019b3836-4263-70f7-bb9f-9a017ff9cd12
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 5537 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 5538 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 48596 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 48597 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 48598 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 48599 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0xe0 00000007: PUSH1 0x02 00000009: EXP 0000000a: PUSH1 0x00 0000000c: CALLDATALOAD 0000000d: DIV 0000000e: PUSH4 0x35a063b4 00000013: DUP2 00000014: EQ 00000015: PUSH2 0x0047 00000018: JUMPI 00000019: DUP1 0000001a: PUSH4 0x5f76f6ab 0000001f: EQ 00000020: PUSH2 0x00c3 00000023: JUMPI 00000024: DUP1 00000025: PUSH4 0x82ad9aa7 0000002a: EQ 0000002b: PUSH2 0x0174 0000002e: JUMPI 0000002f: DUP1 00000030: PUSH4 0x92238336 00000035: EQ 00000036: PUSH2 0x01cb 00000039: JUMPI 0000003a: DUP1 0000003b: PUSH4 0x93c9b6c0 00000040: EQ 00000041: PUSH2 0x0249 00000044: JUMPI 00000045: JUMPDEST 00000046: STOP 00000047: JUMPDEST 00000048: PUSH2 0x0045 0000004b: PUSH1 0x06 0000004d: SLOAD 0000004e: PUSH1 0xff 00000050: AND 00000051: PUSH1 0x00 00000053: EQ 00000054: DUP1 00000055: ISZERO 00000056: PUSH2 0x006a 00000059: JUMPI 0000005a: POP 0000005b: PUSH1 0x06 0000005d: SLOAD 0000005e: PUSH3 0x010000 00000062: SWAP1 00000063: DIV 00000064: PUSH1 0xff 00000066: AND 00000067: PUSH1 0x00 00000069: EQ 0000006a: JUMPDEST 0000006b: ISZERO 0000006c: PUSH2 0x0336 0000006f: JUMPI 00000070: PUSH1 0x00 00000072: SLOAD 00000073: PUSH1 0x01 00000075: PUSH1 0xa0 00000077: PUSH1 0x02 00000079: EXP 0000007a: SUB 0000007b: SWAP1 0000007c: DUP2 0000007d: AND 0000007e: CALLER 0000007f: SWAP1 00000080: SWAP2 00000081: AND 00000082: EQ 00000083: ISZERO 00000084: PUSH2 0x0336 00000087: JUMPI 00000088: PUSH1 0x06 0000008a: DUP1 0000008b: SLOAD 0000008c: PUSH3 0xff0000 00000090: NOT 00000091: AND 00000092: PUSH3 0x010000 00000096: OR 00000097: SWAP1 00000098: SSTORE 00000099: PUSH1 0x02 0000009b: SLOAD 0000009c: PUSH1 0x40 0000009e: MLOAD 0000009f: PUSH1 0x01 000000a1: PUSH1 0xa0 000000a3: PUSH1 0x02 000000a5: EXP 000000a6: SUB 000000a7: SWAP2 000000a8: DUP3 000000a9: AND 000000aa: SWAP2 000000ab: PUSH1 0x00 000000ad: SWAP2 000000ae: ADDRESS 000000af: SWAP1 000000b0: SWAP2 000000b1: AND 000000b2: BALANCE 000000b3: SWAP1 000000b4: DUP3 000000b5: DUP2 000000b6: DUP2 000000b7: DUP2 000000b8: DUP6 000000b9: DUP9 000000ba: DUP4 000000bb: CALL 000000bc: POP 000000bd: POP 000000be: POP 000000bf: POP 000000c0: POP 000000c1: JUMPDEST 000000c2: JUMP 000000c3: JUMPDEST 000000c4: PUSH2 0x0045 000000c7: PUSH1 0x04 000000c9: CALLDATALOAD 000000ca: PUSH1 0x06 000000cc: SLOAD 000000cd: PUSH1 0xff 000000cf: AND 000000d0: PUSH1 0x00 000000d2: EQ 000000d3: DUP1 000000d4: ISZERO 000000d5: PUSH2 0x00e9 000000d8: JUMPI 000000d9: POP 000000da: PUSH1 0x06 000000dc: SLOAD 000000dd: PUSH3 0x010000 000000e1: SWAP1 000000e2: DIV 000000e3: PUSH1 0xff 000000e5: AND 000000e6: PUSH1 0x00 000000e8: EQ 000000e9: JUMPDEST 000000ea: ISZERO 000000eb: PUSH2 0x0336 000000ee: JUMPI 000000ef: PUSH1 0x01 000000f1: SLOAD 000000f2: PUSH1 0x01 000000f4: PUSH1 0xa0 000000f6: PUSH1 0x02 000000f8: EXP 000000f9: SUB 000000fa: SWAP1 000000fb: DUP2 000000fc: AND 000000fd: CALLER 000000fe: SWAP1 000000ff: SWAP2 00000100: AND 00000101: EQ 00000102: DUP1 00000103: ISZERO 00000104: PUSH2 0x010d 00000107: JUMPI 00000108: POP 00000109: DUP1 0000010a: PUSH1 0x01 0000010c: EQ 0000010d: JUMPDEST 0000010e: DUP1 0000010f: ISZERO 00000110: PUSH2 0x0125 00000113: JUMPI 00000114: POP 00000115: PUSH1 0x06 00000117: SLOAD 00000118: PUSH4 0x01000000 0000011d: SWAP1 0000011e: DIV 0000011f: PUSH1 0xff 00000121: AND 00000122: PUSH1 0x01 00000124: EQ 00000125: JUMPDEST 00000126: ISZERO 00000127: PUSH2 0x036e 0000012a: JUMPI 0000012b: PUSH1 0x06 0000012d: DUP1 0000012e: SLOAD 0000012f: PUSH1 0xff 00000131: NOT 00000132: AND 00000133: DUP3 00000134: OR 00000135: PUSH4 0xff000000 0000013a: NOT 0000013b: AND 0000013c: SWAP1 0000013d: SSTORE 0000013e: PUSH1 0x04 00000140: ADDRESS 00000141: PUSH1 0x01 00000143: PUSH1 0xa0 00000145: PUSH1 0x02 00000147: EXP 00000148: SUB 00000149: SWAP1 0000014a: DUP2 0000014b: AND 0000014c: BALANCE 0000014d: SWAP2 0000014e: SWAP1 0000014f: SWAP2 00000150: DIV 00000151: PUSH1 0x07 00000153: DUP2 00000154: SWAP1 00000155: SSTORE 00000156: PUSH1 0x01 00000158: SLOAD 00000159: PUSH1 0x40 0000015b: MLOAD 0000015c: SWAP3 0000015d: AND 0000015e: SWAP2 0000015f: PUSH1 0x00 00000161: SWAP2 00000162: SWAP1 00000163: DUP3 00000164: DUP2 00000165: DUP2 00000166: DUP2 00000167: DUP6 00000168: DUP9 00000169: DUP4 0000016a: CALL 0000016b: POP 0000016c: POP 0000016d: POP 0000016e: POP 0000016f: POP 00000170: PUSH2 0x036e 00000173: JUMP 00000174: JUMPDEST 00000175: PUSH2 0x0045 00000178: PUSH1 0x04 0000017a: CALLDATALOAD 0000017b: PUSH1 0x06 0000017d: SLOAD 0000017e: PUSH1 0xff 00000180: AND 00000181: PUSH1 0x00 00000183: EQ 00000184: DUP1 00000185: ISZERO 00000186: PUSH2 0x019a 00000189: JUMPI 0000018a: POP 0000018b: PUSH1 0x06 0000018d: SLOAD 0000018e: PUSH3 0x010000 00000192: SWAP1 00000193: DIV 00000194: PUSH1 0xff 00000196: AND 00000197: PUSH1 0x00 00000199: EQ 0000019a: JUMPDEST 0000019b: DUP1 0000019c: ISZERO 0000019d: PUSH2 0x01b5 000001a0: JUMPI 000001a1: POP 000001a2: PUSH1 0x00 000001a4: SLOAD 000001a5: PUSH1 0x01 000001a7: PUSH1 0xa0 000001a9: PUSH1 0x02 000001ab: EXP 000001ac: SUB 000001ad: SWAP1 000001ae: DUP2 000001af: AND 000001b0: CALLER 000001b1: SWAP1 000001b2: SWAP2 000001b3: AND 000001b4: EQ 000001b5: JUMPDEST 000001b6: ISZERO 000001b7: PUSH2 0x0336 000001ba: JUMPI 000001bb: DUP1 000001bc: PUSH1 0x01 000001be: EQ 000001bf: ISZERO 000001c0: PUSH2 0x0336 000001c3: JUMPI 000001c4: PUSH2 0x0375 000001c7: PUSH2 0x01cf 000001ca: JUMP 000001cb: JUMPDEST 000001cc: PUSH2 0x0045 000001cf: JUMPDEST 000001d0: PUSH1 0x06 000001d2: SLOAD 000001d3: PUSH1 0xff 000001d5: AND 000001d6: PUSH1 0x00 000001d8: EQ 000001d9: DUP1 000001da: ISZERO 000001db: PUSH2 0x01ef 000001de: JUMPI 000001df: POP 000001e0: PUSH1 0x06 000001e2: SLOAD 000001e3: PUSH3 0x010000 000001e7: SWAP1 000001e8: DIV 000001e9: PUSH1 0xff 000001eb: AND 000001ec: PUSH1 0x00 000001ee: EQ 000001ef: JUMPDEST 000001f0: ISZERO 000001f1: PUSH2 0x0336 000001f4: JUMPI 000001f5: PUSH1 0x00 000001f7: SLOAD 000001f8: PUSH1 0x01 000001fa: PUSH1 0xa0 000001fc: PUSH1 0x02 000001fe: EXP 000001ff: SUB 00000200: SWAP1 00000201: DUP2 00000202: AND 00000203: CALLER 00000204: SWAP1 00000205: SWAP2 00000206: AND 00000207: EQ 00000208: ISZERO 00000209: PUSH2 0x0336 0000020c: JUMPI 0000020d: PUSH1 0x06 0000020f: DUP1 00000210: SLOAD 00000211: PUSH2 0xff00 00000214: NOT 00000215: AND 00000216: PUSH2 0x0100 00000219: OR 0000021a: SWAP1 0000021b: SSTORE 0000021c: PUSH1 0x01 0000021e: SLOAD 0000021f: PUSH1 0x40 00000221: MLOAD 00000222: PUSH1 0x01 00000224: PUSH1 0xa0 00000226: PUSH1 0x02 00000228: EXP 00000229: SUB 0000022a: SWAP2 0000022b: DUP3 0000022c: AND 0000022d: SWAP2 0000022e: PUSH1 0x00 00000230: SWAP2 00000231: ADDRESS 00000232: SWAP1 00000233: SWAP2 00000234: AND 00000235: BALANCE 00000236: SWAP1 00000237: DUP3 00000238: DUP2 00000239: DUP2 0000023a: DUP2 0000023b: DUP6 0000023c: DUP9 0000023d: DUP4 0000023e: CALL 0000023f: SWAP4 00000240: POP 00000241: POP 00000242: POP 00000243: POP 00000244: POP 00000245: PUSH2 0x00c1 00000248: JUMP 00000249: JUMPDEST 0000024a: PUSH2 0x0045 0000024d: PUSH1 0x04 0000024f: DUP1 00000250: DUP1 00000251: CALLDATALOAD 00000252: SWAP1 00000253: PUSH1 0x20 00000255: ADD 00000256: SWAP1 00000257: DUP3 00000258: ADD 00000259: DUP1 0000025a: CALLDATALOAD 0000025b: SWAP1 0000025c: PUSH1 0x20 0000025e: ADD 0000025f: SWAP2 00000260: SWAP2 00000261: SWAP1 00000262: DUP1 00000263: DUP1 00000264: PUSH1 0x1f 00000266: ADD 00000267: PUSH1 0x20 00000269: DUP1 0000026a: SWAP2 0000026b: DIV 0000026c: MUL 0000026d: PUSH1 0x20 0000026f: ADD 00000270: PUSH1 0x40 00000272: MLOAD 00000273: SWAP1 00000274: DUP2 00000275: ADD 00000276: PUSH1 0x40 00000278: MSTORE 00000279: DUP1 0000027a: SWAP4 0000027b: SWAP3 0000027c: SWAP2 0000027d: SWAP1 0000027e: DUP2 0000027f: DUP2 00000280: MSTORE 00000281: PUSH1 0x20 00000283: ADD 00000284: DUP4 00000285: DUP4 00000286: DUP1 00000287: DUP3 00000288: DUP5 00000289: CALLDATACOPY 0000028a: POP 0000028b: SWAP5 0000028c: SWAP7 0000028d: POP 0000028e: POP 0000028f: POP 00000290: POP 00000291: POP 00000292: POP 00000293: POP 00000294: PUSH1 0x06 00000296: SLOAD 00000297: PUSH1 0xff 00000299: AND 0000029a: PUSH1 0x00 0000029c: EQ 0000029d: DUP1 0000029e: ISZERO 0000029f: PUSH2 0x02b3 000002a2: JUMPI 000002a3: POP 000002a4: PUSH1 0x06 000002a6: SLOAD 000002a7: PUSH3 0x010000 000002ab: SWAP1 000002ac: DIV 000002ad: PUSH1 0xff 000002af: AND 000002b0: PUSH1 0x00 000002b2: EQ 000002b3: JUMPDEST 000002b4: ISZERO 000002b5: PUSH2 0x0336 000002b8: JUMPI 000002b9: PUSH1 0x01 000002bb: SLOAD 000002bc: CALLER 000002bd: PUSH1 0x01 000002bf: PUSH1 0xa0 000002c1: PUSH1 0x02 000002c3: EXP 000002c4: SUB 000002c5: SWAP1 000002c6: DUP2 000002c7: AND 000002c8: SWAP2 000002c9: AND 000002ca: EQ 000002cb: ISZERO 000002cc: PUSH2 0x0336 000002cf: JUMPI 000002d0: DUP1 000002d1: PUSH1 0x05 000002d3: PUSH1 0x00 000002d5: POP 000002d6: SWAP1 000002d7: DUP1 000002d8: MLOAD 000002d9: SWAP1 000002da: PUSH1 0x20 000002dc: ADD 000002dd: SWAP1 000002de: DUP3 000002df: DUP1 000002e0: SLOAD 000002e1: PUSH1 0x01 000002e3: DUP2 000002e4: PUSH1 0x01 000002e6: AND 000002e7: ISZERO 000002e8: PUSH2 0x0100 000002eb: MUL 000002ec: SUB 000002ed: AND 000002ee: PUSH1 0x02 000002f0: SWAP1 000002f1: DIV 000002f2: SWAP1 000002f3: PUSH1 0x00 000002f5: MSTORE 000002f6: PUSH1 0x20 000002f8: PUSH1 0x00 000002fa: KECCAK256 000002fb: SWAP1 000002fc: PUSH1 0x1f 000002fe: ADD 000002ff: PUSH1 0x20 00000301: SWAP1 00000302: DIV 00000303: DUP2 00000304: ADD 00000305: SWAP3 00000306: DUP3 00000307: PUSH1 0x1f 00000309: LT 0000030a: PUSH2 0x033b 0000030d: JUMPI 0000030e: DUP1 0000030f: MLOAD 00000310: PUSH1 0xff 00000312: NOT 00000313: AND 00000314: DUP4 00000315: DUP1 00000316: ADD 00000317: OR 00000318: DUP6 00000319: SSTORE 0000031a: JUMPDEST 0000031b: POP 0000031c: PUSH2 0x036b 0000031f: SWAP3 00000320: SWAP2 00000321: POP 00000322: JUMPDEST 00000323: DUP1 00000324: DUP3 00000325: GT 00000326: ISZERO 00000327: PUSH2 0x0371 0000032a: JUMPI 0000032b: PUSH1 0x00 0000032d: DUP2 0000032e: SSTORE 0000032f: PUSH1 0x01 00000331: ADD 00000332: PUSH2 0x0322 00000335: JUMP 00000336: JUMPDEST 00000337: PUSH2 0x0002 0000033a: JUMP 0000033b: JUMPDEST 0000033c: DUP3 0000033d: DUP1 0000033e: ADD 0000033f: PUSH1 0x01 00000341: ADD 00000342: DUP6 00000343: SSTORE 00000344: DUP3 00000345: ISZERO 00000346: PUSH2 0x031a 00000349: JUMPI 0000034a: SWAP2 0000034b: DUP3 0000034c: ADD 0000034d: JUMPDEST 0000034e: DUP3 0000034f: DUP2 00000350: GT 00000351: ISZERO 00000352: PUSH2 0x031a 00000355: JUMPI 00000356: DUP3 00000357: MLOAD 00000358: DUP3 00000359: PUSH1 0x00 0000035b: POP 0000035c: SSTORE 0000035d: SWAP2 0000035e: PUSH1 0x20 00000360: ADD 00000361: SWAP2 00000362: SWAP1 00000363: PUSH1 0x01 00000365: ADD 00000366: SWAP1 00000367: PUSH2 0x034d 0000036a: JUMP 0000036b: JUMPDEST 0000036c: POP 0000036d: POP 0000036e: JUMPDEST 0000036f: POP 00000370: JUMP 00000371: JUMPDEST 00000372: POP 00000373: SWAP1 00000374: JUMP 00000375: JUMPDEST 00000376: PUSH2 0x036e 00000379: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xa6ce1fd51fd8830b41f030d5e6c602e1b30a41f352b65017fb7870e46ec1b347
call_targets:
0xc43e53070b835ac3ea1b53785041a5d5c563663d
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xa6ce1fd51fd8830b41f030d5e6c602e1b30a41f352b65017fb7870e46ec1b347",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xc43e53070b835ac3ea1b53785041a5d5c563663d"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x35a063b4",
"selector": "0x35a063b4",
"calldata_variants": [
"0x35a063b4",
"0x35a063b40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5f76f6ab",
"selector": "0x5f76f6ab",
"calldata_variants": [
"0x5f76f6ab",
"0x5f76f6ab0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x82ad9aa7",
"selector": "0x82ad9aa7",
"calldata_variants": [
"0x82ad9aa7",
"0x82ad9aa70000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x92238336",
"selector": "0x92238336",
"calldata_variants": [
"0x92238336",
"0x922383360000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x93c9b6c0",
"selector": "0x93c9b6c0",
"calldata_variants": [
"0x93c9b6c0",
"0x93c9b6c00000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 187,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 362,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 574,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 3,
"guards_detected": [],
"untrusted_call_count": 3
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xa6ce1fd51fd8830b41f030d5e6c602e1b30a41f352b65017fb7870e46ec1b347
call_targets:
0xc43e53070b835ac3ea1b53785041a5d5c563663d
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xa6ce1fd51fd8830b41f030d5e6c602e1b30a41f352b65017fb7870e46ec1b347",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xc43e53070b835ac3ea1b53785041a5d5c563663d"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x35a063b4",
"selector": "0x35a063b4",
"calldata_variants": [
"0x35a063b4",
"0x35a063b40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5f76f6ab",
"selector": "0x5f76f6ab",
"calldata_variants": [
"0x5f76f6ab",
"0x5f76f6ab0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x82ad9aa7",
"selector": "0x82ad9aa7",
"calldata_variants": [
"0x82ad9aa7",
"0x82ad9aa70000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x92238336",
"selector": "0x92238336",
"calldata_variants": [
"0x92238336",
"0x922383360000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x93c9b6c0",
"selector": "0x93c9b6c0",
"calldata_variants": [
"0x93c9b6c0",
"0x93c9b6c00000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 187,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 362,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 574,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 3,
"guards_detected": []
}
|