019b3836-59b7-7038-865c-fa553a2cfd21
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 8819 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 8820 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 98342 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 98343 | capability.graph | complete | 1 / 3 | 1 week ago |
| 98344 | detector.run | complete | 1 / 3 | 1 week ago |
| 98345 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0061 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x13af4035 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x006c 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x35c1d349 00000025: EQ 00000026: PUSH2 0x009f 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x8da5cb5b 00000030: EQ 00000031: PUSH2 0x0112 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x9003adfe 0000003b: EQ 0000003c: PUSH2 0x0124 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0xa60f3588 00000046: EQ 00000047: PUSH2 0x012d 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xc8796572 00000051: EQ 00000052: PUSH2 0x0136 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0xe97dcb62 0000005c: EQ 0000005d: PUSH2 0x015e 00000060: JUMPI 00000061: JUMPDEST 00000062: PUSH2 0x01cc 00000065: PUSH2 0x015c 00000068: PUSH2 0x0162 0000006b: JUMP 0000006c: JUMPDEST 0000006d: PUSH2 0x01cc 00000070: PUSH1 0x04 00000072: CALLDATALOAD 00000073: PUSH1 0x04 00000075: SLOAD 00000076: CALLER 00000077: PUSH1 0x01 00000079: PUSH1 0xa0 0000007b: PUSH1 0x02 0000007d: EXP 0000007e: SUB 0000007f: SWAP1 00000080: DUP2 00000081: AND 00000082: SWAP2 00000083: AND 00000084: EQ 00000085: ISZERO 00000086: PUSH2 0x009c 00000089: JUMPI 0000008a: PUSH1 0x04 0000008c: DUP1 0000008d: SLOAD 0000008e: PUSH1 0x01 00000090: PUSH1 0xa0 00000092: PUSH1 0x02 00000094: EXP 00000095: SUB 00000096: NOT 00000097: AND 00000098: DUP3 00000099: OR 0000009a: SWAP1 0000009b: SSTORE 0000009c: JUMPDEST 0000009d: POP 0000009e: JUMP 0000009f: JUMPDEST 000000a0: PUSH2 0x01ce 000000a3: PUSH1 0x04 000000a5: CALLDATALOAD 000000a6: PUSH1 0x00 000000a8: DUP1 000000a9: SLOAD 000000aa: DUP3 000000ab: SWAP1 000000ac: DUP2 000000ad: LT 000000ae: ISZERO 000000af: PUSH2 0x0002 000000b2: JUMPI 000000b3: POP 000000b4: DUP1 000000b5: MSTORE 000000b6: PUSH1 0x02 000000b8: MUL 000000b9: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 000000da: DUP2 000000db: ADD 000000dc: SLOAD 000000dd: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e564 000000fe: SWAP2 000000ff: SWAP1 00000100: SWAP2 00000101: ADD 00000102: SLOAD 00000103: PUSH1 0x01 00000105: PUSH1 0xa0 00000107: PUSH1 0x02 00000109: EXP 0000010a: SUB 0000010b: SWAP2 0000010c: SWAP1 0000010d: SWAP2 0000010e: AND 0000010f: SWAP1 00000110: DUP3 00000111: JUMP 00000112: JUMPDEST 00000113: PUSH2 0x01f4 00000116: PUSH1 0x04 00000118: SLOAD 00000119: PUSH1 0x01 0000011b: PUSH1 0xa0 0000011d: PUSH1 0x02 0000011f: EXP 00000120: SUB 00000121: AND 00000122: DUP2 00000123: JUMP 00000124: JUMPDEST 00000125: PUSH2 0x0211 00000128: PUSH1 0x02 0000012a: SLOAD 0000012b: DUP2 0000012c: JUMP 0000012d: JUMPDEST 0000012e: PUSH2 0x0211 00000131: PUSH1 0x01 00000133: SLOAD 00000134: DUP2 00000135: JUMP 00000136: JUMPDEST 00000137: PUSH2 0x01cc 0000013a: PUSH1 0x04 0000013c: SLOAD 0000013d: CALLER 0000013e: PUSH1 0x01 00000140: PUSH1 0xa0 00000142: PUSH1 0x02 00000144: EXP 00000145: SUB 00000146: SWAP1 00000147: DUP2 00000148: AND 00000149: SWAP2 0000014a: AND 0000014b: EQ 0000014c: ISZERO 0000014d: PUSH2 0x015c 00000150: JUMPI 00000151: PUSH1 0x02 00000153: SLOAD 00000154: PUSH1 0x00 00000156: EQ 00000157: ISZERO 00000158: PUSH2 0x0381 0000015b: JUMPI 0000015c: JUMPDEST 0000015d: JUMP 0000015e: JUMPDEST 0000015f: PUSH2 0x01cc 00000162: JUMPDEST 00000163: PUSH1 0x02 00000165: DUP1 00000166: SLOAD 00000167: PUSH1 0x0a 00000169: CALLVALUE 0000016a: DIV 0000016b: SWAP1 0000016c: DUP2 0000016d: ADD 0000016e: SWAP1 0000016f: SWAP2 00000170: SSTORE 00000171: PUSH1 0x00 00000173: DUP1 00000174: SLOAD 00000175: PUSH1 0x01 00000177: DUP2 00000178: ADD 00000179: DUP1 0000017a: DUP4 0000017b: SSTORE 0000017c: SWAP1 0000017d: SWAP2 0000017e: SWAP1 0000017f: DUP3 00000180: SWAP1 00000181: DUP3 00000182: SWAP1 00000183: DUP3 00000184: DUP1 00000185: ISZERO 00000186: DUP3 00000187: SWAP1 00000188: GT 00000189: PUSH2 0x0223 0000018c: JUMPI 0000018d: PUSH1 0x02 0000018f: MUL 00000190: DUP2 00000191: PUSH1 0x02 00000193: MUL 00000194: DUP4 00000195: PUSH1 0x00 00000197: MSTORE 00000198: PUSH1 0x20 0000019a: PUSH1 0x00 0000019c: KECCAK256 0000019d: SWAP2 0000019e: DUP3 0000019f: ADD 000001a0: SWAP2 000001a1: ADD 000001a2: PUSH2 0x0223 000001a5: SWAP2 000001a6: SWAP1 000001a7: JUMPDEST 000001a8: DUP1 000001a9: DUP3 000001aa: GT 000001ab: ISZERO 000001ac: PUSH2 0x0366 000001af: JUMPI 000001b0: DUP1 000001b1: SLOAD 000001b2: PUSH1 0x01 000001b4: PUSH1 0xa0 000001b6: PUSH1 0x02 000001b8: EXP 000001b9: SUB 000001ba: NOT 000001bb: AND 000001bc: DUP2 000001bd: SSTORE 000001be: PUSH1 0x00 000001c0: PUSH1 0x01 000001c2: DUP3 000001c3: ADD 000001c4: SSTORE 000001c5: PUSH1 0x02 000001c7: ADD 000001c8: PUSH2 0x01a7 000001cb: JUMP 000001cc: JUMPDEST 000001cd: STOP 000001ce: JUMPDEST 000001cf: PUSH1 0x40 000001d1: MLOAD 000001d2: DUP1 000001d3: DUP4 000001d4: PUSH1 0x01 000001d6: PUSH1 0xa0 000001d8: PUSH1 0x02 000001da: EXP 000001db: SUB 000001dc: AND 000001dd: DUP2 000001de: MSTORE 000001df: PUSH1 0x20 000001e1: ADD 000001e2: DUP3 000001e3: DUP2 000001e4: MSTORE 000001e5: PUSH1 0x20 000001e7: ADD 000001e8: SWAP3 000001e9: POP 000001ea: POP 000001eb: POP 000001ec: PUSH1 0x40 000001ee: MLOAD 000001ef: DUP1 000001f0: SWAP2 000001f1: SUB 000001f2: SWAP1 000001f3: RETURN 000001f4: JUMPDEST 000001f5: PUSH1 0x40 000001f7: DUP1 000001f8: MLOAD 000001f9: PUSH1 0x01 000001fb: PUSH1 0xa0 000001fd: PUSH1 0x02 000001ff: EXP 00000200: SUB 00000201: SWAP3 00000202: SWAP1 00000203: SWAP3 00000204: AND 00000205: DUP3 00000206: MSTORE 00000207: MLOAD 00000208: SWAP1 00000209: DUP2 0000020a: SWAP1 0000020b: SUB 0000020c: PUSH1 0x20 0000020e: ADD 0000020f: SWAP1 00000210: RETURN 00000211: JUMPDEST 00000212: PUSH1 0x40 00000214: DUP1 00000215: MLOAD 00000216: SWAP2 00000217: DUP3 00000218: MSTORE 00000219: MLOAD 0000021a: SWAP1 0000021b: DUP2 0000021c: SWAP1 0000021d: SUB 0000021e: PUSH1 0x20 00000220: ADD 00000221: SWAP1 00000222: RETURN 00000223: JUMPDEST 00000224: POP 00000225: POP 00000226: POP 00000227: POP 00000228: CALLER 00000229: PUSH1 0x00 0000022b: PUSH1 0x00 0000022d: POP 0000022e: DUP4 0000022f: DUP2 00000230: SLOAD 00000231: DUP2 00000232: LT 00000233: ISZERO 00000234: PUSH2 0x0002 00000237: JUMPI 00000238: DUP2 00000239: DUP1 0000023a: MSTORE 0000023b: PUSH1 0x02 0000023d: MUL 0000023e: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 0000025f: ADD 00000260: DUP1 00000261: SLOAD 00000262: PUSH1 0x01 00000264: PUSH1 0xa0 00000266: PUSH1 0x02 00000268: EXP 00000269: SUB 0000026a: NOT 0000026b: AND 0000026c: SWAP1 0000026d: SWAP3 0000026e: OR 0000026f: SWAP1 00000270: SWAP2 00000271: SSTORE 00000272: DUP1 00000273: SLOAD 00000274: CALLVALUE 00000275: DUP6 00000276: SWAP1 00000277: SUB 00000278: SWAP2 00000279: SWAP1 0000027a: DUP5 0000027b: SWAP1 0000027c: DUP2 0000027d: LT 0000027e: ISZERO 0000027f: PUSH2 0x0002 00000282: JUMPI 00000283: PUSH1 0x02 00000285: MUL 00000286: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e564 000002a7: ADD 000002a8: SWAP2 000002a9: SWAP1 000002aa: SWAP2 000002ab: SSTORE 000002ac: PUSH1 0x03 000002ae: DUP1 000002af: SLOAD 000002b0: CALLVALUE 000002b1: DUP7 000002b2: SWAP1 000002b3: SUB 000002b4: ADD 000002b5: SWAP1 000002b6: SSTORE 000002b7: PUSH1 0x01 000002b9: SLOAD 000002ba: DUP2 000002bb: SLOAD 000002bc: PUSH1 0x64 000002be: SWAP3 000002bf: SWAP2 000002c0: SWAP1 000002c1: DUP2 000002c2: LT 000002c3: ISZERO 000002c4: PUSH2 0x0002 000002c7: JUMPI 000002c8: PUSH1 0x03 000002ca: SLOAD 000002cb: PUSH1 0x02 000002cd: SWAP2 000002ce: SWAP1 000002cf: SWAP2 000002d0: MUL 000002d1: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e564 000002f2: ADD 000002f3: SLOAD 000002f4: SWAP3 000002f5: SWAP1 000002f6: SWAP3 000002f7: DIV 000002f8: PUSH1 0x96 000002fa: MUL 000002fb: SWAP3 000002fc: POP 000002fd: POP 000002fe: DUP2 000002ff: SWAP1 00000300: LT 00000301: PUSH2 0x037c 00000304: JUMPI 00000305: PUSH1 0x01 00000307: SLOAD 00000308: PUSH1 0x00 0000030a: DUP1 0000030b: SLOAD 0000030c: SWAP1 0000030d: SWAP2 0000030e: SWAP1 0000030f: DUP2 00000310: LT 00000311: ISZERO 00000312: PUSH2 0x0002 00000315: JUMPI 00000316: PUSH1 0x02 00000318: MUL 00000319: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 0000033a: ADD 0000033b: SLOAD 0000033c: PUSH1 0x40 0000033e: MLOAD 0000033f: PUSH1 0x01 00000341: PUSH1 0xa0 00000343: PUSH1 0x02 00000345: EXP 00000346: SUB 00000347: SWAP2 00000348: SWAP1 00000349: SWAP2 0000034a: AND 0000034b: SWAP2 0000034c: SWAP1 0000034d: DUP4 0000034e: SWAP1 0000034f: DUP3 00000350: DUP2 00000351: DUP2 00000352: DUP2 00000353: DUP6 00000354: DUP9 00000355: DUP4 00000356: CALL 00000357: SWAP4 00000358: POP 00000359: POP 0000035a: POP 0000035b: POP 0000035c: ISZERO 0000035d: ISZERO 0000035e: PUSH2 0x036a 00000361: JUMPI 00000362: PUSH2 0x0002 00000365: JUMP 00000366: JUMPDEST 00000367: POP 00000368: SWAP1 00000369: JUMP 0000036a: JUMPDEST 0000036b: PUSH1 0x03 0000036d: DUP1 0000036e: SLOAD 0000036f: DUP3 00000370: SWAP1 00000371: SUB 00000372: SWAP1 00000373: SSTORE 00000374: PUSH1 0x01 00000376: DUP1 00000377: SLOAD 00000378: DUP2 00000379: ADD 0000037a: SWAP1 0000037b: SSTORE 0000037c: JUMPDEST 0000037d: POP 0000037e: POP 0000037f: POP 00000380: JUMP 00000381: JUMPDEST 00000382: PUSH1 0x04 00000384: SLOAD 00000385: PUSH1 0x02 00000387: SLOAD 00000388: PUSH1 0x40 0000038a: MLOAD 0000038b: PUSH1 0x01 0000038d: PUSH1 0xa0 0000038f: PUSH1 0x02 00000391: EXP 00000392: SUB 00000393: SWAP3 00000394: SWAP1 00000395: SWAP3 00000396: AND 00000397: SWAP2 00000398: PUSH1 0x00 0000039a: SWAP2 0000039b: SWAP1 0000039c: DUP3 0000039d: DUP2 0000039e: DUP2 0000039f: DUP2 000003a0: DUP6 000003a1: DUP9 000003a2: DUP4 000003a3: CALL 000003a4: SWAP4 000003a5: POP 000003a6: POP 000003a7: POP 000003a8: POP 000003a9: ISZERO 000003aa: ISZERO 000003ab: PUSH2 0x03b3 000003ae: JUMPI 000003af: PUSH2 0x0002 000003b2: JUMP 000003b3: JUMPDEST 000003b4: PUSH1 0x00 000003b6: PUSH1 0x02 000003b8: SSTORE 000003b9: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xf419a7cf053c071f8108ae2f2d3ee14c01076a87d4941f80f4a5a3cd412fd0fd
call_targets:
0x143e8bd26d95b230680c25300f93ef56f86eccac
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xf419a7cf053c071f8108ae2f2d3ee14c01076a87d4941f80f4a5a3cd412fd0fd",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x143e8bd26d95b230680c25300f93ef56f86eccac"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x35c1d349",
"selector": "0x35c1d349",
"calldata_variants": [
"0x35c1d349",
"0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9003adfe",
"selector": "0x9003adfe",
"calldata_variants": [
"0x9003adfe",
"0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xc8796572",
"selector": "0xc8796572",
"calldata_variants": [
"0xc8796572",
"0xc87965720000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 854,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 931,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 2,
"guards_detected": [],
"untrusted_call_count": 2
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xf419a7cf053c071f8108ae2f2d3ee14c01076a87d4941f80f4a5a3cd412fd0fd
call_targets:
0x143e8bd26d95b230680c25300f93ef56f86eccac
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xf419a7cf053c071f8108ae2f2d3ee14c01076a87d4941f80f4a5a3cd412fd0fd",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x143e8bd26d95b230680c25300f93ef56f86eccac"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x35c1d349",
"selector": "0x35c1d349",
"calldata_variants": [
"0x35c1d349",
"0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9003adfe",
"selector": "0x9003adfe",
"calldata_variants": [
"0x9003adfe",
"0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xc8796572",
"selector": "0xc8796572",
"calldata_variants": [
"0xc8796572",
"0xc87965720000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 854,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 931,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 2,
"guards_detected": []
}
|