TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-441f-713d-a538-1b69f4f2153d

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
2
Validated
2
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 2 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
5813 artifact.fetch complete 1 / 3 3 months ago
5814 tool.cast_disasm complete 1 / 3 3 months ago
81527 analysis.bundle complete 1 / 3 1 week ago
81528 capability.graph complete 1 / 3 1 week ago
81529 detector.run complete 1 / 3 1 week ago
81530 validation.fork complete 1 / 3 1 week ago
113637 report.consolidate complete 1 / 6 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate
Job Status
complete
Attempts
1 / 6
Findings
0
No findings?
View stderr
OpenAI Codex v0.118.0 (research preview)
--------
workdir: /tmp/codex-39yqd0an
model: gpt-5.4
provider: openai
approval: never
sandbox: read-only
reasoning effort: high
reasoning summaries: none
session id: 019d5c99-ee13-79c2-9444-925187409c87
--------
user
You are a security auditor. You ONLY have runtime bytecode + analysis artifacts.
You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary,
evidence bundle, callsites, storage slots, and detector findings.

Special cases when reasoning from bytecode (be explicit about uncertainty):
- Selector inference is best-effort; missing selectors are common.
- Fallback/receive paths may be the only entrypoints.
- CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage.
- Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative.
- Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown.
- Guard detection is heuristic; absence of guards does NOT mean unguarded.
- Returndata checking is unknown unless explicitly shown in evidence.
- Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim.

Output MUST be valid JSON matching the provided schema.
- If you find nothing meaningful: set no_findings=true and findings=[].
- Otherwise: set no_findings=false and include findings with severity/category/title.
- Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb".

Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation,
accounting/invariant breaks, dangerous delegatecall, and untrusted external calls.
Be conservative: if evidence is weak, mark severity low/medium and explain why.
warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
Metadata
{
    "codex": {
        "ran_at": "2026-04-05T07:44:46.658454+00:00",
        "returncode": 1
    },
    "project": {
        "mode": "bytecode",
        "bytecode_length": 5184,
        "bytecode_truncated": false,
        "capability_graph_present": true,
        "analysis_artifact_present": true
    },
    "summary": null,
    "no_findings": null,
    "schema_version": 1
}

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
1
CREATE2
0
CALL-family (heavy)
9
EXT*/BALANCE
4
Total opcodes
1604
Flags
selfdestruct_present
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0xe0
00000007: PUSH1 0x02
00000009: EXP
0000000a: PUSH1 0x00
0000000c: CALLDATALOAD
0000000d: DIV
0000000e: PUSH4 0x2c329e99
00000013: DUP2
00000014: EQ
00000015: PUSH2 0x003c
00000018: JUMPI
00000019: DUP1
0000001a: PUSH4 0x6673ce2b
0000001f: EQ
00000020: PUSH2 0x012a
00000023: JUMPI
00000024: DUP1
00000025: PUSH4 0xb936999a
0000002a: EQ
0000002b: PUSH2 0x01ba
0000002e: JUMPI
0000002f: DUP1
00000030: PUSH4 0xdb641ab4
00000035: EQ
00000036: PUSH2 0x02d9
00000039: JUMPI
0000003a: JUMPDEST
0000003b: STOP
0000003c: JUMPDEST
0000003d: PUSH1 0x40
0000003f: DUP1
00000040: MLOAD
00000041: PUSH1 0x20
00000043: DUP2
00000044: DUP2
00000045: ADD
00000046: DUP4
00000047: MSTORE
00000048: PUSH1 0x00
0000004a: SWAP1
0000004b: SWAP2
0000004c: MSTORE
0000004d: DUP2
0000004e: MLOAD
0000004f: PUSH1 0x0a
00000051: SLOAD
00000052: PUSH1 0x02
00000054: SLOAD
00000055: PUSH1 0x60
00000057: DUP4
00000058: ADD
00000059: DUP6
0000005a: MSTORE
0000005b: PUSH1 0x3e
0000005d: DUP4
0000005e: MSTORE
0000005f: PUSH32 0x626c6f636b74696d652069732074686520756e69782074696d657374616d7020
00000080: SWAP4
00000081: DUP4
00000082: ADD
00000083: SWAP4
00000084: SWAP1
00000085: SWAP4
00000086: MSTORE
00000087: PUSH32 0x6f662074686520626c6f636b2077686572652074686520626574207761730000
000000a8: SWAP4
000000a9: DUP3
000000aa: ADD
000000ab: SWAP4
000000ac: SWAP1
000000ad: SWAP4
000000ae: MSTORE
000000af: PUSH1 0x40
000000b1: MLOAD
000000b2: DUP1
000000b3: DUP5
000000b4: DUP2
000000b5: MSTORE
000000b6: PUSH1 0x20
000000b8: ADD
000000b9: DUP4
000000ba: DUP2
000000bb: MSTORE
000000bc: PUSH1 0x20
000000be: ADD
000000bf: DUP1
000000c0: PUSH1 0x20
000000c2: ADD
000000c3: DUP3
000000c4: DUP2
000000c5: SUB
000000c6: DUP3
000000c7: MSTORE
000000c8: DUP4
000000c9: DUP2
000000ca: DUP2
000000cb: MLOAD
000000cc: DUP2
000000cd: MSTORE
000000ce: PUSH1 0x20
000000d0: ADD
000000d1: SWAP2
000000d2: POP
000000d3: DUP1
000000d4: MLOAD
000000d5: SWAP1
000000d6: PUSH1 0x20
000000d8: ADD
000000d9: SWAP1
000000da: DUP1
000000db: DUP4
000000dc: DUP4
000000dd: DUP3
000000de: SWAP1
000000df: PUSH1 0x00
000000e1: PUSH1 0x04
000000e3: PUSH1 0x20
000000e5: DUP5
000000e6: PUSH1 0x1f
000000e8: ADD
000000e9: DIV
000000ea: PUSH1 0x0f
000000ec: MUL
000000ed: PUSH1 0x03
000000ef: ADD
000000f0: CALL
000000f1: POP
000000f2: SWAP1
000000f3: POP
000000f4: SWAP1
000000f5: DUP2
000000f6: ADD
000000f7: SWAP1
000000f8: PUSH1 0x1f
000000fa: AND
000000fb: DUP1
000000fc: ISZERO
000000fd: PUSH2 0x011a
00000100: JUMPI
00000101: DUP1
00000102: DUP3
00000103: SUB
00000104: DUP1
00000105: MLOAD
00000106: PUSH1 0x01
00000108: DUP4
00000109: PUSH1 0x20
0000010b: SUB
0000010c: PUSH2 0x0100
0000010f: EXP
00000110: SUB
00000111: NOT
00000112: AND
00000113: DUP2
00000114: MSTORE
00000115: PUSH1 0x20
00000117: ADD
00000118: SWAP2
00000119: POP
0000011a: JUMPDEST
0000011b: POP
0000011c: SWAP5
0000011d: POP
0000011e: POP
0000011f: POP
00000120: POP
00000121: POP
00000122: PUSH1 0x40
00000124: MLOAD
00000125: DUP1
00000126: SWAP2
00000127: SUB
00000128: SWAP1
00000129: RETURN
0000012a: JUMPDEST
0000012b: PUSH2 0x03d0
0000012e: PUSH1 0x40
00000130: DUP1
00000131: MLOAD
00000132: PUSH1 0x20
00000134: DUP2
00000135: DUP2
00000136: ADD
00000137: DUP4
00000138: MSTORE
00000139: PUSH1 0x00
0000013b: DUP1
0000013c: DUP4
0000013d: MSTORE
0000013e: DUP4
0000013f: MLOAD
00000140: DUP1
00000141: DUP4
00000142: ADD
00000143: DUP6
00000144: MSTORE
00000145: DUP2
00000146: DUP2
00000147: MSTORE
00000148: PUSH1 0x09
0000014a: DUP1
0000014b: SLOAD
0000014c: DUP7
0000014d: MLOAD
0000014e: PUSH1 0x0b
00000150: SLOAD
00000151: PUSH1 0x06
00000153: SLOAD
00000154: PUSH1 0x05
00000156: SLOAD
00000157: PUSH1 0x02
00000159: PUSH1 0x01
0000015b: DUP7
0000015c: AND
0000015d: ISZERO
0000015e: PUSH2 0x0100
00000161: MUL
00000162: PUSH1 0x00
00000164: NOT
00000165: ADD
00000166: SWAP1
00000167: SWAP6
00000168: AND
00000169: SWAP5
0000016a: SWAP1
0000016b: SWAP5
0000016c: DIV
0000016d: PUSH1 0x1f
0000016f: DUP2
00000170: ADD
00000171: DUP10
00000172: SWAP1
00000173: DIV
00000174: DUP10
00000175: MUL
00000176: DUP5
00000177: ADD
00000178: DUP10
00000179: ADD
0000017a: SWAP1
0000017b: SWAP11
0000017c: MSTORE
0000017d: DUP10
0000017e: DUP4
0000017f: MSTORE
00000180: SWAP8
00000181: SWAP9
00000182: PUSH1 0x01
00000184: PUSH1 0xa0
00000186: PUSH1 0x02
00000188: EXP
00000189: SUB
0000018a: SWAP2
0000018b: SWAP1
0000018c: SWAP2
0000018d: AND
0000018e: SWAP7
0000018f: SWAP3
00000190: SWAP6
00000191: SWAP5
00000192: SWAP4
00000193: SWAP2
00000194: SWAP3
00000195: DUP4
00000196: ADD
00000197: DUP3
00000198: DUP3
00000199: DUP1
0000019a: ISZERO
0000019b: PUSH2 0x04ed
0000019e: JUMPI
0000019f: DUP1
000001a0: PUSH1 0x1f
000001a2: LT
000001a3: PUSH2 0x04c2
000001a6: JUMPI
000001a7: PUSH2 0x0100
000001aa: DUP1
000001ab: DUP4
000001ac: SLOAD
000001ad: DIV
000001ae: MUL
000001af: DUP4
000001b0: MSTORE
000001b1: SWAP2
000001b2: PUSH1 0x20
000001b4: ADD
000001b5: SWAP2
000001b6: PUSH2 0x04ed
000001b9: JUMP
000001ba: JUMPDEST
000001bb: PUSH2 0x003a
000001be: PUSH1 0x04
000001c0: CALLDATALOAD
000001c1: PUSH1 0x0b
000001c3: DUP1
000001c4: SLOAD
000001c5: PUSH21 0xff0000000000000000000000000000000000000000
000001db: NOT
000001dc: AND
000001dd: SWAP1
000001de: SSTORE
000001df: PUSH1 0xff
000001e1: DUP2
000001e2: AND
000001e3: PUSH1 0x06
000001e5: SSTORE
000001e6: CALLVALUE
000001e7: PUSH2 0x05ad
000001ea: PUSH1 0x0b
000001ec: DUP1
000001ed: SLOAD
000001ee: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000203: NOT
00000204: AND
00000205: CALLER
00000206: OR
00000207: SWAP1
00000208: SSTORE
00000209: PUSH1 0x00
0000020b: PUSH1 0x01
0000020d: PUSH1 0xa0
0000020f: PUSH1 0x02
00000211: EXP
00000212: SUB
00000213: ADDRESS
00000214: AND
00000215: BALANCE
00000216: PUSH1 0x08
00000218: CALLVALUE
00000219: MUL
0000021a: GT
0000021b: ISZERO
0000021c: PUSH2 0x067c
0000021f: JUMPI
00000220: PUSH1 0x40
00000222: DUP1
00000223: MLOAD
00000224: PUSH1 0x60
00000226: DUP2
00000227: ADD
00000228: DUP3
00000229: MSTORE
0000022a: PUSH1 0x29
0000022c: DUP2
0000022d: MSTORE
0000022e: PUSH32 0x426574206973206c6172676572207468616e2067616d65732773206162696c69
0000024f: PUSH1 0x20
00000251: DUP3
00000252: DUP2
00000253: ADD
00000254: SWAP2
00000255: DUP3
00000256: MSTORE
00000257: PUSH32 0x747920746f207061790000000000000000000000000000000000000000000000
00000278: SWAP4
00000279: DUP4
0000027a: ADD
0000027b: SWAP4
0000027c: SWAP1
0000027d: SWAP4
0000027e: MSTORE
0000027f: PUSH1 0x09
00000281: DUP1
00000282: SLOAD
00000283: DUP2
00000284: DUP7
00000285: MSTORE
00000286: PUSH1 0x53
00000288: DUP3
00000289: SSTORE
0000028a: SWAP1
0000028b: SWAP4
0000028c: PUSH1 0x00
0000028e: DUP1
0000028f: MLOAD
00000290: PUSH1 0x20
00000292: PUSH2 0x09ff
00000295: DUP4
00000296: CODECOPY
00000297: DUP2
00000298: MLOAD
00000299: SWAP2
0000029a: MSTORE
0000029b: PUSH1 0x02
0000029d: PUSH1 0x01
0000029f: DUP5
000002a0: AND
000002a1: ISZERO
000002a2: PUSH2 0x0100
000002a5: MUL
000002a6: PUSH1 0x00
000002a8: NOT
000002a9: ADD
000002aa: SWAP1
000002ab: SWAP4
000002ac: AND
000002ad: SWAP3
000002ae: SWAP1
000002af: SWAP3
000002b0: DIV
000002b1: PUSH1 0x1f
000002b3: ADD
000002b4: DIV
000002b5: DUP2
000002b6: ADD
000002b7: SWAP3
000002b8: PUSH1 0x49
000002ba: ADD
000002bb: JUMPDEST
000002bc: DUP3
000002bd: DUP2
000002be: GT
000002bf: ISZERO
000002c0: PUSH2 0x0704
000002c3: JUMPI
000002c4: DUP3
000002c5: MLOAD
000002c6: DUP3
000002c7: PUSH1 0x00
000002c9: POP
000002ca: SSTORE
000002cb: SWAP2
000002cc: PUSH1 0x20
000002ce: ADD
000002cf: SWAP2
000002d0: SWAP1
000002d1: PUSH1 0x01
000002d3: ADD
000002d4: SWAP1
000002d5: PUSH2 0x02bb
000002d8: JUMP
000002d9: JUMPDEST
000002da: PUSH1 0x40
000002dc: DUP1
000002dd: MLOAD
000002de: PUSH1 0x20
000002e0: DUP2
000002e1: DUP2
000002e2: ADD
000002e3: DUP4
000002e4: MSTORE
000002e5: PUSH1 0x00
000002e7: SWAP1
000002e8: SWAP2
000002e9: MSTORE
000002ea: DUP2
000002eb: MLOAD
000002ec: PUSH1 0x60
000002ee: DUP2
000002ef: ADD
000002f0: DUP4
000002f1: MSTORE
000002f2: PUSH1 0x24
000002f4: DUP2
000002f5: MSTORE
000002f6: PUSH32 0x47616d652062616c616e63652069732073686f776e20696e2066756c6c204574
00000317: SWAP2
00000318: DUP2
00000319: ADD
0000031a: SWAP2
0000031b: SWAP1
0000031c: SWAP2
0000031d: MSTORE
0000031e: PUSH32 0x6865727300000000000000000000000000000000000000000000000000000000
0000033f: SWAP2
00000340: DUP2
00000341: ADD
00000342: SWAP2
00000343: SWAP1
00000344: SWAP2
00000345: MSTORE
00000346: PUSH8 0x0de0b6b3a7640000
0000034f: ADDRESS
00000350: PUSH1 0x01
00000352: PUSH1 0xa0
00000354: PUSH1 0x02
00000356: EXP
00000357: SUB
00000358: AND
00000359: BALANCE
0000035a: DIV
0000035b: SWAP1
0000035c: PUSH1 0x40
0000035e: MLOAD
0000035f: DUP1
00000360: DUP4
00000361: DUP2
00000362: MSTORE
00000363: PUSH1 0x20
00000365: ADD
00000366: DUP1
00000367: PUSH1 0x20
00000369: ADD
0000036a: DUP3
0000036b: DUP2
0000036c: SUB
0000036d: DUP3
0000036e: MSTORE
0000036f: DUP4
00000370: DUP2
00000371: DUP2
00000372: MLOAD
00000373: DUP2
00000374: MSTORE
00000375: PUSH1 0x20
00000377: ADD
00000378: SWAP2
00000379: POP
0000037a: DUP1
0000037b: MLOAD
0000037c: SWAP1
0000037d: PUSH1 0x20
0000037f: ADD
00000380: SWAP1
00000381: DUP1
00000382: DUP4
00000383: DUP4
00000384: DUP3
00000385: SWAP1
00000386: PUSH1 0x00
00000388: PUSH1 0x04
0000038a: PUSH1 0x20
0000038c: DUP5
0000038d: PUSH1 0x1f
0000038f: ADD
00000390: DIV
00000391: PUSH1 0x0f
00000393: MUL
00000394: PUSH1 0x03
00000396: ADD
00000397: CALL
00000398: POP
00000399: SWAP1
0000039a: POP
0000039b: SWAP1
0000039c: DUP2
0000039d: ADD
0000039e: SWAP1
0000039f: PUSH1 0x1f
000003a1: AND
000003a2: DUP1
000003a3: ISZERO
000003a4: PUSH2 0x03c1
000003a7: JUMPI
000003a8: DUP1
000003a9: DUP3
000003aa: SUB
000003ab: DUP1
000003ac: MLOAD
000003ad: PUSH1 0x01
000003af: DUP4
000003b0: PUSH1 0x20
000003b2: SUB
000003b3: PUSH2 0x0100
000003b6: EXP
000003b7: SUB
000003b8: NOT
000003b9: AND
000003ba: DUP2
000003bb: MSTORE
000003bc: PUSH1 0x20
000003be: ADD
000003bf: SWAP2
000003c0: POP
000003c1: JUMPDEST
000003c2: POP
000003c3: SWAP4
000003c4: POP
000003c5: POP
000003c6: POP
000003c7: POP
000003c8: PUSH1 0x40
000003ca: MLOAD
000003cb: DUP1
000003cc: SWAP2
000003cd: SUB
000003ce: SWAP1
000003cf: RETURN
000003d0: JUMPDEST
000003d1: PUSH1 0x40
000003d3: MLOAD
000003d4: DUP1
000003d5: DUP1
000003d6: PUSH1 0x20
000003d8: ADD
000003d9: DUP8
000003da: DUP2
000003db: MSTORE
000003dc: PUSH1 0x20
000003de: ADD
000003df: DUP7
000003e0: PUSH1 0x01
000003e2: PUSH1 0xa0
000003e4: PUSH1 0x02
000003e6: EXP
000003e7: SUB
000003e8: AND
000003e9: DUP2
000003ea: MSTORE
000003eb: PUSH1 0x20
000003ed: ADD
000003ee: DUP6
000003ef: DUP2
000003f0: MSTORE
000003f1: PUSH1 0x20
000003f3: ADD
000003f4: DUP5
000003f5: DUP2
000003f6: MSTORE
000003f7: PUSH1 0x20
000003f9: ADD
000003fa: DUP1
000003fb: PUSH1 0x20
000003fd: ADD
000003fe: DUP4
000003ff: DUP2
00000400: SUB
00000401: DUP4
00000402: MSTORE
00000403: DUP10
00000404: DUP2
00000405: DUP2
00000406: MLOAD
00000407: DUP2
00000408: MSTORE
00000409: PUSH1 0x20
0000040b: ADD
0000040c: SWAP2
0000040d: POP
0000040e: DUP1
0000040f: MLOAD
00000410: SWAP1
00000411: PUSH1 0x20
00000413: ADD
00000414: SWAP1
00000415: DUP1
00000416: DUP4
00000417: DUP4
00000418: DUP3
00000419: SWAP1
0000041a: PUSH1 0x00
0000041c: PUSH1 0x04
0000041e: PUSH1 0x20
00000420: DUP5
00000421: PUSH1 0x1f
00000423: ADD
00000424: DIV
00000425: PUSH1 0x0f
00000427: MUL
00000428: PUSH1 0x03
0000042a: ADD
0000042b: CALL
0000042c: POP
0000042d: SWAP1
0000042e: POP
0000042f: SWAP1
00000430: DUP2
00000431: ADD
00000432: SWAP1
00000433: PUSH1 0x1f
00000435: AND
00000436: DUP1
00000437: ISZERO
00000438: PUSH2 0x0455
0000043b: JUMPI
0000043c: DUP1
0000043d: DUP3
0000043e: SUB
0000043f: DUP1
00000440: MLOAD
00000441: PUSH1 0x01
00000443: DUP4
00000444: PUSH1 0x20
00000446: SUB
00000447: PUSH2 0x0100
0000044a: EXP
0000044b: SUB
0000044c: NOT
0000044d: AND
0000044e: DUP2
0000044f: MSTORE
00000450: PUSH1 0x20
00000452: ADD
00000453: SWAP2
00000454: POP
00000455: JUMPDEST
00000456: POP
00000457: DUP4
00000458: DUP2
00000459: SUB
0000045a: DUP3
0000045b: MSTORE
0000045c: DUP5
0000045d: DUP2
0000045e: DUP2
0000045f: MLOAD
00000460: DUP2
00000461: MSTORE
00000462: PUSH1 0x20
00000464: ADD
00000465: SWAP2
00000466: POP
00000467: DUP1
00000468: MLOAD
00000469: SWAP1
0000046a: PUSH1 0x20
0000046c: ADD
0000046d: SWAP1
0000046e: DUP1
0000046f: DUP4
00000470: DUP4
00000471: DUP3
00000472: SWAP1
00000473: PUSH1 0x00
00000475: PUSH1 0x04
00000477: PUSH1 0x20
00000479: DUP5
0000047a: PUSH1 0x1f
0000047c: ADD
0000047d: DIV
0000047e: PUSH1 0x0f
00000480: MUL
00000481: PUSH1 0x03
00000483: ADD
00000484: CALL
00000485: POP
00000486: SWAP1
00000487: POP
00000488: SWAP1
00000489: DUP2
0000048a: ADD
0000048b: SWAP1
0000048c: PUSH1 0x1f
0000048e: AND
0000048f: DUP1
00000490: ISZERO
00000491: PUSH2 0x04ae
00000494: JUMPI
00000495: DUP1
00000496: DUP3
00000497: SUB
00000498: DUP1
00000499: MLOAD
0000049a: PUSH1 0x01
0000049c: DUP4
0000049d: PUSH1 0x20
0000049f: SUB
000004a0: PUSH2 0x0100
000004a3: EXP
000004a4: SUB
000004a5: NOT
000004a6: AND
000004a7: DUP2
000004a8: MSTORE
000004a9: PUSH1 0x20
000004ab: ADD
000004ac: SWAP2
000004ad: POP
000004ae: JUMPDEST
000004af: POP
000004b0: SWAP9
000004b1: POP
000004b2: POP
000004b3: POP
000004b4: POP
000004b5: POP
000004b6: POP
000004b7: POP
000004b8: POP
000004b9: POP
000004ba: PUSH1 0x40
000004bc: MLOAD
000004bd: DUP1
000004be: SWAP2
000004bf: SUB
000004c0: SWAP1
000004c1: RETURN
000004c2: JUMPDEST
000004c3: DUP3
000004c4: ADD
000004c5: SWAP2
000004c6: SWAP1
000004c7: PUSH1 0x00
000004c9: MSTORE
000004ca: PUSH1 0x20
000004cc: PUSH1 0x00
000004ce: KECCAK256
000004cf: SWAP1
000004d0: JUMPDEST
000004d1: DUP2
000004d2: SLOAD
000004d3: DUP2
000004d4: MSTORE
000004d5: SWAP1
000004d6: PUSH1 0x01
000004d8: ADD
000004d9: SWAP1
000004da: PUSH1 0x20
000004dc: ADD
000004dd: DUP1
000004de: DUP4
000004df: GT
000004e0: PUSH2 0x04d0
000004e3: JUMPI
000004e4: DUP3
000004e5: SWAP1
000004e6: SUB
000004e7: PUSH1 0x1f
000004e9: AND
000004ea: DUP3
000004eb: ADD
000004ec: SWAP2
000004ed: JUMPDEST
000004ee: POP
000004ef: POP
000004f0: PUSH1 0x40
000004f2: DUP1
000004f3: MLOAD
000004f4: PUSH1 0x08
000004f6: SLOAD
000004f7: PUSH1 0xa0
000004f9: DUP3
000004fa: ADD
000004fb: DUP4
000004fc: MSTORE
000004fd: PUSH1 0x79
000004ff: DUP3
00000500: MSTORE
00000501: PUSH32 0x546865207269676874206c6f7474657279206e756d6265722069732074686520
00000522: PUSH1 0x20
00000524: DUP4
00000525: ADD
00000526: MSTORE
00000527: PUSH32 0x6c61737420636861726163746572206f662074686520626c6f636b74696d6520
00000548: SWAP3
00000549: DUP3
0000054a: ADD
0000054b: SWAP3
0000054c: SWAP1
0000054d: SWAP3
0000054e: MSTORE
0000054f: PUSH32 0x6f662074686520626c6f636b20696e2077686963682074686520626574207761
00000570: PUSH1 0x60
00000572: DUP3
00000573: ADD
00000574: MSTORE
00000575: PUSH32 0x732e204f6e65204574682069732031302a2a3138205765692e00000000000000
00000596: PUSH1 0x80
00000598: DUP3
00000599: ADD
0000059a: MSTORE
0000059b: SWAP5
0000059c: SWAP11
0000059d: POP
0000059e: SWAP6
0000059f: POP
000005a0: SWAP3
000005a1: SWAP4
000005a2: POP
000005a3: POP
000005a4: POP
000005a5: POP
000005a6: SWAP1
000005a7: SWAP2
000005a8: SWAP3
000005a9: SWAP4
000005aa: SWAP5
000005ab: SWAP6
000005ac: JUMP
000005ad: JUMPDEST
000005ae: PUSH1 0x0b
000005b0: SLOAD
000005b1: PUSH2 0x0615
000005b4: SWAP1
000005b5: PUSH1 0xa0
000005b7: PUSH1 0x02
000005b9: EXP
000005ba: SWAP1
000005bb: DIV
000005bc: PUSH1 0xff
000005be: AND
000005bf: DUP3
000005c0: PUSH1 0x01
000005c2: DUP3
000005c3: EQ
000005c4: DUP1
000005c5: ISZERO
000005c6: PUSH2 0x05e1
000005c9: JUMPI
000005ca: POP
000005cb: PUSH9 0x02b5e3af16b1880000
000005d5: ADDRESS
000005d6: PUSH1 0x01
000005d8: PUSH1 0xa0
000005da: PUSH1 0x02
000005dc: EXP
000005dd: SUB
000005de: AND
000005df: BALANCE
000005e0: GT
000005e1: JUMPDEST
000005e2: ISZERO
000005e3: PUSH2 0x0619
000005e6: JUMPI
000005e7: PUSH1 0x07
000005e9: SLOAD
000005ea: PUSH1 0x40
000005ec: MLOAD
000005ed: PUSH1 0x01
000005ef: PUSH1 0xa0
000005f1: PUSH1 0x02
000005f3: EXP
000005f4: SUB
000005f5: SWAP2
000005f6: SWAP1
000005f7: SWAP2
000005f8: AND
000005f9: SWAP1
000005fa: PUSH1 0x00
000005fc: SWAP1
000005fd: PUSH1 0x01
000005ff: PUSH1 0x80
00000601: PUSH1 0x02
00000603: EXP
00000604: SUB
00000605: DUP5
00000606: AND
00000607: SWAP1
00000608: DUP3
00000609: DUP2
0000060a: DUP2
0000060b: DUP2
0000060c: DUP6
0000060d: DUP9
0000060e: DUP4
0000060f: CALL
00000610: POP
00000611: POP
00000612: POP
00000613: POP
00000614: POP
00000615: JUMPDEST
00000616: POP
00000617: POP
00000618: JUMP
00000619: JUMPDEST
0000061a: DUP2
0000061b: PUSH1 0xff
0000061d: AND
0000061e: PUSH1 0x01
00000620: EQ
00000621: DUP1
00000622: ISZERO
00000623: PUSH2 0x063e
00000626: JUMPI
00000627: POP
00000628: PUSH9 0x01158e460913d00000
00000632: ADDRESS
00000633: PUSH1 0x01
00000635: PUSH1 0xa0
00000637: PUSH1 0x02
00000639: EXP
0000063a: SUB
0000063b: AND
0000063c: BALANCE
0000063d: GT
0000063e: JUMPDEST
0000063f: ISZERO
00000640: PUSH2 0x0615
00000643: JUMPI
00000644: PUSH1 0x40
00000646: MLOAD
00000647: PUSH1 0x07
00000649: SLOAD
0000064a: PUSH1 0x01
0000064c: PUSH1 0xa0
0000064e: PUSH1 0x02
00000650: EXP
00000651: SUB
00000652: AND
00000653: SWAP1
00000654: PUSH1 0x00
00000656: SWAP1
00000657: PUSH1 0x02
00000659: PUSH1 0x01
0000065b: PUSH1 0x80
0000065d: PUSH1 0x02
0000065f: EXP
00000660: SUB
00000661: DUP6
00000662: DUP2
00000663: AND
00000664: SWAP2
00000665: SWAP1
00000666: SWAP2
00000667: DIV
00000668: AND
00000669: SWAP1
0000066a: DUP3
0000066b: DUP2
0000066c: DUP2
0000066d: DUP2
0000066e: DUP6
0000066f: DUP9
00000670: DUP4
00000671: CALL
00000672: SWAP4
00000673: POP
00000674: POP
00000675: POP
00000676: POP
00000677: POP
00000678: PUSH2 0x0615
0000067b: JUMP
0000067c: JUMPDEST
0000067d: CALLVALUE
0000067e: PUSH1 0x00
00000680: EQ
00000681: ISZERO
00000682: PUSH2 0x0751
00000685: JUMPI
00000686: PUSH1 0x40
00000688: DUP1
00000689: MLOAD
0000068a: DUP1
0000068b: DUP3
0000068c: ADD
0000068d: SWAP1
0000068e: SWAP2
0000068f: MSTORE
00000690: PUSH1 0x0e
00000692: DUP2
00000693: MSTORE
00000694: PUSH32 0x576167657220776173207a65726f000000000000000000000000000000000000
000006b5: PUSH1 0x20
000006b7: SWAP2
000006b8: DUP3
000006b9: ADD
000006ba: SWAP1
000006bb: DUP2
000006bc: MSTORE
000006bd: PUSH1 0x09
000006bf: DUP1
000006c0: SLOAD
000006c1: PUSH1 0x00
000006c3: DUP3
000006c4: SWAP1
000006c5: MSTORE
000006c6: SWAP2
000006c7: MLOAD
000006c8: PUSH1 0xff
000006ca: NOT
000006cb: AND
000006cc: PUSH1 0x1c
000006ce: OR
000006cf: DUP2
000006d0: SSTORE
000006d1: SWAP2
000006d2: PUSH2 0x07a9
000006d5: SWAP2
000006d6: PUSH1 0x02
000006d8: PUSH1 0x01
000006da: DUP3
000006db: AND
000006dc: ISZERO
000006dd: PUSH2 0x0100
000006e0: MUL
000006e1: PUSH1 0x00
000006e3: NOT
000006e4: ADD
000006e5: SWAP1
000006e6: SWAP2
000006e7: AND
000006e8: DIV
000006e9: PUSH1 0x1f
000006eb: ADD
000006ec: DIV
000006ed: PUSH1 0x00
000006ef: DUP1
000006f0: MLOAD
000006f1: PUSH1 0x20
000006f3: PUSH2 0x09ff
000006f6: DUP4
000006f7: CODECOPY
000006f8: DUP2
000006f9: MLOAD
000006fa: SWAP2
000006fb: MSTORE
000006fc: SWAP1
000006fd: DUP2
000006fe: ADD
000006ff: SWAP1
00000700: PUSH2 0x070c
00000703: JUMP
00000704: JUMPDEST
00000705: POP
00000706: PUSH2 0x0720
00000709: SWAP3
0000070a: SWAP2
0000070b: POP
0000070c: JUMPDEST
0000070d: DUP1
0000070e: DUP3
0000070f: GT
00000710: ISZERO
00000711: PUSH2 0x074d
00000714: JUMPI
00000715: PUSH1 0x00
00000717: DUP2
00000718: SSTORE
00000719: PUSH1 0x01
0000071b: ADD
0000071c: PUSH2 0x070c
0000071f: JUMP
00000720: JUMPDEST
00000721: POP
00000722: POP
00000723: PUSH1 0x00
00000725: PUSH1 0x08
00000727: DUP2
00000728: SWAP1
00000729: SSTORE
0000072a: PUSH1 0x40
0000072c: MLOAD
0000072d: CALLER
0000072e: PUSH1 0x01
00000730: PUSH1 0xa0
00000732: PUSH1 0x02
00000734: EXP
00000735: SUB
00000736: AND
00000737: SWAP2
00000738: SWAP1
00000739: CALLVALUE
0000073a: SWAP1
0000073b: DUP3
0000073c: DUP2
0000073d: DUP2
0000073e: DUP2
0000073f: DUP6
00000740: DUP9
00000741: DUP4
00000742: CALL
00000743: SWAP4
00000744: POP
00000745: POP
00000746: POP
00000747: POP
00000748: POP
00000749: PUSH2 0x09fc
0000074c: JUMP
0000074d: JUMPDEST
0000074e: POP
0000074f: SWAP1
00000750: JUMP
00000751: JUMPDEST
00000752: POP
00000753: TIMESTAMP
00000754: PUSH1 0x02
00000756: DUP2
00000757: SWAP1
00000758: SSTORE
00000759: PUSH1 0x0a
0000075b: DUP1
0000075c: DUP3
0000075d: DIV
0000075e: PUSH1 0x03
00000760: DUP2
00000761: SWAP1
00000762: SSTORE
00000763: DUP2
00000764: MUL
00000765: PUSH1 0x04
00000767: DUP2
00000768: SWAP1
00000769: SSTORE
0000076a: SWAP1
0000076b: SWAP2
0000076c: SUB
0000076d: PUSH1 0x05
0000076f: SSTORE
00000770: NUMBER
00000771: SWAP1
00000772: SSTORE
00000773: PUSH1 0x06
00000775: SLOAD
00000776: CALLVALUE
00000777: SWAP1
00000778: PUSH2 0x270f
0000077b: EQ
0000077c: DUP1
0000077d: ISZERO
0000077e: PUSH2 0x0796
00000781: JUMPI
00000782: POP
00000783: PUSH1 0x07
00000785: SLOAD
00000786: PUSH1 0x01
00000788: PUSH1 0xa0
0000078a: PUSH1 0x02
0000078c: EXP
0000078d: SUB
0000078e: SWAP1
0000078f: DUP2
00000790: AND
00000791: CALLER
00000792: SWAP1
00000793: SWAP2
00000794: AND
00000795: EQ
00000796: JUMPDEST
00000797: ISZERO
00000798: PUSH2 0x07b5
0000079b: JUMPI
0000079c: PUSH1 0x07
0000079e: SLOAD
0000079f: PUSH1 0x01
000007a1: PUSH1 0xa0
000007a3: PUSH1 0x02
000007a5: EXP
000007a6: SUB
000007a7: AND
000007a8: SELFDESTRUCT
000007a9: JUMPDEST
000007aa: POP
000007ab: POP
000007ac: PUSH1 0x00
000007ae: PUSH1 0x08
000007b0: SSTORE
000007b1: PUSH2 0x09fc
000007b4: JUMP
000007b5: JUMPDEST
000007b6: PUSH1 0x06
000007b8: SLOAD
000007b9: PUSH1 0x09
000007bb: SWAP1
000007bc: GT
000007bd: ISZERO
000007be: PUSH2 0x0840
000007c1: JUMPI
000007c2: PUSH1 0x40
000007c4: DUP1
000007c5: MLOAD
000007c6: DUP1
000007c7: DUP3
000007c8: ADD
000007c9: SWAP1
000007ca: SWAP2
000007cb: MSTORE
000007cc: PUSH1 0x1c
000007ce: DUP2
000007cf: MSTORE
000007d0: PUSH32 0x67697665206120636861726163746572206265747765656e20302d3900000000
000007f1: PUSH1 0x20
000007f3: SWAP2
000007f4: DUP3
000007f5: ADD
000007f6: SWAP1
000007f7: DUP2
000007f8: MSTORE
000007f9: PUSH1 0x09
000007fb: DUP1
000007fc: SLOAD
000007fd: PUSH1 0x00
000007ff: DUP3
00000800: SWAP1
00000801: MSTORE
00000802: SWAP2
00000803: MLOAD
00000804: PUSH1 0xff
00000806: NOT
00000807: AND
00000808: PUSH1 0x38
0000080a: OR
0000080b: DUP2
0000080c: SSTORE
0000080d: SWAP2
0000080e: PUSH2 0x08dd
00000811: SWAP2
00000812: PUSH1 0x02
00000814: PUSH1 0x01
00000816: DUP3
00000817: AND
00000818: ISZERO
00000819: PUSH2 0x0100
0000081c: MUL
0000081d: PUSH1 0x00
0000081f: NOT
00000820: ADD
00000821: SWAP1
00000822: SWAP2
00000823: AND
00000824: DIV
00000825: PUSH1 0x1f
00000827: ADD
00000828: DIV
00000829: PUSH1 0x00
0000082b: DUP1
0000082c: MLOAD
0000082d: PUSH1 0x20
0000082f: PUSH2 0x09ff
00000832: DUP4
00000833: CODECOPY
00000834: DUP2
00000835: MLOAD
00000836: SWAP2
00000837: MSTORE
00000838: SWAP1
00000839: DUP2
0000083a: ADD
0000083b: SWAP1
0000083c: PUSH2 0x070c
0000083f: JUMP
00000840: JUMPDEST
00000841: PUSH1 0x05
00000843: SLOAD
00000844: PUSH1 0x06
00000846: SLOAD
00000847: EQ
00000848: PUSH2 0x0905
0000084b: JUMPI
0000084c: PUSH1 0x01
0000084e: PUSH1 0x80
00000850: PUSH1 0x02
00000852: EXP
00000853: SUB
00000854: DUP2
00000855: AND
00000856: PUSH1 0x00
00000858: NOT
00000859: SWAP1
0000085a: DUP2
0000085b: MUL
0000085c: PUSH1 0x08
0000085e: SWAP1
0000085f: DUP2
00000860: SSTORE
00000861: PUSH1 0x40
00000863: DUP1
00000864: MLOAD
00000865: DUP1
00000866: DUP3
00000867: ADD
00000868: SWAP1
00000869: SWAP2
0000086a: MSTORE
0000086b: PUSH1 0x04
0000086d: DUP2
0000086e: MSTORE
0000086f: PUSH32 0x4c6f737300000000000000000000000000000000000000000000000000000000
00000890: PUSH1 0x20
00000892: SWAP2
00000893: DUP3
00000894: ADD
00000895: SWAP1
00000896: DUP2
00000897: MSTORE
00000898: PUSH1 0x09
0000089a: DUP1
0000089b: SLOAD
0000089c: PUSH1 0x00
0000089e: DUP3
0000089f: SWAP1
000008a0: MSTORE
000008a1: SWAP2
000008a2: MLOAD
000008a3: PUSH1 0xff
000008a5: NOT
000008a6: AND
000008a7: SWAP1
000008a8: SWAP4
000008a9: OR
000008aa: DUP4
000008ab: SSTORE
000008ac: SWAP2
000008ad: SWAP3
000008ae: PUSH2 0x09a2
000008b1: SWAP3
000008b2: PUSH1 0x02
000008b4: PUSH1 0x01
000008b6: DUP3
000008b7: AND
000008b8: ISZERO
000008b9: PUSH2 0x0100
000008bc: MUL
000008bd: SWAP1
000008be: SWAP3
000008bf: ADD
000008c0: AND
000008c1: DIV
000008c2: PUSH1 0x1f
000008c4: ADD
000008c5: DIV
000008c6: PUSH1 0x00
000008c8: DUP1
000008c9: MLOAD
000008ca: PUSH1 0x20
000008cc: PUSH2 0x09ff
000008cf: DUP4
000008d0: CODECOPY
000008d1: DUP2
000008d2: MLOAD
000008d3: SWAP2
000008d4: MSTORE
000008d5: SWAP1
000008d6: DUP2
000008d7: ADD
000008d8: SWAP1
000008d9: PUSH2 0x070c
000008dc: JUMP
000008dd: JUMPDEST
000008de: POP
000008df: POP
000008e0: PUSH1 0x40
000008e2: MLOAD
000008e3: CALLER
000008e4: PUSH1 0x01
000008e6: PUSH1 0xa0
000008e8: PUSH1 0x02
000008ea: EXP
000008eb: SUB
000008ec: AND
000008ed: SWAP1
000008ee: PUSH1 0x00
000008f0: SWAP1
000008f1: CALLVALUE
000008f2: SWAP1
000008f3: DUP3
000008f4: DUP2
000008f5: DUP2
000008f6: DUP2
000008f7: DUP6
000008f8: DUP9
000008f9: DUP4
000008fa: CALL
000008fb: SWAP4
000008fc: POP
000008fd: POP
000008fe: POP
000008ff: POP
00000900: POP
00000901: PUSH2 0x09fc
00000904: JUMP
00000905: JUMPDEST
00000906: PUSH1 0x05
00000908: SLOAD
00000909: PUSH1 0x06
0000090b: SLOAD
0000090c: EQ
0000090d: ISZERO
0000090e: PUSH2 0x09fc
00000911: JUMPI
00000912: PUSH1 0x08
00000914: DUP2
00000915: DUP2
00000916: MUL
00000917: PUSH1 0x01
00000919: PUSH1 0x80
0000091b: PUSH1 0x02
0000091d: EXP
0000091e: SUB
0000091f: AND
00000920: DUP2
00000921: SSTORE
00000922: PUSH1 0x40
00000924: DUP1
00000925: MLOAD
00000926: DUP1
00000927: DUP3
00000928: ADD
00000929: SWAP1
0000092a: SWAP2
0000092b: MSTORE
0000092c: PUSH1 0x04
0000092e: DUP2
0000092f: MSTORE
00000930: PUSH32 0x57696e2100000000000000000000000000000000000000000000000000000000
00000951: PUSH1 0x20
00000953: SWAP2
00000954: DUP3
00000955: ADD
00000956: SWAP1
00000957: DUP2
00000958: MSTORE
00000959: PUSH1 0x09
0000095b: DUP1
0000095c: SLOAD
0000095d: PUSH1 0x00
0000095f: DUP3
00000960: SWAP1
00000961: MSTORE
00000962: SWAP2
00000963: MLOAD
00000964: PUSH1 0xff
00000966: NOT
00000967: AND
00000968: SWAP1
00000969: SWAP4
0000096a: OR
0000096b: DUP4
0000096c: SSTORE
0000096d: PUSH2 0x09cd
00000970: SWAP2
00000971: PUSH1 0x02
00000973: PUSH1 0x01
00000975: DUP4
00000976: AND
00000977: ISZERO
00000978: PUSH2 0x0100
0000097b: MUL
0000097c: PUSH1 0x00
0000097e: NOT
0000097f: ADD
00000980: SWAP1
00000981: SWAP3
00000982: AND
00000983: SWAP2
00000984: SWAP1
00000985: SWAP2
00000986: DIV
00000987: PUSH1 0x1f
00000989: ADD
0000098a: DIV
0000098b: PUSH1 0x00
0000098d: DUP1
0000098e: MLOAD
0000098f: PUSH1 0x20
00000991: PUSH2 0x09ff
00000994: DUP4
00000995: CODECOPY
00000996: DUP2
00000997: MLOAD
00000998: SWAP2
00000999: MSTORE
0000099a: SWAP1
0000099b: DUP2
0000099c: ADD
0000099d: SWAP1
0000099e: PUSH2 0x070c
000009a1: JUMP
000009a2: JUMPDEST
000009a3: POP
000009a4: POP
000009a5: PUSH1 0x0b
000009a7: DUP1
000009a8: SLOAD
000009a9: PUSH21 0xff0000000000000000000000000000000000000000
000009bf: NOT
000009c0: AND
000009c1: PUSH1 0xa0
000009c3: PUSH1 0x02
000009c5: EXP
000009c6: OR
000009c7: SWAP1
000009c8: SSTORE
000009c9: PUSH2 0x09fc
000009cc: JUMP
000009cd: JUMPDEST
000009ce: POP
000009cf: POP
000009d0: PUSH1 0x40
000009d2: MLOAD
000009d3: CALLER
000009d4: PUSH1 0x01
000009d6: PUSH1 0xa0
000009d8: PUSH1 0x02
000009da: EXP
000009db: SUB
000009dc: AND
000009dd: SWAP1
000009de: PUSH1 0x00
000009e0: SWAP1
000009e1: PUSH1 0x08
000009e3: DUP5
000009e4: MUL
000009e5: PUSH1 0x01
000009e7: PUSH1 0x80
000009e9: PUSH1 0x02
000009eb: EXP
000009ec: SUB
000009ed: AND
000009ee: SWAP1
000009ef: DUP3
000009f0: DUP2
000009f1: DUP2
000009f2: DUP2
000009f3: DUP6
000009f4: DUP9
000009f5: DUP4
000009f6: CALL
000009f7: POP
000009f8: POP
000009f9: POP
000009fa: POP
000009fb: POP
000009fc: JUMPDEST
000009fd: POP
000009fe: JUMP
000009ff: PUSH15 0x1540171b6c0c960b71a7020d9f6007
00000a0f: PUSH32
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 yes yes
view
trace_id: 0x3c6dd6b8224a326aa7a9210ac4f76005920b812e4dfc4787d233fae9669d5991
call_targets: 0x0000000000000000000000000000000000000004, 0x55bad426a5f63c7b57f17ed51f3a55df207b88bf
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0x3c6dd6b8224a326aa7a9210ac4f76005920b812e4dfc4787d233fae9669d5991",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0x55bad426a5f63c7b57f17ed51f3a55df207b88bf"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2c329e99",
            "selector": "0x2c329e99",
            "calldata_variants": [
                "0x2c329e99",
                "0x2c329e990000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6673ce2b",
            "selector": "0x6673ce2b",
            "calldata_variants": [
                "0x6673ce2b",
                "0x6673ce2b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb936999a",
            "selector": "0xb936999a",
            "calldata_variants": [
                "0xb936999a",
                "0xb936999a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xdb641ab4",
            "selector": "0xdb641ab4",
            "calldata_variants": [
                "0xdb641ab4",
                "0xdb641ab40000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 240,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 919,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1067,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 9,
    "guards_detected": [],
    "untrusted_call_count": 9
}
high other detector ETH value transfer possible 55 yes yes
view
trace_id: 0x3c6dd6b8224a326aa7a9210ac4f76005920b812e4dfc4787d233fae9669d5991
call_targets: 0x0000000000000000000000000000000000000004, 0x55bad426a5f63c7b57f17ed51f3a55df207b88bf
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0x3c6dd6b8224a326aa7a9210ac4f76005920b812e4dfc4787d233fae9669d5991",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0x55bad426a5f63c7b57f17ed51f3a55df207b88bf"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2c329e99",
            "selector": "0x2c329e99",
            "calldata_variants": [
                "0x2c329e99",
                "0x2c329e990000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6673ce2b",
            "selector": "0x6673ce2b",
            "calldata_variants": [
                "0x6673ce2b",
                "0x6673ce2b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb936999a",
            "selector": "0xb936999a",
            "calldata_variants": [
                "0xb936999a",
                "0xb936999a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xdb641ab4",
            "selector": "0xdb641ab4",
            "calldata_variants": [
                "0xdb641ab4",
                "0xdb641ab40000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 240,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 919,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1067,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 9,
    "guards_detected": []
}
high other detector SELFDESTRUCT reachable 65 no no
view
trace_id: 0x3cf6288207805d04e5e0fb689435ed81fc5be9b0273e3188426c6f74b6a6146d
validation_json
{
    "sink": "SELFDESTRUCT",
    "errors": 0,
    "status": "unknown",
    "attempts": 8,
    "trace_id": "0x3cf6288207805d04e5e0fb689435ed81fc5be9b0273e3188426c6f74b6a6146d",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2c329e99",
            "selector": "0x2c329e99",
            "calldata_variants": [
                "0x2c329e99",
                "0x2c329e990000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6673ce2b",
            "selector": "0x6673ce2b",
            "calldata_variants": [
                "0x6673ce2b",
                "0x6673ce2b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb936999a",
            "selector": "0xb936999a",
            "calldata_variants": [
                "0xb936999a",
                "0xb936999a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xdb641ab4",
            "selector": "0xdb641ab4",
            "calldata_variants": [
                "0xdb641ab4",
                "0xdb641ab40000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "guards_detected": [],
    "selfdestruct_count": 1
}