019b3836-403e-70bc-8fe0-21a1b5e14566
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 5185 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 5186 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 97906 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 97907 | capability.graph | complete | 1 / 3 | 1 week ago |
| 97908 | detector.run | complete | 1 / 3 | 1 week ago |
| 97909 | validation.fork | complete | 1 / 3 | 1 week ago |
| 113834 | report.consolidate | complete | 1 / 6 | 1 week ago |
No slither job recorded yet.
OpenAI Codex v0.118.0 (research preview) -------- workdir: /tmp/codex-zbdm27iz model: gpt-5.4 provider: openai approval: never sandbox: read-only reasoning effort: high reasoning summaries: none session id: 019d5ca0-1e69-76d0-9678-b93bf7e2a44f -------- user You are a security auditor. You ONLY have runtime bytecode + analysis artifacts. You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary, evidence bundle, callsites, storage slots, and detector findings. Special cases when reasoning from bytecode (be explicit about uncertainty): - Selector inference is best-effort; missing selectors are common. - Fallback/receive paths may be the only entrypoints. - CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage. - Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative. - Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown. - Guard detection is heuristic; absence of guards does NOT mean unguarded. - Returndata checking is unknown unless explicitly shown in evidence. - Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim. Output MUST be valid JSON matching the provided schema. - If you find nothing meaningful: set no_findings=true and findings=[]. - Otherwise: set no_findings=false and include findings with severity/category/title. - Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb". Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, accounting/invariant breaks, dangerous delegatecall, and untrusted external calls. Be conservative: if evidence is weak, mark severity low/medium and explain why. warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
{
"codex": {
"ran_at": "2026-04-05T07:51:32.283187+00:00",
"returncode": 1
},
"project": {
"mode": "bytecode",
"bytecode_length": 4254,
"bytecode_truncated": false,
"capability_graph_present": true,
"analysis_artifact_present": true
},
"summary": null,
"no_findings": null,
"schema_version": 1
}
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x00c4 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x06fdde03 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x00cc 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x18160ddd 00000025: EQ 00000026: PUSH2 0x012a 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x23b872dd 00000030: EQ 00000031: PUSH2 0x0133 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x313ce567 0000003b: EQ 0000003c: PUSH2 0x0165 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0x41fa4876 00000046: EQ 00000047: PUSH2 0x0171 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0x4b750334 00000051: EQ 00000052: PUSH2 0x01c7 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0x54fd4d50 0000005c: EQ 0000005d: PUSH2 0x01d0 00000060: JUMPI 00000061: DUP1 00000062: PUSH4 0x70a08231 00000067: EQ 00000068: PUSH2 0x022b 0000006b: JUMPI 0000006c: DUP1 0000006d: PUSH4 0x8620410b 00000072: EQ 00000073: PUSH2 0x0243 00000076: JUMPI 00000077: DUP1 00000078: PUSH4 0x95d89b41 0000007d: EQ 0000007e: PUSH2 0x024c 00000081: JUMPI 00000082: DUP1 00000083: PUSH4 0xa9059cbb 00000088: EQ 00000089: PUSH2 0x02a9 0000008c: JUMPI 0000008d: DUP1 0000008e: PUSH4 0xcae9ca51 00000093: EQ 00000094: PUSH2 0x02d8 00000097: JUMPI 00000098: DUP1 00000099: PUSH4 0xd96a094a 0000009e: EQ 0000009f: PUSH2 0x043f 000000a2: JUMPI 000000a3: DUP1 000000a4: PUSH4 0xdc3080f2 000000a9: EQ 000000aa: PUSH2 0x0473 000000ad: JUMPI 000000ae: DUP1 000000af: PUSH4 0xdd62ed3e 000000b4: EQ 000000b5: PUSH2 0x0498 000000b8: JUMPI 000000b9: DUP1 000000ba: PUSH4 0xe4849b32 000000bf: EQ 000000c0: PUSH2 0x04bd 000000c3: JUMPI 000000c4: JUMPDEST 000000c5: PUSH2 0x04e9 000000c8: PUSH2 0x0002 000000cb: JUMP 000000cc: JUMPDEST 000000cd: PUSH1 0x40 000000cf: DUP1 000000d0: MLOAD 000000d1: PUSH1 0x00 000000d3: DUP1 000000d4: SLOAD 000000d5: PUSH1 0x20 000000d7: PUSH1 0x02 000000d9: PUSH1 0x01 000000db: DUP4 000000dc: AND 000000dd: ISZERO 000000de: PUSH2 0x0100 000000e1: MUL 000000e2: PUSH1 0x00 000000e4: NOT 000000e5: ADD 000000e6: SWAP1 000000e7: SWAP3 000000e8: AND 000000e9: SWAP2 000000ea: SWAP1 000000eb: SWAP2 000000ec: DIV 000000ed: PUSH1 0x1f 000000ef: DUP2 000000f0: ADD 000000f1: DUP3 000000f2: SWAP1 000000f3: DIV 000000f4: DUP3 000000f5: MUL 000000f6: DUP5 000000f7: ADD 000000f8: DUP3 000000f9: ADD 000000fa: SWAP1 000000fb: SWAP5 000000fc: MSTORE 000000fd: DUP4 000000fe: DUP4 000000ff: MSTORE 00000100: PUSH2 0x04eb 00000103: SWAP4 00000104: SWAP1 00000105: DUP4 00000106: ADD 00000107: DUP3 00000108: DUP3 00000109: DUP1 0000010a: ISZERO 0000010b: PUSH2 0x05ac 0000010e: JUMPI 0000010f: DUP1 00000110: PUSH1 0x1f 00000112: LT 00000113: PUSH2 0x0581 00000116: JUMPI 00000117: PUSH2 0x0100 0000011a: DUP1 0000011b: DUP4 0000011c: SLOAD 0000011d: DIV 0000011e: MUL 0000011f: DUP4 00000120: MSTORE 00000121: SWAP2 00000122: PUSH1 0x20 00000124: ADD 00000125: SWAP2 00000126: PUSH2 0x05ac 00000129: JUMP 0000012a: JUMPDEST 0000012b: PUSH2 0x0559 0000012e: PUSH1 0x04 00000130: SLOAD 00000131: DUP2 00000132: JUMP 00000133: JUMPDEST 00000134: PUSH2 0x0559 00000137: PUSH1 0x04 00000139: CALLDATALOAD 0000013a: PUSH1 0x24 0000013c: CALLDATALOAD 0000013d: PUSH1 0x44 0000013f: CALLDATALOAD 00000140: PUSH1 0x01 00000142: PUSH1 0xa0 00000144: PUSH1 0x02 00000146: EXP 00000147: SUB 00000148: DUP4 00000149: AND 0000014a: PUSH1 0x00 0000014c: SWAP1 0000014d: DUP2 0000014e: MSTORE 0000014f: PUSH1 0x07 00000151: PUSH1 0x20 00000153: MSTORE 00000154: PUSH1 0x40 00000156: DUP2 00000157: KECCAK256 00000158: SLOAD 00000159: DUP3 0000015a: SWAP1 0000015b: LT 0000015c: ISZERO 0000015d: PUSH2 0x05b4 00000160: JUMPI 00000161: PUSH2 0x0002 00000164: JUMP 00000165: JUMPDEST 00000166: PUSH2 0x056b 00000169: PUSH1 0x03 0000016b: SLOAD 0000016c: PUSH1 0xff 0000016e: AND 0000016f: DUP2 00000170: JUMP 00000171: JUMPDEST 00000172: PUSH2 0x0559 00000175: PUSH1 0x04 00000177: CALLDATALOAD 00000178: PUSH1 0x24 0000017a: CALLDATALOAD 0000017b: JUMPDEST 0000017c: PUSH1 0x00 0000017e: DUP1 0000017f: DUP1 00000180: JUMPDEST 00000181: DUP4 00000182: DUP2 00000183: LT 00000184: ISZERO 00000185: PUSH2 0x0826 00000188: JUMPI 00000189: PUSH1 0x40 0000018b: DUP1 0000018c: MLOAD 0000018d: NUMBER 0000018e: DUP4 0000018f: SWAP1 00000190: SUB 00000191: PUSH1 0x00 00000193: NOT 00000194: ADD 00000195: BLOCKHASH 00000196: DUP2 00000197: MSTORE 00000198: PUSH1 0x20 0000019a: DUP2 0000019b: ADD 0000019c: DUP8 0000019d: SWAP1 0000019e: MSTORE 0000019f: DUP2 000001a0: MLOAD 000001a1: SWAP1 000001a2: DUP2 000001a3: SWAP1 000001a4: SUB 000001a5: SWAP1 000001a6: SWAP2 000001a7: ADD 000001a8: SWAP1 000001a9: KECCAK256 000001aa: PUSH1 0x02 000001ac: SWAP1 000001ad: MOD 000001ae: PUSH1 0x00 000001b0: EQ 000001b1: ISZERO 000001b2: PUSH2 0x01bf 000001b5: JUMPI 000001b6: PUSH1 0x02 000001b8: DUP2 000001b9: SWAP1 000001ba: EXP 000001bb: SWAP1 000001bc: SWAP2 000001bd: ADD 000001be: SWAP1 000001bf: JUMPDEST 000001c0: PUSH1 0x01 000001c2: ADD 000001c3: PUSH2 0x0180 000001c6: JUMP 000001c7: JUMPDEST 000001c8: PUSH2 0x0559 000001cb: PUSH1 0x05 000001cd: SLOAD 000001ce: DUP2 000001cf: JUMP 000001d0: JUMPDEST 000001d1: PUSH2 0x04eb 000001d4: PUSH1 0x02 000001d6: DUP1 000001d7: SLOAD 000001d8: PUSH1 0x40 000001da: DUP1 000001db: MLOAD 000001dc: PUSH1 0x20 000001de: PUSH1 0x01 000001e0: DUP5 000001e1: AND 000001e2: ISZERO 000001e3: PUSH2 0x0100 000001e6: MUL 000001e7: PUSH1 0x00 000001e9: NOT 000001ea: ADD 000001eb: SWAP1 000001ec: SWAP4 000001ed: AND 000001ee: DUP5 000001ef: SWAP1 000001f0: DIV 000001f1: PUSH1 0x1f 000001f3: DUP2 000001f4: ADD 000001f5: DUP5 000001f6: SWAP1 000001f7: DIV 000001f8: DUP5 000001f9: MUL 000001fa: DUP3 000001fb: ADD 000001fc: DUP5 000001fd: ADD 000001fe: SWAP1 000001ff: SWAP3 00000200: MSTORE 00000201: DUP2 00000202: DUP2 00000203: MSTORE 00000204: SWAP3 00000205: SWAP2 00000206: DUP4 00000207: ADD 00000208: DUP3 00000209: DUP3 0000020a: DUP1 0000020b: ISZERO 0000020c: PUSH2 0x05ac 0000020f: JUMPI 00000210: DUP1 00000211: PUSH1 0x1f 00000213: LT 00000214: PUSH2 0x0581 00000217: JUMPI 00000218: PUSH2 0x0100 0000021b: DUP1 0000021c: DUP4 0000021d: SLOAD 0000021e: DIV 0000021f: MUL 00000220: DUP4 00000221: MSTORE 00000222: SWAP2 00000223: PUSH1 0x20 00000225: ADD 00000226: SWAP2 00000227: PUSH2 0x05ac 0000022a: JUMP 0000022b: JUMPDEST 0000022c: PUSH2 0x0559 0000022f: PUSH1 0x04 00000231: CALLDATALOAD 00000232: PUSH1 0x07 00000234: PUSH1 0x20 00000236: MSTORE 00000237: PUSH1 0x00 00000239: SWAP1 0000023a: DUP2 0000023b: MSTORE 0000023c: PUSH1 0x40 0000023e: SWAP1 0000023f: KECCAK256 00000240: SLOAD 00000241: DUP2 00000242: JUMP 00000243: JUMPDEST 00000244: PUSH2 0x0559 00000247: PUSH1 0x06 00000249: SLOAD 0000024a: DUP2 0000024b: JUMP 0000024c: JUMPDEST 0000024d: PUSH2 0x04eb 00000250: PUSH1 0x01 00000252: DUP1 00000253: SLOAD 00000254: PUSH1 0x40 00000256: DUP1 00000257: MLOAD 00000258: PUSH1 0x20 0000025a: PUSH1 0x02 0000025c: DUP5 0000025d: DUP7 0000025e: AND 0000025f: ISZERO 00000260: PUSH2 0x0100 00000263: MUL 00000264: PUSH1 0x00 00000266: NOT 00000267: ADD 00000268: SWAP1 00000269: SWAP5 0000026a: AND 0000026b: SWAP4 0000026c: SWAP1 0000026d: SWAP4 0000026e: DIV 0000026f: PUSH1 0x1f 00000271: DUP2 00000272: ADD 00000273: DUP5 00000274: SWAP1 00000275: DIV 00000276: DUP5 00000277: MUL 00000278: DUP3 00000279: ADD 0000027a: DUP5 0000027b: ADD 0000027c: SWAP1 0000027d: SWAP3 0000027e: MSTORE 0000027f: DUP2 00000280: DUP2 00000281: MSTORE 00000282: SWAP3 00000283: SWAP2 00000284: DUP4 00000285: ADD 00000286: DUP3 00000287: DUP3 00000288: DUP1 00000289: ISZERO 0000028a: PUSH2 0x05ac 0000028d: JUMPI 0000028e: DUP1 0000028f: PUSH1 0x1f 00000291: LT 00000292: PUSH2 0x0581 00000295: JUMPI 00000296: PUSH2 0x0100 00000299: DUP1 0000029a: DUP4 0000029b: SLOAD 0000029c: DIV 0000029d: MUL 0000029e: DUP4 0000029f: MSTORE 000002a0: SWAP2 000002a1: PUSH1 0x20 000002a3: ADD 000002a4: SWAP2 000002a5: PUSH2 0x05ac 000002a8: JUMP 000002a9: JUMPDEST 000002aa: PUSH2 0x04e9 000002ad: PUSH1 0x04 000002af: CALLDATALOAD 000002b0: PUSH1 0x24 000002b2: CALLDATALOAD 000002b3: PUSH1 0x01 000002b5: PUSH1 0xa0 000002b7: PUSH1 0x02 000002b9: EXP 000002ba: SUB 000002bb: CALLER 000002bc: AND 000002bd: PUSH1 0x00 000002bf: SWAP1 000002c0: DUP2 000002c1: MSTORE 000002c2: PUSH1 0x07 000002c4: PUSH1 0x20 000002c6: MSTORE 000002c7: PUSH1 0x40 000002c9: SWAP1 000002ca: KECCAK256 000002cb: SLOAD 000002cc: DUP2 000002cd: SWAP1 000002ce: LT 000002cf: ISZERO 000002d0: PUSH2 0x071d 000002d3: JUMPI 000002d4: PUSH2 0x0002 000002d7: JUMP 000002d8: JUMPDEST 000002d9: PUSH1 0x40 000002db: DUP1 000002dc: MLOAD 000002dd: PUSH1 0x20 000002df: PUSH1 0x44 000002e1: CALLDATALOAD 000002e2: PUSH1 0x04 000002e4: DUP2 000002e5: DUP2 000002e6: ADD 000002e7: CALLDATALOAD 000002e8: PUSH1 0x1f 000002ea: DUP2 000002eb: ADD 000002ec: DUP5 000002ed: SWAP1 000002ee: DIV 000002ef: DUP5 000002f0: MUL 000002f1: DUP6 000002f2: ADD 000002f3: DUP5 000002f4: ADD 000002f5: SWAP1 000002f6: SWAP6 000002f7: MSTORE 000002f8: DUP5 000002f9: DUP5 000002fa: MSTORE 000002fb: PUSH2 0x0559 000002fe: SWAP5 000002ff: DUP2 00000300: CALLDATALOAD 00000301: SWAP5 00000302: PUSH1 0x24 00000304: DUP1 00000305: CALLDATALOAD 00000306: SWAP6 00000307: SWAP4 00000308: SWAP5 00000309: PUSH1 0x64 0000030b: SWAP5 0000030c: SWAP3 0000030d: SWAP4 0000030e: SWAP2 0000030f: ADD 00000310: SWAP2 00000311: DUP2 00000312: SWAP1 00000313: DUP5 00000314: ADD 00000315: DUP4 00000316: DUP3 00000317: DUP1 00000318: DUP3 00000319: DUP5 0000031a: CALLDATACOPY 0000031b: POP 0000031c: SWAP5 0000031d: SWAP7 0000031e: POP 0000031f: POP 00000320: POP 00000321: POP 00000322: POP 00000323: POP 00000324: POP 00000325: PUSH1 0x00 00000327: PUSH1 0x00 00000329: DUP4 0000032a: PUSH1 0x08 0000032c: PUSH1 0x00 0000032e: POP 0000032f: PUSH1 0x00 00000331: CALLER 00000332: PUSH1 0x01 00000334: PUSH1 0xa0 00000336: PUSH1 0x02 00000338: EXP 00000339: SUB 0000033a: AND 0000033b: DUP2 0000033c: MSTORE 0000033d: PUSH1 0x20 0000033f: ADD 00000340: SWAP1 00000341: DUP2 00000342: MSTORE 00000343: PUSH1 0x20 00000345: ADD 00000346: PUSH1 0x00 00000348: KECCAK256 00000349: PUSH1 0x00 0000034b: POP 0000034c: PUSH1 0x00 0000034e: DUP8 0000034f: PUSH1 0x01 00000351: PUSH1 0xa0 00000353: PUSH1 0x02 00000355: EXP 00000356: SUB 00000357: AND 00000358: DUP2 00000359: MSTORE 0000035a: PUSH1 0x20 0000035c: ADD 0000035d: SWAP1 0000035e: DUP2 0000035f: MSTORE 00000360: PUSH1 0x20 00000362: ADD 00000363: PUSH1 0x00 00000365: KECCAK256 00000366: PUSH1 0x00 00000368: POP 00000369: DUP2 0000036a: SWAP1 0000036b: SSTORE 0000036c: POP 0000036d: DUP5 0000036e: SWAP1 0000036f: POP 00000370: DUP1 00000371: PUSH1 0x01 00000373: PUSH1 0xa0 00000375: PUSH1 0x02 00000377: EXP 00000378: SUB 00000379: AND 0000037a: PUSH4 0x8f4ffcb1 0000037f: CALLER 00000380: DUP7 00000381: ADDRESS 00000382: DUP8 00000383: PUSH1 0x40 00000385: MLOAD 00000386: DUP6 00000387: PUSH1 0xe0 00000389: PUSH1 0x02 0000038b: EXP 0000038c: MUL 0000038d: DUP2 0000038e: MSTORE 0000038f: PUSH1 0x04 00000391: ADD 00000392: DUP1 00000393: DUP6 00000394: PUSH1 0x01 00000396: PUSH1 0xa0 00000398: PUSH1 0x02 0000039a: EXP 0000039b: SUB 0000039c: AND 0000039d: DUP2 0000039e: MSTORE 0000039f: PUSH1 0x20 000003a1: ADD 000003a2: DUP5 000003a3: DUP2 000003a4: MSTORE 000003a5: PUSH1 0x20 000003a7: ADD 000003a8: DUP4 000003a9: PUSH1 0x01 000003ab: PUSH1 0xa0 000003ad: PUSH1 0x02 000003af: EXP 000003b0: SUB 000003b1: AND 000003b2: DUP2 000003b3: MSTORE 000003b4: PUSH1 0x20 000003b6: ADD 000003b7: DUP1 000003b8: PUSH1 0x20 000003ba: ADD 000003bb: DUP3 000003bc: DUP2 000003bd: SUB 000003be: DUP3 000003bf: MSTORE 000003c0: DUP4 000003c1: DUP2 000003c2: DUP2 000003c3: MLOAD 000003c4: DUP2 000003c5: MSTORE 000003c6: PUSH1 0x20 000003c8: ADD 000003c9: SWAP2 000003ca: POP 000003cb: DUP1 000003cc: MLOAD 000003cd: SWAP1 000003ce: PUSH1 0x20 000003d0: ADD 000003d1: SWAP1 000003d2: DUP1 000003d3: DUP4 000003d4: DUP4 000003d5: DUP3 000003d6: SWAP1 000003d7: PUSH1 0x00 000003d9: PUSH1 0x04 000003db: PUSH1 0x20 000003dd: DUP5 000003de: PUSH1 0x1f 000003e0: ADD 000003e1: DIV 000003e2: PUSH1 0x0f 000003e4: MUL 000003e5: PUSH1 0x03 000003e7: ADD 000003e8: CALL 000003e9: POP 000003ea: SWAP1 000003eb: POP 000003ec: SWAP1 000003ed: DUP2 000003ee: ADD 000003ef: SWAP1 000003f0: PUSH1 0x1f 000003f2: AND 000003f3: DUP1 000003f4: ISZERO 000003f5: PUSH2 0x0412 000003f8: JUMPI 000003f9: DUP1 000003fa: DUP3 000003fb: SUB 000003fc: DUP1 000003fd: MLOAD 000003fe: PUSH1 0x01 00000400: DUP4 00000401: PUSH1 0x20 00000403: SUB 00000404: PUSH2 0x0100 00000407: EXP 00000408: SUB 00000409: NOT 0000040a: AND 0000040b: DUP2 0000040c: MSTORE 0000040d: PUSH1 0x20 0000040f: ADD 00000410: SWAP2 00000411: POP 00000412: JUMPDEST 00000413: POP 00000414: SWAP6 00000415: POP 00000416: POP 00000417: POP 00000418: POP 00000419: POP 0000041a: POP 0000041b: PUSH1 0x00 0000041d: PUSH1 0x40 0000041f: MLOAD 00000420: DUP1 00000421: DUP4 00000422: SUB 00000423: DUP2 00000424: PUSH1 0x00 00000426: DUP8 00000427: PUSH2 0x61da 0000042a: GAS 0000042b: SUB 0000042c: CALL 0000042d: ISZERO 0000042e: PUSH2 0x0002 00000431: JUMPI 00000432: POP 00000433: PUSH1 0x01 00000435: SWAP8 00000436: SWAP7 00000437: POP 00000438: POP 00000439: POP 0000043a: POP 0000043b: POP 0000043c: POP 0000043d: POP 0000043e: JUMP 0000043f: JUMPDEST 00000440: PUSH2 0x0559 00000443: PUSH1 0x04 00000445: CALLDATALOAD 00000446: PUSH1 0x40 00000448: DUP1 00000449: MLOAD 0000044a: NUMBER 0000044b: DUP2 0000044c: MSTORE 0000044d: TIMESTAMP 0000044e: PUSH1 0x20 00000450: DUP3 00000451: ADD 00000452: MSTORE 00000453: DUP1 00000454: DUP3 00000455: ADD 00000456: DUP4 00000457: SWAP1 00000458: MSTORE 00000459: SWAP1 0000045a: MLOAD 0000045b: SWAP1 0000045c: DUP2 0000045d: SWAP1 0000045e: SUB 0000045f: PUSH1 0x60 00000461: ADD 00000462: SWAP1 00000463: KECCAK256 00000464: PUSH1 0x00 00000466: SWAP1 00000467: DUP2 00000468: SWAP1 00000469: PUSH2 0x079d 0000046c: SWAP1 0000046d: PUSH1 0x0a 0000046f: PUSH2 0x017b 00000472: JUMP 00000473: JUMPDEST 00000474: PUSH1 0x09 00000476: PUSH1 0x20 00000478: SWAP1 00000479: DUP2 0000047a: MSTORE 0000047b: PUSH1 0x04 0000047d: CALLDATALOAD 0000047e: PUSH1 0x00 00000480: SWAP1 00000481: DUP2 00000482: MSTORE 00000483: PUSH1 0x40 00000485: DUP1 00000486: DUP3 00000487: KECCAK256 00000488: SWAP1 00000489: SWAP3 0000048a: MSTORE 0000048b: PUSH1 0x24 0000048d: CALLDATALOAD 0000048e: DUP2 0000048f: MSTORE 00000490: KECCAK256 00000491: SLOAD 00000492: PUSH2 0x0559 00000495: SWAP1 00000496: DUP2 00000497: JUMP 00000498: JUMPDEST 00000499: PUSH1 0x08 0000049b: PUSH1 0x20 0000049d: SWAP1 0000049e: DUP2 0000049f: MSTORE 000004a0: PUSH1 0x04 000004a2: CALLDATALOAD 000004a3: PUSH1 0x00 000004a5: SWAP1 000004a6: DUP2 000004a7: MSTORE 000004a8: PUSH1 0x40 000004aa: DUP1 000004ab: DUP3 000004ac: KECCAK256 000004ad: SWAP1 000004ae: SWAP3 000004af: MSTORE 000004b0: PUSH1 0x24 000004b2: CALLDATALOAD 000004b3: DUP2 000004b4: MSTORE 000004b5: KECCAK256 000004b6: SLOAD 000004b7: PUSH2 0x0559 000004ba: SWAP1 000004bb: DUP2 000004bc: JUMP 000004bd: JUMPDEST 000004be: PUSH2 0x0559 000004c1: PUSH1 0x04 000004c3: CALLDATALOAD 000004c4: PUSH1 0x01 000004c6: PUSH1 0xa0 000004c8: PUSH1 0x02 000004ca: EXP 000004cb: SUB 000004cc: CALLER 000004cd: AND 000004ce: PUSH1 0x00 000004d0: SWAP1 000004d1: DUP2 000004d2: MSTORE 000004d3: PUSH1 0x07 000004d5: PUSH1 0x20 000004d7: MSTORE 000004d8: PUSH1 0x40 000004da: DUP2 000004db: KECCAK256 000004dc: SLOAD 000004dd: DUP3 000004de: SWAP1 000004df: LT 000004e0: ISZERO 000004e1: PUSH2 0x069f 000004e4: JUMPI 000004e5: PUSH2 0x0002 000004e8: JUMP 000004e9: JUMPDEST 000004ea: STOP 000004eb: JUMPDEST 000004ec: PUSH1 0x40 000004ee: MLOAD 000004ef: DUP1 000004f0: DUP1 000004f1: PUSH1 0x20 000004f3: ADD 000004f4: DUP3 000004f5: DUP2 000004f6: SUB 000004f7: DUP3 000004f8: MSTORE 000004f9: DUP4 000004fa: DUP2 000004fb: DUP2 000004fc: MLOAD 000004fd: DUP2 000004fe: MSTORE 000004ff: PUSH1 0x20 00000501: ADD 00000502: SWAP2 00000503: POP 00000504: DUP1 00000505: MLOAD 00000506: SWAP1 00000507: PUSH1 0x20 00000509: ADD 0000050a: SWAP1 0000050b: DUP1 0000050c: DUP4 0000050d: DUP4 0000050e: DUP3 0000050f: SWAP1 00000510: PUSH1 0x00 00000512: PUSH1 0x04 00000514: PUSH1 0x20 00000516: DUP5 00000517: PUSH1 0x1f 00000519: ADD 0000051a: DIV 0000051b: PUSH1 0x0f 0000051d: MUL 0000051e: PUSH1 0x03 00000520: ADD 00000521: CALL 00000522: POP 00000523: SWAP1 00000524: POP 00000525: SWAP1 00000526: DUP2 00000527: ADD 00000528: SWAP1 00000529: PUSH1 0x1f 0000052b: AND 0000052c: DUP1 0000052d: ISZERO 0000052e: PUSH2 0x054b 00000531: JUMPI 00000532: DUP1 00000533: DUP3 00000534: SUB 00000535: DUP1 00000536: MLOAD 00000537: PUSH1 0x01 00000539: DUP4 0000053a: PUSH1 0x20 0000053c: SUB 0000053d: PUSH2 0x0100 00000540: EXP 00000541: SUB 00000542: NOT 00000543: AND 00000544: DUP2 00000545: MSTORE 00000546: PUSH1 0x20 00000548: ADD 00000549: SWAP2 0000054a: POP 0000054b: JUMPDEST 0000054c: POP 0000054d: SWAP3 0000054e: POP 0000054f: POP 00000550: POP 00000551: PUSH1 0x40 00000553: MLOAD 00000554: DUP1 00000555: SWAP2 00000556: SUB 00000557: SWAP1 00000558: RETURN 00000559: JUMPDEST 0000055a: PUSH1 0x40 0000055c: DUP1 0000055d: MLOAD 0000055e: SWAP2 0000055f: DUP3 00000560: MSTORE 00000561: MLOAD 00000562: SWAP1 00000563: DUP2 00000564: SWAP1 00000565: SUB 00000566: PUSH1 0x20 00000568: ADD 00000569: SWAP1 0000056a: RETURN 0000056b: JUMPDEST 0000056c: PUSH1 0x40 0000056e: DUP1 0000056f: MLOAD 00000570: PUSH1 0xff 00000572: SWAP1 00000573: SWAP3 00000574: AND 00000575: DUP3 00000576: MSTORE 00000577: MLOAD 00000578: SWAP1 00000579: DUP2 0000057a: SWAP1 0000057b: SUB 0000057c: PUSH1 0x20 0000057e: ADD 0000057f: SWAP1 00000580: RETURN 00000581: JUMPDEST 00000582: DUP3 00000583: ADD 00000584: SWAP2 00000585: SWAP1 00000586: PUSH1 0x00 00000588: MSTORE 00000589: PUSH1 0x20 0000058b: PUSH1 0x00 0000058d: KECCAK256 0000058e: SWAP1 0000058f: JUMPDEST 00000590: DUP2 00000591: SLOAD 00000592: DUP2 00000593: MSTORE 00000594: SWAP1 00000595: PUSH1 0x01 00000597: ADD 00000598: SWAP1 00000599: PUSH1 0x20 0000059b: ADD 0000059c: DUP1 0000059d: DUP4 0000059e: GT 0000059f: PUSH2 0x058f 000005a2: JUMPI 000005a3: DUP3 000005a4: SWAP1 000005a5: SUB 000005a6: PUSH1 0x1f 000005a8: AND 000005a9: DUP3 000005aa: ADD 000005ab: SWAP2 000005ac: JUMPDEST 000005ad: POP 000005ae: POP 000005af: POP 000005b0: POP 000005b1: POP 000005b2: DUP2 000005b3: JUMP 000005b4: JUMPDEST 000005b5: PUSH1 0x01 000005b7: PUSH1 0xa0 000005b9: PUSH1 0x02 000005bb: EXP 000005bc: SUB 000005bd: DUP4 000005be: AND 000005bf: PUSH1 0x00 000005c1: SWAP1 000005c2: DUP2 000005c3: MSTORE 000005c4: PUSH1 0x07 000005c6: PUSH1 0x20 000005c8: MSTORE 000005c9: PUSH1 0x40 000005cb: SWAP1 000005cc: KECCAK256 000005cd: SLOAD 000005ce: DUP1 000005cf: DUP4 000005d0: ADD 000005d1: LT 000005d2: ISZERO 000005d3: PUSH2 0x05db 000005d6: JUMPI 000005d7: PUSH2 0x0002 000005da: JUMP 000005db: JUMPDEST 000005dc: PUSH1 0x01 000005de: PUSH1 0xa0 000005e0: PUSH1 0x02 000005e2: EXP 000005e3: SUB 000005e4: DUP5 000005e5: DUP2 000005e6: AND 000005e7: PUSH1 0x00 000005e9: DUP2 000005ea: DUP2 000005eb: MSTORE 000005ec: PUSH1 0x08 000005ee: PUSH1 0x20 000005f0: SWAP1 000005f1: DUP2 000005f2: MSTORE 000005f3: PUSH1 0x40 000005f5: DUP1 000005f6: DUP4 000005f7: KECCAK256 000005f8: CALLER 000005f9: SWAP1 000005fa: SWAP6 000005fb: AND 000005fc: DUP1 000005fd: DUP5 000005fe: MSTORE 000005ff: SWAP5 00000600: DUP3 00000601: MSTORE 00000602: DUP1 00000603: DUP4 00000604: KECCAK256 00000605: SLOAD 00000606: SWAP4 00000607: DUP4 00000608: MSTORE 00000609: PUSH1 0x09 0000060b: DUP3 0000060c: MSTORE 0000060d: DUP1 0000060e: DUP4 0000060f: KECCAK256 00000610: SWAP5 00000611: DUP4 00000612: MSTORE 00000613: SWAP4 00000614: SWAP1 00000615: MSTORE 00000616: SWAP2 00000617: SWAP1 00000618: SWAP2 00000619: KECCAK256 0000061a: SLOAD 0000061b: DUP4 0000061c: ADD 0000061d: GT 0000061e: ISZERO 0000061f: PUSH2 0x0627 00000622: JUMPI 00000623: PUSH2 0x0002 00000626: JUMP 00000627: JUMPDEST 00000628: PUSH1 0x01 0000062a: PUSH1 0xa0 0000062c: PUSH1 0x02 0000062e: EXP 0000062f: SUB 00000630: DUP5 00000631: DUP2 00000632: AND 00000633: PUSH1 0x00 00000635: DUP2 00000636: DUP2 00000637: MSTORE 00000638: PUSH1 0x07 0000063a: PUSH1 0x20 0000063c: SWAP1 0000063d: DUP2 0000063e: MSTORE 0000063f: PUSH1 0x40 00000641: DUP1 00000642: DUP4 00000643: KECCAK256 00000644: DUP1 00000645: SLOAD 00000646: DUP9 00000647: SWAP1 00000648: SUB 00000649: SWAP1 0000064a: SSTORE 0000064b: DUP8 0000064c: DUP6 0000064d: AND 0000064e: DUP1 0000064f: DUP5 00000650: MSTORE 00000651: DUP2 00000652: DUP5 00000653: KECCAK256 00000654: DUP1 00000655: SLOAD 00000656: DUP10 00000657: ADD 00000658: SWAP1 00000659: SSTORE 0000065a: DUP5 0000065b: DUP5 0000065c: MSTORE 0000065d: PUSH1 0x09 0000065f: DUP4 00000660: MSTORE 00000661: DUP2 00000662: DUP5 00000663: KECCAK256 00000664: CALLER 00000665: SWAP1 00000666: SWAP7 00000667: AND 00000668: DUP5 00000669: MSTORE 0000066a: SWAP5 0000066b: DUP3 0000066c: MSTORE 0000066d: SWAP2 0000066e: DUP3 0000066f: SWAP1 00000670: KECCAK256 00000671: DUP1 00000672: SLOAD 00000673: DUP8 00000674: ADD 00000675: SWAP1 00000676: SSTORE 00000677: DUP2 00000678: MLOAD 00000679: DUP7 0000067a: DUP2 0000067b: MSTORE 0000067c: SWAP2 0000067d: MLOAD 0000067e: PUSH1 0x00 00000680: DUP1 00000681: MLOAD 00000682: PUSH1 0x20 00000684: PUSH2 0x082e 00000687: DUP4 00000688: CODECOPY 00000689: DUP2 0000068a: MLOAD 0000068b: SWAP2 0000068c: MSTORE 0000068d: SWAP3 0000068e: DUP2 0000068f: SWAP1 00000690: SUB 00000691: SWAP1 00000692: SWAP2 00000693: ADD 00000694: SWAP1 00000695: LOG3 00000696: POP 00000697: PUSH1 0x01 00000699: SWAP4 0000069a: SWAP3 0000069b: POP 0000069c: POP 0000069d: POP 0000069e: JUMP 0000069f: JUMPDEST 000006a0: POP 000006a1: ADDRESS 000006a2: PUSH1 0x01 000006a4: PUSH1 0xa0 000006a6: PUSH1 0x02 000006a8: EXP 000006a9: SUB 000006aa: SWAP1 000006ab: DUP2 000006ac: AND 000006ad: PUSH1 0x00 000006af: SWAP1 000006b0: DUP2 000006b1: MSTORE 000006b2: PUSH1 0x07 000006b4: PUSH1 0x20 000006b6: MSTORE 000006b7: PUSH1 0x40 000006b9: DUP1 000006ba: DUP3 000006bb: KECCAK256 000006bc: DUP1 000006bd: SLOAD 000006be: DUP6 000006bf: ADD 000006c0: SWAP1 000006c1: SSTORE 000006c2: CALLER 000006c3: SWAP1 000006c4: SWAP3 000006c5: AND 000006c6: DUP1 000006c7: DUP3 000006c8: MSTORE 000006c9: DUP3 000006ca: DUP3 000006cb: KECCAK256 000006cc: DUP1 000006cd: SLOAD 000006ce: DUP6 000006cf: SWAP1 000006d0: SUB 000006d1: SWAP1 000006d2: SSTORE 000006d3: SWAP2 000006d4: MLOAD 000006d5: PUSH1 0x05 000006d7: SLOAD 000006d8: DUP5 000006d9: MUL 000006da: SWAP3 000006db: SWAP2 000006dc: SWAP1 000006dd: DUP4 000006de: SWAP1 000006df: DUP3 000006e0: DUP2 000006e1: DUP2 000006e2: DUP2 000006e3: DUP6 000006e4: DUP9 000006e5: DUP4 000006e6: CALL 000006e7: POP 000006e8: POP 000006e9: PUSH1 0x40 000006eb: DUP1 000006ec: MLOAD 000006ed: DUP7 000006ee: DUP2 000006ef: MSTORE 000006f0: SWAP1 000006f1: MLOAD 000006f2: ADDRESS 000006f3: PUSH1 0x01 000006f5: PUSH1 0xa0 000006f7: PUSH1 0x02 000006f9: EXP 000006fa: SUB 000006fb: AND 000006fc: SWAP5 000006fd: SWAP4 000006fe: POP 000006ff: PUSH1 0x00 00000701: DUP1 00000702: MLOAD 00000703: PUSH1 0x20 00000705: PUSH2 0x082e 00000708: DUP4 00000709: CODECOPY 0000070a: DUP2 0000070b: MLOAD 0000070c: SWAP2 0000070d: MSTORE 0000070e: SWAP3 0000070f: POP 00000710: SWAP1 00000711: DUP2 00000712: SWAP1 00000713: SUB 00000714: PUSH1 0x20 00000716: ADD 00000717: SWAP1 00000718: LOG3 00000719: SWAP2 0000071a: SWAP1 0000071b: POP 0000071c: JUMP 0000071d: JUMPDEST 0000071e: PUSH1 0x01 00000720: PUSH1 0xa0 00000722: PUSH1 0x02 00000724: EXP 00000725: SUB 00000726: DUP3 00000727: AND 00000728: PUSH1 0x00 0000072a: SWAP1 0000072b: DUP2 0000072c: MSTORE 0000072d: PUSH1 0x07 0000072f: PUSH1 0x20 00000731: MSTORE 00000732: PUSH1 0x40 00000734: SWAP1 00000735: KECCAK256 00000736: SLOAD 00000737: DUP2 00000738: DUP2 00000739: ADD 0000073a: LT 0000073b: ISZERO 0000073c: PUSH2 0x0744 0000073f: JUMPI 00000740: PUSH2 0x0002 00000743: JUMP 00000744: JUMPDEST 00000745: PUSH1 0x01 00000747: PUSH1 0xa0 00000749: PUSH1 0x02 0000074b: EXP 0000074c: SUB 0000074d: CALLER 0000074e: DUP2 0000074f: AND 00000750: PUSH1 0x00 00000752: DUP2 00000753: DUP2 00000754: MSTORE 00000755: PUSH1 0x07 00000757: PUSH1 0x20 00000759: SWAP1 0000075a: DUP2 0000075b: MSTORE 0000075c: PUSH1 0x40 0000075e: DUP1 0000075f: DUP4 00000760: KECCAK256 00000761: DUP1 00000762: SLOAD 00000763: DUP8 00000764: SWAP1 00000765: SUB 00000766: SWAP1 00000767: SSTORE 00000768: SWAP4 00000769: DUP7 0000076a: AND 0000076b: DUP1 0000076c: DUP4 0000076d: MSTORE 0000076e: SWAP2 0000076f: DUP5 00000770: SWAP1 00000771: KECCAK256 00000772: DUP1 00000773: SLOAD 00000774: DUP7 00000775: ADD 00000776: SWAP1 00000777: SSTORE 00000778: DUP4 00000779: MLOAD 0000077a: DUP6 0000077b: DUP2 0000077c: MSTORE 0000077d: SWAP4 0000077e: MLOAD 0000077f: SWAP2 00000780: SWAP4 00000781: PUSH1 0x00 00000783: DUP1 00000784: MLOAD 00000785: PUSH1 0x20 00000787: PUSH2 0x082e 0000078a: DUP4 0000078b: CODECOPY 0000078c: DUP2 0000078d: MLOAD 0000078e: SWAP2 0000078f: MSTORE 00000790: SWAP3 00000791: SWAP1 00000792: DUP2 00000793: SWAP1 00000794: SUB 00000795: SWAP1 00000796: SWAP2 00000797: ADD 00000798: SWAP1 00000799: LOG3 0000079a: POP 0000079b: POP 0000079c: JUMP 0000079d: JUMPDEST 0000079e: ADDRESS 0000079f: PUSH1 0x01 000007a1: PUSH1 0xa0 000007a3: PUSH1 0x02 000007a5: EXP 000007a6: SUB 000007a7: AND 000007a8: PUSH1 0x00 000007aa: SWAP1 000007ab: DUP2 000007ac: MSTORE 000007ad: PUSH1 0x07 000007af: PUSH1 0x20 000007b1: MSTORE 000007b2: PUSH1 0x40 000007b4: SWAP1 000007b5: KECCAK256 000007b6: SLOAD 000007b7: SWAP1 000007b8: SWAP3 000007b9: POP 000007ba: DUP3 000007bb: SWAP2 000007bc: POP 000007bd: DUP2 000007be: SWAP1 000007bf: LT 000007c0: ISZERO 000007c1: PUSH2 0x07c9 000007c4: JUMPI 000007c5: PUSH2 0x0002 000007c8: JUMP 000007c9: JUMPDEST 000007ca: PUSH1 0x01 000007cc: PUSH1 0xa0 000007ce: PUSH1 0x02 000007d0: EXP 000007d1: SUB 000007d2: CALLER 000007d3: DUP2 000007d4: AND 000007d5: PUSH1 0x00 000007d7: DUP2 000007d8: DUP2 000007d9: MSTORE 000007da: PUSH1 0x07 000007dc: PUSH1 0x20 000007de: SWAP1 000007df: DUP2 000007e0: MSTORE 000007e1: PUSH1 0x40 000007e3: DUP1 000007e4: DUP4 000007e5: KECCAK256 000007e6: DUP1 000007e7: SLOAD 000007e8: DUP9 000007e9: ADD 000007ea: SWAP1 000007eb: SSTORE 000007ec: ADDRESS 000007ed: SWAP1 000007ee: SWAP5 000007ef: AND 000007f0: DUP1 000007f1: DUP4 000007f2: MSTORE 000007f3: SWAP2 000007f4: DUP5 000007f5: SWAP1 000007f6: KECCAK256 000007f7: DUP1 000007f8: SLOAD 000007f9: DUP8 000007fa: SWAP1 000007fb: SUB 000007fc: SWAP1 000007fd: SSTORE 000007fe: DUP4 000007ff: MLOAD 00000800: DUP7 00000801: DUP2 00000802: MSTORE 00000803: SWAP4 00000804: MLOAD 00000805: SWAP3 00000806: SWAP4 00000807: SWAP2 00000808: SWAP3 00000809: PUSH1 0x00 0000080b: DUP1 0000080c: MLOAD 0000080d: PUSH1 0x20 0000080f: PUSH2 0x082e 00000812: DUP4 00000813: CODECOPY 00000814: DUP2 00000815: MLOAD 00000816: SWAP2 00000817: MSTORE 00000818: SWAP3 00000819: DUP2 0000081a: SWAP1 0000081b: SUB 0000081c: SWAP1 0000081d: SWAP2 0000081e: ADD 0000081f: SWAP1 00000820: LOG3 00000821: POP 00000822: SWAP2 00000823: SWAP1 00000824: POP 00000825: JUMP 00000826: JUMPDEST 00000827: POP 00000828: SWAP4 00000829: SWAP3 0000082a: POP 0000082b: POP 0000082c: POP 0000082d: JUMP 0000082e: UNKNOWN(0xDD) 0000082f: CALLCODE 00000830: MSTORE 00000831: UNKNOWN(0xAD) 00000832: SHL 00000833: UNKNOWN(0xE2) 00000834: UNKNOWN(0xC8) 00000835: SWAP12 00000836: PUSH10 0xc2b068fc378daa952ba7 00000841: CALL 00000842: PUSH4 0xc4a11628 00000847: CREATE2 00000848: GAS 00000849: UNKNOWN(0x4D) 0000084a: CREATE2 0000084b: UNKNOWN(0x23) 0000084c: UNKNOWN(0xB3) 0000084d: UNKNOWN(0xEF)
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | yes | yes |
viewtrace_id: 0xbca45018a17e61272cebf19864e7fd3a3042d7f84ab9f632ff0807aa975c8a3f
call_targets:
0x0000000000000000000000000000000000000004, 0x042835e6b091fe13ac52908d67a7345ed2dabed1
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0xbca45018a17e61272cebf19864e7fd3a3042d7f84ab9f632ff0807aa975c8a3f",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x0000000000000000000000000000000000000004",
"0x042835e6b091fe13ac52908d67a7345ed2dabed1"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x06fdde03",
"selector": "0x06fdde03",
"calldata_variants": [
"0x06fdde03",
"0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x18160ddd",
"selector": "0x18160ddd",
"calldata_variants": [
"0x18160ddd",
"0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x23b872dd",
"selector": "0x23b872dd",
"calldata_variants": [
"0x23b872dd",
"0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x313ce567",
"selector": "0x313ce567",
"calldata_variants": [
"0x313ce567",
"0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41fa4876",
"selector": "0x41fa4876",
"calldata_variants": [
"0x41fa4876",
"0x41fa48760000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4b750334",
"selector": "0x4b750334",
"calldata_variants": [
"0x4b750334",
"0x4b7503340000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x54fd4d50",
"selector": "0x54fd4d50",
"calldata_variants": [
"0x54fd4d50",
"0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x70a08231",
"selector": "0x70a08231",
"calldata_variants": [
"0x70a08231",
"0x70a082310000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1000,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1068,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1313,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 6,
"guards_detected": [],
"untrusted_call_count": 6
}
|
| high | other | detector | ETH value transfer possible | 55 | yes | yes |
viewtrace_id: 0xbca45018a17e61272cebf19864e7fd3a3042d7f84ab9f632ff0807aa975c8a3f
call_targets:
0x0000000000000000000000000000000000000004, 0x042835e6b091fe13ac52908d67a7345ed2dabed1
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0xbca45018a17e61272cebf19864e7fd3a3042d7f84ab9f632ff0807aa975c8a3f",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x0000000000000000000000000000000000000004",
"0x042835e6b091fe13ac52908d67a7345ed2dabed1"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x06fdde03",
"selector": "0x06fdde03",
"calldata_variants": [
"0x06fdde03",
"0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x18160ddd",
"selector": "0x18160ddd",
"calldata_variants": [
"0x18160ddd",
"0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x23b872dd",
"selector": "0x23b872dd",
"calldata_variants": [
"0x23b872dd",
"0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x313ce567",
"selector": "0x313ce567",
"calldata_variants": [
"0x313ce567",
"0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41fa4876",
"selector": "0x41fa4876",
"calldata_variants": [
"0x41fa4876",
"0x41fa48760000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4b750334",
"selector": "0x4b750334",
"calldata_variants": [
"0x4b750334",
"0x4b7503340000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x54fd4d50",
"selector": "0x54fd4d50",
"calldata_variants": [
"0x54fd4d50",
"0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x70a08231",
"selector": "0x70a08231",
"calldata_variants": [
"0x70a08231",
"0x70a082310000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1000,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1068,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1313,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 6,
"guards_detected": []
}
|
| medium | other | detector | CREATE/CREATE2 reachable | 45 | no | no |
viewtrace_id: 0xcbddb9ceaa463fc9f99fa6984e7bd7650ac1308e525c24329d4bce98c4ebfeab
validation_json{
"sink": "CREATE",
"errors": 0,
"status": "unknown",
"attempts": 32,
"trace_id": "0xcbddb9ceaa463fc9f99fa6984e7bd7650ac1308e525c24329d4bce98c4ebfeab",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x06fdde03",
"selector": "0x06fdde03",
"calldata_variants": [
"0x06fdde03",
"0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x18160ddd",
"selector": "0x18160ddd",
"calldata_variants": [
"0x18160ddd",
"0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x23b872dd",
"selector": "0x23b872dd",
"calldata_variants": [
"0x23b872dd",
"0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x313ce567",
"selector": "0x313ce567",
"calldata_variants": [
"0x313ce567",
"0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41fa4876",
"selector": "0x41fa4876",
"calldata_variants": [
"0x41fa4876",
"0x41fa48760000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4b750334",
"selector": "0x4b750334",
"calldata_variants": [
"0x4b750334",
"0x4b7503340000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x54fd4d50",
"selector": "0x54fd4d50",
"calldata_variants": [
"0x54fd4d50",
"0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x70a08231",
"selector": "0x70a08231",
"calldata_variants": [
"0x70a08231",
"0x70a082310000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"create_count": 0,
"create2_count": 2
}
|