TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-5b21-7209-b0ef-4e316998b520

complete
Chain ID
1
Address
0x389d62b6258f2b8261812c61a57a6f8d24cc9d88
Block Number
—
Created
Fri, Dec 19, 2025 8:04 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
9005 artifact.fetch complete 1 / 3 4 months ago
9006 tool.cast_disasm complete 1 / 3 4 months ago
52436 analysis.bundle complete 1 / 3 2 weeks ago
52437 capability.graph complete 1 / 3 2 weeks ago
52438 detector.run complete 1 / 3 2 weeks ago
52439 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
10
EXT*/BALANCE
1
Total opcodes
1289
Flags
No heuristic flags raised.
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0xe0
00000007: PUSH1 0x02
00000009: EXP
0000000a: PUSH1 0x00
0000000c: CALLDATALOAD
0000000d: DIV
0000000e: PUSH4 0x1e7d6de2
00000013: DUP2
00000014: EQ
00000015: PUSH2 0x0031
00000018: JUMPI
00000019: DUP1
0000001a: PUSH4 0x27dc297e
0000001f: EQ
00000020: PUSH2 0x003a
00000023: JUMPI
00000024: DUP1
00000025: PUSH4 0x82ab890a
0000002a: EQ
0000002b: PUSH2 0x0123
0000002e: JUMPI
0000002f: JUMPDEST
00000030: STOP
00000031: JUMPDEST
00000032: PUSH2 0x028a
00000035: PUSH1 0x02
00000037: SLOAD
00000038: DUP2
00000039: JUMP
0000003a: JUMPDEST
0000003b: PUSH1 0x40
0000003d: DUP1
0000003e: MLOAD
0000003f: PUSH1 0x20
00000041: PUSH1 0x24
00000043: DUP1
00000044: CALLDATALOAD
00000045: PUSH1 0x04
00000047: DUP2
00000048: DUP2
00000049: ADD
0000004a: CALLDATALOAD
0000004b: PUSH1 0x1f
0000004d: DUP2
0000004e: ADD
0000004f: DUP6
00000050: SWAP1
00000051: DIV
00000052: DUP6
00000053: MUL
00000054: DUP7
00000055: ADD
00000056: DUP6
00000057: ADD
00000058: SWAP1
00000059: SWAP7
0000005a: MSTORE
0000005b: DUP6
0000005c: DUP6
0000005d: MSTORE
0000005e: PUSH2 0x002f
00000061: SWAP6
00000062: DUP2
00000063: CALLDATALOAD
00000064: SWAP6
00000065: SWAP2
00000066: SWAP5
00000067: PUSH1 0x44
00000069: SWAP5
0000006a: SWAP3
0000006b: SWAP4
0000006c: SWAP1
0000006d: SWAP3
0000006e: ADD
0000006f: SWAP2
00000070: DUP2
00000071: SWAP1
00000072: DUP5
00000073: ADD
00000074: DUP4
00000075: DUP3
00000076: DUP1
00000077: DUP3
00000078: DUP5
00000079: CALLDATACOPY
0000007a: POP
0000007b: SWAP5
0000007c: SWAP7
0000007d: POP
0000007e: POP
0000007f: POP
00000080: POP
00000081: POP
00000082: POP
00000083: POP
00000084: PUSH2 0x02a4
00000087: PUSH1 0x00
00000089: DUP1
0000008a: SLOAD
0000008b: PUSH1 0x40
0000008d: DUP1
0000008e: MLOAD
0000008f: PUSH32 0x38cc483100000000000000000000000000000000000000000000000000000000
000000b0: DUP2
000000b1: MSTORE
000000b2: SWAP1
000000b3: MLOAD
000000b4: DUP4
000000b5: SWAP3
000000b6: PUSH1 0x01
000000b8: PUSH1 0xa0
000000ba: PUSH1 0x02
000000bc: EXP
000000bd: SUB
000000be: AND
000000bf: SWAP2
000000c0: PUSH4 0x38cc4831
000000c5: SWAP2
000000c6: PUSH1 0x04
000000c8: DUP3
000000c9: DUP2
000000ca: ADD
000000cb: SWAP3
000000cc: PUSH1 0x20
000000ce: SWAP3
000000cf: SWAP2
000000d0: SWAP1
000000d1: DUP3
000000d2: SWAP1
000000d3: SUB
000000d4: ADD
000000d5: DUP2
000000d6: DUP8
000000d7: DUP8
000000d8: PUSH2 0x61da
000000db: GAS
000000dc: SUB
000000dd: CALL
000000de: ISZERO
000000df: PUSH2 0x0002
000000e2: JUMPI
000000e3: POP
000000e4: POP
000000e5: PUSH1 0x40
000000e7: MLOAD
000000e8: MLOAD
000000e9: SWAP2
000000ea: POP
000000eb: POP
000000ec: PUSH1 0x01
000000ee: PUSH1 0xa0
000000f0: PUSH1 0x02
000000f2: EXP
000000f3: SUB
000000f4: DUP2
000000f5: AND
000000f6: DUP3
000000f7: EQ
000000f8: ISZERO
000000f9: PUSH2 0x03d7
000000fc: JUMPI
000000fd: PUSH2 0x037f
00000100: PUSH1 0x00
00000102: JUMPDEST
00000103: PUSH1 0x00
00000105: PUSH1 0x00
00000107: PUSH2 0x076d
0000010a: PUSH20 0x1d3b2638a7cc9f2cb3d298a3da7a90b67e5506ed
0000011f: JUMPDEST
00000120: EXTCODESIZE
00000121: SWAP1
00000122: JUMP
00000123: JUMPDEST
00000124: PUSH2 0x002f
00000127: PUSH1 0x04
00000129: CALLDATALOAD
0000012a: PUSH2 0x02a0
0000012d: DUP2
0000012e: PUSH1 0x40
00000130: PUSH1 0x40
00000132: MLOAD
00000133: SWAP1
00000134: DUP2
00000135: ADD
00000136: PUSH1 0x40
00000138: MSTORE
00000139: DUP1
0000013a: PUSH1 0x03
0000013c: DUP2
0000013d: MSTORE
0000013e: PUSH1 0x20
00000140: ADD
00000141: PUSH32 0x55524c0000000000000000000000000000000000000000000000000000000000
00000162: DUP2
00000163: MSTORE
00000164: PUSH1 0x20
00000166: ADD
00000167: POP
00000168: PUSH1 0xa0
0000016a: PUSH1 0x40
0000016c: MLOAD
0000016d: SWAP1
0000016e: DUP2
0000016f: ADD
00000170: PUSH1 0x40
00000172: MSTORE
00000173: DUP1
00000174: PUSH1 0x69
00000176: DUP2
00000177: MSTORE
00000178: PUSH1 0x20
0000017a: ADD
0000017b: PUSH32 0x68746d6c2868747470733a2f2f7777772e796f75747562652e636f6d2f776174
0000019c: DUP2
0000019d: MSTORE
0000019e: PUSH1 0x20
000001a0: ADD
000001a1: PUSH32 0x63683f763d39625a6b70377131396630292e7870617468282f2f2a5b636f6e74
000001c2: DUP2
000001c3: MSTORE
000001c4: PUSH1 0x20
000001c6: ADD
000001c7: PUSH32 0x61696e732840636c6173732c202277617463682d766965772d636f756e742229
000001e8: DUP2
000001e9: MSTORE
000001ea: PUSH1 0x20
000001ec: ADD
000001ed: PUSH32 0x5d2f746578742829290000000000000000000000000000000000000000000000
0000020e: DUP2
0000020f: MSTORE
00000210: PUSH1 0x20
00000212: ADD
00000213: POP
00000214: PUSH1 0x00
00000216: PUSH1 0x00
00000218: PUSH1 0x00
0000021a: PUSH1 0x00
0000021c: PUSH1 0x00
0000021e: SWAP1
0000021f: SLOAD
00000220: SWAP1
00000221: PUSH2 0x0100
00000224: EXP
00000225: SWAP1
00000226: DIV
00000227: PUSH1 0x01
00000229: PUSH1 0xa0
0000022b: PUSH1 0x02
0000022d: EXP
0000022e: SUB
0000022f: AND
00000230: PUSH1 0x01
00000232: PUSH1 0xa0
00000234: PUSH1 0x02
00000236: EXP
00000237: SUB
00000238: AND
00000239: PUSH4 0x38cc4831
0000023e: PUSH1 0x40
00000240: MLOAD
00000241: DUP2
00000242: PUSH1 0xe0
00000244: PUSH1 0x02
00000246: EXP
00000247: MUL
00000248: DUP2
00000249: MSTORE
0000024a: PUSH1 0x04
0000024c: ADD
0000024d: DUP1
0000024e: SWAP1
0000024f: POP
00000250: PUSH1 0x20
00000252: PUSH1 0x40
00000254: MLOAD
00000255: DUP1
00000256: DUP4
00000257: SUB
00000258: DUP2
00000259: PUSH1 0x00
0000025b: DUP8
0000025c: PUSH2 0x61da
0000025f: GAS
00000260: SUB
00000261: CALL
00000262: ISZERO
00000263: PUSH2 0x0002
00000266: JUMPI
00000267: POP
00000268: POP
00000269: PUSH1 0x40
0000026b: MLOAD
0000026c: MLOAD
0000026d: SWAP2
0000026e: POP
0000026f: POP
00000270: PUSH1 0x01
00000272: PUSH1 0xa0
00000274: PUSH1 0x02
00000276: EXP
00000277: SUB
00000278: DUP2
00000279: AND
0000027a: DUP3
0000027b: EQ
0000027c: ISZERO
0000027d: PUSH2 0x0540
00000280: JUMPI
00000281: PUSH2 0x04e8
00000284: PUSH1 0x00
00000286: PUSH2 0x0102
00000289: JUMP
0000028a: JUMPDEST
0000028b: PUSH1 0x40
0000028d: DUP1
0000028e: MLOAD
0000028f: SWAP2
00000290: DUP3
00000291: MSTORE
00000292: MLOAD
00000293: SWAP1
00000294: DUP2
00000295: SWAP1
00000296: SUB
00000297: PUSH1 0x20
00000299: ADD
0000029a: SWAP1
0000029b: RETURN
0000029c: JUMPDEST
0000029d: PUSH1 0x02
0000029f: SSTORE
000002a0: JUMPDEST
000002a1: POP
000002a2: POP
000002a3: JUMP
000002a4: JUMPDEST
000002a5: PUSH1 0x01
000002a7: PUSH1 0xa0
000002a9: PUSH1 0x02
000002ab: EXP
000002ac: SUB
000002ad: AND
000002ae: CALLER
000002af: PUSH1 0x01
000002b1: PUSH1 0xa0
000002b3: PUSH1 0x02
000002b5: EXP
000002b6: SUB
000002b7: AND
000002b8: EQ
000002b9: ISZERO
000002ba: ISZERO
000002bb: PUSH2 0x02c3
000002be: JUMPI
000002bf: PUSH2 0x0002
000002c2: JUMP
000002c3: JUMPDEST
000002c4: PUSH2 0x029c
000002c7: DUP2
000002c8: PUSH1 0x00
000002ca: PUSH1 0x40
000002cc: DUP1
000002cd: MLOAD
000002ce: PUSH1 0x20
000002d0: DUP2
000002d1: ADD
000002d2: SWAP1
000002d3: SWAP2
000002d4: MSTORE
000002d5: PUSH1 0x00
000002d7: SWAP1
000002d8: DUP2
000002d9: SWAP1
000002da: MSTORE
000002db: DUP3
000002dc: DUP2
000002dd: DUP1
000002de: DUP1
000002df: JUMPDEST
000002e0: DUP4
000002e1: MLOAD
000002e2: DUP2
000002e3: LT
000002e4: ISZERO
000002e5: PUSH2 0x0361
000002e8: JUMPI
000002e9: PUSH1 0x30
000002eb: PUSH1 0xf8
000002ed: PUSH1 0x02
000002ef: EXP
000002f0: MUL
000002f1: DUP5
000002f2: DUP3
000002f3: DUP2
000002f4: MLOAD
000002f5: DUP2
000002f6: LT
000002f7: ISZERO
000002f8: PUSH2 0x0002
000002fb: JUMPI
000002fc: ADD
000002fd: PUSH1 0x20
000002ff: ADD
00000300: MLOAD
00000301: PUSH1 0xf8
00000303: PUSH1 0x02
00000305: EXP
00000306: SWAP1
00000307: DUP2
00000308: SWAP1
00000309: DIV
0000030a: MUL
0000030b: PUSH1 0x01
0000030d: PUSH1 0xf8
0000030f: PUSH1 0x02
00000311: EXP
00000312: SUB
00000313: NOT
00000314: AND
00000315: LT
00000316: DUP1
00000317: ISZERO
00000318: SWAP1
00000319: PUSH2 0x034c
0000031c: JUMPI
0000031d: POP
0000031e: PUSH1 0x39
00000320: PUSH1 0xf8
00000322: PUSH1 0x02
00000324: EXP
00000325: MUL
00000326: DUP5
00000327: DUP3
00000328: DUP2
00000329: MLOAD
0000032a: DUP2
0000032b: LT
0000032c: ISZERO
0000032d: PUSH2 0x0002
00000330: JUMPI
00000331: ADD
00000332: PUSH1 0x20
00000334: ADD
00000335: MLOAD
00000336: PUSH1 0xf8
00000338: PUSH1 0x02
0000033a: EXP
0000033b: SWAP1
0000033c: DUP2
0000033d: SWAP1
0000033e: DIV
0000033f: MUL
00000340: PUSH1 0x01
00000342: PUSH1 0xf8
00000344: PUSH1 0x02
00000346: EXP
00000347: SUB
00000348: NOT
00000349: AND
0000034a: GT
0000034b: ISZERO
0000034c: JUMPDEST
0000034d: ISZERO
0000034e: PUSH2 0x0453
00000351: JUMPI
00000352: DUP2
00000353: ISZERO
00000354: PUSH2 0x04b4
00000357: JUMPI
00000358: DUP6
00000359: PUSH1 0x00
0000035b: EQ
0000035c: ISZERO
0000035d: PUSH2 0x04ab
00000360: JUMPI
00000361: JUMPDEST
00000362: PUSH1 0x00
00000364: DUP7
00000365: GT
00000366: ISZERO
00000367: PUSH2 0x0374
0000036a: JUMPI
0000036b: PUSH1 0x0a
0000036d: DUP7
0000036e: SWAP1
0000036f: EXP
00000370: SWAP1
00000371: SWAP3
00000372: MUL
00000373: SWAP2
00000374: JUMPDEST
00000375: POP
00000376: SWAP1
00000377: SWAP6
00000378: SWAP5
00000379: POP
0000037a: POP
0000037b: POP
0000037c: POP
0000037d: POP
0000037e: JUMP
0000037f: JUMPDEST
00000380: POP
00000381: PUSH1 0x00
00000383: PUSH1 0x00
00000385: SWAP1
00000386: SLOAD
00000387: SWAP1
00000388: PUSH2 0x0100
0000038b: EXP
0000038c: SWAP1
0000038d: DIV
0000038e: PUSH1 0x01
00000390: PUSH1 0xa0
00000392: PUSH1 0x02
00000394: EXP
00000395: SUB
00000396: AND
00000397: PUSH1 0x01
00000399: PUSH1 0xa0
0000039b: PUSH1 0x02
0000039d: EXP
0000039e: SUB
0000039f: AND
000003a0: PUSH4 0x38cc4831
000003a5: PUSH1 0x40
000003a7: MLOAD
000003a8: DUP2
000003a9: PUSH1 0xe0
000003ab: PUSH1 0x02
000003ad: EXP
000003ae: MUL
000003af: DUP2
000003b0: MSTORE
000003b1: PUSH1 0x04
000003b3: ADD
000003b4: DUP1
000003b5: SWAP1
000003b6: POP
000003b7: PUSH1 0x20
000003b9: PUSH1 0x40
000003bb: MLOAD
000003bc: DUP1
000003bd: DUP4
000003be: SUB
000003bf: DUP2
000003c0: PUSH1 0x00
000003c2: DUP8
000003c3: PUSH2 0x61da
000003c6: GAS
000003c7: SUB
000003c8: CALL
000003c9: ISZERO
000003ca: PUSH2 0x0002
000003cd: JUMPI
000003ce: POP
000003cf: POP
000003d0: PUSH1 0x40
000003d2: MLOAD
000003d3: MLOAD
000003d4: SWAP2
000003d5: POP
000003d6: POP
000003d7: JUMPDEST
000003d8: PUSH1 0x01
000003da: DUP1
000003db: SLOAD
000003dc: PUSH1 0x01
000003de: PUSH1 0xa0
000003e0: PUSH1 0x02
000003e2: EXP
000003e3: SUB
000003e4: NOT
000003e5: AND
000003e6: DUP3
000003e7: OR
000003e8: SWAP1
000003e9: DUP2
000003ea: SWAP1
000003eb: SSTORE
000003ec: PUSH1 0x40
000003ee: DUP1
000003ef: MLOAD
000003f0: PUSH32 0xc281d19e00000000000000000000000000000000000000000000000000000000
00000411: DUP2
00000412: MSTORE
00000413: SWAP1
00000414: MLOAD
00000415: PUSH1 0x01
00000417: PUSH1 0xa0
00000419: PUSH1 0x02
0000041b: EXP
0000041c: SUB
0000041d: SWAP3
0000041e: SWAP1
0000041f: SWAP3
00000420: AND
00000421: SWAP2
00000422: PUSH4 0xc281d19e
00000427: SWAP2
00000428: PUSH1 0x04
0000042a: DUP2
0000042b: DUP2
0000042c: ADD
0000042d: SWAP3
0000042e: PUSH1 0x20
00000430: SWAP3
00000431: SWAP1
00000432: SWAP2
00000433: SWAP1
00000434: DUP3
00000435: SWAP1
00000436: SUB
00000437: ADD
00000438: DUP2
00000439: PUSH1 0x00
0000043b: DUP8
0000043c: PUSH2 0x61da
0000043f: GAS
00000440: SUB
00000441: CALL
00000442: ISZERO
00000443: PUSH2 0x0002
00000446: JUMPI
00000447: POP
00000448: POP
00000449: PUSH1 0x40
0000044b: MLOAD
0000044c: MLOAD
0000044d: SWAP3
0000044e: POP
0000044f: POP
00000450: POP
00000451: SWAP1
00000452: JUMP
00000453: JUMPDEST
00000454: DUP4
00000455: DUP2
00000456: DUP2
00000457: MLOAD
00000458: DUP2
00000459: LT
0000045a: ISZERO
0000045b: PUSH2 0x0002
0000045e: JUMPI
0000045f: ADD
00000460: PUSH1 0x20
00000462: ADD
00000463: MLOAD
00000464: PUSH1 0xf8
00000466: PUSH1 0x02
00000468: EXP
00000469: SWAP1
0000046a: DUP2
0000046b: SWAP1
0000046c: DIV
0000046d: MUL
0000046e: PUSH1 0x01
00000470: PUSH1 0xf8
00000472: PUSH1 0x02
00000474: EXP
00000475: SUB
00000476: NOT
00000477: AND
00000478: PUSH32 0x2e00000000000000000000000000000000000000000000000000000000000000
00000499: EQ
0000049a: ISZERO
0000049b: PUSH2 0x04a3
0000049e: JUMPI
0000049f: PUSH1 0x01
000004a1: SWAP2
000004a2: POP
000004a3: JUMPDEST
000004a4: PUSH1 0x01
000004a6: ADD
000004a7: PUSH2 0x02df
000004aa: JUMP
000004ab: JUMPDEST
000004ac: PUSH1 0x00
000004ae: NOT
000004af: SWAP6
000004b0: SWAP1
000004b1: SWAP6
000004b2: ADD
000004b3: SWAP5
000004b4: JUMPDEST
000004b5: PUSH1 0x0a
000004b7: DUP4
000004b8: MUL
000004b9: SWAP3
000004ba: POP
000004bb: DUP3
000004bc: POP
000004bd: PUSH1 0x30
000004bf: DUP5
000004c0: DUP3
000004c1: DUP2
000004c2: MLOAD
000004c3: DUP2
000004c4: LT
000004c5: ISZERO
000004c6: PUSH2 0x0002
000004c9: JUMPI
000004ca: ADD
000004cb: PUSH1 0x20
000004cd: ADD
000004ce: MLOAD
000004cf: PUSH1 0xf8
000004d1: PUSH1 0x02
000004d3: EXP
000004d4: SWAP1
000004d5: DUP2
000004d6: SWAP1
000004d7: DIV
000004d8: DUP2
000004d9: MUL
000004da: DIV
000004db: SWAP1
000004dc: SWAP4
000004dd: ADD
000004de: PUSH1 0x2f
000004e0: NOT
000004e1: ADD
000004e2: SWAP3
000004e3: POP
000004e4: PUSH2 0x04a3
000004e7: JUMP
000004e8: JUMPDEST
000004e9: POP
000004ea: PUSH1 0x00
000004ec: PUSH1 0x00
000004ee: SWAP1
000004ef: SLOAD
000004f0: SWAP1
000004f1: PUSH2 0x0100
000004f4: EXP
000004f5: SWAP1
000004f6: DIV
000004f7: PUSH1 0x01
000004f9: PUSH1 0xa0
000004fb: PUSH1 0x02
000004fd: EXP
000004fe: SUB
000004ff: AND
00000500: PUSH1 0x01
00000502: PUSH1 0xa0
00000504: PUSH1 0x02
00000506: EXP
00000507: SUB
00000508: AND
00000509: PUSH4 0x38cc4831
0000050e: PUSH1 0x40
00000510: MLOAD
00000511: DUP2
00000512: PUSH1 0xe0
00000514: PUSH1 0x02
00000516: EXP
00000517: MUL
00000518: DUP2
00000519: MSTORE
0000051a: PUSH1 0x04
0000051c: ADD
0000051d: DUP1
0000051e: SWAP1
0000051f: POP
00000520: PUSH1 0x20
00000522: PUSH1 0x40
00000524: MLOAD
00000525: DUP1
00000526: DUP4
00000527: SUB
00000528: DUP2
00000529: PUSH1 0x00
0000052b: DUP8
0000052c: PUSH2 0x61da
0000052f: GAS
00000530: SUB
00000531: CALL
00000532: ISZERO
00000533: PUSH2 0x0002
00000536: JUMPI
00000537: POP
00000538: POP
00000539: PUSH1 0x40
0000053b: MLOAD
0000053c: MLOAD
0000053d: SWAP2
0000053e: POP
0000053f: POP
00000540: JUMPDEST
00000541: PUSH1 0x01
00000543: DUP1
00000544: SLOAD
00000545: PUSH1 0x01
00000547: PUSH1 0xa0
00000549: PUSH1 0x02
0000054b: EXP
0000054c: SUB
0000054d: NOT
0000054e: AND
0000054f: DUP3
00000550: OR
00000551: SWAP1
00000552: DUP2
00000553: SWAP1
00000554: SSTORE
00000555: PUSH1 0x40
00000557: MLOAD
00000558: PUSH32 0x524f388900000000000000000000000000000000000000000000000000000000
00000579: DUP2
0000057a: MSTORE
0000057b: PUSH1 0x20
0000057d: PUSH1 0x04
0000057f: DUP3
00000580: DUP2
00000581: ADD
00000582: DUP3
00000583: DUP2
00000584: MSTORE
00000585: DUP10
00000586: MLOAD
00000587: PUSH1 0x24
00000589: DUP6
0000058a: ADD
0000058b: MSTORE
0000058c: DUP10
0000058d: MLOAD
0000058e: PUSH1 0x01
00000590: PUSH1 0xa0
00000592: PUSH1 0x02
00000594: EXP
00000595: SUB
00000596: SWAP6
00000597: SWAP1
00000598: SWAP6
00000599: AND
0000059a: SWAP5
0000059b: PUSH4 0x524f3889
000005a0: SWAP5
000005a1: DUP12
000005a2: SWAP5
000005a3: SWAP3
000005a4: SWAP4
000005a5: DUP5
000005a6: SWAP4
000005a7: PUSH1 0x44
000005a9: SWAP3
000005aa: SWAP1
000005ab: SWAP3
000005ac: ADD
000005ad: SWAP3
000005ae: DUP7
000005af: DUP4
000005b0: ADD
000005b1: SWAP3
000005b2: SWAP1
000005b3: SWAP2
000005b4: DUP3
000005b5: SWAP2
000005b6: DUP6
000005b7: SWAP2
000005b8: DUP4
000005b9: SWAP2
000005ba: DUP7
000005bb: SWAP2
000005bc: PUSH1 0x00
000005be: SWAP2
000005bf: PUSH1 0x1f
000005c1: DUP6
000005c2: ADD
000005c3: DIV
000005c4: PUSH1 0x0f
000005c6: MUL
000005c7: PUSH1 0x03
000005c9: ADD
000005ca: CALL
000005cb: POP
000005cc: SWAP1
000005cd: POP
000005ce: SWAP1
000005cf: DUP2
000005d0: ADD
000005d1: SWAP1
000005d2: PUSH1 0x1f
000005d4: AND
000005d5: DUP1
000005d6: ISZERO
000005d7: PUSH2 0x05f4
000005da: JUMPI
000005db: DUP1
000005dc: DUP3
000005dd: SUB
000005de: DUP1
000005df: MLOAD
000005e0: PUSH1 0x01
000005e2: DUP4
000005e3: PUSH1 0x20
000005e5: SUB
000005e6: PUSH2 0x0100
000005e9: EXP
000005ea: SUB
000005eb: NOT
000005ec: AND
000005ed: DUP2
000005ee: MSTORE
000005ef: PUSH1 0x20
000005f1: ADD
000005f2: SWAP2
000005f3: POP
000005f4: JUMPDEST
000005f5: POP
000005f6: SWAP3
000005f7: POP
000005f8: POP
000005f9: POP
000005fa: PUSH1 0x20
000005fc: PUSH1 0x40
000005fe: MLOAD
000005ff: DUP1
00000600: DUP4
00000601: SUB
00000602: DUP2
00000603: PUSH1 0x00
00000605: DUP8
00000606: PUSH2 0x61da
00000609: GAS
0000060a: SUB
0000060b: CALL
0000060c: ISZERO
0000060d: PUSH2 0x0002
00000610: JUMPI
00000611: POP
00000612: POP
00000613: PUSH1 0x40
00000615: MLOAD
00000616: MLOAD
00000617: SWAP3
00000618: POP
00000619: POP
0000061a: PUSH8 0x0de0b6b3a7640000
00000623: PUSH3 0x030d40
00000627: GASPRICE
00000628: MUL
00000629: ADD
0000062a: DUP3
0000062b: GT
0000062c: ISZERO
0000062d: PUSH2 0x063e
00000630: JUMPI
00000631: POP
00000632: PUSH1 0x00
00000634: SWAP2
00000635: POP
00000636: JUMPDEST
00000637: POP
00000638: SWAP4
00000639: SWAP3
0000063a: POP
0000063b: POP
0000063c: POP
0000063d: JUMP
0000063e: JUMPDEST
0000063f: PUSH1 0x01
00000641: PUSH1 0x00
00000643: SWAP1
00000644: SLOAD
00000645: SWAP1
00000646: PUSH2 0x0100
00000649: EXP
0000064a: SWAP1
0000064b: DIV
0000064c: PUSH1 0x01
0000064e: PUSH1 0xa0
00000650: PUSH1 0x02
00000652: EXP
00000653: SUB
00000654: AND
00000655: PUSH1 0x01
00000657: PUSH1 0xa0
00000659: PUSH1 0x02
0000065b: EXP
0000065c: SUB
0000065d: AND
0000065e: PUSH4 0xadf59f99
00000663: DUP4
00000664: DUP9
00000665: DUP9
00000666: DUP9
00000667: PUSH1 0x40
00000669: MLOAD
0000066a: DUP6
0000066b: PUSH1 0xe0
0000066d: PUSH1 0x02
0000066f: EXP
00000670: MUL
00000671: DUP2
00000672: MSTORE
00000673: PUSH1 0x04
00000675: ADD
00000676: DUP1
00000677: DUP5
00000678: DUP2
00000679: MSTORE
0000067a: PUSH1 0x20
0000067c: ADD
0000067d: DUP1
0000067e: PUSH1 0x20
00000680: ADD
00000681: DUP1
00000682: PUSH1 0x20
00000684: ADD
00000685: DUP4
00000686: DUP2
00000687: SUB
00000688: DUP4
00000689: MSTORE
0000068a: DUP6
0000068b: DUP2
0000068c: DUP2
0000068d: MLOAD
0000068e: DUP2
0000068f: MSTORE
00000690: PUSH1 0x20
00000692: ADD
00000693: SWAP2
00000694: POP
00000695: DUP1
00000696: MLOAD
00000697: SWAP1
00000698: PUSH1 0x20
0000069a: ADD
0000069b: SWAP1
0000069c: DUP1
0000069d: DUP4
0000069e: DUP4
0000069f: DUP3
000006a0: SWAP1
000006a1: PUSH1 0x00
000006a3: PUSH1 0x04
000006a5: PUSH1 0x20
000006a7: DUP5
000006a8: PUSH1 0x1f
000006aa: ADD
000006ab: DIV
000006ac: PUSH1 0x0f
000006ae: MUL
000006af: PUSH1 0x03
000006b1: ADD
000006b2: CALL
000006b3: POP
000006b4: SWAP1
000006b5: POP
000006b6: SWAP1
000006b7: DUP2
000006b8: ADD
000006b9: SWAP1
000006ba: PUSH1 0x1f
000006bc: AND
000006bd: DUP1
000006be: ISZERO
000006bf: PUSH2 0x06dc
000006c2: JUMPI
000006c3: DUP1
000006c4: DUP3
000006c5: SUB
000006c6: DUP1
000006c7: MLOAD
000006c8: PUSH1 0x01
000006ca: DUP4
000006cb: PUSH1 0x20
000006cd: SUB
000006ce: PUSH2 0x0100
000006d1: EXP
000006d2: SUB
000006d3: NOT
000006d4: AND
000006d5: DUP2
000006d6: MSTORE
000006d7: PUSH1 0x20
000006d9: ADD
000006da: SWAP2
000006db: POP
000006dc: JUMPDEST
000006dd: POP
000006de: DUP4
000006df: DUP2
000006e0: SUB
000006e1: DUP3
000006e2: MSTORE
000006e3: DUP5
000006e4: DUP2
000006e5: DUP2
000006e6: MLOAD
000006e7: DUP2
000006e8: MSTORE
000006e9: PUSH1 0x20
000006eb: ADD
000006ec: SWAP2
000006ed: POP
000006ee: DUP1
000006ef: MLOAD
000006f0: SWAP1
000006f1: PUSH1 0x20
000006f3: ADD
000006f4: SWAP1
000006f5: DUP1
000006f6: DUP4
000006f7: DUP4
000006f8: DUP3
000006f9: SWAP1
000006fa: PUSH1 0x00
000006fc: PUSH1 0x04
000006fe: PUSH1 0x20
00000700: DUP5
00000701: PUSH1 0x1f
00000703: ADD
00000704: DIV
00000705: PUSH1 0x0f
00000707: MUL
00000708: PUSH1 0x03
0000070a: ADD
0000070b: CALL
0000070c: POP
0000070d: SWAP1
0000070e: POP
0000070f: SWAP1
00000710: DUP2
00000711: ADD
00000712: SWAP1
00000713: PUSH1 0x1f
00000715: AND
00000716: DUP1
00000717: ISZERO
00000718: PUSH2 0x0735
0000071b: JUMPI
0000071c: DUP1
0000071d: DUP3
0000071e: SUB
0000071f: DUP1
00000720: MLOAD
00000721: PUSH1 0x01
00000723: DUP4
00000724: PUSH1 0x20
00000726: SUB
00000727: PUSH2 0x0100
0000072a: EXP
0000072b: SUB
0000072c: NOT
0000072d: AND
0000072e: DUP2
0000072f: MSTORE
00000730: PUSH1 0x20
00000732: ADD
00000733: SWAP2
00000734: POP
00000735: JUMPDEST
00000736: POP
00000737: SWAP6
00000738: POP
00000739: POP
0000073a: POP
0000073b: POP
0000073c: POP
0000073d: POP
0000073e: PUSH1 0x20
00000740: PUSH1 0x40
00000742: MLOAD
00000743: DUP1
00000744: DUP4
00000745: SUB
00000746: DUP2
00000747: DUP6
00000748: DUP9
00000749: PUSH2 0x8502
0000074c: GAS
0000074d: SUB
0000074e: CALL
0000074f: ISZERO
00000750: PUSH2 0x0002
00000753: JUMPI
00000754: POP
00000755: POP
00000756: PUSH1 0x40
00000758: MLOAD
00000759: MLOAD
0000075a: SWAP5
0000075b: POP
0000075c: PUSH2 0x0636
0000075f: SWAP3
00000760: POP
00000761: POP
00000762: POP
00000763: JUMP
00000764: JUMPDEST
00000765: POP
00000766: PUSH1 0x00
00000768: JUMPDEST
00000769: SWAP2
0000076a: SWAP1
0000076b: POP
0000076c: JUMP
0000076d: JUMPDEST
0000076e: GT
0000076f: ISZERO
00000770: PUSH2 0x07a1
00000773: JUMPI
00000774: POP
00000775: PUSH1 0x00
00000777: DUP1
00000778: SLOAD
00000779: PUSH1 0x01
0000077b: PUSH1 0xa0
0000077d: PUSH1 0x02
0000077f: EXP
00000780: SUB
00000781: NOT
00000782: AND
00000783: PUSH20 0x1d3b2638a7cc9f2cb3d298a3da7a90b67e5506ed
00000798: OR
00000799: SWAP1
0000079a: SSTORE
0000079b: PUSH1 0x01
0000079d: PUSH2 0x0768
000007a0: JUMP
000007a1: JUMPDEST
000007a2: PUSH1 0x00
000007a4: PUSH2 0x07c0
000007a7: PUSH20 0x9efbea6358bed926b293d2ce63a730d6d98d43dd
000007bc: PUSH2 0x011f
000007bf: JUMP
000007c0: JUMPDEST
000007c1: GT
000007c2: ISZERO
000007c3: PUSH2 0x07f6
000007c6: JUMPI
000007c7: POP
000007c8: PUSH1 0x00
000007ca: DUP1
000007cb: SLOAD
000007cc: PUSH20 0x9efbea6358bed926b293d2ce63a730d6d98d43dd
000007e1: PUSH1 0x01
000007e3: PUSH1 0xa0
000007e5: PUSH1 0x02
000007e7: EXP
000007e8: SUB
000007e9: NOT
000007ea: SWAP1
000007eb: SWAP2
000007ec: AND
000007ed: OR
000007ee: SWAP1
000007ef: SSTORE
000007f0: PUSH1 0x01
000007f2: PUSH2 0x0768
000007f5: JUMP
000007f6: JUMPDEST
000007f7: PUSH1 0x00
000007f9: PUSH2 0x0815
000007fc: PUSH20 0x20e12a1f859b3feae5fb2a0a32c18f5a65555bbf
00000811: PUSH2 0x011f
00000814: JUMP
00000815: JUMPDEST
00000816: GT
00000817: ISZERO
00000818: PUSH2 0x0764
0000081b: JUMPI
0000081c: POP
0000081d: PUSH1 0x00
0000081f: DUP1
00000820: SLOAD
00000821: PUSH20 0x20e12a1f859b3feae5fb2a0a32c18f5a65555bbf
00000836: PUSH1 0x01
00000838: PUSH1 0xa0
0000083a: PUSH1 0x02
0000083c: EXP
0000083d: SUB
0000083e: NOT
0000083f: SWAP1
00000840: SWAP2
00000841: AND
00000842: OR
00000843: SWAP1
00000844: SSTORE
00000845: PUSH1 0x01
00000847: PUSH2 0x0768
0000084a: JUMP
View stderr 
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x60cd515730d59aa2d22dd5aa4d619da5622a90641f627e9ebe30b8e23da50ad7
call_targets: 0x389d62b6258f2b8261812c61a57a6f8d24cc9d88
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x60cd515730d59aa2d22dd5aa4d619da5622a90641f627e9ebe30b8e23da50ad7",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x389d62b6258f2b8261812c61a57a6f8d24cc9d88"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x1e7d6de2",
            "selector": "0x1e7d6de2",
            "calldata_variants": [
                "0x1e7d6de2",
                "0x1e7d6de20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27dc297e",
            "selector": "0x27dc297e",
            "calldata_variants": [
                "0x27dc297e",
                "0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x82ab890a",
            "selector": "0x82ab890a",
            "calldata_variants": [
                "0x82ab890a",
                "0x82ab890a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 221,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 968,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1089,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 10,
    "guards_detected": [],
    "untrusted_call_count": 9
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x60cd515730d59aa2d22dd5aa4d619da5622a90641f627e9ebe30b8e23da50ad7
call_targets: 0x389d62b6258f2b8261812c61a57a6f8d24cc9d88
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x60cd515730d59aa2d22dd5aa4d619da5622a90641f627e9ebe30b8e23da50ad7",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x389d62b6258f2b8261812c61a57a6f8d24cc9d88"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x1e7d6de2",
            "selector": "0x1e7d6de2",
            "calldata_variants": [
                "0x1e7d6de2",
                "0x1e7d6de20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27dc297e",
            "selector": "0x27dc297e",
            "calldata_variants": [
                "0x27dc297e",
                "0x27dc297e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x82ab890a",
            "selector": "0x82ab890a",
            "calldata_variants": [
                "0x82ab890a",
                "0x82ab890a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 221,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 968,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1089,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 9,
    "guards_detected": []
}