019b3836-4085-706d-9bba-dab8181bad90
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 5233 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 5234 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 48640 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 48641 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 48642 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 48643 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0061 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x38af3eed 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x007f 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x411e6832 00000025: EQ 00000026: PUSH2 0x0091 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x46b207b8 00000030: EQ 00000031: PUSH2 0x00a3 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x4beda18b 0000003b: EQ 0000003c: PUSH2 0x0159 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0x516dde43 00000046: EQ 00000047: PUSH2 0x0162 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0x8c3753d7 00000051: EQ 00000052: PUSH2 0x016b 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0x984474fb 0000005c: EQ 0000005d: PUSH2 0x0174 00000060: JUMPI 00000061: JUMPDEST 00000062: PUSH2 0x017d 00000065: PUSH1 0x00 00000067: PUSH1 0x00 00000069: PUSH1 0x00 0000006b: PUSH1 0x00 0000006d: PUSH1 0x05 0000006f: PUSH1 0x00 00000071: POP 00000072: SLOAD 00000073: TIMESTAMP 00000074: LT 00000075: ISZERO 00000076: ISZERO 00000077: PUSH2 0x017f 0000007a: JUMPI 0000007b: PUSH2 0x0002 0000007e: JUMP 0000007f: JUMPDEST 00000080: PUSH2 0x0322 00000083: PUSH1 0x00 00000085: SLOAD 00000086: PUSH1 0x01 00000088: PUSH1 0xa0 0000008a: PUSH1 0x02 0000008c: EXP 0000008d: SUB 0000008e: AND 0000008f: DUP2 00000090: JUMP 00000091: JUMPDEST 00000092: PUSH2 0x0322 00000095: PUSH1 0x01 00000097: SLOAD 00000098: PUSH1 0x01 0000009a: PUSH1 0xa0 0000009c: PUSH1 0x02 0000009e: EXP 0000009f: SUB 000000a0: AND 000000a1: DUP2 000000a2: JUMP 000000a3: JUMPDEST 000000a4: PUSH2 0x017d 000000a7: PUSH1 0x05 000000a9: SLOAD 000000aa: PUSH1 0x00 000000ac: SWAP1 000000ad: TIMESTAMP 000000ae: LT 000000af: PUSH2 0x0156 000000b2: JUMPI 000000b3: PUSH1 0x01 000000b5: SLOAD 000000b6: PUSH1 0xe0 000000b8: PUSH1 0x02 000000ba: EXP 000000bb: PUSH4 0x70a08231 000000c0: MUL 000000c1: PUSH1 0x60 000000c3: SWAP1 000000c4: DUP2 000000c5: MSTORE 000000c6: PUSH1 0x01 000000c8: PUSH1 0xa0 000000ca: PUSH1 0x02 000000cc: EXP 000000cd: SUB 000000ce: ADDRESS 000000cf: DUP2 000000d0: AND 000000d1: PUSH1 0x64 000000d3: MSTORE 000000d4: SWAP1 000000d5: SWAP2 000000d6: AND 000000d7: SWAP1 000000d8: PUSH4 0x70a08231 000000dd: SWAP1 000000de: PUSH1 0x84 000000e0: SWAP1 000000e1: PUSH1 0x20 000000e3: SWAP1 000000e4: PUSH1 0x24 000000e6: DUP2 000000e7: DUP8 000000e8: DUP8 000000e9: PUSH2 0x61da 000000ec: GAS 000000ed: SUB 000000ee: CALL 000000ef: ISZERO 000000f0: PUSH2 0x0002 000000f3: JUMPI 000000f4: POP 000000f5: POP 000000f6: PUSH1 0x40 000000f8: DUP1 000000f9: MLOAD 000000fa: DUP1 000000fb: MLOAD 000000fc: PUSH1 0x01 000000fe: SLOAD 000000ff: DUP6 00000100: SLOAD 00000101: PUSH1 0xe0 00000103: PUSH1 0x02 00000105: EXP 00000106: PUSH4 0xa9059cbb 0000010b: MUL 0000010c: DUP5 0000010d: MSTORE 0000010e: PUSH1 0x01 00000110: PUSH1 0xa0 00000112: PUSH1 0x02 00000114: EXP 00000115: SUB 00000116: SWAP1 00000117: DUP2 00000118: AND 00000119: PUSH1 0x04 0000011b: DUP6 0000011c: ADD 0000011d: MSTORE 0000011e: PUSH1 0x24 00000120: DUP5 00000121: ADD 00000122: DUP4 00000123: SWAP1 00000124: MSTORE 00000125: SWAP4 00000126: MLOAD 00000127: SWAP2 00000128: SWAP6 00000129: SWAP4 0000012a: AND 0000012b: SWAP4 0000012c: POP 0000012d: PUSH4 0xa9059cbb 00000132: SWAP3 00000133: PUSH1 0x44 00000135: DUP1 00000136: DUP5 00000137: ADD 00000138: SWAP4 00000139: PUSH1 0x20 0000013b: SWAP4 0000013c: SWAP3 0000013d: SWAP1 0000013e: DUP4 0000013f: SWAP1 00000140: SUB 00000141: SWAP1 00000142: SWAP2 00000143: ADD 00000144: SWAP1 00000145: DUP3 00000146: SWAP1 00000147: DUP8 00000148: PUSH2 0x61da 0000014b: GAS 0000014c: SUB 0000014d: CALL 0000014e: ISZERO 0000014f: PUSH2 0x0002 00000152: JUMPI 00000153: POP 00000154: POP 00000155: POP 00000156: JUMPDEST 00000157: POP 00000158: JUMP 00000159: JUMPDEST 0000015a: PUSH2 0x0335 0000015d: PUSH1 0x04 0000015f: SLOAD 00000160: DUP2 00000161: JUMP 00000162: JUMPDEST 00000163: PUSH2 0x0335 00000166: PUSH1 0x05 00000168: SLOAD 00000169: DUP2 0000016a: JUMP 0000016b: JUMPDEST 0000016c: PUSH2 0x0335 0000016f: PUSH1 0x03 00000171: SLOAD 00000172: DUP2 00000173: JUMP 00000174: JUMPDEST 00000175: PUSH2 0x0335 00000178: PUSH1 0x02 0000017a: SLOAD 0000017b: DUP2 0000017c: JUMP 0000017d: JUMPDEST 0000017e: STOP 0000017f: JUMPDEST 00000180: PUSH1 0x02 00000182: SLOAD 00000183: PUSH1 0x04 00000185: SLOAD 00000186: PUSH1 0x01 00000188: SLOAD 00000189: PUSH1 0xe0 0000018b: PUSH1 0x02 0000018d: EXP 0000018e: PUSH4 0x70a08231 00000193: MUL 00000194: PUSH1 0x60 00000196: SWAP1 00000197: DUP2 00000198: MSTORE 00000199: PUSH1 0x01 0000019b: PUSH1 0xa0 0000019d: PUSH1 0x02 0000019f: EXP 000001a0: SUB 000001a1: ADDRESS 000001a2: DUP2 000001a3: AND 000001a4: PUSH1 0x64 000001a6: MSTORE 000001a7: CALLVALUE 000001a8: SWAP1 000001a9: SWAP4 000001aa: MUL 000001ab: SWAP4 000001ac: SWAP1 000001ad: SWAP4 000001ae: DIV 000001af: SWAP7 000001b0: POP 000001b1: AND 000001b2: SWAP1 000001b3: PUSH4 0x70a08231 000001b8: SWAP1 000001b9: PUSH1 0x84 000001bb: SWAP1 000001bc: PUSH1 0x20 000001be: SWAP1 000001bf: PUSH1 0x24 000001c1: DUP2 000001c2: DUP8 000001c3: DUP8 000001c4: PUSH2 0x61da 000001c7: GAS 000001c8: SUB 000001c9: CALL 000001ca: ISZERO 000001cb: PUSH2 0x0002 000001ce: JUMPI 000001cf: POP 000001d0: POP 000001d1: PUSH1 0x40 000001d3: MLOAD 000001d4: MLOAD 000001d5: SWAP4 000001d6: POP 000001d7: CALLER 000001d8: SWAP3 000001d9: POP 000001da: POP 000001db: DUP4 000001dc: DUP4 000001dd: LT 000001de: PUSH2 0x025e 000001e1: JUMPI 000001e2: PUSH1 0x40 000001e4: DUP1 000001e5: MLOAD 000001e6: PUSH1 0x01 000001e8: SLOAD 000001e9: PUSH1 0xe0 000001eb: PUSH1 0x02 000001ed: EXP 000001ee: PUSH4 0xa9059cbb 000001f3: MUL 000001f4: DUP3 000001f5: MSTORE 000001f6: PUSH1 0x01 000001f8: PUSH1 0xa0 000001fa: PUSH1 0x02 000001fc: EXP 000001fd: SUB 000001fe: DUP6 000001ff: DUP2 00000200: AND 00000201: PUSH1 0x04 00000203: DUP5 00000204: ADD 00000205: MSTORE 00000206: PUSH1 0x24 00000208: DUP4 00000209: ADD 0000020a: DUP9 0000020b: SWAP1 0000020c: MSTORE 0000020d: SWAP3 0000020e: MLOAD 0000020f: SWAP3 00000210: AND 00000211: SWAP2 00000212: PUSH4 0xa9059cbb 00000217: SWAP2 00000218: PUSH1 0x44 0000021a: DUP1 0000021b: DUP3 0000021c: ADD 0000021d: SWAP3 0000021e: PUSH1 0x20 00000220: SWAP3 00000221: SWAP1 00000222: SWAP2 00000223: SWAP1 00000224: DUP3 00000225: SWAP1 00000226: SUB 00000227: ADD 00000228: DUP2 00000229: DUP8 0000022a: DUP8 0000022b: PUSH2 0x61da 0000022e: GAS 0000022f: SUB 00000230: CALL 00000231: ISZERO 00000232: PUSH2 0x0002 00000235: JUMPI 00000236: POP 00000237: POP 00000238: PUSH1 0x40 0000023a: MLOAD 0000023b: DUP3 0000023c: SLOAD 0000023d: PUSH1 0x01 0000023f: PUSH1 0xa0 00000241: PUSH1 0x02 00000243: EXP 00000244: SUB 00000245: AND 00000246: SWAP2 00000247: POP 00000248: DUP3 00000249: SWAP1 0000024a: CALLVALUE 0000024b: SWAP1 0000024c: DUP3 0000024d: DUP2 0000024e: DUP2 0000024f: DUP2 00000250: DUP6 00000251: DUP9 00000252: DUP4 00000253: CALL 00000254: SWAP4 00000255: POP 00000256: POP 00000257: POP 00000258: POP 00000259: POP 0000025a: PUSH2 0x031c 0000025d: JUMP 0000025e: JUMPDEST 0000025f: PUSH1 0x40 00000261: DUP1 00000262: MLOAD 00000263: PUSH1 0x01 00000265: SLOAD 00000266: PUSH1 0xe0 00000268: PUSH1 0x02 0000026a: EXP 0000026b: PUSH4 0xa9059cbb 00000270: MUL 00000271: DUP3 00000272: MSTORE 00000273: PUSH1 0x01 00000275: PUSH1 0xa0 00000277: PUSH1 0x02 00000279: EXP 0000027a: SUB 0000027b: DUP6 0000027c: DUP2 0000027d: AND 0000027e: PUSH1 0x04 00000280: DUP5 00000281: ADD 00000282: MSTORE 00000283: PUSH1 0x24 00000285: DUP4 00000286: ADD 00000287: DUP8 00000288: SWAP1 00000289: MSTORE 0000028a: SWAP3 0000028b: MLOAD 0000028c: SWAP3 0000028d: AND 0000028e: SWAP2 0000028f: PUSH4 0xa9059cbb 00000294: SWAP2 00000295: PUSH1 0x44 00000297: DUP1 00000298: DUP3 00000299: ADD 0000029a: SWAP3 0000029b: PUSH1 0x20 0000029d: SWAP3 0000029e: SWAP1 0000029f: SWAP2 000002a0: SWAP1 000002a1: DUP3 000002a2: SWAP1 000002a3: SUB 000002a4: ADD 000002a5: DUP2 000002a6: DUP8 000002a7: DUP8 000002a8: PUSH2 0x61da 000002ab: GAS 000002ac: SUB 000002ad: CALL 000002ae: ISZERO 000002af: PUSH2 0x0002 000002b2: JUMPI 000002b3: POP 000002b4: POP 000002b5: POP 000002b6: PUSH1 0x40 000002b8: MLOAD 000002b9: DUP1 000002ba: MLOAD 000002bb: SWAP1 000002bc: PUSH1 0x20 000002be: ADD 000002bf: POP 000002c0: POP 000002c1: PUSH1 0x04 000002c3: PUSH1 0x00 000002c5: POP 000002c6: SLOAD 000002c7: PUSH1 0x02 000002c9: PUSH1 0x00 000002cb: POP 000002cc: SLOAD 000002cd: DUP5 000002ce: DUP7 000002cf: SUB 000002d0: MUL 000002d1: DIV 000002d2: SWAP1 000002d3: POP 000002d4: DUP2 000002d5: PUSH1 0x01 000002d7: PUSH1 0xa0 000002d9: PUSH1 0x02 000002db: EXP 000002dc: SUB 000002dd: AND 000002de: PUSH1 0x00 000002e0: DUP3 000002e1: PUSH1 0x40 000002e3: MLOAD 000002e4: DUP1 000002e5: SWAP1 000002e6: POP 000002e7: PUSH1 0x00 000002e9: PUSH1 0x40 000002eb: MLOAD 000002ec: DUP1 000002ed: DUP4 000002ee: SUB 000002ef: DUP2 000002f0: DUP6 000002f1: DUP9 000002f2: DUP9 000002f3: CALL 000002f4: POP 000002f5: POP 000002f6: DUP2 000002f7: SLOAD 000002f8: PUSH1 0x40 000002fa: MLOAD 000002fb: PUSH1 0x01 000002fd: PUSH1 0xa0 000002ff: PUSH1 0x02 00000301: EXP 00000302: SUB 00000303: SWAP2 00000304: SWAP1 00000305: SWAP2 00000306: AND 00000307: SWAP4 00000308: POP 00000309: CALLVALUE 0000030a: SWAP2 0000030b: SWAP1 0000030c: SWAP2 0000030d: SUB 0000030e: SWAP1 0000030f: DUP3 00000310: DUP2 00000311: DUP2 00000312: DUP2 00000313: DUP6 00000314: DUP9 00000315: DUP4 00000316: CALL 00000317: POP 00000318: POP 00000319: POP 0000031a: POP 0000031b: POP 0000031c: JUMPDEST 0000031d: POP 0000031e: POP 0000031f: POP 00000320: POP 00000321: JUMP 00000322: JUMPDEST 00000323: PUSH1 0x01 00000325: PUSH1 0xa0 00000327: PUSH1 0x02 00000329: EXP 0000032a: SUB 0000032b: AND 0000032c: PUSH1 0x60 0000032e: SWAP1 0000032f: DUP2 00000330: MSTORE 00000331: PUSH1 0x20 00000333: SWAP1 00000334: RETURN 00000335: JUMPDEST 00000336: PUSH1 0x60 00000338: SWAP1 00000339: DUP2 0000033a: MSTORE 0000033b: PUSH1 0x20 0000033d: SWAP1 0000033e: RETURN
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xdc88e38cddedcfb001a0970433fe0047508d059b9195ad424ecb2dee3542f482
call_targets:
0xbe0637a222cc5e1b1c391253dc8062a1edb9725f
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xdc88e38cddedcfb001a0970433fe0047508d059b9195ad424ecb2dee3542f482",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xbe0637a222cc5e1b1c391253dc8062a1edb9725f"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x38af3eed",
"selector": "0x38af3eed",
"calldata_variants": [
"0x38af3eed",
"0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x411e6832",
"selector": "0x411e6832",
"calldata_variants": [
"0x411e6832",
"0x411e68320000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x46b207b8",
"selector": "0x46b207b8",
"calldata_variants": [
"0x46b207b8",
"0x46b207b80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4beda18b",
"selector": "0x4beda18b",
"calldata_variants": [
"0x4beda18b",
"0x4beda18b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x516dde43",
"selector": "0x516dde43",
"calldata_variants": [
"0x516dde43",
"0x516dde430000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8c3753d7",
"selector": "0x8c3753d7",
"calldata_variants": [
"0x8c3753d7",
"0x8c3753d70000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x984474fb",
"selector": "0x984474fb",
"calldata_variants": [
"0x984474fb",
"0x984474fb0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 238,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 333,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 457,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 8,
"guards_detected": [],
"untrusted_call_count": 8
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xdc88e38cddedcfb001a0970433fe0047508d059b9195ad424ecb2dee3542f482
call_targets:
0xbe0637a222cc5e1b1c391253dc8062a1edb9725f
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xdc88e38cddedcfb001a0970433fe0047508d059b9195ad424ecb2dee3542f482",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xbe0637a222cc5e1b1c391253dc8062a1edb9725f"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x38af3eed",
"selector": "0x38af3eed",
"calldata_variants": [
"0x38af3eed",
"0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x411e6832",
"selector": "0x411e6832",
"calldata_variants": [
"0x411e6832",
"0x411e68320000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x46b207b8",
"selector": "0x46b207b8",
"calldata_variants": [
"0x46b207b8",
"0x46b207b80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4beda18b",
"selector": "0x4beda18b",
"calldata_variants": [
"0x4beda18b",
"0x4beda18b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x516dde43",
"selector": "0x516dde43",
"calldata_variants": [
"0x516dde43",
"0x516dde430000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8c3753d7",
"selector": "0x8c3753d7",
"calldata_variants": [
"0x8c3753d7",
"0x8c3753d70000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x984474fb",
"selector": "0x984474fb",
"calldata_variants": [
"0x984474fb",
"0x984474fb0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 238,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 333,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 457,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 8,
"guards_detected": []
}
|