TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-3b78-736b-a0b5-271d3331cca2

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
4399 artifact.fetch complete 1 / 3 3 months ago
4400 tool.cast_disasm complete 1 / 3 3 months ago
47276 analysis.bundle complete 1 / 3 1 week ago
47277 capability.graph complete 1 / 3 1 week ago
47278 detector.run complete 1 / 3 1 week ago
47279 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
2
EXT*/BALANCE
0
Total opcodes
1420
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x004b
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x5353a2d8
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00b8
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x5e9ccf30
00000025: EQ
00000026: PUSH2 0x01c2
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x65a06f16
00000030: EQ
00000031: PUSH2 0x0244
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x677342ce
0000003b: EQ
0000003c: PUSH2 0x02a2
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x848202fe
00000046: EQ
00000047: PUSH2 0x02b8
0000004a: JUMPI
0000004b: JUMPDEST
0000004c: PUSH2 0x02c1
0000004f: PUSH2 0x02c3
00000052: PUSH1 0x00
00000054: PUSH1 0x00
00000056: CALLVALUE
00000057: PUSH7 0x038d7ea4c68000
0000005f: EQ
00000060: ISZERO
00000061: PUSH2 0x0723
00000064: JUMPI
00000065: PUSH1 0x02
00000067: DUP1
00000068: SLOAD
00000069: PUSH7 0x038d7ea4c68000
00000071: ADD
00000072: SWAP1
00000073: DUP2
00000074: SWAP1
00000075: SSTORE
00000076: PUSH7 0x071afd498d0000
0000007e: SWAP1
0000007f: LT
00000080: PUSH2 0x0723
00000083: JUMPI
00000084: DUP1
00000085: SLOAD
00000086: PUSH1 0x01
00000088: DUP2
00000089: ADD
0000008a: DUP1
0000008b: DUP4
0000008c: SSTORE
0000008d: SWAP1
0000008e: SWAP3
0000008f: DUP2
00000090: DUP5
00000091: DUP1
00000092: ISZERO
00000093: DUP3
00000094: SWAP1
00000095: GT
00000096: PUSH2 0x03e5
00000099: JUMPI
0000009a: PUSH1 0x03
0000009c: MUL
0000009d: DUP2
0000009e: PUSH1 0x03
000000a0: MUL
000000a1: DUP4
000000a2: PUSH1 0x00
000000a4: MSTORE
000000a5: PUSH1 0x20
000000a7: PUSH1 0x00
000000a9: KECCAK256
000000aa: SWAP2
000000ab: DUP3
000000ac: ADD
000000ad: SWAP2
000000ae: ADD
000000af: PUSH2 0x03e5
000000b2: SWAP2
000000b3: SWAP1
000000b4: PUSH2 0x04f0
000000b7: JUMP
000000b8: JUMPDEST
000000b9: PUSH1 0x40
000000bb: DUP1
000000bc: MLOAD
000000bd: PUSH1 0x20
000000bf: PUSH1 0x04
000000c1: DUP1
000000c2: CALLDATALOAD
000000c3: DUP1
000000c4: DUP3
000000c5: ADD
000000c6: CALLDATALOAD
000000c7: PUSH1 0x1f
000000c9: DUP2
000000ca: ADD
000000cb: DUP5
000000cc: SWAP1
000000cd: DIV
000000ce: DUP5
000000cf: MUL
000000d0: DUP6
000000d1: ADD
000000d2: DUP5
000000d3: ADD
000000d4: SWAP1
000000d5: SWAP6
000000d6: MSTORE
000000d7: DUP5
000000d8: DUP5
000000d9: MSTORE
000000da: PUSH2 0x02c1
000000dd: SWAP5
000000de: SWAP2
000000df: SWAP4
000000e0: PUSH1 0x24
000000e2: SWAP4
000000e3: SWAP1
000000e4: SWAP3
000000e5: SWAP2
000000e6: DUP5
000000e7: ADD
000000e8: SWAP2
000000e9: SWAP1
000000ea: DUP2
000000eb: SWAP1
000000ec: DUP5
000000ed: ADD
000000ee: DUP4
000000ef: DUP3
000000f0: DUP1
000000f1: DUP3
000000f2: DUP5
000000f3: CALLDATACOPY
000000f4: POP
000000f5: SWAP5
000000f6: SWAP7
000000f7: POP
000000f8: POP
000000f9: POP
000000fa: POP
000000fb: POP
000000fc: POP
000000fd: POP
000000fe: PUSH1 0x00
00000100: JUMPDEST
00000101: PUSH1 0x00
00000103: SLOAD
00000104: DUP2
00000105: LT
00000106: ISZERO
00000107: PUSH2 0x0723
0000010a: JUMPI
0000010b: PUSH1 0x00
0000010d: DUP1
0000010e: SLOAD
0000010f: DUP3
00000110: SWAP1
00000111: DUP2
00000112: LT
00000113: ISZERO
00000114: PUSH2 0x0002
00000117: JUMPI
00000118: SWAP1
00000119: DUP1
0000011a: MSTORE
0000011b: PUSH1 0x03
0000011d: MUL
0000011e: PUSH1 0x00
00000120: DUP1
00000121: MLOAD
00000122: PUSH1 0x20
00000124: PUSH2 0x0815
00000127: DUP4
00000128: CODECOPY
00000129: DUP2
0000012a: MLOAD
0000012b: SWAP2
0000012c: MSTORE
0000012d: ADD
0000012e: SLOAD
0000012f: PUSH1 0x01
00000131: PUSH1 0xa0
00000133: PUSH1 0x02
00000135: EXP
00000136: SUB
00000137: SWAP1
00000138: DUP2
00000139: AND
0000013a: CALLER
0000013b: SWAP1
0000013c: SWAP2
0000013d: AND
0000013e: EQ
0000013f: ISZERO
00000140: PUSH2 0x07a4
00000143: JUMPI
00000144: DUP2
00000145: PUSH1 0x00
00000147: PUSH1 0x00
00000149: POP
0000014a: DUP3
0000014b: DUP2
0000014c: SLOAD
0000014d: DUP2
0000014e: LT
0000014f: ISZERO
00000150: PUSH2 0x0002
00000153: JUMPI
00000154: DUP2
00000155: DUP1
00000156: MSTORE
00000157: PUSH1 0x03
00000159: MUL
0000015a: PUSH1 0x00
0000015c: DUP1
0000015d: MLOAD
0000015e: PUSH1 0x20
00000160: PUSH2 0x0815
00000163: DUP4
00000164: CODECOPY
00000165: DUP2
00000166: MLOAD
00000167: SWAP2
00000168: MSTORE
00000169: ADD
0000016a: SWAP1
0000016b: POP
0000016c: PUSH1 0x01
0000016e: ADD
0000016f: PUSH1 0x00
00000171: POP
00000172: SWAP1
00000173: DUP1
00000174: MLOAD
00000175: SWAP1
00000176: PUSH1 0x20
00000178: ADD
00000179: SWAP1
0000017a: DUP3
0000017b: DUP1
0000017c: SLOAD
0000017d: PUSH1 0x01
0000017f: DUP2
00000180: PUSH1 0x01
00000182: AND
00000183: ISZERO
00000184: PUSH2 0x0100
00000187: MUL
00000188: SUB
00000189: AND
0000018a: PUSH1 0x02
0000018c: SWAP1
0000018d: DIV
0000018e: SWAP1
0000018f: PUSH1 0x00
00000191: MSTORE
00000192: PUSH1 0x20
00000194: PUSH1 0x00
00000196: KECCAK256
00000197: SWAP1
00000198: PUSH1 0x1f
0000019a: ADD
0000019b: PUSH1 0x20
0000019d: SWAP1
0000019e: DIV
0000019f: DUP2
000001a0: ADD
000001a1: SWAP3
000001a2: DUP3
000001a3: PUSH1 0x1f
000001a5: LT
000001a6: PUSH2 0x07ac
000001a9: JUMPI
000001aa: DUP1
000001ab: MLOAD
000001ac: PUSH1 0xff
000001ae: NOT
000001af: AND
000001b0: DUP4
000001b1: DUP1
000001b2: ADD
000001b3: OR
000001b4: DUP6
000001b5: SSTORE
000001b6: JUMPDEST
000001b7: POP
000001b8: PUSH2 0x07a1
000001bb: SWAP3
000001bc: SWAP2
000001bd: POP
000001be: PUSH2 0x055b
000001c1: JUMP
000001c2: JUMPDEST
000001c3: PUSH2 0x02c5
000001c6: PUSH1 0x04
000001c8: CALLDATALOAD
000001c9: PUSH1 0x00
000001cb: DUP1
000001cc: SLOAD
000001cd: DUP3
000001ce: SWAP1
000001cf: DUP2
000001d0: LT
000001d1: ISZERO
000001d2: PUSH2 0x0002
000001d5: JUMPI
000001d6: POP
000001d7: DUP1
000001d8: MSTORE
000001d9: PUSH1 0x03
000001db: MUL
000001dc: PUSH1 0x00
000001de: DUP1
000001df: MLOAD
000001e0: PUSH1 0x20
000001e2: PUSH2 0x0815
000001e5: DUP4
000001e6: CODECOPY
000001e7: DUP2
000001e8: MLOAD
000001e9: SWAP2
000001ea: MSTORE
000001eb: DUP2
000001ec: ADD
000001ed: SLOAD
000001ee: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e565
0000020f: DUP3
00000210: ADD
00000211: SLOAD
00000212: PUSH1 0x01
00000214: PUSH1 0xa0
00000216: PUSH1 0x02
00000218: EXP
00000219: SUB
0000021a: SWAP2
0000021b: SWAP1
0000021c: SWAP2
0000021d: AND
0000021e: SWAP2
0000021f: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e564
00000240: ADD
00000241: SWAP1
00000242: DUP4
00000243: JUMP
00000244: JUMPDEST
00000245: PUSH1 0x40
00000247: DUP1
00000248: MLOAD
00000249: PUSH1 0x03
0000024b: DUP1
0000024c: SLOAD
0000024d: PUSH1 0x20
0000024f: PUSH1 0x02
00000251: PUSH1 0x01
00000253: DUP4
00000254: AND
00000255: ISZERO
00000256: PUSH2 0x0100
00000259: MUL
0000025a: PUSH1 0x00
0000025c: NOT
0000025d: ADD
0000025e: SWAP1
0000025f: SWAP3
00000260: AND
00000261: SWAP2
00000262: SWAP1
00000263: SWAP2
00000264: DIV
00000265: PUSH1 0x1f
00000267: DUP2
00000268: ADD
00000269: DUP3
0000026a: SWAP1
0000026b: DIV
0000026c: DUP3
0000026d: MUL
0000026e: DUP5
0000026f: ADD
00000270: DUP3
00000271: ADD
00000272: SWAP1
00000273: SWAP5
00000274: MSTORE
00000275: DUP4
00000276: DUP4
00000277: MSTORE
00000278: PUSH2 0x0365
0000027b: SWAP4
0000027c: SWAP1
0000027d: DUP4
0000027e: ADD
0000027f: DUP3
00000280: DUP3
00000281: DUP1
00000282: ISZERO
00000283: PUSH2 0x0807
00000286: JUMPI
00000287: DUP1
00000288: PUSH1 0x1f
0000028a: LT
0000028b: PUSH2 0x07dc
0000028e: JUMPI
0000028f: PUSH2 0x0100
00000292: DUP1
00000293: DUP4
00000294: SLOAD
00000295: DIV
00000296: MUL
00000297: DUP4
00000298: MSTORE
00000299: SWAP2
0000029a: PUSH1 0x20
0000029c: ADD
0000029d: SWAP2
0000029e: PUSH2 0x0807
000002a1: JUMP
000002a2: JUMPDEST
000002a3: PUSH2 0x03d3
000002a6: PUSH1 0x04
000002a8: CALLDATALOAD
000002a9: PUSH1 0x00
000002ab: DUP1
000002ac: SLOAD
000002ad: DUP3
000002ae: GT
000002af: ISZERO
000002b0: PUSH2 0x0763
000002b3: JUMPI
000002b4: PUSH2 0x079c
000002b7: JUMP
000002b8: JUMPDEST
000002b9: PUSH2 0x03d3
000002bc: PUSH1 0x01
000002be: SLOAD
000002bf: DUP2
000002c0: JUMP
000002c1: JUMPDEST
000002c2: STOP
000002c3: JUMPDEST
000002c4: JUMP
000002c5: JUMPDEST
000002c6: PUSH1 0x40
000002c8: DUP1
000002c9: MLOAD
000002ca: PUSH1 0x01
000002cc: PUSH1 0xa0
000002ce: PUSH1 0x02
000002d0: EXP
000002d1: SUB
000002d2: DUP6
000002d3: AND
000002d4: DUP2
000002d5: MSTORE
000002d6: SWAP1
000002d7: DUP2
000002d8: ADD
000002d9: DUP3
000002da: SWAP1
000002db: MSTORE
000002dc: PUSH1 0x60
000002de: PUSH1 0x20
000002e0: DUP3
000002e1: ADD
000002e2: DUP2
000002e3: DUP2
000002e4: MSTORE
000002e5: DUP5
000002e6: SLOAD
000002e7: PUSH1 0x02
000002e9: PUSH1 0x01
000002eb: DUP3
000002ec: AND
000002ed: ISZERO
000002ee: PUSH2 0x0100
000002f1: MUL
000002f2: PUSH1 0x00
000002f4: NOT
000002f5: ADD
000002f6: SWAP1
000002f7: SWAP2
000002f8: AND
000002f9: DIV
000002fa: SWAP2
000002fb: DUP4
000002fc: ADD
000002fd: DUP3
000002fe: SWAP1
000002ff: MSTORE
00000300: SWAP1
00000301: PUSH1 0x80
00000303: DUP4
00000304: ADD
00000305: SWAP1
00000306: DUP6
00000307: SWAP1
00000308: DUP1
00000309: ISZERO
0000030a: PUSH2 0x0354
0000030d: JUMPI
0000030e: DUP1
0000030f: PUSH1 0x1f
00000311: LT
00000312: PUSH2 0x0329
00000315: JUMPI
00000316: PUSH2 0x0100
00000319: DUP1
0000031a: DUP4
0000031b: SLOAD
0000031c: DIV
0000031d: MUL
0000031e: DUP4
0000031f: MSTORE
00000320: SWAP2
00000321: PUSH1 0x20
00000323: ADD
00000324: SWAP2
00000325: PUSH2 0x0354
00000328: JUMP
00000329: JUMPDEST
0000032a: DUP3
0000032b: ADD
0000032c: SWAP2
0000032d: SWAP1
0000032e: PUSH1 0x00
00000330: MSTORE
00000331: PUSH1 0x20
00000333: PUSH1 0x00
00000335: KECCAK256
00000336: SWAP1
00000337: JUMPDEST
00000338: DUP2
00000339: SLOAD
0000033a: DUP2
0000033b: MSTORE
0000033c: SWAP1
0000033d: PUSH1 0x01
0000033f: ADD
00000340: SWAP1
00000341: PUSH1 0x20
00000343: ADD
00000344: DUP1
00000345: DUP4
00000346: GT
00000347: PUSH2 0x0337
0000034a: JUMPI
0000034b: DUP3
0000034c: SWAP1
0000034d: SUB
0000034e: PUSH1 0x1f
00000350: AND
00000351: DUP3
00000352: ADD
00000353: SWAP2
00000354: JUMPDEST
00000355: POP
00000356: POP
00000357: SWAP5
00000358: POP
00000359: POP
0000035a: POP
0000035b: POP
0000035c: POP
0000035d: PUSH1 0x40
0000035f: MLOAD
00000360: DUP1
00000361: SWAP2
00000362: SUB
00000363: SWAP1
00000364: RETURN
00000365: JUMPDEST
00000366: PUSH1 0x40
00000368: MLOAD
00000369: DUP1
0000036a: DUP1
0000036b: PUSH1 0x20
0000036d: ADD
0000036e: DUP3
0000036f: DUP2
00000370: SUB
00000371: DUP3
00000372: MSTORE
00000373: DUP4
00000374: DUP2
00000375: DUP2
00000376: MLOAD
00000377: DUP2
00000378: MSTORE
00000379: PUSH1 0x20
0000037b: ADD
0000037c: SWAP2
0000037d: POP
0000037e: DUP1
0000037f: MLOAD
00000380: SWAP1
00000381: PUSH1 0x20
00000383: ADD
00000384: SWAP1
00000385: DUP1
00000386: DUP4
00000387: DUP4
00000388: DUP3
00000389: SWAP1
0000038a: PUSH1 0x00
0000038c: PUSH1 0x04
0000038e: PUSH1 0x20
00000390: DUP5
00000391: PUSH1 0x1f
00000393: ADD
00000394: DIV
00000395: PUSH1 0x0f
00000397: MUL
00000398: PUSH1 0x03
0000039a: ADD
0000039b: CALL
0000039c: POP
0000039d: SWAP1
0000039e: POP
0000039f: SWAP1
000003a0: DUP2
000003a1: ADD
000003a2: SWAP1
000003a3: PUSH1 0x1f
000003a5: AND
000003a6: DUP1
000003a7: ISZERO
000003a8: PUSH2 0x03c5
000003ab: JUMPI
000003ac: DUP1
000003ad: DUP3
000003ae: SUB
000003af: DUP1
000003b0: MLOAD
000003b1: PUSH1 0x01
000003b3: DUP4
000003b4: PUSH1 0x20
000003b6: SUB
000003b7: PUSH2 0x0100
000003ba: EXP
000003bb: SUB
000003bc: NOT
000003bd: AND
000003be: DUP2
000003bf: MSTORE
000003c0: PUSH1 0x20
000003c2: ADD
000003c3: SWAP2
000003c4: POP
000003c5: JUMPDEST
000003c6: POP
000003c7: SWAP3
000003c8: POP
000003c9: POP
000003ca: POP
000003cb: PUSH1 0x40
000003cd: MLOAD
000003ce: DUP1
000003cf: SWAP2
000003d0: SUB
000003d1: SWAP1
000003d2: RETURN
000003d3: JUMPDEST
000003d4: PUSH1 0x40
000003d6: DUP1
000003d7: MLOAD
000003d8: SWAP2
000003d9: DUP3
000003da: MSTORE
000003db: MLOAD
000003dc: SWAP1
000003dd: DUP2
000003de: SWAP1
000003df: SUB
000003e0: PUSH1 0x20
000003e2: ADD
000003e3: SWAP1
000003e4: RETURN
000003e5: JUMPDEST
000003e6: POP
000003e7: POP
000003e8: POP
000003e9: POP
000003ea: CALLER
000003eb: PUSH1 0x00
000003ed: PUSH1 0x00
000003ef: POP
000003f0: DUP4
000003f1: DUP2
000003f2: SLOAD
000003f3: DUP2
000003f4: LT
000003f5: ISZERO
000003f6: PUSH2 0x0002
000003f9: JUMPI
000003fa: POP
000003fb: DUP1
000003fc: DUP1
000003fd: MSTORE
000003fe: PUSH1 0x03
00000400: DUP5
00000401: MUL
00000402: PUSH1 0x00
00000404: DUP1
00000405: MLOAD
00000406: PUSH1 0x20
00000408: PUSH2 0x0815
0000040b: DUP4
0000040c: CODECOPY
0000040d: DUP2
0000040e: MLOAD
0000040f: SWAP2
00000410: MSTORE
00000411: ADD
00000412: SWAP1
00000413: POP
00000414: DUP1
00000415: SLOAD
00000416: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000042b: NOT
0000042c: AND
0000042d: SWAP1
0000042e: SWAP2
0000042f: OR
00000430: SWAP1
00000431: SSTORE
00000432: PUSH1 0x40
00000434: DUP1
00000435: MLOAD
00000436: DUP1
00000437: DUP3
00000438: ADD
00000439: SWAP1
0000043a: SWAP2
0000043b: MSTORE
0000043c: PUSH1 0x18
0000043e: DUP2
0000043f: MSTORE
00000440: PUSH32 0x41776172642077696e6e696e672063616c63756c61746f720000000000000000
00000461: PUSH1 0x20
00000463: DUP3
00000464: ADD
00000465: MSTORE
00000466: PUSH1 0x00
00000468: DUP1
00000469: SLOAD
0000046a: DUP5
0000046b: SWAP1
0000046c: DUP2
0000046d: LT
0000046e: ISZERO
0000046f: PUSH2 0x0002
00000472: JUMPI
00000473: POP
00000474: DUP1
00000475: DUP1
00000476: MSTORE
00000477: PUSH1 0x03
00000479: DUP5
0000047a: MUL
0000047b: PUSH1 0x00
0000047d: DUP1
0000047e: MLOAD
0000047f: PUSH1 0x20
00000481: PUSH2 0x0815
00000484: DUP4
00000485: CODECOPY
00000486: DUP2
00000487: MLOAD
00000488: SWAP2
00000489: MSTORE
0000048a: ADD
0000048b: SWAP1
0000048c: POP
0000048d: PUSH1 0x01
0000048f: ADD
00000490: PUSH1 0x00
00000492: POP
00000493: SWAP1
00000494: DUP1
00000495: MLOAD
00000496: SWAP1
00000497: PUSH1 0x20
00000499: ADD
0000049a: SWAP1
0000049b: DUP3
0000049c: DUP1
0000049d: SLOAD
0000049e: PUSH1 0x01
000004a0: DUP2
000004a1: PUSH1 0x01
000004a3: AND
000004a4: ISZERO
000004a5: PUSH2 0x0100
000004a8: MUL
000004a9: SUB
000004aa: AND
000004ab: PUSH1 0x02
000004ad: SWAP1
000004ae: DIV
000004af: SWAP1
000004b0: PUSH1 0x00
000004b2: MSTORE
000004b3: PUSH1 0x20
000004b5: PUSH1 0x00
000004b7: KECCAK256
000004b8: SWAP1
000004b9: PUSH1 0x1f
000004bb: ADD
000004bc: PUSH1 0x20
000004be: SWAP1
000004bf: DIV
000004c0: DUP2
000004c1: ADD
000004c2: SWAP3
000004c3: DUP3
000004c4: PUSH1 0x1f
000004c6: LT
000004c7: PUSH2 0x0573
000004ca: JUMPI
000004cb: DUP1
000004cc: MLOAD
000004cd: PUSH1 0xff
000004cf: NOT
000004d0: AND
000004d1: DUP4
000004d2: DUP1
000004d3: ADD
000004d4: OR
000004d5: DUP6
000004d6: SSTORE
000004d7: JUMPDEST
000004d8: POP
000004d9: PUSH2 0x05a3
000004dc: SWAP3
000004dd: SWAP2
000004de: POP
000004df: PUSH2 0x055b
000004e2: JUMP
000004e3: JUMPDEST
000004e4: POP
000004e5: POP
000004e6: PUSH1 0x00
000004e8: PUSH1 0x02
000004ea: DUP3
000004eb: ADD
000004ec: SSTORE
000004ed: PUSH1 0x01
000004ef: ADD
000004f0: JUMPDEST
000004f1: DUP1
000004f2: DUP3
000004f3: GT
000004f4: ISZERO
000004f5: PUSH2 0x056f
000004f8: JUMPI
000004f9: DUP1
000004fa: SLOAD
000004fb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000510: NOT
00000511: AND
00000512: DUP2
00000513: SSTORE
00000514: PUSH1 0x01
00000516: DUP2
00000517: DUP2
00000518: ADD
00000519: DUP1
0000051a: SLOAD
0000051b: PUSH1 0x00
0000051d: DUP1
0000051e: DUP4
0000051f: SSTORE
00000520: SWAP3
00000521: PUSH1 0x02
00000523: SWAP1
00000524: DUP3
00000525: AND
00000526: ISZERO
00000527: PUSH2 0x0100
0000052a: MUL
0000052b: PUSH1 0x00
0000052d: NOT
0000052e: ADD
0000052f: SWAP1
00000530: SWAP2
00000531: AND
00000532: DIV
00000533: PUSH1 0x1f
00000535: DUP2
00000536: SWAP1
00000537: LT
00000538: PUSH2 0x0541
0000053b: JUMPI
0000053c: POP
0000053d: PUSH2 0x04e3
00000540: JUMP
00000541: JUMPDEST
00000542: PUSH1 0x1f
00000544: ADD
00000545: PUSH1 0x20
00000547: SWAP1
00000548: DIV
00000549: SWAP1
0000054a: PUSH1 0x00
0000054c: MSTORE
0000054d: PUSH1 0x20
0000054f: PUSH1 0x00
00000551: KECCAK256
00000552: SWAP1
00000553: DUP2
00000554: ADD
00000555: SWAP1
00000556: PUSH2 0x04e3
00000559: SWAP2
0000055a: SWAP1
0000055b: JUMPDEST
0000055c: DUP1
0000055d: DUP3
0000055e: GT
0000055f: ISZERO
00000560: PUSH2 0x056f
00000563: JUMPI
00000564: PUSH1 0x00
00000566: DUP2
00000567: SSTORE
00000568: PUSH1 0x01
0000056a: ADD
0000056b: PUSH2 0x055b
0000056e: JUMP
0000056f: JUMPDEST
00000570: POP
00000571: SWAP1
00000572: JUMP
00000573: JUMPDEST
00000574: DUP3
00000575: DUP1
00000576: ADD
00000577: PUSH1 0x01
00000579: ADD
0000057a: DUP6
0000057b: SSTORE
0000057c: DUP3
0000057d: ISZERO
0000057e: PUSH2 0x04d7
00000581: JUMPI
00000582: SWAP2
00000583: DUP3
00000584: ADD
00000585: JUMPDEST
00000586: DUP3
00000587: DUP2
00000588: GT
00000589: ISZERO
0000058a: PUSH2 0x04d7
0000058d: JUMPI
0000058e: DUP3
0000058f: MLOAD
00000590: DUP3
00000591: PUSH1 0x00
00000593: POP
00000594: SSTORE
00000595: SWAP2
00000596: PUSH1 0x20
00000598: ADD
00000599: SWAP2
0000059a: SWAP1
0000059b: PUSH1 0x01
0000059d: ADD
0000059e: SWAP1
0000059f: PUSH2 0x0585
000005a2: JUMP
000005a3: JUMPDEST
000005a4: POP
000005a5: POP
000005a6: PUSH1 0x01
000005a8: SLOAD
000005a9: PUSH2 0x05cc
000005ac: SWAP1
000005ad: DUP1
000005ae: PUSH1 0x02
000005b0: PUSH1 0x01
000005b2: DUP3
000005b3: ADD
000005b4: DIV
000005b5: JUMPDEST
000005b6: DUP2
000005b7: DUP2
000005b8: LT
000005b9: ISZERO
000005ba: PUSH2 0x080f
000005bd: JUMPI
000005be: SWAP1
000005bf: POP
000005c0: PUSH1 0x02
000005c2: DUP2
000005c3: DUP4
000005c4: DIV
000005c5: DUP3
000005c6: ADD
000005c7: DIV
000005c8: PUSH2 0x05b5
000005cb: JUMP
000005cc: JUMPDEST
000005cd: PUSH1 0x00
000005cf: DUP1
000005d0: SLOAD
000005d1: DUP5
000005d2: SWAP1
000005d3: DUP2
000005d4: LT
000005d5: ISZERO
000005d6: PUSH2 0x0002
000005d9: JUMPI
000005da: POP
000005db: DUP1
000005dc: MSTORE
000005dd: PUSH1 0x03
000005df: DUP4
000005e0: DUP2
000005e1: MUL
000005e2: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e565
00000603: ADD
00000604: SWAP2
00000605: SWAP1
00000606: SWAP2
00000607: SSTORE
00000608: PUSH1 0x01
0000060a: DUP1
0000060b: SLOAD
0000060c: PUSH30 0x90e40fbeea1d3a4abc8955e946fe31cdcf66f634e1000000000000000000
0000062b: ADD
0000062c: SWAP1
0000062d: SSTORE
0000062e: DUP3
0000062f: GT
00000630: ISZERO
00000631: PUSH2 0x0723
00000634: JUMPI
00000635: PUSH1 0x03
00000637: DUP3
00000638: SUB
00000639: SWAP1
0000063a: POP
0000063b: PUSH1 0x00
0000063d: PUSH1 0x00
0000063f: POP
00000640: DUP2
00000641: DUP2
00000642: SLOAD
00000643: DUP2
00000644: LT
00000645: ISZERO
00000646: PUSH2 0x0002
00000649: JUMPI
0000064a: POP
0000064b: DUP1
0000064c: DUP1
0000064d: MSTORE
0000064e: PUSH1 0x03
00000650: DUP3
00000651: MUL
00000652: PUSH1 0x00
00000654: DUP1
00000655: MLOAD
00000656: PUSH1 0x20
00000658: PUSH2 0x0815
0000065b: DUP4
0000065c: CODECOPY
0000065d: DUP2
0000065e: MLOAD
0000065f: SWAP2
00000660: MSTORE
00000661: ADD
00000662: SWAP1
00000663: POP
00000664: PUSH1 0x01
00000666: ADD
00000667: PUSH1 0x00
00000669: POP
0000066a: PUSH1 0x03
0000066c: PUSH1 0x00
0000066e: POP
0000066f: SWAP1
00000670: DUP1
00000671: SLOAD
00000672: PUSH1 0x01
00000674: DUP2
00000675: PUSH1 0x01
00000677: AND
00000678: ISZERO
00000679: PUSH2 0x0100
0000067c: MUL
0000067d: SUB
0000067e: AND
0000067f: PUSH1 0x02
00000681: SWAP1
00000682: DIV
00000683: DUP3
00000684: DUP1
00000685: SLOAD
00000686: PUSH1 0x01
00000688: DUP2
00000689: PUSH1 0x01
0000068b: AND
0000068c: ISZERO
0000068d: PUSH2 0x0100
00000690: MUL
00000691: SUB
00000692: AND
00000693: PUSH1 0x02
00000695: SWAP1
00000696: DIV
00000697: SWAP1
00000698: PUSH1 0x00
0000069a: MSTORE
0000069b: PUSH1 0x20
0000069d: PUSH1 0x00
0000069f: KECCAK256
000006a0: SWAP1
000006a1: PUSH1 0x1f
000006a3: ADD
000006a4: PUSH1 0x20
000006a6: SWAP1
000006a7: DIV
000006a8: DUP2
000006a9: ADD
000006aa: SWAP3
000006ab: DUP3
000006ac: PUSH1 0x1f
000006ae: LT
000006af: PUSH2 0x0727
000006b2: JUMPI
000006b3: DUP1
000006b4: SLOAD
000006b5: DUP6
000006b6: SSTORE
000006b7: JUMPDEST
000006b8: POP
000006b9: PUSH2 0x06c3
000006bc: SWAP3
000006bd: SWAP2
000006be: POP
000006bf: PUSH2 0x055b
000006c2: JUMP
000006c3: JUMPDEST
000006c4: POP
000006c5: POP
000006c6: PUSH1 0x00
000006c8: DUP1
000006c9: SLOAD
000006ca: DUP3
000006cb: SWAP1
000006cc: DUP2
000006cd: LT
000006ce: ISZERO
000006cf: PUSH2 0x0002
000006d2: JUMPI
000006d3: POP
000006d4: DUP1
000006d5: DUP1
000006d6: MSTORE
000006d7: PUSH1 0x03
000006d9: DUP3
000006da: MUL
000006db: PUSH1 0x00
000006dd: DUP1
000006de: MLOAD
000006df: PUSH1 0x20
000006e1: PUSH2 0x0815
000006e4: DUP4
000006e5: CODECOPY
000006e6: DUP2
000006e7: MLOAD
000006e8: SWAP2
000006e9: MSTORE
000006ea: ADD
000006eb: SLOAD
000006ec: PUSH1 0x40
000006ee: MLOAD
000006ef: PUSH1 0x01
000006f1: PUSH1 0xa0
000006f3: PUSH1 0x02
000006f5: EXP
000006f6: SUB
000006f7: SWAP2
000006f8: SWAP1
000006f9: SWAP2
000006fa: AND
000006fb: SWAP2
000006fc: SWAP1
000006fd: PUSH7 0x071afd498d0000
00000705: SWAP1
00000706: DUP3
00000707: DUP2
00000708: DUP2
00000709: DUP2
0000070a: DUP6
0000070b: DUP9
0000070c: DUP4
0000070d: CALL
0000070e: POP
0000070f: POP
00000710: PUSH1 0x02
00000712: DUP1
00000713: SLOAD
00000714: PUSH7 0x071afd498cffff
0000071c: NOT
0000071d: ADD
0000071e: SWAP1
0000071f: SSTORE
00000720: POP
00000721: POP
00000722: POP
00000723: JUMPDEST
00000724: POP
00000725: POP
00000726: JUMP
00000727: JUMPDEST
00000728: DUP3
00000729: DUP1
0000072a: ADD
0000072b: PUSH1 0x01
0000072d: ADD
0000072e: DUP6
0000072f: SSTORE
00000730: DUP3
00000731: ISZERO
00000732: PUSH2 0x06b7
00000735: JUMPI
00000736: PUSH1 0x00
00000738: MSTORE
00000739: PUSH1 0x20
0000073b: PUSH1 0x00
0000073d: KECCAK256
0000073e: SWAP2
0000073f: PUSH1 0x1f
00000741: ADD
00000742: PUSH1 0x20
00000744: SWAP1
00000745: DIV
00000746: DUP3
00000747: ADD
00000748: JUMPDEST
00000749: DUP3
0000074a: DUP2
0000074b: GT
0000074c: ISZERO
0000074d: PUSH2 0x06b7
00000750: JUMPI
00000751: DUP3
00000752: SLOAD
00000753: DUP3
00000754: SSTORE
00000755: SWAP2
00000756: PUSH1 0x01
00000758: ADD
00000759: SWAP2
0000075a: SWAP1
0000075b: PUSH1 0x01
0000075d: ADD
0000075e: SWAP1
0000075f: PUSH2 0x0748
00000762: JUMP
00000763: JUMPDEST
00000764: PUSH1 0x00
00000766: DUP1
00000767: SLOAD
00000768: DUP4
00000769: SWAP1
0000076a: DUP2
0000076b: LT
0000076c: ISZERO
0000076d: PUSH2 0x0002
00000770: JUMPI
00000771: POP
00000772: DUP1
00000773: MSTORE
00000774: POP
00000775: PUSH1 0x03
00000777: DUP2
00000778: MUL
00000779: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e565
0000079a: ADD
0000079b: SLOAD
0000079c: JUMPDEST
0000079d: SWAP2
0000079e: SWAP1
0000079f: POP
000007a0: JUMP
000007a1: JUMPDEST
000007a2: POP
000007a3: POP
000007a4: JUMPDEST
000007a5: PUSH1 0x01
000007a7: ADD
000007a8: PUSH2 0x0100
000007ab: JUMP
000007ac: JUMPDEST
000007ad: DUP3
000007ae: DUP1
000007af: ADD
000007b0: PUSH1 0x01
000007b2: ADD
000007b3: DUP6
000007b4: SSTORE
000007b5: DUP3
000007b6: ISZERO
000007b7: PUSH2 0x01b6
000007ba: JUMPI
000007bb: SWAP2
000007bc: DUP3
000007bd: ADD
000007be: JUMPDEST
000007bf: DUP3
000007c0: DUP2
000007c1: GT
000007c2: ISZERO
000007c3: PUSH2 0x01b6
000007c6: JUMPI
000007c7: DUP3
000007c8: MLOAD
000007c9: DUP3
000007ca: PUSH1 0x00
000007cc: POP
000007cd: SSTORE
000007ce: SWAP2
000007cf: PUSH1 0x20
000007d1: ADD
000007d2: SWAP2
000007d3: SWAP1
000007d4: PUSH1 0x01
000007d6: ADD
000007d7: SWAP1
000007d8: PUSH2 0x07be
000007db: JUMP
000007dc: JUMPDEST
000007dd: DUP3
000007de: ADD
000007df: SWAP2
000007e0: SWAP1
000007e1: PUSH1 0x00
000007e3: MSTORE
000007e4: PUSH1 0x20
000007e6: PUSH1 0x00
000007e8: KECCAK256
000007e9: SWAP1
000007ea: JUMPDEST
000007eb: DUP2
000007ec: SLOAD
000007ed: DUP2
000007ee: MSTORE
000007ef: SWAP1
000007f0: PUSH1 0x01
000007f2: ADD
000007f3: SWAP1
000007f4: PUSH1 0x20
000007f6: ADD
000007f7: DUP1
000007f8: DUP4
000007f9: GT
000007fa: PUSH2 0x07ea
000007fd: JUMPI
000007fe: DUP3
000007ff: SWAP1
00000800: SUB
00000801: PUSH1 0x1f
00000803: AND
00000804: DUP3
00000805: ADD
00000806: SWAP2
00000807: JUMPDEST
00000808: POP
00000809: POP
0000080a: POP
0000080b: POP
0000080c: POP
0000080d: DUP2
0000080e: JUMP
0000080f: JUMPDEST
00000810: POP
00000811: SWAP2
00000812: SWAP1
00000813: POP
00000814: JUMP
00000815: UNKNOWN(0x29)
00000816: UNKNOWN(0x0D)
00000817: UNKNOWN(0xEC)
00000818: UNKNOWN(0xD9)
00000819: SLOAD
0000081a: DUP12
0000081b: PUSH3 0xa8d603
0000081f: GASLIMIT
00000820: UNKNOWN(0xA9)
00000821: DUP9
00000822: CODESIZE
00000823: PUSH16 0xc84ba6bc95484008f6362f93160ef3e5
00000834: PUSH4
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xe413e009e675c1745e9417c6a11981dde0c6259547b6235f133820d4d04e15e2
call_targets: 0xb0714df2422868f2007943ed87c152e5cefe287c
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xe413e009e675c1745e9417c6a11981dde0c6259547b6235f133820d4d04e15e2",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xb0714df2422868f2007943ed87c152e5cefe287c"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x5353a2d8",
            "selector": "0x5353a2d8",
            "calldata_variants": [
                "0x5353a2d8",
                "0x5353a2d80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5e9ccf30",
            "selector": "0x5e9ccf30",
            "calldata_variants": [
                "0x5e9ccf30",
                "0x5e9ccf300000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x65a06f16",
            "selector": "0x65a06f16",
            "calldata_variants": [
                "0x65a06f16",
                "0x65a06f160000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x677342ce",
            "selector": "0x677342ce",
            "calldata_variants": [
                "0x677342ce",
                "0x677342ce0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x848202fe",
            "selector": "0x848202fe",
            "calldata_variants": [
                "0x848202fe",
                "0x848202fe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 923,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1805,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xe413e009e675c1745e9417c6a11981dde0c6259547b6235f133820d4d04e15e2
call_targets: 0xb0714df2422868f2007943ed87c152e5cefe287c
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xe413e009e675c1745e9417c6a11981dde0c6259547b6235f133820d4d04e15e2",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xb0714df2422868f2007943ed87c152e5cefe287c"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x5353a2d8",
            "selector": "0x5353a2d8",
            "calldata_variants": [
                "0x5353a2d8",
                "0x5353a2d80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5e9ccf30",
            "selector": "0x5e9ccf30",
            "calldata_variants": [
                "0x5e9ccf30",
                "0x5e9ccf300000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x65a06f16",
            "selector": "0x65a06f16",
            "calldata_variants": [
                "0x65a06f16",
                "0x65a06f160000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x677342ce",
            "selector": "0x677342ce",
            "calldata_variants": [
                "0x677342ce",
                "0x677342ce0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x848202fe",
            "selector": "0x848202fe",
            "calldata_variants": [
                "0x848202fe",
                "0x848202fe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 923,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1805,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}