TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-426f-7198-afc8-4a29b64450ac

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
5545 artifact.fetch complete 1 / 3 3 months ago
5546 tool.cast_disasm complete 1 / 3 3 months ago
48592 analysis.bundle complete 1 / 3 2 weeks ago
48593 capability.graph complete 1 / 3 2 weeks ago
48594 detector.run complete 1 / 3 2 weeks ago
48595 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
4
EXT*/BALANCE
3
Total opcodes
1087
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0082
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x35a063b4
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x0084
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x5f76f6ab
00000025: EQ
00000026: PUSH2 0x00fd
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x60fcbb28
00000030: EQ
00000031: PUSH2 0x01ae
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x82ad9aa7
0000003b: EQ
0000003c: PUSH2 0x0217
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x92238336
00000046: EQ
00000047: PUSH2 0x026d
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x93c9b6c0
00000051: EQ
00000052: PUSH2 0x02ea
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0xab20f394
0000005c: EQ
0000005d: PUSH2 0x03d3
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0xcc420462
00000067: EQ
00000068: PUSH2 0x03e0
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0xe377ac31
00000072: EQ
00000073: PUSH2 0x044a
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xf7f99efa
0000007d: EQ
0000007e: PUSH2 0x04b4
00000081: JUMPI
00000082: JUMPDEST
00000083: STOP
00000084: JUMPDEST
00000085: PUSH2 0x0082
00000088: PUSH1 0x06
0000008a: SLOAD
0000008b: PUSH1 0xff
0000008d: AND
0000008e: PUSH1 0x00
00000090: EQ
00000091: DUP1
00000092: ISZERO
00000093: PUSH2 0x00a7
00000096: JUMPI
00000097: POP
00000098: PUSH1 0x06
0000009a: SLOAD
0000009b: PUSH3 0x010000
0000009f: SWAP1
000000a0: DIV
000000a1: PUSH1 0xff
000000a3: AND
000000a4: PUSH1 0x00
000000a6: EQ
000000a7: JUMPDEST
000000a8: ISZERO
000000a9: PUSH2 0x0548
000000ac: JUMPI
000000ad: PUSH1 0x00
000000af: SLOAD
000000b0: CALLER
000000b1: PUSH1 0x01
000000b3: PUSH1 0xa0
000000b5: PUSH1 0x02
000000b7: EXP
000000b8: SUB
000000b9: SWAP1
000000ba: DUP2
000000bb: AND
000000bc: SWAP2
000000bd: AND
000000be: EQ
000000bf: ISZERO
000000c0: PUSH2 0x0548
000000c3: JUMPI
000000c4: PUSH1 0x06
000000c6: DUP1
000000c7: SLOAD
000000c8: PUSH3 0xff0000
000000cc: NOT
000000cd: AND
000000ce: PUSH3 0x010000
000000d2: OR
000000d3: SWAP1
000000d4: SSTORE
000000d5: PUSH1 0x40
000000d7: MLOAD
000000d8: PUSH1 0x02
000000da: SLOAD
000000db: PUSH1 0x01
000000dd: PUSH1 0xa0
000000df: PUSH1 0x02
000000e1: EXP
000000e2: SUB
000000e3: SWAP1
000000e4: DUP2
000000e5: AND
000000e6: SWAP2
000000e7: PUSH1 0x00
000000e9: SWAP2
000000ea: ADDRESS
000000eb: AND
000000ec: BALANCE
000000ed: SWAP1
000000ee: DUP3
000000ef: DUP2
000000f0: DUP2
000000f1: DUP2
000000f2: DUP6
000000f3: DUP9
000000f4: DUP4
000000f5: CALL
000000f6: POP
000000f7: POP
000000f8: POP
000000f9: POP
000000fa: POP
000000fb: JUMPDEST
000000fc: JUMP
000000fd: JUMPDEST
000000fe: PUSH2 0x0082
00000101: PUSH1 0x04
00000103: CALLDATALOAD
00000104: PUSH1 0x06
00000106: SLOAD
00000107: PUSH1 0xff
00000109: AND
0000010a: PUSH1 0x00
0000010c: EQ
0000010d: DUP1
0000010e: ISZERO
0000010f: PUSH2 0x0123
00000112: JUMPI
00000113: POP
00000114: PUSH1 0x06
00000116: SLOAD
00000117: PUSH3 0x010000
0000011b: SWAP1
0000011c: DIV
0000011d: PUSH1 0xff
0000011f: AND
00000120: PUSH1 0x00
00000122: EQ
00000123: JUMPDEST
00000124: ISZERO
00000125: PUSH2 0x0548
00000128: JUMPI
00000129: PUSH1 0x01
0000012b: SLOAD
0000012c: PUSH1 0x01
0000012e: PUSH1 0xa0
00000130: PUSH1 0x02
00000132: EXP
00000133: SUB
00000134: SWAP1
00000135: DUP2
00000136: AND
00000137: CALLER
00000138: SWAP1
00000139: SWAP2
0000013a: AND
0000013b: EQ
0000013c: DUP1
0000013d: ISZERO
0000013e: PUSH2 0x0147
00000141: JUMPI
00000142: POP
00000143: DUP1
00000144: PUSH1 0x01
00000146: EQ
00000147: JUMPDEST
00000148: DUP1
00000149: ISZERO
0000014a: PUSH2 0x015f
0000014d: JUMPI
0000014e: POP
0000014f: PUSH1 0x06
00000151: SLOAD
00000152: PUSH4 0x01000000
00000157: SWAP1
00000158: DIV
00000159: PUSH1 0xff
0000015b: AND
0000015c: PUSH1 0x01
0000015e: EQ
0000015f: JUMPDEST
00000160: ISZERO
00000161: PUSH2 0x0580
00000164: JUMPI
00000165: PUSH1 0x06
00000167: DUP1
00000168: SLOAD
00000169: PUSH1 0xff
0000016b: NOT
0000016c: AND
0000016d: DUP3
0000016e: OR
0000016f: PUSH4 0xff000000
00000174: NOT
00000175: AND
00000176: SWAP1
00000177: SSTORE
00000178: PUSH1 0x04
0000017a: ADDRESS
0000017b: PUSH1 0x01
0000017d: PUSH1 0xa0
0000017f: PUSH1 0x02
00000181: EXP
00000182: SUB
00000183: SWAP1
00000184: DUP2
00000185: AND
00000186: BALANCE
00000187: SWAP2
00000188: SWAP1
00000189: SWAP2
0000018a: DIV
0000018b: PUSH1 0x07
0000018d: DUP2
0000018e: SWAP1
0000018f: SSTORE
00000190: PUSH1 0x01
00000192: SLOAD
00000193: PUSH1 0x40
00000195: MLOAD
00000196: SWAP3
00000197: AND
00000198: SWAP2
00000199: PUSH1 0x00
0000019b: SWAP2
0000019c: SWAP1
0000019d: DUP3
0000019e: DUP2
0000019f: DUP2
000001a0: DUP2
000001a1: DUP6
000001a2: DUP9
000001a3: DUP4
000001a4: CALL
000001a5: POP
000001a6: POP
000001a7: POP
000001a8: POP
000001a9: POP
000001aa: PUSH2 0x0580
000001ad: JUMP
000001ae: JUMPDEST
000001af: PUSH2 0x04c8
000001b2: PUSH1 0x40
000001b4: DUP1
000001b5: MLOAD
000001b6: PUSH1 0x20
000001b8: DUP2
000001b9: DUP2
000001ba: ADD
000001bb: DUP4
000001bc: MSTORE
000001bd: PUSH1 0x00
000001bf: DUP3
000001c0: MSTORE
000001c1: DUP3
000001c2: MLOAD
000001c3: PUSH1 0x04
000001c5: DUP1
000001c6: SLOAD
000001c7: PUSH1 0x02
000001c9: PUSH1 0x01
000001cb: DUP3
000001cc: AND
000001cd: ISZERO
000001ce: PUSH2 0x0100
000001d1: MUL
000001d2: PUSH1 0x00
000001d4: NOT
000001d5: ADD
000001d6: SWAP1
000001d7: SWAP2
000001d8: AND
000001d9: DIV
000001da: PUSH1 0x1f
000001dc: DUP2
000001dd: ADD
000001de: DUP5
000001df: SWAP1
000001e0: DIV
000001e1: DUP5
000001e2: MUL
000001e3: DUP4
000001e4: ADD
000001e5: DUP5
000001e6: ADD
000001e7: SWAP1
000001e8: SWAP6
000001e9: MSTORE
000001ea: DUP5
000001eb: DUP3
000001ec: MSTORE
000001ed: SWAP3
000001ee: SWAP4
000001ef: SWAP1
000001f0: SWAP3
000001f1: SWAP2
000001f2: DUP4
000001f3: ADD
000001f4: DUP3
000001f5: DUP3
000001f6: DUP1
000001f7: ISZERO
000001f8: PUSH2 0x05b7
000001fb: JUMPI
000001fc: DUP1
000001fd: PUSH1 0x1f
000001ff: LT
00000200: PUSH2 0x058c
00000203: JUMPI
00000204: PUSH2 0x0100
00000207: DUP1
00000208: DUP4
00000209: SLOAD
0000020a: DIV
0000020b: MUL
0000020c: DUP4
0000020d: MSTORE
0000020e: SWAP2
0000020f: PUSH1 0x20
00000211: ADD
00000212: SWAP2
00000213: PUSH2 0x05b7
00000216: JUMP
00000217: JUMPDEST
00000218: PUSH2 0x0082
0000021b: PUSH1 0x04
0000021d: CALLDATALOAD
0000021e: PUSH1 0x06
00000220: SLOAD
00000221: PUSH1 0xff
00000223: AND
00000224: PUSH1 0x00
00000226: EQ
00000227: DUP1
00000228: ISZERO
00000229: PUSH2 0x023d
0000022c: JUMPI
0000022d: POP
0000022e: PUSH1 0x06
00000230: SLOAD
00000231: PUSH3 0x010000
00000235: SWAP1
00000236: DIV
00000237: PUSH1 0xff
00000239: AND
0000023a: PUSH1 0x00
0000023c: EQ
0000023d: JUMPDEST
0000023e: DUP1
0000023f: ISZERO
00000240: PUSH2 0x0257
00000243: JUMPI
00000244: POP
00000245: PUSH1 0x00
00000247: SLOAD
00000248: CALLER
00000249: PUSH1 0x01
0000024b: PUSH1 0xa0
0000024d: PUSH1 0x02
0000024f: EXP
00000250: SUB
00000251: SWAP1
00000252: DUP2
00000253: AND
00000254: SWAP2
00000255: AND
00000256: EQ
00000257: JUMPDEST
00000258: ISZERO
00000259: PUSH2 0x0548
0000025c: JUMPI
0000025d: DUP1
0000025e: PUSH1 0x01
00000260: EQ
00000261: ISZERO
00000262: PUSH2 0x0548
00000265: JUMPI
00000266: PUSH2 0x0587
00000269: PUSH2 0x0271
0000026c: JUMP
0000026d: JUMPDEST
0000026e: PUSH2 0x0082
00000271: JUMPDEST
00000272: PUSH1 0x06
00000274: SLOAD
00000275: PUSH1 0xff
00000277: AND
00000278: PUSH1 0x00
0000027a: EQ
0000027b: DUP1
0000027c: ISZERO
0000027d: PUSH2 0x0291
00000280: JUMPI
00000281: POP
00000282: PUSH1 0x06
00000284: SLOAD
00000285: PUSH3 0x010000
00000289: SWAP1
0000028a: DIV
0000028b: PUSH1 0xff
0000028d: AND
0000028e: PUSH1 0x00
00000290: EQ
00000291: JUMPDEST
00000292: ISZERO
00000293: PUSH2 0x0548
00000296: JUMPI
00000297: PUSH1 0x00
00000299: SLOAD
0000029a: CALLER
0000029b: PUSH1 0x01
0000029d: PUSH1 0xa0
0000029f: PUSH1 0x02
000002a1: EXP
000002a2: SUB
000002a3: SWAP1
000002a4: DUP2
000002a5: AND
000002a6: SWAP2
000002a7: AND
000002a8: EQ
000002a9: ISZERO
000002aa: PUSH2 0x0548
000002ad: JUMPI
000002ae: PUSH1 0x06
000002b0: DUP1
000002b1: SLOAD
000002b2: PUSH2 0xff00
000002b5: NOT
000002b6: AND
000002b7: PUSH2 0x0100
000002ba: OR
000002bb: SWAP1
000002bc: SSTORE
000002bd: PUSH1 0x01
000002bf: SLOAD
000002c0: PUSH1 0x40
000002c2: MLOAD
000002c3: PUSH1 0x01
000002c5: PUSH1 0xa0
000002c7: PUSH1 0x02
000002c9: EXP
000002ca: SUB
000002cb: SWAP2
000002cc: DUP3
000002cd: AND
000002ce: SWAP2
000002cf: PUSH1 0x00
000002d1: SWAP2
000002d2: ADDRESS
000002d3: SWAP1
000002d4: SWAP2
000002d5: AND
000002d6: BALANCE
000002d7: SWAP1
000002d8: DUP3
000002d9: DUP2
000002da: DUP2
000002db: DUP2
000002dc: DUP6
000002dd: DUP9
000002de: DUP4
000002df: CALL
000002e0: SWAP4
000002e1: POP
000002e2: POP
000002e3: POP
000002e4: POP
000002e5: POP
000002e6: PUSH2 0x00fb
000002e9: JUMP
000002ea: JUMPDEST
000002eb: PUSH1 0x40
000002ed: DUP1
000002ee: MLOAD
000002ef: PUSH1 0x20
000002f1: PUSH1 0x04
000002f3: DUP1
000002f4: CALLDATALOAD
000002f5: DUP1
000002f6: DUP3
000002f7: ADD
000002f8: CALLDATALOAD
000002f9: PUSH1 0x1f
000002fb: DUP2
000002fc: ADD
000002fd: DUP5
000002fe: SWAP1
000002ff: DIV
00000300: DUP5
00000301: MUL
00000302: DUP6
00000303: ADD
00000304: DUP5
00000305: ADD
00000306: SWAP1
00000307: SWAP6
00000308: MSTORE
00000309: DUP5
0000030a: DUP5
0000030b: MSTORE
0000030c: PUSH2 0x0082
0000030f: SWAP5
00000310: SWAP2
00000311: SWAP4
00000312: PUSH1 0x24
00000314: SWAP4
00000315: SWAP1
00000316: SWAP3
00000317: SWAP2
00000318: DUP5
00000319: ADD
0000031a: SWAP2
0000031b: SWAP1
0000031c: DUP2
0000031d: SWAP1
0000031e: DUP5
0000031f: ADD
00000320: DUP4
00000321: DUP3
00000322: DUP1
00000323: DUP3
00000324: DUP5
00000325: CALLDATACOPY
00000326: POP
00000327: SWAP5
00000328: SWAP7
00000329: POP
0000032a: POP
0000032b: POP
0000032c: POP
0000032d: POP
0000032e: POP
0000032f: POP
00000330: PUSH1 0x06
00000332: SLOAD
00000333: PUSH1 0xff
00000335: AND
00000336: PUSH1 0x00
00000338: EQ
00000339: DUP1
0000033a: ISZERO
0000033b: PUSH2 0x034f
0000033e: JUMPI
0000033f: POP
00000340: PUSH1 0x06
00000342: SLOAD
00000343: PUSH3 0x010000
00000347: SWAP1
00000348: DIV
00000349: PUSH1 0xff
0000034b: AND
0000034c: PUSH1 0x00
0000034e: EQ
0000034f: JUMPDEST
00000350: ISZERO
00000351: PUSH2 0x0548
00000354: JUMPI
00000355: PUSH1 0x01
00000357: SLOAD
00000358: PUSH1 0x01
0000035a: PUSH1 0xa0
0000035c: PUSH1 0x02
0000035e: EXP
0000035f: SUB
00000360: SWAP1
00000361: DUP2
00000362: AND
00000363: CALLER
00000364: SWAP1
00000365: SWAP2
00000366: AND
00000367: EQ
00000368: ISZERO
00000369: PUSH2 0x0548
0000036c: JUMPI
0000036d: DUP1
0000036e: PUSH1 0x05
00000370: PUSH1 0x00
00000372: POP
00000373: SWAP1
00000374: DUP1
00000375: MLOAD
00000376: SWAP1
00000377: PUSH1 0x20
00000379: ADD
0000037a: SWAP1
0000037b: DUP3
0000037c: DUP1
0000037d: SLOAD
0000037e: PUSH1 0x01
00000380: DUP2
00000381: PUSH1 0x01
00000383: AND
00000384: ISZERO
00000385: PUSH2 0x0100
00000388: MUL
00000389: SUB
0000038a: AND
0000038b: PUSH1 0x02
0000038d: SWAP1
0000038e: DIV
0000038f: SWAP1
00000390: PUSH1 0x00
00000392: MSTORE
00000393: PUSH1 0x20
00000395: PUSH1 0x00
00000397: KECCAK256
00000398: SWAP1
00000399: PUSH1 0x1f
0000039b: ADD
0000039c: PUSH1 0x20
0000039e: SWAP1
0000039f: DIV
000003a0: DUP2
000003a1: ADD
000003a2: SWAP3
000003a3: DUP3
000003a4: PUSH1 0x1f
000003a6: LT
000003a7: PUSH2 0x054d
000003aa: JUMPI
000003ab: DUP1
000003ac: MLOAD
000003ad: PUSH1 0xff
000003af: NOT
000003b0: AND
000003b1: DUP4
000003b2: DUP1
000003b3: ADD
000003b4: OR
000003b5: DUP6
000003b6: SSTORE
000003b7: JUMPDEST
000003b8: POP
000003b9: PUSH2 0x057d
000003bc: SWAP3
000003bd: SWAP2
000003be: POP
000003bf: JUMPDEST
000003c0: DUP1
000003c1: DUP3
000003c2: GT
000003c3: ISZERO
000003c4: PUSH2 0x0583
000003c7: JUMPI
000003c8: PUSH1 0x00
000003ca: DUP2
000003cb: SSTORE
000003cc: PUSH1 0x01
000003ce: ADD
000003cf: PUSH2 0x03bf
000003d2: JUMP
000003d3: JUMPDEST
000003d4: PUSH2 0x0536
000003d7: PUSH1 0x06
000003d9: SLOAD
000003da: PUSH1 0xff
000003dc: AND
000003dd: JUMPDEST
000003de: SWAP1
000003df: JUMP
000003e0: JUMPDEST
000003e1: PUSH1 0x40
000003e3: DUP1
000003e4: MLOAD
000003e5: PUSH1 0x20
000003e7: DUP2
000003e8: DUP2
000003e9: ADD
000003ea: DUP4
000003eb: MSTORE
000003ec: PUSH1 0x00
000003ee: DUP3
000003ef: MSTORE
000003f0: DUP3
000003f1: MLOAD
000003f2: PUSH1 0x05
000003f4: DUP1
000003f5: SLOAD
000003f6: PUSH1 0x02
000003f8: PUSH1 0x01
000003fa: DUP3
000003fb: AND
000003fc: ISZERO
000003fd: PUSH2 0x0100
00000400: MUL
00000401: PUSH1 0x00
00000403: NOT
00000404: ADD
00000405: SWAP1
00000406: SWAP2
00000407: AND
00000408: DIV
00000409: PUSH1 0x1f
0000040b: DUP2
0000040c: ADD
0000040d: DUP5
0000040e: SWAP1
0000040f: DIV
00000410: DUP5
00000411: MUL
00000412: DUP4
00000413: ADD
00000414: DUP5
00000415: ADD
00000416: SWAP1
00000417: SWAP6
00000418: MSTORE
00000419: DUP5
0000041a: DUP3
0000041b: MSTORE
0000041c: PUSH2 0x04c8
0000041f: SWAP5
00000420: SWAP2
00000421: SWAP3
00000422: SWAP1
00000423: SWAP2
00000424: SWAP1
00000425: DUP4
00000426: ADD
00000427: DUP3
00000428: DUP3
00000429: DUP1
0000042a: ISZERO
0000042b: PUSH2 0x05b7
0000042e: JUMPI
0000042f: DUP1
00000430: PUSH1 0x1f
00000432: LT
00000433: PUSH2 0x058c
00000436: JUMPI
00000437: PUSH2 0x0100
0000043a: DUP1
0000043b: DUP4
0000043c: SLOAD
0000043d: DIV
0000043e: MUL
0000043f: DUP4
00000440: MSTORE
00000441: SWAP2
00000442: PUSH1 0x20
00000444: ADD
00000445: SWAP2
00000446: PUSH2 0x05b7
00000449: JUMP
0000044a: JUMPDEST
0000044b: PUSH1 0x40
0000044d: DUP1
0000044e: MLOAD
0000044f: PUSH1 0x20
00000451: DUP2
00000452: DUP2
00000453: ADD
00000454: DUP4
00000455: MSTORE
00000456: PUSH1 0x00
00000458: DUP3
00000459: MSTORE
0000045a: PUSH1 0x03
0000045c: DUP1
0000045d: SLOAD
0000045e: DUP5
0000045f: MLOAD
00000460: PUSH1 0x02
00000462: PUSH1 0x01
00000464: DUP4
00000465: AND
00000466: ISZERO
00000467: PUSH2 0x0100
0000046a: MUL
0000046b: PUSH1 0x00
0000046d: NOT
0000046e: ADD
0000046f: SWAP1
00000470: SWAP3
00000471: AND
00000472: SWAP2
00000473: SWAP1
00000474: SWAP2
00000475: DIV
00000476: PUSH1 0x1f
00000478: DUP2
00000479: ADD
0000047a: DUP5
0000047b: SWAP1
0000047c: DIV
0000047d: DUP5
0000047e: MUL
0000047f: DUP3
00000480: ADD
00000481: DUP5
00000482: ADD
00000483: SWAP1
00000484: SWAP6
00000485: MSTORE
00000486: DUP5
00000487: DUP2
00000488: MSTORE
00000489: PUSH2 0x04c8
0000048c: SWAP5
0000048d: SWAP1
0000048e: SWAP3
0000048f: DUP4
00000490: ADD
00000491: DUP3
00000492: DUP3
00000493: DUP1
00000494: ISZERO
00000495: PUSH2 0x05b7
00000498: JUMPI
00000499: DUP1
0000049a: PUSH1 0x1f
0000049c: LT
0000049d: PUSH2 0x058c
000004a0: JUMPI
000004a1: PUSH2 0x0100
000004a4: DUP1
000004a5: DUP4
000004a6: SLOAD
000004a7: DIV
000004a8: MUL
000004a9: DUP4
000004aa: MSTORE
000004ab: SWAP2
000004ac: PUSH1 0x20
000004ae: ADD
000004af: SWAP2
000004b0: PUSH2 0x05b7
000004b3: JUMP
000004b4: JUMPDEST
000004b5: PUSH2 0x0536
000004b8: PUSH1 0x06
000004ba: SLOAD
000004bb: PUSH1 0xff
000004bd: PUSH2 0x0100
000004c0: SWAP1
000004c1: SWAP2
000004c2: DIV
000004c3: AND
000004c4: PUSH2 0x03dd
000004c7: JUMP
000004c8: JUMPDEST
000004c9: PUSH1 0x40
000004cb: MLOAD
000004cc: DUP1
000004cd: DUP1
000004ce: PUSH1 0x20
000004d0: ADD
000004d1: DUP3
000004d2: DUP2
000004d3: SUB
000004d4: DUP3
000004d5: MSTORE
000004d6: DUP4
000004d7: DUP2
000004d8: DUP2
000004d9: MLOAD
000004da: DUP2
000004db: MSTORE
000004dc: PUSH1 0x20
000004de: ADD
000004df: SWAP2
000004e0: POP
000004e1: DUP1
000004e2: MLOAD
000004e3: SWAP1
000004e4: PUSH1 0x20
000004e6: ADD
000004e7: SWAP1
000004e8: DUP1
000004e9: DUP4
000004ea: DUP4
000004eb: DUP3
000004ec: SWAP1
000004ed: PUSH1 0x00
000004ef: PUSH1 0x04
000004f1: PUSH1 0x20
000004f3: DUP5
000004f4: PUSH1 0x1f
000004f6: ADD
000004f7: DIV
000004f8: PUSH1 0x0f
000004fa: MUL
000004fb: PUSH1 0x03
000004fd: ADD
000004fe: CALL
000004ff: POP
00000500: SWAP1
00000501: POP
00000502: SWAP1
00000503: DUP2
00000504: ADD
00000505: SWAP1
00000506: PUSH1 0x1f
00000508: AND
00000509: DUP1
0000050a: ISZERO
0000050b: PUSH2 0x0528
0000050e: JUMPI
0000050f: DUP1
00000510: DUP3
00000511: SUB
00000512: DUP1
00000513: MLOAD
00000514: PUSH1 0x01
00000516: DUP4
00000517: PUSH1 0x20
00000519: SUB
0000051a: PUSH2 0x0100
0000051d: EXP
0000051e: SUB
0000051f: NOT
00000520: AND
00000521: DUP2
00000522: MSTORE
00000523: PUSH1 0x20
00000525: ADD
00000526: SWAP2
00000527: POP
00000528: JUMPDEST
00000529: POP
0000052a: SWAP3
0000052b: POP
0000052c: POP
0000052d: POP
0000052e: PUSH1 0x40
00000530: MLOAD
00000531: DUP1
00000532: SWAP2
00000533: SUB
00000534: SWAP1
00000535: RETURN
00000536: JUMPDEST
00000537: PUSH1 0x40
00000539: DUP1
0000053a: MLOAD
0000053b: SWAP2
0000053c: DUP3
0000053d: MSTORE
0000053e: MLOAD
0000053f: SWAP1
00000540: DUP2
00000541: SWAP1
00000542: SUB
00000543: PUSH1 0x20
00000545: ADD
00000546: SWAP1
00000547: RETURN
00000548: JUMPDEST
00000549: PUSH2 0x0002
0000054c: JUMP
0000054d: JUMPDEST
0000054e: DUP3
0000054f: DUP1
00000550: ADD
00000551: PUSH1 0x01
00000553: ADD
00000554: DUP6
00000555: SSTORE
00000556: DUP3
00000557: ISZERO
00000558: PUSH2 0x03b7
0000055b: JUMPI
0000055c: SWAP2
0000055d: DUP3
0000055e: ADD
0000055f: JUMPDEST
00000560: DUP3
00000561: DUP2
00000562: GT
00000563: ISZERO
00000564: PUSH2 0x03b7
00000567: JUMPI
00000568: DUP3
00000569: MLOAD
0000056a: DUP3
0000056b: PUSH1 0x00
0000056d: POP
0000056e: SSTORE
0000056f: SWAP2
00000570: PUSH1 0x20
00000572: ADD
00000573: SWAP2
00000574: SWAP1
00000575: PUSH1 0x01
00000577: ADD
00000578: SWAP1
00000579: PUSH2 0x055f
0000057c: JUMP
0000057d: JUMPDEST
0000057e: POP
0000057f: POP
00000580: JUMPDEST
00000581: POP
00000582: JUMP
00000583: JUMPDEST
00000584: POP
00000585: SWAP1
00000586: JUMP
00000587: JUMPDEST
00000588: PUSH2 0x0580
0000058b: JUMP
0000058c: JUMPDEST
0000058d: DUP3
0000058e: ADD
0000058f: SWAP2
00000590: SWAP1
00000591: PUSH1 0x00
00000593: MSTORE
00000594: PUSH1 0x20
00000596: PUSH1 0x00
00000598: KECCAK256
00000599: SWAP1
0000059a: JUMPDEST
0000059b: DUP2
0000059c: SLOAD
0000059d: DUP2
0000059e: MSTORE
0000059f: SWAP1
000005a0: PUSH1 0x01
000005a2: ADD
000005a3: SWAP1
000005a4: PUSH1 0x20
000005a6: ADD
000005a7: DUP1
000005a8: DUP4
000005a9: GT
000005aa: PUSH2 0x059a
000005ad: JUMPI
000005ae: DUP3
000005af: SWAP1
000005b0: SUB
000005b1: PUSH1 0x1f
000005b3: AND
000005b4: DUP3
000005b5: ADD
000005b6: SWAP2
000005b7: JUMPDEST
000005b8: POP
000005b9: POP
000005ba: POP
000005bb: POP
000005bc: POP
000005bd: SWAP1
000005be: POP
000005bf: PUSH2 0x03dd
000005c2: JUMP
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x0de1061241ba9a802565d28cdf7d97313999feae3e6d02a97eb1b773bc27a9a0
call_targets: 0xea510a9bd87734c789f76e2b703425cf3c7516c6
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x0de1061241ba9a802565d28cdf7d97313999feae3e6d02a97eb1b773bc27a9a0",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xea510a9bd87734c789f76e2b703425cf3c7516c6"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x35a063b4",
            "selector": "0x35a063b4",
            "calldata_variants": [
                "0x35a063b4",
                "0x35a063b40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5f76f6ab",
            "selector": "0x5f76f6ab",
            "calldata_variants": [
                "0x5f76f6ab",
                "0x5f76f6ab0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x60fcbb28",
            "selector": "0x60fcbb28",
            "calldata_variants": [
                "0x60fcbb28",
                "0x60fcbb280000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x82ad9aa7",
            "selector": "0x82ad9aa7",
            "calldata_variants": [
                "0x82ad9aa7",
                "0x82ad9aa70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x92238336",
            "selector": "0x92238336",
            "calldata_variants": [
                "0x92238336",
                "0x922383360000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x93c9b6c0",
            "selector": "0x93c9b6c0",
            "calldata_variants": [
                "0x93c9b6c0",
                "0x93c9b6c00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xab20f394",
            "selector": "0xab20f394",
            "calldata_variants": [
                "0xab20f394",
                "0xab20f3940000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xcc420462",
            "selector": "0xcc420462",
            "calldata_variants": [
                "0xcc420462",
                "0xcc4204620000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 245,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 420,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 735,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 4,
    "guards_detected": [],
    "untrusted_call_count": 4
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x0de1061241ba9a802565d28cdf7d97313999feae3e6d02a97eb1b773bc27a9a0
call_targets: 0xea510a9bd87734c789f76e2b703425cf3c7516c6
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x0de1061241ba9a802565d28cdf7d97313999feae3e6d02a97eb1b773bc27a9a0",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xea510a9bd87734c789f76e2b703425cf3c7516c6"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x35a063b4",
            "selector": "0x35a063b4",
            "calldata_variants": [
                "0x35a063b4",
                "0x35a063b40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5f76f6ab",
            "selector": "0x5f76f6ab",
            "calldata_variants": [
                "0x5f76f6ab",
                "0x5f76f6ab0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x60fcbb28",
            "selector": "0x60fcbb28",
            "calldata_variants": [
                "0x60fcbb28",
                "0x60fcbb280000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x82ad9aa7",
            "selector": "0x82ad9aa7",
            "calldata_variants": [
                "0x82ad9aa7",
                "0x82ad9aa70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x92238336",
            "selector": "0x92238336",
            "calldata_variants": [
                "0x92238336",
                "0x922383360000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x93c9b6c0",
            "selector": "0x93c9b6c0",
            "calldata_variants": [
                "0x93c9b6c0",
                "0x93c9b6c00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xab20f394",
            "selector": "0xab20f394",
            "calldata_variants": [
                "0xab20f394",
                "0xab20f3940000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xcc420462",
            "selector": "0xcc420462",
            "calldata_variants": [
                "0xcc420462",
                "0xcc4204620000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 245,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 420,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 735,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 4,
    "guards_detected": []
}