019b3836-3b67-7336-a287-3783fe21cc8d
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 4387 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 4388 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 47296 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 47297 | capability.graph | complete | 1 / 3 | 1 week ago |
| 47298 | detector.run | complete | 1 / 3 | 1 week ago |
| 47299 | validation.fork | complete | 1 / 3 | 1 week ago |
| 113967 | report.consolidate | complete | 1 / 6 | 1 week ago |
No slither job recorded yet.
OpenAI Codex v0.118.0 (research preview) -------- workdir: /tmp/codex-k4u6pv_m model: gpt-5.4 provider: openai approval: never sandbox: read-only reasoning effort: high reasoning summaries: none session id: 019d5cb5-b270-7010-b3a6-a1f3f0b125e2 -------- user You are a security auditor. You ONLY have runtime bytecode + analysis artifacts. You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary, evidence bundle, callsites, storage slots, and detector findings. Special cases when reasoning from bytecode (be explicit about uncertainty): - Selector inference is best-effort; missing selectors are common. - Fallback/receive paths may be the only entrypoints. - CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage. - Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative. - Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown. - Guard detection is heuristic; absence of guards does NOT mean unguarded. - Returndata checking is unknown unless explicitly shown in evidence. - Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim. Output MUST be valid JSON matching the provided schema. - If you find nothing meaningful: set no_findings=true and findings=[]. - Otherwise: set no_findings=false and include findings with severity/category/title. - Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb". Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, accounting/invariant breaks, dangerous delegatecall, and untrusted external calls. Be conservative: if evidence is weak, mark severity low/medium and explain why. warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
{
"codex": {
"ran_at": "2026-04-05T08:15:06.510888+00:00",
"returncode": 1
},
"project": {
"mode": "bytecode",
"bytecode_length": 2650,
"bytecode_truncated": false,
"capability_graph_present": true,
"analysis_artifact_present": true
},
"summary": null,
"no_findings": null,
"schema_version": 1
}
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x00 00000007: CALLDATALOAD 00000008: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 00000026: SWAP1 00000027: DIV 00000028: DUP1 00000029: PUSH4 0x140d592b 0000002e: EQ 0000002f: PUSH2 0x0044 00000032: JUMPI 00000033: DUP1 00000034: PUSH4 0x9889cf64 00000039: EQ 0000003a: PUSH2 0x006e 0000003d: JUMPI 0000003e: PUSH2 0x0042 00000041: JUMP 00000042: JUMPDEST 00000043: STOP 00000044: JUMPDEST 00000045: PUSH2 0x006c 00000048: PUSH1 0x04 0000004a: DUP1 0000004b: DUP1 0000004c: CALLDATALOAD 0000004d: SWAP1 0000004e: PUSH1 0x20 00000050: ADD 00000051: SWAP1 00000052: SWAP2 00000053: SWAP1 00000054: DUP1 00000055: CALLDATALOAD 00000056: SWAP1 00000057: PUSH1 0x20 00000059: ADD 0000005a: SWAP1 0000005b: SWAP2 0000005c: SWAP1 0000005d: DUP1 0000005e: CALLDATALOAD 0000005f: SWAP1 00000060: PUSH1 0x20 00000062: ADD 00000063: SWAP1 00000064: SWAP2 00000065: SWAP1 00000066: POP 00000067: POP 00000068: PUSH2 0x007d 0000006b: JUMP 0000006c: JUMPDEST 0000006d: STOP 0000006e: JUMPDEST 0000006f: PUSH2 0x007b 00000072: PUSH1 0x04 00000074: DUP1 00000075: POP 00000076: POP 00000077: PUSH2 0x022a 0000007a: JUMP 0000007b: JUMPDEST 0000007c: STOP 0000007d: JUMPDEST 0000007e: PUSH1 0x00 00000080: PUSH1 0x00 00000082: POP 00000083: PUSH1 0x00 00000085: ADD 00000086: PUSH1 0x00 00000088: POP 00000089: SLOAD 0000008a: PUSH1 0x00 0000008c: PUSH1 0x00 0000008e: POP 0000008f: PUSH1 0x01 00000091: ADD 00000092: PUSH1 0x00 00000094: POP 00000095: SLOAD 00000096: PUSH1 0x08 00000098: PUSH1 0x00 0000009a: POP 0000009b: PUSH1 0x00 0000009d: ADD 0000009e: PUSH1 0x00 000000a0: POP 000000a1: SLOAD 000000a2: PUSH1 0x08 000000a4: PUSH1 0x00 000000a6: POP 000000a7: PUSH1 0x01 000000a9: ADD 000000aa: PUSH1 0x00 000000ac: POP 000000ad: SLOAD 000000ae: PUSH1 0x00 000000b0: PUSH1 0x00 000000b2: POP 000000b3: PUSH1 0x02 000000b5: ADD 000000b6: PUSH1 0x00 000000b8: POP 000000b9: SLOAD 000000ba: PUSH1 0x04 000000bc: PUSH1 0x00 000000be: POP 000000bf: PUSH1 0x02 000000c1: ADD 000000c2: PUSH1 0x00 000000c4: POP 000000c5: SLOAD 000000c6: DUP9 000000c7: DUP9 000000c8: DUP9 000000c9: PUSH1 0x40 000000cb: MLOAD 000000cc: PUSH2 0x0208 000000cf: DUP1 000000d0: PUSH2 0x0324 000000d3: DUP4 000000d4: CODECOPY 000000d5: ADD 000000d6: DUP1 000000d7: DUP11 000000d8: DUP2 000000d9: MSTORE 000000da: PUSH1 0x20 000000dc: ADD 000000dd: DUP10 000000de: DUP2 000000df: MSTORE 000000e0: PUSH1 0x20 000000e2: ADD 000000e3: DUP9 000000e4: DUP2 000000e5: MSTORE 000000e6: PUSH1 0x20 000000e8: ADD 000000e9: DUP8 000000ea: DUP2 000000eb: MSTORE 000000ec: PUSH1 0x20 000000ee: ADD 000000ef: DUP7 000000f0: DUP2 000000f1: MSTORE 000000f2: PUSH1 0x20 000000f4: ADD 000000f5: DUP6 000000f6: DUP2 000000f7: MSTORE 000000f8: PUSH1 0x20 000000fa: ADD 000000fb: DUP5 000000fc: DUP2 000000fd: MSTORE 000000fe: PUSH1 0x20 00000100: ADD 00000101: DUP4 00000102: DUP2 00000103: MSTORE 00000104: PUSH1 0x20 00000106: ADD 00000107: DUP3 00000108: DUP2 00000109: MSTORE 0000010a: PUSH1 0x20 0000010c: ADD 0000010d: SWAP10 0000010e: POP 0000010f: POP 00000110: POP 00000111: POP 00000112: POP 00000113: POP 00000114: POP 00000115: POP 00000116: POP 00000117: POP 00000118: PUSH1 0x40 0000011a: MLOAD 0000011b: DUP1 0000011c: SWAP2 0000011d: SUB 0000011e: SWAP1 0000011f: PUSH1 0x00 00000121: CREATE 00000122: PUSH1 0x0b 00000124: PUSH1 0x00 00000126: PUSH2 0x0100 00000129: EXP 0000012a: DUP2 0000012b: SLOAD 0000012c: DUP2 0000012d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000142: MUL 00000143: NOT 00000144: AND 00000145: SWAP1 00000146: DUP4 00000147: MUL 00000148: OR 00000149: SWAP1 0000014a: SSTORE 0000014b: POP 0000014c: PUSH32 0x99c0317fa8f42162af3497b0fc7de7bf65b102e40025676c36c4d18856dde1f5 0000016d: PUSH1 0x0b 0000016f: PUSH1 0x00 00000171: SWAP1 00000172: SLOAD 00000173: SWAP1 00000174: PUSH2 0x0100 00000177: EXP 00000178: SWAP1 00000179: DIV 0000017a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000018f: AND 00000190: PUSH1 0x40 00000192: MLOAD 00000193: DUP1 00000194: DUP1 00000195: PUSH1 0x20 00000197: ADD 00000198: DUP4 00000199: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001ae: AND 000001af: DUP2 000001b0: MSTORE 000001b1: PUSH1 0x20 000001b3: ADD 000001b4: DUP3 000001b5: DUP2 000001b6: SUB 000001b7: DUP3 000001b8: MSTORE 000001b9: PUSH1 0x29 000001bb: DUP2 000001bc: MSTORE 000001bd: PUSH1 0x20 000001bf: ADD 000001c0: DUP1 000001c1: PUSH32 0x41206e65772062696c6c206f66206c6164696e6720686173206a757374206265 000001e2: DUP2 000001e3: MSTORE 000001e4: PUSH1 0x20 000001e6: ADD 000001e7: PUSH32 0x656e206973737565640000000000000000000000000000000000000000000000 00000208: DUP2 00000209: MSTORE 0000020a: PUSH1 0x20 0000020c: ADD 0000020d: POP 0000020e: PUSH1 0x40 00000210: ADD 00000211: SWAP3 00000212: POP 00000213: POP 00000214: POP 00000215: PUSH1 0x40 00000217: MLOAD 00000218: DUP1 00000219: SWAP2 0000021a: SUB 0000021b: SWAP1 0000021c: LOG1 0000021d: PUSH2 0x0224 00000220: PUSH2 0x022a 00000223: JUMP 00000224: JUMPDEST 00000225: JUMPDEST 00000226: POP 00000227: POP 00000228: POP 00000229: JUMP 0000022a: JUMPDEST 0000022b: PUSH1 0x01 0000022d: PUSH1 0x04 0000022f: PUSH1 0x00 00000231: POP 00000232: PUSH1 0x03 00000234: ADD 00000235: PUSH1 0x14 00000237: PUSH2 0x0100 0000023a: EXP 0000023b: DUP2 0000023c: SLOAD 0000023d: DUP2 0000023e: PUSH1 0xff 00000240: MUL 00000241: NOT 00000242: AND 00000243: SWAP1 00000244: DUP4 00000245: MUL 00000246: OR 00000247: SWAP1 00000248: SSTORE 00000249: POP 0000024a: PUSH1 0x00 0000024c: PUSH1 0x00 0000024e: POP 0000024f: PUSH1 0x03 00000251: ADD 00000252: PUSH1 0x00 00000254: SWAP1 00000255: SLOAD 00000256: SWAP1 00000257: PUSH2 0x0100 0000025a: EXP 0000025b: SWAP1 0000025c: DIV 0000025d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000272: AND 00000273: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000288: AND 00000289: PUSH1 0x00 0000028b: PUSH1 0x0a 0000028d: PUSH1 0x00 0000028f: POP 00000290: SLOAD 00000291: PUSH1 0x40 00000293: MLOAD 00000294: DUP1 00000295: SWAP1 00000296: POP 00000297: PUSH1 0x00 00000299: PUSH1 0x40 0000029b: MLOAD 0000029c: DUP1 0000029d: DUP4 0000029e: SUB 0000029f: DUP2 000002a0: DUP6 000002a1: DUP9 000002a2: DUP9 000002a3: CALL 000002a4: SWAP4 000002a5: POP 000002a6: POP 000002a7: POP 000002a8: POP 000002a9: POP 000002aa: PUSH32 0xaf2f17dc93b2d9d775171b489ab37c1c082fc7d4da39f7a21abfe05d609994f0 000002cb: PUSH1 0x0a 000002cd: PUSH1 0x00 000002cf: POP 000002d0: SLOAD 000002d1: PUSH1 0x40 000002d3: MLOAD 000002d4: DUP1 000002d5: DUP1 000002d6: PUSH1 0x20 000002d8: ADD 000002d9: DUP4 000002da: DUP2 000002db: MSTORE 000002dc: PUSH1 0x20 000002de: ADD 000002df: DUP3 000002e0: DUP2 000002e1: SUB 000002e2: DUP3 000002e3: MSTORE 000002e4: PUSH1 0x11 000002e6: DUP2 000002e7: MSTORE 000002e8: PUSH1 0x20 000002ea: ADD 000002eb: DUP1 000002ec: PUSH32 0x5061796d656e742072656c656173656421000000000000000000000000000000 0000030d: DUP2 0000030e: MSTORE 0000030f: PUSH1 0x20 00000311: ADD 00000312: POP 00000313: PUSH1 0x20 00000315: ADD 00000316: SWAP3 00000317: POP 00000318: POP 00000319: POP 0000031a: PUSH1 0x40 0000031c: MLOAD 0000031d: DUP1 0000031e: SWAP2 0000031f: SUB 00000320: SWAP1 00000321: LOG1 00000322: JUMPDEST 00000323: JUMP 00000324: PUSH1 0x60 00000326: PUSH1 0x40 00000328: MSTORE 00000329: PUSH1 0x40 0000032b: MLOAD 0000032c: PUSH2 0x0120 0000032f: DUP1 00000330: PUSH2 0x0208 00000333: DUP4 00000334: CODECOPY 00000335: DUP2 00000336: ADD 00000337: PUSH1 0x40 00000339: MSTORE 0000033a: DUP1 0000033b: DUP1 0000033c: MLOAD 0000033d: SWAP1 0000033e: PUSH1 0x20 00000340: ADD 00000341: SWAP1 00000342: SWAP2 00000343: SWAP1 00000344: DUP1 00000345: MLOAD 00000346: SWAP1 00000347: PUSH1 0x20 00000349: ADD 0000034a: SWAP1 0000034b: SWAP2 0000034c: SWAP1 0000034d: DUP1 0000034e: MLOAD 0000034f: SWAP1 00000350: PUSH1 0x20 00000352: ADD 00000353: SWAP1 00000354: SWAP2 00000355: SWAP1 00000356: DUP1 00000357: MLOAD 00000358: SWAP1 00000359: PUSH1 0x20 0000035b: ADD 0000035c: SWAP1 0000035d: SWAP2 0000035e: SWAP1 0000035f: DUP1 00000360: MLOAD 00000361: SWAP1 00000362: PUSH1 0x20 00000364: ADD 00000365: SWAP1 00000366: SWAP2 00000367: SWAP1 00000368: DUP1 00000369: MLOAD 0000036a: SWAP1 0000036b: PUSH1 0x20 0000036d: ADD 0000036e: SWAP1 0000036f: SWAP2 00000370: SWAP1 00000371: DUP1 00000372: MLOAD 00000373: SWAP1 00000374: PUSH1 0x20 00000376: ADD 00000377: SWAP1 00000378: SWAP2 00000379: SWAP1 0000037a: DUP1 0000037b: MLOAD 0000037c: SWAP1 0000037d: PUSH1 0x20 0000037f: ADD 00000380: SWAP1 00000381: SWAP2 00000382: SWAP1 00000383: DUP1 00000384: MLOAD 00000385: SWAP1 00000386: PUSH1 0x20 00000388: ADD 00000389: SWAP1 0000038a: SWAP2 0000038b: SWAP1 0000038c: POP 0000038d: POP 0000038e: JUMPDEST 0000038f: DUP9 00000390: PUSH1 0x00 00000392: PUSH1 0x00 00000394: POP 00000395: PUSH1 0x00 00000397: ADD 00000398: PUSH1 0x00 0000039a: POP 0000039b: DUP2 0000039c: SWAP1 0000039d: SSTORE 0000039e: POP 0000039f: DUP8 000003a0: PUSH1 0x00 000003a2: PUSH1 0x00 000003a4: POP 000003a5: PUSH1 0x01 000003a7: ADD 000003a8: PUSH1 0x00 000003aa: POP 000003ab: DUP2 000003ac: SWAP1 000003ad: SSTORE 000003ae: POP 000003af: DUP7 000003b0: PUSH1 0x02 000003b2: PUSH1 0x00 000003b4: POP 000003b5: PUSH1 0x00 000003b7: ADD 000003b8: PUSH1 0x00 000003ba: POP 000003bb: DUP2 000003bc: SWAP1 000003bd: SSTORE 000003be: POP 000003bf: DUP6 000003c0: PUSH1 0x02 000003c2: PUSH1 0x00 000003c4: POP 000003c5: PUSH1 0x01 000003c7: ADD 000003c8: PUSH1 0x00 000003ca: POP 000003cb: DUP2 000003cc: SWAP1 000003cd: SSTORE 000003ce: POP 000003cf: DUP5 000003d0: PUSH1 0x02 000003d2: PUSH1 0x00 000003d4: POP 000003d5: PUSH1 0x02 000003d7: ADD 000003d8: PUSH1 0x00 000003da: POP 000003db: DUP2 000003dc: SWAP1 000003dd: SSTORE 000003de: POP 000003df: DUP4 000003e0: PUSH1 0x02 000003e2: PUSH1 0x00 000003e4: POP 000003e5: PUSH1 0x03 000003e7: ADD 000003e8: PUSH1 0x00 000003ea: POP 000003eb: DUP2 000003ec: SWAP1 000003ed: SSTORE 000003ee: POP 000003ef: DUP3 000003f0: PUSH1 0x06 000003f2: PUSH1 0x00 000003f4: POP 000003f5: PUSH1 0x00 000003f7: ADD 000003f8: PUSH1 0x00 000003fa: POP 000003fb: DUP2 000003fc: SWAP1 000003fd: SSTORE 000003fe: POP 000003ff: DUP2 00000400: PUSH1 0x06 00000402: PUSH1 0x00 00000404: POP 00000405: PUSH1 0x01 00000407: ADD 00000408: PUSH1 0x00 0000040a: POP 0000040b: DUP2 0000040c: SWAP1 0000040d: SSTORE 0000040e: POP 0000040f: DUP1 00000410: PUSH1 0x06 00000412: PUSH1 0x00 00000414: POP 00000415: PUSH1 0x02 00000417: ADD 00000418: PUSH1 0x00 0000041a: POP 0000041b: DUP2 0000041c: SWAP1 0000041d: SSTORE 0000041e: POP 0000041f: JUMPDEST 00000420: POP 00000421: POP 00000422: POP 00000423: POP 00000424: POP 00000425: POP 00000426: POP 00000427: POP 00000428: POP 00000429: PUSH1 0xf7 0000042b: DUP1 0000042c: PUSH2 0x0111 0000042f: PUSH1 0x00 00000431: CODECOPY 00000432: PUSH1 0x00 00000434: RETURN 00000435: PUSH1 0x60 00000437: PUSH1 0x40 00000439: MSTORE 0000043a: PUSH1 0x00 0000043c: CALLDATALOAD 0000043d: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 0000045b: SWAP1 0000045c: DIV 0000045d: DUP1 0000045e: PUSH4 0xb6bef7b3 00000463: EQ 00000464: PUSH1 0x41 00000466: JUMPI 00000467: DUP1 00000468: PUSH4 0xe1285588 0000046d: EQ 0000046e: PUSH1 0x70 00000470: JUMPI 00000471: PUSH1 0x3f 00000473: JUMP 00000474: JUMPDEST 00000475: STOP 00000476: JUMPDEST 00000477: PUSH1 0x4c 00000479: PUSH1 0x04 0000047b: DUP1 0000047c: POP 0000047d: POP 0000047e: PUSH1 0xd3 00000480: JUMP 00000481: JUMPDEST 00000482: PUSH1 0x40 00000484: MLOAD 00000485: DUP1 00000486: DUP5 00000487: DUP2 00000488: MSTORE 00000489: PUSH1 0x20 0000048b: ADD 0000048c: DUP4 0000048d: DUP2 0000048e: MSTORE 0000048f: PUSH1 0x20 00000491: ADD 00000492: DUP3 00000493: DUP2 00000494: MSTORE 00000495: PUSH1 0x20 00000497: ADD 00000498: SWAP4 00000499: POP 0000049a: POP 0000049b: POP 0000049c: POP 0000049d: PUSH1 0x40 0000049f: MLOAD 000004a0: DUP1 000004a1: SWAP2 000004a2: SUB 000004a3: SWAP1 000004a4: RETURN 000004a5: JUMPDEST 000004a6: PUSH1 0x7b 000004a8: PUSH1 0x04 000004aa: DUP1 000004ab: POP 000004ac: POP 000004ad: PUSH1 0xa6 000004af: JUMP 000004b0: JUMPDEST 000004b1: PUSH1 0x40 000004b3: MLOAD 000004b4: DUP1 000004b5: DUP6 000004b6: DUP2 000004b7: MSTORE 000004b8: PUSH1 0x20 000004ba: ADD 000004bb: DUP5 000004bc: DUP2 000004bd: MSTORE 000004be: PUSH1 0x20 000004c0: ADD 000004c1: DUP4 000004c2: DUP2 000004c3: MSTORE 000004c4: PUSH1 0x20 000004c6: ADD 000004c7: DUP3 000004c8: DUP2 000004c9: MSTORE 000004ca: PUSH1 0x20 000004cc: ADD 000004cd: SWAP5 000004ce: POP 000004cf: POP 000004d0: POP 000004d1: POP 000004d2: POP 000004d3: PUSH1 0x40 000004d5: MLOAD 000004d6: DUP1 000004d7: SWAP2 000004d8: SUB 000004d9: SWAP1 000004da: RETURN 000004db: JUMPDEST 000004dc: PUSH1 0x02 000004de: PUSH1 0x00 000004e0: POP 000004e1: DUP1 000004e2: PUSH1 0x00 000004e4: ADD 000004e5: PUSH1 0x00 000004e7: POP 000004e8: SLOAD 000004e9: SWAP1 000004ea: DUP1 000004eb: PUSH1 0x01 000004ed: ADD 000004ee: PUSH1 0x00 000004f0: POP 000004f1: SLOAD 000004f2: SWAP1 000004f3: DUP1 000004f4: PUSH1 0x02 000004f6: ADD 000004f7: PUSH1 0x00 000004f9: POP 000004fa: SLOAD 000004fb: SWAP1 000004fc: DUP1 000004fd: PUSH1 0x03 000004ff: ADD 00000500: PUSH1 0x00 00000502: POP 00000503: SLOAD 00000504: SWAP1 00000505: POP 00000506: DUP5 00000507: JUMP 00000508: JUMPDEST 00000509: PUSH1 0x06 0000050b: PUSH1 0x00 0000050d: POP 0000050e: DUP1 0000050f: PUSH1 0x00 00000511: ADD 00000512: PUSH1 0x00 00000514: POP 00000515: SLOAD 00000516: SWAP1 00000517: DUP1 00000518: PUSH1 0x01 0000051a: ADD 0000051b: PUSH1 0x00 0000051d: POP 0000051e: SLOAD 0000051f: SWAP1 00000520: DUP1 00000521: PUSH1 0x02 00000523: ADD 00000524: PUSH1 0x00 00000526: POP 00000527: SLOAD 00000528: SWAP1 00000529: POP 0000052a: DUP4 0000052b: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | yes | yes |
viewtrace_id: 0x40c6960acae53f55be0e25196a01032908ceb3772242b26866573ffbdfebc42b
call_targets:
0x46d2b05764d3dbc5e58a653f57239f08ddb186bf, 0x871cf36b0949d2c5e158db2ea8e9472cb0c6423c
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x40c6960acae53f55be0e25196a01032908ceb3772242b26866573ffbdfebc42b",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x46d2b05764d3dbc5e58a653f57239f08ddb186bf",
"0x871cf36b0949d2c5e158db2ea8e9472cb0c6423c"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x140d592b",
"selector": "0x140d592b",
"calldata_variants": [
"0x140d592b",
"0x140d592b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9889cf64",
"selector": "0x9889cf64",
"calldata_variants": [
"0x9889cf64",
"0x9889cf640000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb6bef7b3",
"selector": "0xb6bef7b3",
"calldata_variants": [
"0xb6bef7b3",
"0xb6bef7b30000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe1285588",
"selector": "0xe1285588",
"calldata_variants": [
"0xe1285588",
"0xe12855880000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 675,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | yes | yes |
viewtrace_id: 0x40c6960acae53f55be0e25196a01032908ceb3772242b26866573ffbdfebc42b
call_targets:
0x46d2b05764d3dbc5e58a653f57239f08ddb186bf, 0x871cf36b0949d2c5e158db2ea8e9472cb0c6423c
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x40c6960acae53f55be0e25196a01032908ceb3772242b26866573ffbdfebc42b",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x46d2b05764d3dbc5e58a653f57239f08ddb186bf",
"0x871cf36b0949d2c5e158db2ea8e9472cb0c6423c"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x140d592b",
"selector": "0x140d592b",
"calldata_variants": [
"0x140d592b",
"0x140d592b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9889cf64",
"selector": "0x9889cf64",
"calldata_variants": [
"0x9889cf64",
"0x9889cf640000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb6bef7b3",
"selector": "0xb6bef7b3",
"calldata_variants": [
"0xb6bef7b3",
"0xb6bef7b30000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe1285588",
"selector": "0xe1285588",
"calldata_variants": [
"0xe1285588",
"0xe12855880000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 675,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|
| medium | other | detector | CREATE/CREATE2 reachable | 45 | yes | yes |
viewtrace_id: 0x253e5ad052be737f36edd6c84615386ea2f5327f3366eb650e7be376b76d4bdf
validation_json{
"sink": "CREATE",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x253e5ad052be737f36edd6c84615386ea2f5327f3366eb650e7be376b76d4bdf",
"confirmed": true,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "sink_reached"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x140d592b",
"selector": "0x140d592b",
"calldata_variants": [
"0x140d592b",
"0x140d592b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9889cf64",
"selector": "0x9889cf64",
"calldata_variants": [
"0x9889cf64",
"0x9889cf640000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb6bef7b3",
"selector": "0xb6bef7b3",
"calldata_variants": [
"0xb6bef7b3",
"0xb6bef7b30000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe1285588",
"selector": "0xe1285588",
"calldata_variants": [
"0xe1285588",
"0xe12855880000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"create_count": 1,
"create2_count": 0
}
|