TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-55a3-7237-901f-f524ac4012c4

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:04 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
2
Validated
2
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 2 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
8289 artifact.fetch complete 1 / 3 3 months ago
8290 tool.cast_disasm complete 1 / 3 3 months ago
98014 analysis.bundle complete 1 / 3 1 week ago
98015 capability.graph complete 1 / 3 1 week ago
98016 detector.run complete 1 / 3 1 week ago
98017 validation.fork complete 1 / 3 1 week ago
113837 report.consolidate complete 1 / 6 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate
Job Status
complete
Attempts
1 / 6
Findings
0
No findings?
View stderr
OpenAI Codex v0.118.0 (research preview)
--------
workdir: /tmp/codex-apk18d1h
model: gpt-5.4
provider: openai
approval: never
sandbox: read-only
reasoning effort: high
reasoning summaries: none
session id: 019d5ca0-3b20-7ca2-a5a1-b3343a8d5c80
--------
user
You are a security auditor. You ONLY have runtime bytecode + analysis artifacts.
You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary,
evidence bundle, callsites, storage slots, and detector findings.

Special cases when reasoning from bytecode (be explicit about uncertainty):
- Selector inference is best-effort; missing selectors are common.
- Fallback/receive paths may be the only entrypoints.
- CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage.
- Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative.
- Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown.
- Guard detection is heuristic; absence of guards does NOT mean unguarded.
- Returndata checking is unknown unless explicitly shown in evidence.
- Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim.

Output MUST be valid JSON matching the provided schema.
- If you find nothing meaningful: set no_findings=true and findings=[].
- Otherwise: set no_findings=false and include findings with severity/category/title.
- Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb".

Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation,
accounting/invariant breaks, dangerous delegatecall, and untrusted external calls.
Be conservative: if evidence is weak, mark severity low/medium and explain why.
warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
Metadata
{
    "codex": {
        "ran_at": "2026-04-05T07:51:39.754317+00:00",
        "returncode": 1
    },
    "project": {
        "mode": "bytecode",
        "bytecode_length": 4510,
        "bytecode_truncated": false,
        "capability_graph_present": true,
        "analysis_artifact_present": true
    },
    "summary": null,
    "no_findings": null,
    "schema_version": 1
}

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
2
EXT*/BALANCE
0
Total opcodes
1583
Flags
create_opcodes_present
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00c4
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x06fdde03
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00cc
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x095bcdb6
00000025: EQ
00000026: PUSH2 0x0129
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x18160ddd
00000030: EQ
00000031: PUSH2 0x015b
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x313ce567
0000003b: EQ
0000003c: PUSH2 0x0164
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x5a3b7e42
00000046: EQ
00000047: PUSH2 0x0170
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x61e3564f
00000051: EQ
00000052: PUSH2 0x01ca
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x6bc40dde
0000005c: EQ
0000005d: PUSH2 0x01ef
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x70a08231
00000067: EQ
00000068: PUSH2 0x0201
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x79c65068
00000072: EQ
00000073: PUSH2 0x0219
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x95d89b41
0000007d: EQ
0000007e: PUSH2 0x023d
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0x9a4a0fb2
00000088: EQ
00000089: PUSH2 0x0299
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xb25fa0b0
00000093: EQ
00000094: PUSH2 0x02ab
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0xbcc37dd4
0000009e: EQ
0000009f: PUSH2 0x02cd
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xdb5cb3ac
000000a9: EQ
000000aa: PUSH2 0x02e8
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0xdd62ed3e
000000b4: EQ
000000b5: PUSH2 0x032f
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0xfe99ad5a
000000bf: EQ
000000c0: PUSH2 0x0354
000000c3: JUMPI
000000c4: JUMPDEST
000000c5: PUSH2 0x0375
000000c8: PUSH2 0x0002
000000cb: JUMP
000000cc: JUMPDEST
000000cd: PUSH2 0x0377
000000d0: PUSH1 0x03
000000d2: DUP1
000000d3: SLOAD
000000d4: PUSH1 0x20
000000d6: PUSH1 0x02
000000d8: PUSH1 0x01
000000da: DUP4
000000db: AND
000000dc: ISZERO
000000dd: PUSH2 0x0100
000000e0: MUL
000000e1: PUSH1 0x00
000000e3: NOT
000000e4: ADD
000000e5: SWAP1
000000e6: SWAP3
000000e7: AND
000000e8: SWAP2
000000e9: SWAP1
000000ea: SWAP2
000000eb: DIV
000000ec: PUSH1 0x1f
000000ee: DUP2
000000ef: ADD
000000f0: DUP3
000000f1: SWAP1
000000f2: DIV
000000f3: SWAP1
000000f4: SWAP2
000000f5: MUL
000000f6: PUSH1 0x80
000000f8: SWAP1
000000f9: DUP2
000000fa: ADD
000000fb: PUSH1 0x40
000000fd: MSTORE
000000fe: PUSH1 0x60
00000100: DUP3
00000101: DUP2
00000102: MSTORE
00000103: SWAP3
00000104: SWAP2
00000105: SWAP1
00000106: DUP3
00000107: DUP3
00000108: DUP1
00000109: ISZERO
0000010a: PUSH2 0x0439
0000010d: JUMPI
0000010e: DUP1
0000010f: PUSH1 0x1f
00000111: LT
00000112: PUSH2 0x040e
00000115: JUMPI
00000116: PUSH2 0x0100
00000119: DUP1
0000011a: DUP4
0000011b: SLOAD
0000011c: DIV
0000011d: MUL
0000011e: DUP4
0000011f: MSTORE
00000120: SWAP2
00000121: PUSH1 0x20
00000123: ADD
00000124: SWAP2
00000125: PUSH2 0x0439
00000128: JUMP
00000129: JUMPDEST
0000012a: PUSH2 0x0375
0000012d: PUSH1 0x04
0000012f: CALLDATALOAD
00000130: PUSH1 0x24
00000132: CALLDATALOAD
00000133: PUSH1 0x44
00000135: CALLDATALOAD
00000136: CALLER
00000137: PUSH1 0x01
00000139: PUSH1 0xa0
0000013b: PUSH1 0x02
0000013d: EXP
0000013e: SUB
0000013f: AND
00000140: PUSH1 0x00
00000142: SWAP1
00000143: DUP2
00000144: MSTORE
00000145: PUSH1 0x07
00000147: PUSH1 0x20
00000149: MSTORE
0000014a: PUSH1 0x40
0000014c: SWAP1
0000014d: KECCAK256
0000014e: SLOAD
0000014f: DUP3
00000150: SWAP1
00000151: LT
00000152: ISZERO
00000153: PUSH2 0x0441
00000156: JUMPI
00000157: PUSH2 0x0002
0000015a: JUMP
0000015b: JUMPDEST
0000015c: PUSH2 0x03e5
0000015f: PUSH1 0x09
00000161: SLOAD
00000162: DUP2
00000163: JUMP
00000164: JUMPDEST
00000165: PUSH2 0x03e5
00000168: PUSH1 0x05
0000016a: SLOAD
0000016b: PUSH1 0xff
0000016d: AND
0000016e: DUP2
0000016f: JUMP
00000170: JUMPDEST
00000171: PUSH2 0x0377
00000174: PUSH1 0x02
00000176: DUP1
00000177: SLOAD
00000178: PUSH1 0x20
0000017a: PUSH1 0x01
0000017c: DUP3
0000017d: AND
0000017e: ISZERO
0000017f: PUSH2 0x0100
00000182: MUL
00000183: PUSH1 0x00
00000185: NOT
00000186: ADD
00000187: SWAP1
00000188: SWAP2
00000189: AND
0000018a: DUP3
0000018b: SWAP1
0000018c: DIV
0000018d: PUSH1 0x1f
0000018f: DUP2
00000190: ADD
00000191: DUP3
00000192: SWAP1
00000193: DIV
00000194: SWAP1
00000195: SWAP2
00000196: MUL
00000197: PUSH1 0x80
00000199: SWAP1
0000019a: DUP2
0000019b: ADD
0000019c: PUSH1 0x40
0000019e: MSTORE
0000019f: PUSH1 0x60
000001a1: DUP3
000001a2: DUP2
000001a3: MSTORE
000001a4: SWAP3
000001a5: SWAP2
000001a6: SWAP1
000001a7: DUP3
000001a8: DUP3
000001a9: DUP1
000001aa: ISZERO
000001ab: PUSH2 0x0439
000001ae: JUMPI
000001af: DUP1
000001b0: PUSH1 0x1f
000001b2: LT
000001b3: PUSH2 0x040e
000001b6: JUMPI
000001b7: PUSH2 0x0100
000001ba: DUP1
000001bb: DUP4
000001bc: SLOAD
000001bd: DIV
000001be: MUL
000001bf: DUP4
000001c0: MSTORE
000001c1: SWAP2
000001c2: PUSH1 0x20
000001c4: ADD
000001c5: SWAP2
000001c6: PUSH2 0x0439
000001c9: JUMP
000001ca: JUMPDEST
000001cb: PUSH2 0x0375
000001ce: PUSH1 0x04
000001d0: CALLDATALOAD
000001d1: PUSH1 0x24
000001d3: CALLDATALOAD
000001d4: PUSH1 0x01
000001d6: SLOAD
000001d7: PUSH1 0x01
000001d9: PUSH1 0xa0
000001db: PUSH1 0x02
000001dd: EXP
000001de: SUB
000001df: SWAP1
000001e0: DUP2
000001e1: AND
000001e2: CALLER
000001e3: SWAP1
000001e4: SWAP2
000001e5: AND
000001e6: EQ
000001e7: PUSH2 0x052e
000001ea: JUMPI
000001eb: PUSH2 0x0002
000001ee: JUMP
000001ef: JUMPDEST
000001f0: PUSH2 0x03ef
000001f3: PUSH1 0x01
000001f5: SLOAD
000001f6: PUSH1 0x01
000001f8: PUSH1 0xa0
000001fa: PUSH1 0x02
000001fc: EXP
000001fd: SUB
000001fe: AND
000001ff: DUP2
00000200: JUMP
00000201: JUMPDEST
00000202: PUSH2 0x03e5
00000205: PUSH1 0x04
00000207: CALLDATALOAD
00000208: PUSH1 0x07
0000020a: PUSH1 0x20
0000020c: MSTORE
0000020d: PUSH1 0x00
0000020f: SWAP1
00000210: DUP2
00000211: MSTORE
00000212: PUSH1 0x40
00000214: SWAP1
00000215: KECCAK256
00000216: SLOAD
00000217: DUP2
00000218: JUMP
00000219: JUMPDEST
0000021a: PUSH2 0x0375
0000021d: PUSH1 0x04
0000021f: CALLDATALOAD
00000220: PUSH1 0x24
00000222: CALLDATALOAD
00000223: PUSH1 0x00
00000225: SLOAD
00000226: CALLER
00000227: PUSH1 0x01
00000229: PUSH1 0xa0
0000022b: PUSH1 0x02
0000022d: EXP
0000022e: SUB
0000022f: SWAP1
00000230: DUP2
00000231: AND
00000232: SWAP2
00000233: AND
00000234: EQ
00000235: PUSH2 0x0584
00000238: JUMPI
00000239: PUSH2 0x0002
0000023c: JUMP
0000023d: JUMPDEST
0000023e: PUSH2 0x0377
00000241: PUSH1 0x04
00000243: DUP1
00000244: SLOAD
00000245: PUSH1 0x20
00000247: PUSH1 0x1f
00000249: PUSH1 0x02
0000024b: PUSH1 0x01
0000024d: DUP5
0000024e: AND
0000024f: ISZERO
00000250: PUSH2 0x0100
00000253: MUL
00000254: PUSH1 0x00
00000256: NOT
00000257: ADD
00000258: SWAP1
00000259: SWAP4
0000025a: AND
0000025b: SWAP3
0000025c: SWAP1
0000025d: SWAP3
0000025e: DIV
0000025f: SWAP2
00000260: DUP3
00000261: ADD
00000262: DUP2
00000263: SWAP1
00000264: DIV
00000265: MUL
00000266: PUSH1 0x80
00000268: SWAP1
00000269: DUP2
0000026a: ADD
0000026b: PUSH1 0x40
0000026d: MSTORE
0000026e: PUSH1 0x60
00000270: DUP3
00000271: DUP2
00000272: MSTORE
00000273: SWAP3
00000274: SWAP2
00000275: SWAP1
00000276: DUP3
00000277: DUP3
00000278: DUP1
00000279: ISZERO
0000027a: PUSH2 0x0439
0000027d: JUMPI
0000027e: DUP1
0000027f: PUSH1 0x1f
00000281: LT
00000282: PUSH2 0x040e
00000285: JUMPI
00000286: PUSH2 0x0100
00000289: DUP1
0000028a: DUP4
0000028b: SLOAD
0000028c: DIV
0000028d: MUL
0000028e: DUP4
0000028f: MSTORE
00000290: SWAP2
00000291: PUSH1 0x20
00000293: ADD
00000294: SWAP2
00000295: PUSH2 0x0439
00000298: JUMP
00000299: JUMPDEST
0000029a: PUSH2 0x03ef
0000029d: PUSH1 0x00
0000029f: SLOAD
000002a0: PUSH1 0x01
000002a2: PUSH1 0xa0
000002a4: PUSH1 0x02
000002a6: EXP
000002a7: SUB
000002a8: AND
000002a9: DUP2
000002aa: JUMP
000002ab: JUMPDEST
000002ac: PUSH2 0x0375
000002af: PUSH1 0x04
000002b1: CALLDATALOAD
000002b2: PUSH1 0x01
000002b4: SLOAD
000002b5: PUSH1 0x01
000002b7: PUSH1 0xa0
000002b9: PUSH1 0x02
000002bb: EXP
000002bc: SUB
000002bd: SWAP1
000002be: DUP2
000002bf: AND
000002c0: CALLER
000002c1: SWAP1
000002c2: SWAP2
000002c3: AND
000002c4: EQ
000002c5: PUSH2 0x0628
000002c8: JUMPI
000002c9: PUSH2 0x0002
000002cc: JUMP
000002cd: JUMPDEST
000002ce: PUSH2 0x0402
000002d1: PUSH1 0x04
000002d3: CALLDATALOAD
000002d4: PUSH1 0x06
000002d6: PUSH1 0x20
000002d8: MSTORE
000002d9: PUSH1 0x00
000002db: SWAP1
000002dc: DUP2
000002dd: MSTORE
000002de: PUSH1 0x40
000002e0: SWAP1
000002e1: KECCAK256
000002e2: SLOAD
000002e3: PUSH1 0xff
000002e5: AND
000002e6: DUP2
000002e7: JUMP
000002e8: JUMPDEST
000002e9: PUSH2 0x0375
000002ec: PUSH1 0x04
000002ee: CALLDATALOAD
000002ef: PUSH1 0x24
000002f1: CALLDATALOAD
000002f2: PUSH1 0x44
000002f4: CALLDATALOAD
000002f5: PUSH1 0x64
000002f7: CALLDATALOAD
000002f8: PUSH1 0x84
000002fa: CALLDATALOAD
000002fb: PUSH1 0xa4
000002fd: CALLDATALOAD
000002fe: PUSH1 0xc4
00000300: CALLDATALOAD
00000301: PUSH1 0xe4
00000303: CALLDATALOAD
00000304: PUSH2 0x0104
00000307: CALLDATALOAD
00000308: PUSH1 0x01
0000030a: PUSH1 0xa0
0000030c: PUSH1 0x02
0000030e: EXP
0000030f: SUB
00000310: DUP10
00000311: AND
00000312: PUSH1 0x00
00000314: SWAP1
00000315: DUP2
00000316: MSTORE
00000317: PUSH1 0x07
00000319: PUSH1 0x20
0000031b: MSTORE
0000031c: PUSH1 0x40
0000031e: SWAP1
0000031f: KECCAK256
00000320: SLOAD
00000321: DUP6
00000322: DUP9
00000323: ADD
00000324: SWAP1
00000325: LT
00000326: ISZERO
00000327: PUSH2 0x064a
0000032a: JUMPI
0000032b: PUSH2 0x0002
0000032e: JUMP
0000032f: JUMPDEST
00000330: PUSH1 0x08
00000332: PUSH1 0x20
00000334: SWAP1
00000335: DUP2
00000336: MSTORE
00000337: PUSH1 0x04
00000339: CALLDATALOAD
0000033a: PUSH1 0x00
0000033c: SWAP1
0000033d: DUP2
0000033e: MSTORE
0000033f: PUSH1 0x40
00000341: DUP1
00000342: DUP3
00000343: KECCAK256
00000344: SWAP1
00000345: SWAP3
00000346: MSTORE
00000347: PUSH1 0x24
00000349: CALLDATALOAD
0000034a: DUP2
0000034b: MSTORE
0000034c: KECCAK256
0000034d: SLOAD
0000034e: PUSH2 0x03e5
00000351: SWAP1
00000352: DUP2
00000353: JUMP
00000354: JUMPDEST
00000355: PUSH2 0x0375
00000358: PUSH1 0x04
0000035a: CALLDATALOAD
0000035b: PUSH1 0x00
0000035d: SLOAD
0000035e: CALLER
0000035f: PUSH1 0x01
00000361: PUSH1 0xa0
00000363: PUSH1 0x02
00000365: EXP
00000366: SUB
00000367: SWAP1
00000368: DUP2
00000369: AND
0000036a: SWAP2
0000036b: AND
0000036c: EQ
0000036d: PUSH2 0x088c
00000370: JUMPI
00000371: PUSH2 0x0002
00000374: JUMP
00000375: JUMPDEST
00000376: STOP
00000377: JUMPDEST
00000378: PUSH1 0x40
0000037a: MLOAD
0000037b: DUP1
0000037c: DUP1
0000037d: PUSH1 0x20
0000037f: ADD
00000380: DUP3
00000381: DUP2
00000382: SUB
00000383: DUP3
00000384: MSTORE
00000385: DUP4
00000386: DUP2
00000387: DUP2
00000388: MLOAD
00000389: DUP2
0000038a: MSTORE
0000038b: PUSH1 0x20
0000038d: ADD
0000038e: SWAP2
0000038f: POP
00000390: DUP1
00000391: MLOAD
00000392: SWAP1
00000393: PUSH1 0x20
00000395: ADD
00000396: SWAP1
00000397: DUP1
00000398: DUP4
00000399: DUP4
0000039a: DUP3
0000039b: SWAP1
0000039c: PUSH1 0x00
0000039e: PUSH1 0x04
000003a0: PUSH1 0x20
000003a2: DUP5
000003a3: PUSH1 0x1f
000003a5: ADD
000003a6: DIV
000003a7: PUSH1 0x0f
000003a9: MUL
000003aa: PUSH1 0x03
000003ac: ADD
000003ad: CALL
000003ae: POP
000003af: SWAP1
000003b0: POP
000003b1: SWAP1
000003b2: DUP2
000003b3: ADD
000003b4: SWAP1
000003b5: PUSH1 0x1f
000003b7: AND
000003b8: DUP1
000003b9: ISZERO
000003ba: PUSH2 0x03d7
000003bd: JUMPI
000003be: DUP1
000003bf: DUP3
000003c0: SUB
000003c1: DUP1
000003c2: MLOAD
000003c3: PUSH1 0x01
000003c5: DUP4
000003c6: PUSH1 0x20
000003c8: SUB
000003c9: PUSH2 0x0100
000003cc: EXP
000003cd: SUB
000003ce: NOT
000003cf: AND
000003d0: DUP2
000003d1: MSTORE
000003d2: PUSH1 0x20
000003d4: ADD
000003d5: SWAP2
000003d6: POP
000003d7: JUMPDEST
000003d8: POP
000003d9: SWAP3
000003da: POP
000003db: POP
000003dc: POP
000003dd: PUSH1 0x40
000003df: MLOAD
000003e0: DUP1
000003e1: SWAP2
000003e2: SUB
000003e3: SWAP1
000003e4: RETURN
000003e5: JUMPDEST
000003e6: PUSH1 0x60
000003e8: SWAP1
000003e9: DUP2
000003ea: MSTORE
000003eb: PUSH1 0x20
000003ed: SWAP1
000003ee: RETURN
000003ef: JUMPDEST
000003f0: PUSH1 0x01
000003f2: PUSH1 0xa0
000003f4: PUSH1 0x02
000003f6: EXP
000003f7: SUB
000003f8: AND
000003f9: PUSH1 0x60
000003fb: SWAP1
000003fc: DUP2
000003fd: MSTORE
000003fe: PUSH1 0x20
00000400: SWAP1
00000401: RETURN
00000402: JUMPDEST
00000403: ISZERO
00000404: ISZERO
00000405: PUSH1 0x60
00000407: SWAP1
00000408: DUP2
00000409: MSTORE
0000040a: PUSH1 0x20
0000040c: SWAP1
0000040d: RETURN
0000040e: JUMPDEST
0000040f: DUP3
00000410: ADD
00000411: SWAP2
00000412: SWAP1
00000413: PUSH1 0x00
00000415: MSTORE
00000416: PUSH1 0x20
00000418: PUSH1 0x00
0000041a: KECCAK256
0000041b: SWAP1
0000041c: JUMPDEST
0000041d: DUP2
0000041e: SLOAD
0000041f: DUP2
00000420: MSTORE
00000421: SWAP1
00000422: PUSH1 0x01
00000424: ADD
00000425: SWAP1
00000426: PUSH1 0x20
00000428: ADD
00000429: DUP1
0000042a: DUP4
0000042b: GT
0000042c: PUSH2 0x041c
0000042f: JUMPI
00000430: DUP3
00000431: SWAP1
00000432: SUB
00000433: PUSH1 0x1f
00000435: AND
00000436: DUP3
00000437: ADD
00000438: SWAP2
00000439: JUMPDEST
0000043a: POP
0000043b: POP
0000043c: POP
0000043d: POP
0000043e: POP
0000043f: DUP2
00000440: JUMP
00000441: JUMPDEST
00000442: PUSH1 0x01
00000444: PUSH1 0xa0
00000446: PUSH1 0x02
00000448: EXP
00000449: SUB
0000044a: DUP4
0000044b: AND
0000044c: PUSH1 0x00
0000044e: SWAP1
0000044f: DUP2
00000450: MSTORE
00000451: PUSH1 0x40
00000453: SWAP1
00000454: KECCAK256
00000455: SLOAD
00000456: DUP1
00000457: DUP4
00000458: ADD
00000459: LT
0000045a: ISZERO
0000045b: PUSH2 0x0463
0000045e: JUMPI
0000045f: PUSH2 0x0002
00000462: JUMP
00000463: JUMPDEST
00000464: CALLER
00000465: PUSH1 0x01
00000467: PUSH1 0xa0
00000469: PUSH1 0x02
0000046b: EXP
0000046c: SUB
0000046d: AND
0000046e: PUSH1 0x00
00000470: SWAP1
00000471: DUP2
00000472: MSTORE
00000473: PUSH1 0x06
00000475: PUSH1 0x20
00000477: MSTORE
00000478: PUSH1 0x40
0000047a: SWAP1
0000047b: KECCAK256
0000047c: SLOAD
0000047d: PUSH1 0xff
0000047f: AND
00000480: ISZERO
00000481: ISZERO
00000482: PUSH2 0x048a
00000485: JUMPI
00000486: PUSH2 0x0002
00000489: JUMP
0000048a: JUMPDEST
0000048b: DUP2
0000048c: PUSH1 0x07
0000048e: PUSH1 0x00
00000490: POP
00000491: PUSH1 0x00
00000493: CALLER
00000494: PUSH1 0x01
00000496: PUSH1 0xa0
00000498: PUSH1 0x02
0000049a: EXP
0000049b: SUB
0000049c: AND
0000049d: DUP2
0000049e: MSTORE
0000049f: PUSH1 0x20
000004a1: ADD
000004a2: SWAP1
000004a3: DUP2
000004a4: MSTORE
000004a5: PUSH1 0x20
000004a7: ADD
000004a8: PUSH1 0x00
000004aa: KECCAK256
000004ab: PUSH1 0x00
000004ad: DUP3
000004ae: DUP3
000004af: DUP3
000004b0: POP
000004b1: SLOAD
000004b2: SUB
000004b3: SWAP3
000004b4: POP
000004b5: POP
000004b6: DUP2
000004b7: SWAP1
000004b8: SSTORE
000004b9: POP
000004ba: DUP2
000004bb: PUSH1 0x07
000004bd: PUSH1 0x00
000004bf: POP
000004c0: PUSH1 0x00
000004c2: DUP6
000004c3: PUSH1 0x01
000004c5: PUSH1 0xa0
000004c7: PUSH1 0x02
000004c9: EXP
000004ca: SUB
000004cb: AND
000004cc: DUP2
000004cd: MSTORE
000004ce: PUSH1 0x20
000004d0: ADD
000004d1: SWAP1
000004d2: DUP2
000004d3: MSTORE
000004d4: PUSH1 0x20
000004d6: ADD
000004d7: PUSH1 0x00
000004d9: KECCAK256
000004da: PUSH1 0x00
000004dc: DUP3
000004dd: DUP3
000004de: DUP3
000004df: POP
000004e0: SLOAD
000004e1: ADD
000004e2: SWAP3
000004e3: POP
000004e4: POP
000004e5: DUP2
000004e6: SWAP1
000004e7: SSTORE
000004e8: POP
000004e9: DUP3
000004ea: PUSH1 0x01
000004ec: PUSH1 0xa0
000004ee: PUSH1 0x02
000004f0: EXP
000004f1: SUB
000004f2: AND
000004f3: CALLER
000004f4: PUSH1 0x01
000004f6: PUSH1 0xa0
000004f8: PUSH1 0x02
000004fa: EXP
000004fb: SUB
000004fc: AND
000004fd: PUSH1 0x00
000004ff: DUP1
00000500: MLOAD
00000501: PUSH1 0x20
00000503: PUSH2 0x08ae
00000506: DUP4
00000507: CODECOPY
00000508: DUP2
00000509: MLOAD
0000050a: SWAP2
0000050b: MSTORE
0000050c: DUP5
0000050d: DUP5
0000050e: PUSH1 0x40
00000510: MLOAD
00000511: DUP1
00000512: DUP4
00000513: DUP2
00000514: MSTORE
00000515: PUSH1 0x20
00000517: ADD
00000518: DUP3
00000519: DUP2
0000051a: MSTORE
0000051b: PUSH1 0x20
0000051d: ADD
0000051e: SWAP3
0000051f: POP
00000520: POP
00000521: POP
00000522: PUSH1 0x40
00000524: MLOAD
00000525: DUP1
00000526: SWAP2
00000527: SUB
00000528: SWAP1
00000529: LOG3
0000052a: POP
0000052b: POP
0000052c: POP
0000052d: JUMP
0000052e: JUMPDEST
0000052f: PUSH1 0x01
00000531: PUSH1 0xa0
00000533: PUSH1 0x02
00000535: EXP
00000536: SUB
00000537: DUP3
00000538: AND
00000539: PUSH1 0x00
0000053b: DUP2
0000053c: DUP2
0000053d: MSTORE
0000053e: PUSH1 0x06
00000540: PUSH1 0x20
00000542: MSTORE
00000543: PUSH1 0x40
00000545: SWAP1
00000546: DUP2
00000547: SWAP1
00000548: KECCAK256
00000549: DUP1
0000054a: SLOAD
0000054b: PUSH1 0xff
0000054d: NOT
0000054e: AND
0000054f: DUP5
00000550: OR
00000551: SWAP1
00000552: SSTORE
00000553: PUSH1 0x60
00000555: SWAP2
00000556: DUP3
00000557: MSTORE
00000558: DUP3
00000559: ISZERO
0000055a: ISZERO
0000055b: PUSH1 0x80
0000055d: MSTORE
0000055e: PUSH32 0x8f8dbc0089af66b3e1cd0ea677e6f6f2578a0211cd0fb7310170dba591b323d9
0000057f: SWAP2
00000580: LOG1
00000581: POP
00000582: POP
00000583: JUMP
00000584: JUMPDEST
00000585: PUSH1 0x01
00000587: PUSH1 0xa0
00000589: PUSH1 0x02
0000058b: EXP
0000058c: SUB
0000058d: DUP1
0000058e: DUP4
0000058f: AND
00000590: PUSH1 0x00
00000592: SWAP1
00000593: DUP2
00000594: MSTORE
00000595: PUSH1 0x07
00000597: PUSH1 0x20
00000599: MSTORE
0000059a: PUSH1 0x40
0000059c: DUP1
0000059d: DUP3
0000059e: KECCAK256
0000059f: DUP1
000005a0: SLOAD
000005a1: DUP6
000005a2: ADD
000005a3: SWAP1
000005a4: SSTORE
000005a5: PUSH1 0x09
000005a7: DUP1
000005a8: SLOAD
000005a9: DUP6
000005aa: ADD
000005ab: SWAP1
000005ac: SSTORE
000005ad: DUP2
000005ae: SLOAD
000005af: PUSH1 0x60
000005b1: DUP6
000005b2: DUP2
000005b3: MSTORE
000005b4: PUSH1 0x80
000005b6: DUP5
000005b7: SWAP1
000005b8: MSTORE
000005b9: SWAP4
000005ba: AND
000005bb: SWAP3
000005bc: PUSH1 0x00
000005be: DUP1
000005bf: MLOAD
000005c0: PUSH1 0x20
000005c2: PUSH2 0x08ae
000005c5: DUP4
000005c6: CODECOPY
000005c7: DUP2
000005c8: MLOAD
000005c9: SWAP2
000005ca: MSTORE
000005cb: SWAP2
000005cc: SWAP1
000005cd: LOG3
000005ce: DUP2
000005cf: PUSH1 0x01
000005d1: PUSH1 0xa0
000005d3: PUSH1 0x02
000005d5: EXP
000005d6: SUB
000005d7: AND
000005d8: PUSH1 0x00
000005da: PUSH1 0x00
000005dc: SWAP1
000005dd: SLOAD
000005de: SWAP1
000005df: PUSH2 0x0100
000005e2: EXP
000005e3: SWAP1
000005e4: DIV
000005e5: PUSH1 0x01
000005e7: PUSH1 0xa0
000005e9: PUSH1 0x02
000005eb: EXP
000005ec: SUB
000005ed: AND
000005ee: PUSH1 0x01
000005f0: PUSH1 0xa0
000005f2: PUSH1 0x02
000005f4: EXP
000005f5: SUB
000005f6: AND
000005f7: PUSH1 0x00
000005f9: DUP1
000005fa: MLOAD
000005fb: PUSH1 0x20
000005fd: PUSH2 0x08ae
00000600: DUP4
00000601: CODECOPY
00000602: DUP2
00000603: MLOAD
00000604: SWAP2
00000605: MSTORE
00000606: DUP4
00000607: PUSH1 0x00
00000609: PUSH1 0x40
0000060b: MLOAD
0000060c: DUP1
0000060d: DUP4
0000060e: DUP2
0000060f: MSTORE
00000610: PUSH1 0x20
00000612: ADD
00000613: DUP3
00000614: DUP2
00000615: MSTORE
00000616: PUSH1 0x20
00000618: ADD
00000619: SWAP3
0000061a: POP
0000061b: POP
0000061c: POP
0000061d: PUSH1 0x40
0000061f: MLOAD
00000620: DUP1
00000621: SWAP2
00000622: SUB
00000623: SWAP1
00000624: LOG3
00000625: POP
00000626: POP
00000627: JUMP
00000628: JUMPDEST
00000629: PUSH1 0x01
0000062b: DUP1
0000062c: SLOAD
0000062d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000642: NOT
00000643: AND
00000644: DUP3
00000645: OR
00000646: SWAP1
00000647: SSTORE
00000648: POP
00000649: JUMP
0000064a: JUMPDEST
0000064b: PUSH1 0x01
0000064d: PUSH1 0xa0
0000064f: PUSH1 0x02
00000651: EXP
00000652: SUB
00000653: DUP9
00000654: AND
00000655: PUSH1 0x00
00000657: SWAP1
00000658: DUP2
00000659: MSTORE
0000065a: PUSH1 0x40
0000065c: SWAP1
0000065d: KECCAK256
0000065e: SLOAD
0000065f: DUP1
00000660: DUP9
00000661: ADD
00000662: LT
00000663: ISZERO
00000664: PUSH2 0x066c
00000667: JUMPI
00000668: PUSH2 0x0002
0000066b: JUMP
0000066c: JUMPDEST
0000066d: PUSH1 0x01
0000066f: PUSH1 0xa0
00000671: PUSH1 0x02
00000673: EXP
00000674: SUB
00000675: DUP5
00000676: AND
00000677: PUSH1 0x00
00000679: SWAP1
0000067a: DUP2
0000067b: MSTORE
0000067c: PUSH1 0x40
0000067e: SWAP1
0000067f: KECCAK256
00000680: SLOAD
00000681: DUP6
00000682: DUP2
00000683: ADD
00000684: LT
00000685: ISZERO
00000686: PUSH2 0x068e
00000689: JUMPI
0000068a: PUSH2 0x0002
0000068d: JUMP
0000068e: JUMPDEST
0000068f: PUSH1 0x01
00000691: PUSH1 0xa0
00000693: PUSH1 0x02
00000695: EXP
00000696: SUB
00000697: DUP10
00000698: AND
00000699: PUSH1 0x00
0000069b: SWAP1
0000069c: DUP2
0000069d: MSTORE
0000069e: PUSH1 0x06
000006a0: PUSH1 0x20
000006a2: MSTORE
000006a3: PUSH1 0x40
000006a5: SWAP1
000006a6: KECCAK256
000006a7: SLOAD
000006a8: PUSH1 0xff
000006aa: AND
000006ab: ISZERO
000006ac: ISZERO
000006ad: PUSH2 0x06b5
000006b0: JUMPI
000006b1: PUSH2 0x0002
000006b4: JUMP
000006b5: JUMPDEST
000006b6: PUSH13 0x01000000000000000000000000
000006c4: PUSH1 0x01
000006c6: PUSH1 0xa0
000006c8: PUSH1 0x02
000006ca: EXP
000006cb: SUB
000006cc: DUP1
000006cd: DUP12
000006ce: AND
000006cf: DUP3
000006d0: DUP2
000006d1: MUL
000006d2: PUSH1 0x60
000006d4: SWAP1
000006d5: DUP2
000006d6: MSTORE
000006d7: SWAP2
000006d8: DUP12
000006d9: AND
000006da: SWAP3
000006db: SWAP1
000006dc: SWAP3
000006dd: MUL
000006de: PUSH1 0x74
000006e0: MSTORE
000006e1: PUSH1 0x88
000006e3: DUP10
000006e4: DUP2
000006e5: MSTORE
000006e6: PUSH1 0xa8
000006e8: DUP9
000006e9: SWAP1
000006ea: MSTORE
000006eb: PUSH1 0xc8
000006ed: DUP10
000006ee: SWAP1
000006ef: MSTORE
000006f0: DUP2
000006f1: KECCAK256
000006f2: DUP2
000006f3: MSTORE
000006f4: PUSH1 0xff
000006f6: DUP6
000006f7: AND
000006f8: PUSH1 0x80
000006fa: SWAP1
000006fb: DUP2
000006fc: MSTORE
000006fd: PUSH1 0xa0
000006ff: DUP6
00000700: SWAP1
00000701: MSTORE
00000702: PUSH1 0xc0
00000704: DUP5
00000705: SWAP1
00000706: MSTORE
00000707: PUSH1 0x01
00000709: SWAP2
0000070a: PUSH1 0xe0
0000070c: SWAP2
0000070d: PUSH1 0x20
0000070f: SWAP2
00000710: SWAP1
00000711: DUP2
00000712: PUSH1 0x00
00000714: DUP7
00000715: PUSH2 0x61da
00000718: GAS
00000719: SUB
0000071a: CALL
0000071b: ISZERO
0000071c: PUSH2 0x0002
0000071f: JUMPI
00000720: POP
00000721: POP
00000722: PUSH1 0x40
00000724: MLOAD
00000725: MLOAD
00000726: PUSH1 0x01
00000728: PUSH1 0xa0
0000072a: PUSH1 0x02
0000072c: EXP
0000072d: SUB
0000072e: AND
0000072f: EQ
00000730: PUSH2 0x0738
00000733: JUMPI
00000734: PUSH2 0x0002
00000737: JUMP
00000738: JUMPDEST
00000739: DUP7
0000073a: PUSH1 0x07
0000073c: PUSH1 0x00
0000073e: POP
0000073f: PUSH1 0x00
00000741: DUP12
00000742: PUSH1 0x01
00000744: PUSH1 0xa0
00000746: PUSH1 0x02
00000748: EXP
00000749: SUB
0000074a: AND
0000074b: DUP2
0000074c: MSTORE
0000074d: PUSH1 0x20
0000074f: ADD
00000750: SWAP1
00000751: DUP2
00000752: MSTORE
00000753: PUSH1 0x20
00000755: ADD
00000756: PUSH1 0x00
00000758: KECCAK256
00000759: PUSH1 0x00
0000075b: DUP3
0000075c: DUP3
0000075d: DUP3
0000075e: POP
0000075f: SLOAD
00000760: SUB
00000761: SWAP3
00000762: POP
00000763: POP
00000764: DUP2
00000765: SWAP1
00000766: SSTORE
00000767: POP
00000768: DUP7
00000769: PUSH1 0x07
0000076b: PUSH1 0x00
0000076d: POP
0000076e: PUSH1 0x00
00000770: DUP11
00000771: PUSH1 0x01
00000773: PUSH1 0xa0
00000775: PUSH1 0x02
00000777: EXP
00000778: SUB
00000779: AND
0000077a: DUP2
0000077b: MSTORE
0000077c: PUSH1 0x20
0000077e: ADD
0000077f: SWAP1
00000780: DUP2
00000781: MSTORE
00000782: PUSH1 0x20
00000784: ADD
00000785: PUSH1 0x00
00000787: KECCAK256
00000788: PUSH1 0x00
0000078a: DUP3
0000078b: DUP3
0000078c: DUP3
0000078d: POP
0000078e: SLOAD
0000078f: ADD
00000790: SWAP3
00000791: POP
00000792: POP
00000793: DUP2
00000794: SWAP1
00000795: SSTORE
00000796: POP
00000797: DUP8
00000798: PUSH1 0x01
0000079a: PUSH1 0xa0
0000079c: PUSH1 0x02
0000079e: EXP
0000079f: SUB
000007a0: AND
000007a1: DUP10
000007a2: PUSH1 0x01
000007a4: PUSH1 0xa0
000007a6: PUSH1 0x02
000007a8: EXP
000007a9: SUB
000007aa: AND
000007ab: PUSH1 0x00
000007ad: DUP1
000007ae: MLOAD
000007af: PUSH1 0x20
000007b1: PUSH2 0x08ae
000007b4: DUP4
000007b5: CODECOPY
000007b6: DUP2
000007b7: MLOAD
000007b8: SWAP2
000007b9: MSTORE
000007ba: DUP10
000007bb: DUP10
000007bc: PUSH1 0x40
000007be: MLOAD
000007bf: DUP1
000007c0: DUP4
000007c1: DUP2
000007c2: MSTORE
000007c3: PUSH1 0x20
000007c5: ADD
000007c6: DUP3
000007c7: DUP2
000007c8: MSTORE
000007c9: PUSH1 0x20
000007cb: ADD
000007cc: SWAP3
000007cd: POP
000007ce: POP
000007cf: POP
000007d0: PUSH1 0x40
000007d2: MLOAD
000007d3: DUP1
000007d4: SWAP2
000007d5: SUB
000007d6: SWAP1
000007d7: LOG3
000007d8: PUSH1 0x00
000007da: DUP6
000007db: GT
000007dc: ISZERO
000007dd: PUSH2 0x0881
000007e0: JUMPI
000007e1: DUP5
000007e2: PUSH1 0x07
000007e4: PUSH1 0x00
000007e6: POP
000007e7: PUSH1 0x00
000007e9: DUP12
000007ea: PUSH1 0x01
000007ec: PUSH1 0xa0
000007ee: PUSH1 0x02
000007f0: EXP
000007f1: SUB
000007f2: AND
000007f3: DUP2
000007f4: MSTORE
000007f5: PUSH1 0x20
000007f7: ADD
000007f8: SWAP1
000007f9: DUP2
000007fa: MSTORE
000007fb: PUSH1 0x20
000007fd: ADD
000007fe: PUSH1 0x00
00000800: KECCAK256
00000801: PUSH1 0x00
00000803: DUP3
00000804: DUP3
00000805: DUP3
00000806: POP
00000807: SLOAD
00000808: SUB
00000809: SWAP3
0000080a: POP
0000080b: POP
0000080c: DUP2
0000080d: SWAP1
0000080e: SSTORE
0000080f: POP
00000810: DUP5
00000811: PUSH1 0x07
00000813: PUSH1 0x00
00000815: POP
00000816: PUSH1 0x00
00000818: DUP7
00000819: PUSH1 0x01
0000081b: PUSH1 0xa0
0000081d: PUSH1 0x02
0000081f: EXP
00000820: SUB
00000821: AND
00000822: DUP2
00000823: MSTORE
00000824: PUSH1 0x20
00000826: ADD
00000827: SWAP1
00000828: DUP2
00000829: MSTORE
0000082a: PUSH1 0x20
0000082c: ADD
0000082d: PUSH1 0x00
0000082f: KECCAK256
00000830: PUSH1 0x00
00000832: DUP3
00000833: DUP3
00000834: DUP3
00000835: POP
00000836: SLOAD
00000837: ADD
00000838: SWAP3
00000839: POP
0000083a: POP
0000083b: DUP2
0000083c: SWAP1
0000083d: SSTORE
0000083e: POP
0000083f: DUP4
00000840: PUSH1 0x01
00000842: PUSH1 0xa0
00000844: PUSH1 0x02
00000846: EXP
00000847: SUB
00000848: AND
00000849: DUP10
0000084a: PUSH1 0x01
0000084c: PUSH1 0xa0
0000084e: PUSH1 0x02
00000850: EXP
00000851: SUB
00000852: AND
00000853: PUSH1 0x00
00000855: DUP1
00000856: MLOAD
00000857: PUSH1 0x20
00000859: PUSH2 0x08ae
0000085c: DUP4
0000085d: CODECOPY
0000085e: DUP2
0000085f: MLOAD
00000860: SWAP2
00000861: MSTORE
00000862: DUP8
00000863: PUSH1 0x00
00000865: PUSH1 0x40
00000867: MLOAD
00000868: DUP1
00000869: DUP4
0000086a: DUP2
0000086b: MSTORE
0000086c: PUSH1 0x20
0000086e: ADD
0000086f: DUP3
00000870: DUP2
00000871: MSTORE
00000872: PUSH1 0x20
00000874: ADD
00000875: SWAP3
00000876: POP
00000877: POP
00000878: POP
00000879: PUSH1 0x40
0000087b: MLOAD
0000087c: DUP1
0000087d: SWAP2
0000087e: SUB
0000087f: SWAP1
00000880: LOG3
00000881: JUMPDEST
00000882: POP
00000883: POP
00000884: POP
00000885: POP
00000886: POP
00000887: POP
00000888: POP
00000889: POP
0000088a: POP
0000088b: JUMP
0000088c: JUMPDEST
0000088d: PUSH1 0x00
0000088f: DUP1
00000890: SLOAD
00000891: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008a6: NOT
000008a7: AND
000008a8: DUP3
000008a9: OR
000008aa: SWAP1
000008ab: SSTORE
000008ac: POP
000008ad: JUMP
000008ae: SWAP15
000008af: UNKNOWN(0xD0)
000008b0: MSTORE8
000008b1: UNKNOWN(0xBB)
000008b2: DUP2
000008b3: DUP16
000008b4: CREATE
000008b5: DUP12
000008b6: DUP4
000008b7: MSTORE8
000008b8: UNKNOWN(0xCD)
000008b9: CHAINID
000008ba: UNKNOWN(0xF7)
000008bb: DUP14
000008bc: UNKNOWN(0xB1)
000008bd: CREATE
000008be: PUSH26
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 yes yes
view
trace_id: 0xc029e5b841077018cc661f767028c4f2d07745b9cfefe2d21df6e3d95cac74ad
call_targets: 0x0000000000000000000000000000000000000004, 0xc8fc8f3d077816634e91b96a2af1f49c7e8ec52d
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0xc029e5b841077018cc661f767028c4f2d07745b9cfefe2d21df6e3d95cac74ad",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0xc8fc8f3d077816634e91b96a2af1f49c7e8ec52d"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x095bcdb6",
            "selector": "0x095bcdb6",
            "calldata_variants": [
                "0x095bcdb6",
                "0x095bcdb60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5a3b7e42",
            "selector": "0x5a3b7e42",
            "calldata_variants": [
                "0x5a3b7e42",
                "0x5a3b7e420000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x61e3564f",
            "selector": "0x61e3564f",
            "calldata_variants": [
                "0x61e3564f",
                "0x61e3564f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6bc40dde",
            "selector": "0x6bc40dde",
            "calldata_variants": [
                "0x6bc40dde",
                "0x6bc40dde0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 941,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1818,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}
high other detector ETH value transfer possible 55 yes yes
view
trace_id: 0xc029e5b841077018cc661f767028c4f2d07745b9cfefe2d21df6e3d95cac74ad
call_targets: 0x0000000000000000000000000000000000000004, 0xc8fc8f3d077816634e91b96a2af1f49c7e8ec52d
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0xc029e5b841077018cc661f767028c4f2d07745b9cfefe2d21df6e3d95cac74ad",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0xc8fc8f3d077816634e91b96a2af1f49c7e8ec52d"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x095bcdb6",
            "selector": "0x095bcdb6",
            "calldata_variants": [
                "0x095bcdb6",
                "0x095bcdb60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5a3b7e42",
            "selector": "0x5a3b7e42",
            "calldata_variants": [
                "0x5a3b7e42",
                "0x5a3b7e420000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x61e3564f",
            "selector": "0x61e3564f",
            "calldata_variants": [
                "0x61e3564f",
                "0x61e3564f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6bc40dde",
            "selector": "0x6bc40dde",
            "calldata_variants": [
                "0x6bc40dde",
                "0x6bc40dde0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 941,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1818,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}
medium other detector CREATE/CREATE2 reachable 45 no no
view
trace_id: 0x7b97dfe452a1cd36c9b2a25ec00b51d1e56a2f7c359cebd357056434cd2ffdfc
validation_json
{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 32,
    "trace_id": "0x7b97dfe452a1cd36c9b2a25ec00b51d1e56a2f7c359cebd357056434cd2ffdfc",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x095bcdb6",
            "selector": "0x095bcdb6",
            "calldata_variants": [
                "0x095bcdb6",
                "0x095bcdb60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5a3b7e42",
            "selector": "0x5a3b7e42",
            "calldata_variants": [
                "0x5a3b7e42",
                "0x5a3b7e420000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x61e3564f",
            "selector": "0x61e3564f",
            "calldata_variants": [
                "0x61e3564f",
                "0x61e3564f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6bc40dde",
            "selector": "0x6bc40dde",
            "calldata_variants": [
                "0x6bc40dde",
                "0x6bc40dde0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "create_count": 2,
    "create2_count": 0
}