019b3836-55a3-7237-901f-f524ac4012c4
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 8289 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 8290 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 98014 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 98015 | capability.graph | complete | 1 / 3 | 1 week ago |
| 98016 | detector.run | complete | 1 / 3 | 1 week ago |
| 98017 | validation.fork | complete | 1 / 3 | 1 week ago |
| 113837 | report.consolidate | complete | 1 / 6 | 1 week ago |
No slither job recorded yet.
OpenAI Codex v0.118.0 (research preview) -------- workdir: /tmp/codex-apk18d1h model: gpt-5.4 provider: openai approval: never sandbox: read-only reasoning effort: high reasoning summaries: none session id: 019d5ca0-3b20-7ca2-a5a1-b3343a8d5c80 -------- user You are a security auditor. You ONLY have runtime bytecode + analysis artifacts. You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary, evidence bundle, callsites, storage slots, and detector findings. Special cases when reasoning from bytecode (be explicit about uncertainty): - Selector inference is best-effort; missing selectors are common. - Fallback/receive paths may be the only entrypoints. - CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage. - Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative. - Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown. - Guard detection is heuristic; absence of guards does NOT mean unguarded. - Returndata checking is unknown unless explicitly shown in evidence. - Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim. Output MUST be valid JSON matching the provided schema. - If you find nothing meaningful: set no_findings=true and findings=[]. - Otherwise: set no_findings=false and include findings with severity/category/title. - Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb". Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, accounting/invariant breaks, dangerous delegatecall, and untrusted external calls. Be conservative: if evidence is weak, mark severity low/medium and explain why. warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
{
"codex": {
"ran_at": "2026-04-05T07:51:39.754317+00:00",
"returncode": 1
},
"project": {
"mode": "bytecode",
"bytecode_length": 4510,
"bytecode_truncated": false,
"capability_graph_present": true,
"analysis_artifact_present": true
},
"summary": null,
"no_findings": null,
"schema_version": 1
}
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x00c4 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x06fdde03 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x00cc 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x095bcdb6 00000025: EQ 00000026: PUSH2 0x0129 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x18160ddd 00000030: EQ 00000031: PUSH2 0x015b 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x313ce567 0000003b: EQ 0000003c: PUSH2 0x0164 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0x5a3b7e42 00000046: EQ 00000047: PUSH2 0x0170 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0x61e3564f 00000051: EQ 00000052: PUSH2 0x01ca 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0x6bc40dde 0000005c: EQ 0000005d: PUSH2 0x01ef 00000060: JUMPI 00000061: DUP1 00000062: PUSH4 0x70a08231 00000067: EQ 00000068: PUSH2 0x0201 0000006b: JUMPI 0000006c: DUP1 0000006d: PUSH4 0x79c65068 00000072: EQ 00000073: PUSH2 0x0219 00000076: JUMPI 00000077: DUP1 00000078: PUSH4 0x95d89b41 0000007d: EQ 0000007e: PUSH2 0x023d 00000081: JUMPI 00000082: DUP1 00000083: PUSH4 0x9a4a0fb2 00000088: EQ 00000089: PUSH2 0x0299 0000008c: JUMPI 0000008d: DUP1 0000008e: PUSH4 0xb25fa0b0 00000093: EQ 00000094: PUSH2 0x02ab 00000097: JUMPI 00000098: DUP1 00000099: PUSH4 0xbcc37dd4 0000009e: EQ 0000009f: PUSH2 0x02cd 000000a2: JUMPI 000000a3: DUP1 000000a4: PUSH4 0xdb5cb3ac 000000a9: EQ 000000aa: PUSH2 0x02e8 000000ad: JUMPI 000000ae: DUP1 000000af: PUSH4 0xdd62ed3e 000000b4: EQ 000000b5: PUSH2 0x032f 000000b8: JUMPI 000000b9: DUP1 000000ba: PUSH4 0xfe99ad5a 000000bf: EQ 000000c0: PUSH2 0x0354 000000c3: JUMPI 000000c4: JUMPDEST 000000c5: PUSH2 0x0375 000000c8: PUSH2 0x0002 000000cb: JUMP 000000cc: JUMPDEST 000000cd: PUSH2 0x0377 000000d0: PUSH1 0x03 000000d2: DUP1 000000d3: SLOAD 000000d4: PUSH1 0x20 000000d6: PUSH1 0x02 000000d8: PUSH1 0x01 000000da: DUP4 000000db: AND 000000dc: ISZERO 000000dd: PUSH2 0x0100 000000e0: MUL 000000e1: PUSH1 0x00 000000e3: NOT 000000e4: ADD 000000e5: SWAP1 000000e6: SWAP3 000000e7: AND 000000e8: SWAP2 000000e9: SWAP1 000000ea: SWAP2 000000eb: DIV 000000ec: PUSH1 0x1f 000000ee: DUP2 000000ef: ADD 000000f0: DUP3 000000f1: SWAP1 000000f2: DIV 000000f3: SWAP1 000000f4: SWAP2 000000f5: MUL 000000f6: PUSH1 0x80 000000f8: SWAP1 000000f9: DUP2 000000fa: ADD 000000fb: PUSH1 0x40 000000fd: MSTORE 000000fe: PUSH1 0x60 00000100: DUP3 00000101: DUP2 00000102: MSTORE 00000103: SWAP3 00000104: SWAP2 00000105: SWAP1 00000106: DUP3 00000107: DUP3 00000108: DUP1 00000109: ISZERO 0000010a: PUSH2 0x0439 0000010d: JUMPI 0000010e: DUP1 0000010f: PUSH1 0x1f 00000111: LT 00000112: PUSH2 0x040e 00000115: JUMPI 00000116: PUSH2 0x0100 00000119: DUP1 0000011a: DUP4 0000011b: SLOAD 0000011c: DIV 0000011d: MUL 0000011e: DUP4 0000011f: MSTORE 00000120: SWAP2 00000121: PUSH1 0x20 00000123: ADD 00000124: SWAP2 00000125: PUSH2 0x0439 00000128: JUMP 00000129: JUMPDEST 0000012a: PUSH2 0x0375 0000012d: PUSH1 0x04 0000012f: CALLDATALOAD 00000130: PUSH1 0x24 00000132: CALLDATALOAD 00000133: PUSH1 0x44 00000135: CALLDATALOAD 00000136: CALLER 00000137: PUSH1 0x01 00000139: PUSH1 0xa0 0000013b: PUSH1 0x02 0000013d: EXP 0000013e: SUB 0000013f: AND 00000140: PUSH1 0x00 00000142: SWAP1 00000143: DUP2 00000144: MSTORE 00000145: PUSH1 0x07 00000147: PUSH1 0x20 00000149: MSTORE 0000014a: PUSH1 0x40 0000014c: SWAP1 0000014d: KECCAK256 0000014e: SLOAD 0000014f: DUP3 00000150: SWAP1 00000151: LT 00000152: ISZERO 00000153: PUSH2 0x0441 00000156: JUMPI 00000157: PUSH2 0x0002 0000015a: JUMP 0000015b: JUMPDEST 0000015c: PUSH2 0x03e5 0000015f: PUSH1 0x09 00000161: SLOAD 00000162: DUP2 00000163: JUMP 00000164: JUMPDEST 00000165: PUSH2 0x03e5 00000168: PUSH1 0x05 0000016a: SLOAD 0000016b: PUSH1 0xff 0000016d: AND 0000016e: DUP2 0000016f: JUMP 00000170: JUMPDEST 00000171: PUSH2 0x0377 00000174: PUSH1 0x02 00000176: DUP1 00000177: SLOAD 00000178: PUSH1 0x20 0000017a: PUSH1 0x01 0000017c: DUP3 0000017d: AND 0000017e: ISZERO 0000017f: PUSH2 0x0100 00000182: MUL 00000183: PUSH1 0x00 00000185: NOT 00000186: ADD 00000187: SWAP1 00000188: SWAP2 00000189: AND 0000018a: DUP3 0000018b: SWAP1 0000018c: DIV 0000018d: PUSH1 0x1f 0000018f: DUP2 00000190: ADD 00000191: DUP3 00000192: SWAP1 00000193: DIV 00000194: SWAP1 00000195: SWAP2 00000196: MUL 00000197: PUSH1 0x80 00000199: SWAP1 0000019a: DUP2 0000019b: ADD 0000019c: PUSH1 0x40 0000019e: MSTORE 0000019f: PUSH1 0x60 000001a1: DUP3 000001a2: DUP2 000001a3: MSTORE 000001a4: SWAP3 000001a5: SWAP2 000001a6: SWAP1 000001a7: DUP3 000001a8: DUP3 000001a9: DUP1 000001aa: ISZERO 000001ab: PUSH2 0x0439 000001ae: JUMPI 000001af: DUP1 000001b0: PUSH1 0x1f 000001b2: LT 000001b3: PUSH2 0x040e 000001b6: JUMPI 000001b7: PUSH2 0x0100 000001ba: DUP1 000001bb: DUP4 000001bc: SLOAD 000001bd: DIV 000001be: MUL 000001bf: DUP4 000001c0: MSTORE 000001c1: SWAP2 000001c2: PUSH1 0x20 000001c4: ADD 000001c5: SWAP2 000001c6: PUSH2 0x0439 000001c9: JUMP 000001ca: JUMPDEST 000001cb: PUSH2 0x0375 000001ce: PUSH1 0x04 000001d0: CALLDATALOAD 000001d1: PUSH1 0x24 000001d3: CALLDATALOAD 000001d4: PUSH1 0x01 000001d6: SLOAD 000001d7: PUSH1 0x01 000001d9: PUSH1 0xa0 000001db: PUSH1 0x02 000001dd: EXP 000001de: SUB 000001df: SWAP1 000001e0: DUP2 000001e1: AND 000001e2: CALLER 000001e3: SWAP1 000001e4: SWAP2 000001e5: AND 000001e6: EQ 000001e7: PUSH2 0x052e 000001ea: JUMPI 000001eb: PUSH2 0x0002 000001ee: JUMP 000001ef: JUMPDEST 000001f0: PUSH2 0x03ef 000001f3: PUSH1 0x01 000001f5: SLOAD 000001f6: PUSH1 0x01 000001f8: PUSH1 0xa0 000001fa: PUSH1 0x02 000001fc: EXP 000001fd: SUB 000001fe: AND 000001ff: DUP2 00000200: JUMP 00000201: JUMPDEST 00000202: PUSH2 0x03e5 00000205: PUSH1 0x04 00000207: CALLDATALOAD 00000208: PUSH1 0x07 0000020a: PUSH1 0x20 0000020c: MSTORE 0000020d: PUSH1 0x00 0000020f: SWAP1 00000210: DUP2 00000211: MSTORE 00000212: PUSH1 0x40 00000214: SWAP1 00000215: KECCAK256 00000216: SLOAD 00000217: DUP2 00000218: JUMP 00000219: JUMPDEST 0000021a: PUSH2 0x0375 0000021d: PUSH1 0x04 0000021f: CALLDATALOAD 00000220: PUSH1 0x24 00000222: CALLDATALOAD 00000223: PUSH1 0x00 00000225: SLOAD 00000226: CALLER 00000227: PUSH1 0x01 00000229: PUSH1 0xa0 0000022b: PUSH1 0x02 0000022d: EXP 0000022e: SUB 0000022f: SWAP1 00000230: DUP2 00000231: AND 00000232: SWAP2 00000233: AND 00000234: EQ 00000235: PUSH2 0x0584 00000238: JUMPI 00000239: PUSH2 0x0002 0000023c: JUMP 0000023d: JUMPDEST 0000023e: PUSH2 0x0377 00000241: PUSH1 0x04 00000243: DUP1 00000244: SLOAD 00000245: PUSH1 0x20 00000247: PUSH1 0x1f 00000249: PUSH1 0x02 0000024b: PUSH1 0x01 0000024d: DUP5 0000024e: AND 0000024f: ISZERO 00000250: PUSH2 0x0100 00000253: MUL 00000254: PUSH1 0x00 00000256: NOT 00000257: ADD 00000258: SWAP1 00000259: SWAP4 0000025a: AND 0000025b: SWAP3 0000025c: SWAP1 0000025d: SWAP3 0000025e: DIV 0000025f: SWAP2 00000260: DUP3 00000261: ADD 00000262: DUP2 00000263: SWAP1 00000264: DIV 00000265: MUL 00000266: PUSH1 0x80 00000268: SWAP1 00000269: DUP2 0000026a: ADD 0000026b: PUSH1 0x40 0000026d: MSTORE 0000026e: PUSH1 0x60 00000270: DUP3 00000271: DUP2 00000272: MSTORE 00000273: SWAP3 00000274: SWAP2 00000275: SWAP1 00000276: DUP3 00000277: DUP3 00000278: DUP1 00000279: ISZERO 0000027a: PUSH2 0x0439 0000027d: JUMPI 0000027e: DUP1 0000027f: PUSH1 0x1f 00000281: LT 00000282: PUSH2 0x040e 00000285: JUMPI 00000286: PUSH2 0x0100 00000289: DUP1 0000028a: DUP4 0000028b: SLOAD 0000028c: DIV 0000028d: MUL 0000028e: DUP4 0000028f: MSTORE 00000290: SWAP2 00000291: PUSH1 0x20 00000293: ADD 00000294: SWAP2 00000295: PUSH2 0x0439 00000298: JUMP 00000299: JUMPDEST 0000029a: PUSH2 0x03ef 0000029d: PUSH1 0x00 0000029f: SLOAD 000002a0: PUSH1 0x01 000002a2: PUSH1 0xa0 000002a4: PUSH1 0x02 000002a6: EXP 000002a7: SUB 000002a8: AND 000002a9: DUP2 000002aa: JUMP 000002ab: JUMPDEST 000002ac: PUSH2 0x0375 000002af: PUSH1 0x04 000002b1: CALLDATALOAD 000002b2: PUSH1 0x01 000002b4: SLOAD 000002b5: PUSH1 0x01 000002b7: PUSH1 0xa0 000002b9: PUSH1 0x02 000002bb: EXP 000002bc: SUB 000002bd: SWAP1 000002be: DUP2 000002bf: AND 000002c0: CALLER 000002c1: SWAP1 000002c2: SWAP2 000002c3: AND 000002c4: EQ 000002c5: PUSH2 0x0628 000002c8: JUMPI 000002c9: PUSH2 0x0002 000002cc: JUMP 000002cd: JUMPDEST 000002ce: PUSH2 0x0402 000002d1: PUSH1 0x04 000002d3: CALLDATALOAD 000002d4: PUSH1 0x06 000002d6: PUSH1 0x20 000002d8: MSTORE 000002d9: PUSH1 0x00 000002db: SWAP1 000002dc: DUP2 000002dd: MSTORE 000002de: PUSH1 0x40 000002e0: SWAP1 000002e1: KECCAK256 000002e2: SLOAD 000002e3: PUSH1 0xff 000002e5: AND 000002e6: DUP2 000002e7: JUMP 000002e8: JUMPDEST 000002e9: PUSH2 0x0375 000002ec: PUSH1 0x04 000002ee: CALLDATALOAD 000002ef: PUSH1 0x24 000002f1: CALLDATALOAD 000002f2: PUSH1 0x44 000002f4: CALLDATALOAD 000002f5: PUSH1 0x64 000002f7: CALLDATALOAD 000002f8: PUSH1 0x84 000002fa: CALLDATALOAD 000002fb: PUSH1 0xa4 000002fd: CALLDATALOAD 000002fe: PUSH1 0xc4 00000300: CALLDATALOAD 00000301: PUSH1 0xe4 00000303: CALLDATALOAD 00000304: PUSH2 0x0104 00000307: CALLDATALOAD 00000308: PUSH1 0x01 0000030a: PUSH1 0xa0 0000030c: PUSH1 0x02 0000030e: EXP 0000030f: SUB 00000310: DUP10 00000311: AND 00000312: PUSH1 0x00 00000314: SWAP1 00000315: DUP2 00000316: MSTORE 00000317: PUSH1 0x07 00000319: PUSH1 0x20 0000031b: MSTORE 0000031c: PUSH1 0x40 0000031e: SWAP1 0000031f: KECCAK256 00000320: SLOAD 00000321: DUP6 00000322: DUP9 00000323: ADD 00000324: SWAP1 00000325: LT 00000326: ISZERO 00000327: PUSH2 0x064a 0000032a: JUMPI 0000032b: PUSH2 0x0002 0000032e: JUMP 0000032f: JUMPDEST 00000330: PUSH1 0x08 00000332: PUSH1 0x20 00000334: SWAP1 00000335: DUP2 00000336: MSTORE 00000337: PUSH1 0x04 00000339: CALLDATALOAD 0000033a: PUSH1 0x00 0000033c: SWAP1 0000033d: DUP2 0000033e: MSTORE 0000033f: PUSH1 0x40 00000341: DUP1 00000342: DUP3 00000343: KECCAK256 00000344: SWAP1 00000345: SWAP3 00000346: MSTORE 00000347: PUSH1 0x24 00000349: CALLDATALOAD 0000034a: DUP2 0000034b: MSTORE 0000034c: KECCAK256 0000034d: SLOAD 0000034e: PUSH2 0x03e5 00000351: SWAP1 00000352: DUP2 00000353: JUMP 00000354: JUMPDEST 00000355: PUSH2 0x0375 00000358: PUSH1 0x04 0000035a: CALLDATALOAD 0000035b: PUSH1 0x00 0000035d: SLOAD 0000035e: CALLER 0000035f: PUSH1 0x01 00000361: PUSH1 0xa0 00000363: PUSH1 0x02 00000365: EXP 00000366: SUB 00000367: SWAP1 00000368: DUP2 00000369: AND 0000036a: SWAP2 0000036b: AND 0000036c: EQ 0000036d: PUSH2 0x088c 00000370: JUMPI 00000371: PUSH2 0x0002 00000374: JUMP 00000375: JUMPDEST 00000376: STOP 00000377: JUMPDEST 00000378: PUSH1 0x40 0000037a: MLOAD 0000037b: DUP1 0000037c: DUP1 0000037d: PUSH1 0x20 0000037f: ADD 00000380: DUP3 00000381: DUP2 00000382: SUB 00000383: DUP3 00000384: MSTORE 00000385: DUP4 00000386: DUP2 00000387: DUP2 00000388: MLOAD 00000389: DUP2 0000038a: MSTORE 0000038b: PUSH1 0x20 0000038d: ADD 0000038e: SWAP2 0000038f: POP 00000390: DUP1 00000391: MLOAD 00000392: SWAP1 00000393: PUSH1 0x20 00000395: ADD 00000396: SWAP1 00000397: DUP1 00000398: DUP4 00000399: DUP4 0000039a: DUP3 0000039b: SWAP1 0000039c: PUSH1 0x00 0000039e: PUSH1 0x04 000003a0: PUSH1 0x20 000003a2: DUP5 000003a3: PUSH1 0x1f 000003a5: ADD 000003a6: DIV 000003a7: PUSH1 0x0f 000003a9: MUL 000003aa: PUSH1 0x03 000003ac: ADD 000003ad: CALL 000003ae: POP 000003af: SWAP1 000003b0: POP 000003b1: SWAP1 000003b2: DUP2 000003b3: ADD 000003b4: SWAP1 000003b5: PUSH1 0x1f 000003b7: AND 000003b8: DUP1 000003b9: ISZERO 000003ba: PUSH2 0x03d7 000003bd: JUMPI 000003be: DUP1 000003bf: DUP3 000003c0: SUB 000003c1: DUP1 000003c2: MLOAD 000003c3: PUSH1 0x01 000003c5: DUP4 000003c6: PUSH1 0x20 000003c8: SUB 000003c9: PUSH2 0x0100 000003cc: EXP 000003cd: SUB 000003ce: NOT 000003cf: AND 000003d0: DUP2 000003d1: MSTORE 000003d2: PUSH1 0x20 000003d4: ADD 000003d5: SWAP2 000003d6: POP 000003d7: JUMPDEST 000003d8: POP 000003d9: SWAP3 000003da: POP 000003db: POP 000003dc: POP 000003dd: PUSH1 0x40 000003df: MLOAD 000003e0: DUP1 000003e1: SWAP2 000003e2: SUB 000003e3: SWAP1 000003e4: RETURN 000003e5: JUMPDEST 000003e6: PUSH1 0x60 000003e8: SWAP1 000003e9: DUP2 000003ea: MSTORE 000003eb: PUSH1 0x20 000003ed: SWAP1 000003ee: RETURN 000003ef: JUMPDEST 000003f0: PUSH1 0x01 000003f2: PUSH1 0xa0 000003f4: PUSH1 0x02 000003f6: EXP 000003f7: SUB 000003f8: AND 000003f9: PUSH1 0x60 000003fb: SWAP1 000003fc: DUP2 000003fd: MSTORE 000003fe: PUSH1 0x20 00000400: SWAP1 00000401: RETURN 00000402: JUMPDEST 00000403: ISZERO 00000404: ISZERO 00000405: PUSH1 0x60 00000407: SWAP1 00000408: DUP2 00000409: MSTORE 0000040a: PUSH1 0x20 0000040c: SWAP1 0000040d: RETURN 0000040e: JUMPDEST 0000040f: DUP3 00000410: ADD 00000411: SWAP2 00000412: SWAP1 00000413: PUSH1 0x00 00000415: MSTORE 00000416: PUSH1 0x20 00000418: PUSH1 0x00 0000041a: KECCAK256 0000041b: SWAP1 0000041c: JUMPDEST 0000041d: DUP2 0000041e: SLOAD 0000041f: DUP2 00000420: MSTORE 00000421: SWAP1 00000422: PUSH1 0x01 00000424: ADD 00000425: SWAP1 00000426: PUSH1 0x20 00000428: ADD 00000429: DUP1 0000042a: DUP4 0000042b: GT 0000042c: PUSH2 0x041c 0000042f: JUMPI 00000430: DUP3 00000431: SWAP1 00000432: SUB 00000433: PUSH1 0x1f 00000435: AND 00000436: DUP3 00000437: ADD 00000438: SWAP2 00000439: JUMPDEST 0000043a: POP 0000043b: POP 0000043c: POP 0000043d: POP 0000043e: POP 0000043f: DUP2 00000440: JUMP 00000441: JUMPDEST 00000442: PUSH1 0x01 00000444: PUSH1 0xa0 00000446: PUSH1 0x02 00000448: EXP 00000449: SUB 0000044a: DUP4 0000044b: AND 0000044c: PUSH1 0x00 0000044e: SWAP1 0000044f: DUP2 00000450: MSTORE 00000451: PUSH1 0x40 00000453: SWAP1 00000454: KECCAK256 00000455: SLOAD 00000456: DUP1 00000457: DUP4 00000458: ADD 00000459: LT 0000045a: ISZERO 0000045b: PUSH2 0x0463 0000045e: JUMPI 0000045f: PUSH2 0x0002 00000462: JUMP 00000463: JUMPDEST 00000464: CALLER 00000465: PUSH1 0x01 00000467: PUSH1 0xa0 00000469: PUSH1 0x02 0000046b: EXP 0000046c: SUB 0000046d: AND 0000046e: PUSH1 0x00 00000470: SWAP1 00000471: DUP2 00000472: MSTORE 00000473: PUSH1 0x06 00000475: PUSH1 0x20 00000477: MSTORE 00000478: PUSH1 0x40 0000047a: SWAP1 0000047b: KECCAK256 0000047c: SLOAD 0000047d: PUSH1 0xff 0000047f: AND 00000480: ISZERO 00000481: ISZERO 00000482: PUSH2 0x048a 00000485: JUMPI 00000486: PUSH2 0x0002 00000489: JUMP 0000048a: JUMPDEST 0000048b: DUP2 0000048c: PUSH1 0x07 0000048e: PUSH1 0x00 00000490: POP 00000491: PUSH1 0x00 00000493: CALLER 00000494: PUSH1 0x01 00000496: PUSH1 0xa0 00000498: PUSH1 0x02 0000049a: EXP 0000049b: SUB 0000049c: AND 0000049d: DUP2 0000049e: MSTORE 0000049f: PUSH1 0x20 000004a1: ADD 000004a2: SWAP1 000004a3: DUP2 000004a4: MSTORE 000004a5: PUSH1 0x20 000004a7: ADD 000004a8: PUSH1 0x00 000004aa: KECCAK256 000004ab: PUSH1 0x00 000004ad: DUP3 000004ae: DUP3 000004af: DUP3 000004b0: POP 000004b1: SLOAD 000004b2: SUB 000004b3: SWAP3 000004b4: POP 000004b5: POP 000004b6: DUP2 000004b7: SWAP1 000004b8: SSTORE 000004b9: POP 000004ba: DUP2 000004bb: PUSH1 0x07 000004bd: PUSH1 0x00 000004bf: POP 000004c0: PUSH1 0x00 000004c2: DUP6 000004c3: PUSH1 0x01 000004c5: PUSH1 0xa0 000004c7: PUSH1 0x02 000004c9: EXP 000004ca: SUB 000004cb: AND 000004cc: DUP2 000004cd: MSTORE 000004ce: PUSH1 0x20 000004d0: ADD 000004d1: SWAP1 000004d2: DUP2 000004d3: MSTORE 000004d4: PUSH1 0x20 000004d6: ADD 000004d7: PUSH1 0x00 000004d9: KECCAK256 000004da: PUSH1 0x00 000004dc: DUP3 000004dd: DUP3 000004de: DUP3 000004df: POP 000004e0: SLOAD 000004e1: ADD 000004e2: SWAP3 000004e3: POP 000004e4: POP 000004e5: DUP2 000004e6: SWAP1 000004e7: SSTORE 000004e8: POP 000004e9: DUP3 000004ea: PUSH1 0x01 000004ec: PUSH1 0xa0 000004ee: PUSH1 0x02 000004f0: EXP 000004f1: SUB 000004f2: AND 000004f3: CALLER 000004f4: PUSH1 0x01 000004f6: PUSH1 0xa0 000004f8: PUSH1 0x02 000004fa: EXP 000004fb: SUB 000004fc: AND 000004fd: PUSH1 0x00 000004ff: DUP1 00000500: MLOAD 00000501: PUSH1 0x20 00000503: PUSH2 0x08ae 00000506: DUP4 00000507: CODECOPY 00000508: DUP2 00000509: MLOAD 0000050a: SWAP2 0000050b: MSTORE 0000050c: DUP5 0000050d: DUP5 0000050e: PUSH1 0x40 00000510: MLOAD 00000511: DUP1 00000512: DUP4 00000513: DUP2 00000514: MSTORE 00000515: PUSH1 0x20 00000517: ADD 00000518: DUP3 00000519: DUP2 0000051a: MSTORE 0000051b: PUSH1 0x20 0000051d: ADD 0000051e: SWAP3 0000051f: POP 00000520: POP 00000521: POP 00000522: PUSH1 0x40 00000524: MLOAD 00000525: DUP1 00000526: SWAP2 00000527: SUB 00000528: SWAP1 00000529: LOG3 0000052a: POP 0000052b: POP 0000052c: POP 0000052d: JUMP 0000052e: JUMPDEST 0000052f: PUSH1 0x01 00000531: PUSH1 0xa0 00000533: PUSH1 0x02 00000535: EXP 00000536: SUB 00000537: DUP3 00000538: AND 00000539: PUSH1 0x00 0000053b: DUP2 0000053c: DUP2 0000053d: MSTORE 0000053e: PUSH1 0x06 00000540: PUSH1 0x20 00000542: MSTORE 00000543: PUSH1 0x40 00000545: SWAP1 00000546: DUP2 00000547: SWAP1 00000548: KECCAK256 00000549: DUP1 0000054a: SLOAD 0000054b: PUSH1 0xff 0000054d: NOT 0000054e: AND 0000054f: DUP5 00000550: OR 00000551: SWAP1 00000552: SSTORE 00000553: PUSH1 0x60 00000555: SWAP2 00000556: DUP3 00000557: MSTORE 00000558: DUP3 00000559: ISZERO 0000055a: ISZERO 0000055b: PUSH1 0x80 0000055d: MSTORE 0000055e: PUSH32 0x8f8dbc0089af66b3e1cd0ea677e6f6f2578a0211cd0fb7310170dba591b323d9 0000057f: SWAP2 00000580: LOG1 00000581: POP 00000582: POP 00000583: JUMP 00000584: JUMPDEST 00000585: PUSH1 0x01 00000587: PUSH1 0xa0 00000589: PUSH1 0x02 0000058b: EXP 0000058c: SUB 0000058d: DUP1 0000058e: DUP4 0000058f: AND 00000590: PUSH1 0x00 00000592: SWAP1 00000593: DUP2 00000594: MSTORE 00000595: PUSH1 0x07 00000597: PUSH1 0x20 00000599: MSTORE 0000059a: PUSH1 0x40 0000059c: DUP1 0000059d: DUP3 0000059e: KECCAK256 0000059f: DUP1 000005a0: SLOAD 000005a1: DUP6 000005a2: ADD 000005a3: SWAP1 000005a4: SSTORE 000005a5: PUSH1 0x09 000005a7: DUP1 000005a8: SLOAD 000005a9: DUP6 000005aa: ADD 000005ab: SWAP1 000005ac: SSTORE 000005ad: DUP2 000005ae: SLOAD 000005af: PUSH1 0x60 000005b1: DUP6 000005b2: DUP2 000005b3: MSTORE 000005b4: PUSH1 0x80 000005b6: DUP5 000005b7: SWAP1 000005b8: MSTORE 000005b9: SWAP4 000005ba: AND 000005bb: SWAP3 000005bc: PUSH1 0x00 000005be: DUP1 000005bf: MLOAD 000005c0: PUSH1 0x20 000005c2: PUSH2 0x08ae 000005c5: DUP4 000005c6: CODECOPY 000005c7: DUP2 000005c8: MLOAD 000005c9: SWAP2 000005ca: MSTORE 000005cb: SWAP2 000005cc: SWAP1 000005cd: LOG3 000005ce: DUP2 000005cf: PUSH1 0x01 000005d1: PUSH1 0xa0 000005d3: PUSH1 0x02 000005d5: EXP 000005d6: SUB 000005d7: AND 000005d8: PUSH1 0x00 000005da: PUSH1 0x00 000005dc: SWAP1 000005dd: SLOAD 000005de: SWAP1 000005df: PUSH2 0x0100 000005e2: EXP 000005e3: SWAP1 000005e4: DIV 000005e5: PUSH1 0x01 000005e7: PUSH1 0xa0 000005e9: PUSH1 0x02 000005eb: EXP 000005ec: SUB 000005ed: AND 000005ee: PUSH1 0x01 000005f0: PUSH1 0xa0 000005f2: PUSH1 0x02 000005f4: EXP 000005f5: SUB 000005f6: AND 000005f7: PUSH1 0x00 000005f9: DUP1 000005fa: MLOAD 000005fb: PUSH1 0x20 000005fd: PUSH2 0x08ae 00000600: DUP4 00000601: CODECOPY 00000602: DUP2 00000603: MLOAD 00000604: SWAP2 00000605: MSTORE 00000606: DUP4 00000607: PUSH1 0x00 00000609: PUSH1 0x40 0000060b: MLOAD 0000060c: DUP1 0000060d: DUP4 0000060e: DUP2 0000060f: MSTORE 00000610: PUSH1 0x20 00000612: ADD 00000613: DUP3 00000614: DUP2 00000615: MSTORE 00000616: PUSH1 0x20 00000618: ADD 00000619: SWAP3 0000061a: POP 0000061b: POP 0000061c: POP 0000061d: PUSH1 0x40 0000061f: MLOAD 00000620: DUP1 00000621: SWAP2 00000622: SUB 00000623: SWAP1 00000624: LOG3 00000625: POP 00000626: POP 00000627: JUMP 00000628: JUMPDEST 00000629: PUSH1 0x01 0000062b: DUP1 0000062c: SLOAD 0000062d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000642: NOT 00000643: AND 00000644: DUP3 00000645: OR 00000646: SWAP1 00000647: SSTORE 00000648: POP 00000649: JUMP 0000064a: JUMPDEST 0000064b: PUSH1 0x01 0000064d: PUSH1 0xa0 0000064f: PUSH1 0x02 00000651: EXP 00000652: SUB 00000653: DUP9 00000654: AND 00000655: PUSH1 0x00 00000657: SWAP1 00000658: DUP2 00000659: MSTORE 0000065a: PUSH1 0x40 0000065c: SWAP1 0000065d: KECCAK256 0000065e: SLOAD 0000065f: DUP1 00000660: DUP9 00000661: ADD 00000662: LT 00000663: ISZERO 00000664: PUSH2 0x066c 00000667: JUMPI 00000668: PUSH2 0x0002 0000066b: JUMP 0000066c: JUMPDEST 0000066d: PUSH1 0x01 0000066f: PUSH1 0xa0 00000671: PUSH1 0x02 00000673: EXP 00000674: SUB 00000675: DUP5 00000676: AND 00000677: PUSH1 0x00 00000679: SWAP1 0000067a: DUP2 0000067b: MSTORE 0000067c: PUSH1 0x40 0000067e: SWAP1 0000067f: KECCAK256 00000680: SLOAD 00000681: DUP6 00000682: DUP2 00000683: ADD 00000684: LT 00000685: ISZERO 00000686: PUSH2 0x068e 00000689: JUMPI 0000068a: PUSH2 0x0002 0000068d: JUMP 0000068e: JUMPDEST 0000068f: PUSH1 0x01 00000691: PUSH1 0xa0 00000693: PUSH1 0x02 00000695: EXP 00000696: SUB 00000697: DUP10 00000698: AND 00000699: PUSH1 0x00 0000069b: SWAP1 0000069c: DUP2 0000069d: MSTORE 0000069e: PUSH1 0x06 000006a0: PUSH1 0x20 000006a2: MSTORE 000006a3: PUSH1 0x40 000006a5: SWAP1 000006a6: KECCAK256 000006a7: SLOAD 000006a8: PUSH1 0xff 000006aa: AND 000006ab: ISZERO 000006ac: ISZERO 000006ad: PUSH2 0x06b5 000006b0: JUMPI 000006b1: PUSH2 0x0002 000006b4: JUMP 000006b5: JUMPDEST 000006b6: PUSH13 0x01000000000000000000000000 000006c4: PUSH1 0x01 000006c6: PUSH1 0xa0 000006c8: PUSH1 0x02 000006ca: EXP 000006cb: SUB 000006cc: DUP1 000006cd: DUP12 000006ce: AND 000006cf: DUP3 000006d0: DUP2 000006d1: MUL 000006d2: PUSH1 0x60 000006d4: SWAP1 000006d5: DUP2 000006d6: MSTORE 000006d7: SWAP2 000006d8: DUP12 000006d9: AND 000006da: SWAP3 000006db: SWAP1 000006dc: SWAP3 000006dd: MUL 000006de: PUSH1 0x74 000006e0: MSTORE 000006e1: PUSH1 0x88 000006e3: DUP10 000006e4: DUP2 000006e5: MSTORE 000006e6: PUSH1 0xa8 000006e8: DUP9 000006e9: SWAP1 000006ea: MSTORE 000006eb: PUSH1 0xc8 000006ed: DUP10 000006ee: SWAP1 000006ef: MSTORE 000006f0: DUP2 000006f1: KECCAK256 000006f2: DUP2 000006f3: MSTORE 000006f4: PUSH1 0xff 000006f6: DUP6 000006f7: AND 000006f8: PUSH1 0x80 000006fa: SWAP1 000006fb: DUP2 000006fc: MSTORE 000006fd: PUSH1 0xa0 000006ff: DUP6 00000700: SWAP1 00000701: MSTORE 00000702: PUSH1 0xc0 00000704: DUP5 00000705: SWAP1 00000706: MSTORE 00000707: PUSH1 0x01 00000709: SWAP2 0000070a: PUSH1 0xe0 0000070c: SWAP2 0000070d: PUSH1 0x20 0000070f: SWAP2 00000710: SWAP1 00000711: DUP2 00000712: PUSH1 0x00 00000714: DUP7 00000715: PUSH2 0x61da 00000718: GAS 00000719: SUB 0000071a: CALL 0000071b: ISZERO 0000071c: PUSH2 0x0002 0000071f: JUMPI 00000720: POP 00000721: POP 00000722: PUSH1 0x40 00000724: MLOAD 00000725: MLOAD 00000726: PUSH1 0x01 00000728: PUSH1 0xa0 0000072a: PUSH1 0x02 0000072c: EXP 0000072d: SUB 0000072e: AND 0000072f: EQ 00000730: PUSH2 0x0738 00000733: JUMPI 00000734: PUSH2 0x0002 00000737: JUMP 00000738: JUMPDEST 00000739: DUP7 0000073a: PUSH1 0x07 0000073c: PUSH1 0x00 0000073e: POP 0000073f: PUSH1 0x00 00000741: DUP12 00000742: PUSH1 0x01 00000744: PUSH1 0xa0 00000746: PUSH1 0x02 00000748: EXP 00000749: SUB 0000074a: AND 0000074b: DUP2 0000074c: MSTORE 0000074d: PUSH1 0x20 0000074f: ADD 00000750: SWAP1 00000751: DUP2 00000752: MSTORE 00000753: PUSH1 0x20 00000755: ADD 00000756: PUSH1 0x00 00000758: KECCAK256 00000759: PUSH1 0x00 0000075b: DUP3 0000075c: DUP3 0000075d: DUP3 0000075e: POP 0000075f: SLOAD 00000760: SUB 00000761: SWAP3 00000762: POP 00000763: POP 00000764: DUP2 00000765: SWAP1 00000766: SSTORE 00000767: POP 00000768: DUP7 00000769: PUSH1 0x07 0000076b: PUSH1 0x00 0000076d: POP 0000076e: PUSH1 0x00 00000770: DUP11 00000771: PUSH1 0x01 00000773: PUSH1 0xa0 00000775: PUSH1 0x02 00000777: EXP 00000778: SUB 00000779: AND 0000077a: DUP2 0000077b: MSTORE 0000077c: PUSH1 0x20 0000077e: ADD 0000077f: SWAP1 00000780: DUP2 00000781: MSTORE 00000782: PUSH1 0x20 00000784: ADD 00000785: PUSH1 0x00 00000787: KECCAK256 00000788: PUSH1 0x00 0000078a: DUP3 0000078b: DUP3 0000078c: DUP3 0000078d: POP 0000078e: SLOAD 0000078f: ADD 00000790: SWAP3 00000791: POP 00000792: POP 00000793: DUP2 00000794: SWAP1 00000795: SSTORE 00000796: POP 00000797: DUP8 00000798: PUSH1 0x01 0000079a: PUSH1 0xa0 0000079c: PUSH1 0x02 0000079e: EXP 0000079f: SUB 000007a0: AND 000007a1: DUP10 000007a2: PUSH1 0x01 000007a4: PUSH1 0xa0 000007a6: PUSH1 0x02 000007a8: EXP 000007a9: SUB 000007aa: AND 000007ab: PUSH1 0x00 000007ad: DUP1 000007ae: MLOAD 000007af: PUSH1 0x20 000007b1: PUSH2 0x08ae 000007b4: DUP4 000007b5: CODECOPY 000007b6: DUP2 000007b7: MLOAD 000007b8: SWAP2 000007b9: MSTORE 000007ba: DUP10 000007bb: DUP10 000007bc: PUSH1 0x40 000007be: MLOAD 000007bf: DUP1 000007c0: DUP4 000007c1: DUP2 000007c2: MSTORE 000007c3: PUSH1 0x20 000007c5: ADD 000007c6: DUP3 000007c7: DUP2 000007c8: MSTORE 000007c9: PUSH1 0x20 000007cb: ADD 000007cc: SWAP3 000007cd: POP 000007ce: POP 000007cf: POP 000007d0: PUSH1 0x40 000007d2: MLOAD 000007d3: DUP1 000007d4: SWAP2 000007d5: SUB 000007d6: SWAP1 000007d7: LOG3 000007d8: PUSH1 0x00 000007da: DUP6 000007db: GT 000007dc: ISZERO 000007dd: PUSH2 0x0881 000007e0: JUMPI 000007e1: DUP5 000007e2: PUSH1 0x07 000007e4: PUSH1 0x00 000007e6: POP 000007e7: PUSH1 0x00 000007e9: DUP12 000007ea: PUSH1 0x01 000007ec: PUSH1 0xa0 000007ee: PUSH1 0x02 000007f0: EXP 000007f1: SUB 000007f2: AND 000007f3: DUP2 000007f4: MSTORE 000007f5: PUSH1 0x20 000007f7: ADD 000007f8: SWAP1 000007f9: DUP2 000007fa: MSTORE 000007fb: PUSH1 0x20 000007fd: ADD 000007fe: PUSH1 0x00 00000800: KECCAK256 00000801: PUSH1 0x00 00000803: DUP3 00000804: DUP3 00000805: DUP3 00000806: POP 00000807: SLOAD 00000808: SUB 00000809: SWAP3 0000080a: POP 0000080b: POP 0000080c: DUP2 0000080d: SWAP1 0000080e: SSTORE 0000080f: POP 00000810: DUP5 00000811: PUSH1 0x07 00000813: PUSH1 0x00 00000815: POP 00000816: PUSH1 0x00 00000818: DUP7 00000819: PUSH1 0x01 0000081b: PUSH1 0xa0 0000081d: PUSH1 0x02 0000081f: EXP 00000820: SUB 00000821: AND 00000822: DUP2 00000823: MSTORE 00000824: PUSH1 0x20 00000826: ADD 00000827: SWAP1 00000828: DUP2 00000829: MSTORE 0000082a: PUSH1 0x20 0000082c: ADD 0000082d: PUSH1 0x00 0000082f: KECCAK256 00000830: PUSH1 0x00 00000832: DUP3 00000833: DUP3 00000834: DUP3 00000835: POP 00000836: SLOAD 00000837: ADD 00000838: SWAP3 00000839: POP 0000083a: POP 0000083b: DUP2 0000083c: SWAP1 0000083d: SSTORE 0000083e: POP 0000083f: DUP4 00000840: PUSH1 0x01 00000842: PUSH1 0xa0 00000844: PUSH1 0x02 00000846: EXP 00000847: SUB 00000848: AND 00000849: DUP10 0000084a: PUSH1 0x01 0000084c: PUSH1 0xa0 0000084e: PUSH1 0x02 00000850: EXP 00000851: SUB 00000852: AND 00000853: PUSH1 0x00 00000855: DUP1 00000856: MLOAD 00000857: PUSH1 0x20 00000859: PUSH2 0x08ae 0000085c: DUP4 0000085d: CODECOPY 0000085e: DUP2 0000085f: MLOAD 00000860: SWAP2 00000861: MSTORE 00000862: DUP8 00000863: PUSH1 0x00 00000865: PUSH1 0x40 00000867: MLOAD 00000868: DUP1 00000869: DUP4 0000086a: DUP2 0000086b: MSTORE 0000086c: PUSH1 0x20 0000086e: ADD 0000086f: DUP3 00000870: DUP2 00000871: MSTORE 00000872: PUSH1 0x20 00000874: ADD 00000875: SWAP3 00000876: POP 00000877: POP 00000878: POP 00000879: PUSH1 0x40 0000087b: MLOAD 0000087c: DUP1 0000087d: SWAP2 0000087e: SUB 0000087f: SWAP1 00000880: LOG3 00000881: JUMPDEST 00000882: POP 00000883: POP 00000884: POP 00000885: POP 00000886: POP 00000887: POP 00000888: POP 00000889: POP 0000088a: POP 0000088b: JUMP 0000088c: JUMPDEST 0000088d: PUSH1 0x00 0000088f: DUP1 00000890: SLOAD 00000891: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000008a6: NOT 000008a7: AND 000008a8: DUP3 000008a9: OR 000008aa: SWAP1 000008ab: SSTORE 000008ac: POP 000008ad: JUMP 000008ae: SWAP15 000008af: UNKNOWN(0xD0) 000008b0: MSTORE8 000008b1: UNKNOWN(0xBB) 000008b2: DUP2 000008b3: DUP16 000008b4: CREATE 000008b5: DUP12 000008b6: DUP4 000008b7: MSTORE8 000008b8: UNKNOWN(0xCD) 000008b9: CHAINID 000008ba: UNKNOWN(0xF7) 000008bb: DUP14 000008bc: UNKNOWN(0xB1) 000008bd: CREATE 000008be: PUSH26
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | yes | yes |
viewtrace_id: 0xc029e5b841077018cc661f767028c4f2d07745b9cfefe2d21df6e3d95cac74ad
call_targets:
0x0000000000000000000000000000000000000004, 0xc8fc8f3d077816634e91b96a2af1f49c7e8ec52d
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0xc029e5b841077018cc661f767028c4f2d07745b9cfefe2d21df6e3d95cac74ad",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x0000000000000000000000000000000000000004",
"0xc8fc8f3d077816634e91b96a2af1f49c7e8ec52d"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x06fdde03",
"selector": "0x06fdde03",
"calldata_variants": [
"0x06fdde03",
"0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x095bcdb6",
"selector": "0x095bcdb6",
"calldata_variants": [
"0x095bcdb6",
"0x095bcdb60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x18160ddd",
"selector": "0x18160ddd",
"calldata_variants": [
"0x18160ddd",
"0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x313ce567",
"selector": "0x313ce567",
"calldata_variants": [
"0x313ce567",
"0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5a3b7e42",
"selector": "0x5a3b7e42",
"calldata_variants": [
"0x5a3b7e42",
"0x5a3b7e420000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x61e3564f",
"selector": "0x61e3564f",
"calldata_variants": [
"0x61e3564f",
"0x61e3564f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6bc40dde",
"selector": "0x6bc40dde",
"calldata_variants": [
"0x6bc40dde",
"0x6bc40dde0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x70a08231",
"selector": "0x70a08231",
"calldata_variants": [
"0x70a08231",
"0x70a082310000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 941,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1818,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 2,
"guards_detected": [],
"untrusted_call_count": 2
}
|
| high | other | detector | ETH value transfer possible | 55 | yes | yes |
viewtrace_id: 0xc029e5b841077018cc661f767028c4f2d07745b9cfefe2d21df6e3d95cac74ad
call_targets:
0x0000000000000000000000000000000000000004, 0xc8fc8f3d077816634e91b96a2af1f49c7e8ec52d
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0xc029e5b841077018cc661f767028c4f2d07745b9cfefe2d21df6e3d95cac74ad",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x0000000000000000000000000000000000000004",
"0xc8fc8f3d077816634e91b96a2af1f49c7e8ec52d"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x06fdde03",
"selector": "0x06fdde03",
"calldata_variants": [
"0x06fdde03",
"0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x095bcdb6",
"selector": "0x095bcdb6",
"calldata_variants": [
"0x095bcdb6",
"0x095bcdb60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x18160ddd",
"selector": "0x18160ddd",
"calldata_variants": [
"0x18160ddd",
"0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x313ce567",
"selector": "0x313ce567",
"calldata_variants": [
"0x313ce567",
"0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5a3b7e42",
"selector": "0x5a3b7e42",
"calldata_variants": [
"0x5a3b7e42",
"0x5a3b7e420000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x61e3564f",
"selector": "0x61e3564f",
"calldata_variants": [
"0x61e3564f",
"0x61e3564f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6bc40dde",
"selector": "0x6bc40dde",
"calldata_variants": [
"0x6bc40dde",
"0x6bc40dde0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x70a08231",
"selector": "0x70a08231",
"calldata_variants": [
"0x70a08231",
"0x70a082310000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 941,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1818,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 2,
"guards_detected": []
}
|
| medium | other | detector | CREATE/CREATE2 reachable | 45 | no | no |
viewtrace_id: 0x7b97dfe452a1cd36c9b2a25ec00b51d1e56a2f7c359cebd357056434cd2ffdfc
validation_json{
"sink": "CREATE",
"errors": 0,
"status": "unknown",
"attempts": 32,
"trace_id": "0x7b97dfe452a1cd36c9b2a25ec00b51d1e56a2f7c359cebd357056434cd2ffdfc",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x06fdde03",
"selector": "0x06fdde03",
"calldata_variants": [
"0x06fdde03",
"0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x095bcdb6",
"selector": "0x095bcdb6",
"calldata_variants": [
"0x095bcdb6",
"0x095bcdb60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x18160ddd",
"selector": "0x18160ddd",
"calldata_variants": [
"0x18160ddd",
"0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x313ce567",
"selector": "0x313ce567",
"calldata_variants": [
"0x313ce567",
"0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5a3b7e42",
"selector": "0x5a3b7e42",
"calldata_variants": [
"0x5a3b7e42",
"0x5a3b7e420000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x61e3564f",
"selector": "0x61e3564f",
"calldata_variants": [
"0x61e3564f",
"0x61e3564f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6bc40dde",
"selector": "0x6bc40dde",
"calldata_variants": [
"0x6bc40dde",
"0x6bc40dde0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x70a08231",
"selector": "0x70a08231",
"calldata_variants": [
"0x70a08231",
"0x70a082310000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"create_count": 2,
"create2_count": 0
}
|