TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-3908-7188-9b58-1eeac3e1e2cb

complete
Chain ID
1
Address
0x8f4da815181ec5f46d523a074ff174cd0d43cca3
Block Number
—
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
4017 artifact.fetch complete 1 / 3 4 months ago
4018 tool.cast_disasm complete 1 / 3 4 months ago
80335 analysis.bundle complete 1 / 3 2 weeks ago
80336 capability.graph complete 1 / 3 2 weeks ago
80337 detector.run complete 1 / 3 2 weeks ago
80338 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
2
EXT*/BALANCE
0
Total opcodes
1269
Flags
No heuristic flags raised.
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00f0
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x047fc9aa
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x0108
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x06fdde03
00000025: EQ
00000026: PUSH2 0x0111
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x0b97bc86
00000030: EQ
00000031: PUSH2 0x016e
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x200b3690
0000003b: EQ
0000003c: PUSH2 0x0177
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x239b18b4
00000046: EQ
00000047: PUSH2 0x01a0
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x313ce567
00000051: EQ
00000052: PUSH2 0x01ac
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x40193883
0000005c: EQ
0000005d: PUSH2 0x01b8
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x4162169f
00000067: EQ
00000068: PUSH2 0x01c1
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x54fd4d50
00000072: EQ
00000073: PUSH2 0x01d3
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x6f5958ba
0000007d: EQ
0000007e: PUSH2 0x0231
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0x70a08231
00000088: EQ
00000089: PUSH2 0x0243
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0x7d3d6522
00000093: EQ
00000094: PUSH2 0x0271
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0x8957ce54
0000009e: EQ
0000009f: PUSH2 0x0282
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0x8f770ad0
000000a9: EQ
000000aa: PUSH2 0x028f
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0x95d89b41
000000b4: EQ
000000b5: PUSH2 0x0298
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0x99bcd3b2
000000bf: EQ
000000c0: PUSH2 0x02f3
000000c3: JUMPI
000000c4: DUP1
000000c5: PUSH4 0xa4fd6f56
000000ca: EQ
000000cb: PUSH2 0x0311
000000ce: JUMPI
000000cf: DUP1
000000d0: PUSH4 0xad66e52a
000000d5: EQ
000000d6: PUSH2 0x0320
000000d9: JUMPI
000000da: DUP1
000000db: PUSH4 0xbeabacc8
000000e0: EQ
000000e1: PUSH2 0x0329
000000e4: JUMPI
000000e5: DUP1
000000e6: PUSH4 0xc24a0f8b
000000eb: EQ
000000ec: PUSH2 0x0346
000000ef: JUMPI
000000f0: JUMPDEST
000000f1: PUSH2 0x034f
000000f4: PUSH1 0x0b
000000f6: SLOAD
000000f7: PUSH1 0x00
000000f9: SWAP1
000000fa: DUP2
000000fb: SWAP1
000000fc: PUSH1 0xff
000000fe: AND
000000ff: ISZERO
00000100: PUSH2 0x0351
00000103: JUMPI
00000104: PUSH2 0x0002
00000107: JUMP
00000108: JUMPDEST
00000109: PUSH2 0x025f
0000010c: PUSH1 0x05
0000010e: SLOAD
0000010f: DUP2
00000110: JUMP
00000111: JUMPDEST
00000112: PUSH1 0x40
00000114: DUP1
00000115: MLOAD
00000116: PUSH1 0x01
00000118: DUP1
00000119: SLOAD
0000011a: PUSH1 0x20
0000011c: PUSH1 0x02
0000011e: DUP3
0000011f: DUP5
00000120: AND
00000121: ISZERO
00000122: PUSH2 0x0100
00000125: MUL
00000126: PUSH1 0x00
00000128: NOT
00000129: ADD
0000012a: SWAP1
0000012b: SWAP3
0000012c: AND
0000012d: SWAP2
0000012e: SWAP1
0000012f: SWAP2
00000130: DIV
00000131: PUSH1 0x1f
00000133: DUP2
00000134: ADD
00000135: DUP3
00000136: SWAP1
00000137: DIV
00000138: DUP3
00000139: MUL
0000013a: DUP5
0000013b: ADD
0000013c: DUP3
0000013d: ADD
0000013e: SWAP1
0000013f: SWAP5
00000140: MSTORE
00000141: DUP4
00000142: DUP4
00000143: MSTORE
00000144: PUSH2 0x037f
00000147: SWAP4
00000148: SWAP1
00000149: DUP4
0000014a: ADD
0000014b: DUP3
0000014c: DUP3
0000014d: DUP1
0000014e: ISZERO
0000014f: PUSH2 0x0725
00000152: JUMPI
00000153: DUP1
00000154: PUSH1 0x1f
00000156: LT
00000157: PUSH2 0x06fa
0000015a: JUMPI
0000015b: PUSH2 0x0100
0000015e: DUP1
0000015f: DUP4
00000160: SLOAD
00000161: DIV
00000162: MUL
00000163: DUP4
00000164: MSTORE
00000165: SWAP2
00000166: PUSH1 0x20
00000168: ADD
00000169: SWAP2
0000016a: PUSH2 0x0725
0000016d: JUMP
0000016e: JUMPDEST
0000016f: PUSH2 0x025f
00000172: PUSH1 0x08
00000174: SLOAD
00000175: DUP2
00000176: JUMP
00000177: JUMPDEST
00000178: PUSH2 0x034f
0000017b: PUSH1 0x04
0000017d: CALLDATALOAD
0000017e: PUSH1 0x24
00000180: CALLDATALOAD
00000181: PUSH1 0x44
00000183: CALLDATALOAD
00000184: PUSH1 0x00
00000186: SLOAD
00000187: PUSH1 0x01
00000189: PUSH1 0xa0
0000018b: PUSH1 0x02
0000018d: EXP
0000018e: SUB
0000018f: SWAP1
00000190: DUP2
00000191: AND
00000192: CALLER
00000193: SWAP2
00000194: SWAP1
00000195: SWAP2
00000196: AND
00000197: EQ
00000198: PUSH2 0x0421
0000019b: JUMPI
0000019c: PUSH2 0x0002
0000019f: JUMP
000001a0: JUMPDEST
000001a1: PUSH2 0x025f
000001a4: PUSH1 0x0b
000001a6: SLOAD
000001a7: PUSH1 0xff
000001a9: AND
000001aa: DUP2
000001ab: JUMP
000001ac: JUMPDEST
000001ad: PUSH2 0x03ed
000001b0: PUSH1 0x04
000001b2: SLOAD
000001b3: PUSH1 0xff
000001b5: AND
000001b6: DUP2
000001b7: JUMP
000001b8: JUMPDEST
000001b9: PUSH2 0x025f
000001bc: PUSH1 0x0a
000001be: SLOAD
000001bf: DUP2
000001c0: JUMP
000001c1: JUMPDEST
000001c2: PUSH2 0x0404
000001c5: PUSH1 0x00
000001c7: SLOAD
000001c8: PUSH1 0x01
000001ca: PUSH1 0xa0
000001cc: PUSH1 0x02
000001ce: EXP
000001cf: SUB
000001d0: AND
000001d1: DUP2
000001d2: JUMP
000001d3: JUMPDEST
000001d4: PUSH1 0x40
000001d6: DUP1
000001d7: MLOAD
000001d8: PUSH1 0x03
000001da: DUP1
000001db: SLOAD
000001dc: PUSH1 0x20
000001de: PUSH1 0x02
000001e0: PUSH1 0x01
000001e2: DUP4
000001e3: AND
000001e4: ISZERO
000001e5: PUSH2 0x0100
000001e8: MUL
000001e9: PUSH1 0x00
000001eb: NOT
000001ec: ADD
000001ed: SWAP1
000001ee: SWAP3
000001ef: AND
000001f0: SWAP2
000001f1: SWAP1
000001f2: SWAP2
000001f3: DIV
000001f4: PUSH1 0x1f
000001f6: DUP2
000001f7: ADD
000001f8: DUP3
000001f9: SWAP1
000001fa: DIV
000001fb: DUP3
000001fc: MUL
000001fd: DUP5
000001fe: ADD
000001ff: DUP3
00000200: ADD
00000201: SWAP1
00000202: SWAP5
00000203: MSTORE
00000204: DUP4
00000205: DUP4
00000206: MSTORE
00000207: PUSH2 0x037f
0000020a: SWAP4
0000020b: SWAP1
0000020c: DUP4
0000020d: ADD
0000020e: DUP3
0000020f: DUP3
00000210: DUP1
00000211: ISZERO
00000212: PUSH2 0x0725
00000215: JUMPI
00000216: DUP1
00000217: PUSH1 0x1f
00000219: LT
0000021a: PUSH2 0x06fa
0000021d: JUMPI
0000021e: PUSH2 0x0100
00000221: DUP1
00000222: DUP4
00000223: SLOAD
00000224: DIV
00000225: MUL
00000226: DUP4
00000227: MSTORE
00000228: SWAP2
00000229: PUSH1 0x20
0000022b: ADD
0000022c: SWAP2
0000022d: PUSH2 0x0725
00000230: JUMP
00000231: JUMPDEST
00000232: PUSH2 0x025f
00000235: PUSH1 0x04
00000237: CALLDATALOAD
00000238: PUSH1 0x00
0000023a: PUSH1 0x00
0000023c: PUSH2 0x06b6
0000023f: PUSH2 0x0275
00000242: JUMP
00000243: JUMPDEST
00000244: PUSH1 0x04
00000246: CALLDATALOAD
00000247: PUSH1 0x01
00000249: PUSH1 0xa0
0000024b: PUSH1 0x02
0000024d: EXP
0000024e: SUB
0000024f: AND
00000250: PUSH1 0x00
00000252: SWAP1
00000253: DUP2
00000254: MSTORE
00000255: PUSH1 0x0c
00000257: PUSH1 0x20
00000259: MSTORE
0000025a: PUSH1 0x40
0000025c: SWAP1
0000025d: KECCAK256
0000025e: SLOAD
0000025f: JUMPDEST
00000260: PUSH1 0x40
00000262: DUP1
00000263: MLOAD
00000264: SWAP2
00000265: DUP3
00000266: MSTORE
00000267: MLOAD
00000268: SWAP1
00000269: DUP2
0000026a: SWAP1
0000026b: SUB
0000026c: PUSH1 0x20
0000026e: ADD
0000026f: SWAP1
00000270: RETURN
00000271: JUMPDEST
00000272: PUSH2 0x025f
00000275: JUMPDEST
00000276: PUSH1 0x0a
00000278: SLOAD
00000279: PUSH1 0x05
0000027b: SLOAD
0000027c: LT
0000027d: ISZERO
0000027e: PUSH2 0x0670
00000281: JUMP
00000282: JUMPDEST
00000283: PUSH2 0x025f
00000286: PUSH1 0x00
00000288: PUSH2 0x05e7
0000028b: PUSH2 0x0315
0000028e: JUMP
0000028f: JUMPDEST
00000290: PUSH2 0x025f
00000293: PUSH1 0x06
00000295: SLOAD
00000296: DUP2
00000297: JUMP
00000298: JUMPDEST
00000299: PUSH1 0x40
0000029b: DUP1
0000029c: MLOAD
0000029d: PUSH1 0x02
0000029f: DUP1
000002a0: SLOAD
000002a1: PUSH1 0x20
000002a3: PUSH1 0x01
000002a5: DUP3
000002a6: AND
000002a7: ISZERO
000002a8: PUSH2 0x0100
000002ab: MUL
000002ac: PUSH1 0x00
000002ae: NOT
000002af: ADD
000002b0: SWAP1
000002b1: SWAP2
000002b2: AND
000002b3: DUP3
000002b4: SWAP1
000002b5: DIV
000002b6: PUSH1 0x1f
000002b8: DUP2
000002b9: ADD
000002ba: DUP3
000002bb: SWAP1
000002bc: DIV
000002bd: DUP3
000002be: MUL
000002bf: DUP5
000002c0: ADD
000002c1: DUP3
000002c2: ADD
000002c3: SWAP1
000002c4: SWAP5
000002c5: MSTORE
000002c6: DUP4
000002c7: DUP4
000002c8: MSTORE
000002c9: PUSH2 0x037f
000002cc: SWAP4
000002cd: SWAP1
000002ce: DUP4
000002cf: ADD
000002d0: DUP3
000002d1: DUP3
000002d2: DUP1
000002d3: ISZERO
000002d4: PUSH2 0x0725
000002d7: JUMPI
000002d8: DUP1
000002d9: PUSH1 0x1f
000002db: LT
000002dc: PUSH2 0x06fa
000002df: JUMPI
000002e0: PUSH2 0x0100
000002e3: DUP1
000002e4: DUP4
000002e5: SLOAD
000002e6: DIV
000002e7: MUL
000002e8: DUP4
000002e9: MSTORE
000002ea: SWAP2
000002eb: PUSH1 0x20
000002ed: ADD
000002ee: SWAP2
000002ef: PUSH2 0x0725
000002f2: JUMP
000002f3: JUMPDEST
000002f4: PUSH2 0x025f
000002f7: JUMPDEST
000002f8: PUSH1 0x06
000002fa: SLOAD
000002fb: PUSH1 0x05
000002fd: SLOAD
000002fe: PUSH1 0x00
00000300: SWAP2
00000301: SWAP1
00000302: LT
00000303: ISZERO
00000304: DUP1
00000305: PUSH2 0x0682
00000308: JUMPI
00000309: POP
0000030a: PUSH2 0x0673
0000030d: PUSH2 0x0315
00000310: JUMP
00000311: JUMPDEST
00000312: PUSH2 0x025f
00000315: JUMPDEST
00000316: PUSH1 0x09
00000318: SLOAD
00000319: TIMESTAMP
0000031a: LT
0000031b: ISZERO
0000031c: PUSH2 0x0670
0000031f: JUMP
00000320: JUMPDEST
00000321: PUSH2 0x025f
00000324: PUSH1 0x07
00000326: SLOAD
00000327: DUP2
00000328: JUMP
00000329: JUMPDEST
0000032a: PUSH2 0x034f
0000032d: PUSH1 0x04
0000032f: CALLDATALOAD
00000330: PUSH1 0x24
00000332: CALLDATALOAD
00000333: PUSH1 0x44
00000335: CALLDATALOAD
00000336: PUSH1 0x0b
00000338: SLOAD
00000339: PUSH1 0xff
0000033b: AND
0000033c: ISZERO
0000033d: ISZERO
0000033e: PUSH2 0x0478
00000341: JUMPI
00000342: PUSH2 0x0002
00000345: JUMP
00000346: JUMPDEST
00000347: PUSH2 0x025f
0000034a: PUSH1 0x09
0000034c: SLOAD
0000034d: DUP2
0000034e: JUMP
0000034f: JUMPDEST
00000350: STOP
00000351: JUMPDEST
00000352: POP
00000353: CALLVALUE
00000354: SWAP1
00000355: POP
00000356: CALLER
00000357: PUSH2 0x0370
0000035a: DUP2
0000035b: DUP4
0000035c: PUSH1 0x06
0000035e: SLOAD
0000035f: PUSH1 0x05
00000361: SLOAD
00000362: PUSH1 0x00
00000364: SWAP2
00000365: SWAP1
00000366: GT
00000367: ISZERO
00000368: PUSH2 0x059e
0000036b: JUMPI
0000036c: PUSH2 0x0598
0000036f: JUMP
00000370: JUMPDEST
00000371: ISZERO
00000372: ISZERO
00000373: PUSH2 0x037b
00000376: JUMPI
00000377: PUSH2 0x0002
0000037a: JUMP
0000037b: JUMPDEST
0000037c: POP
0000037d: POP
0000037e: JUMP
0000037f: JUMPDEST
00000380: PUSH1 0x40
00000382: MLOAD
00000383: DUP1
00000384: DUP1
00000385: PUSH1 0x20
00000387: ADD
00000388: DUP3
00000389: DUP2
0000038a: SUB
0000038b: DUP3
0000038c: MSTORE
0000038d: DUP4
0000038e: DUP2
0000038f: DUP2
00000390: MLOAD
00000391: DUP2
00000392: MSTORE
00000393: PUSH1 0x20
00000395: ADD
00000396: SWAP2
00000397: POP
00000398: DUP1
00000399: MLOAD
0000039a: SWAP1
0000039b: PUSH1 0x20
0000039d: ADD
0000039e: SWAP1
0000039f: DUP1
000003a0: DUP4
000003a1: DUP4
000003a2: DUP3
000003a3: SWAP1
000003a4: PUSH1 0x00
000003a6: PUSH1 0x04
000003a8: PUSH1 0x20
000003aa: DUP5
000003ab: PUSH1 0x1f
000003ad: ADD
000003ae: DIV
000003af: PUSH1 0x0f
000003b1: MUL
000003b2: PUSH1 0x03
000003b4: ADD
000003b5: CALL
000003b6: POP
000003b7: SWAP1
000003b8: POP
000003b9: SWAP1
000003ba: DUP2
000003bb: ADD
000003bc: SWAP1
000003bd: PUSH1 0x1f
000003bf: AND
000003c0: DUP1
000003c1: ISZERO
000003c2: PUSH2 0x03df
000003c5: JUMPI
000003c6: DUP1
000003c7: DUP3
000003c8: SUB
000003c9: DUP1
000003ca: MLOAD
000003cb: PUSH1 0x01
000003cd: DUP4
000003ce: PUSH1 0x20
000003d0: SUB
000003d1: PUSH2 0x0100
000003d4: EXP
000003d5: SUB
000003d6: NOT
000003d7: AND
000003d8: DUP2
000003d9: MSTORE
000003da: PUSH1 0x20
000003dc: ADD
000003dd: SWAP2
000003de: POP
000003df: JUMPDEST
000003e0: POP
000003e1: SWAP3
000003e2: POP
000003e3: POP
000003e4: POP
000003e5: PUSH1 0x40
000003e7: MLOAD
000003e8: DUP1
000003e9: SWAP2
000003ea: SUB
000003eb: SWAP1
000003ec: RETURN
000003ed: JUMPDEST
000003ee: PUSH1 0x40
000003f0: DUP1
000003f1: MLOAD
000003f2: PUSH1 0xff
000003f4: SWAP3
000003f5: SWAP1
000003f6: SWAP3
000003f7: AND
000003f8: DUP3
000003f9: MSTORE
000003fa: MLOAD
000003fb: SWAP1
000003fc: DUP2
000003fd: SWAP1
000003fe: SUB
000003ff: PUSH1 0x20
00000401: ADD
00000402: SWAP1
00000403: RETURN
00000404: JUMPDEST
00000405: PUSH1 0x40
00000407: DUP1
00000408: MLOAD
00000409: PUSH1 0x01
0000040b: PUSH1 0xa0
0000040d: PUSH1 0x02
0000040f: EXP
00000410: SUB
00000411: SWAP3
00000412: SWAP1
00000413: SWAP3
00000414: AND
00000415: DUP3
00000416: MSTORE
00000417: MLOAD
00000418: SWAP1
00000419: DUP2
0000041a: SWAP1
0000041b: SUB
0000041c: PUSH1 0x20
0000041e: ADD
0000041f: SWAP1
00000420: RETURN
00000421: JUMPDEST
00000422: DUP1
00000423: PUSH1 0x01
00000425: EQ
00000426: ISZERO
00000427: PUSH2 0x0450
0000042a: JUMPI
0000042b: PUSH1 0x01
0000042d: PUSH1 0xa0
0000042f: PUSH1 0x02
00000431: EXP
00000432: SUB
00000433: DUP4
00000434: AND
00000435: PUSH1 0x00
00000437: SWAP1
00000438: DUP2
00000439: MSTORE
0000043a: PUSH1 0x0c
0000043c: PUSH1 0x20
0000043e: MSTORE
0000043f: PUSH1 0x40
00000441: SWAP1
00000442: KECCAK256
00000443: PUSH1 0x01
00000445: ADD
00000446: DUP1
00000447: SLOAD
00000448: DUP4
00000449: ADD
0000044a: SWAP1
0000044b: SSTORE
0000044c: PUSH2 0x0473
0000044f: JUMP
00000450: JUMPDEST
00000451: PUSH1 0x01
00000453: PUSH1 0xa0
00000455: PUSH1 0x02
00000457: EXP
00000458: SUB
00000459: DUP4
0000045a: AND
0000045b: PUSH1 0x00
0000045d: SWAP1
0000045e: DUP2
0000045f: MSTORE
00000460: PUSH1 0x0c
00000462: PUSH1 0x20
00000464: MSTORE
00000465: PUSH1 0x40
00000467: SWAP1
00000468: KECCAK256
00000469: PUSH1 0x01
0000046b: ADD
0000046c: DUP1
0000046d: SLOAD
0000046e: DUP4
0000046f: SWAP1
00000470: SUB
00000471: SWAP1
00000472: SSTORE
00000473: JUMPDEST
00000474: POP
00000475: POP
00000476: POP
00000477: JUMP
00000478: JUMPDEST
00000479: PUSH1 0x01
0000047b: PUSH1 0xa0
0000047d: PUSH1 0x02
0000047f: EXP
00000480: SUB
00000481: DUP4
00000482: DUP2
00000483: AND
00000484: PUSH1 0x00
00000486: SWAP1
00000487: DUP2
00000488: MSTORE
00000489: PUSH1 0x0c
0000048b: PUSH1 0x20
0000048d: MSTORE
0000048e: PUSH1 0x40
00000490: DUP1
00000491: DUP3
00000492: KECCAK256
00000493: PUSH1 0x01
00000495: ADD
00000496: SLOAD
00000497: SWAP3
00000498: DUP6
00000499: AND
0000049a: DUP3
0000049b: MSTORE
0000049c: SWAP1
0000049d: KECCAK256
0000049e: SLOAD
0000049f: SWAP1
000004a0: DUP2
000004a1: SUB
000004a2: SWAP1
000004a3: DUP3
000004a4: ADD
000004a5: LT
000004a6: ISZERO
000004a7: PUSH2 0x04af
000004aa: JUMPI
000004ab: PUSH2 0x0002
000004ae: JUMP
000004af: JUMPDEST
000004b0: PUSH1 0x01
000004b2: PUSH1 0xa0
000004b4: PUSH1 0x02
000004b6: EXP
000004b7: SUB
000004b8: DUP4
000004b9: AND
000004ba: PUSH1 0x00
000004bc: SWAP1
000004bd: DUP2
000004be: MSTORE
000004bf: PUSH1 0x0c
000004c1: PUSH1 0x20
000004c3: MSTORE
000004c4: PUSH1 0x40
000004c6: SWAP1
000004c7: KECCAK256
000004c8: SLOAD
000004c9: DUP2
000004ca: SWAP1
000004cb: LT
000004cc: DUP1
000004cd: ISZERO
000004ce: PUSH2 0x04d7
000004d1: JUMPI
000004d2: POP
000004d3: PUSH1 0x00
000004d5: DUP2
000004d6: GT
000004d7: JUMPDEST
000004d8: ISZERO
000004d9: PUSH2 0x04e1
000004dc: JUMPI
000004dd: PUSH2 0x0002
000004e0: JUMP
000004e1: JUMPDEST
000004e2: CALLER
000004e3: PUSH1 0x01
000004e5: PUSH1 0xa0
000004e7: PUSH1 0x02
000004e9: EXP
000004ea: SUB
000004eb: AND
000004ec: DUP4
000004ed: PUSH1 0x01
000004ef: PUSH1 0xa0
000004f1: PUSH1 0x02
000004f3: EXP
000004f4: SUB
000004f5: AND
000004f6: EQ
000004f7: ISZERO
000004f8: PUSH2 0x0473
000004fb: JUMPI
000004fc: PUSH1 0x01
000004fe: PUSH1 0xa0
00000500: PUSH1 0x02
00000502: EXP
00000503: SUB
00000504: DUP3
00000505: DUP2
00000506: AND
00000507: PUSH1 0x00
00000509: DUP2
0000050a: DUP2
0000050b: MSTORE
0000050c: PUSH1 0x0c
0000050e: PUSH1 0x20
00000510: SWAP1
00000511: DUP2
00000512: MSTORE
00000513: PUSH1 0x40
00000515: DUP1
00000516: DUP4
00000517: KECCAK256
00000518: DUP1
00000519: SLOAD
0000051a: DUP8
0000051b: ADD
0000051c: SWAP1
0000051d: SSTORE
0000051e: SWAP4
0000051f: DUP8
00000520: AND
00000521: DUP1
00000522: DUP4
00000523: MSTORE
00000524: SWAP2
00000525: DUP5
00000526: SWAP1
00000527: KECCAK256
00000528: DUP1
00000529: SLOAD
0000052a: DUP7
0000052b: SWAP1
0000052c: SUB
0000052d: SWAP1
0000052e: SSTORE
0000052f: DUP4
00000530: MLOAD
00000531: DUP6
00000532: DUP2
00000533: MSTORE
00000534: SWAP4
00000535: MLOAD
00000536: SWAP3
00000537: SWAP4
00000538: SWAP2
00000539: SWAP3
0000053a: PUSH32 0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef
0000055b: SWAP3
0000055c: DUP2
0000055d: SWAP1
0000055e: SUB
0000055f: SWAP1
00000560: SWAP2
00000561: ADD
00000562: SWAP1
00000563: LOG3
00000564: POP
00000565: POP
00000566: POP
00000567: JUMP
00000568: JUMPDEST
00000569: POP
0000056a: PUSH1 0x40
0000056c: MLOAD
0000056d: DUP3
0000056e: SWAP1
0000056f: PUSH32 0xe2aeb2ae0272c38a449d3cebb58f6894790a45bfb16f73a8e1761acb1e312053
00000590: SWAP1
00000591: PUSH1 0x00
00000593: SWAP1
00000594: LOG2
00000595: POP
00000596: PUSH1 0x01
00000598: JUMPDEST
00000599: SWAP3
0000059a: SWAP2
0000059b: POP
0000059c: POP
0000059d: JUMP
0000059e: JUMPDEST
0000059f: PUSH1 0x0b
000005a1: SLOAD
000005a2: PUSH1 0xff
000005a4: AND
000005a5: ISZERO
000005a6: PUSH2 0x05b1
000005a9: JUMPI
000005aa: POP
000005ab: PUSH1 0x00
000005ad: PUSH2 0x0598
000005b0: JUMP
000005b1: JUMPDEST
000005b2: PUSH1 0x01
000005b4: PUSH1 0xa0
000005b6: PUSH1 0x02
000005b8: EXP
000005b9: SUB
000005ba: DUP4
000005bb: AND
000005bc: PUSH1 0x00
000005be: SWAP1
000005bf: DUP2
000005c0: MSTORE
000005c1: PUSH1 0x0c
000005c3: PUSH1 0x20
000005c5: MSTORE
000005c6: PUSH1 0x40
000005c8: SWAP1
000005c9: KECCAK256
000005ca: DUP1
000005cb: SLOAD
000005cc: DUP4
000005cd: ADD
000005ce: SWAP1
000005cf: SSTORE
000005d0: PUSH1 0x05
000005d2: DUP1
000005d3: SLOAD
000005d4: DUP4
000005d5: ADD
000005d6: SWAP1
000005d7: SSTORE
000005d8: PUSH1 0x07
000005da: DUP1
000005db: SLOAD
000005dc: DUP4
000005dd: ADD
000005de: SWAP1
000005df: SSTORE
000005e0: PUSH2 0x0568
000005e3: PUSH2 0x02f7
000005e6: JUMP
000005e7: JUMPDEST
000005e8: DUP1
000005e9: ISZERO
000005ea: PUSH2 0x05f6
000005ed: JUMPI
000005ee: POP
000005ef: PUSH1 0x0b
000005f1: SLOAD
000005f2: PUSH1 0xff
000005f4: AND
000005f5: ISZERO
000005f6: JUMPDEST
000005f7: ISZERO
000005f8: PUSH2 0x0670
000005fb: JUMPI
000005fc: PUSH1 0x01
000005fe: PUSH1 0xa0
00000600: PUSH1 0x02
00000602: EXP
00000603: SUB
00000604: CALLER
00000605: AND
00000606: PUSH1 0x00
00000608: SWAP1
00000609: DUP2
0000060a: MSTORE
0000060b: PUSH1 0x0c
0000060d: PUSH1 0x20
0000060f: MSTORE
00000610: PUSH1 0x40
00000612: DUP2
00000613: KECCAK256
00000614: SLOAD
00000615: GT
00000616: ISZERO
00000617: PUSH2 0x0670
0000061a: JUMPI
0000061b: PUSH1 0x40
0000061d: PUSH1 0x00
0000061f: DUP2
00000620: DUP2
00000621: KECCAK256
00000622: SLOAD
00000623: SWAP2
00000624: MLOAD
00000625: PUSH1 0x01
00000627: PUSH1 0xa0
00000629: PUSH1 0x02
0000062b: EXP
0000062c: SUB
0000062d: CALLER
0000062e: AND
0000062f: SWAP3
00000630: SWAP1
00000631: DUP3
00000632: DUP2
00000633: DUP2
00000634: DUP2
00000635: DUP6
00000636: DUP9
00000637: DUP4
00000638: CALL
00000639: SWAP4
0000063a: POP
0000063b: POP
0000063c: POP
0000063d: POP
0000063e: ISZERO
0000063f: PUSH2 0x0670
00000642: JUMPI
00000643: PUSH1 0x40
00000645: PUSH1 0x00
00000647: SWAP1
00000648: DUP2
00000649: KECCAK256
0000064a: PUSH1 0x01
0000064c: PUSH1 0xa0
0000064e: PUSH1 0x02
00000650: EXP
00000651: SUB
00000652: CALLER
00000653: AND
00000654: DUP3
00000655: MSTORE
00000656: PUSH1 0x0c
00000658: PUSH1 0x20
0000065a: MSTORE
0000065b: PUSH1 0x05
0000065d: DUP1
0000065e: SLOAD
0000065f: DUP3
00000660: SLOAD
00000661: SWAP1
00000662: SUB
00000663: SWAP1
00000664: SSTORE
00000665: PUSH1 0x07
00000667: DUP1
00000668: SLOAD
00000669: DUP3
0000066a: SLOAD
0000066b: SWAP1
0000066c: SUB
0000066d: SWAP1
0000066e: SSTORE
0000066f: SSTORE
00000670: JUMPDEST
00000671: SWAP1
00000672: JUMP
00000673: JUMPDEST
00000674: DUP1
00000675: ISZERO
00000676: PUSH2 0x0682
00000679: JUMPI
0000067a: POP
0000067b: PUSH2 0x0682
0000067e: PUSH2 0x0275
00000681: JUMP
00000682: JUMPDEST
00000683: ISZERO
00000684: PUSH2 0x0695
00000687: JUMPI
00000688: PUSH1 0x0b
0000068a: DUP1
0000068b: SLOAD
0000068c: PUSH1 0xff
0000068e: NOT
0000068f: AND
00000690: PUSH1 0x01
00000692: OR
00000693: SWAP1
00000694: SSTORE
00000695: JUMPDEST
00000696: POP
00000697: PUSH1 0x0b
00000699: SLOAD
0000069a: PUSH1 0xff
0000069c: AND
0000069d: PUSH2 0x0670
000006a0: JUMP
000006a1: JUMPDEST
000006a2: POP
000006a3: PUSH1 0x07
000006a5: SLOAD
000006a6: JUMPDEST
000006a7: PUSH1 0x07
000006a9: DUP1
000006aa: SLOAD
000006ab: DUP3
000006ac: SWAP1
000006ad: SUB
000006ae: SWAP1
000006af: SSTORE
000006b0: JUMPDEST
000006b1: POP
000006b2: SWAP2
000006b3: SWAP1
000006b4: POP
000006b5: JUMP
000006b6: JUMPDEST
000006b7: ISZERO
000006b8: ISZERO
000006b9: PUSH2 0x06c5
000006bc: JUMPI
000006bd: PUSH1 0x00
000006bf: SWAP2
000006c0: POP
000006c1: PUSH2 0x06b0
000006c4: JUMP
000006c5: JUMPDEST
000006c6: PUSH2 0x06cd
000006c9: PUSH2 0x0315
000006cc: JUMP
000006cd: JUMPDEST
000006ce: ISZERO
000006cf: ISZERO
000006d0: PUSH2 0x06dc
000006d3: JUMPI
000006d4: PUSH1 0x00
000006d6: SWAP2
000006d7: POP
000006d8: PUSH2 0x06b0
000006db: JUMP
000006dc: JUMPDEST
000006dd: PUSH1 0x07
000006df: SLOAD
000006e0: DUP4
000006e1: GT
000006e2: DUP1
000006e3: ISZERO
000006e4: SWAP1
000006e5: PUSH2 0x06ee
000006e8: JUMPI
000006e9: POP
000006ea: PUSH1 0x00
000006ec: DUP4
000006ed: GT
000006ee: JUMPDEST
000006ef: ISZERO
000006f0: PUSH2 0x06a1
000006f3: JUMPI
000006f4: POP
000006f5: DUP2
000006f6: PUSH2 0x06a6
000006f9: JUMP
000006fa: JUMPDEST
000006fb: DUP3
000006fc: ADD
000006fd: SWAP2
000006fe: SWAP1
000006ff: PUSH1 0x00
00000701: MSTORE
00000702: PUSH1 0x20
00000704: PUSH1 0x00
00000706: KECCAK256
00000707: SWAP1
00000708: JUMPDEST
00000709: DUP2
0000070a: SLOAD
0000070b: DUP2
0000070c: MSTORE
0000070d: SWAP1
0000070e: PUSH1 0x01
00000710: ADD
00000711: SWAP1
00000712: PUSH1 0x20
00000714: ADD
00000715: DUP1
00000716: DUP4
00000717: GT
00000718: PUSH2 0x0708
0000071b: JUMPI
0000071c: DUP3
0000071d: SWAP1
0000071e: SUB
0000071f: PUSH1 0x1f
00000721: AND
00000722: DUP3
00000723: ADD
00000724: SWAP2
00000725: JUMPDEST
00000726: POP
00000727: POP
00000728: POP
00000729: POP
0000072a: POP
0000072b: DUP2
0000072c: JUMP
View stderr 
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x6f0ff9be21b392b4377a5a649d77256951903170424eb2600b69b2035789c32d
call_targets: 0x8f4da815181ec5f46d523a074ff174cd0d43cca3
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x6f0ff9be21b392b4377a5a649d77256951903170424eb2600b69b2035789c32d",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8f4da815181ec5f46d523a074ff174cd0d43cca3"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x047fc9aa",
            "selector": "0x047fc9aa",
            "calldata_variants": [
                "0x047fc9aa",
                "0x047fc9aa0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0b97bc86",
            "selector": "0x0b97bc86",
            "calldata_variants": [
                "0x0b97bc86",
                "0x0b97bc860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x200b3690",
            "selector": "0x200b3690",
            "calldata_variants": [
                "0x200b3690",
                "0x200b36900000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x239b18b4",
            "selector": "0x239b18b4",
            "calldata_variants": [
                "0x239b18b4",
                "0x239b18b40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x40193883",
            "selector": "0x40193883",
            "calldata_variants": [
                "0x40193883",
                "0x401938830000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4162169f",
            "selector": "0x4162169f",
            "calldata_variants": [
                "0x4162169f",
                "0x4162169f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 949,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1592,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x6f0ff9be21b392b4377a5a649d77256951903170424eb2600b69b2035789c32d
call_targets: 0x8f4da815181ec5f46d523a074ff174cd0d43cca3
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x6f0ff9be21b392b4377a5a649d77256951903170424eb2600b69b2035789c32d",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8f4da815181ec5f46d523a074ff174cd0d43cca3"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x047fc9aa",
            "selector": "0x047fc9aa",
            "calldata_variants": [
                "0x047fc9aa",
                "0x047fc9aa0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0b97bc86",
            "selector": "0x0b97bc86",
            "calldata_variants": [
                "0x0b97bc86",
                "0x0b97bc860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x200b3690",
            "selector": "0x200b3690",
            "calldata_variants": [
                "0x200b3690",
                "0x200b36900000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x239b18b4",
            "selector": "0x239b18b4",
            "calldata_variants": [
                "0x239b18b4",
                "0x239b18b40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x40193883",
            "selector": "0x40193883",
            "calldata_variants": [
                "0x40193883",
                "0x401938830000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4162169f",
            "selector": "0x4162169f",
            "calldata_variants": [
                "0x4162169f",
                "0x4162169f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 949,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1592,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}