019b3836-5a5e-7193-a36e-27fb1fc71385
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 8905 | artifact.fetch | complete | 1 / 3 | 4 months ago |
| 8906 | tool.cast_disasm | complete | 1 / 3 | 4 months ago |
| 51992 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 51993 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 51994 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 51995 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x00ce 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH3 0x05117d 00000018: DUP2 00000019: EQ 0000001a: PUSH2 0x00d0 0000001d: JUMPI 0000001e: DUP1 0000001f: PUSH4 0x0d2e0980 00000024: EQ 00000025: PUSH2 0x00d9 00000028: JUMPI 00000029: DUP1 0000002a: PUSH4 0x0dbe671f 0000002f: EQ 00000030: PUSH2 0x00e2 00000033: JUMPI 00000034: DUP1 00000035: PUSH4 0x2a4f55ca 0000003a: EQ 0000003b: PUSH2 0x00eb 0000003e: JUMPI 0000003f: DUP1 00000040: PUSH4 0x41c0e1b5 00000045: EQ 00000046: PUSH2 0x013b 00000049: JUMPI 0000004a: DUP1 0000004b: PUSH4 0x4e0a3ef6 00000050: EQ 00000051: PUSH2 0x0163 00000054: JUMPI 00000055: DUP1 00000056: PUSH4 0x581ef7eb 0000005b: EQ 0000005c: PUSH2 0x0198 0000005f: JUMPI 00000060: DUP1 00000061: PUSH4 0x720d42b4 00000066: EQ 00000067: PUSH2 0x01aa 0000006a: JUMPI 0000006b: DUP1 0000006c: PUSH4 0x8a2e7329 00000071: EQ 00000072: PUSH2 0x01bc 00000075: JUMPI 00000076: DUP1 00000077: PUSH4 0x8da5cb5b 0000007c: EQ 0000007d: PUSH2 0x01c4 00000080: JUMPI 00000081: DUP1 00000082: PUSH4 0x8dd7dd5e 00000087: EQ 00000088: PUSH2 0x01d6 0000008b: JUMPI 0000008c: DUP1 0000008d: PUSH4 0x8de57363 00000092: EQ 00000093: PUSH2 0x01df 00000096: JUMPI 00000097: DUP1 00000098: PUSH4 0xa683863a 0000009d: EQ 0000009e: PUSH2 0x0238 000000a1: JUMPI 000000a2: DUP1 000000a3: PUSH4 0xb0234ab6 000000a8: EQ 000000a9: PUSH2 0x0238 000000ac: JUMPI 000000ad: DUP1 000000ae: PUSH4 0xb05beddd 000000b3: EQ 000000b4: PUSH2 0x023d 000000b7: JUMPI 000000b8: DUP1 000000b9: PUSH4 0xebe36851 000000be: EQ 000000bf: PUSH2 0x0247 000000c2: JUMPI 000000c3: DUP1 000000c4: PUSH4 0xf2fde38b 000000c9: EQ 000000ca: PUSH2 0x02b8 000000cd: JUMPI 000000ce: JUMPDEST 000000cf: STOP 000000d0: JUMPDEST 000000d1: PUSH2 0x02d9 000000d4: PUSH1 0x03 000000d6: SLOAD 000000d7: DUP2 000000d8: JUMP 000000d9: JUMPDEST 000000da: PUSH2 0x02d9 000000dd: PUSH1 0x05 000000df: SLOAD 000000e0: DUP2 000000e1: JUMP 000000e2: JUMPDEST 000000e3: PUSH2 0x02d9 000000e6: PUSH1 0x06 000000e8: SLOAD 000000e9: DUP2 000000ea: JUMP 000000eb: JUMPDEST 000000ec: PUSH2 0x00ce 000000ef: PUSH1 0x01 000000f1: SLOAD 000000f2: PUSH1 0x01 000000f4: PUSH1 0xa0 000000f6: PUSH1 0x02 000000f8: EXP 000000f9: SUB 000000fa: AND 000000fb: PUSH1 0x00 000000fd: PUSH7 0x04f94ae6af8000 00000105: PUSH1 0x60 00000107: DUP3 00000108: DUP2 00000109: DUP2 0000010a: DUP2 0000010b: DUP6 0000010c: DUP9 0000010d: DUP4 0000010e: CALL 0000010f: POP 00000110: POP 00000111: PUSH1 0x40 00000113: MLOAD 00000114: PUSH1 0x02 00000116: SLOAD 00000117: PUSH1 0x01 00000119: PUSH1 0xa0 0000011b: PUSH1 0x02 0000011d: EXP 0000011e: SUB 0000011f: AND 00000120: SWAP4 00000121: POP 00000122: PUSH7 0x0221b262dd8000 0000012a: SWAP2 0000012b: POP 0000012c: DUP3 0000012d: DUP2 0000012e: DUP2 0000012f: DUP2 00000130: DUP6 00000131: DUP9 00000132: DUP4 00000133: CALL 00000134: POP 00000135: POP 00000136: POP 00000137: POP 00000138: POP 00000139: JUMPDEST 0000013a: JUMP 0000013b: JUMPDEST 0000013c: PUSH2 0x00ce 0000013f: PUSH1 0x00 00000141: SLOAD 00000142: CALLER 00000143: PUSH1 0x01 00000145: PUSH1 0xa0 00000147: PUSH1 0x02 00000149: EXP 0000014a: SUB 0000014b: SWAP1 0000014c: DUP2 0000014d: AND 0000014e: SWAP2 0000014f: AND 00000150: EQ 00000151: ISZERO 00000152: PUSH2 0x0139 00000155: JUMPI 00000156: PUSH1 0x00 00000158: SLOAD 00000159: PUSH1 0x01 0000015b: PUSH1 0xa0 0000015d: PUSH1 0x02 0000015f: EXP 00000160: SUB 00000161: AND 00000162: SELFDESTRUCT 00000163: JUMPDEST 00000164: PUSH2 0x00ce 00000167: PUSH20 0xad611944bd9dc2f00d794d81ac273b9575242b0f 0000017c: DUP1 0000017d: PUSH1 0x00 0000017f: PUSH7 0x071afd498d0000 00000187: PUSH1 0x60 00000189: DUP3 0000018a: DUP2 0000018b: DUP2 0000018c: DUP2 0000018d: DUP6 0000018e: DUP9 0000018f: DUP4 00000190: CALL 00000191: POP 00000192: POP 00000193: POP 00000194: POP 00000195: POP 00000196: POP 00000197: JUMP 00000198: JUMPDEST 00000199: PUSH2 0x02e3 0000019c: PUSH1 0x02 0000019e: SLOAD 0000019f: PUSH1 0x01 000001a1: PUSH1 0xa0 000001a3: PUSH1 0x02 000001a5: EXP 000001a6: SUB 000001a7: AND 000001a8: DUP2 000001a9: JUMP 000001aa: JUMPDEST 000001ab: PUSH2 0x02e3 000001ae: PUSH1 0x01 000001b0: SLOAD 000001b1: PUSH1 0x01 000001b3: PUSH1 0xa0 000001b5: PUSH1 0x02 000001b7: EXP 000001b8: SUB 000001b9: AND 000001ba: DUP2 000001bb: JUMP 000001bc: JUMPDEST 000001bd: PUSH2 0x00ce 000001c0: PUSH2 0x0139 000001c3: JUMP 000001c4: JUMPDEST 000001c5: PUSH2 0x02e3 000001c8: PUSH1 0x00 000001ca: SLOAD 000001cb: PUSH1 0x01 000001cd: PUSH1 0xa0 000001cf: PUSH1 0x02 000001d1: EXP 000001d2: SUB 000001d3: AND 000001d4: DUP2 000001d5: JUMP 000001d6: JUMPDEST 000001d7: PUSH2 0x02d9 000001da: PUSH1 0x04 000001dc: SLOAD 000001dd: DUP2 000001de: JUMP 000001df: JUMPDEST 000001e0: PUSH2 0x00ce 000001e3: PUSH1 0x04 000001e5: SLOAD 000001e6: PUSH1 0x03 000001e8: SLOAD 000001e9: PUSH1 0x01 000001eb: SLOAD 000001ec: PUSH1 0x01 000001ee: PUSH1 0xa0 000001f0: PUSH1 0x02 000001f2: EXP 000001f3: SUB 000001f4: AND 000001f5: SWAP2 000001f6: PUSH1 0x00 000001f8: SWAP2 000001f9: PUSH1 0x64 000001fb: SWAP2 000001fc: MUL 000001fd: DIV 000001fe: PUSH1 0x60 00000200: DUP3 00000201: DUP2 00000202: DUP2 00000203: DUP2 00000204: DUP6 00000205: DUP9 00000206: DUP4 00000207: CALL 00000208: POP 00000209: POP 0000020a: PUSH1 0x05 0000020c: SLOAD 0000020d: PUSH1 0x03 0000020f: SLOAD 00000210: PUSH1 0x40 00000212: MLOAD 00000213: PUSH1 0x02 00000215: SLOAD 00000216: PUSH1 0x01 00000218: PUSH1 0xa0 0000021a: PUSH1 0x02 0000021c: EXP 0000021d: SUB 0000021e: AND 0000021f: SWAP6 00000220: POP 00000221: PUSH1 0x64 00000223: SWAP2 00000224: SWAP1 00000225: SWAP3 00000226: MUL 00000227: DIV 00000228: SWAP2 00000229: POP 0000022a: DUP3 0000022b: DUP2 0000022c: DUP2 0000022d: DUP2 0000022e: DUP6 0000022f: DUP9 00000230: DUP4 00000231: CALL 00000232: POP 00000233: POP 00000234: POP 00000235: POP 00000236: POP 00000237: JUMP 00000238: JUMPDEST 00000239: PUSH2 0x00ce 0000023c: JUMP 0000023d: JUMPDEST 0000023e: PUSH2 0x00ce 00000241: PUSH1 0x01 00000243: PUSH1 0x06 00000245: SSTORE 00000246: JUMP 00000247: JUMPDEST 00000248: PUSH2 0x00ce 0000024b: PUSH1 0x04 0000024d: SLOAD 0000024e: PUSH1 0x03 00000250: SLOAD 00000251: PUSH20 0xad611944bd9dc2f00d794d81ac273b9575242b0f 00000266: SWAP2 00000267: PUSH20 0xfd4ec9b4ae2926429f0c032a86542b1e9aa9a380 0000027c: SWAP2 0000027d: DUP4 0000027e: SWAP2 0000027f: PUSH1 0x00 00000281: SWAP2 00000282: PUSH1 0x64 00000284: SWAP2 00000285: MUL 00000286: DIV 00000287: PUSH1 0x60 00000289: DUP3 0000028a: DUP2 0000028b: DUP2 0000028c: DUP2 0000028d: DUP6 0000028e: DUP9 0000028f: DUP4 00000290: CALL 00000291: POP 00000292: POP 00000293: PUSH1 0x05 00000295: SLOAD 00000296: PUSH1 0x03 00000298: SLOAD 00000299: PUSH1 0x40 0000029b: MLOAD 0000029c: DUP7 0000029d: SWAP6 0000029e: POP 0000029f: PUSH1 0x64 000002a1: SWAP2 000002a2: SWAP1 000002a3: SWAP3 000002a4: MUL 000002a5: DIV 000002a6: SWAP2 000002a7: POP 000002a8: DUP3 000002a9: DUP2 000002aa: DUP2 000002ab: DUP2 000002ac: DUP6 000002ad: DUP9 000002ae: DUP4 000002af: CALL 000002b0: POP 000002b1: POP 000002b2: POP 000002b3: POP 000002b4: POP 000002b5: POP 000002b6: POP 000002b7: JUMP 000002b8: JUMPDEST 000002b9: PUSH2 0x00ce 000002bc: PUSH1 0x04 000002be: CALLDATALOAD 000002bf: PUSH1 0x00 000002c1: SLOAD 000002c2: CALLER 000002c3: PUSH1 0x01 000002c5: PUSH1 0xa0 000002c7: PUSH1 0x02 000002c9: EXP 000002ca: SUB 000002cb: SWAP1 000002cc: DUP2 000002cd: AND 000002ce: SWAP2 000002cf: AND 000002d0: EQ 000002d1: PUSH2 0x02f6 000002d4: JUMPI 000002d5: PUSH2 0x0002 000002d8: JUMP 000002d9: JUMPDEST 000002da: PUSH1 0x60 000002dc: SWAP1 000002dd: DUP2 000002de: MSTORE 000002df: PUSH1 0x20 000002e1: SWAP1 000002e2: RETURN 000002e3: JUMPDEST 000002e4: PUSH1 0x01 000002e6: PUSH1 0xa0 000002e8: PUSH1 0x02 000002ea: EXP 000002eb: SUB 000002ec: AND 000002ed: PUSH1 0x60 000002ef: SWAP1 000002f0: DUP2 000002f1: MSTORE 000002f2: PUSH1 0x20 000002f4: SWAP1 000002f5: RETURN 000002f6: JUMPDEST 000002f7: PUSH1 0x00 000002f9: DUP1 000002fa: SLOAD 000002fb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000310: NOT 00000311: AND 00000312: DUP3 00000313: OR 00000314: SWAP1 00000315: SSTORE 00000316: POP 00000317: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x904ed027aa26b75b55374960e4df4b50883bb47e6c4fd60e90d33b90a76883c8
call_targets:
0x2766ef4d1a8e9f488f99256747e829d733245602
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x904ed027aa26b75b55374960e4df4b50883bb47e6c4fd60e90d33b90a76883c8",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x2766ef4d1a8e9f488f99256747e829d733245602"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0d2e0980",
"selector": "0x0d2e0980",
"calldata_variants": [
"0x0d2e0980",
"0x0d2e09800000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x0dbe671f",
"selector": "0x0dbe671f",
"calldata_variants": [
"0x0dbe671f",
"0x0dbe671f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2a4f55ca",
"selector": "0x2a4f55ca",
"calldata_variants": [
"0x2a4f55ca",
"0x2a4f55ca0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4e0a3ef6",
"selector": "0x4e0a3ef6",
"calldata_variants": [
"0x4e0a3ef6",
"0x4e0a3ef60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x581ef7eb",
"selector": "0x581ef7eb",
"calldata_variants": [
"0x581ef7eb",
"0x581ef7eb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x720d42b4",
"selector": "0x720d42b4",
"calldata_variants": [
"0x720d42b4",
"0x720d42b40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8a2e7329",
"selector": "0x8a2e7329",
"calldata_variants": [
"0x8a2e7329",
"0x8a2e73290000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 270,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "constant",
"target_expression_category": "computed"
},
{
"pc": 307,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 400,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "constant",
"target_expression_category": "computed"
}
],
"call_count": 7,
"guards_detected": [],
"untrusted_call_count": 7
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x904ed027aa26b75b55374960e4df4b50883bb47e6c4fd60e90d33b90a76883c8
call_targets:
0x2766ef4d1a8e9f488f99256747e829d733245602
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x904ed027aa26b75b55374960e4df4b50883bb47e6c4fd60e90d33b90a76883c8",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x2766ef4d1a8e9f488f99256747e829d733245602"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0d2e0980",
"selector": "0x0d2e0980",
"calldata_variants": [
"0x0d2e0980",
"0x0d2e09800000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x0dbe671f",
"selector": "0x0dbe671f",
"calldata_variants": [
"0x0dbe671f",
"0x0dbe671f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2a4f55ca",
"selector": "0x2a4f55ca",
"calldata_variants": [
"0x2a4f55ca",
"0x2a4f55ca0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4e0a3ef6",
"selector": "0x4e0a3ef6",
"calldata_variants": [
"0x4e0a3ef6",
"0x4e0a3ef60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x581ef7eb",
"selector": "0x581ef7eb",
"calldata_variants": [
"0x581ef7eb",
"0x581ef7eb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x720d42b4",
"selector": "0x720d42b4",
"calldata_variants": [
"0x720d42b4",
"0x720d42b40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8a2e7329",
"selector": "0x8a2e7329",
"calldata_variants": [
"0x8a2e7329",
"0x8a2e73290000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 270,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "constant",
"target_expression_category": "computed"
},
{
"pc": 307,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 400,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "constant",
"target_expression_category": "computed"
}
],
"eth_value_calls": 7,
"guards_detected": []
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0x45aea377b73a7eae862c5c1556343454648920f4e4e8469e48a7ebd6b4499984
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 32,
"trace_id": "0x45aea377b73a7eae862c5c1556343454648920f4e4e8469e48a7ebd6b4499984",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0d2e0980",
"selector": "0x0d2e0980",
"calldata_variants": [
"0x0d2e0980",
"0x0d2e09800000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x0dbe671f",
"selector": "0x0dbe671f",
"calldata_variants": [
"0x0dbe671f",
"0x0dbe671f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2a4f55ca",
"selector": "0x2a4f55ca",
"calldata_variants": [
"0x2a4f55ca",
"0x2a4f55ca0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x41c0e1b5",
"selector": "0x41c0e1b5",
"calldata_variants": [
"0x41c0e1b5",
"0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4e0a3ef6",
"selector": "0x4e0a3ef6",
"calldata_variants": [
"0x4e0a3ef6",
"0x4e0a3ef60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x581ef7eb",
"selector": "0x581ef7eb",
"calldata_variants": [
"0x581ef7eb",
"0x581ef7eb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x720d42b4",
"selector": "0x720d42b4",
"calldata_variants": [
"0x720d42b4",
"0x720d42b40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8a2e7329",
"selector": "0x8a2e7329",
"calldata_variants": [
"0x8a2e7329",
"0x8a2e73290000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|