019b3836-5e6f-72a5-ac93-f1ab2def2d81
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 9487 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 9488 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 98750 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 98751 | capability.graph | complete | 1 / 3 | 1 week ago |
| 98752 | detector.run | complete | 1 / 3 | 1 week ago |
| 98753 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH1 0x44 00000009: JUMPI 0000000a: PUSH1 0x00 0000000c: CALLDATALOAD 0000000d: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 0000002b: SWAP1 0000002c: DIV 0000002d: DUP1 0000002e: PUSH4 0x8da5cb5b 00000033: EQ 00000034: PUSH1 0x50 00000036: JUMPI 00000037: DUP1 00000038: PUSH4 0xb6a74d9b 0000003d: EQ 0000003e: PUSH1 0x8b 00000040: JUMPI 00000041: PUSH1 0x44 00000043: JUMP 00000044: JUMPDEST 00000045: CALLVALUE 00000046: PUSH1 0x02 00000048: JUMPI 00000049: PUSH1 0x4e 0000004b: JUMPDEST 0000004c: JUMPDEST 0000004d: JUMP 0000004e: JUMPDEST 0000004f: STOP 00000050: JUMPDEST 00000051: CALLVALUE 00000052: PUSH1 0x02 00000054: JUMPI 00000055: PUSH1 0x5f 00000057: PUSH1 0x04 00000059: DUP1 0000005a: POP 0000005b: POP 0000005c: PUSH1 0x9c 0000005e: JUMP 0000005f: JUMPDEST 00000060: PUSH1 0x40 00000062: MLOAD 00000063: DUP1 00000064: DUP3 00000065: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000007a: AND 0000007b: DUP2 0000007c: MSTORE 0000007d: PUSH1 0x20 0000007f: ADD 00000080: SWAP2 00000081: POP 00000082: POP 00000083: PUSH1 0x40 00000085: MLOAD 00000086: DUP1 00000087: SWAP2 00000088: SUB 00000089: SWAP1 0000008a: RETURN 0000008b: JUMPDEST 0000008c: CALLVALUE 0000008d: PUSH1 0x02 0000008f: JUMPI 00000090: PUSH1 0x9a 00000092: PUSH1 0x04 00000094: DUP1 00000095: POP 00000096: POP 00000097: PUSH1 0xc2 00000099: JUMP 0000009a: JUMPDEST 0000009b: STOP 0000009c: JUMPDEST 0000009d: PUSH1 0x00 0000009f: PUSH1 0x00 000000a1: SWAP1 000000a2: SLOAD 000000a3: SWAP1 000000a4: PUSH2 0x0100 000000a7: EXP 000000a8: SWAP1 000000a9: DIV 000000aa: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000bf: AND 000000c0: DUP2 000000c1: JUMP 000000c2: JUMPDEST 000000c3: CALLER 000000c4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000d9: AND 000000da: PUSH2 0x08fc 000000dd: CALLVALUE 000000de: SWAP1 000000df: DUP2 000000e0: ISZERO 000000e1: MUL 000000e2: SWAP1 000000e3: PUSH1 0x40 000000e5: MLOAD 000000e6: DUP1 000000e7: SWAP1 000000e8: POP 000000e9: PUSH1 0x00 000000eb: PUSH1 0x40 000000ed: MLOAD 000000ee: DUP1 000000ef: DUP4 000000f0: SUB 000000f1: DUP2 000000f2: DUP6 000000f3: DUP9 000000f4: DUP9 000000f5: CALL 000000f6: SWAP4 000000f7: POP 000000f8: POP 000000f9: POP 000000fa: POP 000000fb: POP 000000fc: JUMPDEST 000000fd: JUMP
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x793af7332674889693caf1fec7dd5ab17f22442e5bc1862e396d842c07920a42
call_targets:
0x1d2f460ddd88443505768415f298a4c2de115e24
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x793af7332674889693caf1fec7dd5ab17f22442e5bc1862e396d842c07920a42",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x1d2f460ddd88443505768415f298a4c2de115e24"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb6a74d9b",
"selector": "0xb6a74d9b",
"calldata_variants": [
"0xb6a74d9b",
"0xb6a74d9b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 245,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x793af7332674889693caf1fec7dd5ab17f22442e5bc1862e396d842c07920a42
call_targets:
0x1d2f460ddd88443505768415f298a4c2de115e24
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x793af7332674889693caf1fec7dd5ab17f22442e5bc1862e396d842c07920a42",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x1d2f460ddd88443505768415f298a4c2de115e24"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xb6a74d9b",
"selector": "0xb6a74d9b",
"calldata_variants": [
"0xb6a74d9b",
"0xb6a74d9b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 245,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|