Analysis Run

019b3836-35e7-72b6-a499-38fe7fbd97bb

complete

Chain ID

1

Address

0xc0326a98c23296d295ad880b59a3ef7ea6f5e594

Block Number

—

Created

Fri, Dec 19, 2025 8:03 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
3495	artifact.fetch	complete	1 / 3	3 months ago
3496	tool.cast_disasm	complete	1 / 3	3 months ago
46432	analysis.bundle	complete	1 / 3	2 weeks ago
46433	capability.graph	complete	1 / 3	2 weeks ago
46434	detector.run	complete	1 / 3	2 weeks ago
46435	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

3

EXT*/BALANCE

1

Total opcodes

1578

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x008c
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH3 0x3b9d88
00000018: DUP2
00000019: EQ
0000001a: PUSH2 0x0097
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x13af4035
00000024: EQ
00000025: PUSH2 0x00d0
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x164e68de
0000002f: EQ
00000030: PUSH2 0x0103
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x571a26a0
0000003a: EQ
0000003b: PUSH2 0x0131
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0x8da5cb5b
00000045: EQ
00000046: PUSH2 0x0208
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0x9003adfe
00000050: EQ
00000051: PUSH2 0x021a
00000054: JUMPI
00000055: DUP1
00000056: PUSH4 0xa001ecdd
0000005b: EQ
0000005c: PUSH2 0x0223
0000005f: JUMPI
00000060: DUP1
00000061: PUSH4 0xbc610c63
00000066: EQ
00000067: PUSH2 0x022f
0000006a: JUMPI
0000006b: DUP1
0000006c: PUSH4 0xc5617769
00000071: EQ
00000072: PUSH2 0x0238
00000075: JUMPI
00000076: DUP1
00000077: PUSH4 0xecfc7ecc
0000007c: EQ
0000007d: PUSH2 0x0241
00000080: JUMPI
00000081: DUP1
00000082: PUSH4 0xf449619e
00000087: EQ
00000088: PUSH2 0x0301
0000008b: JUMPI
0000008c: JUMPDEST
0000008d: PUSH2 0x0431
00000090: PUSH2 0x0433
00000093: PUSH2 0x0245
00000096: JUMP
00000097: JUMPDEST
00000098: PUSH2 0x0431
0000009b: PUSH1 0x04
0000009d: CALLDATALOAD
0000009e: PUSH1 0x00
000000a0: SLOAD
000000a1: PUSH1 0x01
000000a3: PUSH1 0xa0
000000a5: PUSH1 0x02
000000a7: EXP
000000a8: SUB
000000a9: SWAP1
000000aa: DUP2
000000ab: AND
000000ac: CALLER
000000ad: SWAP1
000000ae: SWAP2
000000af: AND
000000b0: EQ
000000b1: ISZERO
000000b2: PUSH2 0x0668
000000b5: JUMPI
000000b6: PUSH1 0x0a
000000b8: PUSH1 0xff
000000ba: DUP3
000000bb: AND
000000bc: LT
000000bd: ISZERO
000000be: PUSH2 0x0668
000000c1: JUMPI
000000c2: PUSH1 0x02
000000c4: DUP1
000000c5: SLOAD
000000c6: PUSH1 0xff
000000c8: NOT
000000c9: AND
000000ca: DUP3
000000cb: OR
000000cc: SWAP1
000000cd: SSTORE
000000ce: POP
000000cf: JUMP
000000d0: JUMPDEST
000000d1: PUSH2 0x0431
000000d4: PUSH1 0x04
000000d6: CALLDATALOAD
000000d7: PUSH1 0x00
000000d9: SLOAD
000000da: PUSH1 0x01
000000dc: PUSH1 0xa0
000000de: PUSH1 0x02
000000e0: EXP
000000e1: SUB
000000e2: SWAP1
000000e3: DUP2
000000e4: AND
000000e5: CALLER
000000e6: SWAP1
000000e7: SWAP2
000000e8: AND
000000e9: EQ
000000ea: ISZERO
000000eb: PUSH2 0x0668
000000ee: JUMPI
000000ef: PUSH1 0x00
000000f1: DUP1
000000f2: SLOAD
000000f3: PUSH1 0x01
000000f5: PUSH1 0xa0
000000f7: PUSH1 0x02
000000f9: EXP
000000fa: SUB
000000fb: NOT
000000fc: AND
000000fd: DUP3
000000fe: OR
000000ff: SWAP1
00000100: SSTORE
00000101: POP
00000102: JUMP
00000103: JUMPDEST
00000104: PUSH2 0x0431
00000107: PUSH1 0x04
00000109: CALLDATALOAD
0000010a: PUSH1 0x00
0000010c: SLOAD
0000010d: PUSH1 0x01
0000010f: PUSH1 0xa0
00000111: PUSH1 0x02
00000113: EXP
00000114: SUB
00000115: SWAP1
00000116: DUP2
00000117: AND
00000118: CALLER
00000119: SWAP1
0000011a: SWAP2
0000011b: AND
0000011c: EQ
0000011d: ISZERO
0000011e: PUSH2 0x0668
00000121: JUMPI
00000122: PUSH1 0x01
00000124: SLOAD
00000125: PUSH1 0x00
00000127: EQ
00000128: ISZERO
00000129: PUSH2 0x06cd
0000012c: JUMPI
0000012d: PUSH2 0x0668
00000130: JUMP
00000131: JUMPDEST
00000132: PUSH2 0x0435
00000135: PUSH1 0x04
00000137: CALLDATALOAD
00000138: PUSH1 0x03
0000013a: DUP1
0000013b: SLOAD
0000013c: DUP3
0000013d: SWAP1
0000013e: DUP2
0000013f: LT
00000140: ISZERO
00000141: PUSH2 0x0002
00000144: JUMPI
00000145: POP
00000146: PUSH1 0x00
00000148: MSTORE
00000149: PUSH1 0x06
0000014b: MUL
0000014c: PUSH1 0x00
0000014e: DUP1
0000014f: MLOAD
00000150: PUSH1 0x20
00000152: PUSH2 0x097a
00000155: DUP4
00000156: CODECOPY
00000157: DUP2
00000158: MLOAD
00000159: SWAP2
0000015a: MSTORE
0000015b: DUP2
0000015c: ADD
0000015d: SLOAD
0000015e: PUSH1 0x00
00000160: DUP1
00000161: MLOAD
00000162: PUSH1 0x20
00000164: PUSH2 0x099a
00000167: DUP4
00000168: CODECOPY
00000169: DUP2
0000016a: MLOAD
0000016b: SWAP2
0000016c: MSTORE
0000016d: DUP3
0000016e: ADD
0000016f: SLOAD
00000170: PUSH1 0x00
00000172: DUP1
00000173: MLOAD
00000174: PUSH1 0x20
00000176: PUSH2 0x095a
00000179: DUP4
0000017a: CODECOPY
0000017b: DUP2
0000017c: MLOAD
0000017d: SWAP2
0000017e: MSTORE
0000017f: DUP4
00000180: ADD
00000181: SLOAD
00000182: PUSH1 0x00
00000184: DUP1
00000185: MLOAD
00000186: PUSH1 0x20
00000188: PUSH2 0x093a
0000018b: DUP4
0000018c: CODECOPY
0000018d: DUP2
0000018e: MLOAD
0000018f: SWAP2
00000190: MSTORE
00000191: DUP5
00000192: ADD
00000193: SLOAD
00000194: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85f
000001b5: DUP6
000001b6: ADD
000001b7: SLOAD
000001b8: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85c
000001d9: SWAP6
000001da: SWAP1
000001db: SWAP6
000001dc: ADD
000001dd: SLOAD
000001de: SWAP2
000001df: SWAP5
000001e0: SWAP2
000001e1: SWAP4
000001e2: SWAP3
000001e3: SWAP1
000001e4: SWAP2
000001e5: SWAP1
000001e6: PUSH1 0x01
000001e8: PUSH1 0xa0
000001ea: PUSH1 0x02
000001ec: EXP
000001ed: SUB
000001ee: DUP2
000001ef: AND
000001f0: SWAP1
000001f1: PUSH1 0xa0
000001f3: PUSH1 0x02
000001f5: EXP
000001f6: DUP2
000001f7: DIV
000001f8: PUSH1 0xff
000001fa: SWAP1
000001fb: DUP2
000001fc: AND
000001fd: SWAP2
000001fe: PUSH1 0xa8
00000200: PUSH1 0x02
00000202: EXP
00000203: SWAP1
00000204: DIV
00000205: AND
00000206: DUP9
00000207: JUMP
00000208: JUMPDEST
00000209: PUSH2 0x0482
0000020c: PUSH1 0x00
0000020e: SLOAD
0000020f: PUSH1 0x01
00000211: PUSH1 0xa0
00000213: PUSH1 0x02
00000215: EXP
00000216: SUB
00000217: AND
00000218: DUP2
00000219: JUMP
0000021a: JUMPDEST
0000021b: PUSH2 0x049f
0000021e: PUSH1 0x01
00000220: SLOAD
00000221: DUP2
00000222: JUMP
00000223: JUMPDEST
00000224: PUSH2 0x04b1
00000227: PUSH1 0x02
00000229: SLOAD
0000022a: PUSH1 0xff
0000022c: AND
0000022d: DUP2
0000022e: JUMP
0000022f: JUMPDEST
00000230: PUSH2 0x049f
00000233: PUSH1 0x05
00000235: SLOAD
00000236: DUP2
00000237: JUMP
00000238: JUMPDEST
00000239: PUSH2 0x049f
0000023c: PUSH1 0x04
0000023e: SLOAD
0000023f: DUP2
00000240: JUMP
00000241: JUMPDEST
00000242: PUSH2 0x0431
00000245: JUMPDEST
00000246: PUSH1 0x04
00000248: SLOAD
00000249: PUSH1 0x03
0000024b: DUP1
0000024c: SLOAD
0000024d: PUSH1 0x00
0000024f: SWAP3
00000250: SWAP1
00000251: DUP2
00000252: LT
00000253: ISZERO
00000254: PUSH2 0x0002
00000257: JUMPI
00000258: SWAP1
00000259: DUP3
0000025a: MSTORE
0000025b: PUSH1 0x06
0000025d: MUL
0000025e: PUSH1 0x00
00000260: DUP1
00000261: MLOAD
00000262: PUSH1 0x20
00000264: PUSH2 0x097a
00000267: DUP4
00000268: CODECOPY
00000269: DUP2
0000026a: MLOAD
0000026b: SWAP2
0000026c: MSTORE
0000026d: ADD
0000026e: SLOAD
0000026f: TIMESTAMP
00000270: LT
00000271: PUSH2 0x066b
00000274: JUMPI
00000275: PUSH2 0x06c0
00000278: PUSH1 0x03
0000027a: DUP1
0000027b: SLOAD
0000027c: PUSH1 0x01
0000027e: DUP2
0000027f: ADD
00000280: DUP1
00000281: DUP4
00000282: SSTORE
00000283: SWAP2
00000284: SWAP1
00000285: DUP3
00000286: SWAP1
00000287: DUP1
00000288: ISZERO
00000289: DUP3
0000028a: SWAP1
0000028b: GT
0000028c: PUSH2 0x06f3
0000028f: JUMPI
00000290: PUSH2 0x06f3
00000293: SWAP1
00000294: PUSH1 0x06
00000296: SWAP1
00000297: DUP2
00000298: MUL
00000299: PUSH1 0x00
0000029b: DUP1
0000029c: MLOAD
0000029d: PUSH1 0x20
0000029f: PUSH2 0x095a
000002a2: DUP4
000002a3: CODECOPY
000002a4: DUP2
000002a5: MLOAD
000002a6: SWAP2
000002a7: MSTORE
000002a8: SWAP1
000002a9: DUP2
000002aa: ADD
000002ab: SWAP2
000002ac: DUP5
000002ad: MUL
000002ae: ADD
000002af: JUMPDEST
000002b0: DUP1
000002b1: DUP3
000002b2: GT
000002b3: ISZERO
000002b4: PUSH2 0x0936
000002b7: JUMPI
000002b8: PUSH1 0x00
000002ba: DUP1
000002bb: DUP3
000002bc: SSTORE
000002bd: PUSH1 0x01
000002bf: DUP3
000002c0: ADD
000002c1: DUP2
000002c2: DUP2
000002c3: SSTORE
000002c4: PUSH1 0x02
000002c6: DUP4
000002c7: ADD
000002c8: DUP3
000002c9: SWAP1
000002ca: SSTORE
000002cb: PUSH1 0x03
000002cd: DUP4
000002ce: ADD
000002cf: DUP3
000002d0: SWAP1
000002d1: SSTORE
000002d2: PUSH1 0x04
000002d4: DUP4
000002d5: ADD
000002d6: SWAP2
000002d7: SWAP1
000002d8: SWAP2
000002d9: SSTORE
000002da: PUSH1 0x05
000002dc: SWAP2
000002dd: SWAP1
000002de: SWAP2
000002df: ADD
000002e0: DUP1
000002e1: SLOAD
000002e2: PUSH22 0xffffffffffffffffffffffffffffffffffffffffffff
000002f9: NOT
000002fa: AND
000002fb: SWAP1
000002fc: SSTORE
000002fd: PUSH2 0x02af
00000300: JUMP
00000301: JUMPDEST
00000302: PUSH2 0x0431
00000305: PUSH1 0x04
00000307: CALLDATALOAD
00000308: PUSH1 0x05
0000030a: SLOAD
0000030b: DUP2
0000030c: EQ
0000030d: DUP1
0000030e: ISZERO
0000030f: SWAP1
00000310: PUSH2 0x033e
00000313: JUMPI
00000314: POP
00000315: PUSH1 0x03
00000317: DUP1
00000318: SLOAD
00000319: DUP3
0000031a: SWAP1
0000031b: DUP2
0000031c: LT
0000031d: ISZERO
0000031e: PUSH2 0x0002
00000321: JUMPI
00000322: POP
00000323: PUSH1 0x00
00000325: MSTORE
00000326: PUSH1 0x06
00000328: DUP2
00000329: MUL
0000032a: PUSH1 0x00
0000032c: DUP1
0000032d: MLOAD
0000032e: PUSH1 0x20
00000330: PUSH2 0x097a
00000333: DUP4
00000334: CODECOPY
00000335: DUP2
00000336: MLOAD
00000337: SWAP2
00000338: MSTORE
00000339: ADD
0000033a: SLOAD
0000033b: TIMESTAMP
0000033c: LT
0000033d: ISZERO
0000033e: JUMPDEST
0000033f: DUP1
00000340: ISZERO
00000341: PUSH2 0x0377
00000344: JUMPI
00000345: POP
00000346: PUSH1 0x03
00000348: DUP1
00000349: SLOAD
0000034a: DUP3
0000034b: SWAP1
0000034c: DUP2
0000034d: LT
0000034e: ISZERO
0000034f: PUSH2 0x0002
00000352: JUMPI
00000353: POP
00000354: PUSH1 0x00
00000356: MSTORE
00000357: PUSH1 0x06
00000359: DUP2
0000035a: MUL
0000035b: PUSH1 0x00
0000035d: DUP1
0000035e: MLOAD
0000035f: PUSH1 0x20
00000361: PUSH2 0x099a
00000364: DUP4
00000365: CODECOPY
00000366: DUP2
00000367: MLOAD
00000368: SWAP2
00000369: MSTORE
0000036a: ADD
0000036b: SLOAD
0000036c: PUSH1 0xa0
0000036e: PUSH1 0x02
00000370: EXP
00000371: SWAP1
00000372: DIV
00000373: PUSH1 0xff
00000375: AND
00000376: ISZERO
00000377: JUMPDEST
00000378: ISZERO
00000379: PUSH2 0x0668
0000037c: JUMPI
0000037d: PUSH1 0x03
0000037f: DUP1
00000380: SLOAD
00000381: DUP3
00000382: SWAP1
00000383: DUP2
00000384: LT
00000385: ISZERO
00000386: PUSH2 0x0002
00000389: JUMPI
0000038a: POP
0000038b: DUP1
0000038c: SLOAD
0000038d: PUSH1 0x00
0000038f: DUP3
00000390: DUP2
00000391: MSTORE
00000392: PUSH1 0x06
00000394: DUP5
00000395: MUL
00000396: PUSH1 0x00
00000398: DUP1
00000399: MLOAD
0000039a: PUSH1 0x20
0000039c: PUSH2 0x099a
0000039f: DUP4
000003a0: CODECOPY
000003a1: DUP2
000003a2: MLOAD
000003a3: SWAP2
000003a4: MSTORE
000003a5: ADD
000003a6: SLOAD
000003a7: PUSH1 0x01
000003a9: PUSH1 0xa0
000003ab: PUSH1 0x02
000003ad: EXP
000003ae: SUB
000003af: AND
000003b0: SWAP3
000003b1: SWAP1
000003b2: SWAP2
000003b3: DUP5
000003b4: SWAP1
000003b5: DUP2
000003b6: LT
000003b7: ISZERO
000003b8: PUSH2 0x0002
000003bb: JUMPI
000003bc: POP
000003bd: POP
000003be: PUSH1 0x40
000003c0: MLOAD
000003c1: PUSH1 0x06
000003c3: DUP5
000003c4: MUL
000003c5: PUSH1 0x00
000003c7: DUP1
000003c8: MLOAD
000003c9: PUSH1 0x20
000003cb: PUSH2 0x095a
000003ce: DUP4
000003cf: CODECOPY
000003d0: DUP2
000003d1: MLOAD
000003d2: SWAP2
000003d3: MSTORE
000003d4: ADD
000003d5: SLOAD
000003d6: SWAP1
000003d7: DUP3
000003d8: DUP2
000003d9: DUP2
000003da: DUP2
000003db: DUP6
000003dc: DUP9
000003dd: DUP4
000003de: CALL
000003df: SWAP4
000003e0: POP
000003e1: POP
000003e2: POP
000003e3: POP
000003e4: POP
000003e5: PUSH1 0x01
000003e7: PUSH1 0x03
000003e9: PUSH1 0x00
000003eb: POP
000003ec: DUP3
000003ed: DUP2
000003ee: SLOAD
000003ef: DUP2
000003f0: LT
000003f1: ISZERO
000003f2: PUSH2 0x0002
000003f5: JUMPI
000003f6: POP
000003f7: PUSH1 0x00
000003f9: MSTORE
000003fa: POP
000003fb: PUSH1 0x06
000003fd: MUL
000003fe: PUSH1 0x00
00000400: DUP1
00000401: MLOAD
00000402: PUSH1 0x20
00000404: PUSH2 0x099a
00000407: DUP4
00000408: CODECOPY
00000409: DUP2
0000040a: MLOAD
0000040b: SWAP2
0000040c: MSTORE
0000040d: ADD
0000040e: DUP1
0000040f: SLOAD
00000410: PUSH21 0xff0000000000000000000000000000000000000000
00000426: NOT
00000427: AND
00000428: PUSH1 0xa0
0000042a: PUSH1 0x02
0000042c: EXP
0000042d: OR
0000042e: SWAP1
0000042f: SSTORE
00000430: JUMP
00000431: JUMPDEST
00000432: STOP
00000433: JUMPDEST
00000434: JUMP
00000435: JUMPDEST
00000436: PUSH1 0x40
00000438: DUP1
00000439: MLOAD
0000043a: SWAP9
0000043b: DUP10
0000043c: MSTORE
0000043d: PUSH1 0x20
0000043f: DUP10
00000440: ADD
00000441: SWAP8
00000442: SWAP1
00000443: SWAP8
00000444: MSTORE
00000445: DUP8
00000446: DUP8
00000447: ADD
00000448: SWAP6
00000449: SWAP1
0000044a: SWAP6
0000044b: MSTORE
0000044c: PUSH1 0x60
0000044e: DUP8
0000044f: ADD
00000450: SWAP4
00000451: SWAP1
00000452: SWAP4
00000453: MSTORE
00000454: PUSH1 0x80
00000456: DUP7
00000457: ADD
00000458: SWAP2
00000459: SWAP1
0000045a: SWAP2
0000045b: MSTORE
0000045c: PUSH1 0x01
0000045e: PUSH1 0xa0
00000460: PUSH1 0x02
00000462: EXP
00000463: SUB
00000464: AND
00000465: PUSH1 0xa0
00000467: DUP6
00000468: ADD
00000469: MSTORE
0000046a: PUSH1 0xc0
0000046c: DUP5
0000046d: ADD
0000046e: MSTORE
0000046f: PUSH1 0xff
00000471: AND
00000472: PUSH1 0xe0
00000474: DUP4
00000475: ADD
00000476: MSTORE
00000477: MLOAD
00000478: SWAP1
00000479: DUP2
0000047a: SWAP1
0000047b: SUB
0000047c: PUSH2 0x0100
0000047f: ADD
00000480: SWAP1
00000481: RETURN
00000482: JUMPDEST
00000483: PUSH1 0x40
00000485: DUP1
00000486: MLOAD
00000487: PUSH1 0x01
00000489: PUSH1 0xa0
0000048b: PUSH1 0x02
0000048d: EXP
0000048e: SUB
0000048f: SWAP3
00000490: SWAP1
00000491: SWAP3
00000492: AND
00000493: DUP3
00000494: MSTORE
00000495: MLOAD
00000496: SWAP1
00000497: DUP2
00000498: SWAP1
00000499: SUB
0000049a: PUSH1 0x20
0000049c: ADD
0000049d: SWAP1
0000049e: RETURN
0000049f: JUMPDEST
000004a0: PUSH1 0x40
000004a2: DUP1
000004a3: MLOAD
000004a4: SWAP2
000004a5: DUP3
000004a6: MSTORE
000004a7: MLOAD
000004a8: SWAP1
000004a9: DUP2
000004aa: SWAP1
000004ab: SUB
000004ac: PUSH1 0x20
000004ae: ADD
000004af: SWAP1
000004b0: RETURN
000004b1: JUMPDEST
000004b2: PUSH1 0x40
000004b4: DUP1
000004b5: MLOAD
000004b6: PUSH1 0xff
000004b8: SWAP3
000004b9: SWAP1
000004ba: SWAP3
000004bb: AND
000004bc: DUP3
000004bd: MSTORE
000004be: MLOAD
000004bf: SWAP1
000004c0: DUP2
000004c1: SWAP1
000004c2: SUB
000004c3: PUSH1 0x20
000004c5: ADD
000004c6: SWAP1
000004c7: RETURN
000004c8: JUMPDEST
000004c9: PUSH1 0x03
000004cb: DUP1
000004cc: SLOAD
000004cd: PUSH1 0x04
000004cf: SLOAD
000004d0: CALLVALUE
000004d1: SWAP3
000004d2: SWAP2
000004d3: DUP2
000004d4: LT
000004d5: ISZERO
000004d6: PUSH2 0x0002
000004d9: JUMPI
000004da: PUSH1 0x00
000004dc: DUP3
000004dd: SWAP1
000004de: MSTORE
000004df: PUSH1 0x06
000004e1: MUL
000004e2: PUSH1 0x00
000004e4: DUP1
000004e5: MLOAD
000004e6: PUSH1 0x20
000004e8: PUSH2 0x093a
000004eb: DUP4
000004ec: CODECOPY
000004ed: DUP2
000004ee: MLOAD
000004ef: SWAP2
000004f0: MSTORE
000004f1: ADD
000004f2: SWAP2
000004f3: SWAP1
000004f4: SWAP2
000004f5: SSTORE
000004f6: PUSH1 0x04
000004f8: SLOAD
000004f9: DUP2
000004fa: SLOAD
000004fb: CALLER
000004fc: SWAP3
000004fd: SWAP2
000004fe: SWAP1
000004ff: DUP2
00000500: LT
00000501: ISZERO
00000502: PUSH2 0x0002
00000505: JUMPI
00000506: PUSH1 0x06
00000508: MUL
00000509: PUSH1 0x00
0000050b: DUP1
0000050c: MLOAD
0000050d: PUSH1 0x20
0000050f: PUSH2 0x099a
00000512: DUP4
00000513: CODECOPY
00000514: DUP2
00000515: MLOAD
00000516: SWAP2
00000517: MSTORE
00000518: ADD
00000519: DUP1
0000051a: SLOAD
0000051b: PUSH1 0x01
0000051d: PUSH1 0xa0
0000051f: PUSH1 0x02
00000521: EXP
00000522: SUB
00000523: NOT
00000524: AND
00000525: SWAP1
00000526: SWAP3
00000527: OR
00000528: SWAP1
00000529: SWAP2
0000052a: SSTORE
0000052b: PUSH1 0x04
0000052d: SLOAD
0000052e: DUP2
0000052f: SLOAD
00000530: PUSH3 0x02a300
00000534: SWAP3
00000535: SWAP2
00000536: SWAP1
00000537: DUP2
00000538: LT
00000539: ISZERO
0000053a: PUSH2 0x0002
0000053d: JUMPI
0000053e: PUSH1 0x06
00000540: MUL
00000541: PUSH1 0x00
00000543: DUP1
00000544: MLOAD
00000545: PUSH1 0x20
00000547: PUSH2 0x097a
0000054a: DUP4
0000054b: CODECOPY
0000054c: DUP2
0000054d: MLOAD
0000054e: SWAP2
0000054f: MSTORE
00000550: ADD
00000551: DUP1
00000552: SLOAD
00000553: SWAP1
00000554: SWAP3
00000555: ADD
00000556: SWAP1
00000557: SWAP2
00000558: SSTORE
00000559: PUSH1 0x04
0000055b: SLOAD
0000055c: DUP2
0000055d: SLOAD
0000055e: PUSH1 0x01
00000560: SWAP3
00000561: SWAP2
00000562: SWAP1
00000563: DUP2
00000564: LT
00000565: ISZERO
00000566: PUSH2 0x0002
00000569: JUMPI
0000056a: PUSH1 0x06
0000056c: MUL
0000056d: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85f
0000058e: ADD
0000058f: DUP1
00000590: SLOAD
00000591: SWAP1
00000592: SWAP3
00000593: ADD
00000594: SWAP1
00000595: SWAP2
00000596: SSTORE
00000597: PUSH1 0x04
00000599: SLOAD
0000059a: DUP2
0000059b: SLOAD
0000059c: DUP2
0000059d: LT
0000059e: ISZERO
0000059f: PUSH2 0x0002
000005a2: JUMPI
000005a3: DUP2
000005a4: SLOAD
000005a5: PUSH1 0x01
000005a7: DUP1
000005a8: SLOAD
000005a9: PUSH1 0x06
000005ab: SWAP4
000005ac: SWAP1
000005ad: SWAP4
000005ae: MUL
000005af: PUSH1 0x00
000005b1: DUP1
000005b2: MLOAD
000005b3: PUSH1 0x20
000005b5: PUSH2 0x099a
000005b8: DUP4
000005b9: CODECOPY
000005ba: DUP2
000005bb: MLOAD
000005bc: SWAP2
000005bd: MSTORE
000005be: ADD
000005bf: SLOAD
000005c0: PUSH1 0xa8
000005c2: PUSH1 0x02
000005c4: EXP
000005c5: SWAP1
000005c6: DIV
000005c7: PUSH1 0xff
000005c9: AND
000005ca: PUSH1 0x64
000005cc: CALLVALUE
000005cd: SWAP1
000005ce: DUP2
000005cf: DIV
000005d0: SWAP2
000005d1: SWAP1
000005d2: SWAP2
000005d3: MUL
000005d4: SWAP4
000005d5: DUP5
000005d6: ADD
000005d7: SWAP1
000005d8: SWAP2
000005d9: SSTORE
000005da: PUSH1 0x05
000005dc: SLOAD
000005dd: SWAP3
000005de: SWAP5
000005df: POP
000005e0: DUP5
000005e1: SWAP1
000005e2: SUB
000005e3: SWAP3
000005e4: SWAP2
000005e5: SWAP1
000005e6: DUP2
000005e7: LT
000005e8: ISZERO
000005e9: PUSH2 0x0002
000005ec: JUMPI
000005ed: PUSH1 0x06
000005ef: MUL
000005f0: PUSH1 0x00
000005f2: DUP1
000005f3: MLOAD
000005f4: PUSH1 0x20
000005f6: PUSH2 0x095a
000005f9: DUP4
000005fa: CODECOPY
000005fb: DUP2
000005fc: MLOAD
000005fd: SWAP2
000005fe: MSTORE
000005ff: ADD
00000600: DUP1
00000601: SLOAD
00000602: SWAP1
00000603: SWAP3
00000604: ADD
00000605: SWAP1
00000606: SWAP2
00000607: SSTORE
00000608: PUSH1 0x04
0000060a: SLOAD
0000060b: DUP2
0000060c: SLOAD
0000060d: PUSH32 0x632f5622fa7b1e8ef1a95c87de56ccc3584d8bc0f17283a3ad0ff221aa4cc612
0000062e: SWAP3
0000062f: SWAP1
00000630: DUP3
00000631: SWAP1
00000632: DUP2
00000633: LT
00000634: ISZERO
00000635: PUSH2 0x0002
00000638: JUMPI
00000639: POP
0000063a: POP
0000063b: PUSH1 0x06
0000063d: DUP2
0000063e: MUL
0000063f: PUSH1 0x00
00000641: DUP1
00000642: MLOAD
00000643: PUSH1 0x20
00000645: PUSH2 0x093a
00000648: DUP4
00000649: CODECOPY
0000064a: DUP2
0000064b: MLOAD
0000064c: SWAP2
0000064d: MSTORE
0000064e: ADD
0000064f: SLOAD
00000650: PUSH1 0x40
00000652: DUP1
00000653: MLOAD
00000654: SWAP3
00000655: DUP4
00000656: MSTORE
00000657: PUSH1 0x20
00000659: DUP4
0000065a: ADD
0000065b: SWAP2
0000065c: SWAP1
0000065d: SWAP2
0000065e: MSTORE
0000065f: DUP1
00000660: MLOAD
00000661: SWAP2
00000662: DUP3
00000663: SWAP1
00000664: SUB
00000665: ADD
00000666: SWAP1
00000667: LOG1
00000668: JUMPDEST
00000669: POP
0000066a: JUMP
0000066b: JUMPDEST
0000066c: PUSH1 0x03
0000066e: DUP1
0000066f: SLOAD
00000670: PUSH1 0x04
00000672: SLOAD
00000673: SWAP1
00000674: DUP2
00000675: LT
00000676: ISZERO
00000677: PUSH2 0x0002
0000067a: JUMPI
0000067b: PUSH1 0x00
0000067d: SWAP2
0000067e: SWAP1
0000067f: SWAP2
00000680: MSTORE
00000681: PUSH1 0x06
00000683: MUL
00000684: PUSH1 0x00
00000686: DUP1
00000687: MLOAD
00000688: PUSH1 0x20
0000068a: PUSH2 0x093a
0000068d: DUP4
0000068e: CODECOPY
0000068f: DUP2
00000690: MLOAD
00000691: SWAP2
00000692: MSTORE
00000693: ADD
00000694: SLOAD
00000695: CALLVALUE
00000696: GT
00000697: PUSH2 0x04c8
0000069a: JUMPI
0000069b: PUSH1 0x40
0000069d: MLOAD
0000069e: CALLER
0000069f: PUSH1 0x01
000006a1: PUSH1 0xa0
000006a3: PUSH1 0x02
000006a5: EXP
000006a6: SUB
000006a7: AND
000006a8: SWAP1
000006a9: PUSH1 0x00
000006ab: SWAP1
000006ac: CALLVALUE
000006ad: SWAP1
000006ae: DUP3
000006af: DUP2
000006b0: DUP2
000006b1: DUP2
000006b2: DUP6
000006b3: DUP9
000006b4: DUP4
000006b5: CALL
000006b6: SWAP4
000006b7: POP
000006b8: POP
000006b9: POP
000006ba: POP
000006bb: POP
000006bc: PUSH2 0x0668
000006bf: JUMP
000006c0: JUMPDEST
000006c1: PUSH2 0x06c8
000006c4: PUSH2 0x0245
000006c7: JUMP
000006c8: JUMPDEST
000006c9: PUSH2 0x0668
000006cc: JUMP
000006cd: JUMPDEST
000006ce: PUSH1 0x01
000006d0: SLOAD
000006d1: PUSH1 0x40
000006d3: MLOAD
000006d4: PUSH1 0x01
000006d6: PUSH1 0xa0
000006d8: PUSH1 0x02
000006da: EXP
000006db: SUB
000006dc: DUP4
000006dd: AND
000006de: SWAP2
000006df: PUSH1 0x00
000006e1: SWAP2
000006e2: DUP3
000006e3: DUP2
000006e4: DUP2
000006e5: DUP2
000006e6: DUP6
000006e7: DUP9
000006e8: DUP4
000006e9: CALL
000006ea: POP
000006eb: POP
000006ec: POP
000006ed: PUSH1 0x01
000006ef: SSTORE
000006f0: POP
000006f1: POP
000006f2: JUMP
000006f3: JUMPDEST
000006f4: POP
000006f5: POP
000006f6: PUSH1 0x03
000006f8: DUP1
000006f9: SLOAD
000006fa: PUSH1 0x01
000006fc: NOT
000006fd: DUP2
000006fe: ADD
000006ff: PUSH1 0x04
00000701: SSTORE
00000702: PUSH1 0x00
00000704: NOT
00000705: DUP2
00000706: ADD
00000707: PUSH1 0x05
00000709: DUP2
0000070a: SWAP1
0000070b: SSTORE
0000070c: PUSH1 0x00
0000070e: SWAP5
0000070f: POP
00000710: SWAP2
00000711: SWAP3
00000712: POP
00000713: DUP2
00000714: LT
00000715: ISZERO
00000716: PUSH2 0x0002
00000719: JUMPI
0000071a: DUP2
0000071b: DUP4
0000071c: MSTORE
0000071d: PUSH1 0x06
0000071f: MUL
00000720: PUSH1 0x00
00000722: DUP1
00000723: MLOAD
00000724: PUSH1 0x20
00000726: PUSH2 0x095a
00000729: DUP4
0000072a: CODECOPY
0000072b: DUP2
0000072c: MLOAD
0000072d: SWAP2
0000072e: MSTORE
0000072f: ADD
00000730: DUP3
00000731: SWAP1
00000732: SSTORE
00000733: DUP1
00000734: SLOAD
00000735: PUSH1 0x05
00000737: SLOAD
00000738: SWAP1
00000739: DUP2
0000073a: LT
0000073b: ISZERO
0000073c: PUSH2 0x0002
0000073f: JUMPI
00000740: PUSH1 0x06
00000742: MUL
00000743: PUSH1 0x00
00000745: DUP1
00000746: MLOAD
00000747: PUSH1 0x20
00000749: PUSH2 0x099a
0000074c: DUP4
0000074d: CODECOPY
0000074e: DUP2
0000074f: MLOAD
00000750: SWAP2
00000751: MSTORE
00000752: ADD
00000753: DUP1
00000754: SLOAD
00000755: PUSH21 0xff0000000000000000000000000000000000000000
0000076b: NOT
0000076c: AND
0000076d: SWAP1
0000076e: SSTORE
0000076f: PUSH1 0x04
00000771: SLOAD
00000772: DUP2
00000773: SLOAD
00000774: TIMESTAMP
00000775: SWAP4
00000776: POP
00000777: DUP2
00000778: LT
00000779: ISZERO
0000077a: PUSH2 0x0002
0000077d: JUMPI
0000077e: PUSH1 0x06
00000780: MUL
00000781: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85c
000007a2: ADD
000007a3: SWAP2
000007a4: SWAP1
000007a5: SWAP2
000007a6: SSTORE
000007a7: PUSH1 0x04
000007a9: SLOAD
000007aa: DUP2
000007ab: SLOAD
000007ac: PUSH3 0x02a300
000007b0: SWAP3
000007b1: SWAP2
000007b2: SWAP1
000007b3: DUP2
000007b4: LT
000007b5: ISZERO
000007b6: PUSH2 0x0002
000007b9: JUMPI
000007ba: PUSH1 0x04
000007bc: SLOAD
000007bd: DUP3
000007be: SLOAD
000007bf: PUSH1 0x06
000007c1: SWAP3
000007c2: SWAP1
000007c3: SWAP3
000007c4: MUL
000007c5: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85c
000007e6: ADD
000007e7: SLOAD
000007e8: SWAP1
000007e9: SWAP4
000007ea: ADD
000007eb: SWAP3
000007ec: SWAP1
000007ed: DUP2
000007ee: LT
000007ef: ISZERO
000007f0: PUSH2 0x0002
000007f3: JUMPI
000007f4: PUSH1 0x06
000007f6: MUL
000007f7: PUSH1 0x00
000007f9: DUP1
000007fa: MLOAD
000007fb: PUSH1 0x20
000007fd: PUSH2 0x097a
00000800: DUP4
00000801: CODECOPY
00000802: DUP2
00000803: MLOAD
00000804: SWAP2
00000805: MSTORE
00000806: ADD
00000807: SWAP2
00000808: SWAP1
00000809: SWAP2
0000080a: SSTORE
0000080b: PUSH1 0x04
0000080d: SLOAD
0000080e: DUP2
0000080f: SLOAD
00000810: PUSH1 0x00
00000812: SWAP3
00000813: SWAP2
00000814: SWAP1
00000815: DUP2
00000816: LT
00000817: ISZERO
00000818: PUSH2 0x0002
0000081b: JUMPI
0000081c: PUSH1 0x06
0000081e: MUL
0000081f: PUSH1 0x00
00000821: DUP1
00000822: MLOAD
00000823: PUSH1 0x20
00000825: PUSH2 0x093a
00000828: DUP4
00000829: CODECOPY
0000082a: DUP2
0000082b: MLOAD
0000082c: SWAP2
0000082d: MSTORE
0000082e: ADD
0000082f: DUP3
00000830: SWAP1
00000831: SSTORE
00000832: PUSH1 0x04
00000834: SLOAD
00000835: DUP2
00000836: SLOAD
00000837: SWAP3
00000838: SLOAD
00000839: PUSH1 0x01
0000083b: PUSH1 0xa0
0000083d: PUSH1 0x02
0000083f: EXP
00000840: SUB
00000841: AND
00000842: SWAP3
00000843: DUP2
00000844: LT
00000845: ISZERO
00000846: PUSH2 0x0002
00000849: JUMPI
0000084a: PUSH1 0x06
0000084c: MUL
0000084d: PUSH1 0x00
0000084f: DUP1
00000850: MLOAD
00000851: PUSH1 0x20
00000853: PUSH2 0x099a
00000856: DUP4
00000857: CODECOPY
00000858: DUP2
00000859: MLOAD
0000085a: SWAP2
0000085b: MSTORE
0000085c: ADD
0000085d: DUP1
0000085e: SLOAD
0000085f: PUSH1 0x01
00000861: PUSH1 0xa0
00000863: PUSH1 0x02
00000865: EXP
00000866: SUB
00000867: NOT
00000868: AND
00000869: SWAP1
0000086a: SWAP3
0000086b: OR
0000086c: SWAP1
0000086d: SWAP2
0000086e: SSTORE
0000086f: PUSH1 0x04
00000871: SLOAD
00000872: DUP2
00000873: SLOAD
00000874: PUSH1 0x00
00000876: SWAP3
00000877: SWAP2
00000878: SWAP1
00000879: DUP2
0000087a: LT
0000087b: ISZERO
0000087c: PUSH2 0x0002
0000087f: JUMPI
00000880: PUSH1 0x06
00000882: MUL
00000883: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85f
000008a4: ADD
000008a5: SWAP2
000008a6: SWAP1
000008a7: SWAP2
000008a8: SSTORE
000008a9: PUSH1 0x04
000008ab: SLOAD
000008ac: PUSH1 0x02
000008ae: SLOAD
000008af: DUP3
000008b0: SLOAD
000008b1: PUSH1 0xff
000008b3: SWAP2
000008b4: SWAP1
000008b5: SWAP2
000008b6: AND
000008b7: SWAP3
000008b8: SWAP2
000008b9: SWAP1
000008ba: DUP2
000008bb: LT
000008bc: ISZERO
000008bd: PUSH2 0x0002
000008c0: JUMPI
000008c1: PUSH1 0x06
000008c3: MUL
000008c4: PUSH1 0x00
000008c6: DUP1
000008c7: MLOAD
000008c8: PUSH1 0x20
000008ca: PUSH2 0x099a
000008cd: DUP4
000008ce: CODECOPY
000008cf: DUP2
000008d0: MLOAD
000008d1: SWAP2
000008d2: MSTORE
000008d3: ADD
000008d4: DUP1
000008d5: SLOAD
000008d6: PUSH22 0xff000000000000000000000000000000000000000000
000008ed: NOT
000008ee: AND
000008ef: PUSH1 0xa8
000008f1: PUSH1 0x02
000008f3: EXP
000008f4: SWAP4
000008f5: SWAP1
000008f6: SWAP4
000008f7: MUL
000008f8: SWAP3
000008f9: SWAP1
000008fa: SWAP3
000008fb: OR
000008fc: SWAP1
000008fd: SWAP2
000008fe: SSTORE
000008ff: POP
00000900: PUSH1 0x04
00000902: SLOAD
00000903: PUSH1 0x40
00000905: DUP1
00000906: MLOAD
00000907: SWAP2
00000908: DUP3
00000909: MSTORE
0000090a: MLOAD
0000090b: PUSH32 0xbdba0fc2c85fe021acfa560c047f0a846648b1b504aa94ab6557cabb04b94258
0000092c: SWAP2
0000092d: DUP2
0000092e: SWAP1
0000092f: SUB
00000930: PUSH1 0x20
00000932: ADD
00000933: SWAP1
00000934: LOG1
00000935: JUMP
00000936: JUMPDEST
00000937: POP
00000938: SWAP1
00000939: JUMP
0000093a: UNKNOWN(0xC2)
0000093b: JUMPI
0000093c: GAS
0000093d: UNKNOWN(0x0E)
0000093e: SWAP15
0000093f: MSIZE
00000940: EXTCODECOPY
00000941: STOP
00000942: UNKNOWN(0xF9)
00000943: MSIZE
00000944: UNKNOWN(0xF8)
00000945: UNKNOWN(0xC9)
00000946: UNKNOWN(0x2F)
00000947: SLT
00000948: UNKNOWN(0xDB)
00000949: UNKNOWN(0x28)
0000094a: PUSH10 0xc3395a3b0502d05e2516
00000955: DIFFICULTY
00000956: PUSH16 0x71f85ec2575a0e9e593c00f959f8c92f
00000967: SLT
00000968: UNKNOWN(0xDB)
00000969: UNKNOWN(0x28)
0000096a: PUSH10 0xc3395a3b0502d05e2516
00000975: DIFFICULTY
00000976: PUSH16 0x71f85bc2575a0e9e593c00f959f8c92f
00000987: SLT
00000988: UNKNOWN(0xDB)
00000989: UNKNOWN(0x28)
0000098a: PUSH10 0xc3395a3b0502d05e2516
00000995: DIFFICULTY
00000996: PUSH16 0x71f85dc2575a0e9e593c00f959f8c92f
000009a7: SLT
000009a8: UNKNOWN(0xDB)
000009a9: UNKNOWN(0x28)
000009aa: PUSH10 0xc3395a3b0502d05e2516
000009b5: DIFFICULTY
000009b6: PUSH16

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x068842e5d5d05aa203c1820507a9b3fbaab11d31aa780b562911d1646732136a call_targets: 0xc0326a98c23296d295ad880b59a3ef7ea6f5e594 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x068842e5d5d05aa203c1820507a9b3fbaab11d31aa780b562911d1646732136a", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xc0326a98c23296d295ad880b59a3ef7ea6f5e594" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x13af4035", "selector": "0x13af4035", "calldata_variants": [ "0x13af4035", "0x13af40350000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x164e68de", "selector": "0x164e68de", "calldata_variants": [ "0x164e68de", "0x164e68de0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x571a26a0", "selector": "0x571a26a0", "calldata_variants": [ "0x571a26a0", "0x571a26a00000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x9003adfe", "selector": "0x9003adfe", "calldata_variants": [ "0x9003adfe", "0x9003adfe0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa001ecdd", "selector": "0xa001ecdd", "calldata_variants": [ "0xa001ecdd", "0xa001ecdd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xbc610c63", "selector": "0xbc610c63", "calldata_variants": [ "0xbc610c63", "0xbc610c630000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xc5617769", "selector": "0xc5617769", "calldata_variants": [ "0xc5617769", "0xc56177690000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 990, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1717, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1769, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 3, "guards_detected": [], "untrusted_call_count": 3 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x068842e5d5d05aa203c1820507a9b3fbaab11d31aa780b562911d1646732136a call_targets: 0xc0326a98c23296d295ad880b59a3ef7ea6f5e594 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x068842e5d5d05aa203c1820507a9b3fbaab11d31aa780b562911d1646732136a", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xc0326a98c23296d295ad880b59a3ef7ea6f5e594" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x13af4035", "selector": "0x13af4035", "calldata_variants": [ "0x13af4035", "0x13af40350000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x164e68de", "selector": "0x164e68de", "calldata_variants": [ "0x164e68de", "0x164e68de0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x571a26a0", "selector": "0x571a26a0", "calldata_variants": [ "0x571a26a0", "0x571a26a00000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x9003adfe", "selector": "0x9003adfe", "calldata_variants": [ "0x9003adfe", "0x9003adfe0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa001ecdd", "selector": "0xa001ecdd", "calldata_variants": [ "0xa001ecdd", "0xa001ecdd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xbc610c63", "selector": "0xbc610c63", "calldata_variants": [ "0xbc610c63", "0xbc610c630000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xc5617769", "selector": "0xc5617769", "calldata_variants": [ "0xc5617769", "0xc56177690000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 990, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1717, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1769, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 3, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x068842e5d5d05aa203c1820507a9b3fbaab11d31aa780b562911d1646732136a

call_targets: 0xc0326a98c23296d295ad880b59a3ef7ea6f5e594

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x068842e5d5d05aa203c1820507a9b3fbaab11d31aa780b562911d1646732136a",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xc0326a98c23296d295ad880b59a3ef7ea6f5e594"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x13af4035",
            "selector": "0x13af4035",
            "calldata_variants": [
                "0x13af4035",
                "0x13af40350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x164e68de",
            "selector": "0x164e68de",
            "calldata_variants": [
                "0x164e68de",
                "0x164e68de0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x571a26a0",
            "selector": "0x571a26a0",
            "calldata_variants": [
                "0x571a26a0",
                "0x571a26a00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9003adfe",
            "selector": "0x9003adfe",
            "calldata_variants": [
                "0x9003adfe",
                "0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa001ecdd",
            "selector": "0xa001ecdd",
            "calldata_variants": [
                "0xa001ecdd",
                "0xa001ecdd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xbc610c63",
            "selector": "0xbc610c63",
            "calldata_variants": [
                "0xbc610c63",
                "0xbc610c630000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc5617769",
            "selector": "0xc5617769",
            "calldata_variants": [
                "0xc5617769",
                "0xc56177690000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 990,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1717,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1769,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 3
}