019b3836-399c-73cf-ba11-060f6f605a37
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 4113 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 4114 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 105405 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 105406 | capability.graph | complete | 1 / 3 | 1 week ago |
| 105407 | detector.run | complete | 1 / 3 | 1 week ago |
| 105408 | validation.fork | complete | 1 / 3 | 1 week ago |
| 113902 | report.consolidate | complete | 1 / 6 | 1 week ago |
No slither job recorded yet.
OpenAI Codex v0.118.0 (research preview) -------- workdir: /tmp/codex-cw6nreui model: gpt-5.4 provider: openai approval: never sandbox: read-only reasoning effort: high reasoning summaries: none session id: 019d5ca2-67f4-7cc3-be0b-8d1bae8093d6 -------- user You are a security auditor. You ONLY have runtime bytecode + analysis artifacts. You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary, evidence bundle, callsites, storage slots, and detector findings. Special cases when reasoning from bytecode (be explicit about uncertainty): - Selector inference is best-effort; missing selectors are common. - Fallback/receive paths may be the only entrypoints. - CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage. - Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative. - Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown. - Guard detection is heuristic; absence of guards does NOT mean unguarded. - Returndata checking is unknown unless explicitly shown in evidence. - Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim. Output MUST be valid JSON matching the provided schema. - If you find nothing meaningful: set no_findings=true and findings=[]. - Otherwise: set no_findings=false and include findings with severity/category/title. - Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb". Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, accounting/invariant breaks, dangerous delegatecall, and untrusted external calls. Be conservative: if evidence is weak, mark severity low/medium and explain why. warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
{
"codex": {
"ran_at": "2026-04-05T07:54:02.247594+00:00",
"returncode": 1
},
"project": {
"mode": "bytecode",
"bytecode_length": 2886,
"bytecode_truncated": false,
"capability_graph_present": true,
"analysis_artifact_present": true
},
"summary": null,
"no_findings": null,
"schema_version": 1
}
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x002a 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x9334ab61 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x0066 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x9dbc4f9b 00000025: EQ 00000026: PUSH2 0x0124 00000029: JUMPI 0000002a: JUMPDEST 0000002b: PUSH2 0x0267 0000002e: PUSH2 0x0269 00000031: PUSH1 0x00 00000033: PUSH1 0x00 00000035: PUSH1 0x00 00000037: PUSH7 0x2386f26fc10000 0000003f: CALLVALUE 00000040: LT 00000041: ISZERO 00000042: PUSH2 0x037a 00000045: JUMPI 00000046: PUSH1 0x01 00000048: PUSH1 0xa0 0000004a: PUSH1 0x02 0000004c: EXP 0000004d: SUB 0000004e: CALLER 0000004f: AND 00000050: DUP2 00000051: CALLVALUE 00000052: PUSH1 0x60 00000054: DUP3 00000055: DUP2 00000056: DUP2 00000057: DUP2 00000058: DUP6 00000059: DUP9 0000005a: DUP4 0000005b: CALL 0000005c: POP 0000005d: POP 0000005e: POP 0000005f: POP 00000060: POP 00000061: JUMPDEST 00000062: POP 00000063: POP 00000064: POP 00000065: JUMP 00000066: JUMPDEST 00000067: PUSH1 0x80 00000069: PUSH1 0x40 0000006b: MSTORE 0000006c: PUSH1 0x00 0000006e: PUSH1 0x60 00000070: DUP2 00000071: DUP2 00000072: MSTORE 00000073: PUSH1 0x02 00000075: SLOAD 00000076: PUSH1 0x01 00000078: SLOAD 00000079: DUP4 0000007a: SLOAD 0000007b: PUSH2 0x026b 0000007e: SWAP5 0000007f: PUSH7 0x038d7ea4c68000 00000087: SWAP4 00000088: DUP5 00000089: SWAP1 0000008a: DIV 0000008b: SWAP5 0000008c: SWAP2 0000008d: SWAP4 0000008e: SWAP1 0000008f: SWAP2 00000090: SWAP1 00000091: DUP3 00000092: DUP5 00000093: DUP7 00000094: DUP2 00000095: LT 00000096: ISZERO 00000097: PUSH2 0x0002 0000009a: JUMPI 0000009b: POP 0000009c: POP 0000009d: SWAP2 0000009e: DUP1 0000009f: MSTORE 000000a0: POP 000000a1: PUSH1 0x02 000000a3: DUP3 000000a4: MUL 000000a5: PUSH1 0x00 000000a7: DUP1 000000a8: MLOAD 000000a9: PUSH1 0x20 000000ab: PUSH2 0x0582 000000ae: DUP4 000000af: CODECOPY 000000b0: DUP2 000000b1: MLOAD 000000b2: SWAP2 000000b3: MSTORE 000000b4: ADD 000000b5: SLOAD 000000b6: PUSH1 0x03 000000b8: SLOAD 000000b9: PUSH1 0xe0 000000bb: PUSH1 0x40 000000bd: MSTORE 000000be: PUSH1 0x2d 000000c0: PUSH1 0x80 000000c2: SWAP1 000000c3: DUP2 000000c4: MSTORE 000000c5: PUSH32 0x416c6c20616d6f756e747320696e2046696e6e6579202831204574686572203d 000000e6: PUSH1 0xa0 000000e8: MSTORE 000000e9: PUSH32 0x20313030302046696e6e65792900000000000000000000000000000000000000 0000010a: PUSH1 0xc0 0000010c: MSTORE 0000010d: SWAP6 0000010e: SWAP7 0000010f: SWAP5 00000110: SWAP6 00000111: SWAP4 00000112: SWAP5 00000113: PUSH1 0x64 00000115: SWAP2 00000116: SWAP1 00000117: SWAP3 00000118: MUL 00000119: SWAP3 0000011a: SWAP1 0000011b: SWAP3 0000011c: DIV 0000011d: SWAP2 0000011e: SWAP1 0000011f: SWAP2 00000120: DIV 00000121: SWAP2 00000122: SWAP1 00000123: JUMP 00000124: JUMPDEST 00000125: PUSH2 0x02ee 00000128: PUSH1 0x04 0000012a: CALLDATALOAD 0000012b: PUSH1 0x00 0000012d: PUSH1 0x60 0000012f: DUP2 00000130: SWAP1 00000131: MSTORE 00000132: PUSH1 0xc0 00000134: PUSH1 0x40 00000136: MSTORE 00000137: PUSH1 0x04 00000139: PUSH1 0x80 0000013b: SWAP1 0000013c: DUP2 0000013d: MSTORE 0000013e: PUSH32 0x4e2e412e00000000000000000000000000000000000000000000000000000000 0000015f: PUSH1 0xa0 00000161: MSTORE 00000162: DUP2 00000163: SLOAD 00000164: DUP3 00000165: SWAP2 00000166: DUP3 00000167: SWAP2 00000168: DUP6 00000169: LT 0000016a: ISZERO 0000016b: PUSH2 0x0260 0000016e: JUMPI 0000016f: PUSH1 0x00 00000171: PUSH1 0x00 00000173: POP 00000174: DUP6 00000175: DUP2 00000176: SLOAD 00000177: DUP2 00000178: LT 00000179: ISZERO 0000017a: PUSH2 0x0002 0000017d: JUMPI 0000017e: POP 0000017f: POP 00000180: DUP2 00000181: SLOAD 00000182: DUP3 00000183: DUP1 00000184: MSTORE 00000185: PUSH1 0x02 00000187: DUP7 00000188: MUL 00000189: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 000001aa: ADD 000001ab: SLOAD 000001ac: PUSH1 0x01 000001ae: PUSH1 0xa0 000001b0: PUSH1 0x02 000001b2: EXP 000001b3: SUB 000001b4: AND 000001b5: SWAP5 000001b6: PUSH7 0x038d7ea4c68000 000001be: SWAP2 000001bf: DUP8 000001c0: SWAP1 000001c1: DUP2 000001c2: LT 000001c3: ISZERO 000001c4: PUSH2 0x0002 000001c7: JUMPI 000001c8: POP 000001c9: POP 000001ca: PUSH1 0x02 000001cc: DUP7 000001cd: DUP2 000001ce: MUL 000001cf: PUSH1 0x00 000001d1: DUP1 000001d2: MLOAD 000001d3: PUSH1 0x20 000001d5: PUSH2 0x0582 000001d8: DUP4 000001d9: CODECOPY 000001da: DUP2 000001db: MLOAD 000001dc: SWAP2 000001dd: MSTORE 000001de: ADD 000001df: SLOAD 000001e0: PUSH1 0x03 000001e2: SLOAD 000001e3: PUSH2 0x0100 000001e6: PUSH1 0x40 000001e8: MSTORE 000001e9: PUSH1 0xc0 000001eb: SWAP3 000001ec: DUP4 000001ed: MSTORE 000001ee: PUSH32 0x6e6f000000000000000000000000000000000000000000000000000000000000 0000020f: PUSH1 0xe0 00000211: MSTORE 00000212: PUSH1 0x01 00000214: SLOAD 00000215: SWAP4 00000216: SWAP1 00000217: SWAP2 00000218: DIV 00000219: SWAP6 0000021a: POP 0000021b: PUSH1 0x64 0000021d: SWAP1 0000021e: DUP7 0000021f: MUL 00000220: DIV 00000221: SWAP4 00000222: POP 00000223: SWAP2 00000224: POP 00000225: DUP6 00000226: LT 00000227: ISZERO 00000228: PUSH2 0x0260 0000022b: JUMPI 0000022c: POP 0000022d: PUSH2 0x0140 00000230: PUSH1 0x40 00000232: MSTORE 00000233: PUSH1 0x03 00000235: PUSH2 0x0100 00000238: SWAP1 00000239: DUP2 0000023a: MSTORE 0000023b: PUSH32 0x7965730000000000000000000000000000000000000000000000000000000000 0000025c: PUSH2 0x0120 0000025f: MSTORE 00000260: JUMPDEST 00000261: SWAP2 00000262: SWAP4 00000263: POP 00000264: SWAP2 00000265: SWAP4 00000266: JUMP 00000267: JUMPDEST 00000268: STOP 00000269: JUMPDEST 0000026a: JUMP 0000026b: JUMPDEST 0000026c: PUSH1 0x40 0000026e: MLOAD 0000026f: DUP1 00000270: DUP7 00000271: DUP2 00000272: MSTORE 00000273: PUSH1 0x20 00000275: ADD 00000276: DUP6 00000277: DUP2 00000278: MSTORE 00000279: PUSH1 0x20 0000027b: ADD 0000027c: DUP5 0000027d: DUP2 0000027e: MSTORE 0000027f: PUSH1 0x20 00000281: ADD 00000282: DUP4 00000283: DUP2 00000284: MSTORE 00000285: PUSH1 0x20 00000287: ADD 00000288: DUP1 00000289: PUSH1 0x20 0000028b: ADD 0000028c: DUP3 0000028d: DUP2 0000028e: SUB 0000028f: DUP3 00000290: MSTORE 00000291: DUP4 00000292: DUP2 00000293: DUP2 00000294: MLOAD 00000295: DUP2 00000296: MSTORE 00000297: PUSH1 0x20 00000299: ADD 0000029a: SWAP2 0000029b: POP 0000029c: DUP1 0000029d: MLOAD 0000029e: SWAP1 0000029f: PUSH1 0x20 000002a1: ADD 000002a2: SWAP1 000002a3: DUP1 000002a4: DUP4 000002a5: DUP4 000002a6: DUP3 000002a7: SWAP1 000002a8: PUSH1 0x00 000002aa: PUSH1 0x04 000002ac: PUSH1 0x20 000002ae: DUP5 000002af: PUSH1 0x1f 000002b1: ADD 000002b2: DIV 000002b3: PUSH1 0x0f 000002b5: MUL 000002b6: PUSH1 0x03 000002b8: ADD 000002b9: CALL 000002ba: POP 000002bb: POP 000002bc: PUSH2 0x01c0 000002bf: DUP1 000002c0: MLOAD 000002c1: PUSH19 0xffffffffffffffffffffffffffffffffffffff 000002d5: NOT 000002d6: AND 000002d7: SWAP1 000002d8: MSTORE 000002d9: POP 000002da: POP 000002db: PUSH1 0x40 000002dd: MLOAD 000002de: PUSH2 0x01e0 000002e1: DUP2 000002e2: SWAP1 000002e3: SUB 000002e4: SWAP8 000002e5: POP 000002e6: SWAP6 000002e7: POP 000002e8: POP 000002e9: POP 000002ea: POP 000002eb: POP 000002ec: POP 000002ed: RETURN 000002ee: JUMPDEST 000002ef: PUSH1 0x40 000002f1: MLOAD 000002f2: DUP1 000002f3: DUP6 000002f4: PUSH1 0x01 000002f6: PUSH1 0xa0 000002f8: PUSH1 0x02 000002fa: EXP 000002fb: SUB 000002fc: AND 000002fd: DUP2 000002fe: MSTORE 000002ff: PUSH1 0x20 00000301: ADD 00000302: DUP5 00000303: DUP2 00000304: MSTORE 00000305: PUSH1 0x20 00000307: ADD 00000308: DUP4 00000309: DUP2 0000030a: MSTORE 0000030b: PUSH1 0x20 0000030d: ADD 0000030e: DUP1 0000030f: PUSH1 0x20 00000311: ADD 00000312: DUP3 00000313: DUP2 00000314: SUB 00000315: DUP3 00000316: MSTORE 00000317: DUP4 00000318: DUP2 00000319: DUP2 0000031a: MLOAD 0000031b: DUP2 0000031c: MSTORE 0000031d: PUSH1 0x20 0000031f: ADD 00000320: SWAP2 00000321: POP 00000322: DUP1 00000323: MLOAD 00000324: SWAP1 00000325: PUSH1 0x20 00000327: ADD 00000328: SWAP1 00000329: DUP1 0000032a: DUP4 0000032b: DUP4 0000032c: DUP3 0000032d: SWAP1 0000032e: PUSH1 0x00 00000330: PUSH1 0x04 00000332: PUSH1 0x20 00000334: DUP5 00000335: PUSH1 0x1f 00000337: ADD 00000338: DIV 00000339: PUSH1 0x0f 0000033b: MUL 0000033c: PUSH1 0x03 0000033e: ADD 0000033f: CALL 00000340: POP 00000341: SWAP1 00000342: POP 00000343: SWAP1 00000344: DUP2 00000345: ADD 00000346: SWAP1 00000347: PUSH1 0x1f 00000349: AND 0000034a: DUP1 0000034b: ISZERO 0000034c: PUSH2 0x0369 0000034f: JUMPI 00000350: DUP1 00000351: DUP3 00000352: SUB 00000353: DUP1 00000354: MLOAD 00000355: PUSH1 0x01 00000357: DUP4 00000358: PUSH1 0x20 0000035a: SUB 0000035b: PUSH2 0x0100 0000035e: EXP 0000035f: SUB 00000360: NOT 00000361: AND 00000362: DUP2 00000363: MSTORE 00000364: PUSH1 0x20 00000366: ADD 00000367: SWAP2 00000368: POP 00000369: JUMPDEST 0000036a: POP 0000036b: SWAP6 0000036c: POP 0000036d: POP 0000036e: POP 0000036f: POP 00000370: POP 00000371: POP 00000372: PUSH1 0x40 00000374: MLOAD 00000375: DUP1 00000376: SWAP2 00000377: SUB 00000378: SWAP1 00000379: RETURN 0000037a: JUMPDEST 0000037b: PUSH8 0x8ac7230489e80000 00000384: CALLVALUE 00000385: GT 00000386: ISZERO 00000387: PUSH2 0x03c1 0000038a: JUMPI 0000038b: PUSH1 0x01 0000038d: PUSH1 0xa0 0000038f: PUSH1 0x02 00000391: EXP 00000392: SUB 00000393: CALLER 00000394: AND 00000395: DUP2 00000396: PUSH8 0x8ac7230489e7ffff 0000039f: NOT 000003a0: CALLVALUE 000003a1: ADD 000003a2: PUSH1 0x60 000003a4: DUP3 000003a5: DUP2 000003a6: DUP2 000003a7: DUP2 000003a8: DUP6 000003a9: DUP9 000003aa: DUP4 000003ab: CALL 000003ac: POP 000003ad: PUSH8 0x8ac7230489e80000 000003b6: SWAP7 000003b7: POP 000003b8: PUSH2 0x03c5 000003bb: SWAP4 000003bc: POP 000003bd: POP 000003be: POP 000003bf: POP 000003c0: JUMP 000003c1: JUMPDEST 000003c2: CALLVALUE 000003c3: SWAP3 000003c4: POP 000003c5: JUMPDEST 000003c6: DUP1 000003c7: SLOAD 000003c8: PUSH1 0x01 000003ca: DUP2 000003cb: ADD 000003cc: DUP1 000003cd: DUP4 000003ce: SSTORE 000003cf: SWAP1 000003d0: SWAP3 000003d1: DUP2 000003d2: DUP5 000003d3: DUP1 000003d4: ISZERO 000003d5: DUP3 000003d6: SWAP1 000003d7: GT 000003d8: PUSH2 0x0424 000003db: JUMPI 000003dc: PUSH1 0x02 000003de: MUL 000003df: DUP2 000003e0: PUSH1 0x02 000003e2: MUL 000003e3: DUP4 000003e4: PUSH1 0x00 000003e6: MSTORE 000003e7: PUSH1 0x20 000003e9: PUSH1 0x00 000003eb: KECCAK256 000003ec: SWAP2 000003ed: DUP3 000003ee: ADD 000003ef: SWAP2 000003f0: ADD 000003f1: PUSH2 0x0424 000003f4: SWAP2 000003f5: SWAP1 000003f6: JUMPDEST 000003f7: DUP1 000003f8: DUP3 000003f9: GT 000003fa: ISZERO 000003fb: PUSH2 0x057e 000003fe: JUMPI 000003ff: DUP1 00000400: SLOAD 00000401: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000416: NOT 00000417: AND 00000418: DUP2 00000419: SSTORE 0000041a: PUSH1 0x01 0000041c: ADD 0000041d: DUP5 0000041e: DUP2 0000041f: SSTORE 00000420: PUSH2 0x03f6 00000423: JUMP 00000424: JUMPDEST 00000425: POP 00000426: POP 00000427: POP 00000428: POP 00000429: CALLER 0000042a: PUSH1 0x00 0000042c: PUSH1 0x00 0000042e: POP 0000042f: DUP4 00000430: DUP2 00000431: SLOAD 00000432: DUP2 00000433: LT 00000434: ISZERO 00000435: PUSH2 0x0002 00000438: JUMPI 00000439: SWAP1 0000043a: PUSH1 0x00 0000043c: MSTORE 0000043d: PUSH1 0x20 0000043f: PUSH1 0x00 00000441: KECCAK256 00000442: SWAP1 00000443: PUSH1 0x02 00000445: MUL 00000446: ADD 00000447: PUSH1 0x00 00000449: POP 0000044a: PUSH1 0x00 0000044c: ADD 0000044d: PUSH1 0x00 0000044f: PUSH2 0x0100 00000452: EXP 00000453: DUP2 00000454: SLOAD 00000455: DUP2 00000456: PUSH1 0x01 00000458: PUSH1 0xa0 0000045a: PUSH1 0x02 0000045c: EXP 0000045d: SUB 0000045e: MUL 0000045f: NOT 00000460: AND 00000461: SWAP1 00000462: DUP4 00000463: MUL 00000464: OR 00000465: SWAP1 00000466: SSTORE 00000467: POP 00000468: DUP3 00000469: PUSH1 0x00 0000046b: PUSH1 0x00 0000046d: POP 0000046e: DUP4 0000046f: DUP2 00000470: SLOAD 00000471: DUP2 00000472: LT 00000473: ISZERO 00000474: PUSH2 0x0002 00000477: JUMPI 00000478: SWAP1 00000479: PUSH1 0x00 0000047b: MSTORE 0000047c: PUSH1 0x20 0000047e: PUSH1 0x00 00000480: KECCAK256 00000481: SWAP1 00000482: PUSH1 0x02 00000484: MUL 00000485: ADD 00000486: PUSH1 0x00 00000488: POP 00000489: PUSH1 0x01 0000048b: ADD 0000048c: PUSH1 0x00 0000048e: POP 0000048f: DUP2 00000490: SWAP1 00000491: SSTORE 00000492: POP 00000493: DUP3 00000494: PUSH1 0x02 00000496: PUSH1 0x00 00000498: DUP3 00000499: DUP3 0000049a: DUP3 0000049b: POP 0000049c: SLOAD 0000049d: ADD 0000049e: SWAP3 0000049f: POP 000004a0: POP 000004a1: DUP2 000004a2: SWAP1 000004a3: SSTORE 000004a4: POP 000004a5: JUMPDEST 000004a6: PUSH1 0x01 000004a8: SLOAD 000004a9: PUSH1 0x00 000004ab: DUP1 000004ac: SLOAD 000004ad: PUSH1 0x64 000004af: SWAP3 000004b0: SWAP1 000004b1: DUP2 000004b2: LT 000004b3: ISZERO 000004b4: PUSH2 0x0002 000004b7: JUMPI 000004b8: SWAP1 000004b9: DUP1 000004ba: MSTORE 000004bb: PUSH1 0x03 000004bd: SLOAD 000004be: PUSH1 0x02 000004c0: DUP1 000004c1: SLOAD 000004c2: SWAP3 000004c3: MUL 000004c4: PUSH1 0x00 000004c6: DUP1 000004c7: MLOAD 000004c8: PUSH1 0x20 000004ca: PUSH2 0x0582 000004cd: DUP4 000004ce: CODECOPY 000004cf: DUP2 000004d0: MLOAD 000004d1: SWAP2 000004d2: MSTORE 000004d3: ADD 000004d4: SLOAD 000004d5: MUL 000004d6: SWAP2 000004d7: SWAP1 000004d8: SWAP2 000004d9: DIV 000004da: SWAP1 000004db: GT 000004dc: ISZERO 000004dd: PUSH2 0x0061 000004e0: JUMPI 000004e1: PUSH1 0x01 000004e3: SLOAD 000004e4: PUSH1 0x00 000004e6: DUP1 000004e7: SLOAD 000004e8: PUSH1 0x64 000004ea: SWAP3 000004eb: SWAP1 000004ec: DUP2 000004ed: LT 000004ee: ISZERO 000004ef: PUSH2 0x0002 000004f2: JUMPI 000004f3: PUSH1 0x03 000004f5: SLOAD 000004f6: PUSH1 0x01 000004f8: SLOAD 000004f9: DUP4 000004fa: SLOAD 000004fb: PUSH1 0x02 000004fd: SWAP4 000004fe: SWAP1 000004ff: SWAP4 00000500: MUL 00000501: PUSH1 0x00 00000503: DUP1 00000504: MLOAD 00000505: PUSH1 0x20 00000507: PUSH2 0x0582 0000050a: DUP4 0000050b: CODECOPY 0000050c: DUP2 0000050d: MLOAD 0000050e: SWAP2 0000050f: MSTORE 00000510: ADD 00000511: SLOAD 00000512: SWAP1 00000513: SWAP2 00000514: MUL 00000515: SWAP4 00000516: SWAP1 00000517: SWAP4 00000518: DIV 00000519: SWAP4 0000051a: POP 0000051b: SWAP1 0000051c: SWAP2 0000051d: SWAP1 0000051e: DUP2 0000051f: LT 00000520: ISZERO 00000521: PUSH2 0x0002 00000524: JUMPI 00000525: PUSH1 0x02 00000527: MUL 00000528: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 00000549: ADD 0000054a: SWAP1 0000054b: PUSH1 0x40 0000054d: MLOAD 0000054e: SWAP2 0000054f: SLOAD 00000550: PUSH1 0x01 00000552: PUSH1 0xa0 00000554: PUSH1 0x02 00000556: EXP 00000557: SUB 00000558: AND 00000559: SWAP2 0000055a: DUP4 0000055b: SWAP1 0000055c: DUP3 0000055d: DUP2 0000055e: DUP2 0000055f: DUP2 00000560: DUP6 00000561: DUP9 00000562: DUP4 00000563: CALL 00000564: POP 00000565: POP 00000566: PUSH1 0x02 00000568: DUP1 00000569: SLOAD 0000056a: SWAP2 0000056b: SWAP1 0000056c: SWAP2 0000056d: SUB 0000056e: SWAP1 0000056f: SSTORE 00000570: POP 00000571: POP 00000572: PUSH1 0x01 00000574: DUP1 00000575: SLOAD 00000576: DUP2 00000577: ADD 00000578: SWAP1 00000579: SSTORE 0000057a: PUSH2 0x04a5 0000057d: JUMP 0000057e: JUMPDEST 0000057f: POP 00000580: SWAP1 00000581: JUMP 00000582: UNKNOWN(0x29) 00000583: UNKNOWN(0x0D) 00000584: UNKNOWN(0xEC) 00000585: UNKNOWN(0xD9) 00000586: SLOAD 00000587: DUP12 00000588: PUSH3 0xa8d603 0000058c: GASLIMIT 0000058d: UNKNOWN(0xA9) 0000058e: DUP9 0000058f: CODESIZE 00000590: PUSH16 0xc84ba6bc95484008f6362f93160ef3e5 000005a1: PUSH5
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | yes | yes |
viewtrace_id: 0x765c4cf2a447a8c02f169612458d77a633144f46f2131636408e66a9f504c5f4
call_targets:
0x0000000000000000000000000000000000000004, 0x49f053b866c33185fa1151e71fc80d5fe6b08a92
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x765c4cf2a447a8c02f169612458d77a633144f46f2131636408e66a9f504c5f4",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x0000000000000000000000000000000000000004",
"0x49f053b866c33185fa1151e71fc80d5fe6b08a92"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x9334ab61",
"selector": "0x9334ab61",
"calldata_variants": [
"0x9334ab61",
"0x9334ab610000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9dbc4f9b",
"selector": "0x9dbc4f9b",
"calldata_variants": [
"0x9dbc4f9b",
"0x9dbc4f9b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 91,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 697,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 831,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 5,
"guards_detected": [],
"untrusted_call_count": 5
}
|
| high | other | detector | ETH value transfer possible | 55 | yes | yes |
viewtrace_id: 0x765c4cf2a447a8c02f169612458d77a633144f46f2131636408e66a9f504c5f4
call_targets:
0x0000000000000000000000000000000000000004, 0x49f053b866c33185fa1151e71fc80d5fe6b08a92
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x765c4cf2a447a8c02f169612458d77a633144f46f2131636408e66a9f504c5f4",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x0000000000000000000000000000000000000004",
"0x49f053b866c33185fa1151e71fc80d5fe6b08a92"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x9334ab61",
"selector": "0x9334ab61",
"calldata_variants": [
"0x9334ab61",
"0x9334ab610000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9dbc4f9b",
"selector": "0x9dbc4f9b",
"calldata_variants": [
"0x9dbc4f9b",
"0x9dbc4f9b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 91,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 697,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 831,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 5,
"guards_detected": []
}
|