019b3836-5a3f-73b9-8f33-1195156363b9
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 8887 | artifact.fetch | complete | 1 / 3 | 4 months ago |
| 8888 | tool.cast_disasm | complete | 1 / 3 | 4 months ago |
| 51996 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 51997 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 51998 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 51999 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x0035 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0xb4a99a4e 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x007d 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0xb61d27f6 00000025: EQ 00000026: PUSH2 0x008f 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0xcbf0b0c0 00000030: EQ 00000031: PUSH2 0x0223 00000034: JUMPI 00000035: JUMPDEST 00000036: PUSH2 0x024e 00000039: PUSH1 0x00 0000003b: CALLVALUE 0000003c: GT 0000003d: ISZERO 0000003e: PUSH2 0x007b 00000041: JUMPI 00000042: PUSH1 0x01 00000044: PUSH1 0xa0 00000046: PUSH1 0x02 00000048: EXP 00000049: SUB 0000004a: CALLER 0000004b: AND 0000004c: PUSH1 0x60 0000004e: SWAP1 0000004f: DUP2 00000050: MSTORE 00000051: CALLVALUE 00000052: PUSH1 0x80 00000054: MSTORE 00000055: PUSH32 0xe1fffcc4923d04b559f4d29a8bfc6cda04eb5b0d3c460751c2402c5c5cc9109c 00000076: SWAP1 00000077: PUSH1 0x40 00000079: SWAP1 0000007a: LOG1 0000007b: JUMPDEST 0000007c: JUMP 0000007d: JUMPDEST 0000007e: PUSH2 0x0250 00000081: PUSH1 0x00 00000083: SLOAD 00000084: PUSH1 0x01 00000086: PUSH1 0xa0 00000088: PUSH1 0x02 0000008a: EXP 0000008b: SUB 0000008c: AND 0000008d: DUP2 0000008e: JUMP 0000008f: JUMPDEST 00000090: PUSH1 0x20 00000092: PUSH1 0x44 00000094: CALLDATALOAD 00000095: PUSH1 0x04 00000097: DUP2 00000098: DUP2 00000099: ADD 0000009a: CALLDATALOAD 0000009b: PUSH1 0x1f 0000009d: DUP2 0000009e: ADD 0000009f: DUP5 000000a0: SWAP1 000000a1: DIV 000000a2: SWAP1 000000a3: SWAP4 000000a4: MUL 000000a5: PUSH1 0x80 000000a7: SWAP1 000000a8: DUP2 000000a9: ADD 000000aa: PUSH1 0x40 000000ac: MSTORE 000000ad: PUSH1 0x60 000000af: DUP5 000000b0: DUP2 000000b1: MSTORE 000000b2: PUSH2 0x024e 000000b5: SWAP5 000000b6: DUP4 000000b7: CALLDATALOAD 000000b8: SWAP5 000000b9: PUSH1 0x24 000000bb: DUP1 000000bc: CALLDATALOAD 000000bd: SWAP6 000000be: SWAP5 000000bf: PUSH1 0x64 000000c1: SWAP5 000000c2: SWAP4 000000c3: SWAP2 000000c4: SWAP1 000000c5: SWAP3 000000c6: ADD 000000c7: SWAP2 000000c8: DUP2 000000c9: SWAP1 000000ca: DUP4 000000cb: DUP3 000000cc: DUP1 000000cd: DUP3 000000ce: DUP5 000000cf: CALLDATACOPY 000000d0: POP 000000d1: SWAP5 000000d2: SWAP7 000000d3: POP 000000d4: POP 000000d5: POP 000000d6: POP 000000d7: POP 000000d8: POP 000000d9: POP 000000da: PUSH1 0x00 000000dc: SLOAD 000000dd: PUSH1 0x01 000000df: PUSH1 0xa0 000000e1: PUSH1 0x02 000000e3: EXP 000000e4: SUB 000000e5: SWAP1 000000e6: DUP2 000000e7: AND 000000e8: CALLER 000000e9: SWAP2 000000ea: SWAP1 000000eb: SWAP2 000000ec: AND 000000ed: EQ 000000ee: ISZERO 000000ef: PUSH2 0x021e 000000f2: JUMPI 000000f3: PUSH32 0x92ca3a80853e6663fa31fa10b99225f18d4902939b4c53a9caae9043f6efd004 00000114: CALLER 00000115: DUP4 00000116: DUP6 00000117: DUP5 00000118: PUSH1 0x40 0000011a: MLOAD 0000011b: DUP1 0000011c: DUP6 0000011d: PUSH1 0x01 0000011f: PUSH1 0xa0 00000121: PUSH1 0x02 00000123: EXP 00000124: SUB 00000125: AND 00000126: DUP2 00000127: MSTORE 00000128: PUSH1 0x20 0000012a: ADD 0000012b: DUP5 0000012c: DUP2 0000012d: MSTORE 0000012e: PUSH1 0x20 00000130: ADD 00000131: DUP4 00000132: PUSH1 0x01 00000134: PUSH1 0xa0 00000136: PUSH1 0x02 00000138: EXP 00000139: SUB 0000013a: AND 0000013b: DUP2 0000013c: MSTORE 0000013d: PUSH1 0x20 0000013f: ADD 00000140: DUP1 00000141: PUSH1 0x20 00000143: ADD 00000144: DUP3 00000145: DUP2 00000146: SUB 00000147: DUP3 00000148: MSTORE 00000149: DUP4 0000014a: DUP2 0000014b: DUP2 0000014c: MLOAD 0000014d: DUP2 0000014e: MSTORE 0000014f: PUSH1 0x20 00000151: ADD 00000152: SWAP2 00000153: POP 00000154: DUP1 00000155: MLOAD 00000156: SWAP1 00000157: PUSH1 0x20 00000159: ADD 0000015a: SWAP1 0000015b: DUP1 0000015c: DUP4 0000015d: DUP4 0000015e: DUP3 0000015f: SWAP1 00000160: PUSH1 0x00 00000162: PUSH1 0x04 00000164: PUSH1 0x20 00000166: DUP5 00000167: PUSH1 0x1f 00000169: ADD 0000016a: DIV 0000016b: PUSH1 0x0f 0000016d: MUL 0000016e: PUSH1 0x03 00000170: ADD 00000171: CALL 00000172: POP 00000173: SWAP1 00000174: POP 00000175: SWAP1 00000176: DUP2 00000177: ADD 00000178: SWAP1 00000179: PUSH1 0x1f 0000017b: AND 0000017c: DUP1 0000017d: ISZERO 0000017e: PUSH2 0x019b 00000181: JUMPI 00000182: DUP1 00000183: DUP3 00000184: SUB 00000185: DUP1 00000186: MLOAD 00000187: PUSH1 0x01 00000189: DUP4 0000018a: PUSH1 0x20 0000018c: SUB 0000018d: PUSH2 0x0100 00000190: EXP 00000191: SUB 00000192: NOT 00000193: AND 00000194: DUP2 00000195: MSTORE 00000196: PUSH1 0x20 00000198: ADD 00000199: SWAP2 0000019a: POP 0000019b: JUMPDEST 0000019c: POP 0000019d: SWAP6 0000019e: POP 0000019f: POP 000001a0: POP 000001a1: POP 000001a2: POP 000001a3: POP 000001a4: PUSH1 0x40 000001a6: MLOAD 000001a7: DUP1 000001a8: SWAP2 000001a9: SUB 000001aa: SWAP1 000001ab: LOG1 000001ac: DUP3 000001ad: PUSH1 0x01 000001af: PUSH1 0xa0 000001b1: PUSH1 0x02 000001b3: EXP 000001b4: SUB 000001b5: AND 000001b6: DUP3 000001b7: DUP3 000001b8: PUSH1 0x40 000001ba: MLOAD 000001bb: DUP1 000001bc: DUP3 000001bd: DUP1 000001be: MLOAD 000001bf: SWAP1 000001c0: PUSH1 0x20 000001c2: ADD 000001c3: SWAP1 000001c4: DUP1 000001c5: DUP4 000001c6: DUP4 000001c7: DUP3 000001c8: SWAP1 000001c9: PUSH1 0x00 000001cb: PUSH1 0x04 000001cd: PUSH1 0x20 000001cf: DUP5 000001d0: PUSH1 0x1f 000001d2: ADD 000001d3: DIV 000001d4: PUSH1 0x0f 000001d6: MUL 000001d7: PUSH1 0x03 000001d9: ADD 000001da: CALL 000001db: POP 000001dc: SWAP1 000001dd: POP 000001de: SWAP1 000001df: DUP2 000001e0: ADD 000001e1: SWAP1 000001e2: PUSH1 0x1f 000001e4: AND 000001e5: DUP1 000001e6: ISZERO 000001e7: PUSH2 0x0204 000001ea: JUMPI 000001eb: DUP1 000001ec: DUP3 000001ed: SUB 000001ee: DUP1 000001ef: MLOAD 000001f0: PUSH1 0x01 000001f2: DUP4 000001f3: PUSH1 0x20 000001f5: SUB 000001f6: PUSH2 0x0100 000001f9: EXP 000001fa: SUB 000001fb: NOT 000001fc: AND 000001fd: DUP2 000001fe: MSTORE 000001ff: PUSH1 0x20 00000201: ADD 00000202: SWAP2 00000203: POP 00000204: JUMPDEST 00000205: POP 00000206: SWAP2 00000207: POP 00000208: POP 00000209: PUSH1 0x00 0000020b: PUSH1 0x40 0000020d: MLOAD 0000020e: DUP1 0000020f: DUP4 00000210: SUB 00000211: DUP2 00000212: DUP6 00000213: DUP8 00000214: PUSH2 0x8502 00000217: GAS 00000218: SUB 00000219: CALL 0000021a: POP 0000021b: POP 0000021c: POP 0000021d: POP 0000021e: JUMPDEST 0000021f: POP 00000220: POP 00000221: POP 00000222: JUMP 00000223: JUMPDEST 00000224: PUSH2 0x024e 00000227: PUSH1 0x04 00000229: CALLDATALOAD 0000022a: PUSH1 0x00 0000022c: SLOAD 0000022d: PUSH1 0x01 0000022f: PUSH1 0xa0 00000231: PUSH1 0x02 00000233: EXP 00000234: SUB 00000235: SWAP1 00000236: DUP2 00000237: AND 00000238: CALLER 00000239: SWAP2 0000023a: SWAP1 0000023b: SWAP2 0000023c: AND 0000023d: EQ 0000023e: ISZERO 0000023f: PUSH2 0x025a 00000242: JUMPI 00000243: DUP1 00000244: PUSH1 0x01 00000246: PUSH1 0xa0 00000248: PUSH1 0x02 0000024a: EXP 0000024b: SUB 0000024c: AND 0000024d: SELFDESTRUCT 0000024e: JUMPDEST 0000024f: STOP 00000250: JUMPDEST 00000251: PUSH1 0x60 00000253: SWAP1 00000254: DUP2 00000255: MSTORE 00000256: PUSH1 0x20 00000258: SWAP1 00000259: RETURN 0000025a: JUMPDEST 0000025b: POP 0000025c: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xa428fcc2459802f6a496aec49fc27f60b50a8729494fa30eded2ba2cd59be106
call_targets:
0x6f214e920ad3e4dc474c40ad553390ae09be6988
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xa428fcc2459802f6a496aec49fc27f60b50a8729494fa30eded2ba2cd59be106",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x6f214e920ad3e4dc474c40ad553390ae09be6988"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xb4a99a4e",
"selector": "0xb4a99a4e",
"calldata_variants": [
"0xb4a99a4e",
"0xb4a99a4e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb61d27f6",
"selector": "0xb61d27f6",
"calldata_variants": [
"0xb61d27f6",
"0xb61d27f60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcbf0b0c0",
"selector": "0xcbf0b0c0",
"calldata_variants": [
"0xcbf0b0c0",
"0xcbf0b0c00000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 369,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 474,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 537,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 3,
"guards_detected": [],
"untrusted_call_count": 3
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xa428fcc2459802f6a496aec49fc27f60b50a8729494fa30eded2ba2cd59be106
call_targets:
0x6f214e920ad3e4dc474c40ad553390ae09be6988
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xa428fcc2459802f6a496aec49fc27f60b50a8729494fa30eded2ba2cd59be106",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x6f214e920ad3e4dc474c40ad553390ae09be6988"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xb4a99a4e",
"selector": "0xb4a99a4e",
"calldata_variants": [
"0xb4a99a4e",
"0xb4a99a4e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb61d27f6",
"selector": "0xb61d27f6",
"calldata_variants": [
"0xb61d27f6",
"0xb61d27f60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcbf0b0c0",
"selector": "0xcbf0b0c0",
"calldata_variants": [
"0xcbf0b0c0",
"0xcbf0b0c00000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 369,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 474,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 537,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 3,
"guards_detected": []
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0x399daaaeaaa0a37adfe4ab5cfbef4f44b460e0c072193534c11755e5739c5e2e
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 6,
"trace_id": "0x399daaaeaaa0a37adfe4ab5cfbef4f44b460e0c072193534c11755e5739c5e2e",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xb4a99a4e",
"selector": "0xb4a99a4e",
"calldata_variants": [
"0xb4a99a4e",
"0xb4a99a4e0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb61d27f6",
"selector": "0xb61d27f6",
"calldata_variants": [
"0xb61d27f6",
"0xb61d27f60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcbf0b0c0",
"selector": "0xcbf0b0c0",
"calldata_variants": [
"0xcbf0b0c0",
"0xcbf0b0c00000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|