TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-3b75-70f9-b843-cce4de8c843f

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
4397 artifact.fetch complete 1 / 3 3 months ago
4398 tool.cast_disasm complete 1 / 3 3 months ago
47280 analysis.bundle complete 1 / 3 1 week ago
47281 capability.graph complete 1 / 3 1 week ago
47282 detector.run complete 1 / 3 1 week ago
47283 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
2
EXT*/BALANCE
1
Total opcodes
1405
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x004b
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x5353a2d8
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00b1
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x5e9ccf30
00000025: EQ
00000026: PUSH2 0x01bb
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x65a06f16
00000030: EQ
00000031: PUSH2 0x023a
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x677342ce
0000003b: EQ
0000003c: PUSH2 0x0295
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x848202fe
00000046: EQ
00000047: PUSH2 0x02ab
0000004a: JUMPI
0000004b: JUMPDEST
0000004c: PUSH2 0x02b4
0000004f: PUSH2 0x02b6
00000052: PUSH1 0x00
00000054: PUSH1 0x00
00000056: CALLVALUE
00000057: PUSH7 0x038d7ea4c68000
0000005f: EQ
00000060: ISZERO
00000061: PUSH2 0x0739
00000064: JUMPI
00000065: PUSH7 0x071afd498d0000
0000006d: PUSH1 0x01
0000006f: PUSH1 0xa0
00000071: PUSH1 0x02
00000073: EXP
00000074: SUB
00000075: ADDRESS
00000076: AND
00000077: BALANCE
00000078: LT
00000079: PUSH2 0x0739
0000007c: JUMPI
0000007d: DUP1
0000007e: SLOAD
0000007f: PUSH1 0x01
00000081: DUP2
00000082: ADD
00000083: DUP1
00000084: DUP4
00000085: SSTORE
00000086: SWAP1
00000087: SWAP3
00000088: DUP2
00000089: DUP5
0000008a: DUP1
0000008b: ISZERO
0000008c: DUP3
0000008d: SWAP1
0000008e: GT
0000008f: PUSH2 0x040b
00000092: JUMPI
00000093: PUSH1 0x03
00000095: MUL
00000096: DUP2
00000097: PUSH1 0x03
00000099: MUL
0000009a: DUP4
0000009b: PUSH1 0x00
0000009d: MSTORE
0000009e: PUSH1 0x20
000000a0: PUSH1 0x00
000000a2: KECCAK256
000000a3: SWAP2
000000a4: DUP3
000000a5: ADD
000000a6: SWAP2
000000a7: ADD
000000a8: PUSH2 0x040b
000000ab: SWAP2
000000ac: SWAP1
000000ad: PUSH2 0x0516
000000b0: JUMP
000000b1: JUMPDEST
000000b2: PUSH1 0x40
000000b4: DUP1
000000b5: MLOAD
000000b6: PUSH1 0x20
000000b8: PUSH1 0x04
000000ba: DUP1
000000bb: CALLDATALOAD
000000bc: DUP1
000000bd: DUP3
000000be: ADD
000000bf: CALLDATALOAD
000000c0: PUSH1 0x1f
000000c2: DUP2
000000c3: ADD
000000c4: DUP5
000000c5: SWAP1
000000c6: DIV
000000c7: DUP5
000000c8: MUL
000000c9: DUP6
000000ca: ADD
000000cb: DUP5
000000cc: ADD
000000cd: SWAP1
000000ce: SWAP6
000000cf: MSTORE
000000d0: DUP5
000000d1: DUP5
000000d2: MSTORE
000000d3: PUSH2 0x02b4
000000d6: SWAP5
000000d7: SWAP2
000000d8: SWAP4
000000d9: PUSH1 0x24
000000db: SWAP4
000000dc: SWAP1
000000dd: SWAP3
000000de: SWAP2
000000df: DUP5
000000e0: ADD
000000e1: SWAP2
000000e2: SWAP1
000000e3: DUP2
000000e4: SWAP1
000000e5: DUP5
000000e6: ADD
000000e7: DUP4
000000e8: DUP3
000000e9: DUP1
000000ea: DUP3
000000eb: DUP5
000000ec: CALLDATACOPY
000000ed: POP
000000ee: SWAP5
000000ef: SWAP7
000000f0: POP
000000f1: POP
000000f2: POP
000000f3: POP
000000f4: POP
000000f5: POP
000000f6: POP
000000f7: PUSH1 0x00
000000f9: JUMPDEST
000000fa: PUSH1 0x00
000000fc: SLOAD
000000fd: DUP2
000000fe: LT
000000ff: ISZERO
00000100: PUSH2 0x0739
00000103: JUMPI
00000104: PUSH1 0x00
00000106: DUP1
00000107: SLOAD
00000108: DUP3
00000109: SWAP1
0000010a: DUP2
0000010b: LT
0000010c: ISZERO
0000010d: PUSH2 0x0002
00000110: JUMPI
00000111: SWAP1
00000112: DUP1
00000113: MSTORE
00000114: PUSH1 0x03
00000116: MUL
00000117: PUSH1 0x00
00000119: DUP1
0000011a: MLOAD
0000011b: PUSH1 0x20
0000011d: PUSH2 0x07f8
00000120: DUP4
00000121: CODECOPY
00000122: DUP2
00000123: MLOAD
00000124: SWAP2
00000125: MSTORE
00000126: ADD
00000127: SLOAD
00000128: PUSH1 0x01
0000012a: PUSH1 0xa0
0000012c: PUSH1 0x02
0000012e: EXP
0000012f: SUB
00000130: SWAP1
00000131: DUP2
00000132: AND
00000133: CALLER
00000134: SWAP1
00000135: SWAP2
00000136: AND
00000137: EQ
00000138: ISZERO
00000139: PUSH2 0x07ba
0000013c: JUMPI
0000013d: DUP2
0000013e: PUSH1 0x00
00000140: PUSH1 0x00
00000142: POP
00000143: DUP3
00000144: DUP2
00000145: SLOAD
00000146: DUP2
00000147: LT
00000148: ISZERO
00000149: PUSH2 0x0002
0000014c: JUMPI
0000014d: DUP2
0000014e: DUP1
0000014f: MSTORE
00000150: PUSH1 0x03
00000152: MUL
00000153: PUSH1 0x00
00000155: DUP1
00000156: MLOAD
00000157: PUSH1 0x20
00000159: PUSH2 0x07f8
0000015c: DUP4
0000015d: CODECOPY
0000015e: DUP2
0000015f: MLOAD
00000160: SWAP2
00000161: MSTORE
00000162: ADD
00000163: SWAP1
00000164: POP
00000165: PUSH1 0x01
00000167: ADD
00000168: PUSH1 0x00
0000016a: POP
0000016b: SWAP1
0000016c: DUP1
0000016d: MLOAD
0000016e: SWAP1
0000016f: PUSH1 0x20
00000171: ADD
00000172: SWAP1
00000173: DUP3
00000174: DUP1
00000175: SLOAD
00000176: PUSH1 0x01
00000178: DUP2
00000179: PUSH1 0x01
0000017b: AND
0000017c: ISZERO
0000017d: PUSH2 0x0100
00000180: MUL
00000181: SUB
00000182: AND
00000183: PUSH1 0x02
00000185: SWAP1
00000186: DIV
00000187: SWAP1
00000188: PUSH1 0x00
0000018a: MSTORE
0000018b: PUSH1 0x20
0000018d: PUSH1 0x00
0000018f: KECCAK256
00000190: SWAP1
00000191: PUSH1 0x1f
00000193: ADD
00000194: PUSH1 0x20
00000196: SWAP1
00000197: DIV
00000198: DUP2
00000199: ADD
0000019a: SWAP3
0000019b: DUP3
0000019c: PUSH1 0x1f
0000019e: LT
0000019f: PUSH2 0x07c2
000001a2: JUMPI
000001a3: DUP1
000001a4: MLOAD
000001a5: PUSH1 0xff
000001a7: NOT
000001a8: AND
000001a9: DUP4
000001aa: DUP1
000001ab: ADD
000001ac: OR
000001ad: DUP6
000001ae: SSTORE
000001af: JUMPDEST
000001b0: POP
000001b1: PUSH2 0x07b7
000001b4: SWAP3
000001b5: SWAP2
000001b6: POP
000001b7: PUSH2 0x0581
000001ba: JUMP
000001bb: JUMPDEST
000001bc: PUSH2 0x02b8
000001bf: PUSH1 0x04
000001c1: CALLDATALOAD
000001c2: PUSH1 0x00
000001c4: DUP1
000001c5: SLOAD
000001c6: DUP3
000001c7: SWAP1
000001c8: DUP2
000001c9: LT
000001ca: ISZERO
000001cb: PUSH2 0x0002
000001ce: JUMPI
000001cf: POP
000001d0: DUP1
000001d1: MSTORE
000001d2: PUSH1 0x03
000001d4: MUL
000001d5: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e565
000001f6: DUP2
000001f7: ADD
000001f8: SLOAD
000001f9: PUSH1 0x00
000001fb: DUP1
000001fc: MLOAD
000001fd: PUSH1 0x20
000001ff: PUSH2 0x07f8
00000202: DUP4
00000203: CODECOPY
00000204: DUP2
00000205: MLOAD
00000206: SWAP2
00000207: MSTORE
00000208: DUP3
00000209: ADD
0000020a: SLOAD
0000020b: PUSH1 0x01
0000020d: PUSH1 0xa0
0000020f: PUSH1 0x02
00000211: EXP
00000212: SUB
00000213: AND
00000214: SWAP2
00000215: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e564
00000236: ADD
00000237: SWAP1
00000238: DUP4
00000239: JUMP
0000023a: JUMPDEST
0000023b: PUSH1 0x40
0000023d: DUP1
0000023e: MLOAD
0000023f: PUSH1 0x02
00000241: DUP1
00000242: SLOAD
00000243: PUSH1 0x20
00000245: PUSH1 0x01
00000247: DUP3
00000248: AND
00000249: ISZERO
0000024a: PUSH2 0x0100
0000024d: MUL
0000024e: PUSH1 0x00
00000250: NOT
00000251: ADD
00000252: SWAP1
00000253: SWAP2
00000254: AND
00000255: DUP3
00000256: SWAP1
00000257: DIV
00000258: PUSH1 0x1f
0000025a: DUP2
0000025b: ADD
0000025c: DUP3
0000025d: SWAP1
0000025e: DIV
0000025f: DUP3
00000260: MUL
00000261: DUP5
00000262: ADD
00000263: DUP3
00000264: ADD
00000265: SWAP1
00000266: SWAP5
00000267: MSTORE
00000268: DUP4
00000269: DUP4
0000026a: MSTORE
0000026b: PUSH2 0x0358
0000026e: SWAP4
0000026f: SWAP1
00000270: DUP4
00000271: ADD
00000272: DUP3
00000273: DUP3
00000274: DUP1
00000275: ISZERO
00000276: PUSH2 0x0403
00000279: JUMPI
0000027a: DUP1
0000027b: PUSH1 0x1f
0000027d: LT
0000027e: PUSH2 0x03d8
00000281: JUMPI
00000282: PUSH2 0x0100
00000285: DUP1
00000286: DUP4
00000287: SLOAD
00000288: DIV
00000289: MUL
0000028a: DUP4
0000028b: MSTORE
0000028c: SWAP2
0000028d: PUSH1 0x20
0000028f: ADD
00000290: SWAP2
00000291: PUSH2 0x0403
00000294: JUMP
00000295: JUMPDEST
00000296: PUSH2 0x03c6
00000299: PUSH1 0x04
0000029b: CALLDATALOAD
0000029c: PUSH1 0x00
0000029e: DUP1
0000029f: SLOAD
000002a0: DUP3
000002a1: GT
000002a2: ISZERO
000002a3: PUSH2 0x0779
000002a6: JUMPI
000002a7: PUSH2 0x07b2
000002aa: JUMP
000002ab: JUMPDEST
000002ac: PUSH2 0x03c6
000002af: PUSH1 0x01
000002b1: SLOAD
000002b2: DUP2
000002b3: JUMP
000002b4: JUMPDEST
000002b5: STOP
000002b6: JUMPDEST
000002b7: JUMP
000002b8: JUMPDEST
000002b9: PUSH1 0x40
000002bb: DUP1
000002bc: MLOAD
000002bd: PUSH1 0x01
000002bf: PUSH1 0xa0
000002c1: PUSH1 0x02
000002c3: EXP
000002c4: SUB
000002c5: DUP6
000002c6: AND
000002c7: DUP2
000002c8: MSTORE
000002c9: SWAP1
000002ca: DUP2
000002cb: ADD
000002cc: DUP3
000002cd: SWAP1
000002ce: MSTORE
000002cf: PUSH1 0x60
000002d1: PUSH1 0x20
000002d3: DUP3
000002d4: ADD
000002d5: DUP2
000002d6: DUP2
000002d7: MSTORE
000002d8: DUP5
000002d9: SLOAD
000002da: PUSH1 0x02
000002dc: PUSH1 0x01
000002de: DUP3
000002df: AND
000002e0: ISZERO
000002e1: PUSH2 0x0100
000002e4: MUL
000002e5: PUSH1 0x00
000002e7: NOT
000002e8: ADD
000002e9: SWAP1
000002ea: SWAP2
000002eb: AND
000002ec: DIV
000002ed: SWAP2
000002ee: DUP4
000002ef: ADD
000002f0: DUP3
000002f1: SWAP1
000002f2: MSTORE
000002f3: SWAP1
000002f4: PUSH1 0x80
000002f6: DUP4
000002f7: ADD
000002f8: SWAP1
000002f9: DUP6
000002fa: SWAP1
000002fb: DUP1
000002fc: ISZERO
000002fd: PUSH2 0x0347
00000300: JUMPI
00000301: DUP1
00000302: PUSH1 0x1f
00000304: LT
00000305: PUSH2 0x031c
00000308: JUMPI
00000309: PUSH2 0x0100
0000030c: DUP1
0000030d: DUP4
0000030e: SLOAD
0000030f: DIV
00000310: MUL
00000311: DUP4
00000312: MSTORE
00000313: SWAP2
00000314: PUSH1 0x20
00000316: ADD
00000317: SWAP2
00000318: PUSH2 0x0347
0000031b: JUMP
0000031c: JUMPDEST
0000031d: DUP3
0000031e: ADD
0000031f: SWAP2
00000320: SWAP1
00000321: PUSH1 0x00
00000323: MSTORE
00000324: PUSH1 0x20
00000326: PUSH1 0x00
00000328: KECCAK256
00000329: SWAP1
0000032a: JUMPDEST
0000032b: DUP2
0000032c: SLOAD
0000032d: DUP2
0000032e: MSTORE
0000032f: SWAP1
00000330: PUSH1 0x01
00000332: ADD
00000333: SWAP1
00000334: PUSH1 0x20
00000336: ADD
00000337: DUP1
00000338: DUP4
00000339: GT
0000033a: PUSH2 0x032a
0000033d: JUMPI
0000033e: DUP3
0000033f: SWAP1
00000340: SUB
00000341: PUSH1 0x1f
00000343: AND
00000344: DUP3
00000345: ADD
00000346: SWAP2
00000347: JUMPDEST
00000348: POP
00000349: POP
0000034a: SWAP5
0000034b: POP
0000034c: POP
0000034d: POP
0000034e: POP
0000034f: POP
00000350: PUSH1 0x40
00000352: MLOAD
00000353: DUP1
00000354: SWAP2
00000355: SUB
00000356: SWAP1
00000357: RETURN
00000358: JUMPDEST
00000359: PUSH1 0x40
0000035b: MLOAD
0000035c: DUP1
0000035d: DUP1
0000035e: PUSH1 0x20
00000360: ADD
00000361: DUP3
00000362: DUP2
00000363: SUB
00000364: DUP3
00000365: MSTORE
00000366: DUP4
00000367: DUP2
00000368: DUP2
00000369: MLOAD
0000036a: DUP2
0000036b: MSTORE
0000036c: PUSH1 0x20
0000036e: ADD
0000036f: SWAP2
00000370: POP
00000371: DUP1
00000372: MLOAD
00000373: SWAP1
00000374: PUSH1 0x20
00000376: ADD
00000377: SWAP1
00000378: DUP1
00000379: DUP4
0000037a: DUP4
0000037b: DUP3
0000037c: SWAP1
0000037d: PUSH1 0x00
0000037f: PUSH1 0x04
00000381: PUSH1 0x20
00000383: DUP5
00000384: PUSH1 0x1f
00000386: ADD
00000387: DIV
00000388: PUSH1 0x0f
0000038a: MUL
0000038b: PUSH1 0x03
0000038d: ADD
0000038e: CALL
0000038f: POP
00000390: SWAP1
00000391: POP
00000392: SWAP1
00000393: DUP2
00000394: ADD
00000395: SWAP1
00000396: PUSH1 0x1f
00000398: AND
00000399: DUP1
0000039a: ISZERO
0000039b: PUSH2 0x03b8
0000039e: JUMPI
0000039f: DUP1
000003a0: DUP3
000003a1: SUB
000003a2: DUP1
000003a3: MLOAD
000003a4: PUSH1 0x01
000003a6: DUP4
000003a7: PUSH1 0x20
000003a9: SUB
000003aa: PUSH2 0x0100
000003ad: EXP
000003ae: SUB
000003af: NOT
000003b0: AND
000003b1: DUP2
000003b2: MSTORE
000003b3: PUSH1 0x20
000003b5: ADD
000003b6: SWAP2
000003b7: POP
000003b8: JUMPDEST
000003b9: POP
000003ba: SWAP3
000003bb: POP
000003bc: POP
000003bd: POP
000003be: PUSH1 0x40
000003c0: MLOAD
000003c1: DUP1
000003c2: SWAP2
000003c3: SUB
000003c4: SWAP1
000003c5: RETURN
000003c6: JUMPDEST
000003c7: PUSH1 0x40
000003c9: DUP1
000003ca: MLOAD
000003cb: SWAP2
000003cc: DUP3
000003cd: MSTORE
000003ce: MLOAD
000003cf: SWAP1
000003d0: DUP2
000003d1: SWAP1
000003d2: SUB
000003d3: PUSH1 0x20
000003d5: ADD
000003d6: SWAP1
000003d7: RETURN
000003d8: JUMPDEST
000003d9: DUP3
000003da: ADD
000003db: SWAP2
000003dc: SWAP1
000003dd: PUSH1 0x00
000003df: MSTORE
000003e0: PUSH1 0x20
000003e2: PUSH1 0x00
000003e4: KECCAK256
000003e5: SWAP1
000003e6: JUMPDEST
000003e7: DUP2
000003e8: SLOAD
000003e9: DUP2
000003ea: MSTORE
000003eb: SWAP1
000003ec: PUSH1 0x01
000003ee: ADD
000003ef: SWAP1
000003f0: PUSH1 0x20
000003f2: ADD
000003f3: DUP1
000003f4: DUP4
000003f5: GT
000003f6: PUSH2 0x03e6
000003f9: JUMPI
000003fa: DUP3
000003fb: SWAP1
000003fc: SUB
000003fd: PUSH1 0x1f
000003ff: AND
00000400: DUP3
00000401: ADD
00000402: SWAP2
00000403: JUMPDEST
00000404: POP
00000405: POP
00000406: POP
00000407: POP
00000408: POP
00000409: DUP2
0000040a: JUMP
0000040b: JUMPDEST
0000040c: POP
0000040d: POP
0000040e: POP
0000040f: POP
00000410: CALLER
00000411: PUSH1 0x00
00000413: PUSH1 0x00
00000415: POP
00000416: DUP4
00000417: DUP2
00000418: SLOAD
00000419: DUP2
0000041a: LT
0000041b: ISZERO
0000041c: PUSH2 0x0002
0000041f: JUMPI
00000420: POP
00000421: DUP1
00000422: DUP1
00000423: MSTORE
00000424: PUSH1 0x03
00000426: DUP5
00000427: MUL
00000428: PUSH1 0x00
0000042a: DUP1
0000042b: MLOAD
0000042c: PUSH1 0x20
0000042e: PUSH2 0x07f8
00000431: DUP4
00000432: CODECOPY
00000433: DUP2
00000434: MLOAD
00000435: SWAP2
00000436: MSTORE
00000437: ADD
00000438: SWAP1
00000439: POP
0000043a: DUP1
0000043b: SLOAD
0000043c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000451: NOT
00000452: AND
00000453: SWAP1
00000454: SWAP2
00000455: OR
00000456: SWAP1
00000457: SSTORE
00000458: PUSH1 0x40
0000045a: DUP1
0000045b: MLOAD
0000045c: DUP1
0000045d: DUP3
0000045e: ADD
0000045f: SWAP1
00000460: SWAP2
00000461: MSTORE
00000462: PUSH1 0x18
00000464: DUP2
00000465: MSTORE
00000466: PUSH32 0x41776172642077696e6e696e672063616c63756c61746f720000000000000000
00000487: PUSH1 0x20
00000489: DUP3
0000048a: ADD
0000048b: MSTORE
0000048c: PUSH1 0x00
0000048e: DUP1
0000048f: SLOAD
00000490: DUP5
00000491: SWAP1
00000492: DUP2
00000493: LT
00000494: ISZERO
00000495: PUSH2 0x0002
00000498: JUMPI
00000499: POP
0000049a: DUP1
0000049b: DUP1
0000049c: MSTORE
0000049d: PUSH1 0x03
0000049f: DUP5
000004a0: MUL
000004a1: PUSH1 0x00
000004a3: DUP1
000004a4: MLOAD
000004a5: PUSH1 0x20
000004a7: PUSH2 0x07f8
000004aa: DUP4
000004ab: CODECOPY
000004ac: DUP2
000004ad: MLOAD
000004ae: SWAP2
000004af: MSTORE
000004b0: ADD
000004b1: SWAP1
000004b2: POP
000004b3: PUSH1 0x01
000004b5: ADD
000004b6: PUSH1 0x00
000004b8: POP
000004b9: SWAP1
000004ba: DUP1
000004bb: MLOAD
000004bc: SWAP1
000004bd: PUSH1 0x20
000004bf: ADD
000004c0: SWAP1
000004c1: DUP3
000004c2: DUP1
000004c3: SLOAD
000004c4: PUSH1 0x01
000004c6: DUP2
000004c7: PUSH1 0x01
000004c9: AND
000004ca: ISZERO
000004cb: PUSH2 0x0100
000004ce: MUL
000004cf: SUB
000004d0: AND
000004d1: PUSH1 0x02
000004d3: SWAP1
000004d4: DIV
000004d5: SWAP1
000004d6: PUSH1 0x00
000004d8: MSTORE
000004d9: PUSH1 0x20
000004db: PUSH1 0x00
000004dd: KECCAK256
000004de: SWAP1
000004df: PUSH1 0x1f
000004e1: ADD
000004e2: PUSH1 0x20
000004e4: SWAP1
000004e5: DIV
000004e6: DUP2
000004e7: ADD
000004e8: SWAP3
000004e9: DUP3
000004ea: PUSH1 0x1f
000004ec: LT
000004ed: PUSH2 0x0599
000004f0: JUMPI
000004f1: DUP1
000004f2: MLOAD
000004f3: PUSH1 0xff
000004f5: NOT
000004f6: AND
000004f7: DUP4
000004f8: DUP1
000004f9: ADD
000004fa: OR
000004fb: DUP6
000004fc: SSTORE
000004fd: JUMPDEST
000004fe: POP
000004ff: PUSH2 0x05c9
00000502: SWAP3
00000503: SWAP2
00000504: POP
00000505: PUSH2 0x0581
00000508: JUMP
00000509: JUMPDEST
0000050a: POP
0000050b: POP
0000050c: PUSH1 0x00
0000050e: PUSH1 0x02
00000510: DUP3
00000511: ADD
00000512: SSTORE
00000513: PUSH1 0x01
00000515: ADD
00000516: JUMPDEST
00000517: DUP1
00000518: DUP3
00000519: GT
0000051a: ISZERO
0000051b: PUSH2 0x0595
0000051e: JUMPI
0000051f: DUP1
00000520: SLOAD
00000521: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000536: NOT
00000537: AND
00000538: DUP2
00000539: SSTORE
0000053a: PUSH1 0x01
0000053c: DUP2
0000053d: DUP2
0000053e: ADD
0000053f: DUP1
00000540: SLOAD
00000541: PUSH1 0x00
00000543: DUP1
00000544: DUP4
00000545: SSTORE
00000546: SWAP3
00000547: PUSH1 0x02
00000549: SWAP1
0000054a: DUP3
0000054b: AND
0000054c: ISZERO
0000054d: PUSH2 0x0100
00000550: MUL
00000551: PUSH1 0x00
00000553: NOT
00000554: ADD
00000555: SWAP1
00000556: SWAP2
00000557: AND
00000558: DIV
00000559: PUSH1 0x1f
0000055b: DUP2
0000055c: SWAP1
0000055d: LT
0000055e: PUSH2 0x0567
00000561: JUMPI
00000562: POP
00000563: PUSH2 0x0509
00000566: JUMP
00000567: JUMPDEST
00000568: PUSH1 0x1f
0000056a: ADD
0000056b: PUSH1 0x20
0000056d: SWAP1
0000056e: DIV
0000056f: SWAP1
00000570: PUSH1 0x00
00000572: MSTORE
00000573: PUSH1 0x20
00000575: PUSH1 0x00
00000577: KECCAK256
00000578: SWAP1
00000579: DUP2
0000057a: ADD
0000057b: SWAP1
0000057c: PUSH2 0x0509
0000057f: SWAP2
00000580: SWAP1
00000581: JUMPDEST
00000582: DUP1
00000583: DUP3
00000584: GT
00000585: ISZERO
00000586: PUSH2 0x0595
00000589: JUMPI
0000058a: PUSH1 0x00
0000058c: DUP2
0000058d: SSTORE
0000058e: PUSH1 0x01
00000590: ADD
00000591: PUSH2 0x0581
00000594: JUMP
00000595: JUMPDEST
00000596: POP
00000597: SWAP1
00000598: JUMP
00000599: JUMPDEST
0000059a: DUP3
0000059b: DUP1
0000059c: ADD
0000059d: PUSH1 0x01
0000059f: ADD
000005a0: DUP6
000005a1: SSTORE
000005a2: DUP3
000005a3: ISZERO
000005a4: PUSH2 0x04fd
000005a7: JUMPI
000005a8: SWAP2
000005a9: DUP3
000005aa: ADD
000005ab: JUMPDEST
000005ac: DUP3
000005ad: DUP2
000005ae: GT
000005af: ISZERO
000005b0: PUSH2 0x04fd
000005b3: JUMPI
000005b4: DUP3
000005b5: MLOAD
000005b6: DUP3
000005b7: PUSH1 0x00
000005b9: POP
000005ba: SSTORE
000005bb: SWAP2
000005bc: PUSH1 0x20
000005be: ADD
000005bf: SWAP2
000005c0: SWAP1
000005c1: PUSH1 0x01
000005c3: ADD
000005c4: SWAP1
000005c5: PUSH2 0x05ab
000005c8: JUMP
000005c9: JUMPDEST
000005ca: POP
000005cb: POP
000005cc: PUSH1 0x01
000005ce: SLOAD
000005cf: PUSH2 0x05f2
000005d2: SWAP1
000005d3: DUP1
000005d4: PUSH1 0x02
000005d6: PUSH1 0x01
000005d8: DUP3
000005d9: ADD
000005da: DIV
000005db: JUMPDEST
000005dc: DUP2
000005dd: DUP2
000005de: LT
000005df: ISZERO
000005e0: PUSH2 0x07f2
000005e3: JUMPI
000005e4: SWAP1
000005e5: POP
000005e6: PUSH1 0x02
000005e8: DUP2
000005e9: DUP4
000005ea: DIV
000005eb: DUP3
000005ec: ADD
000005ed: DIV
000005ee: PUSH2 0x05db
000005f1: JUMP
000005f2: JUMPDEST
000005f3: PUSH1 0x00
000005f5: DUP1
000005f6: SLOAD
000005f7: DUP5
000005f8: SWAP1
000005f9: DUP2
000005fa: LT
000005fb: ISZERO
000005fc: PUSH2 0x0002
000005ff: JUMPI
00000600: POP
00000601: DUP1
00000602: MSTORE
00000603: PUSH1 0x03
00000605: DUP4
00000606: DUP2
00000607: MUL
00000608: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e565
00000629: ADD
0000062a: SWAP2
0000062b: SWAP1
0000062c: SWAP2
0000062d: SSTORE
0000062e: PUSH1 0x01
00000630: DUP1
00000631: SLOAD
00000632: PUSH30 0x90e40fbeea1d3a4abc8955e946fe31cdcf66f634e1000000000000000000
00000651: ADD
00000652: SWAP1
00000653: SSTORE
00000654: DUP3
00000655: GT
00000656: ISZERO
00000657: PUSH2 0x0739
0000065a: JUMPI
0000065b: PUSH1 0x03
0000065d: DUP3
0000065e: SUB
0000065f: SWAP1
00000660: POP
00000661: PUSH1 0x00
00000663: PUSH1 0x00
00000665: POP
00000666: DUP2
00000667: DUP2
00000668: SLOAD
00000669: DUP2
0000066a: LT
0000066b: ISZERO
0000066c: PUSH2 0x0002
0000066f: JUMPI
00000670: POP
00000671: DUP1
00000672: DUP1
00000673: MSTORE
00000674: PUSH1 0x03
00000676: DUP3
00000677: MUL
00000678: PUSH1 0x00
0000067a: DUP1
0000067b: MLOAD
0000067c: PUSH1 0x20
0000067e: PUSH2 0x07f8
00000681: DUP4
00000682: CODECOPY
00000683: DUP2
00000684: MLOAD
00000685: SWAP2
00000686: MSTORE
00000687: ADD
00000688: SWAP1
00000689: POP
0000068a: PUSH1 0x01
0000068c: ADD
0000068d: PUSH1 0x00
0000068f: POP
00000690: PUSH1 0x02
00000692: PUSH1 0x00
00000694: POP
00000695: SWAP1
00000696: DUP1
00000697: SLOAD
00000698: PUSH1 0x01
0000069a: DUP2
0000069b: PUSH1 0x01
0000069d: AND
0000069e: ISZERO
0000069f: PUSH2 0x0100
000006a2: MUL
000006a3: SUB
000006a4: AND
000006a5: PUSH1 0x02
000006a7: SWAP1
000006a8: DIV
000006a9: DUP3
000006aa: DUP1
000006ab: SLOAD
000006ac: PUSH1 0x01
000006ae: DUP2
000006af: PUSH1 0x01
000006b1: AND
000006b2: ISZERO
000006b3: PUSH2 0x0100
000006b6: MUL
000006b7: SUB
000006b8: AND
000006b9: PUSH1 0x02
000006bb: SWAP1
000006bc: DIV
000006bd: SWAP1
000006be: PUSH1 0x00
000006c0: MSTORE
000006c1: PUSH1 0x20
000006c3: PUSH1 0x00
000006c5: KECCAK256
000006c6: SWAP1
000006c7: PUSH1 0x1f
000006c9: ADD
000006ca: PUSH1 0x20
000006cc: SWAP1
000006cd: DIV
000006ce: DUP2
000006cf: ADD
000006d0: SWAP3
000006d1: DUP3
000006d2: PUSH1 0x1f
000006d4: LT
000006d5: PUSH2 0x073d
000006d8: JUMPI
000006d9: DUP1
000006da: SLOAD
000006db: DUP6
000006dc: SSTORE
000006dd: JUMPDEST
000006de: POP
000006df: PUSH2 0x06e9
000006e2: SWAP3
000006e3: SWAP2
000006e4: POP
000006e5: PUSH2 0x0581
000006e8: JUMP
000006e9: JUMPDEST
000006ea: POP
000006eb: POP
000006ec: PUSH1 0x00
000006ee: DUP1
000006ef: SLOAD
000006f0: DUP3
000006f1: SWAP1
000006f2: DUP2
000006f3: LT
000006f4: ISZERO
000006f5: PUSH2 0x0002
000006f8: JUMPI
000006f9: POP
000006fa: DUP1
000006fb: DUP1
000006fc: MSTORE
000006fd: PUSH1 0x03
000006ff: DUP3
00000700: MUL
00000701: PUSH1 0x00
00000703: DUP1
00000704: MLOAD
00000705: PUSH1 0x20
00000707: PUSH2 0x07f8
0000070a: DUP4
0000070b: CODECOPY
0000070c: DUP2
0000070d: MLOAD
0000070e: SWAP2
0000070f: MSTORE
00000710: ADD
00000711: SLOAD
00000712: PUSH1 0x40
00000714: MLOAD
00000715: PUSH1 0x01
00000717: PUSH1 0xa0
00000719: PUSH1 0x02
0000071b: EXP
0000071c: SUB
0000071d: SWAP2
0000071e: SWAP1
0000071f: SWAP2
00000720: AND
00000721: SWAP2
00000722: SWAP1
00000723: PUSH7 0x071afd498d0000
0000072b: SWAP1
0000072c: DUP3
0000072d: DUP2
0000072e: DUP2
0000072f: DUP2
00000730: DUP6
00000731: DUP9
00000732: DUP4
00000733: CALL
00000734: POP
00000735: POP
00000736: POP
00000737: POP
00000738: POP
00000739: JUMPDEST
0000073a: POP
0000073b: POP
0000073c: JUMP
0000073d: JUMPDEST
0000073e: DUP3
0000073f: DUP1
00000740: ADD
00000741: PUSH1 0x01
00000743: ADD
00000744: DUP6
00000745: SSTORE
00000746: DUP3
00000747: ISZERO
00000748: PUSH2 0x06dd
0000074b: JUMPI
0000074c: PUSH1 0x00
0000074e: MSTORE
0000074f: PUSH1 0x20
00000751: PUSH1 0x00
00000753: KECCAK256
00000754: SWAP2
00000755: PUSH1 0x1f
00000757: ADD
00000758: PUSH1 0x20
0000075a: SWAP1
0000075b: DIV
0000075c: DUP3
0000075d: ADD
0000075e: JUMPDEST
0000075f: DUP3
00000760: DUP2
00000761: GT
00000762: ISZERO
00000763: PUSH2 0x06dd
00000766: JUMPI
00000767: DUP3
00000768: SLOAD
00000769: DUP3
0000076a: SSTORE
0000076b: SWAP2
0000076c: PUSH1 0x01
0000076e: ADD
0000076f: SWAP2
00000770: SWAP1
00000771: PUSH1 0x01
00000773: ADD
00000774: SWAP1
00000775: PUSH2 0x075e
00000778: JUMP
00000779: JUMPDEST
0000077a: PUSH1 0x00
0000077c: DUP1
0000077d: SLOAD
0000077e: DUP4
0000077f: SWAP1
00000780: DUP2
00000781: LT
00000782: ISZERO
00000783: PUSH2 0x0002
00000786: JUMPI
00000787: POP
00000788: DUP1
00000789: MSTORE
0000078a: POP
0000078b: PUSH1 0x03
0000078d: DUP2
0000078e: MUL
0000078f: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e565
000007b0: ADD
000007b1: SLOAD
000007b2: JUMPDEST
000007b3: SWAP2
000007b4: SWAP1
000007b5: POP
000007b6: JUMP
000007b7: JUMPDEST
000007b8: POP
000007b9: POP
000007ba: JUMPDEST
000007bb: PUSH1 0x01
000007bd: ADD
000007be: PUSH2 0x00f9
000007c1: JUMP
000007c2: JUMPDEST
000007c3: DUP3
000007c4: DUP1
000007c5: ADD
000007c6: PUSH1 0x01
000007c8: ADD
000007c9: DUP6
000007ca: SSTORE
000007cb: DUP3
000007cc: ISZERO
000007cd: PUSH2 0x01af
000007d0: JUMPI
000007d1: SWAP2
000007d2: DUP3
000007d3: ADD
000007d4: JUMPDEST
000007d5: DUP3
000007d6: DUP2
000007d7: GT
000007d8: ISZERO
000007d9: PUSH2 0x01af
000007dc: JUMPI
000007dd: DUP3
000007de: MLOAD
000007df: DUP3
000007e0: PUSH1 0x00
000007e2: POP
000007e3: SSTORE
000007e4: SWAP2
000007e5: PUSH1 0x20
000007e7: ADD
000007e8: SWAP2
000007e9: SWAP1
000007ea: PUSH1 0x01
000007ec: ADD
000007ed: SWAP1
000007ee: PUSH2 0x07d4
000007f1: JUMP
000007f2: JUMPDEST
000007f3: POP
000007f4: SWAP2
000007f5: SWAP1
000007f6: POP
000007f7: JUMP
000007f8: UNKNOWN(0x29)
000007f9: UNKNOWN(0x0D)
000007fa: UNKNOWN(0xEC)
000007fb: UNKNOWN(0xD9)
000007fc: SLOAD
000007fd: DUP12
000007fe: PUSH3 0xa8d603
00000802: GASLIMIT
00000803: UNKNOWN(0xA9)
00000804: DUP9
00000805: CODESIZE
00000806: PUSH16 0xc84ba6bc95484008f6362f93160ef3e5
00000817: PUSH4
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x034f6ff91dacbe34c1c24d90b66b51b558cabb30bf1082fbbf410c6f6d486c9d
call_targets: 0x868fd2adc2ac1d29a51ab547ded4a838e1b60da4
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x034f6ff91dacbe34c1c24d90b66b51b558cabb30bf1082fbbf410c6f6d486c9d",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x868fd2adc2ac1d29a51ab547ded4a838e1b60da4"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x5353a2d8",
            "selector": "0x5353a2d8",
            "calldata_variants": [
                "0x5353a2d8",
                "0x5353a2d80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5e9ccf30",
            "selector": "0x5e9ccf30",
            "calldata_variants": [
                "0x5e9ccf30",
                "0x5e9ccf300000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x65a06f16",
            "selector": "0x65a06f16",
            "calldata_variants": [
                "0x65a06f16",
                "0x65a06f160000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x677342ce",
            "selector": "0x677342ce",
            "calldata_variants": [
                "0x677342ce",
                "0x677342ce0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x848202fe",
            "selector": "0x848202fe",
            "calldata_variants": [
                "0x848202fe",
                "0x848202fe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 910,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1843,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x034f6ff91dacbe34c1c24d90b66b51b558cabb30bf1082fbbf410c6f6d486c9d
call_targets: 0x868fd2adc2ac1d29a51ab547ded4a838e1b60da4
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x034f6ff91dacbe34c1c24d90b66b51b558cabb30bf1082fbbf410c6f6d486c9d",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x868fd2adc2ac1d29a51ab547ded4a838e1b60da4"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x5353a2d8",
            "selector": "0x5353a2d8",
            "calldata_variants": [
                "0x5353a2d8",
                "0x5353a2d80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5e9ccf30",
            "selector": "0x5e9ccf30",
            "calldata_variants": [
                "0x5e9ccf30",
                "0x5e9ccf300000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x65a06f16",
            "selector": "0x65a06f16",
            "calldata_variants": [
                "0x65a06f16",
                "0x65a06f160000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x677342ce",
            "selector": "0x677342ce",
            "calldata_variants": [
                "0x677342ce",
                "0x677342ce0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x848202fe",
            "selector": "0x848202fe",
            "calldata_variants": [
                "0x848202fe",
                "0x848202fe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 910,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1843,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}