TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-3bb7-7205-a5ba-28916467eab2

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
4441 artifact.fetch complete 1 / 3 4 months ago
4442 tool.cast_disasm complete 1 / 3 4 months ago
47788 analysis.bundle complete 1 / 3 2 weeks ago
47789 capability.graph complete 1 / 3 2 weeks ago
47790 detector.run complete 1 / 3 2 weeks ago
47791 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
6
EXT*/BALANCE
0
Total opcodes
1001
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0095
0000000a: JUMPI
0000000b: PUSH1 0x00
0000000d: CALLDATALOAD
0000000e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002c: SWAP1
0000002d: DIV
0000002e: DUP1
0000002f: PUSH4 0x39aaba25
00000034: EQ
00000035: PUSH2 0x0097
00000038: JUMPI
00000039: DUP1
0000003a: PUSH4 0x4cedf74e
0000003f: EQ
00000040: PUSH2 0x00ba
00000043: JUMPI
00000044: DUP1
00000045: PUSH4 0x74389991
0000004a: EQ
0000004b: PUSH2 0x00f3
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0xb8017221
00000055: EQ
00000056: PUSH2 0x0102
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0xb9e6f1d9
00000060: EQ
00000061: PUSH2 0x0125
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0xc47bc007
0000006b: EQ
0000006c: PUSH2 0x0148
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0xd81a91e9
00000076: EQ
00000077: PUSH2 0x0157
0000007a: JUMPI
0000007b: DUP1
0000007c: PUSH4 0xe9a9c1b4
00000081: EQ
00000082: PUSH2 0x0190
00000085: JUMPI
00000086: DUP1
00000087: PUSH4 0xea8a1af0
0000008c: EQ
0000008d: PUSH2 0x01b3
00000090: JUMPI
00000091: PUSH2 0x0095
00000094: JUMP
00000095: JUMPDEST
00000096: STOP
00000097: JUMPDEST
00000098: PUSH2 0x00a4
0000009b: PUSH1 0x04
0000009d: DUP1
0000009e: POP
0000009f: POP
000000a0: PUSH2 0x07f5
000000a3: JUMP
000000a4: JUMPDEST
000000a5: PUSH1 0x40
000000a7: MLOAD
000000a8: DUP1
000000a9: DUP3
000000aa: DUP2
000000ab: MSTORE
000000ac: PUSH1 0x20
000000ae: ADD
000000af: SWAP2
000000b0: POP
000000b1: POP
000000b2: PUSH1 0x40
000000b4: MLOAD
000000b5: DUP1
000000b6: SWAP2
000000b7: SUB
000000b8: SWAP1
000000b9: RETURN
000000ba: JUMPDEST
000000bb: PUSH2 0x00c7
000000be: PUSH1 0x04
000000c0: DUP1
000000c1: POP
000000c2: POP
000000c3: PUSH2 0x0761
000000c6: JUMP
000000c7: JUMPDEST
000000c8: PUSH1 0x40
000000ca: MLOAD
000000cb: DUP1
000000cc: DUP3
000000cd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000e2: AND
000000e3: DUP2
000000e4: MSTORE
000000e5: PUSH1 0x20
000000e7: ADD
000000e8: SWAP2
000000e9: POP
000000ea: POP
000000eb: PUSH1 0x40
000000ed: MLOAD
000000ee: DUP1
000000ef: SWAP2
000000f0: SUB
000000f1: SWAP1
000000f2: RETURN
000000f3: JUMPDEST
000000f4: PUSH2 0x0100
000000f7: PUSH1 0x04
000000f9: DUP1
000000fa: POP
000000fb: POP
000000fc: PUSH2 0x02fd
000000ff: JUMP
00000100: JUMPDEST
00000101: STOP
00000102: JUMPDEST
00000103: PUSH2 0x010f
00000106: PUSH1 0x04
00000108: DUP1
00000109: POP
0000010a: POP
0000010b: PUSH2 0x07e3
0000010e: JUMP
0000010f: JUMPDEST
00000110: PUSH1 0x40
00000112: MLOAD
00000113: DUP1
00000114: DUP3
00000115: DUP2
00000116: MSTORE
00000117: PUSH1 0x20
00000119: ADD
0000011a: SWAP2
0000011b: POP
0000011c: POP
0000011d: PUSH1 0x40
0000011f: MLOAD
00000120: DUP1
00000121: SWAP2
00000122: SUB
00000123: SWAP1
00000124: RETURN
00000125: JUMPDEST
00000126: PUSH2 0x0132
00000129: PUSH1 0x04
0000012b: DUP1
0000012c: POP
0000012d: POP
0000012e: PUSH2 0x07bf
00000131: JUMP
00000132: JUMPDEST
00000133: PUSH1 0x40
00000135: MLOAD
00000136: DUP1
00000137: DUP3
00000138: DUP2
00000139: MSTORE
0000013a: PUSH1 0x20
0000013c: ADD
0000013d: SWAP2
0000013e: POP
0000013f: POP
00000140: PUSH1 0x40
00000142: MLOAD
00000143: DUP1
00000144: SWAP2
00000145: SUB
00000146: SWAP1
00000147: RETURN
00000148: JUMPDEST
00000149: PUSH2 0x0155
0000014c: PUSH1 0x04
0000014e: DUP1
0000014f: POP
00000150: POP
00000151: PUSH2 0x01c2
00000154: JUMP
00000155: JUMPDEST
00000156: STOP
00000157: JUMPDEST
00000158: PUSH2 0x0164
0000015b: PUSH1 0x04
0000015d: DUP1
0000015e: POP
0000015f: POP
00000160: PUSH2 0x0790
00000163: JUMP
00000164: JUMPDEST
00000165: PUSH1 0x40
00000167: MLOAD
00000168: DUP1
00000169: DUP3
0000016a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000017f: AND
00000180: DUP2
00000181: MSTORE
00000182: PUSH1 0x20
00000184: ADD
00000185: SWAP2
00000186: POP
00000187: POP
00000188: PUSH1 0x40
0000018a: MLOAD
0000018b: DUP1
0000018c: SWAP2
0000018d: SUB
0000018e: SWAP1
0000018f: RETURN
00000190: JUMPDEST
00000191: PUSH2 0x019d
00000194: PUSH1 0x04
00000196: DUP1
00000197: POP
00000198: POP
00000199: PUSH2 0x07d1
0000019c: JUMP
0000019d: JUMPDEST
0000019e: PUSH1 0x40
000001a0: MLOAD
000001a1: DUP1
000001a2: DUP3
000001a3: DUP2
000001a4: MSTORE
000001a5: PUSH1 0x20
000001a7: ADD
000001a8: SWAP2
000001a9: POP
000001aa: POP
000001ab: PUSH1 0x40
000001ad: MLOAD
000001ae: DUP1
000001af: SWAP2
000001b0: SUB
000001b1: SWAP1
000001b2: RETURN
000001b3: JUMPDEST
000001b4: PUSH2 0x01c0
000001b7: PUSH1 0x04
000001b9: DUP1
000001ba: POP
000001bb: POP
000001bc: PUSH2 0x05ae
000001bf: JUMP
000001c0: JUMPDEST
000001c1: STOP
000001c2: JUMPDEST
000001c3: PUSH1 0x00
000001c5: PUSH1 0x05
000001c7: PUSH1 0x00
000001c9: SWAP1
000001ca: SLOAD
000001cb: SWAP1
000001cc: PUSH2 0x0100
000001cf: EXP
000001d0: SWAP1
000001d1: DIV
000001d2: PUSH1 0xff
000001d4: AND
000001d5: EQ
000001d6: ISZERO
000001d7: ISZERO
000001d8: PUSH2 0x01e0
000001db: JUMPI
000001dc: PUSH2 0x02fb
000001df: JUMP
000001e0: JUMPDEST
000001e1: PUSH1 0x00
000001e3: PUSH1 0x00
000001e5: SWAP1
000001e6: SLOAD
000001e7: SWAP1
000001e8: PUSH2 0x0100
000001eb: EXP
000001ec: SWAP1
000001ed: DIV
000001ee: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000203: AND
00000204: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000219: AND
0000021a: CALLER
0000021b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000230: AND
00000231: EQ
00000232: ISZERO
00000233: PUSH2 0x024d
00000236: JUMPI
00000237: CALLVALUE
00000238: PUSH1 0x03
0000023a: PUSH1 0x00
0000023c: DUP3
0000023d: DUP3
0000023e: DUP3
0000023f: POP
00000240: SLOAD
00000241: ADD
00000242: SWAP3
00000243: POP
00000244: POP
00000245: DUP2
00000246: SWAP1
00000247: SSTORE
00000248: POP
00000249: PUSH2 0x02b7
0000024c: JUMP
0000024d: JUMPDEST
0000024e: PUSH1 0x01
00000250: PUSH1 0x00
00000252: SWAP1
00000253: SLOAD
00000254: SWAP1
00000255: PUSH2 0x0100
00000258: EXP
00000259: SWAP1
0000025a: DIV
0000025b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000270: AND
00000271: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000286: AND
00000287: CALLER
00000288: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000029d: AND
0000029e: EQ
0000029f: ISZERO
000002a0: PUSH2 0x02b6
000002a3: JUMPI
000002a4: CALLVALUE
000002a5: PUSH1 0x04
000002a7: PUSH1 0x00
000002a9: DUP3
000002aa: DUP3
000002ab: DUP3
000002ac: POP
000002ad: SLOAD
000002ae: ADD
000002af: SWAP3
000002b0: POP
000002b1: POP
000002b2: DUP2
000002b3: SWAP1
000002b4: SSTORE
000002b5: POP
000002b6: JUMPDEST
000002b7: JUMPDEST
000002b8: PUSH1 0x02
000002ba: PUSH1 0x00
000002bc: POP
000002bd: SLOAD
000002be: PUSH1 0x03
000002c0: PUSH1 0x00
000002c2: POP
000002c3: SLOAD
000002c4: LT
000002c5: ISZERO
000002c6: DUP1
000002c7: ISZERO
000002c8: PUSH2 0x02db
000002cb: JUMPI
000002cc: POP
000002cd: PUSH1 0x02
000002cf: PUSH1 0x00
000002d1: POP
000002d2: SLOAD
000002d3: PUSH1 0x04
000002d5: PUSH1 0x00
000002d7: POP
000002d8: SLOAD
000002d9: LT
000002da: ISZERO
000002db: JUMPDEST
000002dc: ISZERO
000002dd: PUSH2 0x02fa
000002e0: JUMPI
000002e1: PUSH1 0x01
000002e3: PUSH1 0x05
000002e5: PUSH1 0x00
000002e7: PUSH2 0x0100
000002ea: EXP
000002eb: DUP2
000002ec: SLOAD
000002ed: DUP2
000002ee: PUSH1 0xff
000002f0: MUL
000002f1: NOT
000002f2: AND
000002f3: SWAP1
000002f4: DUP4
000002f5: MUL
000002f6: OR
000002f7: SWAP1
000002f8: SSTORE
000002f9: POP
000002fa: JUMPDEST
000002fb: JUMPDEST
000002fc: JUMP
000002fd: JUMPDEST
000002fe: PUSH1 0x01
00000300: PUSH1 0x05
00000302: PUSH1 0x00
00000304: SWAP1
00000305: SLOAD
00000306: SWAP1
00000307: PUSH2 0x0100
0000030a: EXP
0000030b: SWAP1
0000030c: DIV
0000030d: PUSH1 0xff
0000030f: AND
00000310: EQ
00000311: ISZERO
00000312: ISZERO
00000313: PUSH2 0x031b
00000316: JUMPI
00000317: PUSH2 0x05ac
0000031a: JUMP
0000031b: JUMPDEST
0000031c: PUSH1 0x00
0000031e: PUSH1 0x00
00000320: SWAP1
00000321: SLOAD
00000322: SWAP1
00000323: PUSH2 0x0100
00000326: EXP
00000327: SWAP1
00000328: DIV
00000329: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000033e: AND
0000033f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000354: AND
00000355: CALLER
00000356: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000036b: AND
0000036c: EQ
0000036d: DUP1
0000036e: PUSH2 0x03c4
00000371: JUMPI
00000372: POP
00000373: PUSH1 0x01
00000375: PUSH1 0x00
00000377: SWAP1
00000378: SLOAD
00000379: SWAP1
0000037a: PUSH2 0x0100
0000037d: EXP
0000037e: SWAP1
0000037f: DIV
00000380: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000395: AND
00000396: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003ab: AND
000003ac: CALLER
000003ad: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003c2: AND
000003c3: EQ
000003c4: JUMPDEST
000003c5: ISZERO
000003c6: PUSH2 0x04b1
000003c9: JUMPI
000003ca: PUSH1 0x00
000003cc: PUSH1 0x00
000003ce: SWAP1
000003cf: SLOAD
000003d0: SWAP1
000003d1: PUSH2 0x0100
000003d4: EXP
000003d5: SWAP1
000003d6: DIV
000003d7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003ec: AND
000003ed: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000402: AND
00000403: PUSH1 0x00
00000405: PUSH1 0x03
00000407: PUSH1 0x00
00000409: POP
0000040a: SLOAD
0000040b: PUSH1 0x40
0000040d: MLOAD
0000040e: DUP1
0000040f: SWAP1
00000410: POP
00000411: PUSH1 0x00
00000413: PUSH1 0x40
00000415: MLOAD
00000416: DUP1
00000417: DUP4
00000418: SUB
00000419: DUP2
0000041a: DUP6
0000041b: DUP9
0000041c: DUP9
0000041d: CALL
0000041e: SWAP4
0000041f: POP
00000420: POP
00000421: POP
00000422: POP
00000423: POP
00000424: PUSH1 0x00
00000426: PUSH1 0x03
00000428: PUSH1 0x00
0000042a: POP
0000042b: DUP2
0000042c: SWAP1
0000042d: SSTORE
0000042e: POP
0000042f: PUSH1 0x01
00000431: PUSH1 0x00
00000433: SWAP1
00000434: SLOAD
00000435: SWAP1
00000436: PUSH2 0x0100
00000439: EXP
0000043a: SWAP1
0000043b: DIV
0000043c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000451: AND
00000452: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000467: AND
00000468: PUSH1 0x00
0000046a: PUSH1 0x04
0000046c: PUSH1 0x00
0000046e: POP
0000046f: SLOAD
00000470: PUSH1 0x40
00000472: MLOAD
00000473: DUP1
00000474: SWAP1
00000475: POP
00000476: PUSH1 0x00
00000478: PUSH1 0x40
0000047a: MLOAD
0000047b: DUP1
0000047c: DUP4
0000047d: SUB
0000047e: DUP2
0000047f: DUP6
00000480: DUP9
00000481: DUP9
00000482: CALL
00000483: SWAP4
00000484: POP
00000485: POP
00000486: POP
00000487: POP
00000488: POP
00000489: PUSH1 0x00
0000048b: PUSH1 0x04
0000048d: PUSH1 0x00
0000048f: POP
00000490: DUP2
00000491: SWAP1
00000492: SSTORE
00000493: POP
00000494: PUSH1 0x02
00000496: PUSH1 0x05
00000498: PUSH1 0x00
0000049a: PUSH2 0x0100
0000049d: EXP
0000049e: DUP2
0000049f: SLOAD
000004a0: DUP2
000004a1: PUSH1 0xff
000004a3: MUL
000004a4: NOT
000004a5: AND
000004a6: SWAP1
000004a7: DUP4
000004a8: MUL
000004a9: OR
000004aa: SWAP1
000004ab: SSTORE
000004ac: POP
000004ad: PUSH2 0x05ab
000004b0: JUMP
000004b1: JUMPDEST
000004b2: PUSH1 0x04
000004b4: PUSH1 0x00
000004b6: POP
000004b7: SLOAD
000004b8: PUSH1 0x03
000004ba: PUSH1 0x00
000004bc: POP
000004bd: SLOAD
000004be: ADD
000004bf: CALLVALUE
000004c0: LT
000004c1: ISZERO
000004c2: ISZERO
000004c3: PUSH2 0x05aa
000004c6: JUMPI
000004c7: PUSH1 0x00
000004c9: PUSH1 0x00
000004cb: SWAP1
000004cc: SLOAD
000004cd: SWAP1
000004ce: PUSH2 0x0100
000004d1: EXP
000004d2: SWAP1
000004d3: DIV
000004d4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004e9: AND
000004ea: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004ff: AND
00000500: PUSH1 0x00
00000502: PUSH1 0x03
00000504: PUSH1 0x00
00000506: POP
00000507: SLOAD
00000508: PUSH1 0x40
0000050a: MLOAD
0000050b: DUP1
0000050c: SWAP1
0000050d: POP
0000050e: PUSH1 0x00
00000510: PUSH1 0x40
00000512: MLOAD
00000513: DUP1
00000514: DUP4
00000515: SUB
00000516: DUP2
00000517: DUP6
00000518: DUP9
00000519: DUP9
0000051a: CALL
0000051b: SWAP4
0000051c: POP
0000051d: POP
0000051e: POP
0000051f: POP
00000520: POP
00000521: PUSH1 0x00
00000523: PUSH1 0x03
00000525: PUSH1 0x00
00000527: POP
00000528: DUP2
00000529: SWAP1
0000052a: SSTORE
0000052b: POP
0000052c: PUSH1 0x01
0000052e: PUSH1 0x00
00000530: SWAP1
00000531: SLOAD
00000532: SWAP1
00000533: PUSH2 0x0100
00000536: EXP
00000537: SWAP1
00000538: DIV
00000539: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000054e: AND
0000054f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000564: AND
00000565: PUSH1 0x00
00000567: PUSH1 0x04
00000569: PUSH1 0x00
0000056b: POP
0000056c: SLOAD
0000056d: PUSH1 0x40
0000056f: MLOAD
00000570: DUP1
00000571: SWAP1
00000572: POP
00000573: PUSH1 0x00
00000575: PUSH1 0x40
00000577: MLOAD
00000578: DUP1
00000579: DUP4
0000057a: SUB
0000057b: DUP2
0000057c: DUP6
0000057d: DUP9
0000057e: DUP9
0000057f: CALL
00000580: SWAP4
00000581: POP
00000582: POP
00000583: POP
00000584: POP
00000585: POP
00000586: PUSH1 0x00
00000588: PUSH1 0x04
0000058a: PUSH1 0x00
0000058c: POP
0000058d: DUP2
0000058e: SWAP1
0000058f: SSTORE
00000590: POP
00000591: PUSH1 0x02
00000593: PUSH1 0x05
00000595: PUSH1 0x00
00000597: PUSH2 0x0100
0000059a: EXP
0000059b: DUP2
0000059c: SLOAD
0000059d: DUP2
0000059e: PUSH1 0xff
000005a0: MUL
000005a1: NOT
000005a2: AND
000005a3: SWAP1
000005a4: DUP4
000005a5: MUL
000005a6: OR
000005a7: SWAP1
000005a8: SSTORE
000005a9: POP
000005aa: JUMPDEST
000005ab: JUMPDEST
000005ac: JUMPDEST
000005ad: JUMP
000005ae: JUMPDEST
000005af: PUSH1 0x00
000005b1: PUSH1 0x05
000005b3: PUSH1 0x00
000005b5: SWAP1
000005b6: SLOAD
000005b7: SWAP1
000005b8: PUSH2 0x0100
000005bb: EXP
000005bc: SWAP1
000005bd: DIV
000005be: PUSH1 0xff
000005c0: AND
000005c1: EQ
000005c2: ISZERO
000005c3: ISZERO
000005c4: PUSH2 0x05cc
000005c7: JUMPI
000005c8: PUSH2 0x075f
000005cb: JUMP
000005cc: JUMPDEST
000005cd: PUSH1 0x00
000005cf: PUSH1 0x00
000005d1: SWAP1
000005d2: SLOAD
000005d3: SWAP1
000005d4: PUSH2 0x0100
000005d7: EXP
000005d8: SWAP1
000005d9: DIV
000005da: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005ef: AND
000005f0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000605: AND
00000606: CALLER
00000607: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000061c: AND
0000061d: EQ
0000061e: DUP1
0000061f: PUSH2 0x0675
00000622: JUMPI
00000623: POP
00000624: PUSH1 0x01
00000626: PUSH1 0x00
00000628: SWAP1
00000629: SLOAD
0000062a: SWAP1
0000062b: PUSH2 0x0100
0000062e: EXP
0000062f: SWAP1
00000630: DIV
00000631: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000646: AND
00000647: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000065c: AND
0000065d: CALLER
0000065e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000673: AND
00000674: EQ
00000675: JUMPDEST
00000676: ISZERO
00000677: PUSH2 0x075e
0000067a: JUMPI
0000067b: PUSH1 0x00
0000067d: PUSH1 0x00
0000067f: SWAP1
00000680: SLOAD
00000681: SWAP1
00000682: PUSH2 0x0100
00000685: EXP
00000686: SWAP1
00000687: DIV
00000688: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000069d: AND
0000069e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006b3: AND
000006b4: PUSH1 0x00
000006b6: PUSH1 0x03
000006b8: PUSH1 0x00
000006ba: POP
000006bb: SLOAD
000006bc: PUSH1 0x40
000006be: MLOAD
000006bf: DUP1
000006c0: SWAP1
000006c1: POP
000006c2: PUSH1 0x00
000006c4: PUSH1 0x40
000006c6: MLOAD
000006c7: DUP1
000006c8: DUP4
000006c9: SUB
000006ca: DUP2
000006cb: DUP6
000006cc: DUP9
000006cd: DUP9
000006ce: CALL
000006cf: SWAP4
000006d0: POP
000006d1: POP
000006d2: POP
000006d3: POP
000006d4: POP
000006d5: PUSH1 0x00
000006d7: PUSH1 0x03
000006d9: PUSH1 0x00
000006db: POP
000006dc: DUP2
000006dd: SWAP1
000006de: SSTORE
000006df: POP
000006e0: PUSH1 0x01
000006e2: PUSH1 0x00
000006e4: SWAP1
000006e5: SLOAD
000006e6: SWAP1
000006e7: PUSH2 0x0100
000006ea: EXP
000006eb: SWAP1
000006ec: DIV
000006ed: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000702: AND
00000703: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000718: AND
00000719: PUSH1 0x00
0000071b: PUSH1 0x04
0000071d: PUSH1 0x00
0000071f: POP
00000720: SLOAD
00000721: PUSH1 0x40
00000723: MLOAD
00000724: DUP1
00000725: SWAP1
00000726: POP
00000727: PUSH1 0x00
00000729: PUSH1 0x40
0000072b: MLOAD
0000072c: DUP1
0000072d: DUP4
0000072e: SUB
0000072f: DUP2
00000730: DUP6
00000731: DUP9
00000732: DUP9
00000733: CALL
00000734: SWAP4
00000735: POP
00000736: POP
00000737: POP
00000738: POP
00000739: POP
0000073a: PUSH1 0x00
0000073c: PUSH1 0x04
0000073e: PUSH1 0x00
00000740: POP
00000741: DUP2
00000742: SWAP1
00000743: SSTORE
00000744: POP
00000745: PUSH1 0x03
00000747: PUSH1 0x05
00000749: PUSH1 0x00
0000074b: PUSH2 0x0100
0000074e: EXP
0000074f: DUP2
00000750: SLOAD
00000751: DUP2
00000752: PUSH1 0xff
00000754: MUL
00000755: NOT
00000756: AND
00000757: SWAP1
00000758: DUP4
00000759: MUL
0000075a: OR
0000075b: SWAP1
0000075c: SSTORE
0000075d: POP
0000075e: JUMPDEST
0000075f: JUMPDEST
00000760: JUMP
00000761: JUMPDEST
00000762: PUSH1 0x00
00000764: PUSH1 0x00
00000766: PUSH1 0x00
00000768: SWAP1
00000769: SLOAD
0000076a: SWAP1
0000076b: PUSH2 0x0100
0000076e: EXP
0000076f: SWAP1
00000770: DIV
00000771: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000786: AND
00000787: SWAP1
00000788: POP
00000789: PUSH2 0x078d
0000078c: JUMP
0000078d: JUMPDEST
0000078e: SWAP1
0000078f: JUMP
00000790: JUMPDEST
00000791: PUSH1 0x00
00000793: PUSH1 0x01
00000795: PUSH1 0x00
00000797: SWAP1
00000798: SLOAD
00000799: SWAP1
0000079a: PUSH2 0x0100
0000079d: EXP
0000079e: SWAP1
0000079f: DIV
000007a0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007b5: AND
000007b6: SWAP1
000007b7: POP
000007b8: PUSH2 0x07bc
000007bb: JUMP
000007bc: JUMPDEST
000007bd: SWAP1
000007be: JUMP
000007bf: JUMPDEST
000007c0: PUSH1 0x00
000007c2: PUSH1 0x02
000007c4: PUSH1 0x00
000007c6: POP
000007c7: SLOAD
000007c8: SWAP1
000007c9: POP
000007ca: PUSH2 0x07ce
000007cd: JUMP
000007ce: JUMPDEST
000007cf: SWAP1
000007d0: JUMP
000007d1: JUMPDEST
000007d2: PUSH1 0x00
000007d4: PUSH1 0x03
000007d6: PUSH1 0x00
000007d8: POP
000007d9: SLOAD
000007da: SWAP1
000007db: POP
000007dc: PUSH2 0x07e0
000007df: JUMP
000007e0: JUMPDEST
000007e1: SWAP1
000007e2: JUMP
000007e3: JUMPDEST
000007e4: PUSH1 0x00
000007e6: PUSH1 0x04
000007e8: PUSH1 0x00
000007ea: POP
000007eb: SLOAD
000007ec: SWAP1
000007ed: POP
000007ee: PUSH2 0x07f2
000007f1: JUMP
000007f2: JUMPDEST
000007f3: SWAP1
000007f4: JUMP
000007f5: JUMPDEST
000007f6: PUSH1 0x00
000007f8: PUSH1 0x05
000007fa: PUSH1 0x00
000007fc: SWAP1
000007fd: SLOAD
000007fe: SWAP1
000007ff: PUSH2 0x0100
00000802: EXP
00000803: SWAP1
00000804: DIV
00000805: PUSH1 0xff
00000807: AND
00000808: SWAP1
00000809: POP
0000080a: PUSH2 0x080e
0000080d: JUMP
0000080e: JUMPDEST
0000080f: SWAP1
00000810: JUMP
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
medium other detector Untrusted CALL target/value reachable 45 no no
view
trace_id: 0x02d1419ea0e540c1d13a0c0c21f10bcc9cbbf38cdcb8dd4d89e17b1446de493a
call_targets: 0xe35363032dc06738084110a87b92f196ba3e8829
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x02d1419ea0e540c1d13a0c0c21f10bcc9cbbf38cdcb8dd4d89e17b1446de493a",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xe35363032dc06738084110a87b92f196ba3e8829"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x39aaba25",
            "selector": "0x39aaba25",
            "calldata_variants": [
                "0x39aaba25",
                "0x39aaba250000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4cedf74e",
            "selector": "0x4cedf74e",
            "calldata_variants": [
                "0x4cedf74e",
                "0x4cedf74e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x74389991",
            "selector": "0x74389991",
            "calldata_variants": [
                "0x74389991",
                "0x743899910000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb8017221",
            "selector": "0xb8017221",
            "calldata_variants": [
                "0xb8017221",
                "0xb80172210000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb9e6f1d9",
            "selector": "0xb9e6f1d9",
            "calldata_variants": [
                "0xb9e6f1d9",
                "0xb9e6f1d90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc47bc007",
            "selector": "0xc47bc007",
            "calldata_variants": [
                "0xc47bc007",
                "0xc47bc0070000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd81a91e9",
            "selector": "0xd81a91e9",
            "calldata_variants": [
                "0xd81a91e9",
                "0xd81a91e90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe9a9c1b4",
            "selector": "0xe9a9c1b4",
            "calldata_variants": [
                "0xe9a9c1b4",
                "0xe9a9c1b40000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1053,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1154,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1306,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 6,
    "guards_detected": [
        {
            "pc": 538,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 647,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 853,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 940,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1542,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1629,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 6
}
medium other detector ETH value transfer possible 40 no no
view
trace_id: 0x02d1419ea0e540c1d13a0c0c21f10bcc9cbbf38cdcb8dd4d89e17b1446de493a
call_targets: 0xe35363032dc06738084110a87b92f196ba3e8829
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x02d1419ea0e540c1d13a0c0c21f10bcc9cbbf38cdcb8dd4d89e17b1446de493a",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xe35363032dc06738084110a87b92f196ba3e8829"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x39aaba25",
            "selector": "0x39aaba25",
            "calldata_variants": [
                "0x39aaba25",
                "0x39aaba250000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4cedf74e",
            "selector": "0x4cedf74e",
            "calldata_variants": [
                "0x4cedf74e",
                "0x4cedf74e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x74389991",
            "selector": "0x74389991",
            "calldata_variants": [
                "0x74389991",
                "0x743899910000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb8017221",
            "selector": "0xb8017221",
            "calldata_variants": [
                "0xb8017221",
                "0xb80172210000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb9e6f1d9",
            "selector": "0xb9e6f1d9",
            "calldata_variants": [
                "0xb9e6f1d9",
                "0xb9e6f1d90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc47bc007",
            "selector": "0xc47bc007",
            "calldata_variants": [
                "0xc47bc007",
                "0xc47bc0070000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd81a91e9",
            "selector": "0xd81a91e9",
            "calldata_variants": [
                "0xd81a91e9",
                "0xd81a91e90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe9a9c1b4",
            "selector": "0xe9a9c1b4",
            "calldata_variants": [
                "0xe9a9c1b4",
                "0xe9a9c1b40000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1053,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1154,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1306,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 6,
    "guards_detected": [
        {
            "pc": 538,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 647,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 853,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 940,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1542,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1629,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ]
}