TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-38db-7120-a4e9-c96f2b0de1b4

complete
Chain ID
1
Address
0x230fea97f55e7f6477b1e7baaf8f7f0b5f4d00be
Block Number
—
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
3989 artifact.fetch complete 1 / 3 3 months ago
3990 tool.cast_disasm complete 1 / 3 3 months ago
105497 analysis.bundle complete 1 / 3 1 week ago
105498 capability.graph complete 1 / 3 1 week ago
105499 detector.run complete 1 / 3 1 week ago
105500 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
3
EXT*/BALANCE
0
Total opcodes
1267
Flags
No heuristic flags raised.
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00e5
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x047fc9aa
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x0100
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x06fdde03
00000025: EQ
00000026: PUSH2 0x0109
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x0b97bc86
00000030: EQ
00000031: PUSH2 0x0166
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x142f328e
0000003b: EQ
0000003c: PUSH2 0x016f
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x200b3690
00000046: EQ
00000047: PUSH2 0x017e
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x239b18b4
00000051: EQ
00000052: PUSH2 0x01a7
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x313ce567
0000005c: EQ
0000005d: PUSH2 0x01b3
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x40193883
00000067: EQ
00000068: PUSH2 0x01bf
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x4162169f
00000072: EQ
00000073: PUSH2 0x01c8
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x54fd4d50
0000007d: EQ
0000007e: PUSH2 0x01da
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0x70a08231
00000088: EQ
00000089: PUSH2 0x0238
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0x7d3d6522
00000093: EQ
00000094: PUSH2 0x0266
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0x8957ce54
0000009e: EQ
0000009f: PUSH2 0x0276
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0x8f770ad0
000000a9: EQ
000000aa: PUSH2 0x0283
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0x95d89b41
000000b4: EQ
000000b5: PUSH2 0x028c
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0x99bcd3b2
000000bf: EQ
000000c0: PUSH2 0x02e7
000000c3: JUMPI
000000c4: DUP1
000000c5: PUSH4 0xa4fd6f56
000000ca: EQ
000000cb: PUSH2 0x0305
000000ce: JUMPI
000000cf: DUP1
000000d0: PUSH4 0xbeabacc8
000000d5: EQ
000000d6: PUSH2 0x0314
000000d9: JUMPI
000000da: DUP1
000000db: PUSH4 0xc24a0f8b
000000e0: EQ
000000e1: PUSH2 0x0333
000000e4: JUMPI
000000e5: JUMPDEST
000000e6: PUSH2 0x033c
000000e9: PUSH1 0x0b
000000eb: SLOAD
000000ec: PUSH1 0x00
000000ee: SWAP1
000000ef: DUP2
000000f0: SWAP1
000000f1: PUSH1 0xff
000000f3: AND
000000f4: PUSH1 0x01
000000f6: EQ
000000f7: ISZERO
000000f8: PUSH2 0x033e
000000fb: JUMPI
000000fc: PUSH2 0x0002
000000ff: JUMP
00000100: JUMPDEST
00000101: PUSH2 0x0254
00000104: PUSH1 0x05
00000106: SLOAD
00000107: DUP2
00000108: JUMP
00000109: JUMPDEST
0000010a: PUSH1 0x40
0000010c: DUP1
0000010d: MLOAD
0000010e: PUSH1 0x01
00000110: DUP1
00000111: SLOAD
00000112: PUSH1 0x20
00000114: PUSH1 0x02
00000116: DUP3
00000117: DUP5
00000118: AND
00000119: ISZERO
0000011a: PUSH2 0x0100
0000011d: MUL
0000011e: PUSH1 0x00
00000120: NOT
00000121: ADD
00000122: SWAP1
00000123: SWAP3
00000124: AND
00000125: SWAP2
00000126: SWAP1
00000127: SWAP2
00000128: DIV
00000129: PUSH1 0x1f
0000012b: DUP2
0000012c: ADD
0000012d: DUP3
0000012e: SWAP1
0000012f: DIV
00000130: DUP3
00000131: MUL
00000132: DUP5
00000133: ADD
00000134: DUP3
00000135: ADD
00000136: SWAP1
00000137: SWAP5
00000138: MSTORE
00000139: DUP4
0000013a: DUP4
0000013b: MSTORE
0000013c: PUSH2 0x036c
0000013f: SWAP4
00000140: SWAP1
00000141: DUP4
00000142: ADD
00000143: DUP3
00000144: DUP3
00000145: DUP1
00000146: ISZERO
00000147: PUSH2 0x0439
0000014a: JUMPI
0000014b: DUP1
0000014c: PUSH1 0x1f
0000014e: LT
0000014f: PUSH2 0x040e
00000152: JUMPI
00000153: PUSH2 0x0100
00000156: DUP1
00000157: DUP4
00000158: SLOAD
00000159: DIV
0000015a: MUL
0000015b: DUP4
0000015c: MSTORE
0000015d: SWAP2
0000015e: PUSH1 0x20
00000160: ADD
00000161: SWAP2
00000162: PUSH2 0x0439
00000165: JUMP
00000166: JUMPDEST
00000167: PUSH2 0x0254
0000016a: PUSH1 0x08
0000016c: SLOAD
0000016d: DUP2
0000016e: JUMP
0000016f: JUMPDEST
00000170: PUSH2 0x0254
00000173: PUSH1 0x00
00000175: PUSH1 0x00
00000177: PUSH2 0x0711
0000017a: PUSH2 0x026a
0000017d: JUMP
0000017e: JUMPDEST
0000017f: PUSH2 0x033c
00000182: PUSH1 0x04
00000184: CALLDATALOAD
00000185: PUSH1 0x24
00000187: CALLDATALOAD
00000188: PUSH1 0x44
0000018a: CALLDATALOAD
0000018b: PUSH1 0x00
0000018d: SLOAD
0000018e: PUSH1 0x01
00000190: PUSH1 0xa0
00000192: PUSH1 0x02
00000194: EXP
00000195: SUB
00000196: SWAP1
00000197: DUP2
00000198: AND
00000199: CALLER
0000019a: SWAP2
0000019b: SWAP1
0000019c: SWAP2
0000019d: AND
0000019e: EQ
0000019f: PUSH2 0x0441
000001a2: JUMPI
000001a3: PUSH2 0x0002
000001a6: JUMP
000001a7: JUMPDEST
000001a8: PUSH2 0x0254
000001ab: PUSH1 0x0b
000001ad: SLOAD
000001ae: PUSH1 0xff
000001b0: AND
000001b1: DUP2
000001b2: JUMP
000001b3: JUMPDEST
000001b4: PUSH2 0x03da
000001b7: PUSH1 0x04
000001b9: SLOAD
000001ba: PUSH1 0xff
000001bc: AND
000001bd: DUP2
000001be: JUMP
000001bf: JUMPDEST
000001c0: PUSH2 0x0254
000001c3: PUSH1 0x0a
000001c5: SLOAD
000001c6: DUP2
000001c7: JUMP
000001c8: JUMPDEST
000001c9: PUSH2 0x03f1
000001cc: PUSH1 0x00
000001ce: SLOAD
000001cf: PUSH1 0x01
000001d1: PUSH1 0xa0
000001d3: PUSH1 0x02
000001d5: EXP
000001d6: SUB
000001d7: AND
000001d8: DUP2
000001d9: JUMP
000001da: JUMPDEST
000001db: PUSH1 0x40
000001dd: DUP1
000001de: MLOAD
000001df: PUSH1 0x03
000001e1: DUP1
000001e2: SLOAD
000001e3: PUSH1 0x20
000001e5: PUSH1 0x02
000001e7: PUSH1 0x01
000001e9: DUP4
000001ea: AND
000001eb: ISZERO
000001ec: PUSH2 0x0100
000001ef: MUL
000001f0: PUSH1 0x00
000001f2: NOT
000001f3: ADD
000001f4: SWAP1
000001f5: SWAP3
000001f6: AND
000001f7: SWAP2
000001f8: SWAP1
000001f9: SWAP2
000001fa: DIV
000001fb: PUSH1 0x1f
000001fd: DUP2
000001fe: ADD
000001ff: DUP3
00000200: SWAP1
00000201: DIV
00000202: DUP3
00000203: MUL
00000204: DUP5
00000205: ADD
00000206: DUP3
00000207: ADD
00000208: SWAP1
00000209: SWAP5
0000020a: MSTORE
0000020b: DUP4
0000020c: DUP4
0000020d: MSTORE
0000020e: PUSH2 0x036c
00000211: SWAP4
00000212: SWAP1
00000213: DUP4
00000214: ADD
00000215: DUP3
00000216: DUP3
00000217: DUP1
00000218: ISZERO
00000219: PUSH2 0x0439
0000021c: JUMPI
0000021d: DUP1
0000021e: PUSH1 0x1f
00000220: LT
00000221: PUSH2 0x040e
00000224: JUMPI
00000225: PUSH2 0x0100
00000228: DUP1
00000229: DUP4
0000022a: SLOAD
0000022b: DIV
0000022c: MUL
0000022d: DUP4
0000022e: MSTORE
0000022f: SWAP2
00000230: PUSH1 0x20
00000232: ADD
00000233: SWAP2
00000234: PUSH2 0x0439
00000237: JUMP
00000238: JUMPDEST
00000239: PUSH1 0x04
0000023b: CALLDATALOAD
0000023c: PUSH1 0x01
0000023e: PUSH1 0xa0
00000240: PUSH1 0x02
00000242: EXP
00000243: SUB
00000244: AND
00000245: PUSH1 0x00
00000247: SWAP1
00000248: DUP2
00000249: MSTORE
0000024a: PUSH1 0x0c
0000024c: PUSH1 0x20
0000024e: MSTORE
0000024f: PUSH1 0x40
00000251: SWAP1
00000252: KECCAK256
00000253: SLOAD
00000254: JUMPDEST
00000255: PUSH1 0x40
00000257: DUP1
00000258: MLOAD
00000259: SWAP2
0000025a: DUP3
0000025b: MSTORE
0000025c: MLOAD
0000025d: SWAP1
0000025e: DUP2
0000025f: SWAP1
00000260: SUB
00000261: PUSH1 0x20
00000263: ADD
00000264: SWAP1
00000265: RETURN
00000266: JUMPDEST
00000267: PUSH2 0x0254
0000026a: JUMPDEST
0000026b: PUSH1 0x0a
0000026d: SLOAD
0000026e: PUSH1 0x05
00000270: SLOAD
00000271: LT
00000272: ISZERO
00000273: JUMPDEST
00000274: SWAP1
00000275: JUMP
00000276: JUMPDEST
00000277: PUSH2 0x0254
0000027a: PUSH1 0x00
0000027c: PUSH2 0x060a
0000027f: PUSH2 0x0309
00000282: JUMP
00000283: JUMPDEST
00000284: PUSH2 0x0254
00000287: PUSH1 0x06
00000289: SLOAD
0000028a: DUP2
0000028b: JUMP
0000028c: JUMPDEST
0000028d: PUSH1 0x40
0000028f: DUP1
00000290: MLOAD
00000291: PUSH1 0x02
00000293: DUP1
00000294: SLOAD
00000295: PUSH1 0x20
00000297: PUSH1 0x01
00000299: DUP3
0000029a: AND
0000029b: ISZERO
0000029c: PUSH2 0x0100
0000029f: MUL
000002a0: PUSH1 0x00
000002a2: NOT
000002a3: ADD
000002a4: SWAP1
000002a5: SWAP2
000002a6: AND
000002a7: DUP3
000002a8: SWAP1
000002a9: DIV
000002aa: PUSH1 0x1f
000002ac: DUP2
000002ad: ADD
000002ae: DUP3
000002af: SWAP1
000002b0: DIV
000002b1: DUP3
000002b2: MUL
000002b3: DUP5
000002b4: ADD
000002b5: DUP3
000002b6: ADD
000002b7: SWAP1
000002b8: SWAP5
000002b9: MSTORE
000002ba: DUP4
000002bb: DUP4
000002bc: MSTORE
000002bd: PUSH2 0x036c
000002c0: SWAP4
000002c1: SWAP1
000002c2: DUP4
000002c3: ADD
000002c4: DUP3
000002c5: DUP3
000002c6: DUP1
000002c7: ISZERO
000002c8: PUSH2 0x0439
000002cb: JUMPI
000002cc: DUP1
000002cd: PUSH1 0x1f
000002cf: LT
000002d0: PUSH2 0x040e
000002d3: JUMPI
000002d4: PUSH2 0x0100
000002d7: DUP1
000002d8: DUP4
000002d9: SLOAD
000002da: DIV
000002db: MUL
000002dc: DUP4
000002dd: MSTORE
000002de: SWAP2
000002df: PUSH1 0x20
000002e1: ADD
000002e2: SWAP2
000002e3: PUSH2 0x0439
000002e6: JUMP
000002e7: JUMPDEST
000002e8: PUSH2 0x0254
000002eb: JUMPDEST
000002ec: PUSH1 0x06
000002ee: SLOAD
000002ef: PUSH1 0x05
000002f1: SLOAD
000002f2: PUSH1 0x00
000002f4: SWAP2
000002f5: SWAP1
000002f6: LT
000002f7: ISZERO
000002f8: DUP1
000002f9: PUSH2 0x06b7
000002fc: JUMPI
000002fd: POP
000002fe: PUSH2 0x06a8
00000301: PUSH2 0x0309
00000304: JUMP
00000305: JUMPDEST
00000306: PUSH2 0x0254
00000309: JUMPDEST
0000030a: PUSH1 0x09
0000030c: SLOAD
0000030d: TIMESTAMP
0000030e: LT
0000030f: ISZERO
00000310: PUSH2 0x0273
00000313: JUMP
00000314: JUMPDEST
00000315: PUSH2 0x033c
00000318: PUSH1 0x04
0000031a: CALLDATALOAD
0000031b: PUSH1 0x24
0000031d: CALLDATALOAD
0000031e: PUSH1 0x44
00000320: CALLDATALOAD
00000321: PUSH1 0x0b
00000323: SLOAD
00000324: PUSH1 0xff
00000326: AND
00000327: PUSH1 0x00
00000329: EQ
0000032a: ISZERO
0000032b: PUSH2 0x0498
0000032e: JUMPI
0000032f: PUSH2 0x0002
00000332: JUMP
00000333: JUMPDEST
00000334: PUSH2 0x0254
00000337: PUSH1 0x09
00000339: SLOAD
0000033a: DUP2
0000033b: JUMP
0000033c: JUMPDEST
0000033d: STOP
0000033e: JUMPDEST
0000033f: POP
00000340: CALLVALUE
00000341: SWAP1
00000342: POP
00000343: CALLER
00000344: PUSH2 0x035d
00000347: DUP2
00000348: DUP4
00000349: PUSH1 0x06
0000034b: SLOAD
0000034c: PUSH1 0x05
0000034e: SLOAD
0000034f: PUSH1 0x00
00000351: SWAP2
00000352: SWAP1
00000353: GT
00000354: ISZERO
00000355: PUSH2 0x05be
00000358: JUMPI
00000359: PUSH2 0x05b8
0000035c: JUMP
0000035d: JUMPDEST
0000035e: ISZERO
0000035f: ISZERO
00000360: PUSH2 0x0368
00000363: JUMPI
00000364: PUSH2 0x0002
00000367: JUMP
00000368: JUMPDEST
00000369: POP
0000036a: POP
0000036b: JUMP
0000036c: JUMPDEST
0000036d: PUSH1 0x40
0000036f: MLOAD
00000370: DUP1
00000371: DUP1
00000372: PUSH1 0x20
00000374: ADD
00000375: DUP3
00000376: DUP2
00000377: SUB
00000378: DUP3
00000379: MSTORE
0000037a: DUP4
0000037b: DUP2
0000037c: DUP2
0000037d: MLOAD
0000037e: DUP2
0000037f: MSTORE
00000380: PUSH1 0x20
00000382: ADD
00000383: SWAP2
00000384: POP
00000385: DUP1
00000386: MLOAD
00000387: SWAP1
00000388: PUSH1 0x20
0000038a: ADD
0000038b: SWAP1
0000038c: DUP1
0000038d: DUP4
0000038e: DUP4
0000038f: DUP3
00000390: SWAP1
00000391: PUSH1 0x00
00000393: PUSH1 0x04
00000395: PUSH1 0x20
00000397: DUP5
00000398: PUSH1 0x1f
0000039a: ADD
0000039b: DIV
0000039c: PUSH1 0x0f
0000039e: MUL
0000039f: PUSH1 0x03
000003a1: ADD
000003a2: CALL
000003a3: POP
000003a4: SWAP1
000003a5: POP
000003a6: SWAP1
000003a7: DUP2
000003a8: ADD
000003a9: SWAP1
000003aa: PUSH1 0x1f
000003ac: AND
000003ad: DUP1
000003ae: ISZERO
000003af: PUSH2 0x03cc
000003b2: JUMPI
000003b3: DUP1
000003b4: DUP3
000003b5: SUB
000003b6: DUP1
000003b7: MLOAD
000003b8: PUSH1 0x01
000003ba: DUP4
000003bb: PUSH1 0x20
000003bd: SUB
000003be: PUSH2 0x0100
000003c1: EXP
000003c2: SUB
000003c3: NOT
000003c4: AND
000003c5: DUP2
000003c6: MSTORE
000003c7: PUSH1 0x20
000003c9: ADD
000003ca: SWAP2
000003cb: POP
000003cc: JUMPDEST
000003cd: POP
000003ce: SWAP3
000003cf: POP
000003d0: POP
000003d1: POP
000003d2: PUSH1 0x40
000003d4: MLOAD
000003d5: DUP1
000003d6: SWAP2
000003d7: SUB
000003d8: SWAP1
000003d9: RETURN
000003da: JUMPDEST
000003db: PUSH1 0x40
000003dd: DUP1
000003de: MLOAD
000003df: PUSH1 0xff
000003e1: SWAP3
000003e2: SWAP1
000003e3: SWAP3
000003e4: AND
000003e5: DUP3
000003e6: MSTORE
000003e7: MLOAD
000003e8: SWAP1
000003e9: DUP2
000003ea: SWAP1
000003eb: SUB
000003ec: PUSH1 0x20
000003ee: ADD
000003ef: SWAP1
000003f0: RETURN
000003f1: JUMPDEST
000003f2: PUSH1 0x40
000003f4: DUP1
000003f5: MLOAD
000003f6: PUSH1 0x01
000003f8: PUSH1 0xa0
000003fa: PUSH1 0x02
000003fc: EXP
000003fd: SUB
000003fe: SWAP3
000003ff: SWAP1
00000400: SWAP3
00000401: AND
00000402: DUP3
00000403: MSTORE
00000404: MLOAD
00000405: SWAP1
00000406: DUP2
00000407: SWAP1
00000408: SUB
00000409: PUSH1 0x20
0000040b: ADD
0000040c: SWAP1
0000040d: RETURN
0000040e: JUMPDEST
0000040f: DUP3
00000410: ADD
00000411: SWAP2
00000412: SWAP1
00000413: PUSH1 0x00
00000415: MSTORE
00000416: PUSH1 0x20
00000418: PUSH1 0x00
0000041a: KECCAK256
0000041b: SWAP1
0000041c: JUMPDEST
0000041d: DUP2
0000041e: SLOAD
0000041f: DUP2
00000420: MSTORE
00000421: SWAP1
00000422: PUSH1 0x01
00000424: ADD
00000425: SWAP1
00000426: PUSH1 0x20
00000428: ADD
00000429: DUP1
0000042a: DUP4
0000042b: GT
0000042c: PUSH2 0x041c
0000042f: JUMPI
00000430: DUP3
00000431: SWAP1
00000432: SUB
00000433: PUSH1 0x1f
00000435: AND
00000436: DUP3
00000437: ADD
00000438: SWAP2
00000439: JUMPDEST
0000043a: POP
0000043b: POP
0000043c: POP
0000043d: POP
0000043e: POP
0000043f: DUP2
00000440: JUMP
00000441: JUMPDEST
00000442: DUP1
00000443: PUSH1 0x01
00000445: EQ
00000446: ISZERO
00000447: PUSH2 0x0470
0000044a: JUMPI
0000044b: PUSH1 0x01
0000044d: PUSH1 0xa0
0000044f: PUSH1 0x02
00000451: EXP
00000452: SUB
00000453: DUP4
00000454: AND
00000455: PUSH1 0x00
00000457: SWAP1
00000458: DUP2
00000459: MSTORE
0000045a: PUSH1 0x0c
0000045c: PUSH1 0x20
0000045e: MSTORE
0000045f: PUSH1 0x40
00000461: SWAP1
00000462: KECCAK256
00000463: PUSH1 0x01
00000465: ADD
00000466: DUP1
00000467: SLOAD
00000468: DUP4
00000469: ADD
0000046a: SWAP1
0000046b: SSTORE
0000046c: PUSH2 0x0493
0000046f: JUMP
00000470: JUMPDEST
00000471: PUSH1 0x01
00000473: PUSH1 0xa0
00000475: PUSH1 0x02
00000477: EXP
00000478: SUB
00000479: DUP4
0000047a: AND
0000047b: PUSH1 0x00
0000047d: SWAP1
0000047e: DUP2
0000047f: MSTORE
00000480: PUSH1 0x0c
00000482: PUSH1 0x20
00000484: MSTORE
00000485: PUSH1 0x40
00000487: SWAP1
00000488: KECCAK256
00000489: PUSH1 0x01
0000048b: ADD
0000048c: DUP1
0000048d: SLOAD
0000048e: DUP4
0000048f: SWAP1
00000490: SUB
00000491: SWAP1
00000492: SSTORE
00000493: JUMPDEST
00000494: POP
00000495: POP
00000496: POP
00000497: JUMP
00000498: JUMPDEST
00000499: PUSH1 0x01
0000049b: PUSH1 0xa0
0000049d: PUSH1 0x02
0000049f: EXP
000004a0: SUB
000004a1: DUP4
000004a2: DUP2
000004a3: AND
000004a4: PUSH1 0x00
000004a6: SWAP1
000004a7: DUP2
000004a8: MSTORE
000004a9: PUSH1 0x0c
000004ab: PUSH1 0x20
000004ad: MSTORE
000004ae: PUSH1 0x40
000004b0: DUP1
000004b1: DUP3
000004b2: KECCAK256
000004b3: PUSH1 0x01
000004b5: ADD
000004b6: SLOAD
000004b7: SWAP3
000004b8: DUP6
000004b9: AND
000004ba: DUP3
000004bb: MSTORE
000004bc: SWAP1
000004bd: KECCAK256
000004be: SLOAD
000004bf: SWAP1
000004c0: DUP2
000004c1: SUB
000004c2: SWAP1
000004c3: DUP3
000004c4: ADD
000004c5: LT
000004c6: ISZERO
000004c7: PUSH2 0x04cf
000004ca: JUMPI
000004cb: PUSH2 0x0002
000004ce: JUMP
000004cf: JUMPDEST
000004d0: PUSH1 0x01
000004d2: PUSH1 0xa0
000004d4: PUSH1 0x02
000004d6: EXP
000004d7: SUB
000004d8: DUP4
000004d9: AND
000004da: PUSH1 0x00
000004dc: SWAP1
000004dd: DUP2
000004de: MSTORE
000004df: PUSH1 0x0c
000004e1: PUSH1 0x20
000004e3: MSTORE
000004e4: PUSH1 0x40
000004e6: SWAP1
000004e7: KECCAK256
000004e8: SLOAD
000004e9: DUP2
000004ea: SWAP1
000004eb: LT
000004ec: DUP1
000004ed: ISZERO
000004ee: PUSH2 0x04f7
000004f1: JUMPI
000004f2: POP
000004f3: PUSH1 0x00
000004f5: DUP2
000004f6: GT
000004f7: JUMPDEST
000004f8: ISZERO
000004f9: PUSH2 0x0501
000004fc: JUMPI
000004fd: PUSH2 0x0002
00000500: JUMP
00000501: JUMPDEST
00000502: CALLER
00000503: PUSH1 0x01
00000505: PUSH1 0xa0
00000507: PUSH1 0x02
00000509: EXP
0000050a: SUB
0000050b: AND
0000050c: DUP4
0000050d: PUSH1 0x01
0000050f: PUSH1 0xa0
00000511: PUSH1 0x02
00000513: EXP
00000514: SUB
00000515: AND
00000516: EQ
00000517: ISZERO
00000518: PUSH2 0x0493
0000051b: JUMPI
0000051c: PUSH1 0x01
0000051e: PUSH1 0xa0
00000520: PUSH1 0x02
00000522: EXP
00000523: SUB
00000524: DUP3
00000525: DUP2
00000526: AND
00000527: PUSH1 0x00
00000529: DUP2
0000052a: DUP2
0000052b: MSTORE
0000052c: PUSH1 0x0c
0000052e: PUSH1 0x20
00000530: SWAP1
00000531: DUP2
00000532: MSTORE
00000533: PUSH1 0x40
00000535: DUP1
00000536: DUP4
00000537: KECCAK256
00000538: DUP1
00000539: SLOAD
0000053a: DUP8
0000053b: ADD
0000053c: SWAP1
0000053d: SSTORE
0000053e: SWAP4
0000053f: DUP8
00000540: AND
00000541: DUP1
00000542: DUP4
00000543: MSTORE
00000544: SWAP2
00000545: DUP5
00000546: SWAP1
00000547: KECCAK256
00000548: DUP1
00000549: SLOAD
0000054a: DUP7
0000054b: SWAP1
0000054c: SUB
0000054d: SWAP1
0000054e: SSTORE
0000054f: DUP4
00000550: MLOAD
00000551: DUP6
00000552: DUP2
00000553: MSTORE
00000554: SWAP4
00000555: MLOAD
00000556: SWAP3
00000557: SWAP4
00000558: SWAP2
00000559: SWAP3
0000055a: PUSH32 0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef
0000057b: SWAP3
0000057c: DUP2
0000057d: SWAP1
0000057e: SUB
0000057f: SWAP1
00000580: SWAP2
00000581: ADD
00000582: SWAP1
00000583: LOG3
00000584: POP
00000585: POP
00000586: POP
00000587: JUMP
00000588: JUMPDEST
00000589: POP
0000058a: PUSH1 0x40
0000058c: MLOAD
0000058d: DUP3
0000058e: SWAP1
0000058f: PUSH32 0xe2aeb2ae0272c38a449d3cebb58f6894790a45bfb16f73a8e1761acb1e312053
000005b0: SWAP1
000005b1: PUSH1 0x00
000005b3: SWAP1
000005b4: LOG2
000005b5: POP
000005b6: PUSH1 0x01
000005b8: JUMPDEST
000005b9: SWAP3
000005ba: SWAP2
000005bb: POP
000005bc: POP
000005bd: JUMP
000005be: JUMPDEST
000005bf: PUSH1 0x0b
000005c1: SLOAD
000005c2: PUSH1 0xff
000005c4: AND
000005c5: PUSH1 0x01
000005c7: EQ
000005c8: ISZERO
000005c9: PUSH2 0x05d4
000005cc: JUMPI
000005cd: POP
000005ce: PUSH1 0x00
000005d0: PUSH2 0x05b8
000005d3: JUMP
000005d4: JUMPDEST
000005d5: PUSH1 0x01
000005d7: PUSH1 0xa0
000005d9: PUSH1 0x02
000005db: EXP
000005dc: SUB
000005dd: DUP4
000005de: AND
000005df: PUSH1 0x00
000005e1: SWAP1
000005e2: DUP2
000005e3: MSTORE
000005e4: PUSH1 0x0c
000005e6: PUSH1 0x20
000005e8: MSTORE
000005e9: PUSH1 0x40
000005eb: SWAP1
000005ec: KECCAK256
000005ed: DUP1
000005ee: SLOAD
000005ef: DUP4
000005f0: ADD
000005f1: SWAP1
000005f2: SSTORE
000005f3: PUSH1 0x05
000005f5: DUP1
000005f6: SLOAD
000005f7: DUP4
000005f8: ADD
000005f9: SWAP1
000005fa: SSTORE
000005fb: PUSH1 0x07
000005fd: DUP1
000005fe: SLOAD
000005ff: DUP4
00000600: ADD
00000601: SWAP1
00000602: SSTORE
00000603: PUSH2 0x0588
00000606: PUSH2 0x02eb
00000609: JUMP
0000060a: JUMPDEST
0000060b: DUP1
0000060c: ISZERO
0000060d: PUSH2 0x061b
00000610: JUMPI
00000611: POP
00000612: PUSH2 0x0619
00000615: PUSH2 0x026a
00000618: JUMP
00000619: JUMPDEST
0000061a: ISZERO
0000061b: JUMPDEST
0000061c: DUP1
0000061d: ISZERO
0000061e: PUSH2 0x062c
00000621: JUMPI
00000622: POP
00000623: PUSH1 0x0b
00000625: SLOAD
00000626: PUSH1 0xff
00000628: AND
00000629: PUSH1 0x00
0000062b: EQ
0000062c: JUMPDEST
0000062d: ISZERO
0000062e: PUSH2 0x0273
00000631: JUMPI
00000632: PUSH1 0x01
00000634: PUSH1 0xa0
00000636: PUSH1 0x02
00000638: EXP
00000639: SUB
0000063a: CALLER
0000063b: AND
0000063c: PUSH1 0x00
0000063e: SWAP1
0000063f: DUP2
00000640: MSTORE
00000641: PUSH1 0x0c
00000643: PUSH1 0x20
00000645: MSTORE
00000646: PUSH1 0x40
00000648: DUP2
00000649: KECCAK256
0000064a: SLOAD
0000064b: GT
0000064c: ISZERO
0000064d: PUSH2 0x0273
00000650: JUMPI
00000651: PUSH1 0x40
00000653: PUSH1 0x00
00000655: DUP2
00000656: DUP2
00000657: KECCAK256
00000658: SLOAD
00000659: SWAP2
0000065a: MLOAD
0000065b: PUSH1 0x01
0000065d: PUSH1 0xa0
0000065f: PUSH1 0x02
00000661: EXP
00000662: SUB
00000663: CALLER
00000664: AND
00000665: SWAP3
00000666: SWAP1
00000667: DUP3
00000668: DUP2
00000669: DUP2
0000066a: DUP2
0000066b: DUP6
0000066c: DUP9
0000066d: DUP4
0000066e: CALL
0000066f: SWAP4
00000670: POP
00000671: POP
00000672: POP
00000673: POP
00000674: ISZERO
00000675: PUSH2 0x0273
00000678: JUMPI
00000679: PUSH1 0x40
0000067b: PUSH1 0x00
0000067d: SWAP1
0000067e: DUP2
0000067f: KECCAK256
00000680: PUSH1 0x01
00000682: PUSH1 0xa0
00000684: PUSH1 0x02
00000686: EXP
00000687: SUB
00000688: CALLER
00000689: AND
0000068a: DUP3
0000068b: MSTORE
0000068c: PUSH1 0x0c
0000068e: PUSH1 0x20
00000690: MSTORE
00000691: PUSH1 0x05
00000693: DUP1
00000694: SLOAD
00000695: DUP3
00000696: SLOAD
00000697: SWAP1
00000698: SUB
00000699: SWAP1
0000069a: SSTORE
0000069b: PUSH1 0x07
0000069d: DUP1
0000069e: SLOAD
0000069f: DUP3
000006a0: SLOAD
000006a1: SWAP1
000006a2: SUB
000006a3: SWAP1
000006a4: SSTORE
000006a5: SSTORE
000006a6: SWAP1
000006a7: JUMP
000006a8: JUMPDEST
000006a9: DUP1
000006aa: ISZERO
000006ab: PUSH2 0x06b7
000006ae: JUMPI
000006af: POP
000006b0: PUSH2 0x06b7
000006b3: PUSH2 0x026a
000006b6: JUMP
000006b7: JUMPDEST
000006b8: ISZERO
000006b9: PUSH2 0x06ca
000006bc: JUMPI
000006bd: PUSH1 0x0b
000006bf: DUP1
000006c0: SLOAD
000006c1: PUSH1 0xff
000006c3: NOT
000006c4: AND
000006c5: PUSH1 0x01
000006c7: OR
000006c8: SWAP1
000006c9: SSTORE
000006ca: JUMPDEST
000006cb: POP
000006cc: PUSH1 0x0b
000006ce: SLOAD
000006cf: PUSH1 0xff
000006d1: AND
000006d2: PUSH2 0x0273
000006d5: JUMP
000006d6: JUMPDEST
000006d7: PUSH1 0x00
000006d9: DUP1
000006da: SLOAD
000006db: PUSH1 0x07
000006dd: SLOAD
000006de: PUSH1 0x40
000006e0: MLOAD
000006e1: PUSH1 0x01
000006e3: PUSH1 0xa0
000006e5: PUSH1 0x02
000006e7: EXP
000006e8: SUB
000006e9: SWAP3
000006ea: SWAP1
000006eb: SWAP3
000006ec: AND
000006ed: SWAP3
000006ee: SWAP2
000006ef: DUP3
000006f0: DUP2
000006f1: DUP2
000006f2: DUP2
000006f3: DUP6
000006f4: DUP9
000006f5: DUP4
000006f6: CALL
000006f7: SWAP4
000006f8: POP
000006f9: POP
000006fa: POP
000006fb: POP
000006fc: SWAP1
000006fd: POP
000006fe: DUP1
000006ff: ISZERO
00000700: PUSH2 0x0709
00000703: JUMPI
00000704: PUSH1 0x00
00000706: PUSH1 0x07
00000708: SSTORE
00000709: JUMPDEST
0000070a: DUP1
0000070b: SWAP2
0000070c: POP
0000070d: JUMPDEST
0000070e: POP
0000070f: SWAP1
00000710: JUMP
00000711: JUMPDEST
00000712: ISZERO
00000713: ISZERO
00000714: PUSH2 0x06d6
00000717: JUMPI
00000718: PUSH1 0x00
0000071a: SWAP2
0000071b: POP
0000071c: PUSH2 0x070d
0000071f: JUMP
View stderr 
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x3a17e2e5d1f451bea26f0f507638980b45314736915ea1ce60eee230b6dca5e9
call_targets: 0x230fea97f55e7f6477b1e7baaf8f7f0b5f4d00be
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x3a17e2e5d1f451bea26f0f507638980b45314736915ea1ce60eee230b6dca5e9",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x230fea97f55e7f6477b1e7baaf8f7f0b5f4d00be"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x047fc9aa",
            "selector": "0x047fc9aa",
            "calldata_variants": [
                "0x047fc9aa",
                "0x047fc9aa0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0b97bc86",
            "selector": "0x0b97bc86",
            "calldata_variants": [
                "0x0b97bc86",
                "0x0b97bc860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x142f328e",
            "selector": "0x142f328e",
            "calldata_variants": [
                "0x142f328e",
                "0x142f328e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x200b3690",
            "selector": "0x200b3690",
            "calldata_variants": [
                "0x200b3690",
                "0x200b36900000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x239b18b4",
            "selector": "0x239b18b4",
            "calldata_variants": [
                "0x239b18b4",
                "0x239b18b40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x40193883",
            "selector": "0x40193883",
            "calldata_variants": [
                "0x40193883",
                "0x401938830000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 930,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1646,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1782,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 3
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x3a17e2e5d1f451bea26f0f507638980b45314736915ea1ce60eee230b6dca5e9
call_targets: 0x230fea97f55e7f6477b1e7baaf8f7f0b5f4d00be
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x3a17e2e5d1f451bea26f0f507638980b45314736915ea1ce60eee230b6dca5e9",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x230fea97f55e7f6477b1e7baaf8f7f0b5f4d00be"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x047fc9aa",
            "selector": "0x047fc9aa",
            "calldata_variants": [
                "0x047fc9aa",
                "0x047fc9aa0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0b97bc86",
            "selector": "0x0b97bc86",
            "calldata_variants": [
                "0x0b97bc86",
                "0x0b97bc860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x142f328e",
            "selector": "0x142f328e",
            "calldata_variants": [
                "0x142f328e",
                "0x142f328e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x200b3690",
            "selector": "0x200b3690",
            "calldata_variants": [
                "0x200b3690",
                "0x200b36900000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x239b18b4",
            "selector": "0x239b18b4",
            "calldata_variants": [
                "0x239b18b4",
                "0x239b18b40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x40193883",
            "selector": "0x40193883",
            "calldata_variants": [
                "0x40193883",
                "0x401938830000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 930,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1646,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1782,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 3,
    "guards_detected": []
}