TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-39de-707d-a3ef-dd881518486c

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
4155 artifact.fetch complete 1 / 3 3 months ago
4156 tool.cast_disasm complete 1 / 3 3 months ago
47752 analysis.bundle complete 1 / 3 1 week ago
47753 capability.graph complete 1 / 3 1 week ago
47754 detector.run complete 1 / 3 1 week ago
47755 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
2
EXT*/BALANCE
0
Total opcodes
1047
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0056
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x104b6704
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x006e
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x3d750b28
00000025: EQ
00000026: PUSH2 0x0080
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x3feb5f2b
00000030: EQ
00000031: PUSH2 0x009f
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0xb3a2a6c0
0000003b: EQ
0000003c: PUSH2 0x0160
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0xb69ef8a8
00000046: EQ
00000047: PUSH2 0x01c1
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0xe8b5e51f
00000051: EQ
00000052: PUSH2 0x01ca
00000055: JUMPI
00000056: JUMPDEST
00000057: PUSH2 0x0247
0000005a: PUSH8 0x016345785d8a0000
00000063: CALLVALUE
00000064: LT
00000065: ISZERO
00000066: PUSH2 0x0249
00000069: JUMPI
0000006a: PUSH2 0x0002
0000006d: JUMP
0000006e: JUMPDEST
0000006f: PUSH2 0x026a
00000072: PUSH1 0x04
00000074: SLOAD
00000075: PUSH1 0x01
00000077: PUSH1 0xa0
00000079: PUSH1 0x02
0000007b: EXP
0000007c: SUB
0000007d: AND
0000007e: DUP2
0000007f: JUMP
00000080: JUMPDEST
00000081: PUSH2 0x0247
00000084: PUSH1 0x00
00000086: SLOAD
00000087: PUSH1 0x01
00000089: PUSH1 0xa0
0000008b: PUSH1 0x02
0000008d: EXP
0000008e: SUB
0000008f: SWAP1
00000090: DUP2
00000091: AND
00000092: CALLER
00000093: SWAP1
00000094: SWAP2
00000095: AND
00000096: EQ
00000097: PUSH2 0x03d2
0000009a: JUMPI
0000009b: PUSH2 0x0002
0000009e: JUMP
0000009f: JUMPDEST
000000a0: PUSH2 0x0287
000000a3: PUSH1 0x04
000000a5: CALLDATALOAD
000000a6: PUSH1 0x02
000000a8: DUP1
000000a9: SLOAD
000000aa: DUP3
000000ab: SWAP1
000000ac: DUP2
000000ad: LT
000000ae: ISZERO
000000af: PUSH2 0x0002
000000b2: JUMPI
000000b3: POP
000000b4: PUSH1 0x00
000000b6: MSTORE
000000b7: PUSH1 0x04
000000b9: MUL
000000ba: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ace
000000db: DUP2
000000dc: ADD
000000dd: SLOAD
000000de: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5acf
000000ff: DUP3
00000100: ADD
00000101: SLOAD
00000102: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ad0
00000123: DUP4
00000124: ADD
00000125: SLOAD
00000126: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ad1
00000147: SWAP4
00000148: SWAP1
00000149: SWAP4
0000014a: ADD
0000014b: SLOAD
0000014c: PUSH1 0x01
0000014e: PUSH1 0xa0
00000150: PUSH1 0x02
00000152: EXP
00000153: SUB
00000154: SWAP3
00000155: SWAP1
00000156: SWAP3
00000157: AND
00000158: SWAP3
00000159: SWAP1
0000015a: SWAP2
0000015b: PUSH1 0xff
0000015d: AND
0000015e: DUP5
0000015f: JUMP
00000160: JUMPDEST
00000161: PUSH1 0x40
00000163: DUP1
00000164: MLOAD
00000165: PUSH1 0x20
00000167: PUSH1 0x04
00000169: DUP1
0000016a: CALLDATALOAD
0000016b: DUP1
0000016c: DUP3
0000016d: ADD
0000016e: CALLDATALOAD
0000016f: PUSH1 0x1f
00000171: DUP2
00000172: ADD
00000173: DUP5
00000174: SWAP1
00000175: DIV
00000176: DUP5
00000177: MUL
00000178: DUP6
00000179: ADD
0000017a: DUP5
0000017b: ADD
0000017c: SWAP1
0000017d: SWAP6
0000017e: MSTORE
0000017f: DUP5
00000180: DUP5
00000181: MSTORE
00000182: PUSH2 0x0247
00000185: SWAP5
00000186: SWAP2
00000187: SWAP4
00000188: PUSH1 0x24
0000018a: SWAP4
0000018b: SWAP1
0000018c: SWAP3
0000018d: SWAP2
0000018e: DUP5
0000018f: ADD
00000190: SWAP2
00000191: SWAP1
00000192: DUP2
00000193: SWAP1
00000194: DUP5
00000195: ADD
00000196: DUP4
00000197: DUP3
00000198: DUP1
00000199: DUP3
0000019a: DUP5
0000019b: CALLDATACOPY
0000019c: POP
0000019d: SWAP5
0000019e: SWAP7
0000019f: POP
000001a0: POP
000001a1: POP
000001a2: POP
000001a3: POP
000001a4: POP
000001a5: POP
000001a6: PUSH1 0x00
000001a8: SLOAD
000001a9: PUSH1 0x01
000001ab: PUSH1 0xa0
000001ad: PUSH1 0x02
000001af: EXP
000001b0: SUB
000001b1: SWAP1
000001b2: DUP2
000001b3: AND
000001b4: CALLER
000001b5: SWAP1
000001b6: SWAP2
000001b7: AND
000001b8: EQ
000001b9: PUSH2 0x02cd
000001bc: JUMPI
000001bd: PUSH2 0x0002
000001c0: JUMP
000001c1: JUMPDEST
000001c2: PUSH2 0x02bb
000001c5: PUSH1 0x05
000001c7: SLOAD
000001c8: DUP2
000001c9: JUMP
000001ca: JUMPDEST
000001cb: PUSH2 0x0247
000001ce: JUMPDEST
000001cf: PUSH1 0x02
000001d1: DUP1
000001d2: SLOAD
000001d3: PUSH1 0x01
000001d5: DUP2
000001d6: ADD
000001d7: DUP1
000001d8: DUP4
000001d9: SSTORE
000001da: DUP3
000001db: DUP2
000001dc: DUP4
000001dd: DUP1
000001de: ISZERO
000001df: DUP3
000001e0: SWAP1
000001e1: GT
000001e2: PUSH2 0x03dc
000001e5: JUMPI
000001e6: PUSH1 0x04
000001e8: MUL
000001e9: DUP2
000001ea: PUSH1 0x04
000001ec: MUL
000001ed: DUP4
000001ee: PUSH1 0x00
000001f0: MSTORE
000001f1: PUSH1 0x20
000001f3: PUSH1 0x00
000001f5: KECCAK256
000001f6: SWAP2
000001f7: DUP3
000001f8: ADD
000001f9: SWAP2
000001fa: ADD
000001fb: PUSH2 0x03dc
000001fe: SWAP2
000001ff: SWAP1
00000200: JUMPDEST
00000201: DUP1
00000202: DUP3
00000203: GT
00000204: ISZERO
00000205: PUSH2 0x03ce
00000208: JUMPI
00000209: DUP1
0000020a: SLOAD
0000020b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000220: NOT
00000221: AND
00000222: DUP2
00000223: SSTORE
00000224: PUSH1 0x00
00000226: PUSH1 0x01
00000228: DUP3
00000229: ADD
0000022a: DUP2
0000022b: DUP2
0000022c: SSTORE
0000022d: PUSH1 0x02
0000022f: DUP4
00000230: ADD
00000231: SWAP2
00000232: SWAP1
00000233: SWAP2
00000234: SSTORE
00000235: PUSH1 0x03
00000237: SWAP2
00000238: SWAP1
00000239: SWAP2
0000023a: ADD
0000023b: DUP1
0000023c: SLOAD
0000023d: PUSH1 0xff
0000023f: NOT
00000240: AND
00000241: SWAP1
00000242: SSTORE
00000243: PUSH2 0x0200
00000246: JUMP
00000247: JUMPDEST
00000248: STOP
00000249: JUMPDEST
0000024a: PUSH2 0x0251
0000024d: PUSH2 0x01ce
00000250: JUMP
00000251: JUMPDEST
00000252: PUSH2 0x0268
00000255: PUSH1 0x00
00000257: PUSH1 0x00
00000259: PUSH1 0x00
0000025b: PUSH2 0x0364
0000025e: JUMPDEST
0000025f: PUSH3 0x015180
00000263: TIMESTAMP
00000264: DIV
00000265: JUMPDEST
00000266: SWAP1
00000267: JUMP
00000268: JUMPDEST
00000269: JUMP
0000026a: JUMPDEST
0000026b: PUSH1 0x40
0000026d: DUP1
0000026e: MLOAD
0000026f: PUSH1 0x01
00000271: PUSH1 0xa0
00000273: PUSH1 0x02
00000275: EXP
00000276: SUB
00000277: SWAP3
00000278: SWAP1
00000279: SWAP3
0000027a: AND
0000027b: DUP3
0000027c: MSTORE
0000027d: MLOAD
0000027e: SWAP1
0000027f: DUP2
00000280: SWAP1
00000281: SUB
00000282: PUSH1 0x20
00000284: ADD
00000285: SWAP1
00000286: RETURN
00000287: JUMPDEST
00000288: PUSH1 0x40
0000028a: DUP1
0000028b: MLOAD
0000028c: PUSH1 0x01
0000028e: PUSH1 0xa0
00000290: PUSH1 0x02
00000292: EXP
00000293: SUB
00000294: SWAP6
00000295: SWAP1
00000296: SWAP6
00000297: AND
00000298: DUP6
00000299: MSTORE
0000029a: PUSH1 0x20
0000029c: DUP6
0000029d: ADD
0000029e: SWAP4
0000029f: SWAP1
000002a0: SWAP4
000002a1: MSTORE
000002a2: DUP4
000002a3: DUP4
000002a4: ADD
000002a5: SWAP2
000002a6: SWAP1
000002a7: SWAP2
000002a8: MSTORE
000002a9: PUSH1 0xff
000002ab: AND
000002ac: PUSH1 0x60
000002ae: DUP4
000002af: ADD
000002b0: MSTORE
000002b1: MLOAD
000002b2: SWAP1
000002b3: DUP2
000002b4: SWAP1
000002b5: SUB
000002b6: PUSH1 0x80
000002b8: ADD
000002b9: SWAP1
000002ba: RETURN
000002bb: JUMPDEST
000002bc: PUSH1 0x40
000002be: DUP1
000002bf: MLOAD
000002c0: SWAP2
000002c1: DUP3
000002c2: MSTORE
000002c3: MLOAD
000002c4: SWAP1
000002c5: DUP2
000002c6: SWAP1
000002c7: SUB
000002c8: PUSH1 0x20
000002ca: ADD
000002cb: SWAP1
000002cc: RETURN
000002cd: JUMPDEST
000002ce: DUP1
000002cf: PUSH1 0x01
000002d1: PUSH1 0x00
000002d3: POP
000002d4: SWAP1
000002d5: DUP1
000002d6: MLOAD
000002d7: SWAP1
000002d8: PUSH1 0x20
000002da: ADD
000002db: SWAP1
000002dc: DUP3
000002dd: DUP1
000002de: SLOAD
000002df: PUSH1 0x01
000002e1: DUP2
000002e2: PUSH1 0x01
000002e4: AND
000002e5: ISZERO
000002e6: PUSH2 0x0100
000002e9: MUL
000002ea: SUB
000002eb: AND
000002ec: PUSH1 0x02
000002ee: SWAP1
000002ef: DIV
000002f0: SWAP1
000002f1: PUSH1 0x00
000002f3: MSTORE
000002f4: PUSH1 0x20
000002f6: PUSH1 0x00
000002f8: KECCAK256
000002f9: SWAP1
000002fa: PUSH1 0x1f
000002fc: ADD
000002fd: PUSH1 0x20
000002ff: SWAP1
00000300: DIV
00000301: DUP2
00000302: ADD
00000303: SWAP3
00000304: DUP3
00000305: PUSH1 0x1f
00000307: LT
00000308: PUSH2 0x0334
0000030b: JUMPI
0000030c: DUP1
0000030d: MLOAD
0000030e: PUSH1 0xff
00000310: NOT
00000311: AND
00000312: DUP4
00000313: DUP1
00000314: ADD
00000315: OR
00000316: DUP6
00000317: SSTORE
00000318: JUMPDEST
00000319: POP
0000031a: PUSH2 0x03c9
0000031d: SWAP3
0000031e: SWAP2
0000031f: POP
00000320: JUMPDEST
00000321: DUP1
00000322: DUP3
00000323: GT
00000324: ISZERO
00000325: PUSH2 0x03ce
00000328: JUMPI
00000329: PUSH1 0x00
0000032b: DUP2
0000032c: SSTORE
0000032d: PUSH1 0x01
0000032f: ADD
00000330: PUSH2 0x0320
00000333: JUMP
00000334: JUMPDEST
00000335: DUP3
00000336: DUP1
00000337: ADD
00000338: PUSH1 0x01
0000033a: ADD
0000033b: DUP6
0000033c: SSTORE
0000033d: DUP3
0000033e: ISZERO
0000033f: PUSH2 0x0318
00000342: JUMPI
00000343: SWAP2
00000344: DUP3
00000345: ADD
00000346: JUMPDEST
00000347: DUP3
00000348: DUP2
00000349: GT
0000034a: ISZERO
0000034b: PUSH2 0x0318
0000034e: JUMPI
0000034f: DUP3
00000350: MLOAD
00000351: DUP3
00000352: PUSH1 0x00
00000354: POP
00000355: SSTORE
00000356: SWAP2
00000357: PUSH1 0x20
00000359: ADD
0000035a: SWAP2
0000035b: SWAP1
0000035c: PUSH1 0x01
0000035e: ADD
0000035f: SWAP1
00000360: PUSH2 0x0346
00000363: JUMP
00000364: JUMPDEST
00000365: PUSH1 0x03
00000367: SLOAD
00000368: SWAP1
00000369: SWAP3
0000036a: POP
0000036b: SWAP1
0000036c: POP
0000036d: JUMPDEST
0000036e: PUSH1 0x02
00000370: SLOAD
00000371: DUP2
00000372: LT
00000373: ISZERO
00000374: PUSH2 0x03c9
00000377: JUMPI
00000378: PUSH1 0x64
0000037a: PUSH1 0x02
0000037c: PUSH1 0x00
0000037e: POP
0000037f: DUP3
00000380: DUP2
00000381: SLOAD
00000382: DUP2
00000383: LT
00000384: ISZERO
00000385: PUSH2 0x0002
00000388: JUMPI
00000389: PUSH1 0x00
0000038b: SWAP2
0000038c: SWAP1
0000038d: SWAP2
0000038e: MSTORE
0000038f: PUSH1 0x05
00000391: SLOAD
00000392: PUSH1 0x04
00000394: SWAP2
00000395: SWAP1
00000396: SWAP2
00000397: MUL
00000398: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5acf
000003b9: ADD
000003ba: SLOAD
000003bb: SWAP2
000003bc: SWAP1
000003bd: SWAP2
000003be: DIV
000003bf: SWAP4
000003c0: POP
000003c1: DUP4
000003c2: SWAP1
000003c3: LT
000003c4: ISZERO
000003c5: PUSH2 0x06b3
000003c8: JUMPI
000003c9: JUMPDEST
000003ca: POP
000003cb: POP
000003cc: POP
000003cd: JUMP
000003ce: JUMPDEST
000003cf: POP
000003d0: SWAP1
000003d1: JUMP
000003d2: JUMPDEST
000003d3: PUSH1 0x05
000003d5: DUP1
000003d6: SLOAD
000003d7: CALLVALUE
000003d8: ADD
000003d9: SWAP1
000003da: SSTORE
000003db: JUMP
000003dc: JUMPDEST
000003dd: POP
000003de: POP
000003df: POP
000003e0: SWAP2
000003e1: SWAP1
000003e2: SWAP1
000003e3: PUSH1 0x00
000003e5: MSTORE
000003e6: PUSH1 0x20
000003e8: PUSH1 0x00
000003ea: KECCAK256
000003eb: SWAP1
000003ec: PUSH1 0x04
000003ee: MUL
000003ef: ADD
000003f0: PUSH1 0x00
000003f2: PUSH1 0x80
000003f4: PUSH1 0x40
000003f6: MLOAD
000003f7: SWAP1
000003f8: DUP2
000003f9: ADD
000003fa: PUSH1 0x40
000003fc: MSTORE
000003fd: DUP1
000003fe: CALLER
000003ff: DUP2
00000400: MSTORE
00000401: PUSH1 0x20
00000403: ADD
00000404: CALLVALUE
00000405: DUP2
00000406: MSTORE
00000407: PUSH1 0x20
00000409: ADD
0000040a: PUSH2 0x0411
0000040d: PUSH2 0x025e
00000410: JUMP
00000411: JUMPDEST
00000412: DUP2
00000413: MSTORE
00000414: PUSH1 0x20
00000416: ADD
00000417: PUSH2 0x0432
0000041a: PUSH1 0x00
0000041c: PUSH8 0x0de0b6b3a7640000
00000425: CALLVALUE
00000426: GT
00000427: PUSH2 0x06fb
0000042a: JUMPI
0000042b: POP
0000042c: PUSH1 0x6e
0000042e: PUSH2 0x0265
00000431: JUMP
00000432: JUMPDEST
00000433: SWAP1
00000434: MSTORE
00000435: DUP1
00000436: MLOAD
00000437: DUP4
00000438: SLOAD
00000439: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000044e: NOT
0000044f: AND
00000450: OR
00000451: DUP4
00000452: SSTORE
00000453: PUSH1 0x20
00000455: DUP2
00000456: ADD
00000457: MLOAD
00000458: PUSH1 0x01
0000045a: DUP5
0000045b: ADD
0000045c: SSTORE
0000045d: PUSH1 0x40
0000045f: DUP2
00000460: DUP2
00000461: ADD
00000462: MLOAD
00000463: PUSH1 0x02
00000465: DUP6
00000466: ADD
00000467: SSTORE
00000468: PUSH1 0x60
0000046a: SWAP2
0000046b: SWAP1
0000046c: SWAP2
0000046d: ADD
0000046e: MLOAD
0000046f: PUSH1 0x03
00000471: SWAP4
00000472: SWAP1
00000473: SWAP4
00000474: ADD
00000475: DUP1
00000476: SLOAD
00000477: PUSH1 0xff
00000479: NOT
0000047a: AND
0000047b: SWAP1
0000047c: SWAP4
0000047d: OR
0000047e: SWAP1
0000047f: SWAP3
00000480: SSTORE
00000481: POP
00000482: PUSH1 0x05
00000484: DUP1
00000485: SLOAD
00000486: PUSH1 0x64
00000488: PUSH1 0x63
0000048a: CALLVALUE
0000048b: SWAP1
0000048c: DUP2
0000048d: MUL
0000048e: DUP3
0000048f: SWAP1
00000490: DIV
00000491: SWAP1
00000492: SWAP3
00000493: ADD
00000494: SWAP1
00000495: SWAP3
00000496: SSTORE
00000497: PUSH1 0x04
00000499: SLOAD
0000049a: SWAP3
0000049b: MLOAD
0000049c: PUSH1 0x01
0000049e: PUSH1 0xa0
000004a0: PUSH1 0x02
000004a2: EXP
000004a3: SUB
000004a4: SWAP1
000004a5: SWAP4
000004a6: AND
000004a7: SWAP4
000004a8: POP
000004a9: PUSH1 0x00
000004ab: SWAP3
000004ac: SWAP2
000004ad: SWAP1
000004ae: DIV
000004af: SWAP1
000004b0: DUP3
000004b1: DUP2
000004b2: DUP2
000004b3: DUP2
000004b4: DUP6
000004b5: DUP9
000004b6: DUP4
000004b7: CALL
000004b8: POP
000004b9: POP
000004ba: PUSH1 0x40
000004bc: DUP1
000004bd: MLOAD
000004be: CALLER
000004bf: PUSH1 0x01
000004c1: PUSH1 0xa0
000004c3: PUSH1 0x02
000004c5: EXP
000004c6: SUB
000004c7: AND
000004c8: DUP2
000004c9: MSTORE
000004ca: CALLVALUE
000004cb: PUSH1 0x20
000004cd: DUP3
000004ce: ADD
000004cf: MSTORE
000004d0: DUP2
000004d1: MLOAD
000004d2: PUSH32 0xd90d253a9de34d2fdd5a75ae49ea17fcb43af32fc8ea08cc6d2341991dd3872e
000004f3: SWAP6
000004f4: POP
000004f5: SWAP1
000004f6: DUP2
000004f7: SWAP1
000004f8: SUB
000004f9: SWAP1
000004fa: SWAP2
000004fb: ADD
000004fc: SWAP3
000004fd: POP
000004fe: SWAP1
000004ff: POP
00000500: LOG1
00000501: JUMP
00000502: JUMPDEST
00000503: PUSH1 0x00
00000505: PUSH1 0x02
00000507: PUSH1 0x00
00000509: POP
0000050a: DUP3
0000050b: DUP2
0000050c: SLOAD
0000050d: DUP2
0000050e: LT
0000050f: ISZERO
00000510: PUSH2 0x0002
00000513: JUMPI
00000514: POP
00000515: DUP2
00000516: MSTORE
00000517: PUSH1 0x04
00000519: DUP3
0000051a: MUL
0000051b: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ad1
0000053c: ADD
0000053d: SLOAD
0000053e: PUSH1 0xff
00000540: AND
00000541: GT
00000542: PUSH2 0x054b
00000545: JUMPI
00000546: PUSH1 0x03
00000548: DUP2
00000549: SWAP1
0000054a: SSTORE
0000054b: JUMPDEST
0000054c: PUSH1 0x02
0000054e: DUP1
0000054f: SLOAD
00000550: DUP3
00000551: SWAP1
00000552: DUP2
00000553: LT
00000554: ISZERO
00000555: PUSH2 0x0002
00000558: JUMPI
00000559: POP
0000055a: PUSH1 0x00
0000055c: SWAP1
0000055d: DUP2
0000055e: MSTORE
0000055f: PUSH1 0x40
00000561: MLOAD
00000562: PUSH1 0x04
00000564: DUP4
00000565: MUL
00000566: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ace
00000587: ADD
00000588: SLOAD
00000589: PUSH1 0x01
0000058b: PUSH1 0xa0
0000058d: PUSH1 0x02
0000058f: EXP
00000590: SUB
00000591: AND
00000592: SWAP2
00000593: SWAP1
00000594: DUP6
00000595: SWAP1
00000596: DUP3
00000597: DUP2
00000598: DUP2
00000599: DUP2
0000059a: DUP6
0000059b: DUP9
0000059c: DUP4
0000059d: CALL
0000059e: SWAP4
0000059f: POP
000005a0: POP
000005a1: POP
000005a2: POP
000005a3: POP
000005a4: DUP2
000005a5: PUSH1 0x02
000005a7: PUSH1 0x00
000005a9: POP
000005aa: DUP3
000005ab: DUP2
000005ac: SLOAD
000005ad: DUP2
000005ae: LT
000005af: ISZERO
000005b0: PUSH2 0x0002
000005b3: JUMPI
000005b4: PUSH1 0x00
000005b6: DUP3
000005b7: SWAP1
000005b8: MSTORE
000005b9: PUSH1 0x04
000005bb: DUP2
000005bc: MUL
000005bd: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ad0
000005de: ADD
000005df: SWAP3
000005e0: SWAP1
000005e1: SWAP3
000005e2: SSTORE
000005e3: DUP1
000005e4: SLOAD
000005e5: PUSH1 0x01
000005e7: SWAP3
000005e8: POP
000005e9: DUP4
000005ea: SWAP1
000005eb: DUP2
000005ec: LT
000005ed: ISZERO
000005ee: PUSH2 0x0002
000005f1: JUMPI
000005f2: PUSH1 0x04
000005f4: DUP2
000005f5: MUL
000005f6: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ad1
00000617: ADD
00000618: DUP1
00000619: SLOAD
0000061a: PUSH1 0xff
0000061c: NOT
0000061d: DUP2
0000061e: AND
0000061f: PUSH1 0xff
00000621: SWAP1
00000622: SWAP2
00000623: AND
00000624: PUSH1 0x00
00000626: NOT
00000627: ADD
00000628: OR
00000629: SWAP1
0000062a: SSTORE
0000062b: PUSH1 0x05
0000062d: DUP1
0000062e: SLOAD
0000062f: DUP8
00000630: SWAP1
00000631: SUB
00000632: SWAP1
00000633: SSTORE
00000634: DUP2
00000635: SLOAD
00000636: PUSH32 0x5afeca38b2064c23a692c4cf353015d80ab3ecc417b4f893f372690c11fbd9a6
00000657: SWAP4
00000658: POP
00000659: DUP2
0000065a: LT
0000065b: ISZERO
0000065c: PUSH2 0x0002
0000065f: JUMPI
00000660: POP
00000661: POP
00000662: PUSH1 0x04
00000664: DUP3
00000665: MUL
00000666: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ace
00000687: ADD
00000688: SLOAD
00000689: PUSH1 0x40
0000068b: DUP1
0000068c: MLOAD
0000068d: PUSH1 0x01
0000068f: PUSH1 0xa0
00000691: PUSH1 0x02
00000693: EXP
00000694: SUB
00000695: SWAP3
00000696: SWAP1
00000697: SWAP3
00000698: AND
00000699: DUP3
0000069a: MSTORE
0000069b: PUSH1 0x20
0000069d: DUP3
0000069e: ADD
0000069f: DUP7
000006a0: SWAP1
000006a1: MSTORE
000006a2: DUP1
000006a3: MLOAD
000006a4: SWAP2
000006a5: DUP3
000006a6: SWAP1
000006a7: SUB
000006a8: ADD
000006a9: SWAP1
000006aa: LOG1
000006ab: JUMPDEST
000006ac: PUSH1 0x01
000006ae: ADD
000006af: PUSH2 0x036d
000006b2: JUMP
000006b3: JUMPDEST
000006b4: DUP2
000006b5: PUSH1 0x02
000006b7: PUSH1 0x00
000006b9: POP
000006ba: DUP3
000006bb: DUP2
000006bc: SLOAD
000006bd: DUP2
000006be: LT
000006bf: ISZERO
000006c0: PUSH2 0x0002
000006c3: JUMPI
000006c4: POP
000006c5: PUSH1 0x00
000006c7: MSTORE
000006c8: POP
000006c9: PUSH1 0x04
000006cb: DUP2
000006cc: MUL
000006cd: PUSH32 0x405787fa12a823e0f2b7631cc41b3ba8828b3321ca811111fa75cd3aa3bb5ad0
000006ee: ADD
000006ef: SLOAD
000006f0: DUP3
000006f1: SWAP1
000006f2: LT
000006f3: PUSH2 0x0502
000006f6: JUMPI
000006f7: PUSH2 0x06ab
000006fa: JUMP
000006fb: JUMPDEST
000006fc: PUSH8 0x8ac7230489e80000
00000705: CALLVALUE
00000706: GT
00000707: PUSH2 0x0712
0000070a: JUMPI
0000070b: POP
0000070c: PUSH1 0x78
0000070e: PUSH2 0x0265
00000711: JUMP
00000712: JUMPDEST
00000713: PUSH9 0x056bc75e2d63100000
0000071d: CALLVALUE
0000071e: GT
0000071f: PUSH2 0x072a
00000722: JUMPI
00000723: POP
00000724: PUSH1 0x82
00000726: PUSH2 0x0265
00000729: JUMP
0000072a: JUMPDEST
0000072b: POP
0000072c: PUSH1 0x00
0000072e: PUSH2 0x0265
00000731: JUMP
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x2aa7a43716f8eed77d5032c48e37aaab3717bd5be62c8afec40485bf992696ad
call_targets: 0xba69e7c96e9541863f009e713caf26d4ad2241a0
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x2aa7a43716f8eed77d5032c48e37aaab3717bd5be62c8afec40485bf992696ad",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xba69e7c96e9541863f009e713caf26d4ad2241a0"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x104b6704",
            "selector": "0x104b6704",
            "calldata_variants": [
                "0x104b6704",
                "0x104b67040000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3d750b28",
            "selector": "0x3d750b28",
            "calldata_variants": [
                "0x3d750b28",
                "0x3d750b280000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3feb5f2b",
            "selector": "0x3feb5f2b",
            "calldata_variants": [
                "0x3feb5f2b",
                "0x3feb5f2b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb3a2a6c0",
            "selector": "0xb3a2a6c0",
            "calldata_variants": [
                "0xb3a2a6c0",
                "0xb3a2a6c00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb69ef8a8",
            "selector": "0xb69ef8a8",
            "calldata_variants": [
                "0xb69ef8a8",
                "0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe8b5e51f",
            "selector": "0xe8b5e51f",
            "calldata_variants": [
                "0xe8b5e51f",
                "0xe8b5e51f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1207,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1437,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x2aa7a43716f8eed77d5032c48e37aaab3717bd5be62c8afec40485bf992696ad
call_targets: 0xba69e7c96e9541863f009e713caf26d4ad2241a0
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x2aa7a43716f8eed77d5032c48e37aaab3717bd5be62c8afec40485bf992696ad",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xba69e7c96e9541863f009e713caf26d4ad2241a0"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x104b6704",
            "selector": "0x104b6704",
            "calldata_variants": [
                "0x104b6704",
                "0x104b67040000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3d750b28",
            "selector": "0x3d750b28",
            "calldata_variants": [
                "0x3d750b28",
                "0x3d750b280000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3feb5f2b",
            "selector": "0x3feb5f2b",
            "calldata_variants": [
                "0x3feb5f2b",
                "0x3feb5f2b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb3a2a6c0",
            "selector": "0xb3a2a6c0",
            "calldata_variants": [
                "0xb3a2a6c0",
                "0xb3a2a6c00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb69ef8a8",
            "selector": "0xb69ef8a8",
            "calldata_variants": [
                "0xb69ef8a8",
                "0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe8b5e51f",
            "selector": "0xe8b5e51f",
            "calldata_variants": [
                "0xe8b5e51f",
                "0xe8b5e51f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1207,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1437,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}