TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-3f63-704a-8d2d-ba9d29205aba

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
2
Validated
2
Source
Bytecode only
Review Backing
Not yet
Best current signal
ETH value transfer possible
crit 0 high 2 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
5041 artifact.fetch complete 1 / 3 3 months ago
5042 tool.cast_disasm complete 1 / 3 3 months ago
80399 analysis.bundle complete 1 / 3 1 week ago
80400 capability.graph complete 1 / 3 1 week ago
80401 detector.run complete 1 / 3 1 week ago
80402 validation.fork complete 1 / 3 1 week ago
113614 report.consolidate complete 1 / 6 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate
Job Status
complete
Attempts
1 / 6
Findings
0
No findings?
View stderr
OpenAI Codex v0.118.0 (research preview)
--------
workdir: /tmp/codex-i1ursir1
model: gpt-5.4
provider: openai
approval: never
sandbox: read-only
reasoning effort: high
reasoning summaries: none
session id: 019d5c99-219f-7bd0-86e0-4070dae7c3ca
--------
user
You are a security auditor. You ONLY have runtime bytecode + analysis artifacts.
You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary,
evidence bundle, callsites, storage slots, and detector findings.

Special cases when reasoning from bytecode (be explicit about uncertainty):
- Selector inference is best-effort; missing selectors are common.
- Fallback/receive paths may be the only entrypoints.
- CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage.
- Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative.
- Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown.
- Guard detection is heuristic; absence of guards does NOT mean unguarded.
- Returndata checking is unknown unless explicitly shown in evidence.
- Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim.

Output MUST be valid JSON matching the provided schema.
- If you find nothing meaningful: set no_findings=true and findings=[].
- Otherwise: set no_findings=false and include findings with severity/category/title.
- Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb".

Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation,
accounting/invariant breaks, dangerous delegatecall, and untrusted external calls.
Be conservative: if evidence is weak, mark severity low/medium and explain why.
warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
Metadata
{
    "codex": {
        "ran_at": "2026-04-05T07:43:55.196602+00:00",
        "returncode": 1
    },
    "project": {
        "mode": "bytecode",
        "bytecode_length": 4242,
        "bytecode_truncated": false,
        "capability_graph_present": true,
        "analysis_artifact_present": true
    },
    "summary": null,
    "no_findings": null,
    "schema_version": 1
}

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
2
CALL-family (heavy)
6
EXT*/BALANCE
0
Total opcodes
1599
Flags
create_opcodes_present
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00a3
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x06fdde03
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00df
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x18160ddd
00000025: EQ
00000026: PUSH2 0x013c
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x23b872dd
00000030: EQ
00000031: PUSH2 0x0145
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x313ce567
0000003b: EQ
0000003c: PUSH2 0x0177
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x54fd4d50
00000046: EQ
00000047: PUSH2 0x0183
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x61e71839
00000051: EQ
00000052: PUSH2 0x01dd
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x70a08231
0000005c: EQ
0000005d: PUSH2 0x01ef
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x95d89b41
00000067: EQ
00000068: PUSH2 0x0207
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0xa9059cbb
00000072: EQ
00000073: PUSH2 0x0263
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xcae9ca51
0000007d: EQ
0000007e: PUSH2 0x0292
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xdc3080f2
00000088: EQ
00000089: PUSH2 0x03f4
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xdd62ed3e
00000093: EQ
00000094: PUSH2 0x0419
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0xe4849b32
0000009e: EQ
0000009f: PUSH2 0x043e
000000a2: JUMPI
000000a3: JUMPDEST
000000a4: PUSH2 0x046e
000000a7: PUSH1 0x01
000000a9: PUSH1 0xa0
000000ab: PUSH1 0x02
000000ad: EXP
000000ae: SUB
000000af: ADDRESS
000000b0: AND
000000b1: PUSH1 0x00
000000b3: SWAP1
000000b4: DUP2
000000b5: MSTORE
000000b6: PUSH1 0x06
000000b8: PUSH1 0x20
000000ba: MSTORE
000000bb: PUSH1 0x40
000000bd: SWAP1
000000be: KECCAK256
000000bf: SLOAD
000000c0: CALLVALUE
000000c1: PUSH2 0x2710
000000c4: SWAP1
000000c5: DUP2
000000c6: MUL
000000c7: SWAP2
000000c8: PUSH2 0x270f
000000cb: DUP3
000000cc: DUP5
000000cd: DIV
000000ce: MUL
000000cf: DUP1
000000d0: DUP5
000000d1: SUB
000000d2: SWAP2
000000d3: DUP2
000000d4: SWAP1
000000d5: LT
000000d6: ISZERO
000000d7: PUSH2 0x0480
000000da: JUMPI
000000db: PUSH2 0x0002
000000de: JUMP
000000df: JUMPDEST
000000e0: PUSH2 0x04f8
000000e3: PUSH1 0x00
000000e5: DUP1
000000e6: SLOAD
000000e7: PUSH1 0x20
000000e9: PUSH1 0x02
000000eb: PUSH1 0x01
000000ed: DUP4
000000ee: AND
000000ef: ISZERO
000000f0: PUSH2 0x0100
000000f3: MUL
000000f4: PUSH1 0x00
000000f6: NOT
000000f7: ADD
000000f8: SWAP1
000000f9: SWAP3
000000fa: AND
000000fb: SWAP2
000000fc: SWAP1
000000fd: SWAP2
000000fe: DIV
000000ff: PUSH1 0x1f
00000101: DUP2
00000102: ADD
00000103: DUP3
00000104: SWAP1
00000105: DIV
00000106: SWAP1
00000107: SWAP2
00000108: MUL
00000109: PUSH1 0x80
0000010b: SWAP1
0000010c: DUP2
0000010d: ADD
0000010e: PUSH1 0x40
00000110: MSTORE
00000111: PUSH1 0x60
00000113: DUP3
00000114: DUP2
00000115: MSTORE
00000116: SWAP3
00000117: SWAP2
00000118: SWAP1
00000119: DUP3
0000011a: DUP3
0000011b: DUP1
0000011c: ISZERO
0000011d: PUSH2 0x0820
00000120: JUMPI
00000121: DUP1
00000122: PUSH1 0x1f
00000124: LT
00000125: PUSH2 0x07f5
00000128: JUMPI
00000129: PUSH2 0x0100
0000012c: DUP1
0000012d: DUP4
0000012e: SLOAD
0000012f: DIV
00000130: MUL
00000131: DUP4
00000132: MSTORE
00000133: SWAP2
00000134: PUSH1 0x20
00000136: ADD
00000137: SWAP2
00000138: PUSH2 0x0820
0000013b: JUMP
0000013c: JUMPDEST
0000013d: PUSH2 0x046e
00000140: PUSH1 0x04
00000142: SLOAD
00000143: DUP2
00000144: JUMP
00000145: JUMPDEST
00000146: PUSH2 0x046e
00000149: PUSH1 0x04
0000014b: CALLDATALOAD
0000014c: PUSH1 0x24
0000014e: CALLDATALOAD
0000014f: PUSH1 0x44
00000151: CALLDATALOAD
00000152: PUSH1 0x01
00000154: PUSH1 0xa0
00000156: PUSH1 0x02
00000158: EXP
00000159: SUB
0000015a: DUP4
0000015b: AND
0000015c: PUSH1 0x00
0000015e: SWAP1
0000015f: DUP2
00000160: MSTORE
00000161: PUSH1 0x06
00000163: PUSH1 0x20
00000165: MSTORE
00000166: PUSH1 0x40
00000168: DUP2
00000169: KECCAK256
0000016a: SLOAD
0000016b: DUP3
0000016c: SWAP1
0000016d: LT
0000016e: ISZERO
0000016f: PUSH2 0x05e3
00000172: JUMPI
00000173: PUSH2 0x0002
00000176: JUMP
00000177: JUMPDEST
00000178: PUSH2 0x0566
0000017b: PUSH1 0x03
0000017d: SLOAD
0000017e: PUSH1 0xff
00000180: AND
00000181: DUP2
00000182: JUMP
00000183: JUMPDEST
00000184: PUSH2 0x04f8
00000187: PUSH1 0x02
00000189: DUP1
0000018a: SLOAD
0000018b: PUSH1 0x20
0000018d: PUSH1 0x01
0000018f: DUP3
00000190: AND
00000191: ISZERO
00000192: PUSH2 0x0100
00000195: MUL
00000196: PUSH1 0x00
00000198: NOT
00000199: ADD
0000019a: SWAP1
0000019b: SWAP2
0000019c: AND
0000019d: DUP3
0000019e: SWAP1
0000019f: DIV
000001a0: PUSH1 0x1f
000001a2: DUP2
000001a3: ADD
000001a4: DUP3
000001a5: SWAP1
000001a6: DIV
000001a7: SWAP1
000001a8: SWAP2
000001a9: MUL
000001aa: PUSH1 0x80
000001ac: SWAP1
000001ad: DUP2
000001ae: ADD
000001af: PUSH1 0x40
000001b1: MSTORE
000001b2: PUSH1 0x60
000001b4: DUP3
000001b5: DUP2
000001b6: MSTORE
000001b7: SWAP3
000001b8: SWAP2
000001b9: SWAP1
000001ba: DUP3
000001bb: DUP3
000001bc: DUP1
000001bd: ISZERO
000001be: PUSH2 0x0820
000001c1: JUMPI
000001c2: DUP1
000001c3: PUSH1 0x1f
000001c5: LT
000001c6: PUSH2 0x07f5
000001c9: JUMPI
000001ca: PUSH2 0x0100
000001cd: DUP1
000001ce: DUP4
000001cf: SLOAD
000001d0: DIV
000001d1: MUL
000001d2: DUP4
000001d3: MSTORE
000001d4: SWAP2
000001d5: PUSH1 0x20
000001d7: ADD
000001d8: SWAP2
000001d9: PUSH2 0x0820
000001dc: JUMP
000001dd: JUMPDEST
000001de: PUSH2 0x0566
000001e1: PUSH1 0x05
000001e3: SLOAD
000001e4: PUSH1 0x01
000001e6: PUSH1 0xa0
000001e8: PUSH1 0x02
000001ea: EXP
000001eb: SUB
000001ec: AND
000001ed: DUP2
000001ee: JUMP
000001ef: JUMPDEST
000001f0: PUSH2 0x046e
000001f3: PUSH1 0x04
000001f5: CALLDATALOAD
000001f6: PUSH1 0x06
000001f8: PUSH1 0x20
000001fa: MSTORE
000001fb: PUSH1 0x00
000001fd: SWAP1
000001fe: DUP2
000001ff: MSTORE
00000200: PUSH1 0x40
00000202: SWAP1
00000203: KECCAK256
00000204: SLOAD
00000205: DUP2
00000206: JUMP
00000207: JUMPDEST
00000208: PUSH2 0x04f8
0000020b: PUSH1 0x01
0000020d: DUP1
0000020e: SLOAD
0000020f: PUSH1 0x20
00000211: PUSH1 0x02
00000213: DUP3
00000214: DUP5
00000215: AND
00000216: ISZERO
00000217: PUSH2 0x0100
0000021a: MUL
0000021b: PUSH1 0x00
0000021d: NOT
0000021e: ADD
0000021f: SWAP1
00000220: SWAP3
00000221: AND
00000222: SWAP2
00000223: SWAP1
00000224: SWAP2
00000225: DIV
00000226: PUSH1 0x1f
00000228: DUP2
00000229: ADD
0000022a: DUP3
0000022b: SWAP1
0000022c: DIV
0000022d: SWAP1
0000022e: SWAP2
0000022f: MUL
00000230: PUSH1 0x80
00000232: SWAP1
00000233: DUP2
00000234: ADD
00000235: PUSH1 0x40
00000237: MSTORE
00000238: PUSH1 0x60
0000023a: DUP3
0000023b: DUP2
0000023c: MSTORE
0000023d: SWAP3
0000023e: SWAP2
0000023f: SWAP1
00000240: DUP3
00000241: DUP3
00000242: DUP1
00000243: ISZERO
00000244: PUSH2 0x0820
00000247: JUMPI
00000248: DUP1
00000249: PUSH1 0x1f
0000024b: LT
0000024c: PUSH2 0x07f5
0000024f: JUMPI
00000250: PUSH2 0x0100
00000253: DUP1
00000254: DUP4
00000255: SLOAD
00000256: DIV
00000257: MUL
00000258: DUP4
00000259: MSTORE
0000025a: SWAP2
0000025b: PUSH1 0x20
0000025d: ADD
0000025e: SWAP2
0000025f: PUSH2 0x0820
00000262: JUMP
00000263: JUMPDEST
00000264: PUSH2 0x0570
00000267: PUSH1 0x04
00000269: CALLDATALOAD
0000026a: PUSH1 0x24
0000026c: CALLDATALOAD
0000026d: CALLER
0000026e: PUSH1 0x01
00000270: PUSH1 0xa0
00000272: PUSH1 0x02
00000274: EXP
00000275: SUB
00000276: AND
00000277: PUSH1 0x00
00000279: SWAP1
0000027a: DUP2
0000027b: MSTORE
0000027c: PUSH1 0x06
0000027e: PUSH1 0x20
00000280: MSTORE
00000281: PUSH1 0x40
00000283: SWAP1
00000284: KECCAK256
00000285: SLOAD
00000286: DUP2
00000287: SWAP1
00000288: LT
00000289: ISZERO
0000028a: PUSH2 0x0738
0000028d: JUMPI
0000028e: PUSH2 0x0002
00000291: JUMP
00000292: JUMPDEST
00000293: PUSH1 0x80
00000295: PUSH1 0x20
00000297: PUSH1 0x44
00000299: CALLDATALOAD
0000029a: PUSH1 0x04
0000029c: DUP2
0000029d: DUP2
0000029e: ADD
0000029f: CALLDATALOAD
000002a0: PUSH1 0x1f
000002a2: DUP2
000002a3: ADD
000002a4: DUP5
000002a5: SWAP1
000002a6: DIV
000002a7: SWAP1
000002a8: SWAP4
000002a9: MUL
000002aa: DUP5
000002ab: ADD
000002ac: PUSH1 0x40
000002ae: MSTORE
000002af: PUSH1 0x60
000002b1: DUP4
000002b2: DUP2
000002b3: MSTORE
000002b4: PUSH2 0x046e
000002b7: SWAP5
000002b8: DUP3
000002b9: CALLDATALOAD
000002ba: SWAP5
000002bb: PUSH1 0x24
000002bd: DUP1
000002be: CALLDATALOAD
000002bf: SWAP6
000002c0: PUSH1 0x64
000002c2: SWAP5
000002c3: SWAP4
000002c4: SWAP2
000002c5: ADD
000002c6: SWAP2
000002c7: SWAP1
000002c8: DUP2
000002c9: SWAP1
000002ca: DUP4
000002cb: DUP3
000002cc: DUP1
000002cd: DUP3
000002ce: DUP5
000002cf: CALLDATACOPY
000002d0: POP
000002d1: SWAP5
000002d2: SWAP7
000002d3: POP
000002d4: POP
000002d5: POP
000002d6: POP
000002d7: POP
000002d8: POP
000002d9: POP
000002da: PUSH1 0x00
000002dc: PUSH1 0x00
000002de: DUP4
000002df: PUSH1 0x07
000002e1: PUSH1 0x00
000002e3: POP
000002e4: PUSH1 0x00
000002e6: CALLER
000002e7: PUSH1 0x01
000002e9: PUSH1 0xa0
000002eb: PUSH1 0x02
000002ed: EXP
000002ee: SUB
000002ef: AND
000002f0: DUP2
000002f1: MSTORE
000002f2: PUSH1 0x20
000002f4: ADD
000002f5: SWAP1
000002f6: DUP2
000002f7: MSTORE
000002f8: PUSH1 0x20
000002fa: ADD
000002fb: PUSH1 0x00
000002fd: KECCAK256
000002fe: PUSH1 0x00
00000300: POP
00000301: PUSH1 0x00
00000303: DUP8
00000304: PUSH1 0x01
00000306: PUSH1 0xa0
00000308: PUSH1 0x02
0000030a: EXP
0000030b: SUB
0000030c: AND
0000030d: DUP2
0000030e: MSTORE
0000030f: PUSH1 0x20
00000311: ADD
00000312: SWAP1
00000313: DUP2
00000314: MSTORE
00000315: PUSH1 0x20
00000317: ADD
00000318: PUSH1 0x00
0000031a: KECCAK256
0000031b: PUSH1 0x00
0000031d: POP
0000031e: DUP2
0000031f: SWAP1
00000320: SSTORE
00000321: POP
00000322: DUP5
00000323: SWAP1
00000324: POP
00000325: DUP1
00000326: PUSH1 0x01
00000328: PUSH1 0xa0
0000032a: PUSH1 0x02
0000032c: EXP
0000032d: SUB
0000032e: AND
0000032f: PUSH4 0x8f4ffcb1
00000334: CALLER
00000335: DUP7
00000336: ADDRESS
00000337: DUP8
00000338: PUSH1 0x40
0000033a: MLOAD
0000033b: DUP6
0000033c: PUSH1 0xe0
0000033e: PUSH1 0x02
00000340: EXP
00000341: MUL
00000342: DUP2
00000343: MSTORE
00000344: PUSH1 0x04
00000346: ADD
00000347: DUP1
00000348: DUP6
00000349: PUSH1 0x01
0000034b: PUSH1 0xa0
0000034d: PUSH1 0x02
0000034f: EXP
00000350: SUB
00000351: AND
00000352: DUP2
00000353: MSTORE
00000354: PUSH1 0x20
00000356: ADD
00000357: DUP5
00000358: DUP2
00000359: MSTORE
0000035a: PUSH1 0x20
0000035c: ADD
0000035d: DUP4
0000035e: PUSH1 0x01
00000360: PUSH1 0xa0
00000362: PUSH1 0x02
00000364: EXP
00000365: SUB
00000366: AND
00000367: DUP2
00000368: MSTORE
00000369: PUSH1 0x20
0000036b: ADD
0000036c: DUP1
0000036d: PUSH1 0x20
0000036f: ADD
00000370: DUP3
00000371: DUP2
00000372: SUB
00000373: DUP3
00000374: MSTORE
00000375: DUP4
00000376: DUP2
00000377: DUP2
00000378: MLOAD
00000379: DUP2
0000037a: MSTORE
0000037b: PUSH1 0x20
0000037d: ADD
0000037e: SWAP2
0000037f: POP
00000380: DUP1
00000381: MLOAD
00000382: SWAP1
00000383: PUSH1 0x20
00000385: ADD
00000386: SWAP1
00000387: DUP1
00000388: DUP4
00000389: DUP4
0000038a: DUP3
0000038b: SWAP1
0000038c: PUSH1 0x00
0000038e: PUSH1 0x04
00000390: PUSH1 0x20
00000392: DUP5
00000393: PUSH1 0x1f
00000395: ADD
00000396: DIV
00000397: PUSH1 0x0f
00000399: MUL
0000039a: PUSH1 0x03
0000039c: ADD
0000039d: CALL
0000039e: POP
0000039f: SWAP1
000003a0: POP
000003a1: SWAP1
000003a2: DUP2
000003a3: ADD
000003a4: SWAP1
000003a5: PUSH1 0x1f
000003a7: AND
000003a8: DUP1
000003a9: ISZERO
000003aa: PUSH2 0x03c7
000003ad: JUMPI
000003ae: DUP1
000003af: DUP3
000003b0: SUB
000003b1: DUP1
000003b2: MLOAD
000003b3: PUSH1 0x01
000003b5: DUP4
000003b6: PUSH1 0x20
000003b8: SUB
000003b9: PUSH2 0x0100
000003bc: EXP
000003bd: SUB
000003be: NOT
000003bf: AND
000003c0: DUP2
000003c1: MSTORE
000003c2: PUSH1 0x20
000003c4: ADD
000003c5: SWAP2
000003c6: POP
000003c7: JUMPDEST
000003c8: POP
000003c9: SWAP6
000003ca: POP
000003cb: POP
000003cc: POP
000003cd: POP
000003ce: POP
000003cf: POP
000003d0: PUSH1 0x00
000003d2: PUSH1 0x40
000003d4: MLOAD
000003d5: DUP1
000003d6: DUP4
000003d7: SUB
000003d8: DUP2
000003d9: PUSH1 0x00
000003db: DUP8
000003dc: PUSH2 0x61da
000003df: GAS
000003e0: SUB
000003e1: CALL
000003e2: ISZERO
000003e3: PUSH2 0x0002
000003e6: JUMPI
000003e7: POP
000003e8: PUSH1 0x01
000003ea: SWAP8
000003eb: SWAP7
000003ec: POP
000003ed: POP
000003ee: POP
000003ef: POP
000003f0: POP
000003f1: POP
000003f2: POP
000003f3: JUMP
000003f4: JUMPDEST
000003f5: PUSH1 0x08
000003f7: PUSH1 0x20
000003f9: SWAP1
000003fa: DUP2
000003fb: MSTORE
000003fc: PUSH1 0x04
000003fe: CALLDATALOAD
000003ff: PUSH1 0x00
00000401: SWAP1
00000402: DUP2
00000403: MSTORE
00000404: PUSH1 0x40
00000406: DUP1
00000407: DUP3
00000408: KECCAK256
00000409: SWAP1
0000040a: SWAP3
0000040b: MSTORE
0000040c: PUSH1 0x24
0000040e: CALLDATALOAD
0000040f: DUP2
00000410: MSTORE
00000411: KECCAK256
00000412: SLOAD
00000413: PUSH2 0x046e
00000416: SWAP1
00000417: DUP2
00000418: JUMP
00000419: JUMPDEST
0000041a: PUSH1 0x07
0000041c: PUSH1 0x20
0000041e: SWAP1
0000041f: DUP2
00000420: MSTORE
00000421: PUSH1 0x04
00000423: CALLDATALOAD
00000424: PUSH1 0x00
00000426: SWAP1
00000427: DUP2
00000428: MSTORE
00000429: PUSH1 0x40
0000042b: DUP1
0000042c: DUP3
0000042d: KECCAK256
0000042e: SWAP1
0000042f: SWAP3
00000430: MSTORE
00000431: PUSH1 0x24
00000433: CALLDATALOAD
00000434: DUP2
00000435: MSTORE
00000436: KECCAK256
00000437: SLOAD
00000438: PUSH2 0x046e
0000043b: SWAP1
0000043c: DUP2
0000043d: JUMP
0000043e: JUMPDEST
0000043f: PUSH2 0x046e
00000442: PUSH1 0x04
00000444: CALLDATALOAD
00000445: CALLER
00000446: PUSH1 0x01
00000448: PUSH1 0xa0
0000044a: PUSH1 0x02
0000044c: EXP
0000044d: SUB
0000044e: AND
0000044f: PUSH1 0x00
00000451: SWAP1
00000452: DUP2
00000453: MSTORE
00000454: PUSH1 0x06
00000456: PUSH1 0x20
00000458: MSTORE
00000459: PUSH1 0x40
0000045b: DUP2
0000045c: KECCAK256
0000045d: SLOAD
0000045e: PUSH2 0x2710
00000461: SWAP1
00000462: DUP4
00000463: SWAP1
00000464: LT
00000465: ISZERO
00000466: PUSH2 0x0572
00000469: JUMPI
0000046a: PUSH2 0x0002
0000046d: JUMP
0000046e: JUMPDEST
0000046f: PUSH1 0x40
00000471: DUP1
00000472: MLOAD
00000473: SWAP2
00000474: DUP3
00000475: MSTORE
00000476: MLOAD
00000477: SWAP1
00000478: DUP2
00000479: SWAP1
0000047a: SUB
0000047b: PUSH1 0x20
0000047d: ADD
0000047e: SWAP1
0000047f: RETURN
00000480: JUMPDEST
00000481: PUSH1 0x40
00000483: PUSH1 0x00
00000485: DUP2
00000486: DUP2
00000487: KECCAK256
00000488: CALLER
00000489: PUSH1 0x01
0000048b: PUSH1 0xa0
0000048d: PUSH1 0x02
0000048f: EXP
00000490: SUB
00000491: SWAP1
00000492: DUP2
00000493: AND
00000494: DUP1
00000495: DUP5
00000496: MSTORE
00000497: SWAP4
00000498: DUP4
00000499: KECCAK256
0000049a: DUP1
0000049b: SLOAD
0000049c: DUP7
0000049d: ADD
0000049e: SWAP1
0000049f: SSTORE
000004a0: ADDRESS
000004a1: AND
000004a2: SWAP2
000004a3: DUP3
000004a4: SWAP1
000004a5: MSTORE
000004a6: DUP1
000004a7: SLOAD
000004a8: DUP6
000004a9: DUP6
000004aa: ADD
000004ab: SWAP1
000004ac: SUB
000004ad: SWAP1
000004ae: SSTORE
000004af: PUSH1 0x60
000004b1: DUP4
000004b2: DUP2
000004b3: MSTORE
000004b4: PUSH1 0x00
000004b6: DUP1
000004b7: MLOAD
000004b8: PUSH1 0x20
000004ba: PUSH2 0x0828
000004bd: DUP4
000004be: CODECOPY
000004bf: DUP2
000004c0: MLOAD
000004c1: SWAP2
000004c2: MSTORE
000004c3: SWAP1
000004c4: PUSH1 0x20
000004c6: SWAP1
000004c7: LOG3
000004c8: PUSH1 0x05
000004ca: SLOAD
000004cb: PUSH1 0x60
000004cd: DUP4
000004ce: DUP2
000004cf: MSTORE
000004d0: PUSH1 0x01
000004d2: PUSH1 0xa0
000004d4: PUSH1 0x02
000004d6: EXP
000004d7: SUB
000004d8: SWAP2
000004d9: DUP3
000004da: AND
000004db: SWAP2
000004dc: ADDRESS
000004dd: AND
000004de: SWAP1
000004df: PUSH1 0x00
000004e1: DUP1
000004e2: MLOAD
000004e3: PUSH1 0x20
000004e5: PUSH2 0x0828
000004e8: DUP4
000004e9: CODECOPY
000004ea: DUP2
000004eb: MLOAD
000004ec: SWAP2
000004ed: MSTORE
000004ee: SWAP1
000004ef: PUSH1 0x20
000004f1: SWAP1
000004f2: LOG3
000004f3: POP
000004f4: POP
000004f5: POP
000004f6: SWAP1
000004f7: JUMP
000004f8: JUMPDEST
000004f9: PUSH1 0x40
000004fb: MLOAD
000004fc: DUP1
000004fd: DUP1
000004fe: PUSH1 0x20
00000500: ADD
00000501: DUP3
00000502: DUP2
00000503: SUB
00000504: DUP3
00000505: MSTORE
00000506: DUP4
00000507: DUP2
00000508: DUP2
00000509: MLOAD
0000050a: DUP2
0000050b: MSTORE
0000050c: PUSH1 0x20
0000050e: ADD
0000050f: SWAP2
00000510: POP
00000511: DUP1
00000512: MLOAD
00000513: SWAP1
00000514: PUSH1 0x20
00000516: ADD
00000517: SWAP1
00000518: DUP1
00000519: DUP4
0000051a: DUP4
0000051b: DUP3
0000051c: SWAP1
0000051d: PUSH1 0x00
0000051f: PUSH1 0x04
00000521: PUSH1 0x20
00000523: DUP5
00000524: PUSH1 0x1f
00000526: ADD
00000527: DIV
00000528: PUSH1 0x0f
0000052a: MUL
0000052b: PUSH1 0x03
0000052d: ADD
0000052e: CALL
0000052f: POP
00000530: SWAP1
00000531: POP
00000532: SWAP1
00000533: DUP2
00000534: ADD
00000535: SWAP1
00000536: PUSH1 0x1f
00000538: AND
00000539: DUP1
0000053a: ISZERO
0000053b: PUSH2 0x0558
0000053e: JUMPI
0000053f: DUP1
00000540: DUP3
00000541: SUB
00000542: DUP1
00000543: MLOAD
00000544: PUSH1 0x01
00000546: DUP4
00000547: PUSH1 0x20
00000549: SUB
0000054a: PUSH2 0x0100
0000054d: EXP
0000054e: SUB
0000054f: NOT
00000550: AND
00000551: DUP2
00000552: MSTORE
00000553: PUSH1 0x20
00000555: ADD
00000556: SWAP2
00000557: POP
00000558: JUMPDEST
00000559: POP
0000055a: SWAP3
0000055b: POP
0000055c: POP
0000055d: POP
0000055e: PUSH1 0x40
00000560: MLOAD
00000561: DUP1
00000562: SWAP2
00000563: SUB
00000564: SWAP1
00000565: RETURN
00000566: JUMPDEST
00000567: PUSH1 0x60
00000569: SWAP1
0000056a: DUP2
0000056b: MSTORE
0000056c: PUSH1 0x20
0000056e: SWAP1
0000056f: RETURN
00000570: JUMPDEST
00000571: STOP
00000572: JUMPDEST
00000573: PUSH1 0x40
00000575: DUP1
00000576: DUP4
00000577: KECCAK256
00000578: PUSH1 0x01
0000057a: PUSH1 0xa0
0000057c: PUSH1 0x02
0000057e: EXP
0000057f: SUB
00000580: ADDRESS
00000581: DUP2
00000582: AND
00000583: DUP6
00000584: MSTORE
00000585: SWAP2
00000586: DUP5
00000587: KECCAK256
00000588: DUP1
00000589: SLOAD
0000058a: DUP7
0000058b: ADD
0000058c: SWAP1
0000058d: SSTORE
0000058e: CALLER
0000058f: SWAP1
00000590: SWAP2
00000591: AND
00000592: DUP1
00000593: DUP5
00000594: MSTORE
00000595: DUP2
00000596: SLOAD
00000597: DUP6
00000598: SWAP1
00000599: SUB
0000059a: SWAP1
0000059b: SWAP2
0000059c: SSTORE
0000059d: DUP4
0000059e: DUP3
0000059f: MUL
000005a0: SWAP3
000005a1: DUP4
000005a2: PUSH1 0x60
000005a4: DUP3
000005a5: DUP2
000005a6: DUP2
000005a7: DUP2
000005a8: DUP6
000005a9: DUP9
000005aa: DUP4
000005ab: CALL
000005ac: POP
000005ad: POP
000005ae: PUSH1 0x40
000005b0: DUP1
000005b1: MLOAD
000005b2: DUP8
000005b3: DUP2
000005b4: MSTORE
000005b5: SWAP1
000005b6: MLOAD
000005b7: PUSH1 0x01
000005b9: PUSH1 0xa0
000005bb: PUSH1 0x02
000005bd: EXP
000005be: SUB
000005bf: ADDRESS
000005c0: AND
000005c1: SWAP5
000005c2: SWAP4
000005c3: POP
000005c4: PUSH1 0x00
000005c6: DUP1
000005c7: MLOAD
000005c8: PUSH1 0x20
000005ca: PUSH2 0x0828
000005cd: DUP4
000005ce: CODECOPY
000005cf: DUP2
000005d0: MLOAD
000005d1: SWAP2
000005d2: MSTORE
000005d3: SWAP3
000005d4: POP
000005d5: SWAP1
000005d6: DUP2
000005d7: SWAP1
000005d8: SUB
000005d9: PUSH1 0x20
000005db: ADD
000005dc: SWAP1
000005dd: LOG3
000005de: POP
000005df: SWAP2
000005e0: SWAP1
000005e1: POP
000005e2: JUMP
000005e3: JUMPDEST
000005e4: PUSH1 0x01
000005e6: PUSH1 0xa0
000005e8: PUSH1 0x02
000005ea: EXP
000005eb: SUB
000005ec: DUP4
000005ed: AND
000005ee: DUP2
000005ef: MSTORE
000005f0: PUSH1 0x40
000005f2: DUP2
000005f3: KECCAK256
000005f4: SLOAD
000005f5: DUP3
000005f6: DUP2
000005f7: ADD
000005f8: LT
000005f9: ISZERO
000005fa: PUSH2 0x0602
000005fd: JUMPI
000005fe: PUSH2 0x0002
00000601: JUMP
00000602: JUMPDEST
00000603: PUSH1 0x01
00000605: PUSH1 0xa0
00000607: PUSH1 0x02
00000609: EXP
0000060a: SUB
0000060b: DUP5
0000060c: DUP2
0000060d: AND
0000060e: DUP1
0000060f: DUP4
00000610: MSTORE
00000611: PUSH1 0x07
00000613: PUSH1 0x20
00000615: SWAP1
00000616: DUP2
00000617: MSTORE
00000618: PUSH1 0x40
0000061a: DUP1
0000061b: DUP6
0000061c: KECCAK256
0000061d: CALLER
0000061e: SWAP1
0000061f: SWAP5
00000620: AND
00000621: DUP1
00000622: DUP7
00000623: MSTORE
00000624: SWAP4
00000625: DUP3
00000626: MSTORE
00000627: DUP1
00000628: DUP6
00000629: KECCAK256
0000062a: SLOAD
0000062b: SWAP3
0000062c: DUP6
0000062d: MSTORE
0000062e: PUSH1 0x08
00000630: DUP3
00000631: MSTORE
00000632: DUP1
00000633: DUP6
00000634: KECCAK256
00000635: SWAP4
00000636: DUP6
00000637: MSTORE
00000638: SWAP3
00000639: SWAP1
0000063a: MSTORE
0000063b: SWAP1
0000063c: DUP3
0000063d: KECCAK256
0000063e: SLOAD
0000063f: DUP4
00000640: ADD
00000641: GT
00000642: ISZERO
00000643: PUSH2 0x064b
00000646: JUMPI
00000647: PUSH2 0x0002
0000064a: JUMP
0000064b: JUMPDEST
0000064c: DUP2
0000064d: PUSH1 0x06
0000064f: PUSH1 0x00
00000651: POP
00000652: PUSH1 0x00
00000654: DUP7
00000655: PUSH1 0x01
00000657: PUSH1 0xa0
00000659: PUSH1 0x02
0000065b: EXP
0000065c: SUB
0000065d: AND
0000065e: DUP2
0000065f: MSTORE
00000660: PUSH1 0x20
00000662: ADD
00000663: SWAP1
00000664: DUP2
00000665: MSTORE
00000666: PUSH1 0x20
00000668: ADD
00000669: PUSH1 0x00
0000066b: KECCAK256
0000066c: PUSH1 0x00
0000066e: DUP3
0000066f: DUP3
00000670: DUP3
00000671: POP
00000672: SLOAD
00000673: SUB
00000674: SWAP3
00000675: POP
00000676: POP
00000677: DUP2
00000678: SWAP1
00000679: SSTORE
0000067a: POP
0000067b: DUP2
0000067c: PUSH1 0x06
0000067e: PUSH1 0x00
00000680: POP
00000681: PUSH1 0x00
00000683: DUP6
00000684: PUSH1 0x01
00000686: PUSH1 0xa0
00000688: PUSH1 0x02
0000068a: EXP
0000068b: SUB
0000068c: AND
0000068d: DUP2
0000068e: MSTORE
0000068f: PUSH1 0x20
00000691: ADD
00000692: SWAP1
00000693: DUP2
00000694: MSTORE
00000695: PUSH1 0x20
00000697: ADD
00000698: PUSH1 0x00
0000069a: KECCAK256
0000069b: PUSH1 0x00
0000069d: DUP3
0000069e: DUP3
0000069f: DUP3
000006a0: POP
000006a1: SLOAD
000006a2: ADD
000006a3: SWAP3
000006a4: POP
000006a5: POP
000006a6: DUP2
000006a7: SWAP1
000006a8: SSTORE
000006a9: POP
000006aa: DUP2
000006ab: PUSH1 0x08
000006ad: PUSH1 0x00
000006af: POP
000006b0: PUSH1 0x00
000006b2: DUP7
000006b3: PUSH1 0x01
000006b5: PUSH1 0xa0
000006b7: PUSH1 0x02
000006b9: EXP
000006ba: SUB
000006bb: AND
000006bc: DUP2
000006bd: MSTORE
000006be: PUSH1 0x20
000006c0: ADD
000006c1: SWAP1
000006c2: DUP2
000006c3: MSTORE
000006c4: PUSH1 0x20
000006c6: ADD
000006c7: PUSH1 0x00
000006c9: KECCAK256
000006ca: PUSH1 0x00
000006cc: POP
000006cd: PUSH1 0x00
000006cf: CALLER
000006d0: PUSH1 0x01
000006d2: PUSH1 0xa0
000006d4: PUSH1 0x02
000006d6: EXP
000006d7: SUB
000006d8: AND
000006d9: DUP2
000006da: MSTORE
000006db: PUSH1 0x20
000006dd: ADD
000006de: SWAP1
000006df: DUP2
000006e0: MSTORE
000006e1: PUSH1 0x20
000006e3: ADD
000006e4: PUSH1 0x00
000006e6: KECCAK256
000006e7: PUSH1 0x00
000006e9: DUP3
000006ea: DUP3
000006eb: DUP3
000006ec: POP
000006ed: SLOAD
000006ee: ADD
000006ef: SWAP3
000006f0: POP
000006f1: POP
000006f2: DUP2
000006f3: SWAP1
000006f4: SSTORE
000006f5: POP
000006f6: DUP3
000006f7: PUSH1 0x01
000006f9: PUSH1 0xa0
000006fb: PUSH1 0x02
000006fd: EXP
000006fe: SUB
000006ff: AND
00000700: DUP5
00000701: PUSH1 0x01
00000703: PUSH1 0xa0
00000705: PUSH1 0x02
00000707: EXP
00000708: SUB
00000709: AND
0000070a: PUSH1 0x00
0000070c: DUP1
0000070d: MLOAD
0000070e: PUSH1 0x20
00000710: PUSH2 0x0828
00000713: DUP4
00000714: CODECOPY
00000715: DUP2
00000716: MLOAD
00000717: SWAP2
00000718: MSTORE
00000719: DUP5
0000071a: PUSH1 0x40
0000071c: MLOAD
0000071d: DUP1
0000071e: DUP3
0000071f: DUP2
00000720: MSTORE
00000721: PUSH1 0x20
00000723: ADD
00000724: SWAP2
00000725: POP
00000726: POP
00000727: PUSH1 0x40
00000729: MLOAD
0000072a: DUP1
0000072b: SWAP2
0000072c: SUB
0000072d: SWAP1
0000072e: LOG3
0000072f: POP
00000730: PUSH1 0x01
00000732: SWAP4
00000733: SWAP3
00000734: POP
00000735: POP
00000736: POP
00000737: JUMP
00000738: JUMPDEST
00000739: PUSH1 0x01
0000073b: PUSH1 0xa0
0000073d: PUSH1 0x02
0000073f: EXP
00000740: SUB
00000741: DUP3
00000742: AND
00000743: PUSH1 0x00
00000745: SWAP1
00000746: DUP2
00000747: MSTORE
00000748: PUSH1 0x40
0000074a: SWAP1
0000074b: KECCAK256
0000074c: SLOAD
0000074d: DUP2
0000074e: DUP2
0000074f: ADD
00000750: LT
00000751: ISZERO
00000752: PUSH2 0x075a
00000755: JUMPI
00000756: PUSH2 0x0002
00000759: JUMP
0000075a: JUMPDEST
0000075b: DUP1
0000075c: PUSH1 0x06
0000075e: PUSH1 0x00
00000760: POP
00000761: PUSH1 0x00
00000763: CALLER
00000764: PUSH1 0x01
00000766: PUSH1 0xa0
00000768: PUSH1 0x02
0000076a: EXP
0000076b: SUB
0000076c: AND
0000076d: DUP2
0000076e: MSTORE
0000076f: PUSH1 0x20
00000771: ADD
00000772: SWAP1
00000773: DUP2
00000774: MSTORE
00000775: PUSH1 0x20
00000777: ADD
00000778: PUSH1 0x00
0000077a: KECCAK256
0000077b: PUSH1 0x00
0000077d: DUP3
0000077e: DUP3
0000077f: DUP3
00000780: POP
00000781: SLOAD
00000782: SUB
00000783: SWAP3
00000784: POP
00000785: POP
00000786: DUP2
00000787: SWAP1
00000788: SSTORE
00000789: POP
0000078a: DUP1
0000078b: PUSH1 0x06
0000078d: PUSH1 0x00
0000078f: POP
00000790: PUSH1 0x00
00000792: DUP5
00000793: PUSH1 0x01
00000795: PUSH1 0xa0
00000797: PUSH1 0x02
00000799: EXP
0000079a: SUB
0000079b: AND
0000079c: DUP2
0000079d: MSTORE
0000079e: PUSH1 0x20
000007a0: ADD
000007a1: SWAP1
000007a2: DUP2
000007a3: MSTORE
000007a4: PUSH1 0x20
000007a6: ADD
000007a7: PUSH1 0x00
000007a9: KECCAK256
000007aa: PUSH1 0x00
000007ac: DUP3
000007ad: DUP3
000007ae: DUP3
000007af: POP
000007b0: SLOAD
000007b1: ADD
000007b2: SWAP3
000007b3: POP
000007b4: POP
000007b5: DUP2
000007b6: SWAP1
000007b7: SSTORE
000007b8: POP
000007b9: DUP2
000007ba: PUSH1 0x01
000007bc: PUSH1 0xa0
000007be: PUSH1 0x02
000007c0: EXP
000007c1: SUB
000007c2: AND
000007c3: CALLER
000007c4: PUSH1 0x01
000007c6: PUSH1 0xa0
000007c8: PUSH1 0x02
000007ca: EXP
000007cb: SUB
000007cc: AND
000007cd: PUSH1 0x00
000007cf: DUP1
000007d0: MLOAD
000007d1: PUSH1 0x20
000007d3: PUSH2 0x0828
000007d6: DUP4
000007d7: CODECOPY
000007d8: DUP2
000007d9: MLOAD
000007da: SWAP2
000007db: MSTORE
000007dc: DUP4
000007dd: PUSH1 0x40
000007df: MLOAD
000007e0: DUP1
000007e1: DUP3
000007e2: DUP2
000007e3: MSTORE
000007e4: PUSH1 0x20
000007e6: ADD
000007e7: SWAP2
000007e8: POP
000007e9: POP
000007ea: PUSH1 0x40
000007ec: MLOAD
000007ed: DUP1
000007ee: SWAP2
000007ef: SUB
000007f0: SWAP1
000007f1: LOG3
000007f2: POP
000007f3: POP
000007f4: JUMP
000007f5: JUMPDEST
000007f6: DUP3
000007f7: ADD
000007f8: SWAP2
000007f9: SWAP1
000007fa: PUSH1 0x00
000007fc: MSTORE
000007fd: PUSH1 0x20
000007ff: PUSH1 0x00
00000801: KECCAK256
00000802: SWAP1
00000803: JUMPDEST
00000804: DUP2
00000805: SLOAD
00000806: DUP2
00000807: MSTORE
00000808: SWAP1
00000809: PUSH1 0x01
0000080b: ADD
0000080c: SWAP1
0000080d: PUSH1 0x20
0000080f: ADD
00000810: DUP1
00000811: DUP4
00000812: GT
00000813: PUSH2 0x0803
00000816: JUMPI
00000817: DUP3
00000818: SWAP1
00000819: SUB
0000081a: PUSH1 0x1f
0000081c: AND
0000081d: DUP3
0000081e: ADD
0000081f: SWAP2
00000820: JUMPDEST
00000821: POP
00000822: POP
00000823: POP
00000824: POP
00000825: POP
00000826: DUP2
00000827: JUMP
00000828: UNKNOWN(0xDD)
00000829: CALLCODE
0000082a: MSTORE
0000082b: UNKNOWN(0xAD)
0000082c: SHL
0000082d: UNKNOWN(0xE2)
0000082e: UNKNOWN(0xC8)
0000082f: SWAP12
00000830: PUSH10 0xc2b068fc378daa952ba7
0000083b: CALL
0000083c: PUSH4 0xc4a11628
00000841: CREATE2
00000842: GAS
00000843: UNKNOWN(0x4D)
00000844: CREATE2
00000845: UNKNOWN(0x23)
00000846: UNKNOWN(0xB3)
00000847: UNKNOWN(0xEF)
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector ETH value transfer possible 55 yes yes
view
trace_id: 0x305aa093312dc78df1a4a73f705ef6417ec1ab0726a9ff0362303cfa60c9e14e
call_targets: 0x0000000000000000000000000000000000000004, 0x810e6f1ef0f4ab4563b2348d5ec7ff2e60b0eb0f
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0x305aa093312dc78df1a4a73f705ef6417ec1ab0726a9ff0362303cfa60c9e14e",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0x810e6f1ef0f4ab4563b2348d5ec7ff2e60b0eb0f"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x54fd4d50",
            "selector": "0x54fd4d50",
            "calldata_variants": [
                "0x54fd4d50",
                "0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x61e71839",
            "selector": "0x61e71839",
            "calldata_variants": [
                "0x61e71839",
                "0x61e718390000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x95d89b41",
            "selector": "0x95d89b41",
            "calldata_variants": [
                "0x95d89b41",
                "0x95d89b410000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 925,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 993,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1326,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 6,
    "guards_detected": []
}
high other detector Untrusted CALL target/value reachable 60 yes yes
view
trace_id: 0x305aa093312dc78df1a4a73f705ef6417ec1ab0726a9ff0362303cfa60c9e14e
call_targets: 0x0000000000000000000000000000000000000004, 0x810e6f1ef0f4ab4563b2348d5ec7ff2e60b0eb0f
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0x305aa093312dc78df1a4a73f705ef6417ec1ab0726a9ff0362303cfa60c9e14e",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0x810e6f1ef0f4ab4563b2348d5ec7ff2e60b0eb0f"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x54fd4d50",
            "selector": "0x54fd4d50",
            "calldata_variants": [
                "0x54fd4d50",
                "0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x61e71839",
            "selector": "0x61e71839",
            "calldata_variants": [
                "0x61e71839",
                "0x61e718390000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x95d89b41",
            "selector": "0x95d89b41",
            "calldata_variants": [
                "0x95d89b41",
                "0x95d89b410000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 925,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 993,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1326,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 6,
    "guards_detected": [],
    "untrusted_call_count": 6
}
medium other detector CREATE/CREATE2 reachable 45 no no
view
trace_id: 0xaf96bddabf4398b8efa3df60ef231a30bff9b3e0bc8a800b135222c9aab996a9
validation_json
{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 26,
    "trace_id": "0xaf96bddabf4398b8efa3df60ef231a30bff9b3e0bc8a800b135222c9aab996a9",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x54fd4d50",
            "selector": "0x54fd4d50",
            "calldata_variants": [
                "0x54fd4d50",
                "0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x61e71839",
            "selector": "0x61e71839",
            "calldata_variants": [
                "0x61e71839",
                "0x61e718390000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x95d89b41",
            "selector": "0x95d89b41",
            "calldata_variants": [
                "0x95d89b41",
                "0x95d89b410000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "create_count": 0,
    "create2_count": 2
}