019b3836-59e2-70ea-90fc-0f756a7c102a
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 8839 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 8840 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 98290 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 98291 | capability.graph | complete | 1 / 3 | 1 week ago |
| 98292 | detector.run | complete | 1 / 3 | 1 week ago |
| 98293 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0061 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x13af4035 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x006c 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x35c1d349 00000025: EQ 00000026: PUSH2 0x009f 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x8da5cb5b 00000030: EQ 00000031: PUSH2 0x0112 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x9003adfe 0000003b: EQ 0000003c: PUSH2 0x0124 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0xa60f3588 00000046: EQ 00000047: PUSH2 0x012d 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0xc8796572 00000051: EQ 00000052: PUSH2 0x0136 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0xe97dcb62 0000005c: EQ 0000005d: PUSH2 0x015e 00000060: JUMPI 00000061: JUMPDEST 00000062: PUSH2 0x01cc 00000065: PUSH2 0x015c 00000068: PUSH2 0x0162 0000006b: JUMP 0000006c: JUMPDEST 0000006d: PUSH2 0x01cc 00000070: PUSH1 0x04 00000072: CALLDATALOAD 00000073: PUSH1 0x04 00000075: SLOAD 00000076: CALLER 00000077: PUSH1 0x01 00000079: PUSH1 0xa0 0000007b: PUSH1 0x02 0000007d: EXP 0000007e: SUB 0000007f: SWAP1 00000080: DUP2 00000081: AND 00000082: SWAP2 00000083: AND 00000084: EQ 00000085: ISZERO 00000086: PUSH2 0x009c 00000089: JUMPI 0000008a: PUSH1 0x04 0000008c: DUP1 0000008d: SLOAD 0000008e: PUSH1 0x01 00000090: PUSH1 0xa0 00000092: PUSH1 0x02 00000094: EXP 00000095: SUB 00000096: NOT 00000097: AND 00000098: DUP3 00000099: OR 0000009a: SWAP1 0000009b: SSTORE 0000009c: JUMPDEST 0000009d: POP 0000009e: JUMP 0000009f: JUMPDEST 000000a0: PUSH2 0x01ce 000000a3: PUSH1 0x04 000000a5: CALLDATALOAD 000000a6: PUSH1 0x00 000000a8: DUP1 000000a9: SLOAD 000000aa: DUP3 000000ab: SWAP1 000000ac: DUP2 000000ad: LT 000000ae: ISZERO 000000af: PUSH2 0x0002 000000b2: JUMPI 000000b3: POP 000000b4: DUP1 000000b5: MSTORE 000000b6: PUSH1 0x02 000000b8: MUL 000000b9: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 000000da: DUP2 000000db: ADD 000000dc: SLOAD 000000dd: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e564 000000fe: SWAP2 000000ff: SWAP1 00000100: SWAP2 00000101: ADD 00000102: SLOAD 00000103: PUSH1 0x01 00000105: PUSH1 0xa0 00000107: PUSH1 0x02 00000109: EXP 0000010a: SUB 0000010b: SWAP2 0000010c: SWAP1 0000010d: SWAP2 0000010e: AND 0000010f: SWAP1 00000110: DUP3 00000111: JUMP 00000112: JUMPDEST 00000113: PUSH2 0x01f4 00000116: PUSH1 0x04 00000118: SLOAD 00000119: PUSH1 0x01 0000011b: PUSH1 0xa0 0000011d: PUSH1 0x02 0000011f: EXP 00000120: SUB 00000121: AND 00000122: DUP2 00000123: JUMP 00000124: JUMPDEST 00000125: PUSH2 0x0211 00000128: PUSH1 0x02 0000012a: SLOAD 0000012b: DUP2 0000012c: JUMP 0000012d: JUMPDEST 0000012e: PUSH2 0x0211 00000131: PUSH1 0x01 00000133: SLOAD 00000134: DUP2 00000135: JUMP 00000136: JUMPDEST 00000137: PUSH2 0x01cc 0000013a: PUSH1 0x04 0000013c: SLOAD 0000013d: CALLER 0000013e: PUSH1 0x01 00000140: PUSH1 0xa0 00000142: PUSH1 0x02 00000144: EXP 00000145: SUB 00000146: SWAP1 00000147: DUP2 00000148: AND 00000149: SWAP2 0000014a: AND 0000014b: EQ 0000014c: ISZERO 0000014d: PUSH2 0x015c 00000150: JUMPI 00000151: PUSH1 0x02 00000153: SLOAD 00000154: PUSH1 0x00 00000156: EQ 00000157: ISZERO 00000158: PUSH2 0x0380 0000015b: JUMPI 0000015c: JUMPDEST 0000015d: JUMP 0000015e: JUMPDEST 0000015f: PUSH2 0x01cc 00000162: JUMPDEST 00000163: PUSH1 0x02 00000165: DUP1 00000166: SLOAD 00000167: PUSH1 0x0a 00000169: CALLVALUE 0000016a: DIV 0000016b: SWAP1 0000016c: DUP2 0000016d: ADD 0000016e: SWAP1 0000016f: SWAP2 00000170: SSTORE 00000171: PUSH1 0x00 00000173: DUP1 00000174: SLOAD 00000175: PUSH1 0x01 00000177: DUP2 00000178: ADD 00000179: DUP1 0000017a: DUP4 0000017b: SSTORE 0000017c: SWAP1 0000017d: SWAP2 0000017e: SWAP1 0000017f: DUP3 00000180: SWAP1 00000181: DUP3 00000182: SWAP1 00000183: DUP3 00000184: DUP1 00000185: ISZERO 00000186: DUP3 00000187: SWAP1 00000188: GT 00000189: PUSH2 0x0223 0000018c: JUMPI 0000018d: PUSH1 0x02 0000018f: MUL 00000190: DUP2 00000191: PUSH1 0x02 00000193: MUL 00000194: DUP4 00000195: PUSH1 0x00 00000197: MSTORE 00000198: PUSH1 0x20 0000019a: PUSH1 0x00 0000019c: KECCAK256 0000019d: SWAP2 0000019e: DUP3 0000019f: ADD 000001a0: SWAP2 000001a1: ADD 000001a2: PUSH2 0x0223 000001a5: SWAP2 000001a6: SWAP1 000001a7: JUMPDEST 000001a8: DUP1 000001a9: DUP3 000001aa: GT 000001ab: ISZERO 000001ac: PUSH2 0x0365 000001af: JUMPI 000001b0: DUP1 000001b1: SLOAD 000001b2: PUSH1 0x01 000001b4: PUSH1 0xa0 000001b6: PUSH1 0x02 000001b8: EXP 000001b9: SUB 000001ba: NOT 000001bb: AND 000001bc: DUP2 000001bd: SSTORE 000001be: PUSH1 0x00 000001c0: PUSH1 0x01 000001c2: DUP3 000001c3: ADD 000001c4: SSTORE 000001c5: PUSH1 0x02 000001c7: ADD 000001c8: PUSH2 0x01a7 000001cb: JUMP 000001cc: JUMPDEST 000001cd: STOP 000001ce: JUMPDEST 000001cf: PUSH1 0x40 000001d1: MLOAD 000001d2: DUP1 000001d3: DUP4 000001d4: PUSH1 0x01 000001d6: PUSH1 0xa0 000001d8: PUSH1 0x02 000001da: EXP 000001db: SUB 000001dc: AND 000001dd: DUP2 000001de: MSTORE 000001df: PUSH1 0x20 000001e1: ADD 000001e2: DUP3 000001e3: DUP2 000001e4: MSTORE 000001e5: PUSH1 0x20 000001e7: ADD 000001e8: SWAP3 000001e9: POP 000001ea: POP 000001eb: POP 000001ec: PUSH1 0x40 000001ee: MLOAD 000001ef: DUP1 000001f0: SWAP2 000001f1: SUB 000001f2: SWAP1 000001f3: RETURN 000001f4: JUMPDEST 000001f5: PUSH1 0x40 000001f7: DUP1 000001f8: MLOAD 000001f9: PUSH1 0x01 000001fb: PUSH1 0xa0 000001fd: PUSH1 0x02 000001ff: EXP 00000200: SUB 00000201: SWAP3 00000202: SWAP1 00000203: SWAP3 00000204: AND 00000205: DUP3 00000206: MSTORE 00000207: MLOAD 00000208: SWAP1 00000209: DUP2 0000020a: SWAP1 0000020b: SUB 0000020c: PUSH1 0x20 0000020e: ADD 0000020f: SWAP1 00000210: RETURN 00000211: JUMPDEST 00000212: PUSH1 0x40 00000214: DUP1 00000215: MLOAD 00000216: SWAP2 00000217: DUP3 00000218: MSTORE 00000219: MLOAD 0000021a: SWAP1 0000021b: DUP2 0000021c: SWAP1 0000021d: SUB 0000021e: PUSH1 0x20 00000220: ADD 00000221: SWAP1 00000222: RETURN 00000223: JUMPDEST 00000224: POP 00000225: POP 00000226: POP 00000227: POP 00000228: CALLER 00000229: PUSH1 0x00 0000022b: PUSH1 0x00 0000022d: POP 0000022e: DUP4 0000022f: DUP2 00000230: SLOAD 00000231: DUP2 00000232: LT 00000233: ISZERO 00000234: PUSH2 0x0002 00000237: JUMPI 00000238: DUP2 00000239: DUP1 0000023a: MSTORE 0000023b: PUSH1 0x02 0000023d: MUL 0000023e: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 0000025f: ADD 00000260: DUP1 00000261: SLOAD 00000262: PUSH1 0x01 00000264: PUSH1 0xa0 00000266: PUSH1 0x02 00000268: EXP 00000269: SUB 0000026a: NOT 0000026b: AND 0000026c: SWAP1 0000026d: SWAP3 0000026e: OR 0000026f: SWAP1 00000270: SWAP2 00000271: SSTORE 00000272: DUP1 00000273: SLOAD 00000274: CALLVALUE 00000275: SWAP2 00000276: SWAP1 00000277: DUP5 00000278: SWAP1 00000279: DUP2 0000027a: LT 0000027b: ISZERO 0000027c: PUSH2 0x0002 0000027f: JUMPI 00000280: PUSH1 0x02 00000282: MUL 00000283: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e564 000002a4: ADD 000002a5: DUP3 000002a6: SWAP1 000002a7: SSTORE 000002a8: PUSH1 0x03 000002aa: DUP1 000002ab: SLOAD 000002ac: SWAP3 000002ad: DUP7 000002ae: SWAP1 000002af: SUB 000002b0: SWAP1 000002b1: SWAP3 000002b2: ADD 000002b3: SWAP1 000002b4: SWAP2 000002b5: SSTORE 000002b6: PUSH1 0x01 000002b8: SLOAD 000002b9: DUP2 000002ba: SLOAD 000002bb: PUSH1 0x64 000002bd: SWAP3 000002be: SWAP2 000002bf: SWAP1 000002c0: DUP2 000002c1: LT 000002c2: ISZERO 000002c3: PUSH2 0x0002 000002c6: JUMPI 000002c7: PUSH1 0x03 000002c9: SLOAD 000002ca: PUSH1 0x02 000002cc: SWAP2 000002cd: SWAP1 000002ce: SWAP2 000002cf: MUL 000002d0: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e564 000002f1: ADD 000002f2: SLOAD 000002f3: SWAP3 000002f4: SWAP1 000002f5: SWAP3 000002f6: DIV 000002f7: PUSH1 0x96 000002f9: MUL 000002fa: SWAP3 000002fb: POP 000002fc: POP 000002fd: DUP2 000002fe: SWAP1 000002ff: LT 00000300: PUSH2 0x037b 00000303: JUMPI 00000304: PUSH1 0x01 00000306: SLOAD 00000307: PUSH1 0x00 00000309: DUP1 0000030a: SLOAD 0000030b: SWAP1 0000030c: SWAP2 0000030d: SWAP1 0000030e: DUP2 0000030f: LT 00000310: ISZERO 00000311: PUSH2 0x0002 00000314: JUMPI 00000315: PUSH1 0x02 00000317: MUL 00000318: PUSH32 0x290decd9548b62a8d60345a988386fc84ba6bc95484008f6362f93160ef3e563 00000339: ADD 0000033a: SLOAD 0000033b: PUSH1 0x40 0000033d: MLOAD 0000033e: PUSH1 0x01 00000340: PUSH1 0xa0 00000342: PUSH1 0x02 00000344: EXP 00000345: SUB 00000346: SWAP2 00000347: SWAP1 00000348: SWAP2 00000349: AND 0000034a: SWAP2 0000034b: SWAP1 0000034c: DUP4 0000034d: SWAP1 0000034e: DUP3 0000034f: DUP2 00000350: DUP2 00000351: DUP2 00000352: DUP6 00000353: DUP9 00000354: DUP4 00000355: CALL 00000356: SWAP4 00000357: POP 00000358: POP 00000359: POP 0000035a: POP 0000035b: ISZERO 0000035c: ISZERO 0000035d: PUSH2 0x0369 00000360: JUMPI 00000361: PUSH2 0x0002 00000364: JUMP 00000365: JUMPDEST 00000366: POP 00000367: SWAP1 00000368: JUMP 00000369: JUMPDEST 0000036a: PUSH1 0x03 0000036c: DUP1 0000036d: SLOAD 0000036e: DUP3 0000036f: SWAP1 00000370: SUB 00000371: SWAP1 00000372: SSTORE 00000373: PUSH1 0x01 00000375: DUP1 00000376: SLOAD 00000377: DUP2 00000378: ADD 00000379: SWAP1 0000037a: SSTORE 0000037b: JUMPDEST 0000037c: POP 0000037d: POP 0000037e: POP 0000037f: JUMP 00000380: JUMPDEST 00000381: PUSH1 0x04 00000383: SLOAD 00000384: PUSH1 0x02 00000386: SLOAD 00000387: PUSH1 0x40 00000389: MLOAD 0000038a: PUSH1 0x01 0000038c: PUSH1 0xa0 0000038e: PUSH1 0x02 00000390: EXP 00000391: SUB 00000392: SWAP3 00000393: SWAP1 00000394: SWAP3 00000395: AND 00000396: SWAP2 00000397: PUSH1 0x00 00000399: SWAP2 0000039a: SWAP1 0000039b: DUP3 0000039c: DUP2 0000039d: DUP2 0000039e: DUP2 0000039f: DUP6 000003a0: DUP9 000003a1: DUP4 000003a2: CALL 000003a3: SWAP4 000003a4: POP 000003a5: POP 000003a6: POP 000003a7: POP 000003a8: ISZERO 000003a9: ISZERO 000003aa: PUSH2 0x03b2 000003ad: JUMPI 000003ae: PUSH2 0x0002 000003b1: JUMP 000003b2: JUMPDEST 000003b3: PUSH1 0x00 000003b5: PUSH1 0x02 000003b7: SSTORE 000003b8: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x872f74751abffdddc053c413bdb5715100083532afe1ad6e7e561b5e0d9bb6d3
call_targets:
0xf1c1648f6f0edbcf7d898441b88e489cfaace11d
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x872f74751abffdddc053c413bdb5715100083532afe1ad6e7e561b5e0d9bb6d3",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xf1c1648f6f0edbcf7d898441b88e489cfaace11d"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x35c1d349",
"selector": "0x35c1d349",
"calldata_variants": [
"0x35c1d349",
"0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9003adfe",
"selector": "0x9003adfe",
"calldata_variants": [
"0x9003adfe",
"0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xc8796572",
"selector": "0xc8796572",
"calldata_variants": [
"0xc8796572",
"0xc87965720000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 853,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 930,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 2,
"guards_detected": [],
"untrusted_call_count": 2
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x872f74751abffdddc053c413bdb5715100083532afe1ad6e7e561b5e0d9bb6d3
call_targets:
0xf1c1648f6f0edbcf7d898441b88e489cfaace11d
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x872f74751abffdddc053c413bdb5715100083532afe1ad6e7e561b5e0d9bb6d3",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xf1c1648f6f0edbcf7d898441b88e489cfaace11d"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x35c1d349",
"selector": "0x35c1d349",
"calldata_variants": [
"0x35c1d349",
"0x35c1d3490000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9003adfe",
"selector": "0x9003adfe",
"calldata_variants": [
"0x9003adfe",
"0x9003adfe0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa60f3588",
"selector": "0xa60f3588",
"calldata_variants": [
"0xa60f3588",
"0xa60f35880000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xc8796572",
"selector": "0xc8796572",
"calldata_variants": [
"0xc8796572",
"0xc87965720000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe97dcb62",
"selector": "0xe97dcb62",
"calldata_variants": [
"0xe97dcb62",
"0xe97dcb620000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 853,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 930,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 2,
"guards_detected": []
}
|