TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-5aa3-711a-afd4-18cd18caf345

complete
Chain ID
1
Address
0xf29a665f82287fcbb4f2e5e52586f07940ee2dd3
Block Number
—
Created
Fri, Dec 19, 2025 8:04 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
8939 artifact.fetch complete 1 / 3 4 months ago
8940 tool.cast_disasm complete 1 / 3 4 months ago
51912 analysis.bundle complete 1 / 3 2 weeks ago
51913 capability.graph complete 1 / 3 2 weeks ago
51914 detector.run complete 1 / 3 2 weeks ago
51915 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
7
EXT*/BALANCE
0
Total opcodes
1371
Flags
No heuristic flags raised.
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0098
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x09c95e10
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00a1
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x42c8705b
00000025: EQ
00000026: PUSH2 0x00bc
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x48ef3f03
00000030: EQ
00000031: PUSH2 0x00f0
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x5b4ebfc4
0000003b: EQ
0000003c: PUSH2 0x0111
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x71dba7aa
00000046: EQ
00000047: PUSH2 0x0136
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x75479c34
00000051: EQ
00000052: PUSH2 0x014e
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0xb91366b0
0000005c: EQ
0000005d: PUSH2 0x029c
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0xbf6b43a1
00000067: EQ
00000068: PUSH2 0x03e0
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0xc1826d78
00000072: EQ
00000073: PUSH2 0x0555
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xce606ee0
0000007d: EQ
0000007e: PUSH2 0x0566
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xd2d38c62
00000088: EQ
00000089: PUSH2 0x0578
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xf60cdcf6
00000093: EQ
00000094: PUSH2 0x05ae
00000097: JUMPI
00000098: JUMPDEST
00000099: PUSH2 0x05b7
0000009c: JUMPDEST
0000009d: PUSH2 0x0002
000000a0: JUMP
000000a1: JUMPDEST
000000a2: PUSH2 0x05b9
000000a5: PUSH1 0x04
000000a7: CALLDATALOAD
000000a8: PUSH1 0x03
000000aa: PUSH1 0x20
000000ac: MSTORE
000000ad: PUSH1 0x00
000000af: SWAP1
000000b0: DUP2
000000b1: MSTORE
000000b2: PUSH1 0x40
000000b4: SWAP1
000000b5: KECCAK256
000000b6: SLOAD
000000b7: PUSH1 0xff
000000b9: AND
000000ba: DUP2
000000bb: JUMP
000000bc: JUMPDEST
000000bd: PUSH2 0x05b7
000000c0: CALLER
000000c1: PUSH1 0x01
000000c3: PUSH1 0xa0
000000c5: PUSH1 0x02
000000c7: EXP
000000c8: SUB
000000c9: AND
000000ca: PUSH1 0x00
000000cc: SWAP1
000000cd: DUP2
000000ce: MSTORE
000000cf: PUSH1 0x03
000000d1: PUSH1 0x20
000000d3: MSTORE
000000d4: PUSH1 0x40
000000d6: DUP2
000000d7: KECCAK256
000000d8: SLOAD
000000d9: DUP2
000000da: SWAP1
000000db: PUSH1 0xff
000000dd: AND
000000de: ISZERO
000000df: PUSH2 0x009c
000000e2: JUMPI
000000e3: PUSH1 0x00
000000e5: CALLVALUE
000000e6: GT
000000e7: ISZERO
000000e8: PUSH2 0x0645
000000eb: JUMPI
000000ec: PUSH2 0x0002
000000ef: JUMP
000000f0: JUMPDEST
000000f1: PUSH2 0x05cd
000000f4: PUSH1 0x04
000000f6: CALLDATALOAD
000000f7: PUSH1 0x02
000000f9: PUSH1 0x20
000000fb: MSTORE
000000fc: PUSH1 0x00
000000fe: SWAP1
000000ff: DUP2
00000100: MSTORE
00000101: PUSH1 0x40
00000103: SWAP1
00000104: KECCAK256
00000105: SLOAD
00000106: PUSH1 0x01
00000108: PUSH1 0xa0
0000010a: PUSH1 0x02
0000010c: EXP
0000010d: SUB
0000010e: AND
0000010f: DUP2
00000110: JUMP
00000111: JUMPDEST
00000112: PUSH2 0x05ea
00000115: PUSH1 0x04
00000117: CALLDATALOAD
00000118: PUSH1 0x05
0000011a: PUSH1 0x20
0000011c: MSTORE
0000011d: PUSH1 0x00
0000011f: SWAP1
00000120: DUP2
00000121: MSTORE
00000122: PUSH1 0x40
00000124: SWAP1
00000125: KECCAK256
00000126: PUSH1 0x01
00000128: DUP2
00000129: ADD
0000012a: SLOAD
0000012b: DUP2
0000012c: SLOAD
0000012d: PUSH1 0x02
0000012f: SWAP3
00000130: SWAP1
00000131: SWAP3
00000132: ADD
00000133: SLOAD
00000134: DUP4
00000135: JUMP
00000136: JUMPDEST
00000137: PUSH2 0x0608
0000013a: PUSH1 0x04
0000013c: CALLDATALOAD
0000013d: PUSH1 0x04
0000013f: PUSH1 0x20
00000141: MSTORE
00000142: PUSH1 0x00
00000144: SWAP1
00000145: DUP2
00000146: MSTORE
00000147: PUSH1 0x40
00000149: SWAP1
0000014a: KECCAK256
0000014b: SLOAD
0000014c: DUP2
0000014d: JUMP
0000014e: JUMPDEST
0000014f: PUSH2 0x05b7
00000152: PUSH7 0xb1a2bc2ec50000
0000015a: CALLVALUE
0000015b: LT
0000015c: PUSH2 0x06aa
0000015f: JUMPI
00000160: PUSH1 0x40
00000162: MLOAD
00000163: PUSH1 0x01
00000165: SLOAD
00000166: PUSH1 0x01
00000168: PUSH1 0xa0
0000016a: PUSH1 0x02
0000016c: EXP
0000016d: SUB
0000016e: AND
0000016f: SWAP1
00000170: PUSH1 0x00
00000172: SWAP1
00000173: PUSH7 0x11c37937e08000
0000017b: SWAP1
0000017c: DUP3
0000017d: DUP2
0000017e: DUP2
0000017f: DUP2
00000180: DUP6
00000181: DUP9
00000182: DUP4
00000183: CALL
00000184: POP
00000185: POP
00000186: PUSH1 0x40
00000188: MLOAD
00000189: CALLER
0000018a: PUSH1 0x01
0000018c: PUSH1 0xa0
0000018e: PUSH1 0x02
00000190: EXP
00000191: SUB
00000192: AND
00000193: SWAP4
00000194: POP
00000195: PUSH7 0xb1a2bc2ec4ffff
0000019d: NOT
0000019e: CALLVALUE
0000019f: ADD
000001a0: SWAP2
000001a1: POP
000001a2: DUP3
000001a3: DUP2
000001a4: DUP2
000001a5: DUP2
000001a6: DUP6
000001a7: DUP9
000001a8: DUP4
000001a9: CALL
000001aa: POP
000001ab: POP
000001ac: POP
000001ad: DUP2
000001ae: DUP2
000001af: MSTORE
000001b0: PUSH1 0x03
000001b2: PUSH1 0x20
000001b4: DUP2
000001b5: DUP2
000001b6: MSTORE
000001b7: PUSH1 0x40
000001b9: DUP1
000001ba: DUP5
000001bb: KECCAK256
000001bc: DUP1
000001bd: SLOAD
000001be: PUSH1 0xff
000001c0: NOT
000001c1: AND
000001c2: PUSH1 0x01
000001c4: SWAP1
000001c5: DUP2
000001c6: OR
000001c7: SWAP1
000001c8: SWAP2
000001c9: SSTORE
000001ca: DUP5
000001cb: SLOAD
000001cc: DUP1
000001cd: DUP3
000001ce: ADD
000001cf: DUP7
000001d0: SSTORE
000001d1: DUP6
000001d2: MSTORE
000001d3: PUSH1 0x02
000001d5: DUP1
000001d6: DUP5
000001d7: MSTORE
000001d8: DUP3
000001d9: DUP7
000001da: KECCAK256
000001db: DUP1
000001dc: SLOAD
000001dd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001f2: NOT
000001f3: AND
000001f4: CALLER
000001f5: OR
000001f6: SWAP1
000001f7: SSTORE
000001f8: DUP3
000001f9: MLOAD
000001fa: PUSH1 0x60
000001fc: DUP2
000001fd: DUP2
000001fe: ADD
000001ff: DUP6
00000200: MSTORE
00000201: DUP4
00000202: DUP3
00000203: MSTORE
00000204: PUSH1 0x05
00000206: DUP3
00000207: DUP8
00000208: ADD
00000209: DUP2
0000020a: DUP2
0000020b: MSTORE
0000020c: PUSH6 0x01d1a94a2000
00000213: DUP5
00000214: DUP9
00000215: ADD
00000216: SWAP1
00000217: DUP2
00000218: MSTORE
00000219: DUP12
0000021a: DUP12
0000021b: MSTORE
0000021c: SWAP2
0000021d: DUP9
0000021e: MSTORE
0000021f: DUP7
00000220: DUP11
00000221: KECCAK256
00000222: SWAP4
00000223: MLOAD
00000224: DUP5
00000225: SSTORE
00000226: MLOAD
00000227: DUP4
00000228: DUP7
00000229: ADD
0000022a: SSTORE
0000022b: MLOAD
0000022c: SWAP2
0000022d: DUP4
0000022e: ADD
0000022f: SWAP2
00000230: SWAP1
00000231: SWAP2
00000232: SSTORE
00000233: DUP4
00000234: MLOAD
00000235: PUSH1 0xa0
00000237: DUP2
00000238: ADD
00000239: DUP6
0000023a: MSTORE
0000023b: DUP4
0000023c: DUP2
0000023d: MSTORE
0000023e: PUSH5 0xba43b74000
00000244: DUP2
00000245: DUP8
00000246: ADD
00000247: SWAP1
00000248: DUP2
00000249: MSTORE
0000024a: PUSH5 0xe8d4a51000
00000250: DUP3
00000251: DUP8
00000252: ADD
00000253: SWAP1
00000254: DUP2
00000255: MSTORE
00000256: TIMESTAMP
00000257: SWAP4
00000258: DUP4
00000259: ADD
0000025a: DUP5
0000025b: DUP2
0000025c: MSTORE
0000025d: PUSH2 0x7080
00000260: SWAP1
00000261: SWAP5
00000262: ADD
00000263: PUSH1 0x80
00000265: DUP5
00000266: ADD
00000267: SWAP1
00000268: DUP2
00000269: MSTORE
0000026a: SWAP11
0000026b: DUP11
0000026c: MSTORE
0000026d: PUSH1 0x06
0000026f: SWAP1
00000270: SWAP8
00000271: MSTORE
00000272: SWAP5
00000273: SWAP1
00000274: SWAP8
00000275: KECCAK256
00000276: SWAP7
00000277: MLOAD
00000278: DUP8
00000279: SSTORE
0000027a: SWAP3
0000027b: MLOAD
0000027c: SWAP2
0000027d: DUP7
0000027e: ADD
0000027f: SWAP2
00000280: SWAP1
00000281: SWAP2
00000282: SSTORE
00000283: SWAP2
00000284: MLOAD
00000285: SWAP2
00000286: DUP5
00000287: ADD
00000288: SWAP2
00000289: SWAP1
0000028a: SWAP2
0000028b: SSTORE
0000028c: MLOAD
0000028d: SWAP1
0000028e: DUP3
0000028f: ADD
00000290: SSTORE
00000291: SWAP1
00000292: MLOAD
00000293: PUSH1 0x04
00000295: SWAP2
00000296: SWAP1
00000297: SWAP2
00000298: ADD
00000299: SSTORE
0000029a: JUMPDEST
0000029b: JUMP
0000029c: JUMPDEST
0000029d: PUSH2 0x05b7
000002a0: CALLER
000002a1: PUSH1 0x01
000002a3: PUSH1 0xa0
000002a5: PUSH1 0x02
000002a7: EXP
000002a8: SUB
000002a9: AND
000002aa: PUSH1 0x00
000002ac: SWAP1
000002ad: DUP2
000002ae: MSTORE
000002af: PUSH1 0x03
000002b1: PUSH1 0x20
000002b3: MSTORE
000002b4: PUSH1 0x40
000002b6: DUP2
000002b7: KECCAK256
000002b8: SLOAD
000002b9: PUSH1 0xff
000002bb: AND
000002bc: ISZERO
000002bd: PUSH2 0x009c
000002c0: JUMPI
000002c1: PUSH1 0x05
000002c3: PUSH1 0x20
000002c5: MSTORE
000002c6: PUSH1 0x40
000002c8: SWAP1
000002c9: KECCAK256
000002ca: PUSH1 0x02
000002cc: ADD
000002cd: SLOAD
000002ce: CALLVALUE
000002cf: DUP2
000002d0: SWAP1
000002d1: LT
000002d2: PUSH2 0x06be
000002d5: JUMPI
000002d6: PUSH1 0x40
000002d8: MLOAD
000002d9: CALLER
000002da: PUSH1 0x01
000002dc: PUSH1 0xa0
000002de: PUSH1 0x02
000002e0: EXP
000002e1: SUB
000002e2: AND
000002e3: SWAP1
000002e4: PUSH1 0x00
000002e6: SWAP1
000002e7: CALLVALUE
000002e8: DUP5
000002e9: SWAP1
000002ea: SUB
000002eb: SWAP1
000002ec: DUP3
000002ed: DUP2
000002ee: DUP2
000002ef: DUP2
000002f0: DUP6
000002f1: DUP9
000002f2: DUP4
000002f3: CALL
000002f4: SWAP4
000002f5: POP
000002f6: POP
000002f7: POP
000002f8: POP
000002f9: POP
000002fa: PUSH1 0x01
000002fc: PUSH1 0x00
000002fe: SWAP1
000002ff: SLOAD
00000300: SWAP1
00000301: PUSH2 0x0100
00000304: EXP
00000305: SWAP1
00000306: DIV
00000307: PUSH1 0x01
00000309: PUSH1 0xa0
0000030b: PUSH1 0x02
0000030d: EXP
0000030e: SUB
0000030f: AND
00000310: PUSH1 0x01
00000312: PUSH1 0xa0
00000314: PUSH1 0x02
00000316: EXP
00000317: SUB
00000318: AND
00000319: PUSH1 0x00
0000031b: PUSH1 0x64
0000031d: DUP4
0000031e: PUSH1 0x0a
00000320: MUL
00000321: DIV
00000322: PUSH1 0x40
00000324: MLOAD
00000325: DUP1
00000326: SWAP1
00000327: POP
00000328: PUSH1 0x00
0000032a: PUSH1 0x40
0000032c: MLOAD
0000032d: DUP1
0000032e: DUP4
0000032f: SUB
00000330: DUP2
00000331: DUP6
00000332: DUP9
00000333: DUP9
00000334: CALL
00000335: SWAP4
00000336: POP
00000337: POP
00000338: POP
00000339: POP
0000033a: POP
0000033b: PUSH1 0x01
0000033d: PUSH1 0x05
0000033f: PUSH1 0x00
00000341: POP
00000342: PUSH1 0x00
00000344: CALLER
00000345: PUSH1 0x01
00000347: PUSH1 0xa0
00000349: PUSH1 0x02
0000034b: EXP
0000034c: SUB
0000034d: AND
0000034e: DUP2
0000034f: MSTORE
00000350: PUSH1 0x20
00000352: ADD
00000353: SWAP1
00000354: DUP2
00000355: MSTORE
00000356: PUSH1 0x20
00000358: ADD
00000359: PUSH1 0x00
0000035b: KECCAK256
0000035c: PUSH1 0x00
0000035e: POP
0000035f: PUSH1 0x00
00000361: ADD
00000362: PUSH1 0x00
00000364: DUP3
00000365: DUP3
00000366: DUP3
00000367: POP
00000368: SLOAD
00000369: ADD
0000036a: SWAP3
0000036b: POP
0000036c: POP
0000036d: DUP2
0000036e: SWAP1
0000036f: SSTORE
00000370: POP
00000371: PUSH1 0x02
00000373: PUSH1 0x05
00000375: PUSH1 0x00
00000377: POP
00000378: PUSH1 0x00
0000037a: CALLER
0000037b: PUSH1 0x01
0000037d: PUSH1 0xa0
0000037f: PUSH1 0x02
00000381: EXP
00000382: SUB
00000383: AND
00000384: DUP2
00000385: MSTORE
00000386: PUSH1 0x20
00000388: ADD
00000389: SWAP1
0000038a: DUP2
0000038b: MSTORE
0000038c: PUSH1 0x20
0000038e: ADD
0000038f: PUSH1 0x00
00000391: KECCAK256
00000392: PUSH1 0x00
00000394: POP
00000395: PUSH1 0x01
00000397: ADD
00000398: PUSH1 0x00
0000039a: DUP3
0000039b: DUP3
0000039c: DUP3
0000039d: POP
0000039e: SLOAD
0000039f: MUL
000003a0: SWAP3
000003a1: POP
000003a2: POP
000003a3: DUP2
000003a4: SWAP1
000003a5: SSTORE
000003a6: POP
000003a7: PUSH1 0x02
000003a9: PUSH1 0x05
000003ab: PUSH1 0x00
000003ad: POP
000003ae: PUSH1 0x00
000003b0: CALLER
000003b1: PUSH1 0x01
000003b3: PUSH1 0xa0
000003b5: PUSH1 0x02
000003b7: EXP
000003b8: SUB
000003b9: AND
000003ba: DUP2
000003bb: MSTORE
000003bc: PUSH1 0x20
000003be: ADD
000003bf: SWAP1
000003c0: DUP2
000003c1: MSTORE
000003c2: PUSH1 0x20
000003c4: ADD
000003c5: PUSH1 0x00
000003c7: KECCAK256
000003c8: PUSH1 0x00
000003ca: POP
000003cb: PUSH1 0x02
000003cd: ADD
000003ce: PUSH1 0x00
000003d0: DUP3
000003d1: DUP3
000003d2: DUP3
000003d3: POP
000003d4: SLOAD
000003d5: MUL
000003d6: SWAP3
000003d7: POP
000003d8: POP
000003d9: DUP2
000003da: SWAP1
000003db: SSTORE
000003dc: POP
000003dd: JUMPDEST
000003de: POP
000003df: JUMP
000003e0: JUMPDEST
000003e1: PUSH2 0x05b7
000003e4: CALLER
000003e5: PUSH1 0x01
000003e7: PUSH1 0xa0
000003e9: PUSH1 0x02
000003eb: EXP
000003ec: SUB
000003ed: AND
000003ee: PUSH1 0x00
000003f0: SWAP1
000003f1: DUP2
000003f2: MSTORE
000003f3: PUSH1 0x03
000003f5: PUSH1 0x20
000003f7: MSTORE
000003f8: PUSH1 0x40
000003fa: DUP2
000003fb: KECCAK256
000003fc: SLOAD
000003fd: DUP2
000003fe: SWAP1
000003ff: DUP2
00000400: SWAP1
00000401: PUSH1 0xff
00000403: AND
00000404: ISZERO
00000405: PUSH2 0x009c
00000408: JUMPI
00000409: POP
0000040a: POP
0000040b: PUSH1 0x06
0000040d: PUSH1 0x20
0000040f: DUP2
00000410: DUP2
00000411: MSTORE
00000412: PUSH1 0x40
00000414: DUP1
00000415: DUP5
00000416: KECCAK256
00000417: PUSH1 0x02
00000419: DUP2
0000041a: ADD
0000041b: SLOAD
0000041c: PUSH1 0x05
0000041e: DUP5
0000041f: MSTORE
00000420: SWAP2
00000421: SWAP1
00000422: SWAP5
00000423: KECCAK256
00000424: PUSH1 0x01
00000426: SWAP1
00000427: DUP2
00000428: ADD
00000429: SLOAD
0000042a: SWAP4
0000042b: SWAP1
0000042c: SWAP3
0000042d: MSTORE
0000042e: SWAP3
0000042f: SLOAD
00000430: ADD
00000431: DUP2
00000432: DUP2
00000433: GT
00000434: PUSH2 0x009c
00000437: JUMPI
00000438: DUP3
00000439: CALLVALUE
0000043a: LT
0000043b: ISZERO
0000043c: ISZERO
0000043d: PUSH2 0x06cb
00000440: JUMPI
00000441: CALLER
00000442: PUSH1 0x01
00000444: PUSH1 0xa0
00000446: PUSH1 0x02
00000448: EXP
00000449: SUB
0000044a: AND
0000044b: PUSH1 0x00
0000044d: DUP5
0000044e: CALLVALUE
0000044f: SUB
00000450: PUSH1 0x40
00000452: MLOAD
00000453: DUP1
00000454: SWAP1
00000455: POP
00000456: PUSH1 0x00
00000458: PUSH1 0x40
0000045a: MLOAD
0000045b: DUP1
0000045c: DUP4
0000045d: SUB
0000045e: DUP2
0000045f: DUP6
00000460: DUP9
00000461: DUP9
00000462: CALL
00000463: SWAP4
00000464: POP
00000465: POP
00000466: POP
00000467: POP
00000468: POP
00000469: PUSH1 0x01
0000046b: PUSH1 0x00
0000046d: SWAP1
0000046e: SLOAD
0000046f: SWAP1
00000470: PUSH2 0x0100
00000473: EXP
00000474: SWAP1
00000475: DIV
00000476: PUSH1 0x01
00000478: PUSH1 0xa0
0000047a: PUSH1 0x02
0000047c: EXP
0000047d: SUB
0000047e: AND
0000047f: PUSH1 0x01
00000481: PUSH1 0xa0
00000483: PUSH1 0x02
00000485: EXP
00000486: SUB
00000487: AND
00000488: PUSH1 0x00
0000048a: PUSH1 0x64
0000048c: DUP6
0000048d: PUSH1 0x0a
0000048f: MUL
00000490: DIV
00000491: PUSH1 0x40
00000493: MLOAD
00000494: DUP1
00000495: SWAP1
00000496: POP
00000497: PUSH1 0x00
00000499: PUSH1 0x40
0000049b: MLOAD
0000049c: DUP1
0000049d: DUP4
0000049e: SUB
0000049f: DUP2
000004a0: DUP6
000004a1: DUP9
000004a2: DUP9
000004a3: CALL
000004a4: SWAP4
000004a5: POP
000004a6: POP
000004a7: POP
000004a8: POP
000004a9: POP
000004aa: PUSH1 0x01
000004ac: PUSH1 0x06
000004ae: PUSH1 0x00
000004b0: POP
000004b1: PUSH1 0x00
000004b3: CALLER
000004b4: PUSH1 0x01
000004b6: PUSH1 0xa0
000004b8: PUSH1 0x02
000004ba: EXP
000004bb: SUB
000004bc: AND
000004bd: DUP2
000004be: MSTORE
000004bf: PUSH1 0x20
000004c1: ADD
000004c2: SWAP1
000004c3: DUP2
000004c4: MSTORE
000004c5: PUSH1 0x20
000004c7: ADD
000004c8: PUSH1 0x00
000004ca: KECCAK256
000004cb: PUSH1 0x00
000004cd: POP
000004ce: PUSH1 0x00
000004d0: ADD
000004d1: PUSH1 0x00
000004d3: DUP3
000004d4: DUP3
000004d5: DUP3
000004d6: POP
000004d7: SLOAD
000004d8: ADD
000004d9: SWAP3
000004da: POP
000004db: POP
000004dc: DUP2
000004dd: SWAP1
000004de: SSTORE
000004df: POP
000004e0: PUSH5 0x0ba43b7400
000004e6: PUSH1 0x06
000004e8: PUSH1 0x00
000004ea: POP
000004eb: PUSH1 0x00
000004ed: CALLER
000004ee: PUSH1 0x01
000004f0: PUSH1 0xa0
000004f2: PUSH1 0x02
000004f4: EXP
000004f5: SUB
000004f6: AND
000004f7: DUP2
000004f8: MSTORE
000004f9: PUSH1 0x20
000004fb: ADD
000004fc: SWAP1
000004fd: DUP2
000004fe: MSTORE
000004ff: PUSH1 0x20
00000501: ADD
00000502: PUSH1 0x00
00000504: KECCAK256
00000505: PUSH1 0x00
00000507: POP
00000508: PUSH1 0x01
0000050a: ADD
0000050b: PUSH1 0x00
0000050d: DUP3
0000050e: DUP3
0000050f: DUP3
00000510: POP
00000511: SLOAD
00000512: ADD
00000513: SWAP3
00000514: POP
00000515: POP
00000516: DUP2
00000517: SWAP1
00000518: SSTORE
00000519: POP
0000051a: PUSH1 0x02
0000051c: PUSH1 0x06
0000051e: PUSH1 0x00
00000520: POP
00000521: PUSH1 0x00
00000523: CALLER
00000524: PUSH1 0x01
00000526: PUSH1 0xa0
00000528: PUSH1 0x02
0000052a: EXP
0000052b: SUB
0000052c: AND
0000052d: DUP2
0000052e: MSTORE
0000052f: PUSH1 0x20
00000531: ADD
00000532: SWAP1
00000533: DUP2
00000534: MSTORE
00000535: PUSH1 0x20
00000537: ADD
00000538: PUSH1 0x00
0000053a: KECCAK256
0000053b: PUSH1 0x00
0000053d: POP
0000053e: PUSH1 0x02
00000540: ADD
00000541: PUSH1 0x00
00000543: DUP3
00000544: DUP3
00000545: DUP3
00000546: POP
00000547: SLOAD
00000548: MUL
00000549: SWAP3
0000054a: POP
0000054b: POP
0000054c: DUP2
0000054d: SWAP1
0000054e: SSTORE
0000054f: POP
00000550: JUMPDEST
00000551: POP
00000552: POP
00000553: POP
00000554: JUMP
00000555: JUMPDEST
00000556: PUSH2 0x05b7
00000559: PUSH1 0x00
0000055b: CALLVALUE
0000055c: GT
0000055d: ISZERO
0000055e: PUSH2 0x06d8
00000561: JUMPI
00000562: PUSH2 0x0002
00000565: JUMP
00000566: JUMPDEST
00000567: PUSH2 0x05cd
0000056a: PUSH1 0x01
0000056c: SLOAD
0000056d: PUSH1 0x01
0000056f: PUSH1 0xa0
00000571: PUSH1 0x02
00000573: EXP
00000574: SUB
00000575: AND
00000576: DUP2
00000577: JUMP
00000578: JUMPDEST
00000579: PUSH2 0x061a
0000057c: PUSH1 0x04
0000057e: CALLDATALOAD
0000057f: PUSH1 0x06
00000581: PUSH1 0x20
00000583: MSTORE
00000584: PUSH1 0x00
00000586: SWAP1
00000587: DUP2
00000588: MSTORE
00000589: PUSH1 0x40
0000058b: SWAP1
0000058c: KECCAK256
0000058d: DUP1
0000058e: SLOAD
0000058f: PUSH1 0x01
00000591: DUP3
00000592: ADD
00000593: SLOAD
00000594: PUSH1 0x02
00000596: DUP4
00000597: ADD
00000598: SLOAD
00000599: PUSH1 0x03
0000059b: DUP5
0000059c: ADD
0000059d: SLOAD
0000059e: PUSH1 0x04
000005a0: SWAP5
000005a1: SWAP1
000005a2: SWAP5
000005a3: ADD
000005a4: SLOAD
000005a5: SWAP3
000005a6: SWAP4
000005a7: SWAP2
000005a8: SWAP3
000005a9: SWAP1
000005aa: SWAP2
000005ab: SWAP1
000005ac: DUP6
000005ad: JUMP
000005ae: JUMPDEST
000005af: PUSH2 0x0608
000005b2: PUSH1 0x00
000005b4: SLOAD
000005b5: DUP2
000005b6: JUMP
000005b7: JUMPDEST
000005b8: STOP
000005b9: JUMPDEST
000005ba: PUSH1 0x40
000005bc: DUP1
000005bd: MLOAD
000005be: SWAP2
000005bf: ISZERO
000005c0: ISZERO
000005c1: DUP3
000005c2: MSTORE
000005c3: MLOAD
000005c4: SWAP1
000005c5: DUP2
000005c6: SWAP1
000005c7: SUB
000005c8: PUSH1 0x20
000005ca: ADD
000005cb: SWAP1
000005cc: RETURN
000005cd: JUMPDEST
000005ce: PUSH1 0x40
000005d0: DUP1
000005d1: MLOAD
000005d2: PUSH1 0x01
000005d4: PUSH1 0xa0
000005d6: PUSH1 0x02
000005d8: EXP
000005d9: SUB
000005da: SWAP3
000005db: SWAP1
000005dc: SWAP3
000005dd: AND
000005de: DUP3
000005df: MSTORE
000005e0: MLOAD
000005e1: SWAP1
000005e2: DUP2
000005e3: SWAP1
000005e4: SUB
000005e5: PUSH1 0x20
000005e7: ADD
000005e8: SWAP1
000005e9: RETURN
000005ea: JUMPDEST
000005eb: PUSH1 0x40
000005ed: DUP1
000005ee: MLOAD
000005ef: SWAP4
000005f0: DUP5
000005f1: MSTORE
000005f2: PUSH1 0x20
000005f4: DUP5
000005f5: ADD
000005f6: SWAP3
000005f7: SWAP1
000005f8: SWAP3
000005f9: MSTORE
000005fa: DUP3
000005fb: DUP3
000005fc: ADD
000005fd: MSTORE
000005fe: MLOAD
000005ff: SWAP1
00000600: DUP2
00000601: SWAP1
00000602: SUB
00000603: PUSH1 0x60
00000605: ADD
00000606: SWAP1
00000607: RETURN
00000608: JUMPDEST
00000609: PUSH1 0x40
0000060b: DUP1
0000060c: MLOAD
0000060d: SWAP2
0000060e: DUP3
0000060f: MSTORE
00000610: MLOAD
00000611: SWAP1
00000612: DUP2
00000613: SWAP1
00000614: SUB
00000615: PUSH1 0x20
00000617: ADD
00000618: SWAP1
00000619: RETURN
0000061a: JUMPDEST
0000061b: PUSH1 0x40
0000061d: DUP1
0000061e: MLOAD
0000061f: SWAP6
00000620: DUP7
00000621: MSTORE
00000622: PUSH1 0x20
00000624: DUP7
00000625: ADD
00000626: SWAP5
00000627: SWAP1
00000628: SWAP5
00000629: MSTORE
0000062a: DUP5
0000062b: DUP5
0000062c: ADD
0000062d: SWAP3
0000062e: SWAP1
0000062f: SWAP3
00000630: MSTORE
00000631: PUSH1 0x60
00000633: DUP5
00000634: ADD
00000635: MSTORE
00000636: PUSH1 0x80
00000638: DUP4
00000639: ADD
0000063a: MSTORE
0000063b: MLOAD
0000063c: SWAP1
0000063d: DUP2
0000063e: SWAP1
0000063f: SUB
00000640: PUSH1 0xa0
00000642: ADD
00000643: SWAP1
00000644: RETURN
00000645: JUMPDEST
00000646: POP
00000647: POP
00000648: CALLER
00000649: PUSH1 0x01
0000064b: PUSH1 0xa0
0000064d: PUSH1 0x02
0000064f: EXP
00000650: SUB
00000651: AND
00000652: PUSH1 0x00
00000654: SWAP1
00000655: DUP2
00000656: MSTORE
00000657: PUSH1 0x06
00000659: PUSH1 0x20
0000065b: MSTORE
0000065c: PUSH1 0x40
0000065e: SWAP1
0000065f: KECCAK256
00000660: PUSH1 0x03
00000662: DUP2
00000663: ADD
00000664: SLOAD
00000665: PUSH1 0x04
00000667: SWAP2
00000668: SWAP1
00000669: SWAP2
0000066a: ADD
0000066b: SLOAD
0000066c: TIMESTAMP
0000066d: DUP2
0000066e: SWAP1
0000066f: LT
00000670: PUSH2 0x009c
00000673: JUMPI
00000674: PUSH1 0x40
00000676: PUSH1 0x00
00000678: DUP2
00000679: DUP2
0000067a: KECCAK256
0000067b: PUSH1 0x01
0000067d: DUP2
0000067e: ADD
0000067f: SLOAD
00000680: PUSH1 0x04
00000682: PUSH1 0x20
00000684: DUP2
00000685: DUP2
00000686: MSTORE
00000687: SWAP5
00000688: SWAP1
00000689: SWAP4
0000068a: KECCAK256
0000068b: DUP1
0000068c: SLOAD
0000068d: SWAP2
0000068e: SWAP1
0000068f: SWAP2
00000690: ADD
00000691: SWAP1
00000692: SSTORE
00000693: PUSH1 0x06
00000695: SWAP1
00000696: SWAP3
00000697: MSTORE
00000698: TIMESTAMP
00000699: PUSH1 0x03
0000069b: DUP4
0000069c: ADD
0000069d: DUP2
0000069e: SWAP1
0000069f: SSTORE
000006a0: PUSH2 0x7080
000006a3: ADD
000006a4: SWAP2
000006a5: ADD
000006a6: SSTORE
000006a7: POP
000006a8: POP
000006a9: JUMP
000006aa: JUMPDEST
000006ab: PUSH7 0xb1a2bc2ec50000
000006b3: CALLVALUE
000006b4: LT
000006b5: ISZERO
000006b6: PUSH2 0x029a
000006b9: JUMPI
000006ba: PUSH2 0x0002
000006bd: JUMP
000006be: JUMPDEST
000006bf: DUP1
000006c0: CALLVALUE
000006c1: LT
000006c2: ISZERO
000006c3: PUSH2 0x03dd
000006c6: JUMPI
000006c7: PUSH2 0x0002
000006ca: JUMP
000006cb: JUMPDEST
000006cc: DUP3
000006cd: CALLVALUE
000006ce: LT
000006cf: ISZERO
000006d0: PUSH2 0x0550
000006d3: JUMPI
000006d4: PUSH2 0x0002
000006d7: JUMP
000006d8: JUMPDEST
000006d9: CALLER
000006da: PUSH1 0x01
000006dc: PUSH1 0xa0
000006de: PUSH1 0x02
000006e0: EXP
000006e1: SUB
000006e2: AND
000006e3: PUSH1 0x00
000006e5: SWAP1
000006e6: DUP2
000006e7: MSTORE
000006e8: PUSH1 0x03
000006ea: PUSH1 0x20
000006ec: MSTORE
000006ed: PUSH1 0x40
000006ef: SWAP1
000006f0: KECCAK256
000006f1: SLOAD
000006f2: PUSH1 0xff
000006f4: AND
000006f5: ISZERO
000006f6: PUSH2 0x029a
000006f9: JUMPI
000006fa: CALLER
000006fb: PUSH1 0x01
000006fd: PUSH1 0xa0
000006ff: PUSH1 0x02
00000701: EXP
00000702: SUB
00000703: AND
00000704: PUSH1 0x00
00000706: SWAP1
00000707: DUP2
00000708: MSTORE
00000709: PUSH1 0x04
0000070b: PUSH1 0x20
0000070d: MSTORE
0000070e: PUSH1 0x40
00000710: DUP2
00000711: KECCAK256
00000712: SLOAD
00000713: GT
00000714: ISZERO
00000715: PUSH2 0x009c
00000718: JUMPI
00000719: PUSH1 0x40
0000071b: PUSH1 0x00
0000071d: DUP2
0000071e: DUP2
0000071f: KECCAK256
00000720: CALLER
00000721: PUSH1 0x01
00000723: PUSH1 0xa0
00000725: PUSH1 0x02
00000727: EXP
00000728: SUB
00000729: AND
0000072a: DUP1
0000072b: DUP4
0000072c: MSTORE
0000072d: PUSH1 0x04
0000072f: PUSH1 0x20
00000731: MSTORE
00000732: SWAP1
00000733: SLOAD
00000734: SWAP3
00000735: MLOAD
00000736: SWAP1
00000737: SWAP3
00000738: SWAP1
00000739: DUP3
0000073a: DUP2
0000073b: DUP2
0000073c: DUP2
0000073d: DUP6
0000073e: DUP9
0000073f: DUP4
00000740: CALL
00000741: SWAP4
00000742: POP
00000743: POP
00000744: POP
00000745: POP
00000746: POP
00000747: PUSH2 0x029a
0000074a: JUMP
View stderr 
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x2b3c9e58ca8d4723f0d377f776c4bf2c2ae5d9296bd97a3e452d4464885214dc
call_targets: 0xf29a665f82287fcbb4f2e5e52586f07940ee2dd3
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x2b3c9e58ca8d4723f0d377f776c4bf2c2ae5d9296bd97a3e452d4464885214dc",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xf29a665f82287fcbb4f2e5e52586f07940ee2dd3"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x09c95e10",
            "selector": "0x09c95e10",
            "calldata_variants": [
                "0x09c95e10",
                "0x09c95e100000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x42c8705b",
            "selector": "0x42c8705b",
            "calldata_variants": [
                "0x42c8705b",
                "0x42c8705b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x48ef3f03",
            "selector": "0x48ef3f03",
            "calldata_variants": [
                "0x48ef3f03",
                "0x48ef3f030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5b4ebfc4",
            "selector": "0x5b4ebfc4",
            "calldata_variants": [
                "0x5b4ebfc4",
                "0x5b4ebfc40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x71dba7aa",
            "selector": "0x71dba7aa",
            "calldata_variants": [
                "0x71dba7aa",
                "0x71dba7aa0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x75479c34",
            "selector": "0x75479c34",
            "calldata_variants": [
                "0x75479c34",
                "0x75479c340000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb91366b0",
            "selector": "0xb91366b0",
            "calldata_variants": [
                "0xb91366b0",
                "0xb91366b00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xbf6b43a1",
            "selector": "0xbf6b43a1",
            "calldata_variants": [
                "0xbf6b43a1",
                "0xbf6b43a10000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 387,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 425,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 755,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 7,
    "guards_detected": [],
    "untrusted_call_count": 7
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x2b3c9e58ca8d4723f0d377f776c4bf2c2ae5d9296bd97a3e452d4464885214dc
call_targets: 0xf29a665f82287fcbb4f2e5e52586f07940ee2dd3
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x2b3c9e58ca8d4723f0d377f776c4bf2c2ae5d9296bd97a3e452d4464885214dc",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xf29a665f82287fcbb4f2e5e52586f07940ee2dd3"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x09c95e10",
            "selector": "0x09c95e10",
            "calldata_variants": [
                "0x09c95e10",
                "0x09c95e100000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x42c8705b",
            "selector": "0x42c8705b",
            "calldata_variants": [
                "0x42c8705b",
                "0x42c8705b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x48ef3f03",
            "selector": "0x48ef3f03",
            "calldata_variants": [
                "0x48ef3f03",
                "0x48ef3f030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5b4ebfc4",
            "selector": "0x5b4ebfc4",
            "calldata_variants": [
                "0x5b4ebfc4",
                "0x5b4ebfc40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x71dba7aa",
            "selector": "0x71dba7aa",
            "calldata_variants": [
                "0x71dba7aa",
                "0x71dba7aa0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x75479c34",
            "selector": "0x75479c34",
            "calldata_variants": [
                "0x75479c34",
                "0x75479c340000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb91366b0",
            "selector": "0xb91366b0",
            "calldata_variants": [
                "0xb91366b0",
                "0xb91366b00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xbf6b43a1",
            "selector": "0xbf6b43a1",
            "calldata_variants": [
                "0xbf6b43a1",
                "0xbf6b43a10000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 387,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 425,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 755,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 7,
    "guards_detected": []
}