019b3836-3a79-728d-a29b-69918085112f
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 4235 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 4236 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 47560 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 47561 | capability.graph | complete | 1 / 3 | 1 week ago |
| 47562 | detector.run | complete | 1 / 3 | 1 week ago |
| 47563 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0056 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x13af4035 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x0061 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x8da5cb5b 00000025: EQ 00000026: PUSH2 0x0096 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0xa2f9eac6 00000030: EQ 00000031: PUSH2 0x00a8 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0xa60f3588 0000003b: EQ 0000003c: PUSH2 0x0109 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0xb69ef8a8 00000046: EQ 00000047: PUSH2 0x0112 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xe97dcb62 00000051: EQ 00000052: PUSH2 0x011b 00000055: JUMPI 00000056: JUMPDEST 00000057: PUSH2 0x0153 0000005a: PUSH2 0x0155 0000005d: PUSH2 0x011f 00000060: JUMP 00000061: JUMPDEST 00000062: PUSH2 0x0153 00000065: PUSH1 0x04 00000067: CALLDATALOAD 00000068: PUSH1 0x03 0000006a: SLOAD 0000006b: PUSH1 0x01 0000006d: PUSH1 0xa0 0000006f: PUSH1 0x02 00000071: EXP 00000072: SUB 00000073: SWAP1 00000074: DUP2 00000075: AND 00000076: CALLER 00000077: SWAP2 00000078: SWAP1 00000079: SWAP2 0000007a: AND 0000007b: EQ 0000007c: ISZERO 0000007d: PUSH2 0x0093 00000080: JUMPI 00000081: PUSH1 0x03 00000083: DUP1 00000084: SLOAD 00000085: PUSH1 0x01 00000087: PUSH1 0xa0 00000089: PUSH1 0x02 0000008b: EXP 0000008c: SUB 0000008d: NOT 0000008e: AND 0000008f: DUP3 00000090: OR 00000091: SWAP1 00000092: SSTORE 00000093: JUMPDEST 00000094: POP 00000095: JUMP 00000096: JUMPDEST 00000097: PUSH2 0x0157 0000009a: PUSH1 0x03 0000009c: SLOAD 0000009d: PUSH1 0x01 0000009f: PUSH1 0xa0 000000a1: PUSH1 0x02 000000a3: EXP 000000a4: SUB 000000a5: AND 000000a6: DUP2 000000a7: JUMP 000000a8: JUMPDEST 000000a9: PUSH2 0x0174 000000ac: PUSH1 0x04 000000ae: CALLDATALOAD 000000af: PUSH1 0x00 000000b1: DUP1 000000b2: SLOAD 000000b3: DUP3 000000b4: SWAP1 000000b5: DUP2 000000b6: LT 000000b7: ISZERO 000000b8: PUSH2 0x0002 000000bb: JUMPI 000000bc: POP 000000bd: DUP1 000000be: MSTORE 000000bf: PUSH1 0x02 000000c1: MUL 000000c2: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 000000e3: DUP2 000000e4: ADD 000000e5: SLOAD 000000e6: PUSH1 0x00 000000e8: DUP1 000000e9: MLOAD 000000ea: PUSH1 0x20 000000ec: PUSH2 0x03aa 000000ef: DUP4 000000f0: CODECOPY 000000f1: DUP2 000000f2: MLOAD 000000f3: SWAP2 000000f4: MSTORE 000000f5: SWAP2 000000f6: SWAP1 000000f7: SWAP2 000000f8: ADD 000000f9: SLOAD 000000fa: PUSH1 0x01 000000fc: PUSH1 0xa0 000000fe: PUSH1 0x02 00000100: EXP 00000101: SUB 00000102: SWAP2 00000103: SWAP1 00000104: SWAP2 00000105: AND 00000106: SWAP1 00000107: DUP3 00000108: JUMP 00000109: JUMPDEST 0000010a: PUSH2 0x019a 0000010d: PUSH1 0x01 0000010f: SLOAD 00000110: DUP2 00000111: JUMP 00000112: JUMPDEST 00000113: PUSH2 0x019a 00000116: PUSH1 0x02 00000118: SLOAD 00000119: DUP2 0000011a: JUMP 0000011b: JUMPDEST 0000011c: PUSH2 0x0153 0000011f: JUMPDEST 00000120: PUSH1 0x00 00000122: PUSH1 0x00 00000124: PUSH1 0x00 00000126: PUSH1 0x00 00000128: CALLVALUE 00000129: LT 0000012a: ISZERO 0000012b: PUSH2 0x01ac 0000012e: JUMPI 0000012f: PUSH1 0x40 00000131: MLOAD 00000132: PUSH1 0x01 00000134: PUSH1 0xa0 00000136: PUSH1 0x02 00000138: EXP 00000139: SUB 0000013a: CALLER 0000013b: AND 0000013c: SWAP1 0000013d: DUP3 0000013e: SWAP1 0000013f: CALLVALUE 00000140: SWAP1 00000141: DUP3 00000142: DUP2 00000143: DUP2 00000144: DUP2 00000145: DUP6 00000146: DUP9 00000147: DUP4 00000148: CALL 00000149: POP 0000014a: POP 0000014b: POP 0000014c: POP 0000014d: POP 0000014e: JUMPDEST 0000014f: POP 00000150: POP 00000151: POP 00000152: JUMP 00000153: JUMPDEST 00000154: STOP 00000155: JUMPDEST 00000156: JUMP 00000157: JUMPDEST 00000158: PUSH1 0x40 0000015a: DUP1 0000015b: MLOAD 0000015c: PUSH1 0x01 0000015e: PUSH1 0xa0 00000160: PUSH1 0x02 00000162: EXP 00000163: SUB 00000164: SWAP3 00000165: SWAP1 00000166: SWAP3 00000167: AND 00000168: DUP3 00000169: MSTORE 0000016a: MLOAD 0000016b: SWAP1 0000016c: DUP2 0000016d: SWAP1 0000016e: SUB 0000016f: PUSH1 0x20 00000171: ADD 00000172: SWAP1 00000173: RETURN 00000174: JUMPDEST 00000175: PUSH1 0x40 00000177: MLOAD 00000178: DUP1 00000179: DUP4 0000017a: PUSH1 0x01 0000017c: PUSH1 0xa0 0000017e: PUSH1 0x02 00000180: EXP 00000181: SUB 00000182: AND 00000183: DUP2 00000184: MSTORE 00000185: PUSH1 0x20 00000187: ADD 00000188: DUP3 00000189: DUP2 0000018a: MSTORE 0000018b: PUSH1 0x20 0000018d: ADD 0000018e: SWAP3 0000018f: POP 00000190: POP 00000191: POP 00000192: PUSH1 0x40 00000194: MLOAD 00000195: DUP1 00000196: SWAP2 00000197: SUB 00000198: SWAP1 00000199: RETURN 0000019a: JUMPDEST 0000019b: PUSH1 0x40 0000019d: DUP1 0000019e: MLOAD 0000019f: SWAP2 000001a0: DUP3 000001a1: MSTORE 000001a2: MLOAD 000001a3: SWAP1 000001a4: DUP2 000001a5: SWAP1 000001a6: SUB 000001a7: PUSH1 0x20 000001a9: ADD 000001aa: SWAP1 000001ab: RETURN 000001ac: JUMPDEST 000001ad: PUSH9 0x02b5e3af16b1880000 000001b7: CALLVALUE 000001b8: GT 000001b9: ISZERO 000001ba: PUSH2 0x01fb 000001bd: JUMPI 000001be: PUSH1 0x40 000001c0: MLOAD 000001c1: PUSH1 0x01 000001c3: PUSH1 0xa0 000001c5: PUSH1 0x02 000001c7: EXP 000001c8: SUB 000001c9: CALLER 000001ca: AND 000001cb: SWAP1 000001cc: PUSH1 0x00 000001ce: SWAP1 000001cf: PUSH9 0x02b5e3af16b187ffff 000001d9: NOT 000001da: CALLVALUE 000001db: ADD 000001dc: SWAP1 000001dd: DUP3 000001de: DUP2 000001df: DUP2 000001e0: DUP2 000001e1: DUP6 000001e2: DUP9 000001e3: DUP4 000001e4: CALL 000001e5: POP 000001e6: PUSH9 0x02b5e3af16b1880000 000001f0: SWAP7 000001f1: POP 000001f2: PUSH2 0x01ff 000001f5: SWAP4 000001f6: POP 000001f7: POP 000001f8: POP 000001f9: POP 000001fa: JUMP 000001fb: JUMPDEST 000001fc: CALLVALUE 000001fd: SWAP3 000001fe: POP 000001ff: JUMPDEST 00000200: PUSH1 0x00 00000202: DUP1 00000203: SLOAD 00000204: PUSH1 0x01 00000206: DUP2 00000207: ADD 00000208: DUP1 00000209: DUP4 0000020a: SSTORE 0000020b: SWAP1 0000020c: SWAP4 0000020d: POP 0000020e: SWAP1 0000020f: DUP2 00000210: DUP5 00000211: DUP1 00000212: ISZERO 00000213: DUP3 00000214: SWAP1 00000215: GT 00000216: PUSH2 0x025a 00000219: JUMPI 0000021a: PUSH1 0x02 0000021c: MUL 0000021d: DUP2 0000021e: PUSH1 0x02 00000220: MUL 00000221: DUP4 00000222: PUSH1 0x00 00000224: MSTORE 00000225: PUSH1 0x20 00000227: PUSH1 0x00 00000229: KECCAK256 0000022a: SWAP2 0000022b: DUP3 0000022c: ADD 0000022d: SWAP2 0000022e: ADD 0000022f: PUSH2 0x025a 00000232: SWAP2 00000233: SWAP1 00000234: JUMPDEST 00000235: DUP1 00000236: DUP3 00000237: GT 00000238: ISZERO 00000239: PUSH2 0x03a6 0000023c: JUMPI 0000023d: DUP1 0000023e: SLOAD 0000023f: PUSH1 0x01 00000241: PUSH1 0xa0 00000243: PUSH1 0x02 00000245: EXP 00000246: SUB 00000247: NOT 00000248: AND 00000249: DUP2 0000024a: SSTORE 0000024b: PUSH1 0x00 0000024d: PUSH1 0x01 0000024f: SWAP2 00000250: SWAP1 00000251: SWAP2 00000252: ADD 00000253: SWAP1 00000254: DUP2 00000255: SSTORE 00000256: PUSH2 0x0234 00000259: JUMP 0000025a: JUMPDEST 0000025b: POP 0000025c: POP 0000025d: POP 0000025e: POP 0000025f: CALLER 00000260: PUSH1 0x00 00000262: PUSH1 0x00 00000264: POP 00000265: DUP4 00000266: DUP2 00000267: SLOAD 00000268: DUP2 00000269: LT 0000026a: ISZERO 0000026b: PUSH2 0x0002 0000026e: JUMPI 0000026f: DUP2 00000270: DUP1 00000271: MSTORE 00000272: PUSH1 0x02 00000274: MUL 00000275: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 00000296: ADD 00000297: DUP1 00000298: SLOAD 00000299: PUSH1 0x01 0000029b: PUSH1 0xa0 0000029d: PUSH1 0x02 0000029f: EXP 000002a0: SUB 000002a1: NOT 000002a2: AND 000002a3: SWAP1 000002a4: SWAP3 000002a5: OR 000002a6: SWAP1 000002a7: SWAP2 000002a8: SSTORE 000002a9: DUP1 000002aa: SLOAD 000002ab: DUP5 000002ac: SWAP2 000002ad: SWAP1 000002ae: DUP5 000002af: SWAP1 000002b0: DUP2 000002b1: LT 000002b2: ISZERO 000002b3: PUSH2 0x0002 000002b6: JUMPI 000002b7: PUSH1 0x02 000002b9: MUL 000002ba: PUSH1 0x00 000002bc: DUP1 000002bd: MLOAD 000002be: PUSH1 0x20 000002c0: PUSH2 0x03aa 000002c3: DUP4 000002c4: CODECOPY 000002c5: DUP2 000002c6: MLOAD 000002c7: SWAP2 000002c8: MSTORE 000002c9: ADD 000002ca: SWAP2 000002cb: SWAP1 000002cc: SWAP2 000002cd: SSTORE 000002ce: POP 000002cf: JUMPDEST 000002d0: PUSH1 0x01 000002d2: SLOAD 000002d3: PUSH1 0x00 000002d5: DUP1 000002d6: SLOAD 000002d7: PUSH1 0x64 000002d9: SWAP3 000002da: SWAP1 000002db: DUP2 000002dc: LT 000002dd: ISZERO 000002de: PUSH2 0x0002 000002e1: JUMPI 000002e2: SWAP1 000002e3: DUP1 000002e4: MSTORE 000002e5: PUSH1 0x02 000002e7: DUP1 000002e8: SLOAD 000002e9: SWAP2 000002ea: MUL 000002eb: PUSH1 0x00 000002ed: DUP1 000002ee: MLOAD 000002ef: PUSH1 0x20 000002f1: PUSH2 0x03aa 000002f4: DUP4 000002f5: CODECOPY 000002f6: DUP2 000002f7: MLOAD 000002f8: SWAP2 000002f9: MSTORE 000002fa: ADD 000002fb: SLOAD 000002fc: SWAP2 000002fd: SWAP1 000002fe: SWAP2 000002ff: DIV 00000300: PUSH1 0x96 00000302: MUL 00000303: SWAP1 00000304: GT 00000305: ISZERO 00000306: PUSH2 0x014e 00000309: JUMPI 0000030a: PUSH1 0x01 0000030c: SLOAD 0000030d: PUSH1 0x00 0000030f: DUP1 00000310: SLOAD 00000311: PUSH1 0x64 00000313: SWAP3 00000314: SWAP1 00000315: DUP2 00000316: LT 00000317: ISZERO 00000318: PUSH2 0x0002 0000031b: JUMPI 0000031c: PUSH1 0x01 0000031e: SLOAD 0000031f: DUP3 00000320: SLOAD 00000321: PUSH1 0x02 00000323: SWAP3 00000324: SWAP1 00000325: SWAP3 00000326: MUL 00000327: PUSH1 0x00 00000329: DUP1 0000032a: MLOAD 0000032b: PUSH1 0x20 0000032d: PUSH2 0x03aa 00000330: DUP4 00000331: CODECOPY 00000332: DUP2 00000333: MLOAD 00000334: SWAP2 00000335: MSTORE 00000336: ADD 00000337: SLOAD 00000338: SWAP4 00000339: SWAP1 0000033a: SWAP4 0000033b: DIV 0000033c: PUSH1 0x96 0000033e: MUL 0000033f: SWAP4 00000340: POP 00000341: SWAP1 00000342: SWAP2 00000343: SWAP1 00000344: DUP2 00000345: LT 00000346: ISZERO 00000347: PUSH2 0x0002 0000034a: JUMPI 0000034b: PUSH1 0x40 0000034d: MLOAD 0000034e: PUSH1 0x02 00000350: SWAP2 00000351: SWAP1 00000352: SWAP2 00000353: MUL 00000354: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 00000375: ADD 00000376: SLOAD 00000377: PUSH1 0x01 00000379: PUSH1 0xa0 0000037b: PUSH1 0x02 0000037d: EXP 0000037e: SUB 0000037f: AND 00000380: SWAP2 00000381: SWAP1 00000382: DUP4 00000383: SWAP1 00000384: DUP3 00000385: DUP2 00000386: DUP2 00000387: DUP2 00000388: DUP6 00000389: DUP9 0000038a: DUP4 0000038b: CALL 0000038c: POP 0000038d: POP 0000038e: PUSH1 0x02 00000390: DUP1 00000391: SLOAD 00000392: SWAP2 00000393: SWAP1 00000394: SWAP2 00000395: SUB 00000396: SWAP1 00000397: SSTORE 00000398: POP 00000399: POP 0000039a: PUSH1 0x01 0000039c: DUP1 0000039d: SLOAD 0000039e: DUP2 0000039f: ADD 000003a0: SWAP1 000003a1: SSTORE 000003a2: PUSH2 0x02cf 000003a5: JUMP 000003a6: JUMPDEST 000003a7: POP 000003a8: SWAP1 000003a9: JUMP 000003aa: UNKNOWN(0x29) 000003ab: UNKNOWN(0x0D) 000003ac: UNKNOWN(0xEC) 000003ad: UNKNOWN(0xD9) 000003ae: SLOAD 000003af: DUP12 000003b0: PUSH3 0xa8d603 000003b4: GASLIMIT 000003b5: UNKNOWN(0xA9) 000003b6: DUP9 000003b7: CODESIZE 000003b8: PUSH16 0xc84ba6bc95484008f6362f93160ef3e5 000003c9: PUSH5
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x854857f31a8b64725b0c42b0819f4590b5731da3624d6def2d4b14381d0099cd
call_targets:
0xf70ce1be9685b0cfb531bc712d3faace858b5bfb
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x854857f31a8b64725b0c42b0819f4590b5731da3624d6def2d4b14381d0099cd",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xf70ce1be9685b0cfb531bc712d3faace858b5bfb"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2f9eac6",
"selector": "0xa2f9eac6",
"calldata_variants": [
"0xa2f9eac6",
"0xa2f9eac60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb69ef8a8",
"selector": "0xb69ef8a8",
"calldata_variants": [
"0xb69ef8a8",
"0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 328,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 484,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 907,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 3,
"guards_detected": [],
"untrusted_call_count": 3
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x854857f31a8b64725b0c42b0819f4590b5731da3624d6def2d4b14381d0099cd
call_targets:
0xf70ce1be9685b0cfb531bc712d3faace858b5bfb
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x854857f31a8b64725b0c42b0819f4590b5731da3624d6def2d4b14381d0099cd",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xf70ce1be9685b0cfb531bc712d3faace858b5bfb"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa2f9eac6",
"selector": "0xa2f9eac6",
"calldata_variants": [
"0xa2f9eac6",
"0xa2f9eac60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb69ef8a8",
"selector": "0xb69ef8a8",
"calldata_variants": [
"0xb69ef8a8",
"0xb69ef8a80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 328,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 484,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 907,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 3,
"guards_detected": []
}
|