TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-443f-725a-9c50-87356c140111

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:03 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
5831 artifact.fetch complete 1 / 3 4 months ago
5832 tool.cast_disasm complete 1 / 3 4 months ago
81495 analysis.bundle complete 1 / 3 2 weeks ago
81496 capability.graph complete 1 / 3 2 weeks ago
81497 detector.run complete 1 / 3 2 weeks ago
81498 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
0
Total opcodes
1016
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x008a
0000000a: JUMPI
0000000b: PUSH1 0x00
0000000d: CALLDATALOAD
0000000e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002c: SWAP1
0000002d: DIV
0000002e: DUP1
0000002f: PUSH4 0x1f83f440
00000034: EQ
00000035: PUSH2 0x01ef
00000038: JUMPI
00000039: DUP1
0000003a: PUSH4 0x41c0e1b5
0000003f: EQ
00000040: PUSH2 0x021b
00000043: JUMPI
00000044: DUP1
00000045: PUSH4 0x4636a159
0000004a: EQ
0000004b: PUSH2 0x022a
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0xa02b9aac
00000055: EQ
00000056: PUSH2 0x024b
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0xb958a5e1
00000060: EQ
00000061: PUSH2 0x02cf
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0xe3ffc9a3
0000006b: EQ
0000006c: PUSH2 0x02fb
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0xf3730653
00000076: EQ
00000077: PUSH2 0x030a
0000007a: JUMPI
0000007b: DUP1
0000007c: PUSH4 0xfe97ee88
00000081: EQ
00000082: PUSH2 0x034c
00000085: JUMPI
00000086: PUSH2 0x008a
00000089: JUMP
0000008a: JUMPDEST
0000008b: PUSH2 0x01ed
0000008e: JUMPDEST
0000008f: PUSH1 0x60
00000091: PUSH1 0x40
00000093: MLOAD
00000094: SWAP1
00000095: DUP2
00000096: ADD
00000097: PUSH1 0x40
00000099: MSTORE
0000009a: DUP1
0000009b: PUSH1 0x00
0000009d: DUP2
0000009e: MSTORE
0000009f: PUSH1 0x20
000000a1: ADD
000000a2: PUSH8 0x016345785d8a0000
000000ab: CALLVALUE
000000ac: DIV
000000ad: DUP2
000000ae: MSTORE
000000af: PUSH1 0x20
000000b1: ADD
000000b2: PUSH1 0x00
000000b4: CALLDATASIZE
000000b5: DUP1
000000b6: DUP1
000000b7: PUSH1 0x1f
000000b9: ADD
000000ba: PUSH1 0x20
000000bc: DUP1
000000bd: SWAP2
000000be: DIV
000000bf: MUL
000000c0: PUSH1 0x20
000000c2: ADD
000000c3: PUSH1 0x40
000000c5: MLOAD
000000c6: SWAP1
000000c7: DUP2
000000c8: ADD
000000c9: PUSH1 0x40
000000cb: MSTORE
000000cc: DUP1
000000cd: SWAP4
000000ce: SWAP3
000000cf: SWAP2
000000d0: SWAP1
000000d1: DUP2
000000d2: DUP2
000000d3: MSTORE
000000d4: PUSH1 0x20
000000d6: ADD
000000d7: DUP4
000000d8: DUP4
000000d9: DUP1
000000da: DUP3
000000db: DUP5
000000dc: CALLDATACOPY
000000dd: DUP3
000000de: ADD
000000df: SWAP2
000000e0: POP
000000e1: POP
000000e2: POP
000000e3: POP
000000e4: POP
000000e5: POP
000000e6: DUP2
000000e7: MSTORE
000000e8: PUSH1 0x20
000000ea: ADD
000000eb: POP
000000ec: PUSH1 0x02
000000ee: PUSH1 0x00
000000f0: POP
000000f1: PUSH1 0x00
000000f3: CALLER
000000f4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000109: AND
0000010a: DUP2
0000010b: MSTORE
0000010c: PUSH1 0x20
0000010e: ADD
0000010f: SWAP1
00000110: DUP2
00000111: MSTORE
00000112: PUSH1 0x20
00000114: ADD
00000115: PUSH1 0x00
00000117: KECCAK256
00000118: PUSH1 0x00
0000011a: POP
0000011b: PUSH1 0x00
0000011d: DUP3
0000011e: ADD
0000011f: MLOAD
00000120: DUP2
00000121: PUSH1 0x00
00000123: ADD
00000124: PUSH1 0x00
00000126: POP
00000127: SSTORE
00000128: PUSH1 0x20
0000012a: DUP3
0000012b: ADD
0000012c: MLOAD
0000012d: DUP2
0000012e: PUSH1 0x01
00000130: ADD
00000131: PUSH1 0x00
00000133: POP
00000134: SSTORE
00000135: PUSH1 0x40
00000137: DUP3
00000138: ADD
00000139: MLOAD
0000013a: DUP2
0000013b: PUSH1 0x02
0000013d: ADD
0000013e: PUSH1 0x00
00000140: POP
00000141: SWAP1
00000142: DUP1
00000143: MLOAD
00000144: SWAP1
00000145: PUSH1 0x20
00000147: ADD
00000148: SWAP1
00000149: DUP3
0000014a: DUP1
0000014b: SLOAD
0000014c: PUSH1 0x01
0000014e: DUP2
0000014f: PUSH1 0x01
00000151: AND
00000152: ISZERO
00000153: PUSH2 0x0100
00000156: MUL
00000157: SUB
00000158: AND
00000159: PUSH1 0x02
0000015b: SWAP1
0000015c: DIV
0000015d: SWAP1
0000015e: PUSH1 0x00
00000160: MSTORE
00000161: PUSH1 0x20
00000163: PUSH1 0x00
00000165: KECCAK256
00000166: SWAP1
00000167: PUSH1 0x1f
00000169: ADD
0000016a: PUSH1 0x20
0000016c: SWAP1
0000016d: DIV
0000016e: DUP2
0000016f: ADD
00000170: SWAP3
00000171: DUP3
00000172: PUSH1 0x1f
00000174: LT
00000175: PUSH2 0x0189
00000178: JUMPI
00000179: DUP1
0000017a: MLOAD
0000017b: PUSH1 0xff
0000017d: NOT
0000017e: AND
0000017f: DUP4
00000180: DUP1
00000181: ADD
00000182: OR
00000183: DUP6
00000184: SSTORE
00000185: PUSH2 0x01ba
00000188: JUMP
00000189: JUMPDEST
0000018a: DUP3
0000018b: DUP1
0000018c: ADD
0000018d: PUSH1 0x01
0000018f: ADD
00000190: DUP6
00000191: SSTORE
00000192: DUP3
00000193: ISZERO
00000194: PUSH2 0x01ba
00000197: JUMPI
00000198: SWAP2
00000199: DUP3
0000019a: ADD
0000019b: JUMPDEST
0000019c: DUP3
0000019d: DUP2
0000019e: GT
0000019f: ISZERO
000001a0: PUSH2 0x01b9
000001a3: JUMPI
000001a4: DUP3
000001a5: MLOAD
000001a6: DUP3
000001a7: PUSH1 0x00
000001a9: POP
000001aa: SSTORE
000001ab: SWAP2
000001ac: PUSH1 0x20
000001ae: ADD
000001af: SWAP2
000001b0: SWAP1
000001b1: PUSH1 0x01
000001b3: ADD
000001b4: SWAP1
000001b5: PUSH2 0x019b
000001b8: JUMP
000001b9: JUMPDEST
000001ba: JUMPDEST
000001bb: POP
000001bc: SWAP1
000001bd: POP
000001be: PUSH2 0x01e5
000001c1: SWAP2
000001c2: SWAP1
000001c3: PUSH2 0x01c7
000001c6: JUMP
000001c7: JUMPDEST
000001c8: DUP1
000001c9: DUP3
000001ca: GT
000001cb: ISZERO
000001cc: PUSH2 0x01e1
000001cf: JUMPI
000001d0: PUSH1 0x00
000001d2: DUP2
000001d3: DUP2
000001d4: POP
000001d5: PUSH1 0x00
000001d7: SWAP1
000001d8: SSTORE
000001d9: POP
000001da: PUSH1 0x01
000001dc: ADD
000001dd: PUSH2 0x01c7
000001e0: JUMP
000001e1: JUMPDEST
000001e2: POP
000001e3: SWAP1
000001e4: JUMP
000001e5: JUMPDEST
000001e6: POP
000001e7: POP
000001e8: SWAP1
000001e9: POP
000001ea: POP
000001eb: JUMPDEST
000001ec: JUMP
000001ed: JUMPDEST
000001ee: STOP
000001ef: JUMPDEST
000001f0: PUSH2 0x0205
000001f3: PUSH1 0x04
000001f5: DUP1
000001f6: DUP1
000001f7: CALLDATALOAD
000001f8: SWAP1
000001f9: PUSH1 0x20
000001fb: ADD
000001fc: SWAP1
000001fd: SWAP2
000001fe: SWAP1
000001ff: POP
00000200: POP
00000201: PUSH2 0x0378
00000204: JUMP
00000205: JUMPDEST
00000206: PUSH1 0x40
00000208: MLOAD
00000209: DUP1
0000020a: DUP3
0000020b: DUP2
0000020c: MSTORE
0000020d: PUSH1 0x20
0000020f: ADD
00000210: SWAP2
00000211: POP
00000212: POP
00000213: PUSH1 0x40
00000215: MLOAD
00000216: DUP1
00000217: SWAP2
00000218: SUB
00000219: SWAP1
0000021a: RETURN
0000021b: JUMPDEST
0000021c: PUSH2 0x0228
0000021f: PUSH1 0x04
00000221: DUP1
00000222: POP
00000223: POP
00000224: PUSH2 0x03bc
00000227: JUMP
00000228: JUMPDEST
00000229: STOP
0000022a: JUMPDEST
0000022b: PUSH2 0x0249
0000022e: PUSH1 0x04
00000230: DUP1
00000231: DUP1
00000232: CALLDATALOAD
00000233: SWAP1
00000234: PUSH1 0x20
00000236: ADD
00000237: SWAP1
00000238: SWAP2
00000239: SWAP1
0000023a: DUP1
0000023b: CALLDATALOAD
0000023c: SWAP1
0000023d: PUSH1 0x20
0000023f: ADD
00000240: SWAP1
00000241: SWAP2
00000242: SWAP1
00000243: POP
00000244: POP
00000245: PUSH2 0x041d
00000248: JUMP
00000249: JUMPDEST
0000024a: STOP
0000024b: JUMPDEST
0000024c: PUSH2 0x0261
0000024f: PUSH1 0x04
00000251: DUP1
00000252: DUP1
00000253: CALLDATALOAD
00000254: SWAP1
00000255: PUSH1 0x20
00000257: ADD
00000258: SWAP1
00000259: SWAP2
0000025a: SWAP1
0000025b: POP
0000025c: POP
0000025d: PUSH2 0x0480
00000260: JUMP
00000261: JUMPDEST
00000262: PUSH1 0x40
00000264: MLOAD
00000265: DUP1
00000266: DUP1
00000267: PUSH1 0x20
00000269: ADD
0000026a: DUP3
0000026b: DUP2
0000026c: SUB
0000026d: DUP3
0000026e: MSTORE
0000026f: DUP4
00000270: DUP2
00000271: DUP2
00000272: MLOAD
00000273: DUP2
00000274: MSTORE
00000275: PUSH1 0x20
00000277: ADD
00000278: SWAP2
00000279: POP
0000027a: DUP1
0000027b: MLOAD
0000027c: SWAP1
0000027d: PUSH1 0x20
0000027f: ADD
00000280: SWAP1
00000281: DUP1
00000282: DUP4
00000283: DUP4
00000284: DUP3
00000285: SWAP1
00000286: PUSH1 0x00
00000288: PUSH1 0x04
0000028a: PUSH1 0x20
0000028c: DUP5
0000028d: PUSH1 0x1f
0000028f: ADD
00000290: DIV
00000291: PUSH1 0x0f
00000293: MUL
00000294: PUSH1 0x03
00000296: ADD
00000297: CALL
00000298: POP
00000299: SWAP1
0000029a: POP
0000029b: SWAP1
0000029c: DUP2
0000029d: ADD
0000029e: SWAP1
0000029f: PUSH1 0x1f
000002a1: AND
000002a2: DUP1
000002a3: ISZERO
000002a4: PUSH2 0x02c1
000002a7: JUMPI
000002a8: DUP1
000002a9: DUP3
000002aa: SUB
000002ab: DUP1
000002ac: MLOAD
000002ad: PUSH1 0x01
000002af: DUP4
000002b0: PUSH1 0x20
000002b2: SUB
000002b3: PUSH2 0x0100
000002b6: EXP
000002b7: SUB
000002b8: NOT
000002b9: AND
000002ba: DUP2
000002bb: MSTORE
000002bc: PUSH1 0x20
000002be: ADD
000002bf: SWAP2
000002c0: POP
000002c1: JUMPDEST
000002c2: POP
000002c3: SWAP3
000002c4: POP
000002c5: POP
000002c6: POP
000002c7: PUSH1 0x40
000002c9: MLOAD
000002ca: DUP1
000002cb: SWAP2
000002cc: SUB
000002cd: SWAP1
000002ce: RETURN
000002cf: JUMPDEST
000002d0: PUSH2 0x02e5
000002d3: PUSH1 0x04
000002d5: DUP1
000002d6: DUP1
000002d7: CALLDATALOAD
000002d8: SWAP1
000002d9: PUSH1 0x20
000002db: ADD
000002dc: SWAP1
000002dd: SWAP2
000002de: SWAP1
000002df: POP
000002e0: POP
000002e1: PUSH2 0x056e
000002e4: JUMP
000002e5: JUMPDEST
000002e6: PUSH1 0x40
000002e8: MLOAD
000002e9: DUP1
000002ea: DUP3
000002eb: DUP2
000002ec: MSTORE
000002ed: PUSH1 0x20
000002ef: ADD
000002f0: SWAP2
000002f1: POP
000002f2: POP
000002f3: PUSH1 0x40
000002f5: MLOAD
000002f6: DUP1
000002f7: SWAP2
000002f8: SUB
000002f9: SWAP1
000002fa: RETURN
000002fb: JUMPDEST
000002fc: PUSH2 0x0308
000002ff: PUSH1 0x04
00000301: DUP1
00000302: POP
00000303: POP
00000304: PUSH2 0x05b2
00000307: JUMP
00000308: JUMPDEST
00000309: STOP
0000030a: JUMPDEST
0000030b: PUSH2 0x0320
0000030e: PUSH1 0x04
00000310: DUP1
00000311: DUP1
00000312: CALLDATALOAD
00000313: SWAP1
00000314: PUSH1 0x20
00000316: ADD
00000317: SWAP1
00000318: SWAP2
00000319: SWAP1
0000031a: POP
0000031b: POP
0000031c: PUSH2 0x0613
0000031f: JUMP
00000320: JUMPDEST
00000321: PUSH1 0x40
00000323: MLOAD
00000324: DUP1
00000325: DUP3
00000326: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000033b: AND
0000033c: DUP2
0000033d: MSTORE
0000033e: PUSH1 0x20
00000340: ADD
00000341: SWAP2
00000342: POP
00000343: POP
00000344: PUSH1 0x40
00000346: MLOAD
00000347: DUP1
00000348: SWAP2
00000349: SUB
0000034a: SWAP1
0000034b: RETURN
0000034c: JUMPDEST
0000034d: PUSH2 0x0362
00000350: PUSH1 0x04
00000352: DUP1
00000353: DUP1
00000354: CALLDATALOAD
00000355: SWAP1
00000356: PUSH1 0x20
00000358: ADD
00000359: SWAP1
0000035a: SWAP2
0000035b: SWAP1
0000035c: POP
0000035d: POP
0000035e: PUSH2 0x064b
00000361: JUMP
00000362: JUMPDEST
00000363: PUSH1 0x40
00000365: MLOAD
00000366: DUP1
00000367: DUP3
00000368: DUP2
00000369: MSTORE
0000036a: PUSH1 0x20
0000036c: ADD
0000036d: SWAP2
0000036e: POP
0000036f: POP
00000370: PUSH1 0x40
00000372: MLOAD
00000373: DUP1
00000374: SWAP2
00000375: SUB
00000376: SWAP1
00000377: RETURN
00000378: JUMPDEST
00000379: PUSH1 0x00
0000037b: PUSH1 0x02
0000037d: PUSH1 0x00
0000037f: POP
00000380: PUSH1 0x00
00000382: DUP4
00000383: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000398: AND
00000399: DUP2
0000039a: MSTORE
0000039b: PUSH1 0x20
0000039d: ADD
0000039e: SWAP1
0000039f: DUP2
000003a0: MSTORE
000003a1: PUSH1 0x20
000003a3: ADD
000003a4: PUSH1 0x00
000003a6: KECCAK256
000003a7: PUSH1 0x00
000003a9: POP
000003aa: PUSH1 0x01
000003ac: ADD
000003ad: PUSH1 0x00
000003af: POP
000003b0: SLOAD
000003b1: SWAP1
000003b2: POP
000003b3: PUSH2 0x03b7
000003b6: JUMP
000003b7: JUMPDEST
000003b8: SWAP2
000003b9: SWAP1
000003ba: POP
000003bb: JUMP
000003bc: JUMPDEST
000003bd: PUSH1 0x00
000003bf: PUSH1 0x00
000003c1: SWAP1
000003c2: SLOAD
000003c3: SWAP1
000003c4: PUSH2 0x0100
000003c7: EXP
000003c8: SWAP1
000003c9: DIV
000003ca: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003df: AND
000003e0: DUP1
000003e1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003f6: AND
000003f7: CALLER
000003f8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000040d: AND
0000040e: EQ
0000040f: ISZERO
00000410: ISZERO
00000411: PUSH2 0x0419
00000414: JUMPI
00000415: PUSH2 0x0002
00000418: JUMP
00000419: JUMPDEST
0000041a: POP
0000041b: JUMPDEST
0000041c: JUMP
0000041d: JUMPDEST
0000041e: PUSH1 0x00
00000420: PUSH1 0x00
00000422: SWAP1
00000423: SLOAD
00000424: SWAP1
00000425: PUSH2 0x0100
00000428: EXP
00000429: SWAP1
0000042a: DIV
0000042b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000440: AND
00000441: DUP1
00000442: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000457: AND
00000458: CALLER
00000459: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000046e: AND
0000046f: EQ
00000470: ISZERO
00000471: ISZERO
00000472: PUSH2 0x047a
00000475: JUMPI
00000476: PUSH2 0x0002
00000479: JUMP
0000047a: JUMPDEST
0000047b: POP
0000047c: JUMPDEST
0000047d: POP
0000047e: POP
0000047f: JUMP
00000480: JUMPDEST
00000481: PUSH1 0x20
00000483: PUSH1 0x40
00000485: MLOAD
00000486: SWAP1
00000487: DUP2
00000488: ADD
00000489: PUSH1 0x40
0000048b: MSTORE
0000048c: DUP1
0000048d: PUSH1 0x00
0000048f: DUP2
00000490: MSTORE
00000491: PUSH1 0x20
00000493: ADD
00000494: POP
00000495: PUSH1 0x02
00000497: PUSH1 0x00
00000499: POP
0000049a: PUSH1 0x00
0000049c: DUP4
0000049d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004b2: AND
000004b3: DUP2
000004b4: MSTORE
000004b5: PUSH1 0x20
000004b7: ADD
000004b8: SWAP1
000004b9: DUP2
000004ba: MSTORE
000004bb: PUSH1 0x20
000004bd: ADD
000004be: PUSH1 0x00
000004c0: KECCAK256
000004c1: PUSH1 0x00
000004c3: POP
000004c4: PUSH1 0x02
000004c6: ADD
000004c7: PUSH1 0x00
000004c9: POP
000004ca: DUP1
000004cb: SLOAD
000004cc: PUSH1 0x01
000004ce: DUP2
000004cf: PUSH1 0x01
000004d1: AND
000004d2: ISZERO
000004d3: PUSH2 0x0100
000004d6: MUL
000004d7: SUB
000004d8: AND
000004d9: PUSH1 0x02
000004db: SWAP1
000004dc: DIV
000004dd: DUP1
000004de: PUSH1 0x1f
000004e0: ADD
000004e1: PUSH1 0x20
000004e3: DUP1
000004e4: SWAP2
000004e5: DIV
000004e6: MUL
000004e7: PUSH1 0x20
000004e9: ADD
000004ea: PUSH1 0x40
000004ec: MLOAD
000004ed: SWAP1
000004ee: DUP2
000004ef: ADD
000004f0: PUSH1 0x40
000004f2: MSTORE
000004f3: DUP1
000004f4: SWAP3
000004f5: SWAP2
000004f6: SWAP1
000004f7: DUP2
000004f8: DUP2
000004f9: MSTORE
000004fa: PUSH1 0x20
000004fc: ADD
000004fd: DUP3
000004fe: DUP1
000004ff: SLOAD
00000500: PUSH1 0x01
00000502: DUP2
00000503: PUSH1 0x01
00000505: AND
00000506: ISZERO
00000507: PUSH2 0x0100
0000050a: MUL
0000050b: SUB
0000050c: AND
0000050d: PUSH1 0x02
0000050f: SWAP1
00000510: DIV
00000511: DUP1
00000512: ISZERO
00000513: PUSH2 0x055d
00000516: JUMPI
00000517: DUP1
00000518: PUSH1 0x1f
0000051a: LT
0000051b: PUSH2 0x0532
0000051e: JUMPI
0000051f: PUSH2 0x0100
00000522: DUP1
00000523: DUP4
00000524: SLOAD
00000525: DIV
00000526: MUL
00000527: DUP4
00000528: MSTORE
00000529: SWAP2
0000052a: PUSH1 0x20
0000052c: ADD
0000052d: SWAP2
0000052e: PUSH2 0x055d
00000531: JUMP
00000532: JUMPDEST
00000533: DUP3
00000534: ADD
00000535: SWAP2
00000536: SWAP1
00000537: PUSH1 0x00
00000539: MSTORE
0000053a: PUSH1 0x20
0000053c: PUSH1 0x00
0000053e: KECCAK256
0000053f: SWAP1
00000540: JUMPDEST
00000541: DUP2
00000542: SLOAD
00000543: DUP2
00000544: MSTORE
00000545: SWAP1
00000546: PUSH1 0x01
00000548: ADD
00000549: SWAP1
0000054a: PUSH1 0x20
0000054c: ADD
0000054d: DUP1
0000054e: DUP4
0000054f: GT
00000550: PUSH2 0x0540
00000553: JUMPI
00000554: DUP3
00000555: SWAP1
00000556: SUB
00000557: PUSH1 0x1f
00000559: AND
0000055a: DUP3
0000055b: ADD
0000055c: SWAP2
0000055d: JUMPDEST
0000055e: POP
0000055f: POP
00000560: POP
00000561: POP
00000562: POP
00000563: SWAP1
00000564: POP
00000565: PUSH2 0x0569
00000568: JUMP
00000569: JUMPDEST
0000056a: SWAP2
0000056b: SWAP1
0000056c: POP
0000056d: JUMP
0000056e: JUMPDEST
0000056f: PUSH1 0x00
00000571: PUSH1 0x02
00000573: PUSH1 0x00
00000575: POP
00000576: PUSH1 0x00
00000578: DUP4
00000579: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000058e: AND
0000058f: DUP2
00000590: MSTORE
00000591: PUSH1 0x20
00000593: ADD
00000594: SWAP1
00000595: DUP2
00000596: MSTORE
00000597: PUSH1 0x20
00000599: ADD
0000059a: PUSH1 0x00
0000059c: KECCAK256
0000059d: PUSH1 0x00
0000059f: POP
000005a0: PUSH1 0x00
000005a2: ADD
000005a3: PUSH1 0x00
000005a5: POP
000005a6: SLOAD
000005a7: SWAP1
000005a8: POP
000005a9: PUSH2 0x05ad
000005ac: JUMP
000005ad: JUMPDEST
000005ae: SWAP2
000005af: SWAP1
000005b0: POP
000005b1: JUMP
000005b2: JUMPDEST
000005b3: PUSH1 0x00
000005b5: PUSH1 0x00
000005b7: SWAP1
000005b8: SLOAD
000005b9: SWAP1
000005ba: PUSH2 0x0100
000005bd: EXP
000005be: SWAP1
000005bf: DIV
000005c0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005d5: AND
000005d6: DUP1
000005d7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005ec: AND
000005ed: CALLER
000005ee: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000603: AND
00000604: EQ
00000605: ISZERO
00000606: ISZERO
00000607: PUSH2 0x060f
0000060a: JUMPI
0000060b: PUSH2 0x0002
0000060e: JUMP
0000060f: JUMPDEST
00000610: POP
00000611: JUMPDEST
00000612: JUMP
00000613: JUMPDEST
00000614: PUSH1 0x03
00000616: PUSH1 0x00
00000618: POP
00000619: PUSH1 0x20
0000061b: MSTORE
0000061c: DUP1
0000061d: PUSH1 0x00
0000061f: MSTORE
00000620: PUSH1 0x40
00000622: PUSH1 0x00
00000624: KECCAK256
00000625: PUSH1 0x00
00000627: SWAP2
00000628: POP
00000629: SWAP1
0000062a: SWAP1
0000062b: SLOAD
0000062c: SWAP1
0000062d: PUSH2 0x0100
00000630: EXP
00000631: SWAP1
00000632: DIV
00000633: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000648: AND
00000649: DUP2
0000064a: JUMP
0000064b: JUMPDEST
0000064c: PUSH1 0x00
0000064e: PUSH1 0x00
00000650: PUSH1 0x02
00000652: PUSH1 0x00
00000654: POP
00000655: PUSH1 0x00
00000657: DUP5
00000658: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000066d: AND
0000066e: DUP2
0000066f: MSTORE
00000670: PUSH1 0x20
00000672: ADD
00000673: SWAP1
00000674: DUP2
00000675: MSTORE
00000676: PUSH1 0x20
00000678: ADD
00000679: PUSH1 0x00
0000067b: KECCAK256
0000067c: PUSH1 0x00
0000067e: POP
0000067f: PUSH1 0x00
00000681: ADD
00000682: PUSH1 0x00
00000684: POP
00000685: SLOAD
00000686: EQ
00000687: ISZERO
00000688: ISZERO
00000689: PUSH2 0x0699
0000068c: JUMPI
0000068d: PUSH1 0x01
0000068f: SWAP1
00000690: POP
00000691: PUSH2 0x06a3
00000694: JUMP
00000695: PUSH2 0x06a2
00000698: JUMP
00000699: JUMPDEST
0000069a: PUSH1 0x00
0000069c: SWAP1
0000069d: POP
0000069e: PUSH2 0x06a3
000006a1: JUMP
000006a2: JUMPDEST
000006a3: JUMPDEST
000006a4: SWAP2
000006a5: SWAP1
000006a6: POP
000006a7: JUMP
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
medium other detector Untrusted CALL target/value reachable 45 no no
view
trace_id: 0x5fc231b2ff3c8ef612fdd80b5f59cbd2155c665be81da2d371c74b3f527d5c5e
call_targets: 0x3963739d6728fa32e8e05699b48e0f42c46d7896
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x5fc231b2ff3c8ef612fdd80b5f59cbd2155c665be81da2d371c74b3f527d5c5e",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x3963739d6728fa32e8e05699b48e0f42c46d7896"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x1f83f440",
            "selector": "0x1f83f440",
            "calldata_variants": [
                "0x1f83f440",
                "0x1f83f4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41c0e1b5",
            "selector": "0x41c0e1b5",
            "calldata_variants": [
                "0x41c0e1b5",
                "0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4636a159",
            "selector": "0x4636a159",
            "calldata_variants": [
                "0x4636a159",
                "0x4636a1590000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa02b9aac",
            "selector": "0xa02b9aac",
            "calldata_variants": [
                "0xa02b9aac",
                "0xa02b9aac0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb958a5e1",
            "selector": "0xb958a5e1",
            "calldata_variants": [
                "0xb958a5e1",
                "0xb958a5e10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe3ffc9a3",
            "selector": "0xe3ffc9a3",
            "calldata_variants": [
                "0xe3ffc9a3",
                "0xe3ffc9a30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf3730653",
            "selector": "0xf3730653",
            "calldata_variants": [
                "0xf3730653",
                "0xf37306530000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xfe97ee88",
            "selector": "0xfe97ee88",
            "calldata_variants": [
                "0xfe97ee88",
                "0xfe97ee880000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 663,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [
        {
            "pc": 1015,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1112,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1517,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 1
}
medium other detector ETH value transfer possible 40 no no
view
trace_id: 0x5fc231b2ff3c8ef612fdd80b5f59cbd2155c665be81da2d371c74b3f527d5c5e
call_targets: 0x3963739d6728fa32e8e05699b48e0f42c46d7896
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x5fc231b2ff3c8ef612fdd80b5f59cbd2155c665be81da2d371c74b3f527d5c5e",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x3963739d6728fa32e8e05699b48e0f42c46d7896"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x1f83f440",
            "selector": "0x1f83f440",
            "calldata_variants": [
                "0x1f83f440",
                "0x1f83f4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41c0e1b5",
            "selector": "0x41c0e1b5",
            "calldata_variants": [
                "0x41c0e1b5",
                "0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4636a159",
            "selector": "0x4636a159",
            "calldata_variants": [
                "0x4636a159",
                "0x4636a1590000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa02b9aac",
            "selector": "0xa02b9aac",
            "calldata_variants": [
                "0xa02b9aac",
                "0xa02b9aac0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb958a5e1",
            "selector": "0xb958a5e1",
            "calldata_variants": [
                "0xb958a5e1",
                "0xb958a5e10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe3ffc9a3",
            "selector": "0xe3ffc9a3",
            "calldata_variants": [
                "0xe3ffc9a3",
                "0xe3ffc9a30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf3730653",
            "selector": "0xf3730653",
            "calldata_variants": [
                "0xf3730653",
                "0xf37306530000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xfe97ee88",
            "selector": "0xfe97ee88",
            "calldata_variants": [
                "0xfe97ee88",
                "0xfe97ee880000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 663,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": [
        {
            "pc": 1015,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1112,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1517,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ]
}