019b3836-4cf4-7003-a75d-2c596f5b1c91
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 7137 | artifact.fetch | complete | 1 / 3 | 4 months ago |
| 7138 | tool.cast_disasm | complete | 1 / 3 | 4 months ago |
| 50416 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 50417 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 50418 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 50419 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0xe0 00000007: PUSH1 0x02 00000009: EXP 0000000a: PUSH1 0x00 0000000c: CALLDATALOAD 0000000d: DIV 0000000e: PUSH4 0x35f46994 00000013: DUP2 00000014: EQ 00000015: PUSH2 0x0031 00000018: JUMPI 00000019: DUP1 0000001a: PUSH4 0x693ec85e 0000001f: EQ 00000020: PUSH2 0x0073 00000023: JUMPI 00000024: DUP1 00000025: PUSH4 0xe942b516 0000002a: EQ 0000002b: PUSH2 0x0167 0000002e: JUMPI 0000002f: JUMPDEST 00000030: STOP 00000031: JUMPDEST 00000032: PUSH2 0x002f 00000035: PUSH1 0x01 00000037: SLOAD 00000038: CALLER 00000039: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000004e: SWAP1 0000004f: DUP2 00000050: AND 00000051: SWAP2 00000052: AND 00000053: EQ 00000054: ISZERO 00000055: PUSH2 0x0364 00000058: JUMPI 00000059: PUSH1 0x01 0000005b: SLOAD 0000005c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000071: AND 00000072: SELFDESTRUCT 00000073: JUMPDEST 00000074: PUSH1 0x20 00000076: PUSH1 0x04 00000078: DUP1 00000079: CALLDATALOAD 0000007a: DUP1 0000007b: DUP3 0000007c: ADD 0000007d: CALLDATALOAD 0000007e: PUSH1 0x1f 00000080: DUP2 00000081: ADD 00000082: DUP5 00000083: SWAP1 00000084: DIV 00000085: SWAP1 00000086: SWAP4 00000087: MUL 00000088: PUSH1 0x80 0000008a: SWAP1 0000008b: DUP2 0000008c: ADD 0000008d: PUSH1 0x40 0000008f: MSTORE 00000090: PUSH1 0x60 00000092: DUP5 00000093: DUP2 00000094: MSTORE 00000095: PUSH2 0x0285 00000098: SWAP5 00000099: PUSH1 0x24 0000009b: SWAP4 0000009c: SWAP2 0000009d: SWAP3 0000009e: SWAP2 0000009f: DUP5 000000a0: ADD 000000a1: SWAP2 000000a2: DUP2 000000a3: SWAP1 000000a4: DUP4 000000a5: DUP3 000000a6: DUP1 000000a7: DUP3 000000a8: DUP5 000000a9: CALLDATACOPY 000000aa: POP 000000ab: POP 000000ac: PUSH1 0x40 000000ae: DUP1 000000af: MLOAD 000000b0: PUSH1 0x20 000000b2: DUP2 000000b3: DUP2 000000b4: ADD 000000b5: DUP4 000000b6: MSTORE 000000b7: PUSH1 0x00 000000b9: DUP1 000000ba: DUP4 000000bb: MSTORE 000000bc: SWAP3 000000bd: MLOAD 000000be: DUP9 000000bf: MLOAD 000000c0: SWAP9 000000c1: SWAP11 000000c2: SWAP3 000000c3: SWAP10 000000c4: POP 000000c5: SWAP3 000000c6: SWAP8 000000c7: DUP11 000000c8: SWAP8 000000c9: POP 000000ca: SWAP3 000000cb: SWAP6 000000cc: POP 000000cd: DUP6 000000ce: SWAP5 000000cf: POP 000000d0: DUP3 000000d1: SWAP2 000000d2: DUP6 000000d3: SWAP2 000000d4: DUP4 000000d5: SWAP2 000000d6: DUP7 000000d7: SWAP2 000000d8: DUP12 000000d9: SWAP2 000000da: SWAP1 000000db: PUSH1 0x1f 000000dd: DUP6 000000de: ADD 000000df: DIV 000000e0: PUSH1 0x0f 000000e2: MUL 000000e3: PUSH1 0x03 000000e5: ADD 000000e6: CALL 000000e7: POP 000000e8: SWAP1 000000e9: POP 000000ea: ADD 000000eb: SWAP2 000000ec: POP 000000ed: POP 000000ee: SWAP1 000000ef: DUP2 000000f0: MSTORE 000000f1: PUSH1 0x20 000000f3: ADD 000000f4: PUSH1 0x40 000000f6: MLOAD 000000f7: DUP1 000000f8: SWAP2 000000f9: SUB 000000fa: SWAP1 000000fb: KECCAK256 000000fc: PUSH1 0x00 000000fe: POP 000000ff: DUP1 00000100: SLOAD 00000101: PUSH1 0x01 00000103: DUP2 00000104: PUSH1 0x01 00000106: AND 00000107: ISZERO 00000108: PUSH2 0x0100 0000010b: MUL 0000010c: SUB 0000010d: AND 0000010e: PUSH1 0x02 00000110: SWAP1 00000111: DIV 00000112: DUP1 00000113: PUSH1 0x1f 00000115: ADD 00000116: PUSH1 0x20 00000118: DUP1 00000119: SWAP2 0000011a: DIV 0000011b: MUL 0000011c: PUSH1 0x20 0000011e: ADD 0000011f: PUSH1 0x40 00000121: MLOAD 00000122: SWAP1 00000123: DUP2 00000124: ADD 00000125: PUSH1 0x40 00000127: MSTORE 00000128: DUP1 00000129: SWAP3 0000012a: SWAP2 0000012b: SWAP1 0000012c: DUP2 0000012d: DUP2 0000012e: MSTORE 0000012f: PUSH1 0x20 00000131: ADD 00000132: DUP3 00000133: DUP1 00000134: SLOAD 00000135: PUSH1 0x01 00000137: DUP2 00000138: PUSH1 0x01 0000013a: AND 0000013b: ISZERO 0000013c: PUSH2 0x0100 0000013f: MUL 00000140: SUB 00000141: AND 00000142: PUSH1 0x02 00000144: SWAP1 00000145: DIV 00000146: DUP1 00000147: ISZERO 00000148: PUSH2 0x0358 0000014b: JUMPI 0000014c: DUP1 0000014d: PUSH1 0x1f 0000014f: LT 00000150: PUSH2 0x032d 00000153: JUMPI 00000154: PUSH2 0x0100 00000157: DUP1 00000158: DUP4 00000159: SLOAD 0000015a: DIV 0000015b: MUL 0000015c: DUP4 0000015d: MSTORE 0000015e: SWAP2 0000015f: PUSH1 0x20 00000161: ADD 00000162: SWAP2 00000163: PUSH2 0x0358 00000166: JUMP 00000167: JUMPDEST 00000168: PUSH1 0x20 0000016a: PUSH1 0x04 0000016c: DUP1 0000016d: CALLDATALOAD 0000016e: DUP1 0000016f: DUP3 00000170: ADD 00000171: CALLDATALOAD 00000172: PUSH1 0x1f 00000174: DUP2 00000175: ADD 00000176: DUP5 00000177: SWAP1 00000178: DIV 00000179: SWAP1 0000017a: SWAP4 0000017b: MUL 0000017c: PUSH1 0x80 0000017e: SWAP1 0000017f: DUP2 00000180: ADD 00000181: PUSH1 0x40 00000183: MSTORE 00000184: PUSH1 0x60 00000186: DUP5 00000187: DUP2 00000188: MSTORE 00000189: PUSH2 0x002f 0000018c: SWAP5 0000018d: PUSH1 0x24 0000018f: SWAP4 00000190: SWAP2 00000191: SWAP3 00000192: SWAP2 00000193: DUP5 00000194: ADD 00000195: SWAP2 00000196: DUP2 00000197: SWAP1 00000198: DUP4 00000199: DUP3 0000019a: DUP1 0000019b: DUP3 0000019c: DUP5 0000019d: CALLDATACOPY 0000019e: POP 0000019f: POP 000001a0: PUSH1 0x40 000001a2: DUP1 000001a3: MLOAD 000001a4: PUSH1 0x20 000001a6: DUP9 000001a7: CALLDATALOAD 000001a8: DUP1 000001a9: DUP12 000001aa: ADD 000001ab: CALLDATALOAD 000001ac: PUSH1 0x1f 000001ae: DUP2 000001af: ADD 000001b0: DUP4 000001b1: SWAP1 000001b2: DIV 000001b3: DUP4 000001b4: MUL 000001b5: DUP5 000001b6: ADD 000001b7: DUP4 000001b8: ADD 000001b9: SWAP1 000001ba: SWAP5 000001bb: MSTORE 000001bc: DUP4 000001bd: DUP4 000001be: MSTORE 000001bf: SWAP8 000001c0: SWAP10 000001c1: SWAP9 000001c2: PUSH1 0x44 000001c4: SWAP9 000001c5: SWAP3 000001c6: SWAP8 000001c7: POP 000001c8: SWAP2 000001c9: SWAP1 000001ca: SWAP2 000001cb: ADD 000001cc: SWAP5 000001cd: POP 000001ce: SWAP1 000001cf: SWAP3 000001d0: POP 000001d1: DUP3 000001d2: SWAP2 000001d3: POP 000001d4: DUP5 000001d5: ADD 000001d6: DUP4 000001d7: DUP3 000001d8: DUP1 000001d9: DUP3 000001da: DUP5 000001db: CALLDATACOPY 000001dc: POP 000001dd: SWAP5 000001de: SWAP7 000001df: POP 000001e0: POP 000001e1: POP 000001e2: POP 000001e3: POP 000001e4: POP 000001e5: POP 000001e6: PUSH1 0x40 000001e8: MLOAD 000001e9: DUP3 000001ea: MLOAD 000001eb: DUP3 000001ec: SWAP2 000001ed: PUSH1 0x00 000001ef: SWAP2 000001f0: DUP6 000001f1: SWAP2 000001f2: SWAP1 000001f3: DUP2 000001f4: SWAP1 000001f5: PUSH1 0x80 000001f7: SWAP1 000001f8: DUP1 000001f9: DUP4 000001fa: DUP2 000001fb: DUP5 000001fc: DUP10 000001fd: PUSH1 0x04 000001ff: PUSH1 0x03 00000201: PUSH1 0x0f 00000203: PUSH1 0x20 00000205: PUSH1 0x1f 00000207: DUP8 00000208: ADD 00000209: DIV 0000020a: MUL 0000020b: ADD 0000020c: CALL 0000020d: POP 0000020e: SWAP1 0000020f: POP 00000210: ADD 00000211: SWAP2 00000212: POP 00000213: POP 00000214: SWAP1 00000215: DUP2 00000216: MSTORE 00000217: PUSH1 0x20 00000219: ADD 0000021a: PUSH1 0x40 0000021c: MLOAD 0000021d: DUP1 0000021e: SWAP2 0000021f: SUB 00000220: SWAP1 00000221: KECCAK256 00000222: PUSH1 0x00 00000224: POP 00000225: SWAP1 00000226: DUP1 00000227: MLOAD 00000228: SWAP1 00000229: PUSH1 0x20 0000022b: ADD 0000022c: SWAP1 0000022d: DUP3 0000022e: DUP1 0000022f: SLOAD 00000230: PUSH1 0x01 00000232: DUP2 00000233: PUSH1 0x01 00000235: AND 00000236: ISZERO 00000237: PUSH2 0x0100 0000023a: MUL 0000023b: SUB 0000023c: AND 0000023d: PUSH1 0x02 0000023f: SWAP1 00000240: DIV 00000241: SWAP1 00000242: PUSH1 0x00 00000244: MSTORE 00000245: PUSH1 0x20 00000247: PUSH1 0x00 00000249: KECCAK256 0000024a: SWAP1 0000024b: PUSH1 0x1f 0000024d: ADD 0000024e: PUSH1 0x20 00000250: SWAP1 00000251: DIV 00000252: DUP2 00000253: ADD 00000254: SWAP3 00000255: DUP3 00000256: PUSH1 0x1f 00000258: LT 00000259: PUSH2 0x02f3 0000025c: JUMPI 0000025d: DUP1 0000025e: MLOAD 0000025f: PUSH1 0xff 00000261: NOT 00000262: AND 00000263: DUP4 00000264: DUP1 00000265: ADD 00000266: OR 00000267: DUP6 00000268: SSTORE 00000269: JUMPDEST 0000026a: POP 0000026b: PUSH2 0x0323 0000026e: SWAP3 0000026f: SWAP2 00000270: POP 00000271: JUMPDEST 00000272: DUP1 00000273: DUP3 00000274: GT 00000275: ISZERO 00000276: PUSH2 0x0329 00000279: JUMPI 0000027a: PUSH1 0x00 0000027c: DUP2 0000027d: SSTORE 0000027e: PUSH1 0x01 00000280: ADD 00000281: PUSH2 0x0271 00000284: JUMP 00000285: JUMPDEST 00000286: PUSH1 0x40 00000288: MLOAD 00000289: DUP1 0000028a: DUP1 0000028b: PUSH1 0x20 0000028d: ADD 0000028e: DUP3 0000028f: DUP2 00000290: SUB 00000291: DUP3 00000292: MSTORE 00000293: DUP4 00000294: DUP2 00000295: DUP2 00000296: MLOAD 00000297: DUP2 00000298: MSTORE 00000299: PUSH1 0x20 0000029b: ADD 0000029c: SWAP2 0000029d: POP 0000029e: DUP1 0000029f: MLOAD 000002a0: SWAP1 000002a1: PUSH1 0x20 000002a3: ADD 000002a4: SWAP1 000002a5: DUP1 000002a6: DUP4 000002a7: DUP4 000002a8: DUP3 000002a9: SWAP1 000002aa: PUSH1 0x00 000002ac: PUSH1 0x04 000002ae: PUSH1 0x20 000002b0: DUP5 000002b1: PUSH1 0x1f 000002b3: ADD 000002b4: DIV 000002b5: PUSH1 0x0f 000002b7: MUL 000002b8: PUSH1 0x03 000002ba: ADD 000002bb: CALL 000002bc: POP 000002bd: SWAP1 000002be: POP 000002bf: SWAP1 000002c0: DUP2 000002c1: ADD 000002c2: SWAP1 000002c3: PUSH1 0x1f 000002c5: AND 000002c6: DUP1 000002c7: ISZERO 000002c8: PUSH2 0x02e5 000002cb: JUMPI 000002cc: DUP1 000002cd: DUP3 000002ce: SUB 000002cf: DUP1 000002d0: MLOAD 000002d1: PUSH1 0x01 000002d3: DUP4 000002d4: PUSH1 0x20 000002d6: SUB 000002d7: PUSH2 0x0100 000002da: EXP 000002db: SUB 000002dc: NOT 000002dd: AND 000002de: DUP2 000002df: MSTORE 000002e0: PUSH1 0x20 000002e2: ADD 000002e3: SWAP2 000002e4: POP 000002e5: JUMPDEST 000002e6: POP 000002e7: SWAP3 000002e8: POP 000002e9: POP 000002ea: POP 000002eb: PUSH1 0x40 000002ed: MLOAD 000002ee: DUP1 000002ef: SWAP2 000002f0: SUB 000002f1: SWAP1 000002f2: RETURN 000002f3: JUMPDEST 000002f4: DUP3 000002f5: DUP1 000002f6: ADD 000002f7: PUSH1 0x01 000002f9: ADD 000002fa: DUP6 000002fb: SSTORE 000002fc: DUP3 000002fd: ISZERO 000002fe: PUSH2 0x0269 00000301: JUMPI 00000302: SWAP2 00000303: DUP3 00000304: ADD 00000305: JUMPDEST 00000306: DUP3 00000307: DUP2 00000308: GT 00000309: ISZERO 0000030a: PUSH2 0x0269 0000030d: JUMPI 0000030e: DUP3 0000030f: MLOAD 00000310: DUP3 00000311: PUSH1 0x00 00000313: POP 00000314: SSTORE 00000315: SWAP2 00000316: PUSH1 0x20 00000318: ADD 00000319: SWAP2 0000031a: SWAP1 0000031b: PUSH1 0x01 0000031d: ADD 0000031e: SWAP1 0000031f: PUSH2 0x0305 00000322: JUMP 00000323: JUMPDEST 00000324: POP 00000325: POP 00000326: POP 00000327: POP 00000328: JUMP 00000329: JUMPDEST 0000032a: POP 0000032b: SWAP1 0000032c: JUMP 0000032d: JUMPDEST 0000032e: DUP3 0000032f: ADD 00000330: SWAP2 00000331: SWAP1 00000332: PUSH1 0x00 00000334: MSTORE 00000335: PUSH1 0x20 00000337: PUSH1 0x00 00000339: KECCAK256 0000033a: SWAP1 0000033b: JUMPDEST 0000033c: DUP2 0000033d: SLOAD 0000033e: DUP2 0000033f: MSTORE 00000340: SWAP1 00000341: PUSH1 0x01 00000343: ADD 00000344: SWAP1 00000345: PUSH1 0x20 00000347: ADD 00000348: DUP1 00000349: DUP4 0000034a: GT 0000034b: PUSH2 0x033b 0000034e: JUMPI 0000034f: DUP3 00000350: SWAP1 00000351: SUB 00000352: PUSH1 0x1f 00000354: AND 00000355: DUP3 00000356: ADD 00000357: SWAP2 00000358: JUMPDEST 00000359: POP 0000035a: POP 0000035b: POP 0000035c: POP 0000035d: POP 0000035e: SWAP1 0000035f: POP 00000360: SWAP2 00000361: SWAP1 00000362: POP 00000363: JUMP 00000364: JUMPDEST 00000365: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xc368709d6a7a7d6ba7e16f99877d082fb8f7c1eeb0500a0587a7edecae246fd7
call_targets:
0x63ffd975bba4bbef63d0afe282e9cd07e6ae9869
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xc368709d6a7a7d6ba7e16f99877d082fb8f7c1eeb0500a0587a7edecae246fd7",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x63ffd975bba4bbef63d0afe282e9cd07e6ae9869"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x35f46994",
"selector": "0x35f46994",
"calldata_variants": [
"0x35f46994",
"0x35f469940000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x693ec85e",
"selector": "0x693ec85e",
"calldata_variants": [
"0x693ec85e",
"0x693ec85e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe942b516",
"selector": "0xe942b516",
"calldata_variants": [
"0xe942b516",
"0xe942b5160000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 230,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 524,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 699,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 3,
"guards_detected": [],
"untrusted_call_count": 3
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xc368709d6a7a7d6ba7e16f99877d082fb8f7c1eeb0500a0587a7edecae246fd7
call_targets:
0x63ffd975bba4bbef63d0afe282e9cd07e6ae9869
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xc368709d6a7a7d6ba7e16f99877d082fb8f7c1eeb0500a0587a7edecae246fd7",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x63ffd975bba4bbef63d0afe282e9cd07e6ae9869"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x35f46994",
"selector": "0x35f46994",
"calldata_variants": [
"0x35f46994",
"0x35f469940000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x693ec85e",
"selector": "0x693ec85e",
"calldata_variants": [
"0x693ec85e",
"0x693ec85e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe942b516",
"selector": "0xe942b516",
"calldata_variants": [
"0xe942b516",
"0xe942b5160000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 230,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 524,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 699,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 3,
"guards_detected": []
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0x52fc9957e805c4ab17787fd79fc7ea601cffda7b064c959f2de6a105d816f566
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 6,
"trace_id": "0x52fc9957e805c4ab17787fd79fc7ea601cffda7b064c959f2de6a105d816f566",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x35f46994",
"selector": "0x35f46994",
"calldata_variants": [
"0x35f46994",
"0x35f469940000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x693ec85e",
"selector": "0x693ec85e",
"calldata_variants": [
"0x693ec85e",
"0x693ec85e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe942b516",
"selector": "0xe942b516",
"calldata_variants": [
"0xe942b516",
"0xe942b5160000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|