Analysis Run

019b3836-5df0-70f6-9104-628e1064474a

complete

Chain ID

1

Address

0x54243df971d406f0976caa05268af3777aac38a5

Block Number

—

Created

Fri, Dec 19, 2025 8:04 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
9409	artifact.fetch	complete	1 / 3	4 months ago
9410	tool.cast_disasm	complete	1 / 3	4 months ago
52424	analysis.bundle	complete	1 / 3	2 weeks ago
52425	capability.graph	complete	1 / 3	2 weeks ago
52426	detector.run	complete	1 / 3	2 weeks ago
52427	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

2

EXT*/BALANCE

0

Total opcodes

638

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x008a
0000000a: JUMPI
0000000b: PUSH1 0x00
0000000d: CALLDATALOAD
0000000e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002c: SWAP1
0000002d: DIV
0000002e: DUP1
0000002f: PUSH4 0x123119cd
00000034: EQ
00000035: PUSH2 0x0093
00000038: JUMPI
00000039: DUP1
0000003a: PUSH4 0x13c200d5
0000003f: EQ
00000040: PUSH2 0x00d1
00000043: JUMPI
00000044: DUP1
00000045: PUSH4 0x1b88094d
0000004a: EQ
0000004b: PUSH2 0x00e5
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x30aa81c6
00000055: EQ
00000056: PUSH2 0x0123
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0x37bdc99b
00000060: EQ
00000061: PUSH2 0x0161
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0x42966c68
0000006b: EQ
0000006c: PUSH2 0x0194
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0x66d003ac
00000076: EQ
00000077: PUSH2 0x01c7
0000007a: JUMPI
0000007b: DUP1
0000007c: PUSH4 0x70d5ae05
00000081: EQ
00000082: PUSH2 0x0205
00000085: JUMPI
00000086: PUSH2 0x008a
00000089: JUMP
0000008a: JUMPDEST
0000008b: PUSH2 0x0091
0000008e: JUMPDEST
0000008f: JUMPDEST
00000090: JUMP
00000091: JUMPDEST
00000092: STOP
00000093: JUMPDEST
00000094: CALLVALUE
00000095: PUSH2 0x0002
00000098: JUMPI
00000099: PUSH2 0x00a5
0000009c: PUSH1 0x04
0000009e: DUP1
0000009f: POP
000000a0: POP
000000a1: PUSH2 0x0243
000000a4: JUMP
000000a5: JUMPDEST
000000a6: PUSH1 0x40
000000a8: MLOAD
000000a9: DUP1
000000aa: DUP3
000000ab: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000c0: AND
000000c1: DUP2
000000c2: MSTORE
000000c3: PUSH1 0x20
000000c5: ADD
000000c6: SWAP2
000000c7: POP
000000c8: POP
000000c9: PUSH1 0x40
000000cb: MLOAD
000000cc: DUP1
000000cd: SWAP2
000000ce: SUB
000000cf: SWAP1
000000d0: RETURN
000000d1: JUMPDEST
000000d2: CALLVALUE
000000d3: PUSH2 0x0002
000000d6: JUMPI
000000d7: PUSH2 0x00e3
000000da: PUSH1 0x04
000000dc: DUP1
000000dd: POP
000000de: POP
000000df: PUSH2 0x0269
000000e2: JUMP
000000e3: JUMPDEST
000000e4: STOP
000000e5: JUMPDEST
000000e6: CALLVALUE
000000e7: PUSH2 0x0002
000000ea: JUMPI
000000eb: PUSH2 0x00f7
000000ee: PUSH1 0x04
000000f0: DUP1
000000f1: POP
000000f2: POP
000000f3: PUSH2 0x02de
000000f6: JUMP
000000f7: JUMPDEST
000000f8: PUSH1 0x40
000000fa: MLOAD
000000fb: DUP1
000000fc: DUP3
000000fd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000112: AND
00000113: DUP2
00000114: MSTORE
00000115: PUSH1 0x20
00000117: ADD
00000118: SWAP2
00000119: POP
0000011a: POP
0000011b: PUSH1 0x40
0000011d: MLOAD
0000011e: DUP1
0000011f: SWAP2
00000120: SUB
00000121: SWAP1
00000122: RETURN
00000123: JUMPDEST
00000124: CALLVALUE
00000125: PUSH2 0x0002
00000128: JUMPI
00000129: PUSH2 0x0135
0000012c: PUSH1 0x04
0000012e: DUP1
0000012f: POP
00000130: POP
00000131: PUSH2 0x030d
00000134: JUMP
00000135: JUMPDEST
00000136: PUSH1 0x40
00000138: MLOAD
00000139: DUP1
0000013a: DUP3
0000013b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000150: AND
00000151: DUP2
00000152: MSTORE
00000153: PUSH1 0x20
00000155: ADD
00000156: SWAP2
00000157: POP
00000158: POP
00000159: PUSH1 0x40
0000015b: MLOAD
0000015c: DUP1
0000015d: SWAP2
0000015e: SUB
0000015f: SWAP1
00000160: RETURN
00000161: JUMPDEST
00000162: CALLVALUE
00000163: PUSH2 0x0002
00000166: JUMPI
00000167: PUSH2 0x017c
0000016a: PUSH1 0x04
0000016c: DUP1
0000016d: DUP1
0000016e: CALLDATALOAD
0000016f: SWAP1
00000170: PUSH1 0x20
00000172: ADD
00000173: SWAP1
00000174: SWAP2
00000175: SWAP1
00000176: POP
00000177: POP
00000178: PUSH2 0x033c
0000017b: JUMP
0000017c: JUMPDEST
0000017d: PUSH1 0x40
0000017f: MLOAD
00000180: DUP1
00000181: DUP3
00000182: ISZERO
00000183: ISZERO
00000184: DUP2
00000185: MSTORE
00000186: PUSH1 0x20
00000188: ADD
00000189: SWAP2
0000018a: POP
0000018b: POP
0000018c: PUSH1 0x40
0000018e: MLOAD
0000018f: DUP1
00000190: SWAP2
00000191: SUB
00000192: SWAP1
00000193: RETURN
00000194: JUMPDEST
00000195: CALLVALUE
00000196: PUSH2 0x0002
00000199: JUMPI
0000019a: PUSH2 0x01af
0000019d: PUSH1 0x04
0000019f: DUP1
000001a0: DUP1
000001a1: CALLDATALOAD
000001a2: SWAP1
000001a3: PUSH1 0x20
000001a5: ADD
000001a6: SWAP1
000001a7: SWAP2
000001a8: SWAP1
000001a9: POP
000001aa: POP
000001ab: PUSH2 0x0448
000001ae: JUMP
000001af: JUMPDEST
000001b0: PUSH1 0x40
000001b2: MLOAD
000001b3: DUP1
000001b4: DUP3
000001b5: ISZERO
000001b6: ISZERO
000001b7: DUP2
000001b8: MSTORE
000001b9: PUSH1 0x20
000001bb: ADD
000001bc: SWAP2
000001bd: POP
000001be: POP
000001bf: PUSH1 0x40
000001c1: MLOAD
000001c2: DUP1
000001c3: SWAP2
000001c4: SUB
000001c5: SWAP1
000001c6: RETURN
000001c7: JUMPDEST
000001c8: CALLVALUE
000001c9: PUSH2 0x0002
000001cc: JUMPI
000001cd: PUSH2 0x01d9
000001d0: PUSH1 0x04
000001d2: DUP1
000001d3: POP
000001d4: POP
000001d5: PUSH2 0x0554
000001d8: JUMP
000001d9: JUMPDEST
000001da: PUSH1 0x40
000001dc: MLOAD
000001dd: DUP1
000001de: DUP3
000001df: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001f4: AND
000001f5: DUP2
000001f6: MSTORE
000001f7: PUSH1 0x20
000001f9: ADD
000001fa: SWAP2
000001fb: POP
000001fc: POP
000001fd: PUSH1 0x40
000001ff: MLOAD
00000200: DUP1
00000201: SWAP2
00000202: SUB
00000203: SWAP1
00000204: RETURN
00000205: JUMPDEST
00000206: CALLVALUE
00000207: PUSH2 0x0002
0000020a: JUMPI
0000020b: PUSH2 0x0217
0000020e: PUSH1 0x04
00000210: DUP1
00000211: POP
00000212: POP
00000213: PUSH2 0x057a
00000216: JUMP
00000217: JUMPDEST
00000218: PUSH1 0x40
0000021a: MLOAD
0000021b: DUP1
0000021c: DUP3
0000021d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000232: AND
00000233: DUP2
00000234: MSTORE
00000235: PUSH1 0x20
00000237: ADD
00000238: SWAP2
00000239: POP
0000023a: POP
0000023b: PUSH1 0x40
0000023d: MLOAD
0000023e: DUP1
0000023f: SWAP2
00000240: SUB
00000241: SWAP1
00000242: RETURN
00000243: JUMPDEST
00000244: PUSH1 0x00
00000246: PUSH1 0x00
00000248: SWAP1
00000249: SLOAD
0000024a: SWAP1
0000024b: PUSH2 0x0100
0000024e: EXP
0000024f: SWAP1
00000250: DIV
00000251: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000266: AND
00000267: DUP2
00000268: JUMP
00000269: JUMPDEST
0000026a: PUSH1 0x00
0000026c: PUSH1 0x01
0000026e: PUSH1 0x00
00000270: SWAP1
00000271: SLOAD
00000272: SWAP1
00000273: PUSH2 0x0100
00000276: EXP
00000277: SWAP1
00000278: DIV
00000279: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000028e: AND
0000028f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002a4: AND
000002a5: EQ
000002a6: ISZERO
000002a7: ISZERO
000002a8: PUSH2 0x02b0
000002ab: JUMPI
000002ac: PUSH2 0x0002
000002af: JUMP
000002b0: JUMPDEST
000002b1: CALLER
000002b2: PUSH1 0x01
000002b4: PUSH1 0x00
000002b6: PUSH2 0x0100
000002b9: EXP
000002ba: DUP2
000002bb: SLOAD
000002bc: DUP2
000002bd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002d2: MUL
000002d3: NOT
000002d4: AND
000002d5: SWAP1
000002d6: DUP4
000002d7: MUL
000002d8: OR
000002d9: SWAP1
000002da: SSTORE
000002db: POP
000002dc: JUMPDEST
000002dd: JUMP
000002de: JUMPDEST
000002df: PUSH1 0x00
000002e1: PUSH1 0x01
000002e3: PUSH1 0x00
000002e5: SWAP1
000002e6: SLOAD
000002e7: SWAP1
000002e8: PUSH2 0x0100
000002eb: EXP
000002ec: SWAP1
000002ed: DIV
000002ee: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000303: AND
00000304: SWAP1
00000305: POP
00000306: PUSH2 0x030a
00000309: JUMP
0000030a: JUMPDEST
0000030b: SWAP1
0000030c: JUMP
0000030d: JUMPDEST
0000030e: PUSH1 0x00
00000310: PUSH1 0x00
00000312: PUSH1 0x00
00000314: SWAP1
00000315: SLOAD
00000316: SWAP1
00000317: PUSH2 0x0100
0000031a: EXP
0000031b: SWAP1
0000031c: DIV
0000031d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000332: AND
00000333: SWAP1
00000334: POP
00000335: PUSH2 0x0339
00000338: JUMP
00000339: JUMPDEST
0000033a: SWAP1
0000033b: JUMP
0000033c: JUMPDEST
0000033d: PUSH1 0x00
0000033f: PUSH1 0x00
00000341: PUSH1 0x00
00000343: SWAP1
00000344: SLOAD
00000345: SWAP1
00000346: PUSH2 0x0100
00000349: EXP
0000034a: SWAP1
0000034b: DIV
0000034c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000361: AND
00000362: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000377: AND
00000378: CALLER
00000379: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000038e: AND
0000038f: EQ
00000390: ISZERO
00000391: ISZERO
00000392: PUSH2 0x039a
00000395: JUMPI
00000396: PUSH2 0x0002
00000399: JUMP
0000039a: JUMPDEST
0000039b: PUSH1 0x00
0000039d: PUSH1 0x01
0000039f: PUSH1 0x00
000003a1: SWAP1
000003a2: SLOAD
000003a3: SWAP1
000003a4: PUSH2 0x0100
000003a7: EXP
000003a8: SWAP1
000003a9: DIV
000003aa: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003bf: AND
000003c0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003d5: AND
000003d6: EQ
000003d7: ISZERO
000003d8: PUSH2 0x03e0
000003db: JUMPI
000003dc: PUSH2 0x0002
000003df: JUMP
000003e0: JUMPDEST
000003e1: PUSH1 0x01
000003e3: PUSH1 0x00
000003e5: SWAP1
000003e6: SLOAD
000003e7: SWAP1
000003e8: PUSH2 0x0100
000003eb: EXP
000003ec: SWAP1
000003ed: DIV
000003ee: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000403: AND
00000404: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000419: AND
0000041a: PUSH2 0x08fc
0000041d: DUP4
0000041e: SWAP1
0000041f: DUP2
00000420: ISZERO
00000421: MUL
00000422: SWAP1
00000423: PUSH1 0x40
00000425: MLOAD
00000426: DUP1
00000427: SWAP1
00000428: POP
00000429: PUSH1 0x00
0000042b: PUSH1 0x40
0000042d: MLOAD
0000042e: DUP1
0000042f: DUP4
00000430: SUB
00000431: DUP2
00000432: DUP6
00000433: DUP9
00000434: DUP9
00000435: CALL
00000436: SWAP4
00000437: POP
00000438: POP
00000439: POP
0000043a: POP
0000043b: SWAP1
0000043c: POP
0000043d: PUSH2 0x0441
00000440: JUMP
00000441: JUMPDEST
00000442: JUMPDEST
00000443: JUMPDEST
00000444: SWAP2
00000445: SWAP1
00000446: POP
00000447: JUMP
00000448: JUMPDEST
00000449: PUSH1 0x00
0000044b: PUSH1 0x00
0000044d: PUSH1 0x00
0000044f: SWAP1
00000450: SLOAD
00000451: SWAP1
00000452: PUSH2 0x0100
00000455: EXP
00000456: SWAP1
00000457: DIV
00000458: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000046d: AND
0000046e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000483: AND
00000484: CALLER
00000485: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000049a: AND
0000049b: EQ
0000049c: ISZERO
0000049d: ISZERO
0000049e: PUSH2 0x04a6
000004a1: JUMPI
000004a2: PUSH2 0x0002
000004a5: JUMP
000004a6: JUMPDEST
000004a7: PUSH1 0x00
000004a9: PUSH1 0x01
000004ab: PUSH1 0x00
000004ad: SWAP1
000004ae: SLOAD
000004af: SWAP1
000004b0: PUSH2 0x0100
000004b3: EXP
000004b4: SWAP1
000004b5: DIV
000004b6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004cb: AND
000004cc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004e1: AND
000004e2: EQ
000004e3: ISZERO
000004e4: PUSH2 0x04ec
000004e7: JUMPI
000004e8: PUSH2 0x0002
000004eb: JUMP
000004ec: JUMPDEST
000004ed: PUSH1 0x02
000004ef: PUSH1 0x00
000004f1: SWAP1
000004f2: SLOAD
000004f3: SWAP1
000004f4: PUSH2 0x0100
000004f7: EXP
000004f8: SWAP1
000004f9: DIV
000004fa: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000050f: AND
00000510: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000525: AND
00000526: PUSH2 0x08fc
00000529: DUP4
0000052a: SWAP1
0000052b: DUP2
0000052c: ISZERO
0000052d: MUL
0000052e: SWAP1
0000052f: PUSH1 0x40
00000531: MLOAD
00000532: DUP1
00000533: SWAP1
00000534: POP
00000535: PUSH1 0x00
00000537: PUSH1 0x40
00000539: MLOAD
0000053a: DUP1
0000053b: DUP4
0000053c: SUB
0000053d: DUP2
0000053e: DUP6
0000053f: DUP9
00000540: DUP9
00000541: CALL
00000542: SWAP4
00000543: POP
00000544: POP
00000545: POP
00000546: POP
00000547: SWAP1
00000548: POP
00000549: PUSH2 0x054d
0000054c: JUMP
0000054d: JUMPDEST
0000054e: JUMPDEST
0000054f: JUMPDEST
00000550: SWAP2
00000551: SWAP1
00000552: POP
00000553: JUMP
00000554: JUMPDEST
00000555: PUSH1 0x01
00000557: PUSH1 0x00
00000559: SWAP1
0000055a: SLOAD
0000055b: SWAP1
0000055c: PUSH2 0x0100
0000055f: EXP
00000560: SWAP1
00000561: DIV
00000562: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000577: AND
00000578: DUP2
00000579: JUMP
0000057a: JUMPDEST
0000057b: PUSH1 0x02
0000057d: PUSH1 0x00
0000057f: SWAP1
00000580: SLOAD
00000581: SWAP1
00000582: PUSH2 0x0100
00000585: EXP
00000586: SWAP1
00000587: DIV
00000588: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000059d: AND
0000059e: DUP2
0000059f: JUMP

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
medium	other	detector	Untrusted CALL target/value reachable	45	no	no	view trace_id: 0x4c4b42bf994d39aa744f7a8a08a561249f1d60d4bc651aed29063515e424078f call_targets: 0x54243df971d406f0976caa05268af3777aac38a5 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x4c4b42bf994d39aa744f7a8a08a561249f1d60d4bc651aed29063515e424078f", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x54243df971d406f0976caa05268af3777aac38a5" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x123119cd", "selector": "0x123119cd", "calldata_variants": [ "0x123119cd", "0x123119cd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x13c200d5", "selector": "0x13c200d5", "calldata_variants": [ "0x13c200d5", "0x13c200d50000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1b88094d", "selector": "0x1b88094d", "calldata_variants": [ "0x1b88094d", "0x1b88094d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x30aa81c6", "selector": "0x30aa81c6", "calldata_variants": [ "0x30aa81c6", "0x30aa81c60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x37bdc99b", "selector": "0x37bdc99b", "calldata_variants": [ "0x37bdc99b", "0x37bdc99b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x42966c68", "selector": "0x42966c68", "calldata_variants": [ "0x42966c68", "0x42966c680000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x66d003ac", "selector": "0x66d003ac", "calldata_variants": [ "0x66d003ac", "0x66d003ac0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x70d5ae05", "selector": "0x70d5ae05", "calldata_variants": [ "0x70d5ae05", "0x70d5ae050000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1077, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1345, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 2, "guards_detected": [ { "pc": 888, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1156, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" } ], "untrusted_call_count": 2 }
medium	other	detector	ETH value transfer possible	40	no	no	view trace_id: 0x4c4b42bf994d39aa744f7a8a08a561249f1d60d4bc651aed29063515e424078f call_targets: 0x54243df971d406f0976caa05268af3777aac38a5 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x4c4b42bf994d39aa744f7a8a08a561249f1d60d4bc651aed29063515e424078f", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x54243df971d406f0976caa05268af3777aac38a5" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x123119cd", "selector": "0x123119cd", "calldata_variants": [ "0x123119cd", "0x123119cd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x13c200d5", "selector": "0x13c200d5", "calldata_variants": [ "0x13c200d5", "0x13c200d50000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1b88094d", "selector": "0x1b88094d", "calldata_variants": [ "0x1b88094d", "0x1b88094d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x30aa81c6", "selector": "0x30aa81c6", "calldata_variants": [ "0x30aa81c6", "0x30aa81c60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x37bdc99b", "selector": "0x37bdc99b", "calldata_variants": [ "0x37bdc99b", "0x37bdc99b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x42966c68", "selector": "0x42966c68", "calldata_variants": [ "0x42966c68", "0x42966c680000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x66d003ac", "selector": "0x66d003ac", "calldata_variants": [ "0x66d003ac", "0x66d003ac0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x70d5ae05", "selector": "0x70d5ae05", "calldata_variants": [ "0x70d5ae05", "0x70d5ae050000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1077, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1345, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 2, "guards_detected": [ { "pc": 888, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1156, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" } ] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

medium

other

detector

Untrusted CALL target/value reachable

45

no

view

trace_id: 0x4c4b42bf994d39aa744f7a8a08a561249f1d60d4bc651aed29063515e424078f

call_targets: 0x54243df971d406f0976caa05268af3777aac38a5

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x4c4b42bf994d39aa744f7a8a08a561249f1d60d4bc651aed29063515e424078f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x54243df971d406f0976caa05268af3777aac38a5"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x123119cd",
            "selector": "0x123119cd",
            "calldata_variants": [
                "0x123119cd",
                "0x123119cd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x13c200d5",
            "selector": "0x13c200d5",
            "calldata_variants": [
                "0x13c200d5",
                "0x13c200d50000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1b88094d",
            "selector": "0x1b88094d",
            "calldata_variants": [
                "0x1b88094d",
                "0x1b88094d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x30aa81c6",
            "selector": "0x30aa81c6",
            "calldata_variants": [
                "0x30aa81c6",
                "0x30aa81c60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x37bdc99b",
            "selector": "0x37bdc99b",
            "calldata_variants": [
                "0x37bdc99b",
                "0x37bdc99b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x42966c68",
            "selector": "0x42966c68",
            "calldata_variants": [
                "0x42966c68",
                "0x42966c680000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x66d003ac",
            "selector": "0x66d003ac",
            "calldata_variants": [
                "0x66d003ac",
                "0x66d003ac0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70d5ae05",
            "selector": "0x70d5ae05",
            "calldata_variants": [
                "0x70d5ae05",
                "0x70d5ae050000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1077,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1345,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [
        {
            "pc": 888,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1156,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 2
}