TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-58d4-7221-aca5-3f42ea56e220

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:04 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
2
Validated
2
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
8697 artifact.fetch complete 1 / 3 3 months ago
8698 tool.cast_disasm complete 1 / 3 3 months ago
52136 analysis.bundle complete 1 / 3 1 week ago
52137 capability.graph complete 1 / 3 1 week ago
52138 detector.run complete 1 / 3 1 week ago
52139 validation.fork complete 1 / 3 1 week ago
113391 report.consolidate complete 1 / 6 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate
Job Status
complete
Attempts
1 / 6
Findings
0
No findings?
View stderr
OpenAI Codex v0.118.0 (research preview)
--------
workdir: /tmp/codex-pg9cr7ir
model: gpt-5.4
provider: openai
approval: never
sandbox: read-only
reasoning effort: high
reasoning summaries: none
session id: 019d5c92-6408-7770-9684-ab15d4d24e26
--------
user
You are a security auditor. You ONLY have runtime bytecode + analysis artifacts.
You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary,
evidence bundle, callsites, storage slots, and detector findings.

Special cases when reasoning from bytecode (be explicit about uncertainty):
- Selector inference is best-effort; missing selectors are common.
- Fallback/receive paths may be the only entrypoints.
- CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage.
- Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative.
- Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown.
- Guard detection is heuristic; absence of guards does NOT mean unguarded.
- Returndata checking is unknown unless explicitly shown in evidence.
- Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim.

Output MUST be valid JSON matching the provided schema.
- If you find nothing meaningful: set no_findings=true and findings=[].
- Otherwise: set no_findings=false and include findings with severity/category/title.
- Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb".

Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation,
accounting/invariant breaks, dangerous delegatecall, and untrusted external calls.
Be conservative: if evidence is weak, mark severity low/medium and explain why.
warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
Metadata
{
    "codex": {
        "ran_at": "2026-04-05T07:36:32.689583+00:00",
        "returncode": 1
    },
    "project": {
        "mode": "bytecode",
        "bytecode_length": 3478,
        "bytecode_truncated": false,
        "capability_graph_present": true,
        "analysis_artifact_present": true
    },
    "summary": null,
    "no_findings": null,
    "schema_version": 1
}

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
2
CALL-family (heavy)
4
EXT*/BALANCE
0
Total opcodes
1236
Flags
create_opcodes_present
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00e5
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x06fdde03
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00f0
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x096a8ab7
00000025: EQ
00000026: PUSH2 0x014e
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x18160ddd
00000030: EQ
00000031: PUSH2 0x0170
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x26510f55
0000003b: EQ
0000003c: PUSH2 0x0179
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x27e235e3
00000046: EQ
00000047: PUSH2 0x019c
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x3ef96dd4
00000051: EQ
00000052: PUSH2 0x01b4
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x54fd4d50
0000005c: EQ
0000005d: PUSH2 0x01d7
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x70a08231
00000067: EQ
00000068: PUSH2 0x0235
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x71ca337d
00000072: EQ
00000073: PUSH2 0x0263
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x9245290d
0000007d: EQ
0000007e: PUSH2 0x026c
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0x94c15c42
00000088: EQ
00000089: PUSH2 0x028f
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0x95d89b41
00000093: EQ
00000094: PUSH2 0x02a1
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0x9ed3edf0
0000009e: EQ
0000009f: PUSH2 0x02ff
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xa035b1fe
000000a9: EQ
000000aa: PUSH2 0x0308
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0xa6f2ae3a
000000b4: EQ
000000b5: PUSH2 0x0311
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0xc415b95c
000000bf: EQ
000000c0: PUSH2 0x0327
000000c3: JUMPI
000000c4: DUP1
000000c5: PUSH4 0xe4849b32
000000ca: EQ
000000cb: PUSH2 0x0339
000000ce: JUMPI
000000cf: DUP1
000000d0: PUSH4 0xefb38026
000000d5: EQ
000000d6: PUSH2 0x03d1
000000d9: JUMPI
000000da: DUP1
000000db: PUSH4 0xf6a33253
000000e0: EQ
000000e1: PUSH2 0x03e3
000000e4: JUMPI
000000e5: JUMPDEST
000000e6: PUSH2 0x0406
000000e9: PUSH2 0x016d
000000ec: PUSH2 0x0315
000000ef: JUMP
000000f0: JUMPDEST
000000f1: PUSH1 0x40
000000f3: DUP1
000000f4: MLOAD
000000f5: PUSH1 0x0d
000000f7: DUP1
000000f8: SLOAD
000000f9: PUSH1 0x20
000000fb: PUSH1 0x02
000000fd: PUSH1 0x01
000000ff: DUP4
00000100: AND
00000101: ISZERO
00000102: PUSH2 0x0100
00000105: MUL
00000106: PUSH1 0x00
00000108: NOT
00000109: ADD
0000010a: SWAP1
0000010b: SWAP3
0000010c: AND
0000010d: SWAP2
0000010e: SWAP1
0000010f: SWAP2
00000110: DIV
00000111: PUSH1 0x1f
00000113: DUP2
00000114: ADD
00000115: DUP3
00000116: SWAP1
00000117: DIV
00000118: DUP3
00000119: MUL
0000011a: DUP5
0000011b: ADD
0000011c: DUP3
0000011d: ADD
0000011e: SWAP1
0000011f: SWAP5
00000120: MSTORE
00000121: DUP4
00000122: DUP4
00000123: MSTORE
00000124: PUSH2 0x0408
00000127: SWAP4
00000128: SWAP1
00000129: DUP4
0000012a: ADD
0000012b: DUP3
0000012c: DUP3
0000012d: DUP1
0000012e: ISZERO
0000012f: PUSH2 0x05b3
00000132: JUMPI
00000133: DUP1
00000134: PUSH1 0x1f
00000136: LT
00000137: PUSH2 0x0588
0000013a: JUMPI
0000013b: PUSH2 0x0100
0000013e: DUP1
0000013f: DUP4
00000140: SLOAD
00000141: DIV
00000142: MUL
00000143: DUP4
00000144: MSTORE
00000145: SWAP2
00000146: PUSH1 0x20
00000148: ADD
00000149: SWAP2
0000014a: PUSH2 0x05b3
0000014d: JUMP
0000014e: JUMPDEST
0000014f: PUSH2 0x0406
00000152: PUSH1 0x04
00000154: CALLDATALOAD
00000155: PUSH1 0x00
00000157: SLOAD
00000158: PUSH1 0x01
0000015a: PUSH1 0xa0
0000015c: PUSH1 0x02
0000015e: EXP
0000015f: SUB
00000160: SWAP1
00000161: DUP2
00000162: AND
00000163: ORIGIN
00000164: SWAP2
00000165: SWAP1
00000166: SWAP2
00000167: AND
00000168: EQ
00000169: PUSH2 0x05bb
0000016c: JUMPI
0000016d: JUMPDEST
0000016e: POP
0000016f: JUMP
00000170: JUMPDEST
00000171: PUSH2 0x0251
00000174: PUSH1 0x01
00000176: SLOAD
00000177: DUP2
00000178: JUMP
00000179: JUMPDEST
0000017a: PUSH2 0x0406
0000017d: PUSH1 0x04
0000017f: CALLDATALOAD
00000180: PUSH1 0x06
00000182: SLOAD
00000183: PUSH1 0x01
00000185: PUSH1 0xa0
00000187: PUSH1 0x02
00000189: EXP
0000018a: SUB
0000018b: SWAP1
0000018c: DUP2
0000018d: AND
0000018e: ORIGIN
0000018f: SWAP2
00000190: SWAP1
00000191: SWAP2
00000192: AND
00000193: EQ
00000194: PUSH2 0x05cf
00000197: JUMPI
00000198: PUSH2 0x016d
0000019b: JUMP
0000019c: JUMPDEST
0000019d: PUSH2 0x0251
000001a0: PUSH1 0x04
000001a2: CALLDATALOAD
000001a3: PUSH1 0x0c
000001a5: PUSH1 0x20
000001a7: MSTORE
000001a8: PUSH1 0x00
000001aa: SWAP1
000001ab: DUP2
000001ac: MSTORE
000001ad: PUSH1 0x40
000001af: SWAP1
000001b0: KECCAK256
000001b1: SLOAD
000001b2: DUP2
000001b3: JUMP
000001b4: JUMPDEST
000001b5: PUSH2 0x0406
000001b8: PUSH1 0x04
000001ba: CALLDATALOAD
000001bb: PUSH1 0x00
000001bd: SLOAD
000001be: PUSH1 0x01
000001c0: PUSH1 0xa0
000001c2: PUSH1 0x02
000001c4: EXP
000001c5: SUB
000001c6: SWAP1
000001c7: DUP2
000001c8: AND
000001c9: ORIGIN
000001ca: SWAP2
000001cb: SWAP1
000001cc: SWAP2
000001cd: AND
000001ce: EQ
000001cf: PUSH2 0x05e4
000001d2: JUMPI
000001d3: PUSH2 0x016d
000001d6: JUMP
000001d7: JUMPDEST
000001d8: PUSH1 0x40
000001da: DUP1
000001db: MLOAD
000001dc: PUSH1 0x0f
000001de: DUP1
000001df: SLOAD
000001e0: PUSH1 0x20
000001e2: PUSH1 0x02
000001e4: PUSH1 0x01
000001e6: DUP4
000001e7: AND
000001e8: ISZERO
000001e9: PUSH2 0x0100
000001ec: MUL
000001ed: PUSH1 0x00
000001ef: NOT
000001f0: ADD
000001f1: SWAP1
000001f2: SWAP3
000001f3: AND
000001f4: SWAP2
000001f5: SWAP1
000001f6: SWAP2
000001f7: DIV
000001f8: PUSH1 0x1f
000001fa: DUP2
000001fb: ADD
000001fc: DUP3
000001fd: SWAP1
000001fe: DIV
000001ff: DUP3
00000200: MUL
00000201: DUP5
00000202: ADD
00000203: DUP3
00000204: ADD
00000205: SWAP1
00000206: SWAP5
00000207: MSTORE
00000208: DUP4
00000209: DUP4
0000020a: MSTORE
0000020b: PUSH2 0x0408
0000020e: SWAP4
0000020f: SWAP1
00000210: DUP4
00000211: ADD
00000212: DUP3
00000213: DUP3
00000214: DUP1
00000215: ISZERO
00000216: PUSH2 0x05b3
00000219: JUMPI
0000021a: DUP1
0000021b: PUSH1 0x1f
0000021d: LT
0000021e: PUSH2 0x0588
00000221: JUMPI
00000222: PUSH2 0x0100
00000225: DUP1
00000226: DUP4
00000227: SLOAD
00000228: DIV
00000229: MUL
0000022a: DUP4
0000022b: MSTORE
0000022c: SWAP2
0000022d: PUSH1 0x20
0000022f: ADD
00000230: SWAP2
00000231: PUSH2 0x05b3
00000234: JUMP
00000235: JUMPDEST
00000236: PUSH1 0x04
00000238: CALLDATALOAD
00000239: PUSH1 0x01
0000023b: PUSH1 0xa0
0000023d: PUSH1 0x02
0000023f: EXP
00000240: SUB
00000241: AND
00000242: PUSH1 0x00
00000244: SWAP1
00000245: DUP2
00000246: MSTORE
00000247: PUSH1 0x0c
00000249: PUSH1 0x20
0000024b: MSTORE
0000024c: PUSH1 0x40
0000024e: SWAP1
0000024f: KECCAK256
00000250: SLOAD
00000251: JUMPDEST
00000252: PUSH1 0x40
00000254: DUP1
00000255: MLOAD
00000256: SWAP2
00000257: DUP3
00000258: MSTORE
00000259: MLOAD
0000025a: SWAP1
0000025b: DUP2
0000025c: SWAP1
0000025d: SUB
0000025e: PUSH1 0x20
00000260: ADD
00000261: SWAP1
00000262: RETURN
00000263: JUMPDEST
00000264: PUSH2 0x0251
00000267: PUSH1 0x0b
00000269: SLOAD
0000026a: DUP2
0000026b: JUMP
0000026c: JUMPDEST
0000026d: PUSH2 0x0406
00000270: PUSH1 0x04
00000272: CALLDATALOAD
00000273: PUSH1 0x00
00000275: SLOAD
00000276: PUSH1 0x01
00000278: PUSH1 0xa0
0000027a: PUSH1 0x02
0000027c: EXP
0000027d: SUB
0000027e: SWAP1
0000027f: DUP2
00000280: AND
00000281: ORIGIN
00000282: SWAP2
00000283: SWAP1
00000284: SWAP2
00000285: AND
00000286: EQ
00000287: PUSH2 0x062f
0000028a: JUMPI
0000028b: PUSH2 0x016d
0000028e: JUMP
0000028f: JUMPDEST
00000290: PUSH2 0x0476
00000293: PUSH1 0x00
00000295: SLOAD
00000296: PUSH1 0x01
00000298: PUSH1 0xa0
0000029a: PUSH1 0x02
0000029c: EXP
0000029d: SUB
0000029e: AND
0000029f: DUP2
000002a0: JUMP
000002a1: JUMPDEST
000002a2: PUSH2 0x0408
000002a5: PUSH1 0x0e
000002a7: DUP1
000002a8: SLOAD
000002a9: PUSH1 0x40
000002ab: DUP1
000002ac: MLOAD
000002ad: PUSH1 0x20
000002af: PUSH1 0x02
000002b1: PUSH1 0x01
000002b3: DUP6
000002b4: AND
000002b5: ISZERO
000002b6: PUSH2 0x0100
000002b9: MUL
000002ba: PUSH1 0x00
000002bc: NOT
000002bd: ADD
000002be: SWAP1
000002bf: SWAP5
000002c0: AND
000002c1: SWAP4
000002c2: SWAP1
000002c3: SWAP4
000002c4: DIV
000002c5: PUSH1 0x1f
000002c7: DUP2
000002c8: ADD
000002c9: DUP5
000002ca: SWAP1
000002cb: DIV
000002cc: DUP5
000002cd: MUL
000002ce: DUP3
000002cf: ADD
000002d0: DUP5
000002d1: ADD
000002d2: SWAP1
000002d3: SWAP3
000002d4: MSTORE
000002d5: DUP2
000002d6: DUP2
000002d7: MSTORE
000002d8: SWAP3
000002d9: SWAP2
000002da: DUP4
000002db: ADD
000002dc: DUP3
000002dd: DUP3
000002de: DUP1
000002df: ISZERO
000002e0: PUSH2 0x05b3
000002e3: JUMPI
000002e4: DUP1
000002e5: PUSH1 0x1f
000002e7: LT
000002e8: PUSH2 0x0588
000002eb: JUMPI
000002ec: PUSH2 0x0100
000002ef: DUP1
000002f0: DUP4
000002f1: SLOAD
000002f2: DIV
000002f3: MUL
000002f4: DUP4
000002f5: MSTORE
000002f6: SWAP2
000002f7: PUSH1 0x20
000002f9: ADD
000002fa: SWAP2
000002fb: PUSH2 0x05b3
000002fe: JUMP
000002ff: JUMPDEST
00000300: PUSH2 0x0251
00000303: PUSH1 0x03
00000305: SLOAD
00000306: DUP2
00000307: JUMP
00000308: JUMPDEST
00000309: PUSH2 0x0251
0000030c: PUSH1 0x02
0000030e: SLOAD
0000030f: DUP2
00000310: JUMP
00000311: JUMPDEST
00000312: PUSH2 0x0251
00000315: JUMPDEST
00000316: PUSH1 0x04
00000318: SLOAD
00000319: PUSH1 0x00
0000031b: SWAP1
0000031c: CALLVALUE
0000031d: LT
0000031e: ISZERO
0000031f: PUSH2 0x04ac
00000322: JUMPI
00000323: PUSH2 0x0002
00000326: JUMP
00000327: JUMPDEST
00000328: PUSH2 0x0476
0000032b: PUSH1 0x05
0000032d: SLOAD
0000032e: PUSH1 0x01
00000330: PUSH1 0xa0
00000332: PUSH1 0x02
00000334: EXP
00000335: SUB
00000336: AND
00000337: DUP2
00000338: JUMP
00000339: JUMPDEST
0000033a: PUSH2 0x0493
0000033d: PUSH1 0x04
0000033f: CALLDATALOAD
00000340: PUSH1 0x02
00000342: SLOAD
00000343: PUSH1 0x01
00000345: PUSH1 0xa0
00000347: PUSH1 0x02
00000349: EXP
0000034a: SUB
0000034b: ORIGIN
0000034c: AND
0000034d: PUSH1 0x00
0000034f: SWAP1
00000350: DUP2
00000351: MSTORE
00000352: PUSH1 0x0c
00000354: PUSH1 0x20
00000356: MSTORE
00000357: PUSH1 0x40
00000359: DUP2
0000035a: KECCAK256
0000035b: SLOAD
0000035c: SWAP2
0000035d: DUP4
0000035e: MUL
0000035f: SWAP2
00000360: DUP4
00000361: SWAP1
00000362: LT
00000363: DUP1
00000364: ISZERO
00000365: SWAP1
00000366: PUSH2 0x0374
00000369: JUMPI
0000036a: POP
0000036b: PUSH1 0x40
0000036d: DUP2
0000036e: KECCAK256
0000036f: SLOAD
00000370: DUP4
00000371: DUP2
00000372: ADD
00000373: GT
00000374: JUMPDEST
00000375: DUP1
00000376: ISZERO
00000377: PUSH2 0x0382
0000037a: JUMPI
0000037b: POP
0000037c: PUSH1 0x04
0000037e: SLOAD
0000037f: DUP3
00000380: LT
00000381: ISZERO
00000382: JUMPDEST
00000383: ISZERO
00000384: PUSH2 0x0644
00000387: JUMPI
00000388: PUSH1 0x01
0000038a: PUSH1 0xa0
0000038c: PUSH1 0x02
0000038e: EXP
0000038f: SUB
00000390: ORIGIN
00000391: AND
00000392: PUSH1 0x00
00000394: DUP2
00000395: DUP2
00000396: MSTORE
00000397: PUSH1 0x0c
00000399: PUSH1 0x20
0000039b: MSTORE
0000039c: PUSH1 0x40
0000039e: DUP1
0000039f: DUP3
000003a0: KECCAK256
000003a1: DUP1
000003a2: SLOAD
000003a3: DUP8
000003a4: SWAP1
000003a5: SUB
000003a6: SWAP1
000003a7: SSTORE
000003a8: PUSH1 0x01
000003aa: DUP1
000003ab: SLOAD
000003ac: DUP8
000003ad: SWAP1
000003ae: SUB
000003af: SWAP1
000003b0: SSTORE
000003b1: PUSH1 0x02
000003b3: SLOAD
000003b4: SWAP1
000003b5: MLOAD
000003b6: SWAP1
000003b7: DUP7
000003b8: MUL
000003b9: SWAP1
000003ba: DUP3
000003bb: DUP2
000003bc: DUP2
000003bd: DUP2
000003be: DUP6
000003bf: DUP9
000003c0: DUP4
000003c1: CALL
000003c2: SWAP4
000003c3: POP
000003c4: POP
000003c5: POP
000003c6: POP
000003c7: ISZERO
000003c8: ISZERO
000003c9: PUSH2 0x064d
000003cc: JUMPI
000003cd: PUSH2 0x0002
000003d0: JUMP
000003d1: JUMPDEST
000003d2: PUSH2 0x0476
000003d5: PUSH1 0x06
000003d7: SLOAD
000003d8: PUSH1 0x01
000003da: PUSH1 0xa0
000003dc: PUSH1 0x02
000003de: EXP
000003df: SUB
000003e0: AND
000003e1: DUP2
000003e2: JUMP
000003e3: JUMPDEST
000003e4: PUSH2 0x0406
000003e7: PUSH1 0x04
000003e9: CALLDATALOAD
000003ea: PUSH1 0x06
000003ec: SLOAD
000003ed: PUSH1 0x01
000003ef: PUSH1 0xa0
000003f1: PUSH1 0x02
000003f3: EXP
000003f4: SUB
000003f5: SWAP1
000003f6: DUP2
000003f7: AND
000003f8: ORIGIN
000003f9: SWAP2
000003fa: SWAP1
000003fb: SWAP2
000003fc: AND
000003fd: EQ
000003fe: PUSH2 0x06a5
00000401: JUMPI
00000402: PUSH2 0x016d
00000405: JUMP
00000406: JUMPDEST
00000407: STOP
00000408: JUMPDEST
00000409: PUSH1 0x40
0000040b: MLOAD
0000040c: DUP1
0000040d: DUP1
0000040e: PUSH1 0x20
00000410: ADD
00000411: DUP3
00000412: DUP2
00000413: SUB
00000414: DUP3
00000415: MSTORE
00000416: DUP4
00000417: DUP2
00000418: DUP2
00000419: MLOAD
0000041a: DUP2
0000041b: MSTORE
0000041c: PUSH1 0x20
0000041e: ADD
0000041f: SWAP2
00000420: POP
00000421: DUP1
00000422: MLOAD
00000423: SWAP1
00000424: PUSH1 0x20
00000426: ADD
00000427: SWAP1
00000428: DUP1
00000429: DUP4
0000042a: DUP4
0000042b: DUP3
0000042c: SWAP1
0000042d: PUSH1 0x00
0000042f: PUSH1 0x04
00000431: PUSH1 0x20
00000433: DUP5
00000434: PUSH1 0x1f
00000436: ADD
00000437: DIV
00000438: PUSH1 0x0f
0000043a: MUL
0000043b: PUSH1 0x03
0000043d: ADD
0000043e: CALL
0000043f: POP
00000440: SWAP1
00000441: POP
00000442: SWAP1
00000443: DUP2
00000444: ADD
00000445: SWAP1
00000446: PUSH1 0x1f
00000448: AND
00000449: DUP1
0000044a: ISZERO
0000044b: PUSH2 0x0468
0000044e: JUMPI
0000044f: DUP1
00000450: DUP3
00000451: SUB
00000452: DUP1
00000453: MLOAD
00000454: PUSH1 0x01
00000456: DUP4
00000457: PUSH1 0x20
00000459: SUB
0000045a: PUSH2 0x0100
0000045d: EXP
0000045e: SUB
0000045f: NOT
00000460: AND
00000461: DUP2
00000462: MSTORE
00000463: PUSH1 0x20
00000465: ADD
00000466: SWAP2
00000467: POP
00000468: JUMPDEST
00000469: POP
0000046a: SWAP3
0000046b: POP
0000046c: POP
0000046d: POP
0000046e: PUSH1 0x40
00000470: MLOAD
00000471: DUP1
00000472: SWAP2
00000473: SUB
00000474: SWAP1
00000475: RETURN
00000476: JUMPDEST
00000477: PUSH1 0x40
00000479: DUP1
0000047a: MLOAD
0000047b: PUSH1 0x01
0000047d: PUSH1 0xa0
0000047f: PUSH1 0x02
00000481: EXP
00000482: SUB
00000483: SWAP3
00000484: SWAP1
00000485: SWAP3
00000486: AND
00000487: DUP3
00000488: MSTORE
00000489: MLOAD
0000048a: SWAP1
0000048b: DUP2
0000048c: SWAP1
0000048d: SUB
0000048e: PUSH1 0x20
00000490: ADD
00000491: SWAP1
00000492: RETURN
00000493: JUMPDEST
00000494: PUSH1 0x40
00000496: DUP1
00000497: MLOAD
00000498: SWAP3
00000499: DUP4
0000049a: MSTORE
0000049b: SWAP1
0000049c: ISZERO
0000049d: ISZERO
0000049e: PUSH1 0x20
000004a0: DUP4
000004a1: ADD
000004a2: MSTORE
000004a3: DUP1
000004a4: MLOAD
000004a5: SWAP2
000004a6: DUP3
000004a7: SWAP1
000004a8: SUB
000004a9: ADD
000004aa: SWAP1
000004ab: RETURN
000004ac: JUMPDEST
000004ad: POP
000004ae: PUSH1 0x02
000004b0: SLOAD
000004b1: CALLVALUE
000004b2: DIV
000004b3: PUSH1 0x07
000004b5: DUP2
000004b6: DUP2
000004b7: SSTORE
000004b8: PUSH1 0x03
000004ba: SLOAD
000004bb: PUSH9 0x056bc75e2d63100000
000004c5: SWAP1
000004c6: DUP4
000004c7: MUL
000004c8: DIV
000004c9: PUSH1 0x08
000004cb: DUP2
000004cc: SWAP1
000004cd: SSTORE
000004ce: PUSH1 0x64
000004d0: PUSH1 0x50
000004d2: DUP3
000004d3: MUL
000004d4: DIV
000004d5: PUSH1 0x09
000004d7: DUP2
000004d8: DUP2
000004d9: SSTORE
000004da: SWAP1
000004db: DUP3
000004dc: SUB
000004dd: PUSH1 0x0a
000004df: SWAP1
000004e0: DUP2
000004e1: SSTORE
000004e2: PUSH1 0x01
000004e4: PUSH1 0xa0
000004e6: PUSH1 0x02
000004e8: EXP
000004e9: SUB
000004ea: ORIGIN
000004eb: DUP2
000004ec: AND
000004ed: PUSH1 0x00
000004ef: DUP2
000004f0: DUP2
000004f1: MSTORE
000004f2: PUSH1 0x0c
000004f4: PUSH1 0x20
000004f6: MSTORE
000004f7: PUSH1 0x40
000004f9: DUP1
000004fa: DUP3
000004fb: KECCAK256
000004fc: DUP1
000004fd: SLOAD
000004fe: SWAP8
000004ff: SWAP1
00000500: SWAP10
00000501: SUB
00000502: SWAP7
00000503: DUP8
00000504: ADD
00000505: SWAP1
00000506: SWAP9
00000507: SSTORE
00000508: SWAP4
00000509: SLOAD
0000050a: PUSH1 0x05
0000050c: SLOAD
0000050d: DUP4
0000050e: AND
0000050f: DUP6
00000510: MSTORE
00000511: DUP8
00000512: DUP6
00000513: KECCAK256
00000514: DUP1
00000515: SLOAD
00000516: SWAP1
00000517: SWAP2
00000518: ADD
00000519: SWAP1
0000051a: SSTORE
0000051b: SWAP2
0000051c: SLOAD
0000051d: PUSH1 0x06
0000051f: SLOAD
00000520: SWAP1
00000521: SWAP2
00000522: AND
00000523: DUP4
00000524: MSTORE
00000525: DUP6
00000526: DUP4
00000527: KECCAK256
00000528: DUP1
00000529: SLOAD
0000052a: SWAP1
0000052b: SWAP2
0000052c: ADD
0000052d: SWAP1
0000052e: SSTORE
0000052f: SWAP3
00000530: SLOAD
00000531: PUSH1 0x01
00000533: DUP1
00000534: SLOAD
00000535: SWAP1
00000536: SWAP2
00000537: ADD
00000538: SWAP1
00000539: SSTORE
0000053a: SWAP3
0000053b: MLOAD
0000053c: SWAP1
0000053d: SWAP3
0000053e: DUP4
0000053f: SWAP3
00000540: SWAP2
00000541: PUSH1 0x00
00000543: DUP1
00000544: MLOAD
00000545: PUSH1 0x20
00000547: PUSH2 0x06aa
0000054a: DUP4
0000054b: CODECOPY
0000054c: DUP2
0000054d: MLOAD
0000054e: SWAP2
0000054f: MSTORE
00000550: SWAP1
00000551: DUP3
00000552: SWAP1
00000553: LOG4
00000554: CALLVALUE
00000555: ADDRESS
00000556: PUSH1 0x01
00000558: PUSH1 0xa0
0000055a: PUSH1 0x02
0000055c: EXP
0000055d: SUB
0000055e: AND
0000055f: ORIGIN
00000560: PUSH1 0x01
00000562: PUSH1 0xa0
00000564: PUSH1 0x02
00000566: EXP
00000567: SUB
00000568: AND
00000569: PUSH1 0x00
0000056b: DUP1
0000056c: MLOAD
0000056d: PUSH1 0x20
0000056f: PUSH2 0x06aa
00000572: DUP4
00000573: CODECOPY
00000574: DUP2
00000575: MLOAD
00000576: SWAP2
00000577: MSTORE
00000578: PUSH1 0x40
0000057a: MLOAD
0000057b: DUP1
0000057c: SWAP1
0000057d: POP
0000057e: PUSH1 0x40
00000580: MLOAD
00000581: DUP1
00000582: SWAP2
00000583: SUB
00000584: SWAP1
00000585: LOG4
00000586: SWAP1
00000587: JUMP
00000588: JUMPDEST
00000589: DUP3
0000058a: ADD
0000058b: SWAP2
0000058c: SWAP1
0000058d: PUSH1 0x00
0000058f: MSTORE
00000590: PUSH1 0x20
00000592: PUSH1 0x00
00000594: KECCAK256
00000595: SWAP1
00000596: JUMPDEST
00000597: DUP2
00000598: SLOAD
00000599: DUP2
0000059a: MSTORE
0000059b: SWAP1
0000059c: PUSH1 0x01
0000059e: ADD
0000059f: SWAP1
000005a0: PUSH1 0x20
000005a2: ADD
000005a3: DUP1
000005a4: DUP4
000005a5: GT
000005a6: PUSH2 0x0596
000005a9: JUMPI
000005aa: DUP3
000005ab: SWAP1
000005ac: SUB
000005ad: PUSH1 0x1f
000005af: AND
000005b0: DUP3
000005b1: ADD
000005b2: SWAP2
000005b3: JUMPDEST
000005b4: POP
000005b5: POP
000005b6: POP
000005b7: POP
000005b8: POP
000005b9: DUP2
000005ba: JUMP
000005bb: JUMPDEST
000005bc: PUSH9 0x056bc75e2d63100000
000005c6: CALLVALUE
000005c7: DUP3
000005c8: MUL
000005c9: DIV
000005ca: PUSH1 0x03
000005cc: SSTORE
000005cd: POP
000005ce: JUMP
000005cf: JUMPDEST
000005d0: PUSH1 0x06
000005d2: DUP1
000005d3: SLOAD
000005d4: PUSH1 0x01
000005d6: PUSH1 0xa0
000005d8: PUSH1 0x02
000005da: EXP
000005db: SUB
000005dc: NOT
000005dd: AND
000005de: DUP3
000005df: OR
000005e0: SWAP1
000005e1: SSTORE
000005e2: POP
000005e3: JUMP
000005e4: JUMPDEST
000005e5: PUSH1 0x00
000005e7: DUP1
000005e8: SLOAD
000005e9: PUSH1 0x01
000005eb: PUSH1 0xa0
000005ed: PUSH1 0x02
000005ef: EXP
000005f0: SUB
000005f1: NOT
000005f2: AND
000005f3: DUP3
000005f4: OR
000005f5: DUP1
000005f6: DUP3
000005f7: SSTORE
000005f8: PUSH1 0x40
000005fa: MLOAD
000005fb: PUSH1 0x01
000005fd: PUSH1 0xa0
000005ff: PUSH1 0x02
00000601: EXP
00000602: SUB
00000603: DUP5
00000604: DUP2
00000605: AND
00000606: SWAP4
00000607: SWAP3
00000608: AND
00000609: SWAP2
0000060a: PUSH32 0xc9ac373e07ad1e2272e9cc15bd99936749c5fa9d99165803402c01c473f16f46
0000062b: SWAP2
0000062c: LOG3
0000062d: POP
0000062e: JUMP
0000062f: JUMPDEST
00000630: PUSH1 0x05
00000632: DUP1
00000633: SLOAD
00000634: PUSH1 0x01
00000636: PUSH1 0xa0
00000638: PUSH1 0x02
0000063a: EXP
0000063b: SUB
0000063c: NOT
0000063d: AND
0000063e: DUP3
0000063f: OR
00000640: SWAP1
00000641: SSTORE
00000642: POP
00000643: JUMP
00000644: JUMPDEST
00000645: POP
00000646: PUSH1 0x00
00000648: JUMPDEST
00000649: SWAP2
0000064a: POP
0000064b: SWAP2
0000064c: JUMP
0000064d: JUMPDEST
0000064e: PUSH1 0x40
00000650: MLOAD
00000651: DUP4
00000652: SWAP1
00000653: PUSH1 0x00
00000655: SWAP1
00000656: PUSH1 0x01
00000658: PUSH1 0xa0
0000065a: PUSH1 0x02
0000065c: EXP
0000065d: SUB
0000065e: ORIGIN
0000065f: AND
00000660: SWAP1
00000661: PUSH1 0x00
00000663: DUP1
00000664: MLOAD
00000665: PUSH1 0x20
00000667: PUSH2 0x06aa
0000066a: DUP4
0000066b: CODECOPY
0000066c: DUP2
0000066d: MLOAD
0000066e: SWAP2
0000066f: MSTORE
00000670: SWAP1
00000671: DUP4
00000672: SWAP1
00000673: LOG4
00000674: PUSH1 0x40
00000676: MLOAD
00000677: DUP3
00000678: SWAP1
00000679: PUSH1 0x01
0000067b: PUSH1 0xa0
0000067d: PUSH1 0x02
0000067f: EXP
00000680: SUB
00000681: ORIGIN
00000682: DUP2
00000683: AND
00000684: SWAP2
00000685: ADDRESS
00000686: SWAP1
00000687: SWAP2
00000688: AND
00000689: SWAP1
0000068a: PUSH1 0x00
0000068c: DUP1
0000068d: MLOAD
0000068e: PUSH1 0x20
00000690: PUSH2 0x06aa
00000693: DUP4
00000694: CODECOPY
00000695: DUP2
00000696: MLOAD
00000697: SWAP2
00000698: MSTORE
00000699: SWAP1
0000069a: PUSH1 0x00
0000069c: SWAP1
0000069d: LOG4
0000069e: POP
0000069f: PUSH1 0x01
000006a1: PUSH2 0x0648
000006a4: JUMP
000006a5: JUMPDEST
000006a6: PUSH1 0x0b
000006a8: SSTORE
000006a9: JUMP
000006aa: UNKNOWN(0xDD)
000006ab: CALLCODE
000006ac: MSTORE
000006ad: UNKNOWN(0xAD)
000006ae: SHL
000006af: UNKNOWN(0xE2)
000006b0: UNKNOWN(0xC8)
000006b1: SWAP12
000006b2: PUSH10 0xc2b068fc378daa952ba7
000006bd: CALL
000006be: PUSH4 0xc4a11628
000006c3: CREATE2
000006c4: GAS
000006c5: UNKNOWN(0x4D)
000006c6: CREATE2
000006c7: UNKNOWN(0x23)
000006c8: UNKNOWN(0xB3)
000006c9: UNKNOWN(0xEF)
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high auth detector Authorization based on tx.origin 70 no
view
validation_json
{
    "reason": "missing sink mapping",
    "status": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x096a8ab7",
            "selector": "0x096a8ab7",
            "calldata_variants": [
                "0x096a8ab7",
                "0x096a8ab70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x26510f55",
            "selector": "0x26510f55",
            "calldata_variants": [
                "0x26510f55",
                "0x26510f550000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ef96dd4",
            "selector": "0x3ef96dd4",
            "calldata_variants": [
                "0x3ef96dd4",
                "0x3ef96dd40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x54fd4d50",
            "selector": "0x54fd4d50",
            "calldata_variants": [
                "0x54fd4d50",
                "0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "guards_detected": [
        {
            "pc": 355,
            "type": "tx_origin_used"
        },
        {
            "pc": 398,
            "type": "tx_origin_used"
        },
        {
            "pc": 457,
            "type": "tx_origin_used"
        },
        {
            "pc": 641,
            "type": "tx_origin_used"
        },
        {
            "pc": 843,
            "type": "tx_origin_used"
        },
        {
            "pc": 912,
            "type": "tx_origin_used"
        },
        {
            "pc": 1016,
            "type": "tx_origin_used"
        },
        {
            "pc": 1258,
            "type": "tx_origin_used"
        },
        {
            "pc": 1375,
            "type": "tx_origin_used"
        },
        {
            "pc": 1630,
            "type": "tx_origin_used"
        },
        {
            "pc": 1665,
            "type": "tx_origin_used"
        }
    ]
}
medium other detector Untrusted CALL target/value reachable 45 yes yes
view
trace_id: 0xeb1ec37b64ba284da863cc09eda2db2ac0d280f648f2025090a59f3514707469
call_targets: 0x0000000000000000000000000000000000000004, 0x1802cdfd71a1fe4a4f342cd3fff8be6b468e091f
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0xeb1ec37b64ba284da863cc09eda2db2ac0d280f648f2025090a59f3514707469",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0x1802cdfd71a1fe4a4f342cd3fff8be6b468e091f"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x096a8ab7",
            "selector": "0x096a8ab7",
            "calldata_variants": [
                "0x096a8ab7",
                "0x096a8ab70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x26510f55",
            "selector": "0x26510f55",
            "calldata_variants": [
                "0x26510f55",
                "0x26510f550000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ef96dd4",
            "selector": "0x3ef96dd4",
            "calldata_variants": [
                "0x3ef96dd4",
                "0x3ef96dd40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x54fd4d50",
            "selector": "0x54fd4d50",
            "calldata_variants": [
                "0x54fd4d50",
                "0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 961,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1086,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1707,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 4,
    "guards_detected": [
        {
            "pc": 355,
            "type": "tx_origin_used"
        },
        {
            "pc": 398,
            "type": "tx_origin_used"
        },
        {
            "pc": 457,
            "type": "tx_origin_used"
        },
        {
            "pc": 641,
            "type": "tx_origin_used"
        },
        {
            "pc": 843,
            "type": "tx_origin_used"
        },
        {
            "pc": 912,
            "type": "tx_origin_used"
        },
        {
            "pc": 1016,
            "type": "tx_origin_used"
        },
        {
            "pc": 1258,
            "type": "tx_origin_used"
        },
        {
            "pc": 1375,
            "type": "tx_origin_used"
        },
        {
            "pc": 1630,
            "type": "tx_origin_used"
        },
        {
            "pc": 1665,
            "type": "tx_origin_used"
        }
    ],
    "untrusted_call_count": 4
}
medium other detector ETH value transfer possible 40 yes yes
view
trace_id: 0xeb1ec37b64ba284da863cc09eda2db2ac0d280f648f2025090a59f3514707469
call_targets: 0x0000000000000000000000000000000000000004, 0x1802cdfd71a1fe4a4f342cd3fff8be6b468e091f
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0xeb1ec37b64ba284da863cc09eda2db2ac0d280f648f2025090a59f3514707469",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0x1802cdfd71a1fe4a4f342cd3fff8be6b468e091f"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x096a8ab7",
            "selector": "0x096a8ab7",
            "calldata_variants": [
                "0x096a8ab7",
                "0x096a8ab70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x26510f55",
            "selector": "0x26510f55",
            "calldata_variants": [
                "0x26510f55",
                "0x26510f550000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ef96dd4",
            "selector": "0x3ef96dd4",
            "calldata_variants": [
                "0x3ef96dd4",
                "0x3ef96dd40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x54fd4d50",
            "selector": "0x54fd4d50",
            "calldata_variants": [
                "0x54fd4d50",
                "0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 961,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1086,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1707,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 4,
    "guards_detected": [
        {
            "pc": 355,
            "type": "tx_origin_used"
        },
        {
            "pc": 398,
            "type": "tx_origin_used"
        },
        {
            "pc": 457,
            "type": "tx_origin_used"
        },
        {
            "pc": 641,
            "type": "tx_origin_used"
        },
        {
            "pc": 843,
            "type": "tx_origin_used"
        },
        {
            "pc": 912,
            "type": "tx_origin_used"
        },
        {
            "pc": 1016,
            "type": "tx_origin_used"
        },
        {
            "pc": 1258,
            "type": "tx_origin_used"
        },
        {
            "pc": 1375,
            "type": "tx_origin_used"
        },
        {
            "pc": 1630,
            "type": "tx_origin_used"
        },
        {
            "pc": 1665,
            "type": "tx_origin_used"
        }
    ]
}
medium other detector CREATE/CREATE2 reachable 45 no no
view
trace_id: 0xaec4a2dd18dfb1fb2661a4ddde6ec16c5836766cd7bc4a0612c8cb75cd4d9607
validation_json
{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 32,
    "trace_id": "0xaec4a2dd18dfb1fb2661a4ddde6ec16c5836766cd7bc4a0612c8cb75cd4d9607",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x096a8ab7",
            "selector": "0x096a8ab7",
            "calldata_variants": [
                "0x096a8ab7",
                "0x096a8ab70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x26510f55",
            "selector": "0x26510f55",
            "calldata_variants": [
                "0x26510f55",
                "0x26510f550000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ef96dd4",
            "selector": "0x3ef96dd4",
            "calldata_variants": [
                "0x3ef96dd4",
                "0x3ef96dd40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x54fd4d50",
            "selector": "0x54fd4d50",
            "calldata_variants": [
                "0x54fd4d50",
                "0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "create_count": 0,
    "create2_count": 2
}