019b3836-5000-7201-805d-4133c5d721af
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 7603 | artifact.fetch | complete | 1 / 3 | 4 months ago |
| 7604 | tool.cast_disasm | complete | 1 / 3 | 4 months ago |
| 82251 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 82252 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 82253 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 82254 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0xe0 00000007: PUSH1 0x02 00000009: EXP 0000000a: PUSH1 0x00 0000000c: CALLDATALOAD 0000000d: DIV 0000000e: PUSH4 0xce684b85 00000013: DUP2 00000014: EQ 00000015: PUSH1 0x2e 00000017: JUMPI 00000018: DUP1 00000019: PUSH4 0xde2ed893 0000001e: EQ 0000001f: PUSH1 0x59 00000021: JUMPI 00000022: DUP1 00000023: PUSH4 0xed88c68e 00000028: EQ 00000029: PUSH1 0x61 0000002b: JUMPI 0000002c: JUMPDEST 0000002d: STOP 0000002e: JUMPDEST 0000002f: PUSH1 0x2c 00000031: PUSH1 0x04 00000033: CALLDATALOAD 00000034: PUSH1 0x00 00000036: SLOAD 00000037: CALLER 00000038: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000004d: SWAP1 0000004e: DUP2 0000004f: AND 00000050: SWAP2 00000051: AND 00000052: EQ 00000053: PUSH1 0xa4 00000055: JUMPI 00000056: PUSH1 0x02 00000058: JUMP 00000059: JUMPDEST 0000005a: PUSH1 0x9a 0000005c: PUSH1 0x01 0000005e: SLOAD 0000005f: DUP2 00000060: JUMP 00000061: JUMPDEST 00000062: PUSH1 0x2c 00000064: PUSH1 0x01 00000066: DUP1 00000067: SLOAD 00000068: CALLVALUE 00000069: SWAP1 0000006a: DUP2 0000006b: ADD 0000006c: SWAP1 0000006d: SWAP2 0000006e: SSTORE 0000006f: PUSH1 0x00 00000071: DUP1 00000072: SLOAD 00000073: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000088: AND 00000089: SWAP2 0000008a: PUSH1 0x60 0000008c: DUP3 0000008d: DUP2 0000008e: DUP2 0000008f: DUP2 00000090: DUP6 00000091: DUP9 00000092: DUP4 00000093: CALL 00000094: POP 00000095: POP 00000096: POP 00000097: POP 00000098: POP 00000099: JUMP 0000009a: JUMPDEST 0000009b: PUSH1 0x60 0000009d: SWAP1 0000009e: DUP2 0000009f: MSTORE 000000a0: PUSH1 0x20 000000a2: SWAP1 000000a3: RETURN 000000a4: JUMPDEST 000000a5: PUSH1 0x00 000000a7: DUP1 000000a8: SLOAD 000000a9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000be: NOT 000000bf: AND 000000c0: DUP3 000000c1: OR 000000c2: SWAP1 000000c3: SSTORE 000000c4: POP 000000c5: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x558f60aafde5512ca162e9e36434b7d1f7053f72ca69ad6bd96ab85d10191f63
call_targets:
0x106bc38ae3ec60e6a4cd1a50762feca1cd5f0ef7
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x558f60aafde5512ca162e9e36434b7d1f7053f72ca69ad6bd96ab85d10191f63",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x106bc38ae3ec60e6a4cd1a50762feca1cd5f0ef7"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xce684b85",
"selector": "0xce684b85",
"calldata_variants": [
"0xce684b85",
"0xce684b850000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xde2ed893",
"selector": "0xde2ed893",
"calldata_variants": [
"0xde2ed893",
"0xde2ed8930000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xed88c68e",
"selector": "0xed88c68e",
"calldata_variants": [
"0xed88c68e",
"0xed88c68e0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 147,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x558f60aafde5512ca162e9e36434b7d1f7053f72ca69ad6bd96ab85d10191f63
call_targets:
0x106bc38ae3ec60e6a4cd1a50762feca1cd5f0ef7
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x558f60aafde5512ca162e9e36434b7d1f7053f72ca69ad6bd96ab85d10191f63",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x106bc38ae3ec60e6a4cd1a50762feca1cd5f0ef7"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xce684b85",
"selector": "0xce684b85",
"calldata_variants": [
"0xce684b85",
"0xce684b850000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xde2ed893",
"selector": "0xde2ed893",
"calldata_variants": [
"0xde2ed893",
"0xde2ed8930000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xed88c68e",
"selector": "0xed88c68e",
"calldata_variants": [
"0xed88c68e",
"0xed88c68e0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 147,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|