
00000255: MSTORE
00000256: PUSH1 0x20
00000258: ADD
00000259: SWAP1
0000025a: DUP2
0000025b: MSTORE
0000025c: PUSH1 0x20
0000025e: ADD
0000025f: PUSH1 0x00
00000261: KECCAK256
00000262: PUSH1 0x00
00000264: POP
00000265: SLOAD
00000266: SWAP1
00000267: POP
00000268: PUSH2 0x026c
0000026b: JUMP
0000026c: JUMPDEST
0000026d: SWAP2
0000026e: SWAP1
0000026f: POP
00000270: JUMP
00000271: JUMPDEST
00000272: PUSH1 0x00
00000274: DUP2
00000275: PUSH1 0x00
00000277: PUSH1 0x00
00000279: POP
0000027a: PUSH1 0x00
0000027c: CALLER
0000027d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000292: AND
00000293: DUP2
00000294: MSTORE
00000295: PUSH1 0x20
00000297: ADD
00000298: SWAP1
00000299: DUP2
0000029a: MSTORE
0000029b: PUSH1 0x20
0000029d: ADD
0000029e: PUSH1 0x00
000002a0: KECCAK256
000002a1: PUSH1 0x00
000002a3: POP
000002a4: SLOAD
000002a5: LT
000002a6: ISZERO
000002a7: PUSH2 0x02af
000002aa: JUMPI
000002ab: PUSH2 0x0002
000002ae: JUMP
000002af: JUMPDEST
000002b0: PUSH2 0x02e8
000002b3: PUSH1 0x00
000002b5: PUSH1 0x00
000002b7: POP
000002b8: PUSH1 0x00
000002ba: DUP6
000002bb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002d0: AND
000002d1: DUP2
000002d2: MSTORE
000002d3: PUSH1 0x20
000002d5: ADD
000002d6: SWAP1
000002d7: DUP2
000002d8: MSTORE
000002d9: PUSH1 0x20
000002db: ADD
000002dc: PUSH1 0x00
000002de: KECCAK256
000002df: PUSH1 0x00
000002e1: POP
000002e2: SLOAD
000002e3: DUP4
000002e4: PUSH2 0x091f
000002e7: JUMP
000002e8: JUMPDEST
000002e9: ISZERO
000002ea: ISZERO
000002eb: PUSH2 0x02f3
000002ee: JUMPI
000002ef: PUSH2 0x0002
000002f2: JUMP
000002f3: JUMPDEST
000002f4: DUP2
000002f5: PUSH1 0x00
000002f7: PUSH1 0x00
000002f9: POP
000002fa: PUSH1 0x00
000002fc: CALLER
000002fd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000312: AND
00000313: DUP2
00000314: MSTORE
00000315: PUSH1 0x20
00000317: ADD
00000318: SWAP1
00000319: DUP2
0000031a: MSTORE
0000031b: PUSH1 0x20
0000031d: ADD
0000031e: PUSH1 0x00
00000320: KECCAK256
00000321: PUSH1 0x00
00000323: DUP3
00000324: DUP3
00000325: DUP3
00000326: POP
00000327: SLOAD
00000328: SUB
00000329: SWAP3
0000032a: POP
0000032b: POP
0000032c: DUP2
0000032d: SWAP1
0000032e: SSTORE
0000032f: POP
00000330: DUP2
00000331: PUSH1 0x00
00000333: PUSH1 0x00
00000335: POP
00000336: PUSH1 0x00
00000338: DUP6
00000339: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000034e: AND
0000034f: DUP2
00000350: MSTORE
00000351: PUSH1 0x20
00000353: ADD
00000354: SWAP1
00000355: DUP2
00000356: MSTORE
00000357: PUSH1 0x20
00000359: ADD
0000035a: PUSH1 0x00
0000035c: KECCAK256
0000035d: PUSH1 0x00
0000035f: DUP3
00000360: DUP3
00000361: DUP3
00000362: POP
00000363: SLOAD
00000364: ADD
00000365: SWAP3
00000366: POP
00000367: POP
00000368: DUP2
00000369: SWAP1
0000036a: SSTORE
0000036b: POP
0000036c: DUP3
0000036d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000382: AND
00000383: CALLER
00000384: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000399: AND
0000039a: PUSH32 0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef
000003bb: DUP5
000003bc: PUSH1 0x40
000003be: MLOAD
000003bf: DUP1
000003c0: DUP3
000003c1: DUP2
000003c2: MSTORE
000003c3: PUSH1 0x20
000003c5: ADD
000003c6: SWAP2
000003c7: POP
000003c8: POP
000003c9: PUSH1 0x40
000003cb: MLOAD
000003cc: DUP1
000003cd: SWAP2
000003ce: SUB
000003cf: SWAP1
000003d0: LOG3
000003d1: PUSH1 0x01
000003d3: SWAP1
000003d4: POP
000003d5: PUSH2 0x03d9
000003d8: JUMP
000003d9: JUMPDEST
000003da: SWAP3
000003db: SWAP2
000003dc: POP
000003dd: POP
000003de: JUMP
000003df: JUMPDEST
000003e0: PUSH1 0x00
000003e2: DUP2
000003e3: PUSH1 0x00
000003e5: PUSH1 0x00
000003e7: POP
000003e8: PUSH1 0x00
000003ea: DUP7
000003eb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000400: AND
00000401: DUP2
00000402: MSTORE
00000403: PUSH1 0x20
00000405: ADD
00000406: SWAP1
00000407: DUP2
00000408: MSTORE
00000409: PUSH1 0x20
0000040b: ADD
0000040c: PUSH1 0x00
0000040e: KECCAK256
0000040f: PUSH1 0x00
00000411: POP
00000412: SLOAD
00000413: LT
00000414: ISZERO
00000415: PUSH2 0x041d
00000418: JUMPI
00000419: PUSH2 0x0002
0000041c: JUMP
0000041d: JUMPDEST
0000041e: DUP2
0000041f: PUSH1 0x01
00000421: PUSH1 0x00
00000423: POP
00000424: PUSH1 0x00
00000426: DUP7
00000427: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000043c: AND
0000043d: DUP2
0000043e: MSTORE
0000043f: PUSH1 0x20
00000441: ADD
00000442: SWAP1
00000443: DUP2
00000444: MSTORE
00000445: PUSH1 0x20
00000447: ADD
00000448: PUSH1 0x00
0000044a: KECCAK256
0000044b: PUSH1 0x00
0000044d: POP
0000044e: PUSH1 0x00
00000450: CALLER
00000451: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000466: AND
00000467: DUP2
00000468: MSTORE
00000469: PUSH1 0x20
0000046b: ADD
0000046c: SWAP1
0000046d: DUP2
0000046e: MSTORE
0000046f: PUSH1 0x20
00000471: ADD
00000472: PUSH1 0x00
00000474: KECCAK256
00000475: PUSH1 0x00
00000477: POP
00000478: SLOAD
00000479: LT
0000047a: ISZERO
0000047b: PUSH2 0x0483
0000047e: JUMPI
0000047f: PUSH2 0x0002
00000482: JUMP
00000483: JUMPDEST
00000484: PUSH2 0x04bc
00000487: PUSH1 0x00
00000489: PUSH1 0x00
0000048b: POP
0000048c: PUSH1 0x00
0000048e: DUP6
0000048f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004a4: AND
000004a5: DUP2
000004a6: MSTORE
000004a7: PUSH1 0x20
000004a9: ADD
000004aa: SWAP1
000004ab: DUP2
000004ac: MSTORE
000004ad: PUSH1 0x20
000004af: ADD
000004b0: PUSH1 0x00
000004b2: KECCAK256
000004b3: PUSH1 0x00
000004b5: POP
000004b6: SLOAD
000004b7: DUP4
000004b8: PUSH2 0x091f
000004bb: JUMP
000004bc: JUMPDEST
000004bd: ISZERO
000004be: ISZERO
000004bf: PUSH2 0x04c7
000004c2: JUMPI
000004c3: PUSH2 0x0002
000004c6: JUMP
000004c7: JUMPDEST
000004c8: DUP2
000004c9: PUSH1 0x01
000004cb: PUSH1 0x00
000004cd: POP
000004ce: PUSH1 0x00
000004d0: DUP7
000004d1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004e6: AND
000004e7: DUP2
000004e8: MSTORE
000004e9: PUSH1 0x20
000004eb: ADD
000004ec: SWAP1
000004ed: DUP2
000004ee: MSTORE
000004ef: PUSH1 0x20
000004f1: ADD
000004f2: PUSH1 0x00
000004f4: KECCAK256
000004f5: PUSH1 0x00
000004f7: POP
000004f8: PUSH1 0x00
000004fa: CALLER
000004fb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000510: AND
00000511: DUP2
00000512: MSTORE
00000513: PUSH1 0x20
00000515: ADD
00000516: SWAP1
00000517: DUP2
00000518: MSTORE
00000519: PUSH1 0x20
0000051b: ADD
0000051c: PUSH1 0x00
0000051e: KECCAK256
0000051f: PUSH1 0x00
00000521: DUP3
00000522: DUP3
00000523: DUP3
00000524: POP
00000525: SLOAD
00000526: SUB
00000527: SWAP3
00000528: POP
00000529: POP
0000052a: DUP2
0000052b: SWAP1
0000052c: SSTORE
0000052d: POP
0000052e: DUP2
0000052f: PUSH1 0x00
00000531: PUSH1 0x00
00000533: POP
00000534: PUSH1 0x00
00000536: DUP7
00000537: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000054c: AND
0000054d: DUP2
0000054e: MSTORE
0000054f: PUSH1 0x20
00000551: ADD
00000552: SWAP1
00000553: DUP2
00000554: MSTORE
00000555: PUSH1 0x20
00000557: ADD
00000558: PUSH1 0x00
0000055a: KECCAK256
0000055b: PUSH1 0x00
0000055d: DUP3
0000055e: DUP3
0000055f: DUP3
00000560: POP
00000561: SLOAD
00000562: SUB
00000563: SWAP3
00000564: POP
00000565: POP
00000566: DUP2
00000567: SWAP1
00000568: SSTORE
00000569: POP
0000056a: DUP2
0000056b: PUSH1 0x00
0000056d: PUSH1 0x00
0000056f: POP
00000570: PUSH1 0x00
00000572: DUP6
00000573: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000588: AND
00000589: DUP2
0000058a: MSTORE
0000058b: PUSH1 0x20
0000058d: ADD
0000058e: SWAP1
0000058f: DUP2
00000590: MSTORE
00000591: PUSH1 0x20
00000593: ADD
00000594: PUSH1 0x00
00000596: KECCAK256
00000597: PUSH1 0x00
00000599: DUP3
0000059a: DUP3
0000059b: DUP3
0000059c: POP
0000059d: SLOAD
0000059e: ADD
0000059f: SWAP3
000005a0: POP
000005a1: POP
000005a2: DUP2
000005a3: SWAP1
000005a4: SSTORE
000005a5: POP
000005a6: DUP3
000005a7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005bc: AND
000005bd: DUP5
000005be: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005d3: AND
000005d4: PUSH32 0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef
000005f5: DUP5
000005f6: PUSH1 0x40
000005f8: MLOAD
000005f9: DUP1
000005fa: DUP3
000005fb: DUP2
000005fc: MSTORE
000005fd: PUSH1 0x20
000005ff: ADD
00000600: SWAP2
00000601: POP
00000602: POP
00000603: PUSH1 0x40
00000605: MLOAD
00000606: DUP1
00000607: SWAP2
00000608: SUB
00000609: SWAP1
0000060a: LOG3
0000060b: PUSH1 0x01
0000060d: SWAP1
0000060e: POP
0000060f: PUSH2 0x0613
00000612: JUMP
00000613: JUMPDEST
00000614: SWAP4
00000615: SWAP3
00000616: POP
00000617: POP
00000618: POP
00000619: JUMP
0000061a: JUMPDEST
0000061b: PUSH1 0x00
0000061d: DUP2
0000061e: PUSH1 0x01
00000620: PUSH1 0x00
00000622: POP
00000623: PUSH1 0x00
00000625: CALLER
00000626: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000063b: AND
0000063c: DUP2
0000063d: MSTORE
0000063e: PUSH1 0x20
00000640: ADD
00000641: SWAP1
00000642: DUP2
00000643: MSTORE
00000644: PUSH1 0x20
00000646: ADD
00000647: PUSH1 0x00
00000649: KECCAK256
0000064a: PUSH1 0x00
0000064c: POP
0000064d: PUSH1 0x00
0000064f: DUP6
00000650: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000665: AND
00000666: DUP2
00000667: MSTORE
00000668: PUSH1 0x20
0000066a: ADD
0000066b: SWAP1
0000066c: DUP2
0000066d: MSTORE
0000066e: PUSH1 0x20
00000670: ADD
00000671: PUSH1 0x00
00000673: KECCAK256
00000674: PUSH1 0x00
00000676: POP
00000677: DUP2
00000678: SWAP1
00000679: SSTORE
0000067a: POP
0000067b: DUP3
0000067c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000691: AND
00000692: CALLER
00000693: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006a8: AND
000006a9: PUSH32 0x8c5be1e5ebec7d5bd14f71427d1e84f3dd0314c0f7b2291e5b200ac8c7c3b925
000006ca: DUP5
000006cb: PUSH1 0x40
000006cd: MLOAD
000006ce: DUP1
000006cf: DUP3
000006d0: DUP2
000006d1: MSTORE
000006d2: PUSH1 0x20
000006d4: ADD
000006d5: SWAP2
000006d6: POP
000006d7: POP
000006d8: PUSH1 0x40
000006da: MLOAD
000006db: DUP1
000006dc: SWAP2
000006dd: SUB
000006de: SWAP1
000006df: LOG3
000006e0: PUSH1 0x01
000006e2: SWAP1
000006e3: POP
000006e4: PUSH2 0x06e8
000006e7: JUMP
000006e8: JUMPDEST
000006e9: SWAP3
000006ea: SWAP2
000006eb: POP
000006ec: POP
000006ed: JUMP
000006ee: JUMPDEST
000006ef: PUSH1 0x00
000006f1: PUSH1 0x01
000006f3: PUSH1 0x00
000006f5: POP
000006f6: PUSH1 0x00
000006f8: DUP5
000006f9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000070e: AND
0000070f: DUP2
00000710: MSTORE
00000711: PUSH1 0x20
00000713: ADD
00000714: SWAP1
00000715: DUP2
00000716: MSTORE
00000717: PUSH1 0x20
00000719: ADD
0000071a: PUSH1 0x00
0000071c: KECCAK256
0000071d: PUSH1 0x00
0000071f: POP
00000720: PUSH1 0x00
00000722: DUP4
00000723: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000738: AND
00000739: DUP2
0000073a: MSTORE
0000073b: PUSH1 0x20
0000073d: ADD
0000073e: SWAP1
0000073f: DUP2
00000740: MSTORE
00000741: PUSH1 0x20
00000743: ADD
00000744: PUSH1 0x00
00000746: KECCAK256
00000747: PUSH1 0x00
00000749: POP
0000074a: SLOAD
0000074b: SWAP1
0000074c: POP
0000074d: PUSH2 0x0751
00000750: JUMP
00000751: JUMPDEST
00000752: SWAP3
00000753: SWAP2
00000754: POP
00000755: POP
00000756: JUMP
00000757: JUMPDEST
00000758: PUSH1 0x00
0000075a: ADDRESS
0000075b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000770: AND
00000771: BALANCE
00000772: SWAP1
00000773: POP
00000774: PUSH2 0x0778
00000777: JUMP
00000778: JUMPDEST
00000779: SWAP1
0000077a: JUMP
0000077b: JUMPDEST
0000077c: PUSH1 0x00
0000077e: DUP2
0000077f: PUSH1 0x00
00000781: PUSH1 0x00
00000783: POP
00000784: PUSH1 0x00
00000786: CALLER
00000787: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000079c: AND
0000079d: DUP2
0000079e: MSTORE
0000079f: PUSH1 0x20
000007a1: ADD
000007a2: SWAP1
000007a3: DUP2
000007a4: MSTORE
000007a5: PUSH1 0x20
000007a7: ADD
000007a8: PUSH1 0x00
000007aa: KECCAK256
000007ab: PUSH1 0x00
000007ad: POP
000007ae: SLOAD
000007af: LT
000007b0: ISZERO
000007b1: ISZERO
000007b2: PUSH2 0x0881
000007b5: JUMPI
000007b6: CALLER
000007b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007cc: AND
000007cd: DUP3
000007ce: PUSH1 0x40
000007d0: MLOAD
000007d1: DUP1
000007d2: SWAP1
000007d3: POP
000007d4: PUSH1 0x00
000007d6: PUSH1 0x40
000007d8: MLOAD
000007d9: DUP1
000007da: DUP4
000007db: SUB
000007dc: DUP2
000007dd: DUP6
000007de: DUP8
000007df: PUSH2 0x8502
000007e2: GAS
000007e3: SUB
000007e4: CALL
000007e5: SWAP3
000007e6: POP
000007e7: POP
000007e8: POP
000007e9: ISZERO
000007ea: PUSH2 0x0880
000007ed: JUMPI
000007ee: DUP2
000007ef: PUSH1 0x00
000007f1: PUSH1 0x00
000007f3: POP
000007f4: PUSH1 0x00
000007f6: CALLER
000007f7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000080c: AND
0000080d: DUP2
0000080e: MSTORE
0000080f: PUSH1 0x20
00000811: ADD
00000812: SWAP1
00000813: DUP2
00000814: MSTORE
00000815: PUSH1 0x20
00000817: ADD
00000818: PUSH1 0x00
0000081a: KECCAK256
0000081b: PUSH1 0x00
0000081d: DUP3
0000081e: DUP3
0000081f: DUP3
00000820: POP
00000821: SLOAD
00000822: SUB
00000823: SWAP3
00000824: POP
00000825: POP
00000826: DUP2
00000827: SWAP1
00000828: SSTORE
00000829: POP
0000082a: CALLER
0000082b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000840: AND
00000841: PUSH32 0x7fcf532c15f0a6db0bd6d0e038bea71d30d808c7d98cb3bf7268a95bf5081b65
00000862: DUP4
00000863: PUSH1 0x40
00000865: MLOAD
00000866: DUP1
00000867: DUP3
00000868: DUP2
00000869: MSTORE
0000086a: PUSH1 0x20
0000086c: ADD
0000086d: SWAP2
0000086e: POP
0000086f: POP
00000870: PUSH1 0x40
00000872: MLOAD
00000873: DUP1
00000874: SWAP2
00000875: SUB
00000876: SWAP1
00000877: LOG2
00000878: PUSH1 0x01
0000087a: SWAP1
0000087b: POP
0000087c: PUSH2 0x0882
0000087f: JUMP
00000880: JUMPDEST
00000881: JUMPDEST
00000882: JUMPDEST
00000883: SWAP2
00000884: SWAP1
00000885: POP
00000886: JUMP
00000887: JUMPDEST
00000888: PUSH1 0x00
0000088a: CALLVALUE
0000088b: PUSH1 0x00
0000088d: PUSH1 0x00
0000088f: POP
00000890: PUSH1 0x00
00000892: CALLER
00000893: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008a8: AND
000008a9: DUP2
000008aa: MSTORE
000008ab: PUSH1 0x20
000008ad: ADD
000008ae: SWAP1
000008af: DUP2
000008b0: MSTORE
000008b1: PUSH1 0x20
000008b3: ADD
000008b4: PUSH1 0x00
000008b6: KECCAK256
000008b7: PUSH1 0x00
000008b9: DUP3
000008ba: DUP3
000008bb: DUP3
000008bc: POP
000008bd: SLOAD
000008be: ADD
000008bf: SWAP3
000008c0: POP
000008c1: POP
000008c2: DUP2
000008c3: SWAP1
000008c4: SSTORE
000008c5: POP
000008c6: CALLER
000008c7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008dc: AND
000008dd: PUSH32 0xe1fffcc4923d04b559f4d29a8bfc6cda04eb5b0d3c460751c2402c5c5cc9109c
000008fe: CALLVALUE
000008ff: PUSH1 0x40
00000901: MLOAD
00000902: DUP1
00000903: DUP3
00000904: DUP2
00000905: MSTORE
00000906: PUSH1 0x20
00000908: ADD
00000909: SWAP2
0000090a: POP
0000090b: POP
0000090c: PUSH1 0x40
0000090e: MLOAD
0000090f: DUP1
00000910: SWAP2
00000911: SUB
00000912: SWAP1
00000913: LOG2
00000914: PUSH1 0x01
00000916: SWAP1
00000917: POP
00000918: PUSH2 0x091c
0000091b: JUMP
0000091c: JUMPDEST
0000091d: SWAP1
0000091e: JUMP
0000091f: JUMPDEST
00000920: PUSH1 0x00
00000922: DUP3
00000923: DUP3
00000924: DUP5
00000925: ADD
00000926: LT
00000927: ISZERO
00000928: SWAP1
00000929: POP
0000092a: PUSH2 0x092e
0000092d: JUMP
0000092e: JUMPDEST
0000092f: SWAP3
00000930: SWAP2
00000931: POP
00000932: POP
00000933: JUMP
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x38dc224ee2cc2cd7e9943c25012408a9ec7a19f465984f91ba0ebe9bccbf438d
call_targets: 0xd654bdd32fc99471455e86c2e7f7d7b6437e9179
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x38dc224ee2cc2cd7e9943c25012408a9ec7a19f465984f91ba0ebe9bccbf438d",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xd654bdd32fc99471455e86c2e7f7d7b6437e9179"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x095ea7b3",
            "selector": "0x095ea7b3",
            "calldata_variants": [
                "0x095ea7b3",
                "0x095ea7b30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2e1a7d4d",
            "selector": "0x2e1a7d4d",
            "calldata_variants": [
                "0x2e1a7d4d",
                "0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa9059cbb",
            "selector": "0xa9059cbb",
            "calldata_variants": [
                "0xa9059cbb",
                "0xa9059cbb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd0e30db0",
            "selector": "0xd0e30db0",
            "calldata_variants": [
                "0xd0e30db0",
                "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xdd62ed3e",
            "selector": "0xdd62ed3e",
            "calldata_variants": [
                "0xdd62ed3e",
                "0xdd62ed3e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 2020,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [],
    "untrusted_call_count": 1
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x38dc224ee2cc2cd7e9943c25012408a9ec7a19f465984f91ba0ebe9bccbf438d
call_targets: 0xd654bdd32fc99471455e86c2e7f7d7b6437e9179
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x38dc224ee2cc2cd7e9943c25012408a9ec7a19f465984f91ba0ebe9bccbf438d",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xd654bdd32fc99471455e86c2e7f7d7b6437e9179"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x095ea7b3",
            "selector": "0x095ea7b3",
            "calldata_variants": [
                "0x095ea7b3",
                "0x095ea7b30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2e1a7d4d",
            "selector": "0x2e1a7d4d",
            "calldata_variants": [
                "0x2e1a7d4d",
                "0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa9059cbb",
            "selector": "0xa9059cbb",
            "calldata_variants": [
                "0xa9059cbb",
                "0xa9059cbb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd0e30db0",
            "selector": "0xd0e30db0",
            "calldata_variants": [
                "0xd0e30db0",
                "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xdd62ed3e",
            "selector": "0xdd62ed3e",
            "calldata_variants": [
                "0xdd62ed3e",
                "0xdd62ed3e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 2020,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": []
}