TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-56bb-7198-b833-1b36f0f8b01f

complete
Chain ID
1
Address
0xc39d73fca64d4ffe2c78fb17e61b9c8489f7c5fb
Block Number
—
Created
Fri, Dec 19, 2025 8:04 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
8419 artifact.fetch complete 1 / 3 3 months ago
8420 tool.cast_disasm complete 1 / 3 3 months ago
98018 analysis.bundle complete 1 / 3 1 week ago
98019 capability.graph complete 1 / 3 1 week ago
98020 detector.run complete 1 / 3 1 week ago
98021 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
12
EXT*/BALANCE
0
Total opcodes
1393
Flags
call_family_heavy
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0098
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x11a9f10a
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00a1
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x27793f87
00000025: EQ
00000026: PUSH2 0x00b3
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x3f6fa655
00000030: EQ
00000031: PUSH2 0x00bc
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x5600f04f
0000003b: EQ
0000003c: PUSH2 0x00c8
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x65e17c9d
00000046: EQ
00000047: PUSH2 0x0126
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x93854494
00000051: EQ
00000052: PUSH2 0x013d
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0xa6403636
0000005c: EQ
0000005d: PUSH2 0x0146
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0xbbf646c2
00000067: EQ
00000068: PUSH2 0x01d2
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0xdb006a75
00000072: EQ
00000073: PUSH2 0x01e4
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xddca3f43
0000007d: EQ
0000007e: PUSH2 0x0233
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xefc81a8c
00000088: EQ
00000089: PUSH2 0x023c
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xf0d9bb20
00000093: EQ
00000094: PUSH2 0x0326
00000097: JUMPI
00000098: JUMPDEST
00000099: PUSH2 0x0338
0000009c: JUMPDEST
0000009d: PUSH2 0x0002
000000a0: JUMP
000000a1: JUMPDEST
000000a2: PUSH2 0x033a
000000a5: PUSH1 0x01
000000a7: SLOAD
000000a8: PUSH1 0x01
000000aa: PUSH1 0xa0
000000ac: PUSH1 0x02
000000ae: EXP
000000af: SUB
000000b0: AND
000000b1: DUP2
000000b2: JUMP
000000b3: JUMPDEST
000000b4: PUSH2 0x0357
000000b7: PUSH1 0x05
000000b9: SLOAD
000000ba: DUP2
000000bb: JUMP
000000bc: JUMPDEST
000000bd: PUSH2 0x0369
000000c0: PUSH1 0x06
000000c2: SLOAD
000000c3: PUSH1 0xff
000000c5: AND
000000c6: DUP2
000000c7: JUMP
000000c8: JUMPDEST
000000c9: PUSH1 0x40
000000cb: DUP1
000000cc: MLOAD
000000cd: PUSH1 0x04
000000cf: DUP1
000000d0: SLOAD
000000d1: PUSH1 0x20
000000d3: PUSH1 0x02
000000d5: PUSH1 0x01
000000d7: DUP4
000000d8: AND
000000d9: ISZERO
000000da: PUSH2 0x0100
000000dd: MUL
000000de: PUSH1 0x00
000000e0: NOT
000000e1: ADD
000000e2: SWAP1
000000e3: SWAP3
000000e4: AND
000000e5: SWAP2
000000e6: SWAP1
000000e7: SWAP2
000000e8: DIV
000000e9: PUSH1 0x1f
000000eb: DUP2
000000ec: ADD
000000ed: DUP3
000000ee: SWAP1
000000ef: DIV
000000f0: DUP3
000000f1: MUL
000000f2: DUP5
000000f3: ADD
000000f4: DUP3
000000f5: ADD
000000f6: SWAP1
000000f7: SWAP5
000000f8: MSTORE
000000f9: DUP4
000000fa: DUP4
000000fb: MSTORE
000000fc: PUSH2 0x037d
000000ff: SWAP4
00000100: SWAP1
00000101: DUP4
00000102: ADD
00000103: DUP3
00000104: DUP3
00000105: DUP1
00000106: ISZERO
00000107: PUSH2 0x0416
0000010a: JUMPI
0000010b: DUP1
0000010c: PUSH1 0x1f
0000010e: LT
0000010f: PUSH2 0x03eb
00000112: JUMPI
00000113: PUSH2 0x0100
00000116: DUP1
00000117: DUP4
00000118: SLOAD
00000119: DIV
0000011a: MUL
0000011b: DUP4
0000011c: MSTORE
0000011d: SWAP2
0000011e: PUSH1 0x20
00000120: ADD
00000121: SWAP2
00000122: PUSH2 0x0416
00000125: JUMP
00000126: JUMPDEST
00000127: PUSH2 0x033a
0000012a: PUSH1 0x06
0000012c: SLOAD
0000012d: PUSH2 0x0100
00000130: SWAP1
00000131: DIV
00000132: PUSH1 0x01
00000134: PUSH1 0xa0
00000136: PUSH1 0x02
00000138: EXP
00000139: SUB
0000013a: AND
0000013b: DUP2
0000013c: JUMP
0000013d: JUMPDEST
0000013e: PUSH2 0x0357
00000141: PUSH1 0x02
00000143: SLOAD
00000144: DUP2
00000145: JUMP
00000146: JUMPDEST
00000147: PUSH2 0x0338
0000014a: PUSH1 0x04
0000014c: CALLDATALOAD
0000014d: PUSH1 0x24
0000014f: CALLDATALOAD
00000150: PUSH1 0x44
00000152: CALLDATALOAD
00000153: PUSH1 0x64
00000155: CALLDATALOAD
00000156: PUSH1 0x40
00000158: DUP1
00000159: MLOAD
0000015a: PUSH1 0x03
0000015c: SLOAD
0000015d: PUSH1 0x02
0000015f: SLOAD
00000160: DUP3
00000161: MSTORE
00000162: PUSH1 0x20
00000164: DUP3
00000165: DUP2
00000166: ADD
00000167: DUP6
00000168: SWAP1
00000169: MSTORE
0000016a: DUP4
0000016b: MLOAD
0000016c: SWAP3
0000016d: DUP4
0000016e: SWAP1
0000016f: SUB
00000170: DUP5
00000171: ADD
00000172: DUP4
00000173: KECCAK256
00000174: DUP4
00000175: MSTORE
00000176: PUSH1 0xff
00000178: DUP9
00000179: AND
0000017a: DUP4
0000017b: DUP3
0000017c: ADD
0000017d: MSTORE
0000017e: DUP3
0000017f: DUP5
00000180: ADD
00000181: DUP8
00000182: SWAP1
00000183: MSTORE
00000184: PUSH1 0x60
00000186: DUP4
00000187: ADD
00000188: DUP7
00000189: SWAP1
0000018a: MSTORE
0000018b: SWAP3
0000018c: MLOAD
0000018d: PUSH1 0x00
0000018f: SWAP4
00000190: PUSH1 0x01
00000192: PUSH1 0xa0
00000194: PUSH1 0x02
00000196: EXP
00000197: SUB
00000198: SWAP3
00000199: SWAP1
0000019a: SWAP3
0000019b: AND
0000019c: SWAP3
0000019d: PUSH1 0x01
0000019f: SWAP3
000001a0: PUSH1 0x80
000001a2: DUP3
000001a3: DUP2
000001a4: ADD
000001a5: SWAP4
000001a6: SWAP2
000001a7: SWAP3
000001a8: DUP3
000001a9: SWAP1
000001aa: SUB
000001ab: ADD
000001ac: DUP2
000001ad: DUP8
000001ae: DUP7
000001af: PUSH2 0x61da
000001b2: GAS
000001b3: SUB
000001b4: CALL
000001b5: ISZERO
000001b6: PUSH2 0x0002
000001b9: JUMPI
000001ba: POP
000001bb: POP
000001bc: PUSH1 0x40
000001be: MLOAD
000001bf: MLOAD
000001c0: PUSH1 0x01
000001c2: PUSH1 0xa0
000001c4: PUSH1 0x02
000001c6: EXP
000001c7: SUB
000001c8: AND
000001c9: EQ
000001ca: PUSH2 0x041e
000001cd: JUMPI
000001ce: PUSH2 0x0002
000001d1: JUMP
000001d2: JUMPDEST
000001d3: PUSH2 0x033a
000001d6: PUSH1 0x03
000001d8: SLOAD
000001d9: PUSH1 0x01
000001db: PUSH1 0xa0
000001dd: PUSH1 0x02
000001df: EXP
000001e0: SUB
000001e1: AND
000001e2: DUP2
000001e3: JUMP
000001e4: JUMPDEST
000001e5: PUSH2 0x0338
000001e8: PUSH1 0x04
000001ea: CALLDATALOAD
000001eb: PUSH1 0x07
000001ed: SLOAD
000001ee: PUSH1 0x06
000001f0: SLOAD
000001f1: PUSH2 0x0100
000001f4: SWAP1
000001f5: DIV
000001f6: PUSH1 0x01
000001f8: PUSH1 0xa0
000001fa: PUSH1 0x02
000001fc: EXP
000001fd: SUB
000001fe: AND
000001ff: SWAP1
00000200: PUSH8 0x0de0b6b3a7640000
00000209: SWAP1
0000020a: PUSH2 0x04a0
0000020d: SWAP1
0000020e: DUP5
0000020f: SWAP1
00000210: JUMPDEST
00000211: PUSH1 0x00
00000213: DUP3
00000214: DUP3
00000215: MUL
00000216: PUSH2 0x0824
00000219: DUP5
0000021a: DUP4
0000021b: EQ
0000021c: DUP1
0000021d: PUSH2 0x0227
00000220: JUMPI
00000221: POP
00000222: DUP4
00000223: DUP6
00000224: DUP4
00000225: DIV
00000226: EQ
00000227: JUMPDEST
00000228: DUP1
00000229: ISZERO
0000022a: ISZERO
0000022b: PUSH2 0x07fe
0000022e: JUMPI
0000022f: PUSH2 0x0002
00000232: JUMP
00000233: JUMPDEST
00000234: PUSH2 0x0357
00000237: PUSH1 0x07
00000239: SLOAD
0000023a: DUP2
0000023b: JUMP
0000023c: JUMPDEST
0000023d: PUSH2 0x0338
00000240: PUSH1 0x00
00000242: DUP1
00000243: SLOAD
00000244: PUSH1 0x40
00000246: DUP1
00000247: MLOAD
00000248: PUSH1 0xe0
0000024a: PUSH1 0x02
0000024c: EXP
0000024d: PUSH4 0x0ecaea73
00000252: MUL
00000253: DUP2
00000254: MSTORE
00000255: CALLER
00000256: PUSH1 0x01
00000258: PUSH1 0xa0
0000025a: PUSH1 0x02
0000025c: EXP
0000025d: SUB
0000025e: SWAP1
0000025f: DUP2
00000260: AND
00000261: PUSH1 0x04
00000263: DUP4
00000264: ADD
00000265: MSTORE
00000266: CALLVALUE
00000267: PUSH1 0x24
00000269: DUP4
0000026a: ADD
0000026b: MSTORE
0000026c: SWAP2
0000026d: MLOAD
0000026e: SWAP2
0000026f: SWAP1
00000270: SWAP3
00000271: AND
00000272: SWAP3
00000273: PUSH4 0x0ecaea73
00000278: SWAP3
00000279: PUSH1 0x44
0000027b: DUP2
0000027c: DUP2
0000027d: ADD
0000027e: SWAP4
0000027f: SWAP2
00000280: DUP3
00000281: SWAP1
00000282: SUB
00000283: ADD
00000284: DUP2
00000285: DUP4
00000286: DUP8
00000287: PUSH2 0x61da
0000028a: GAS
0000028b: SUB
0000028c: CALL
0000028d: ISZERO
0000028e: PUSH2 0x0002
00000291: JUMPI
00000292: POP
00000293: PUSH1 0x01
00000295: SLOAD
00000296: PUSH1 0x40
00000298: DUP1
00000299: MLOAD
0000029a: PUSH1 0xe0
0000029c: PUSH1 0x02
0000029e: EXP
0000029f: PUSH4 0x0ecaea73
000002a4: MUL
000002a5: DUP2
000002a6: MSTORE
000002a7: CALLER
000002a8: PUSH1 0x01
000002aa: PUSH1 0xa0
000002ac: PUSH1 0x02
000002ae: EXP
000002af: SUB
000002b0: SWAP1
000002b1: DUP2
000002b2: AND
000002b3: PUSH1 0x04
000002b5: DUP4
000002b6: ADD
000002b7: MSTORE
000002b8: CALLVALUE
000002b9: PUSH1 0x24
000002bb: DUP4
000002bc: ADD
000002bd: MSTORE
000002be: SWAP2
000002bf: MLOAD
000002c0: SWAP3
000002c1: SWAP1
000002c2: SWAP2
000002c3: AND
000002c4: SWAP4
000002c5: POP
000002c6: PUSH1 0x44
000002c8: DUP2
000002c9: DUP2
000002ca: ADD
000002cb: SWAP3
000002cc: PUSH1 0x00
000002ce: SWAP3
000002cf: SWAP1
000002d0: SWAP2
000002d1: SWAP1
000002d2: DUP3
000002d3: SWAP1
000002d4: SUB
000002d5: ADD
000002d6: DUP2
000002d7: DUP4
000002d8: DUP8
000002d9: PUSH2 0x61da
000002dc: GAS
000002dd: SUB
000002de: CALL
000002df: ISZERO
000002e0: PUSH2 0x0002
000002e3: JUMPI
000002e4: POP
000002e5: POP
000002e6: PUSH1 0x40
000002e8: DUP1
000002e9: MLOAD
000002ea: CALLVALUE
000002eb: DUP2
000002ec: MSTORE
000002ed: SWAP1
000002ee: MLOAD
000002ef: CALLER
000002f0: PUSH1 0x01
000002f2: PUSH1 0xa0
000002f4: PUSH1 0x02
000002f6: EXP
000002f7: SUB
000002f8: AND
000002f9: SWAP3
000002fa: POP
000002fb: PUSH32 0xcc9018de05b5f497ee7618d8830568d8ac2d45d0671b73d8f71c67e824122ec7
0000031c: SWAP2
0000031d: DUP2
0000031e: SWAP1
0000031f: SUB
00000320: PUSH1 0x20
00000322: ADD
00000323: SWAP1
00000324: LOG2
00000325: JUMP
00000326: JUMPDEST
00000327: PUSH2 0x033a
0000032a: PUSH1 0x00
0000032c: SLOAD
0000032d: PUSH1 0x01
0000032f: PUSH1 0xa0
00000331: PUSH1 0x02
00000333: EXP
00000334: SUB
00000335: AND
00000336: DUP2
00000337: JUMP
00000338: JUMPDEST
00000339: STOP
0000033a: JUMPDEST
0000033b: PUSH1 0x40
0000033d: DUP1
0000033e: MLOAD
0000033f: PUSH1 0x01
00000341: PUSH1 0xa0
00000343: PUSH1 0x02
00000345: EXP
00000346: SUB
00000347: SWAP3
00000348: SWAP1
00000349: SWAP3
0000034a: AND
0000034b: DUP3
0000034c: MSTORE
0000034d: MLOAD
0000034e: SWAP1
0000034f: DUP2
00000350: SWAP1
00000351: SUB
00000352: PUSH1 0x20
00000354: ADD
00000355: SWAP1
00000356: RETURN
00000357: JUMPDEST
00000358: PUSH1 0x40
0000035a: DUP1
0000035b: MLOAD
0000035c: SWAP2
0000035d: DUP3
0000035e: MSTORE
0000035f: MLOAD
00000360: SWAP1
00000361: DUP2
00000362: SWAP1
00000363: SUB
00000364: PUSH1 0x20
00000366: ADD
00000367: SWAP1
00000368: RETURN
00000369: JUMPDEST
0000036a: PUSH1 0x40
0000036c: DUP1
0000036d: MLOAD
0000036e: SWAP2
0000036f: ISZERO
00000370: ISZERO
00000371: DUP3
00000372: MSTORE
00000373: MLOAD
00000374: SWAP1
00000375: DUP2
00000376: SWAP1
00000377: SUB
00000378: PUSH1 0x20
0000037a: ADD
0000037b: SWAP1
0000037c: RETURN
0000037d: JUMPDEST
0000037e: PUSH1 0x40
00000380: MLOAD
00000381: DUP1
00000382: DUP1
00000383: PUSH1 0x20
00000385: ADD
00000386: DUP3
00000387: DUP2
00000388: SUB
00000389: DUP3
0000038a: MSTORE
0000038b: DUP4
0000038c: DUP2
0000038d: DUP2
0000038e: MLOAD
0000038f: DUP2
00000390: MSTORE
00000391: PUSH1 0x20
00000393: ADD
00000394: SWAP2
00000395: POP
00000396: DUP1
00000397: MLOAD
00000398: SWAP1
00000399: PUSH1 0x20
0000039b: ADD
0000039c: SWAP1
0000039d: DUP1
0000039e: DUP4
0000039f: DUP4
000003a0: DUP3
000003a1: SWAP1
000003a2: PUSH1 0x00
000003a4: PUSH1 0x04
000003a6: PUSH1 0x20
000003a8: DUP5
000003a9: PUSH1 0x1f
000003ab: ADD
000003ac: DIV
000003ad: PUSH1 0x0f
000003af: MUL
000003b0: PUSH1 0x03
000003b2: ADD
000003b3: CALL
000003b4: POP
000003b5: SWAP1
000003b6: POP
000003b7: SWAP1
000003b8: DUP2
000003b9: ADD
000003ba: SWAP1
000003bb: PUSH1 0x1f
000003bd: AND
000003be: DUP1
000003bf: ISZERO
000003c0: PUSH2 0x03dd
000003c3: JUMPI
000003c4: DUP1
000003c5: DUP3
000003c6: SUB
000003c7: DUP1
000003c8: MLOAD
000003c9: PUSH1 0x01
000003cb: DUP4
000003cc: PUSH1 0x20
000003ce: SUB
000003cf: PUSH2 0x0100
000003d2: EXP
000003d3: SUB
000003d4: NOT
000003d5: AND
000003d6: DUP2
000003d7: MSTORE
000003d8: PUSH1 0x20
000003da: ADD
000003db: SWAP2
000003dc: POP
000003dd: JUMPDEST
000003de: POP
000003df: SWAP3
000003e0: POP
000003e1: POP
000003e2: POP
000003e3: PUSH1 0x40
000003e5: MLOAD
000003e6: DUP1
000003e7: SWAP2
000003e8: SUB
000003e9: SWAP1
000003ea: RETURN
000003eb: JUMPDEST
000003ec: DUP3
000003ed: ADD
000003ee: SWAP2
000003ef: SWAP1
000003f0: PUSH1 0x00
000003f2: MSTORE
000003f3: PUSH1 0x20
000003f5: PUSH1 0x00
000003f7: KECCAK256
000003f8: SWAP1
000003f9: JUMPDEST
000003fa: DUP2
000003fb: SLOAD
000003fc: DUP2
000003fd: MSTORE
000003fe: SWAP1
000003ff: PUSH1 0x01
00000401: ADD
00000402: SWAP1
00000403: PUSH1 0x20
00000405: ADD
00000406: DUP1
00000407: DUP4
00000408: GT
00000409: PUSH2 0x03f9
0000040c: JUMPI
0000040d: DUP3
0000040e: SWAP1
0000040f: SUB
00000410: PUSH1 0x1f
00000412: AND
00000413: DUP3
00000414: ADD
00000415: SWAP2
00000416: JUMPDEST
00000417: POP
00000418: POP
00000419: POP
0000041a: POP
0000041b: POP
0000041c: DUP2
0000041d: JUMP
0000041e: JUMPDEST
0000041f: PUSH1 0x06
00000421: SLOAD
00000422: PUSH1 0xff
00000424: AND
00000425: ISZERO
00000426: PUSH2 0x042e
00000429: JUMPI
0000042a: PUSH2 0x0002
0000042d: JUMP
0000042e: JUMPDEST
0000042f: POP
00000430: DUP1
00000431: PUSH1 0x00
00000433: DUP2
00000434: EQ
00000435: DUP1
00000436: PUSH2 0x043f
00000439: JUMPI
0000043a: POP
0000043b: DUP1
0000043c: PUSH1 0x01
0000043e: EQ
0000043f: JUMPDEST
00000440: ISZERO
00000441: PUSH2 0x009c
00000444: JUMPI
00000445: PUSH1 0x05
00000447: DUP2
00000448: SWAP1
00000449: SSTORE
0000044a: PUSH1 0x06
0000044c: DUP1
0000044d: SLOAD
0000044e: PUSH1 0xff
00000450: NOT
00000451: AND
00000452: PUSH1 0x01
00000454: OR
00000455: SWAP1
00000456: DUP2
00000457: SWAP1
00000458: SSTORE
00000459: PUSH1 0x40
0000045b: DUP1
0000045c: MLOAD
0000045d: PUSH1 0xff
0000045f: SWAP3
00000460: SWAP1
00000461: SWAP3
00000462: AND
00000463: ISZERO
00000464: ISZERO
00000465: DUP3
00000466: MSTORE
00000467: PUSH1 0x20
00000469: DUP3
0000046a: ADD
0000046b: DUP4
0000046c: SWAP1
0000046d: MSTORE
0000046e: DUP1
0000046f: MLOAD
00000470: PUSH32 0x25bdc110f1d57950be657c53d166f950a9db609cb04a7fbb52e4909d43b16516
00000491: SWAP3
00000492: DUP2
00000493: SWAP1
00000494: SUB
00000495: SWAP1
00000496: SWAP2
00000497: ADD
00000498: SWAP1
00000499: LOG1
0000049a: POP
0000049b: POP
0000049c: POP
0000049d: POP
0000049e: POP
0000049f: JUMP
000004a0: JUMPDEST
000004a1: PUSH1 0x40
000004a3: MLOAD
000004a4: SWAP2
000004a5: SWAP1
000004a6: DIV
000004a7: SWAP1
000004a8: PUSH1 0x00
000004aa: DUP2
000004ab: DUP2
000004ac: DUP2
000004ad: DUP6
000004ae: DUP8
000004af: PUSH2 0x8502
000004b2: GAS
000004b3: SUB
000004b4: CALL
000004b5: SWAP3
000004b6: POP
000004b7: POP
000004b8: POP
000004b9: ISZERO
000004ba: ISZERO
000004bb: PUSH2 0x04c3
000004be: JUMPI
000004bf: PUSH2 0x0002
000004c2: JUMP
000004c3: JUMPDEST
000004c4: PUSH1 0x06
000004c6: SLOAD
000004c7: PUSH1 0xff
000004c9: AND
000004ca: ISZERO
000004cb: ISZERO
000004cc: PUSH2 0x05a3
000004cf: JUMPI
000004d0: PUSH1 0x00
000004d2: DUP1
000004d3: SLOAD
000004d4: PUSH1 0x40
000004d6: DUP1
000004d7: MLOAD
000004d8: PUSH1 0xe0
000004da: PUSH1 0x02
000004dc: EXP
000004dd: PUSH4 0xa24835d1
000004e2: MUL
000004e3: DUP2
000004e4: MSTORE
000004e5: CALLER
000004e6: PUSH1 0x01
000004e8: PUSH1 0xa0
000004ea: PUSH1 0x02
000004ec: EXP
000004ed: SUB
000004ee: SWAP1
000004ef: DUP2
000004f0: AND
000004f1: PUSH1 0x04
000004f3: DUP4
000004f4: ADD
000004f5: MSTORE
000004f6: PUSH1 0x24
000004f8: DUP3
000004f9: ADD
000004fa: DUP7
000004fb: SWAP1
000004fc: MSTORE
000004fd: SWAP2
000004fe: MLOAD
000004ff: SWAP3
00000500: SWAP1
00000501: SWAP2
00000502: AND
00000503: SWAP3
00000504: PUSH4 0xa24835d1
00000509: SWAP3
0000050a: PUSH1 0x44
0000050c: DUP4
0000050d: DUP2
0000050e: ADD
0000050f: SWAP4
00000510: DUP3
00000511: SWAP1
00000512: SUB
00000513: ADD
00000514: DUP2
00000515: DUP4
00000516: DUP8
00000517: PUSH2 0x61da
0000051a: GAS
0000051b: SUB
0000051c: CALL
0000051d: ISZERO
0000051e: PUSH2 0x0002
00000521: JUMPI
00000522: POP
00000523: PUSH1 0x01
00000525: SLOAD
00000526: PUSH1 0x40
00000528: DUP1
00000529: MLOAD
0000052a: PUSH1 0xe0
0000052c: PUSH1 0x02
0000052e: EXP
0000052f: PUSH4 0xa24835d1
00000534: MUL
00000535: DUP2
00000536: MSTORE
00000537: CALLER
00000538: PUSH1 0x01
0000053a: PUSH1 0xa0
0000053c: PUSH1 0x02
0000053e: EXP
0000053f: SUB
00000540: SWAP1
00000541: DUP2
00000542: AND
00000543: PUSH1 0x04
00000545: DUP4
00000546: ADD
00000547: MSTORE
00000548: PUSH1 0x24
0000054a: DUP3
0000054b: ADD
0000054c: DUP8
0000054d: SWAP1
0000054e: MSTORE
0000054f: SWAP2
00000550: MLOAD
00000551: SWAP3
00000552: SWAP1
00000553: SWAP2
00000554: AND
00000555: SWAP4
00000556: POP
00000557: PUSH1 0x44
00000559: DUP2
0000055a: DUP2
0000055b: ADD
0000055c: SWAP3
0000055d: PUSH1 0x00
0000055f: SWAP3
00000560: SWAP1
00000561: SWAP2
00000562: SWAP1
00000563: DUP3
00000564: SWAP1
00000565: SUB
00000566: ADD
00000567: DUP2
00000568: DUP4
00000569: DUP8
0000056a: PUSH2 0x61da
0000056d: GAS
0000056e: SUB
0000056f: CALL
00000570: ISZERO
00000571: PUSH2 0x0002
00000574: JUMPI
00000575: POP
00000576: POP
00000577: POP
00000578: CALLER
00000579: PUSH1 0x01
0000057b: PUSH1 0xa0
0000057d: PUSH1 0x02
0000057f: EXP
00000580: SUB
00000581: AND
00000582: PUSH8 0x0de0b6b3a7640000
0000058b: PUSH2 0x063d
0000058e: DUP4
0000058f: PUSH1 0x07
00000591: PUSH1 0x00
00000593: POP
00000594: SLOAD
00000595: PUSH8 0x0de0b6b3a7640000
0000059e: SUB
0000059f: PUSH2 0x0210
000005a2: JUMP
000005a3: JUMPDEST
000005a4: PUSH1 0x06
000005a6: SLOAD
000005a7: PUSH1 0xff
000005a9: AND
000005aa: ISZERO
000005ab: PUSH2 0x07fe
000005ae: JUMPI
000005af: PUSH1 0x05
000005b1: SLOAD
000005b2: PUSH1 0x00
000005b4: EQ
000005b5: ISZERO
000005b6: PUSH2 0x06b1
000005b9: JUMPI
000005ba: PUSH1 0x40
000005bc: DUP1
000005bd: MLOAD
000005be: PUSH1 0x01
000005c0: SLOAD
000005c1: PUSH1 0xe0
000005c3: PUSH1 0x02
000005c5: EXP
000005c6: PUSH4 0xa24835d1
000005cb: MUL
000005cc: DUP3
000005cd: MSTORE
000005ce: CALLER
000005cf: PUSH1 0x01
000005d1: PUSH1 0xa0
000005d3: PUSH1 0x02
000005d5: EXP
000005d6: SUB
000005d7: SWAP1
000005d8: DUP2
000005d9: AND
000005da: PUSH1 0x04
000005dc: DUP5
000005dd: ADD
000005de: MSTORE
000005df: PUSH1 0x24
000005e1: DUP4
000005e2: ADD
000005e3: DUP6
000005e4: SWAP1
000005e5: MSTORE
000005e6: SWAP3
000005e7: MLOAD
000005e8: SWAP3
000005e9: AND
000005ea: SWAP2
000005eb: PUSH4 0xa24835d1
000005f0: SWAP2
000005f1: PUSH1 0x44
000005f3: DUP2
000005f4: DUP2
000005f5: ADD
000005f6: SWAP3
000005f7: PUSH1 0x00
000005f9: SWAP3
000005fa: SWAP1
000005fb: SWAP2
000005fc: SWAP1
000005fd: DUP3
000005fe: SWAP1
000005ff: SUB
00000600: ADD
00000601: DUP2
00000602: DUP4
00000603: DUP8
00000604: PUSH2 0x61da
00000607: GAS
00000608: SUB
00000609: CALL
0000060a: ISZERO
0000060b: PUSH2 0x0002
0000060e: JUMPI
0000060f: POP
00000610: POP
00000611: POP
00000612: CALLER
00000613: PUSH1 0x01
00000615: PUSH1 0xa0
00000617: PUSH1 0x02
00000619: EXP
0000061a: SUB
0000061b: AND
0000061c: PUSH8 0x0de0b6b3a7640000
00000625: PUSH2 0x073d
00000628: DUP4
00000629: PUSH1 0x07
0000062b: PUSH1 0x00
0000062d: POP
0000062e: SLOAD
0000062f: PUSH8 0x0de0b6b3a7640000
00000638: SUB
00000639: PUSH2 0x0210
0000063c: JUMP
0000063d: JUMPDEST
0000063e: PUSH1 0x40
00000640: MLOAD
00000641: SWAP2
00000642: SWAP1
00000643: DIV
00000644: SWAP1
00000645: PUSH1 0x00
00000647: DUP2
00000648: DUP2
00000649: DUP2
0000064a: DUP6
0000064b: DUP8
0000064c: PUSH2 0x8502
0000064f: GAS
00000650: SUB
00000651: CALL
00000652: SWAP3
00000653: POP
00000654: POP
00000655: POP
00000656: ISZERO
00000657: ISZERO
00000658: PUSH2 0x0660
0000065b: JUMPI
0000065c: PUSH2 0x0002
0000065f: JUMP
00000660: JUMPDEST
00000661: PUSH1 0x40
00000663: DUP1
00000664: MLOAD
00000665: DUP3
00000666: DUP2
00000667: MSTORE
00000668: PUSH1 0x20
0000066a: DUP2
0000066b: ADD
0000066c: DUP4
0000066d: SWAP1
0000066e: MSTORE
0000066f: DUP1
00000670: DUP3
00000671: ADD
00000672: DUP4
00000673: SWAP1
00000674: MSTORE
00000675: SWAP1
00000676: MLOAD
00000677: CALLER
00000678: PUSH1 0x01
0000067a: PUSH1 0xa0
0000067c: PUSH1 0x02
0000067e: EXP
0000067f: SUB
00000680: AND
00000681: SWAP2
00000682: PUSH32 0xbd5034ffbd47e4e72a94baa2cdb74c6fad73cb3bcdc13036b72ec8306f5a7646
000006a3: SWAP2
000006a4: SWAP1
000006a5: DUP2
000006a6: SWAP1
000006a7: SUB
000006a8: PUSH1 0x60
000006aa: ADD
000006ab: SWAP1
000006ac: LOG2
000006ad: PUSH2 0x07fe
000006b0: JUMP
000006b1: JUMPDEST
000006b2: PUSH1 0x05
000006b4: SLOAD
000006b5: PUSH1 0x01
000006b7: EQ
000006b8: ISZERO
000006b9: PUSH2 0x07fe
000006bc: JUMPI
000006bd: PUSH1 0x40
000006bf: DUP1
000006c0: MLOAD
000006c1: PUSH1 0x00
000006c3: DUP1
000006c4: SLOAD
000006c5: PUSH1 0xe0
000006c7: PUSH1 0x02
000006c9: EXP
000006ca: PUSH4 0xa24835d1
000006cf: MUL
000006d0: DUP4
000006d1: MSTORE
000006d2: CALLER
000006d3: PUSH1 0x01
000006d5: PUSH1 0xa0
000006d7: PUSH1 0x02
000006d9: EXP
000006da: SUB
000006db: SWAP1
000006dc: DUP2
000006dd: AND
000006de: PUSH1 0x04
000006e0: DUP6
000006e1: ADD
000006e2: MSTORE
000006e3: PUSH1 0x24
000006e5: DUP5
000006e6: ADD
000006e7: DUP7
000006e8: SWAP1
000006e9: MSTORE
000006ea: SWAP4
000006eb: MLOAD
000006ec: SWAP4
000006ed: AND
000006ee: SWAP3
000006ef: PUSH4 0xa24835d1
000006f4: SWAP3
000006f5: PUSH1 0x44
000006f7: DUP2
000006f8: DUP2
000006f9: ADD
000006fa: SWAP4
000006fb: SWAP3
000006fc: SWAP2
000006fd: DUP3
000006fe: SWAP1
000006ff: SUB
00000700: ADD
00000701: DUP2
00000702: DUP4
00000703: DUP8
00000704: PUSH2 0x61da
00000707: GAS
00000708: SUB
00000709: CALL
0000070a: ISZERO
0000070b: PUSH2 0x0002
0000070e: JUMPI
0000070f: POP
00000710: POP
00000711: POP
00000712: CALLER
00000713: PUSH1 0x01
00000715: PUSH1 0xa0
00000717: PUSH1 0x02
00000719: EXP
0000071a: SUB
0000071b: AND
0000071c: PUSH8 0x0de0b6b3a7640000
00000725: PUSH2 0x0801
00000728: DUP4
00000729: PUSH1 0x07
0000072b: PUSH1 0x00
0000072d: POP
0000072e: SLOAD
0000072f: PUSH8 0x0de0b6b3a7640000
00000738: SUB
00000739: PUSH2 0x0210
0000073c: JUMP
0000073d: JUMPDEST
0000073e: PUSH1 0x40
00000740: MLOAD
00000741: SWAP2
00000742: SWAP1
00000743: DIV
00000744: SWAP1
00000745: PUSH1 0x00
00000747: DUP2
00000748: DUP2
00000749: DUP2
0000074a: DUP6
0000074b: DUP8
0000074c: PUSH2 0x8502
0000074f: GAS
00000750: SUB
00000751: CALL
00000752: SWAP3
00000753: POP
00000754: POP
00000755: POP
00000756: ISZERO
00000757: ISZERO
00000758: PUSH2 0x0760
0000075b: JUMPI
0000075c: PUSH2 0x0002
0000075f: JUMP
00000760: JUMPDEST
00000761: PUSH1 0x40
00000763: DUP1
00000764: MLOAD
00000765: DUP3
00000766: DUP2
00000767: MSTORE
00000768: PUSH1 0x00
0000076a: PUSH1 0x20
0000076c: DUP3
0000076d: ADD
0000076e: MSTORE
0000076f: DUP1
00000770: DUP3
00000771: ADD
00000772: DUP4
00000773: SWAP1
00000774: MSTORE
00000775: SWAP1
00000776: MLOAD
00000777: CALLER
00000778: PUSH1 0x01
0000077a: PUSH1 0xa0
0000077c: PUSH1 0x02
0000077e: EXP
0000077f: SUB
00000780: AND
00000781: SWAP2
00000782: PUSH32 0xbd5034ffbd47e4e72a94baa2cdb74c6fad73cb3bcdc13036b72ec8306f5a7646
000007a3: SWAP2
000007a4: SWAP1
000007a5: DUP2
000007a6: SWAP1
000007a7: SUB
000007a8: PUSH1 0x60
000007aa: ADD
000007ab: SWAP1
000007ac: LOG2
000007ad: PUSH2 0x07fe
000007b0: JUMP
000007b1: JUMPDEST
000007b2: PUSH1 0x40
000007b4: DUP1
000007b5: MLOAD
000007b6: DUP3
000007b7: DUP2
000007b8: MSTORE
000007b9: PUSH1 0x20
000007bb: DUP2
000007bc: ADD
000007bd: DUP4
000007be: SWAP1
000007bf: MSTORE
000007c0: PUSH1 0x00
000007c2: DUP2
000007c3: DUP4
000007c4: ADD
000007c5: MSTORE
000007c6: SWAP1
000007c7: MLOAD
000007c8: CALLER
000007c9: PUSH1 0x01
000007cb: PUSH1 0xa0
000007cd: PUSH1 0x02
000007cf: EXP
000007d0: SUB
000007d1: AND
000007d2: SWAP2
000007d3: PUSH32 0xbd5034ffbd47e4e72a94baa2cdb74c6fad73cb3bcdc13036b72ec8306f5a7646
000007f4: SWAP2
000007f5: SWAP1
000007f6: DUP2
000007f7: SWAP1
000007f8: SUB
000007f9: PUSH1 0x60
000007fb: ADD
000007fc: SWAP1
000007fd: LOG2
000007fe: JUMPDEST
000007ff: POP
00000800: JUMP
00000801: JUMPDEST
00000802: PUSH1 0x40
00000804: MLOAD
00000805: SWAP2
00000806: SWAP1
00000807: DIV
00000808: SWAP1
00000809: PUSH1 0x00
0000080b: DUP2
0000080c: DUP2
0000080d: DUP2
0000080e: DUP6
0000080f: DUP8
00000810: PUSH2 0x8502
00000813: GAS
00000814: SUB
00000815: CALL
00000816: SWAP3
00000817: POP
00000818: POP
00000819: POP
0000081a: ISZERO
0000081b: ISZERO
0000081c: PUSH2 0x07b1
0000081f: JUMPI
00000820: PUSH2 0x0002
00000823: JUMP
00000824: JUMPDEST
00000825: SWAP4
00000826: SWAP3
00000827: POP
00000828: POP
00000829: POP
0000082a: JUMP
View stderr 
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xff81c47ba1053f7a000d4d0e58b5d761894c6af6aeceb678fc30a7c75a0a2034
call_targets: 0xc39d73fca64d4ffe2c78fb17e61b9c8489f7c5fb
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xff81c47ba1053f7a000d4d0e58b5d761894c6af6aeceb678fc30a7c75a0a2034",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xc39d73fca64d4ffe2c78fb17e61b9c8489f7c5fb"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x11a9f10a",
            "selector": "0x11a9f10a",
            "calldata_variants": [
                "0x11a9f10a",
                "0x11a9f10a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27793f87",
            "selector": "0x27793f87",
            "calldata_variants": [
                "0x27793f87",
                "0x27793f870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3f6fa655",
            "selector": "0x3f6fa655",
            "calldata_variants": [
                "0x3f6fa655",
                "0x3f6fa6550000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5600f04f",
            "selector": "0x5600f04f",
            "calldata_variants": [
                "0x5600f04f",
                "0x5600f04f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x65e17c9d",
            "selector": "0x65e17c9d",
            "calldata_variants": [
                "0x65e17c9d",
                "0x65e17c9d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x93854494",
            "selector": "0x93854494",
            "calldata_variants": [
                "0x93854494",
                "0x938544940000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa6403636",
            "selector": "0xa6403636",
            "calldata_variants": [
                "0xa6403636",
                "0xa64036360000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xbbf646c2",
            "selector": "0xbbf646c2",
            "calldata_variants": [
                "0xbbf646c2",
                "0xbbf646c20000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 436,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 652,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 734,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 12,
    "guards_detected": [],
    "untrusted_call_count": 12
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xff81c47ba1053f7a000d4d0e58b5d761894c6af6aeceb678fc30a7c75a0a2034
call_targets: 0xc39d73fca64d4ffe2c78fb17e61b9c8489f7c5fb
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xff81c47ba1053f7a000d4d0e58b5d761894c6af6aeceb678fc30a7c75a0a2034",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xc39d73fca64d4ffe2c78fb17e61b9c8489f7c5fb"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x11a9f10a",
            "selector": "0x11a9f10a",
            "calldata_variants": [
                "0x11a9f10a",
                "0x11a9f10a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27793f87",
            "selector": "0x27793f87",
            "calldata_variants": [
                "0x27793f87",
                "0x27793f870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3f6fa655",
            "selector": "0x3f6fa655",
            "calldata_variants": [
                "0x3f6fa655",
                "0x3f6fa6550000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5600f04f",
            "selector": "0x5600f04f",
            "calldata_variants": [
                "0x5600f04f",
                "0x5600f04f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x65e17c9d",
            "selector": "0x65e17c9d",
            "calldata_variants": [
                "0x65e17c9d",
                "0x65e17c9d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x93854494",
            "selector": "0x93854494",
            "calldata_variants": [
                "0x93854494",
                "0x938544940000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa6403636",
            "selector": "0xa6403636",
            "calldata_variants": [
                "0xa6403636",
                "0xa64036360000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xbbf646c2",
            "selector": "0xbbf646c2",
            "calldata_variants": [
                "0xbbf646c2",
                "0xbbf646c20000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 436,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 652,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 734,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 12,
    "guards_detected": []
}