TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-3b30-707d-a4f1-49ef5ce4d6ae

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
4353 artifact.fetch complete 1 / 3 3 months ago
4354 tool.cast_disasm complete 1 / 3 3 months ago
47348 analysis.bundle complete 1 / 3 1 week ago
47349 capability.graph complete 1 / 3 1 week ago
47350 detector.run complete 1 / 3 1 week ago
47351 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
6
EXT*/BALANCE
0
Total opcodes
1175
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0098
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x20bfec70
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00d3
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x244ded7a
00000025: EQ
00000026: PUSH2 0x00e9
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x63aea3e0
00000030: EQ
00000031: PUSH2 0x011d
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x6b3a87d2
0000003b: EQ
0000003c: PUSH2 0x01e3
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x7879e19e
00000046: EQ
00000047: PUSH2 0x01ea
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x85db2dda
00000051: EQ
00000052: PUSH2 0x0216
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0xa88c5ef7
0000005c: EQ
0000005d: PUSH2 0x0223
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0xc8edf65e
00000067: EQ
00000068: PUSH2 0x0254
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0xc9734ebd
00000072: EQ
00000073: PUSH2 0x02c9
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xd628e0a6
0000007d: EQ
0000007e: PUSH2 0x02d1
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xdc19266f
00000088: EQ
00000089: PUSH2 0x02d9
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xe0834ea4
00000093: EQ
00000094: PUSH2 0x02e1
00000097: JUMPI
00000098: JUMPDEST
00000099: PUSH2 0x02f4
0000009c: PUSH2 0x02f6
0000009f: CALLVALUE
000000a0: PUSH8 0x06f05b59d3b20000
000000a9: DUP2
000000aa: LT
000000ab: ISZERO
000000ac: PUSH2 0x0321
000000af: JUMPI
000000b0: PUSH1 0x40
000000b2: MLOAD
000000b3: PUSH1 0x01
000000b5: PUSH1 0xa0
000000b7: PUSH1 0x02
000000b9: EXP
000000ba: SUB
000000bb: CALLER
000000bc: AND
000000bd: SWAP1
000000be: PUSH1 0x00
000000c0: SWAP1
000000c1: DUP4
000000c2: SWAP1
000000c3: DUP3
000000c4: DUP2
000000c5: DUP2
000000c6: DUP2
000000c7: DUP6
000000c8: DUP9
000000c9: DUP4
000000ca: CALL
000000cb: POP
000000cc: POP
000000cd: POP
000000ce: POP
000000cf: POP
000000d0: JUMPDEST
000000d1: POP
000000d2: JUMP
000000d3: JUMPDEST
000000d4: PUSH1 0x05
000000d6: SLOAD
000000d7: JUMPDEST
000000d8: PUSH1 0x40
000000da: DUP1
000000db: MLOAD
000000dc: SWAP2
000000dd: DUP3
000000de: MSTORE
000000df: MLOAD
000000e0: SWAP1
000000e1: DUP2
000000e2: SWAP1
000000e3: SUB
000000e4: PUSH1 0x20
000000e6: ADD
000000e7: SWAP1
000000e8: RETURN
000000e9: JUMPDEST
000000ea: PUSH2 0x02f4
000000ed: PUSH1 0x04
000000ef: CALLDATALOAD
000000f0: PUSH1 0x08
000000f2: SLOAD
000000f3: PUSH1 0x01
000000f5: PUSH1 0xa0
000000f7: PUSH1 0x02
000000f9: EXP
000000fa: SUB
000000fb: SWAP1
000000fc: DUP2
000000fd: AND
000000fe: CALLER
000000ff: SWAP2
00000100: SWAP1
00000101: SWAP2
00000102: AND
00000103: EQ
00000104: ISZERO
00000105: PUSH2 0x00d0
00000108: JUMPI
00000109: PUSH1 0x08
0000010b: DUP1
0000010c: SLOAD
0000010d: PUSH1 0x01
0000010f: PUSH1 0xa0
00000111: PUSH1 0x02
00000113: EXP
00000114: SUB
00000115: NOT
00000116: AND
00000117: DUP3
00000118: OR
00000119: SWAP1
0000011a: SSTORE
0000011b: POP
0000011c: JUMP
0000011d: JUMPDEST
0000011e: PUSH2 0x02f8
00000121: PUSH1 0x04
00000123: CALLDATALOAD
00000124: PUSH1 0x09
00000126: SLOAD
00000127: PUSH1 0x00
00000129: SWAP1
0000012a: DUP2
0000012b: SWAP1
0000012c: DUP2
0000012d: SWAP1
0000012e: DUP5
0000012f: GT
00000130: PUSH2 0x01dc
00000133: JUMPI
00000134: PUSH1 0x09
00000136: DUP1
00000137: SLOAD
00000138: DUP6
00000139: SWAP1
0000013a: DUP2
0000013b: LT
0000013c: ISZERO
0000013d: PUSH2 0x0002
00000140: JUMPI
00000141: POP
00000142: DUP1
00000143: SLOAD
00000144: DUP2
00000145: DUP4
00000146: MSTORE
00000147: PUSH1 0x03
00000149: DUP7
0000014a: MUL
0000014b: PUSH32 0x6e1540171b6c0c960b71a7020d9f60077f6af931a8bbf590da0223dacf75c7af
0000016c: ADD
0000016d: SLOAD
0000016e: PUSH1 0x01
00000170: PUSH1 0xa0
00000172: PUSH1 0x02
00000174: EXP
00000175: SUB
00000176: AND
00000177: SWAP5
00000178: POP
00000179: PUSH1 0x01
0000017b: SWAP2
0000017c: SWAP1
0000017d: DUP7
0000017e: SWAP1
0000017f: DUP2
00000180: LT
00000181: ISZERO
00000182: PUSH2 0x0002
00000185: JUMPI
00000186: SWAP1
00000187: PUSH1 0x00
00000189: MSTORE
0000018a: PUSH1 0x20
0000018c: PUSH1 0x00
0000018e: KECCAK256
0000018f: SWAP1
00000190: PUSH1 0x03
00000192: MUL
00000193: ADD
00000194: PUSH1 0x00
00000196: POP
00000197: PUSH1 0x01
00000199: ADD
0000019a: SLOAD
0000019b: PUSH1 0x09
0000019d: DUP1
0000019e: SLOAD
0000019f: SWAP3
000001a0: SWAP1
000001a1: SWAP2
000001a2: DIV
000001a3: SWAP4
000001a4: POP
000001a5: SWAP1
000001a6: DUP6
000001a7: SWAP1
000001a8: DUP2
000001a9: LT
000001aa: ISZERO
000001ab: PUSH2 0x0002
000001ae: JUMPI
000001af: POP
000001b0: POP
000001b1: POP
000001b2: PUSH1 0x03
000001b4: DUP4
000001b5: MUL
000001b6: PUSH32 0x6e1540171b6c0c960b71a7020d9f60077f6af931a8bbf590da0223dacf75c7b1
000001d7: ADD
000001d8: SLOAD
000001d9: PUSH1 0xff
000001db: AND
000001dc: JUMPDEST
000001dd: SWAP2
000001de: SWAP4
000001df: SWAP1
000001e0: SWAP3
000001e1: POP
000001e2: JUMP
000001e3: JUMPDEST
000001e4: PUSH1 0x00
000001e6: PUSH2 0x00d7
000001e9: JUMP
000001ea: JUMPDEST
000001eb: PUSH2 0x02f4
000001ee: PUSH1 0x08
000001f0: SLOAD
000001f1: PUSH1 0x01
000001f3: PUSH1 0xa0
000001f5: PUSH1 0x02
000001f7: EXP
000001f8: SUB
000001f9: SWAP1
000001fa: DUP2
000001fb: AND
000001fc: CALLER
000001fd: SWAP2
000001fe: SWAP1
000001ff: SWAP2
00000200: AND
00000201: EQ
00000202: ISZERO
00000203: PUSH2 0x02f6
00000206: JUMPI
00000207: PUSH1 0x05
00000209: SLOAD
0000020a: PUSH1 0x00
0000020c: EQ
0000020d: ISZERO
0000020e: PUSH2 0x0427
00000211: JUMPI
00000212: PUSH2 0x0002
00000215: JUMP
00000216: JUMPDEST
00000217: PUSH1 0x09
00000219: SLOAD
0000021a: PUSH1 0x01
0000021c: SLOAD
0000021d: SWAP1
0000021e: SUB
0000021f: PUSH2 0x00d7
00000222: JUMP
00000223: JUMPDEST
00000224: PUSH2 0x00d7
00000227: PUSH1 0x09
00000229: DUP1
0000022a: SLOAD
0000022b: PUSH1 0x01
0000022d: DUP1
0000022e: SLOAD
0000022f: PUSH1 0x00
00000231: SWAP4
00000232: SWAP2
00000233: SWAP3
00000234: DUP2
00000235: LT
00000236: ISZERO
00000237: PUSH2 0x0002
0000023a: JUMPI
0000023b: SWAP3
0000023c: MSTORE
0000023d: POP
0000023e: PUSH1 0x03
00000240: MUL
00000241: PUSH1 0x00
00000243: DUP1
00000244: MLOAD
00000245: PUSH1 0x20
00000247: PUSH2 0x06e1
0000024a: DUP4
0000024b: CODECOPY
0000024c: DUP2
0000024d: MLOAD
0000024e: SWAP2
0000024f: MSTORE
00000250: ADD
00000251: SLOAD
00000252: SWAP1
00000253: JUMP
00000254: JUMPDEST
00000255: PUSH2 0x02f4
00000258: PUSH1 0x04
0000025a: CALLDATALOAD
0000025b: PUSH1 0x08
0000025d: SLOAD
0000025e: PUSH1 0x01
00000260: PUSH1 0xa0
00000262: PUSH1 0x02
00000264: EXP
00000265: SUB
00000266: SWAP1
00000267: DUP2
00000268: AND
00000269: CALLER
0000026a: SWAP2
0000026b: SWAP1
0000026c: SWAP2
0000026d: AND
0000026e: EQ
0000026f: ISZERO
00000270: PUSH2 0x00d0
00000273: JUMPI
00000274: PUSH1 0x05
00000276: SLOAD
00000277: PUSH1 0x00
00000279: EQ
0000027a: ISZERO
0000027b: PUSH2 0x0289
0000027e: JUMPI
0000027f: PUSH1 0x06
00000281: DUP1
00000282: SLOAD
00000283: PUSH1 0x00
00000285: NOT
00000286: ADD
00000287: SWAP1
00000288: SSTORE
00000289: JUMPDEST
0000028a: PUSH1 0x08
0000028c: SLOAD
0000028d: PUSH1 0x05
0000028f: SLOAD
00000290: PUSH1 0x40
00000292: MLOAD
00000293: PUSH1 0x01
00000295: PUSH1 0xa0
00000297: PUSH1 0x02
00000299: EXP
0000029a: SUB
0000029b: SWAP3
0000029c: SWAP1
0000029d: SWAP3
0000029e: AND
0000029f: SWAP2
000002a0: PUSH1 0x00
000002a2: SWAP2
000002a3: PUSH2 0x03e8
000002a6: SWAP1
000002a7: DIV
000002a8: DUP5
000002a9: MUL
000002aa: SWAP1
000002ab: DUP3
000002ac: DUP2
000002ad: DUP2
000002ae: DUP2
000002af: DUP6
000002b0: DUP9
000002b1: DUP4
000002b2: CALL
000002b3: POP
000002b4: POP
000002b5: PUSH1 0x05
000002b7: DUP1
000002b8: SLOAD
000002b9: PUSH2 0x03e8
000002bc: DUP2
000002bd: DIV
000002be: DUP7
000002bf: MUL
000002c0: SWAP1
000002c1: SUB
000002c2: SWAP1
000002c3: SSTORE
000002c4: POP
000002c5: POP
000002c6: POP
000002c7: POP
000002c8: JUMP
000002c9: JUMPDEST
000002ca: PUSH1 0x02
000002cc: SLOAD
000002cd: PUSH2 0x00d7
000002d0: JUMP
000002d1: JUMPDEST
000002d2: PUSH1 0x00
000002d4: SLOAD
000002d5: PUSH2 0x00d7
000002d8: JUMP
000002d9: JUMPDEST
000002da: PUSH1 0x09
000002dc: SLOAD
000002dd: PUSH2 0x00d7
000002e0: JUMP
000002e1: JUMPDEST
000002e2: PUSH1 0x00
000002e4: SLOAD
000002e5: PUSH8 0x0de0b6b3a7640000
000002ee: SWAP1
000002ef: DIV
000002f0: PUSH2 0x00d7
000002f3: JUMP
000002f4: JUMPDEST
000002f5: STOP
000002f6: JUMPDEST
000002f7: JUMP
000002f8: JUMPDEST
000002f9: PUSH1 0x40
000002fb: DUP1
000002fc: MLOAD
000002fd: PUSH1 0x01
000002ff: PUSH1 0xa0
00000301: PUSH1 0x02
00000303: EXP
00000304: SUB
00000305: SWAP5
00000306: SWAP1
00000307: SWAP5
00000308: AND
00000309: DUP5
0000030a: MSTORE
0000030b: PUSH1 0x20
0000030d: DUP5
0000030e: ADD
0000030f: SWAP3
00000310: SWAP1
00000311: SWAP3
00000312: MSTORE
00000313: DUP3
00000314: DUP3
00000315: ADD
00000316: MSTORE
00000317: MLOAD
00000318: SWAP1
00000319: DUP2
0000031a: SWAP1
0000031b: SUB
0000031c: PUSH1 0x60
0000031e: ADD
0000031f: SWAP1
00000320: RETURN
00000321: JUMPDEST
00000322: PUSH9 0x01158e460913d00000
0000032c: CALLVALUE
0000032d: GT
0000032e: ISZERO
0000032f: PUSH2 0x036b
00000332: JUMPI
00000333: PUSH1 0x40
00000335: MLOAD
00000336: PUSH1 0x01
00000338: PUSH1 0xa0
0000033a: PUSH1 0x02
0000033c: EXP
0000033d: SUB
0000033e: CALLER
0000033f: AND
00000340: SWAP1
00000341: PUSH1 0x00
00000343: SWAP1
00000344: PUSH9 0x01158e460913cfffff
0000034e: NOT
0000034f: CALLVALUE
00000350: ADD
00000351: SWAP1
00000352: DUP3
00000353: DUP2
00000354: DUP2
00000355: DUP2
00000356: DUP6
00000357: DUP9
00000358: DUP4
00000359: CALL
0000035a: POP
0000035b: PUSH9 0x01158e460913d00000
00000365: SWAP5
00000366: POP
00000367: POP
00000368: POP
00000369: POP
0000036a: POP
0000036b: JUMPDEST
0000036c: PUSH2 0x00d0
0000036f: DUP2
00000370: PUSH1 0x04
00000372: SLOAD
00000373: PUSH1 0x00
00000375: DUP1
00000376: SLOAD
00000377: PUSH8 0x0de0b6b3a7640000
00000380: SWAP1
00000381: LT
00000382: DUP1
00000383: ISZERO
00000384: PUSH2 0x0390
00000387: JUMPI
00000388: POP
00000389: PUSH1 0x09
0000038b: SLOAD
0000038c: PUSH1 0x01
0000038e: SWAP1
0000038f: GT
00000390: JUMPDEST
00000391: ISZERO
00000392: PUSH2 0x039d
00000395: JUMPI
00000396: PUSH1 0x64
00000398: SWAP2
00000399: SWAP1
0000039a: SWAP2
0000039b: ADD
0000039c: SWAP1
0000039d: JUMPDEST
0000039e: PUSH1 0x09
000003a0: SLOAD
000003a1: PUSH1 0x0a
000003a3: SWAP1
000003a4: MOD
000003a5: PUSH1 0x00
000003a7: EQ
000003a8: DUP1
000003a9: ISZERO
000003aa: PUSH2 0x03b6
000003ad: JUMPI
000003ae: POP
000003af: PUSH1 0x09
000003b1: SLOAD
000003b2: PUSH1 0x01
000003b4: SWAP1
000003b5: GT
000003b6: JUMPDEST
000003b7: ISZERO
000003b8: PUSH2 0x03c3
000003bb: JUMPI
000003bc: PUSH1 0x64
000003be: SWAP2
000003bf: SWAP1
000003c0: SWAP2
000003c1: ADD
000003c2: SWAP1
000003c3: JUMPDEST
000003c4: PUSH1 0x09
000003c6: DUP1
000003c7: SLOAD
000003c8: PUSH1 0x01
000003ca: DUP2
000003cb: ADD
000003cc: DUP1
000003cd: DUP4
000003ce: SSTORE
000003cf: DUP3
000003d0: DUP2
000003d1: DUP4
000003d2: DUP1
000003d3: ISZERO
000003d4: DUP3
000003d5: SWAP1
000003d6: GT
000003d7: PUSH2 0x045c
000003da: JUMPI
000003db: PUSH1 0x03
000003dd: MUL
000003de: DUP2
000003df: PUSH1 0x03
000003e1: MUL
000003e2: DUP4
000003e3: PUSH1 0x00
000003e5: MSTORE
000003e6: PUSH1 0x20
000003e8: PUSH1 0x00
000003ea: KECCAK256
000003eb: SWAP2
000003ec: DUP3
000003ed: ADD
000003ee: SWAP2
000003ef: ADD
000003f0: PUSH2 0x045c
000003f3: SWAP2
000003f4: SWAP1
000003f5: JUMPDEST
000003f6: DUP1
000003f7: DUP3
000003f8: GT
000003f9: ISZERO
000003fa: PUSH2 0x06d8
000003fd: JUMPI
000003fe: DUP1
000003ff: SLOAD
00000400: PUSH1 0x01
00000402: PUSH1 0xa0
00000404: PUSH1 0x02
00000406: EXP
00000407: SUB
00000408: NOT
00000409: AND
0000040a: DUP2
0000040b: SSTORE
0000040c: PUSH1 0x00
0000040e: PUSH1 0x01
00000410: DUP3
00000411: ADD
00000412: SWAP1
00000413: DUP2
00000414: SSTORE
00000415: PUSH1 0x02
00000417: SWAP2
00000418: SWAP1
00000419: SWAP2
0000041a: ADD
0000041b: DUP1
0000041c: SLOAD
0000041d: PUSH1 0xff
0000041f: NOT
00000420: AND
00000421: SWAP1
00000422: SSTORE
00000423: PUSH2 0x03f5
00000426: JUMP
00000427: JUMPDEST
00000428: PUSH1 0x08
0000042a: SLOAD
0000042b: PUSH1 0x05
0000042d: SLOAD
0000042e: PUSH1 0x40
00000430: MLOAD
00000431: PUSH1 0x01
00000433: PUSH1 0xa0
00000435: PUSH1 0x02
00000437: EXP
00000438: SUB
00000439: SWAP3
0000043a: SWAP1
0000043b: SWAP3
0000043c: AND
0000043d: SWAP2
0000043e: PUSH1 0x00
00000440: SWAP2
00000441: SWAP1
00000442: DUP3
00000443: DUP2
00000444: DUP2
00000445: DUP2
00000446: DUP6
00000447: DUP9
00000448: DUP4
00000449: CALL
0000044a: POP
0000044b: POP
0000044c: PUSH1 0x06
0000044e: DUP1
0000044f: SLOAD
00000450: PUSH1 0x00
00000452: NOT
00000453: ADD
00000454: SWAP1
00000455: SSTORE
00000456: POP
00000457: PUSH1 0x05
00000459: SSTORE
0000045a: POP
0000045b: JUMP
0000045c: JUMPDEST
0000045d: POP
0000045e: POP
0000045f: POP
00000460: PUSH1 0x00
00000462: SWAP3
00000463: DUP4
00000464: MSTORE
00000465: POP
00000466: PUSH1 0x40
00000468: DUP1
00000469: MLOAD
0000046a: PUSH1 0x20
0000046c: DUP1
0000046d: DUP6
0000046e: KECCAK256
0000046f: PUSH1 0x60
00000471: DUP4
00000472: ADD
00000473: DUP5
00000474: MSTORE
00000475: CALLER
00000476: DUP1
00000477: DUP5
00000478: MSTORE
00000479: PUSH2 0x03e8
0000047c: DUP10
0000047d: DUP12
0000047e: MUL
0000047f: DUP2
00000480: SWAP1
00000481: DIV
00000482: SWAP4
00000483: DUP6
00000484: ADD
00000485: DUP5
00000486: SWAP1
00000487: MSTORE
00000488: SWAP4
00000489: SWAP1
0000048a: SWAP5
0000048b: ADD
0000048c: DUP7
0000048d: SWAP1
0000048e: MSTORE
0000048f: PUSH1 0x03
00000491: SWAP5
00000492: DUP6
00000493: MUL
00000494: ADD
00000495: DUP1
00000496: SLOAD
00000497: PUSH1 0x01
00000499: PUSH1 0xa0
0000049b: PUSH1 0x02
0000049d: EXP
0000049e: SUB
0000049f: NOT
000004a0: AND
000004a1: SWAP1
000004a2: SWAP4
000004a3: OR
000004a4: DUP4
000004a5: SSTORE
000004a6: PUSH1 0x01
000004a8: DUP4
000004a9: ADD
000004aa: SSTORE
000004ab: PUSH1 0x02
000004ad: SWAP2
000004ae: SWAP1
000004af: SWAP2
000004b0: ADD
000004b1: DUP1
000004b2: SLOAD
000004b3: PUSH1 0xff
000004b5: NOT
000004b6: AND
000004b7: SWAP1
000004b8: SSTORE
000004b9: PUSH1 0x07
000004bb: SLOAD
000004bc: DUP3
000004bd: SLOAD
000004be: DUP8
000004bf: DUP3
000004c0: MUL
000004c1: DUP4
000004c2: SWAP1
000004c3: DIV
000004c4: ADD
000004c5: SWAP1
000004c6: SWAP3
000004c7: SSTORE
000004c8: PUSH1 0x06
000004ca: SLOAD
000004cb: PUSH1 0x05
000004cd: DUP1
000004ce: SLOAD
000004cf: DUP9
000004d0: DUP4
000004d1: MUL
000004d2: DUP5
000004d3: SWAP1
000004d4: DIV
000004d5: ADD
000004d6: SWAP1
000004d7: SSTORE
000004d8: DUP4
000004d9: SLOAD
000004da: SWAP3
000004db: ADD
000004dc: DUP2
000004dd: SUB
000004de: DUP7
000004df: MUL
000004e0: DIV
000004e1: ADD
000004e2: SWAP1
000004e3: SSTORE
000004e4: PUSH8 0x0de0b6b3a7640000
000004ed: DUP4
000004ee: GT
000004ef: DUP1
000004f0: ISZERO
000004f1: PUSH2 0x0523
000004f4: JUMPI
000004f5: POP
000004f6: PUSH1 0x01
000004f8: SLOAD
000004f9: PUSH1 0x09
000004fb: DUP1
000004fc: SLOAD
000004fd: SWAP1
000004fe: SWAP2
000004ff: SWAP1
00000500: DUP2
00000501: LT
00000502: ISZERO
00000503: PUSH2 0x0002
00000506: JUMPI
00000507: PUSH1 0x00
00000509: SWAP2
0000050a: SWAP1
0000050b: SWAP2
0000050c: MSTORE
0000050d: PUSH1 0x03
0000050f: MUL
00000510: PUSH1 0x00
00000512: DUP1
00000513: MLOAD
00000514: PUSH1 0x20
00000516: PUSH2 0x06e1
00000519: DUP4
0000051a: CODECOPY
0000051b: DUP2
0000051c: MLOAD
0000051d: SWAP2
0000051e: MSTORE
0000051f: ADD
00000520: SLOAD
00000521: DUP4
00000522: GT
00000523: JUMPDEST
00000524: ISZERO
00000525: PUSH2 0x058c
00000528: JUMPI
00000529: PUSH1 0x02
0000052b: SLOAD
0000052c: PUSH1 0x64
0000052e: TIMESTAMP
0000052f: DUP1
00000530: DUP3
00000531: MUL
00000532: DUP3
00000533: SWAP1
00000534: DIV
00000535: PUSH1 0x03
00000537: NUMBER
00000538: SWAP1
00000539: DUP2
0000053a: DIV
0000053b: PUSH2 0x012c
0000053e: DUP5
0000053f: MOD
00000540: ADD
00000541: SWAP5
00000542: SWAP1
00000543: SWAP5
00000544: ADD
00000545: PUSH1 0x05
00000547: DUP4
00000548: MOD
00000549: SWAP5
0000054a: SWAP1
0000054b: SWAP3
0000054c: MUL
0000054d: SWAP4
0000054e: SWAP1
0000054f: SWAP4
00000550: DIV
00000551: ADD
00000552: BLOCKHASH
00000553: SWAP2
00000554: SWAP1
00000555: SWAP2
00000556: DIV
00000557: MOD
00000558: PUSH1 0x01
0000055a: ADD
0000055b: SWAP1
0000055c: POP
0000055d: PUSH1 0x0a
0000055f: DUP2
00000560: MOD
00000561: PUSH1 0x00
00000563: EQ
00000564: ISZERO
00000565: PUSH2 0x058c
00000568: JUMPI
00000569: PUSH1 0x03
0000056b: SLOAD
0000056c: PUSH1 0x40
0000056e: MLOAD
0000056f: PUSH1 0x01
00000571: PUSH1 0xa0
00000573: PUSH1 0x02
00000575: EXP
00000576: SUB
00000577: CALLER
00000578: AND
00000579: SWAP2
0000057a: PUSH1 0x00
0000057c: SWAP2
0000057d: DUP3
0000057e: DUP2
0000057f: DUP2
00000580: DUP2
00000581: DUP6
00000582: DUP9
00000583: DUP4
00000584: CALL
00000585: POP
00000586: POP
00000587: POP
00000588: PUSH1 0x03
0000058a: SSTORE
0000058b: POP
0000058c: JUMPDEST
0000058d: JUMPDEST
0000058e: PUSH1 0x01
00000590: SLOAD
00000591: PUSH1 0x09
00000593: DUP1
00000594: SLOAD
00000595: SWAP1
00000596: SWAP2
00000597: SWAP1
00000598: DUP2
00000599: LT
0000059a: ISZERO
0000059b: PUSH2 0x0002
0000059e: JUMPI
0000059f: PUSH1 0x00
000005a1: SWAP2
000005a2: DUP3
000005a3: MSTORE
000005a4: PUSH1 0x03
000005a6: MUL
000005a7: PUSH32 0x6e1540171b6c0c960b71a7020d9f60077f6af931a8bbf590da0223dacf75c7af
000005c8: ADD
000005c9: SWAP1
000005ca: POP
000005cb: PUSH1 0x01
000005cd: ADD
000005ce: SLOAD
000005cf: PUSH1 0x00
000005d1: SLOAD
000005d2: GT
000005d3: ISZERO
000005d4: PUSH2 0x06dc
000005d7: JUMPI
000005d8: PUSH1 0x01
000005da: SLOAD
000005db: PUSH1 0x09
000005dd: DUP1
000005de: SLOAD
000005df: SWAP1
000005e0: SWAP2
000005e1: SWAP1
000005e2: DUP2
000005e3: LT
000005e4: ISZERO
000005e5: PUSH2 0x0002
000005e8: JUMPI
000005e9: PUSH1 0x03
000005eb: MUL
000005ec: PUSH1 0x00
000005ee: DUP1
000005ef: MLOAD
000005f0: PUSH1 0x20
000005f2: PUSH2 0x06e1
000005f5: DUP4
000005f6: CODECOPY
000005f7: DUP2
000005f8: MLOAD
000005f9: SWAP2
000005fa: MSTORE
000005fb: ADD
000005fc: SLOAD
000005fd: PUSH1 0x02
000005ff: SSTORE
00000600: PUSH1 0x01
00000602: SLOAD
00000603: DUP2
00000604: SLOAD
00000605: DUP2
00000606: LT
00000607: ISZERO
00000608: PUSH2 0x0002
0000060b: JUMPI
0000060c: PUSH1 0x02
0000060e: SLOAD
0000060f: PUSH1 0x40
00000611: MLOAD
00000612: PUSH1 0x03
00000614: SWAP3
00000615: SWAP1
00000616: SWAP3
00000617: MUL
00000618: PUSH32 0x6e1540171b6c0c960b71a7020d9f60077f6af931a8bbf590da0223dacf75c7af
00000639: ADD
0000063a: SLOAD
0000063b: PUSH1 0x01
0000063d: PUSH1 0xa0
0000063f: PUSH1 0x02
00000641: EXP
00000642: SUB
00000643: AND
00000644: SWAP3
00000645: POP
00000646: PUSH1 0x00
00000648: SWAP2
00000649: DUP3
0000064a: DUP2
0000064b: DUP2
0000064c: DUP2
0000064d: DUP6
0000064e: DUP9
0000064f: DUP4
00000650: CALL
00000651: SWAP4
00000652: POP
00000653: POP
00000654: POP
00000655: POP
00000656: POP
00000657: PUSH1 0x09
00000659: PUSH1 0x00
0000065b: POP
0000065c: PUSH1 0x01
0000065e: PUSH1 0x00
00000660: POP
00000661: SLOAD
00000662: DUP2
00000663: SLOAD
00000664: DUP2
00000665: LT
00000666: ISZERO
00000667: PUSH2 0x0002
0000066a: JUMPI
0000066b: PUSH1 0x00
0000066d: DUP3
0000066e: DUP2
0000066f: MSTORE
00000670: DUP1
00000671: SLOAD
00000672: PUSH1 0x03
00000674: SWAP3
00000675: SWAP1
00000676: SWAP3
00000677: MUL
00000678: PUSH1 0x00
0000067a: DUP1
0000067b: MLOAD
0000067c: PUSH1 0x20
0000067e: PUSH2 0x06e1
00000681: DUP4
00000682: CODECOPY
00000683: DUP2
00000684: MLOAD
00000685: SWAP2
00000686: MSTORE
00000687: ADD
00000688: SLOAD
00000689: SWAP1
0000068a: SWAP2
0000068b: SUB
0000068c: SWAP1
0000068d: SSTORE
0000068e: PUSH1 0x01
00000690: DUP1
00000691: SLOAD
00000692: DUP3
00000693: SLOAD
00000694: SWAP2
00000695: SWAP3
00000696: SWAP2
00000697: DUP2
00000698: LT
00000699: ISZERO
0000069a: PUSH2 0x0002
0000069d: JUMPI
0000069e: PUSH1 0x03
000006a0: MUL
000006a1: PUSH32 0x6e1540171b6c0c960b71a7020d9f60077f6af931a8bbf590da0223dacf75c7b1
000006c2: ADD
000006c3: DUP1
000006c4: SLOAD
000006c5: PUSH1 0xff
000006c7: NOT
000006c8: AND
000006c9: DUP4
000006ca: OR
000006cb: SWAP1
000006cc: SSTORE
000006cd: POP
000006ce: DUP1
000006cf: SLOAD
000006d0: DUP2
000006d1: ADD
000006d2: SWAP1
000006d3: SSTORE
000006d4: PUSH2 0x058d
000006d7: JUMP
000006d8: JUMPDEST
000006d9: POP
000006da: SWAP1
000006db: JUMP
000006dc: JUMPDEST
000006dd: POP
000006de: POP
000006df: POP
000006e0: JUMP
000006e1: PUSH15 0x1540171b6c0c960b71a7020d9f6007
000006f1: PUSH32
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x7ac647d2ebaccade75d312d9aed9496357b77646be00ea1857321a013e4bc021
call_targets: 0xcac337492149bdb66b088bf5914bedfbf78ccc18
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x7ac647d2ebaccade75d312d9aed9496357b77646be00ea1857321a013e4bc021",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xcac337492149bdb66b088bf5914bedfbf78ccc18"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x20bfec70",
            "selector": "0x20bfec70",
            "calldata_variants": [
                "0x20bfec70",
                "0x20bfec700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x244ded7a",
            "selector": "0x244ded7a",
            "calldata_variants": [
                "0x244ded7a",
                "0x244ded7a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x63aea3e0",
            "selector": "0x63aea3e0",
            "calldata_variants": [
                "0x63aea3e0",
                "0x63aea3e00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6b3a87d2",
            "selector": "0x6b3a87d2",
            "calldata_variants": [
                "0x6b3a87d2",
                "0x6b3a87d20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7879e19e",
            "selector": "0x7879e19e",
            "calldata_variants": [
                "0x7879e19e",
                "0x7879e19e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x85db2dda",
            "selector": "0x85db2dda",
            "calldata_variants": [
                "0x85db2dda",
                "0x85db2dda0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa88c5ef7",
            "selector": "0xa88c5ef7",
            "calldata_variants": [
                "0xa88c5ef7",
                "0xa88c5ef70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc8edf65e",
            "selector": "0xc8edf65e",
            "calldata_variants": [
                "0xc8edf65e",
                "0xc8edf65e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 202,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 690,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 857,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 6,
    "guards_detected": [],
    "untrusted_call_count": 6
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x7ac647d2ebaccade75d312d9aed9496357b77646be00ea1857321a013e4bc021
call_targets: 0xcac337492149bdb66b088bf5914bedfbf78ccc18
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x7ac647d2ebaccade75d312d9aed9496357b77646be00ea1857321a013e4bc021",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xcac337492149bdb66b088bf5914bedfbf78ccc18"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x20bfec70",
            "selector": "0x20bfec70",
            "calldata_variants": [
                "0x20bfec70",
                "0x20bfec700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x244ded7a",
            "selector": "0x244ded7a",
            "calldata_variants": [
                "0x244ded7a",
                "0x244ded7a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x63aea3e0",
            "selector": "0x63aea3e0",
            "calldata_variants": [
                "0x63aea3e0",
                "0x63aea3e00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6b3a87d2",
            "selector": "0x6b3a87d2",
            "calldata_variants": [
                "0x6b3a87d2",
                "0x6b3a87d20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7879e19e",
            "selector": "0x7879e19e",
            "calldata_variants": [
                "0x7879e19e",
                "0x7879e19e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x85db2dda",
            "selector": "0x85db2dda",
            "calldata_variants": [
                "0x85db2dda",
                "0x85db2dda0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa88c5ef7",
            "selector": "0xa88c5ef7",
            "calldata_variants": [
                "0xa88c5ef7",
                "0xa88c5ef70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc8edf65e",
            "selector": "0xc8edf65e",
            "calldata_variants": [
                "0xc8edf65e",
                "0xc8edf65e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 202,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 690,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 857,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 6,
    "guards_detected": []
}