TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-5ed8-7220-b54e-7a03d78ecd01

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:04 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
9545 artifact.fetch complete 1 / 3 4 months ago
9546 tool.cast_disasm complete 1 / 3 4 months ago
52516 analysis.bundle complete 1 / 3 2 weeks ago
52517 capability.graph complete 1 / 3 2 weeks ago
52518 detector.run complete 1 / 3 2 weeks ago
52519 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
3
EXT*/BALANCE
0
Total opcodes
1076
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0056
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x31a00e51
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x0058
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x4ad211ca
00000025: EQ
00000026: PUSH2 0x006d
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x6497fc25
00000030: EQ
00000031: PUSH2 0x007f
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0xc532892c
0000003b: EQ
0000003c: PUSH2 0x01d1
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0xd2424162
00000046: EQ
00000047: PUSH2 0x025a
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0xf77df859
00000051: EQ
00000052: PUSH2 0x027c
00000055: JUMPI
00000056: JUMPDEST
00000057: STOP
00000058: JUMPDEST
00000059: PUSH2 0x0056
0000005c: PUSH1 0x04
0000005e: CALLDATALOAD
0000005f: PUSH1 0x24
00000061: CALLDATALOAD
00000062: PUSH1 0x00
00000064: PUSH2 0x02e3
00000067: CALLER
00000068: DUP5
00000069: PUSH2 0x01db
0000006c: JUMP
0000006d: JUMPDEST
0000006e: PUSH2 0x0056
00000071: PUSH1 0x04
00000073: CALLDATALOAD
00000074: PUSH1 0x00
00000076: PUSH2 0x031f
00000079: CALLER
0000007a: DUP4
0000007b: PUSH2 0x01db
0000007e: JUMP
0000007f: JUMPDEST
00000080: PUSH2 0x02a3
00000083: JUMPDEST
00000084: PUSH1 0x00
00000086: DUP1
00000087: DUP1
00000088: JUMPDEST
00000089: PUSH1 0x01
0000008b: SLOAD
0000008c: PUSH1 0xa0
0000008e: PUSH1 0x02
00000090: EXP
00000091: SWAP1
00000092: DIV
00000093: PUSH4 0xffffffff
00000098: SWAP1
00000099: DUP2
0000009a: AND
0000009b: SWAP1
0000009c: DUP3
0000009d: AND
0000009e: LT
0000009f: ISZERO
000000a0: PUSH2 0x042f
000000a3: JUMPI
000000a4: PUSH4 0xffffffff
000000a9: DUP2
000000aa: AND
000000ab: PUSH1 0x00
000000ad: SWAP1
000000ae: DUP2
000000af: MSTORE
000000b0: PUSH1 0x02
000000b2: PUSH1 0x20
000000b4: MSTORE
000000b5: PUSH1 0x40
000000b7: DUP2
000000b8: KECCAK256
000000b9: PUSH1 0x01
000000bb: ADD
000000bc: SLOAD
000000bd: EQ
000000be: DUP1
000000bf: ISZERO
000000c0: SWAP1
000000c1: PUSH2 0x01c0
000000c4: JUMPI
000000c5: POP
000000c6: PUSH4 0xffffffff
000000cb: DUP2
000000cc: DUP2
000000cd: AND
000000ce: PUSH1 0x00
000000d0: SWAP1
000000d1: DUP2
000000d2: MSTORE
000000d3: PUSH1 0x02
000000d5: PUSH1 0x20
000000d7: MSTORE
000000d8: PUSH1 0x40
000000da: DUP1
000000db: DUP3
000000dc: KECCAK256
000000dd: SLOAD
000000de: SWAP3
000000df: DUP6
000000e0: AND
000000e1: DUP3
000000e2: MSTORE
000000e3: SWAP1
000000e4: KECCAK256
000000e5: SLOAD
000000e6: PUSH1 0xa0
000000e8: PUSH1 0x02
000000ea: EXP
000000eb: SWAP2
000000ec: DUP3
000000ed: SWAP1
000000ee: DIV
000000ef: PUSH2 0xffff
000000f2: SWAP1
000000f3: DUP2
000000f4: AND
000000f5: SWAP3
000000f6: SWAP1
000000f7: SWAP2
000000f8: DIV
000000f9: AND
000000fa: GT
000000fb: DUP1
000000fc: PUSH2 0x01c0
000000ff: JUMPI
00000100: POP
00000101: PUSH1 0x02
00000103: PUSH1 0x00
00000105: POP
00000106: PUSH1 0x00
00000108: DUP3
00000109: PUSH4 0xffffffff
0000010e: AND
0000010f: DUP2
00000110: MSTORE
00000111: PUSH1 0x20
00000113: ADD
00000114: SWAP1
00000115: DUP2
00000116: MSTORE
00000117: PUSH1 0x20
00000119: ADD
0000011a: PUSH1 0x00
0000011c: KECCAK256
0000011d: PUSH1 0x00
0000011f: POP
00000120: PUSH1 0x00
00000122: ADD
00000123: PUSH1 0x14
00000125: SWAP1
00000126: SLOAD
00000127: SWAP1
00000128: PUSH2 0x0100
0000012b: EXP
0000012c: SWAP1
0000012d: DIV
0000012e: PUSH2 0xffff
00000131: AND
00000132: PUSH2 0xffff
00000135: AND
00000136: PUSH1 0x02
00000138: PUSH1 0x00
0000013a: POP
0000013b: PUSH1 0x00
0000013d: DUP5
0000013e: PUSH4 0xffffffff
00000143: AND
00000144: DUP2
00000145: MSTORE
00000146: PUSH1 0x20
00000148: ADD
00000149: SWAP1
0000014a: DUP2
0000014b: MSTORE
0000014c: PUSH1 0x20
0000014e: ADD
0000014f: PUSH1 0x00
00000151: KECCAK256
00000152: PUSH1 0x00
00000154: POP
00000155: PUSH1 0x00
00000157: ADD
00000158: PUSH1 0x14
0000015a: SWAP1
0000015b: SLOAD
0000015c: SWAP1
0000015d: PUSH2 0x0100
00000160: EXP
00000161: SWAP1
00000162: DIV
00000163: PUSH2 0xffff
00000166: AND
00000167: PUSH2 0xffff
0000016a: AND
0000016b: EQ
0000016c: DUP1
0000016d: ISZERO
0000016e: PUSH2 0x01c0
00000171: JUMPI
00000172: POP
00000173: PUSH1 0x02
00000175: PUSH1 0x00
00000177: POP
00000178: PUSH1 0x00
0000017a: DUP3
0000017b: PUSH4 0xffffffff
00000180: AND
00000181: DUP2
00000182: MSTORE
00000183: PUSH1 0x20
00000185: ADD
00000186: SWAP1
00000187: DUP2
00000188: MSTORE
00000189: PUSH1 0x20
0000018b: ADD
0000018c: PUSH1 0x00
0000018e: KECCAK256
0000018f: PUSH1 0x00
00000191: POP
00000192: PUSH1 0x02
00000194: ADD
00000195: PUSH1 0x00
00000197: POP
00000198: SLOAD
00000199: PUSH1 0x02
0000019b: PUSH1 0x00
0000019d: POP
0000019e: PUSH1 0x00
000001a0: DUP5
000001a1: PUSH4 0xffffffff
000001a6: AND
000001a7: DUP2
000001a8: MSTORE
000001a9: PUSH1 0x20
000001ab: ADD
000001ac: SWAP1
000001ad: DUP2
000001ae: MSTORE
000001af: PUSH1 0x20
000001b1: ADD
000001b2: PUSH1 0x00
000001b4: KECCAK256
000001b5: PUSH1 0x00
000001b7: POP
000001b8: PUSH1 0x02
000001ba: ADD
000001bb: PUSH1 0x00
000001bd: POP
000001be: SLOAD
000001bf: GT
000001c0: JUMPDEST
000001c1: ISZERO
000001c2: PUSH2 0x01c9
000001c5: JUMPI
000001c6: SWAP1
000001c7: POP
000001c8: DUP1
000001c9: JUMPDEST
000001ca: PUSH1 0x01
000001cc: ADD
000001cd: PUSH2 0x0088
000001d0: JUMP
000001d1: JUMPDEST
000001d2: PUSH2 0x02a3
000001d5: PUSH1 0x04
000001d7: CALLDATALOAD
000001d8: PUSH1 0x24
000001da: CALLDATALOAD
000001db: JUMPDEST
000001dc: PUSH1 0x00
000001de: DUP1
000001df: JUMPDEST
000001e0: PUSH1 0x01
000001e2: SLOAD
000001e3: PUSH1 0xa0
000001e5: PUSH1 0x02
000001e7: EXP
000001e8: SWAP1
000001e9: DIV
000001ea: PUSH4 0xffffffff
000001ef: SWAP1
000001f0: DUP2
000001f1: AND
000001f2: SWAP1
000001f3: DUP3
000001f4: AND
000001f5: LT
000001f6: ISZERO
000001f7: PUSH2 0x0435
000001fa: JUMPI
000001fb: PUSH4 0xffffffff
00000200: DUP2
00000201: AND
00000202: PUSH1 0x00
00000204: SWAP1
00000205: DUP2
00000206: MSTORE
00000207: PUSH1 0x02
00000209: PUSH1 0x20
0000020b: MSTORE
0000020c: PUSH1 0x40
0000020e: SWAP1
0000020f: KECCAK256
00000210: SLOAD
00000211: PUSH1 0x01
00000213: PUSH1 0xa0
00000215: PUSH1 0x02
00000217: EXP
00000218: SUB
00000219: DUP6
0000021a: DUP2
0000021b: AND
0000021c: SWAP2
0000021d: AND
0000021e: EQ
0000021f: DUP1
00000220: ISZERO
00000221: PUSH2 0x024d
00000224: JUMPI
00000225: POP
00000226: PUSH4 0xffffffff
0000022b: DUP2
0000022c: AND
0000022d: PUSH1 0x00
0000022f: SWAP1
00000230: DUP2
00000231: MSTORE
00000232: PUSH1 0x02
00000234: PUSH1 0x20
00000236: MSTORE
00000237: PUSH1 0x40
00000239: SWAP1
0000023a: KECCAK256
0000023b: SLOAD
0000023c: PUSH1 0xa0
0000023e: PUSH1 0x02
00000240: EXP
00000241: SWAP1
00000242: DIV
00000243: PUSH2 0xffff
00000246: SWAP1
00000247: DUP2
00000248: AND
00000249: SWAP1
0000024a: DUP5
0000024b: AND
0000024c: EQ
0000024d: JUMPDEST
0000024e: ISZERO
0000024f: PUSH2 0x0444
00000252: JUMPI
00000253: DUP1
00000254: SWAP2
00000255: POP
00000256: PUSH2 0x043d
00000259: JUMP
0000025a: JUMPDEST
0000025b: PUSH2 0x0056
0000025e: PUSH1 0x04
00000260: CALLDATALOAD
00000261: PUSH1 0x00
00000263: SLOAD
00000264: PUSH1 0x01
00000266: PUSH1 0xa0
00000268: PUSH1 0x02
0000026a: EXP
0000026b: SUB
0000026c: SWAP1
0000026d: DUP2
0000026e: AND
0000026f: CALLER
00000270: SWAP1
00000271: SWAP2
00000272: AND
00000273: EQ
00000274: PUSH2 0x044c
00000277: JUMPI
00000278: PUSH2 0x046c
0000027b: JUMP
0000027c: JUMPDEST
0000027d: PUSH2 0x0056
00000280: PUSH1 0x04
00000282: CALLDATALOAD
00000283: PUSH1 0x24
00000285: CALLDATALOAD
00000286: PUSH1 0x01
00000288: SLOAD
00000289: PUSH1 0x00
0000028b: SWAP1
0000028c: CALLER
0000028d: PUSH1 0x01
0000028f: PUSH1 0xa0
00000291: PUSH1 0x02
00000293: EXP
00000294: SUB
00000295: SWAP1
00000296: DUP2
00000297: AND
00000298: SWAP2
00000299: AND
0000029a: EQ
0000029b: PUSH2 0x0543
0000029e: JUMPI
0000029f: PUSH2 0x02de
000002a2: JUMP
000002a3: JUMPDEST
000002a4: PUSH1 0x40
000002a6: DUP1
000002a7: MLOAD
000002a8: PUSH4 0xffffffff
000002ad: SWAP3
000002ae: SWAP1
000002af: SWAP3
000002b0: AND
000002b1: DUP3
000002b2: MSTORE
000002b3: MLOAD
000002b4: SWAP1
000002b5: DUP2
000002b6: SWAP1
000002b7: SUB
000002b8: PUSH1 0x20
000002ba: ADD
000002bb: SWAP1
000002bc: RETURN
000002bd: JUMPDEST
000002be: PUSH1 0x40
000002c0: MLOAD
000002c1: CALLER
000002c2: PUSH1 0x01
000002c4: PUSH1 0xa0
000002c6: PUSH1 0x02
000002c8: EXP
000002c9: SUB
000002ca: AND
000002cb: SWAP1
000002cc: PUSH1 0x00
000002ce: SWAP1
000002cf: DUP5
000002d0: SWAP1
000002d1: DUP3
000002d2: DUP2
000002d3: DUP2
000002d4: DUP2
000002d5: DUP6
000002d6: DUP9
000002d7: DUP4
000002d8: CALL
000002d9: POP
000002da: POP
000002db: POP
000002dc: POP
000002dd: POP
000002de: JUMPDEST
000002df: POP
000002e0: POP
000002e1: POP
000002e2: JUMP
000002e3: JUMPDEST
000002e4: SWAP1
000002e5: POP
000002e6: DUP1
000002e7: PUSH4 0xffffffff
000002ec: AND
000002ed: PUSH4 0xffffffff
000002f2: EQ
000002f3: DUP1
000002f4: PUSH2 0x0315
000002f7: JUMPI
000002f8: POP
000002f9: PUSH4 0xffffffff
000002fe: DUP2
000002ff: AND
00000300: PUSH1 0x00
00000302: SWAP1
00000303: DUP2
00000304: MSTORE
00000305: PUSH1 0x02
00000307: PUSH1 0x20
00000309: MSTORE
0000030a: PUSH1 0x40
0000030c: SWAP1
0000030d: KECCAK256
0000030e: PUSH1 0x01
00000310: ADD
00000311: SLOAD
00000312: DUP3
00000313: SWAP1
00000314: LT
00000315: JUMPDEST
00000316: ISZERO
00000317: PUSH2 0x02bd
0000031a: JUMPI
0000031b: PUSH2 0x02de
0000031e: JUMP
0000031f: JUMPDEST
00000320: SWAP1
00000321: POP
00000322: DUP1
00000323: PUSH4 0xffffffff
00000328: AND
00000329: PUSH4 0xffffffff
0000032e: EQ
0000032f: ISZERO
00000330: PUSH2 0x03ce
00000333: JUMPI
00000334: PUSH1 0x01
00000336: DUP1
00000337: SLOAD
00000338: PUSH1 0xa0
0000033a: PUSH1 0x02
0000033c: EXP
0000033d: SWAP1
0000033e: DUP2
0000033f: SWAP1
00000340: DIV
00000341: PUSH4 0xffffffff
00000346: SWAP1
00000347: DUP2
00000348: AND
00000349: PUSH1 0x00
0000034b: SWAP1
0000034c: DUP2
0000034d: MSTORE
0000034e: PUSH1 0x02
00000350: PUSH1 0x20
00000352: MSTORE
00000353: PUSH1 0x40
00000355: DUP1
00000356: DUP3
00000357: KECCAK256
00000358: DUP1
00000359: SLOAD
0000035a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000036f: NOT
00000370: AND
00000371: CALLER
00000372: OR
00000373: SWAP1
00000374: SSTORE
00000375: DUP5
00000376: SLOAD
00000377: DUP5
00000378: SWAP1
00000379: DIV
0000037a: DUP4
0000037b: AND
0000037c: DUP3
0000037d: MSTORE
0000037e: SWAP1
0000037f: KECCAK256
00000380: DUP1
00000381: SLOAD
00000382: PUSH22 0xffff0000000000000000000000000000000000000000
00000399: NOT
0000039a: AND
0000039b: DUP7
0000039c: DUP5
0000039d: MUL
0000039e: OR
0000039f: SWAP1
000003a0: SSTORE
000003a1: DUP3
000003a2: SLOAD
000003a3: PUSH24 0xffffffff0000000000000000000000000000000000000000
000003bc: NOT
000003bd: DUP2
000003be: AND
000003bf: SWAP1
000003c0: DUP4
000003c1: SWAP1
000003c2: DIV
000003c3: SWAP1
000003c4: SWAP2
000003c5: AND
000003c6: DUP4
000003c7: ADD
000003c8: SWAP1
000003c9: SWAP2
000003ca: MUL
000003cb: OR
000003cc: SWAP1
000003cd: SSTORE
000003ce: JUMPDEST
000003cf: PUSH1 0x01
000003d1: DUP1
000003d2: SLOAD
000003d3: PUSH1 0xa0
000003d5: PUSH1 0x02
000003d7: EXP
000003d8: SWAP1
000003d9: DIV
000003da: PUSH4 0xffffffff
000003df: AND
000003e0: PUSH1 0x00
000003e2: SWAP1
000003e3: DUP2
000003e4: MSTORE
000003e5: PUSH1 0x02
000003e7: PUSH1 0x20
000003e9: MSTORE
000003ea: PUSH1 0x40
000003ec: DUP2
000003ed: KECCAK256
000003ee: SWAP1
000003ef: SWAP2
000003f0: ADD
000003f1: SLOAD
000003f2: EQ
000003f3: ISZERO
000003f4: PUSH2 0x0405
000003f7: JUMPI
000003f8: PUSH1 0x40
000003fa: PUSH1 0x00
000003fc: KECCAK256
000003fd: TIMESTAMP
000003fe: PUSH1 0x02
00000400: SWAP2
00000401: SWAP1
00000402: SWAP2
00000403: ADD
00000404: SSTORE
00000405: JUMPDEST
00000406: PUSH1 0x01
00000408: DUP1
00000409: SLOAD
0000040a: PUSH1 0xa0
0000040c: PUSH1 0x02
0000040e: EXP
0000040f: SWAP1
00000410: DIV
00000411: PUSH4 0xffffffff
00000416: AND
00000417: PUSH1 0x00
00000419: SWAP1
0000041a: DUP2
0000041b: MSTORE
0000041c: PUSH1 0x02
0000041e: PUSH1 0x20
00000420: MSTORE
00000421: PUSH1 0x40
00000423: SWAP1
00000424: KECCAK256
00000425: ADD
00000426: DUP1
00000427: SLOAD
00000428: CALLVALUE
00000429: ADD
0000042a: SWAP1
0000042b: SSTORE
0000042c: POP
0000042d: POP
0000042e: JUMP
0000042f: JUMPDEST
00000430: POP
00000431: SWAP2
00000432: SWAP1
00000433: POP
00000434: JUMP
00000435: JUMPDEST
00000436: PUSH4 0xffffffff
0000043b: SWAP2
0000043c: POP
0000043d: JUMPDEST
0000043e: POP
0000043f: SWAP3
00000440: SWAP2
00000441: POP
00000442: POP
00000443: JUMP
00000444: JUMPDEST
00000445: PUSH1 0x01
00000447: ADD
00000448: PUSH2 0x01df
0000044b: JUMP
0000044c: JUMPDEST
0000044d: PUSH1 0x01
0000044f: DUP1
00000450: SLOAD
00000451: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000466: NOT
00000467: AND
00000468: DUP3
00000469: OR
0000046a: SWAP1
0000046b: SSTORE
0000046c: JUMPDEST
0000046d: POP
0000046e: JUMP
0000046f: JUMPDEST
00000470: PUSH1 0x01
00000472: DUP1
00000473: SLOAD
00000474: PUSH4 0xffffffff
00000479: DUP4
0000047a: AND
0000047b: PUSH1 0x00
0000047d: SWAP1
0000047e: DUP2
0000047f: MSTORE
00000480: PUSH1 0x02
00000482: PUSH1 0x20
00000484: MSTORE
00000485: PUSH1 0x40
00000487: DUP1
00000488: DUP3
00000489: KECCAK256
0000048a: SWAP4
0000048b: DUP5
0000048c: ADD
0000048d: SLOAD
0000048e: SWAP4
0000048f: SLOAD
00000490: DUP2
00000491: MLOAD
00000492: PUSH1 0xe0
00000494: PUSH1 0x02
00000496: EXP
00000497: PUSH4 0x5e2fb5d9
0000049c: MUL
0000049d: DUP2
0000049e: MSTORE
0000049f: PUSH1 0x01
000004a1: PUSH1 0xa0
000004a3: PUSH1 0x02
000004a5: EXP
000004a6: SUB
000004a7: DUP3
000004a8: DUP2
000004a9: AND
000004aa: PUSH1 0x04
000004ac: DUP4
000004ad: ADD
000004ae: MSTORE
000004af: PUSH1 0xa0
000004b1: PUSH1 0x02
000004b3: EXP
000004b4: SWAP1
000004b5: SWAP3
000004b6: DIV
000004b7: PUSH2 0xffff
000004ba: AND
000004bb: PUSH1 0x24
000004bd: DUP3
000004be: ADD
000004bf: MSTORE
000004c0: SWAP2
000004c1: MLOAD
000004c2: SWAP4
000004c3: AND
000004c4: SWAP4
000004c5: PUSH4 0x5e2fb5d9
000004ca: SWAP4
000004cb: SWAP1
000004cc: SWAP3
000004cd: PUSH1 0x44
000004cf: DUP4
000004d0: DUP2
000004d1: ADD
000004d2: SWAP4
000004d3: SWAP2
000004d4: SWAP3
000004d5: SWAP2
000004d6: DUP3
000004d7: SWAP1
000004d8: SUB
000004d9: ADD
000004da: DUP2
000004db: DUP6
000004dc: DUP9
000004dd: PUSH2 0x8502
000004e0: GAS
000004e1: SUB
000004e2: CALL
000004e3: ISZERO
000004e4: PUSH2 0x0002
000004e7: JUMPI
000004e8: POP
000004e9: POP
000004ea: POP
000004eb: POP
000004ec: PUSH1 0x02
000004ee: PUSH1 0x00
000004f0: POP
000004f1: PUSH1 0x00
000004f3: DUP3
000004f4: PUSH4 0xffffffff
000004f9: AND
000004fa: DUP2
000004fb: MSTORE
000004fc: PUSH1 0x20
000004fe: ADD
000004ff: SWAP1
00000500: DUP2
00000501: MSTORE
00000502: PUSH1 0x20
00000504: ADD
00000505: PUSH1 0x00
00000507: KECCAK256
00000508: PUSH1 0x00
0000050a: POP
0000050b: PUSH1 0x01
0000050d: ADD
0000050e: PUSH1 0x00
00000510: POP
00000511: SLOAD
00000512: DUP3
00000513: SUB
00000514: SWAP2
00000515: POP
00000516: DUP2
00000517: POP
00000518: PUSH1 0x00
0000051a: PUSH1 0x02
0000051c: PUSH1 0x00
0000051e: POP
0000051f: PUSH1 0x00
00000521: DUP4
00000522: PUSH4 0xffffffff
00000527: AND
00000528: DUP2
00000529: MSTORE
0000052a: PUSH1 0x20
0000052c: ADD
0000052d: SWAP1
0000052e: DUP2
0000052f: MSTORE
00000530: PUSH1 0x20
00000532: ADD
00000533: PUSH1 0x00
00000535: KECCAK256
00000536: PUSH1 0x00
00000538: POP
00000539: PUSH1 0x01
0000053b: ADD
0000053c: PUSH1 0x00
0000053e: POP
0000053f: DUP2
00000540: SWAP1
00000541: SSTORE
00000542: POP
00000543: JUMPDEST
00000544: PUSH1 0x00
00000546: DUP3
00000547: EQ
00000548: PUSH2 0x02de
0000054b: JUMPI
0000054c: PUSH2 0x0553
0000054f: PUSH2 0x0083
00000552: JUMP
00000553: JUMPDEST
00000554: PUSH4 0xffffffff
00000559: DUP2
0000055a: AND
0000055b: PUSH1 0x00
0000055d: SWAP1
0000055e: DUP2
0000055f: MSTORE
00000560: PUSH1 0x02
00000562: PUSH1 0x20
00000564: MSTORE
00000565: PUSH1 0x40
00000567: SWAP1
00000568: KECCAK256
00000569: SLOAD
0000056a: SWAP1
0000056b: SWAP2
0000056c: POP
0000056d: PUSH2 0xffff
00000570: DUP5
00000571: DUP2
00000572: AND
00000573: PUSH1 0xa0
00000575: PUSH1 0x02
00000577: EXP
00000578: SWAP1
00000579: SWAP3
0000057a: DIV
0000057b: AND
0000057c: GT
0000057d: DUP1
0000057e: PUSH2 0x058f
00000581: JUMPI
00000582: POP
00000583: PUSH1 0x40
00000585: PUSH1 0x00
00000587: SWAP1
00000588: DUP2
00000589: KECCAK256
0000058a: PUSH1 0x01
0000058c: ADD
0000058d: SLOAD
0000058e: EQ
0000058f: JUMPDEST
00000590: ISZERO
00000591: PUSH2 0x0599
00000594: JUMPI
00000595: PUSH2 0x02de
00000598: JUMP
00000599: JUMPDEST
0000059a: PUSH4 0xffffffff
0000059f: DUP2
000005a0: AND
000005a1: PUSH1 0x00
000005a3: SWAP1
000005a4: DUP2
000005a5: MSTORE
000005a6: PUSH1 0x02
000005a8: PUSH1 0x20
000005aa: MSTORE
000005ab: PUSH1 0x40
000005ad: SWAP1
000005ae: KECCAK256
000005af: PUSH1 0x01
000005b1: ADD
000005b2: SLOAD
000005b3: DUP3
000005b4: SWAP1
000005b5: LT
000005b6: PUSH2 0x046f
000005b9: JUMPI
000005ba: PUSH1 0x40
000005bc: PUSH1 0x00
000005be: DUP2
000005bf: DUP2
000005c0: KECCAK256
000005c1: SLOAD
000005c2: DUP3
000005c3: MLOAD
000005c4: PUSH1 0x01
000005c6: SLOAD
000005c7: PUSH1 0xe0
000005c9: PUSH1 0x02
000005cb: EXP
000005cc: PUSH4 0x5e2fb5d9
000005d1: MUL
000005d2: DUP3
000005d3: MSTORE
000005d4: PUSH1 0x01
000005d6: PUSH1 0xa0
000005d8: PUSH1 0x02
000005da: EXP
000005db: SUB
000005dc: DUP4
000005dd: DUP2
000005de: AND
000005df: PUSH1 0x04
000005e1: DUP5
000005e2: ADD
000005e3: MSTORE
000005e4: PUSH1 0xa0
000005e6: PUSH1 0x02
000005e8: EXP
000005e9: SWAP1
000005ea: SWAP4
000005eb: DIV
000005ec: PUSH2 0xffff
000005ef: AND
000005f0: PUSH1 0x24
000005f2: DUP4
000005f3: ADD
000005f4: MSTORE
000005f5: SWAP4
000005f6: MLOAD
000005f7: SWAP4
000005f8: SWAP1
000005f9: SWAP2
000005fa: AND
000005fb: SWAP3
000005fc: PUSH4 0x5e2fb5d9
00000601: SWAP3
00000602: DUP7
00000603: SWAP3
00000604: PUSH1 0x44
00000606: DUP2
00000607: DUP2
00000608: ADD
00000609: SWAP4
0000060a: SWAP2
0000060b: DUP3
0000060c: SWAP1
0000060d: SUB
0000060e: ADD
0000060f: DUP2
00000610: DUP6
00000611: DUP9
00000612: PUSH2 0x8502
00000615: GAS
00000616: SUB
00000617: CALL
00000618: ISZERO
00000619: PUSH2 0x0002
0000061c: JUMPI
0000061d: POP
0000061e: POP
0000061f: POP
00000620: POP
00000621: DUP2
00000622: PUSH1 0x02
00000624: PUSH1 0x00
00000626: POP
00000627: PUSH1 0x00
00000629: DUP4
0000062a: PUSH4 0xffffffff
0000062f: AND
00000630: DUP2
00000631: MSTORE
00000632: PUSH1 0x20
00000634: ADD
00000635: SWAP1
00000636: DUP2
00000637: MSTORE
00000638: PUSH1 0x20
0000063a: ADD
0000063b: PUSH1 0x00
0000063d: KECCAK256
0000063e: PUSH1 0x00
00000640: POP
00000641: PUSH1 0x01
00000643: ADD
00000644: PUSH1 0x00
00000646: DUP3
00000647: DUP3
00000648: DUP3
00000649: POP
0000064a: SLOAD
0000064b: SUB
0000064c: SWAP3
0000064d: POP
0000064e: POP
0000064f: DUP2
00000650: SWAP1
00000651: SSTORE
00000652: POP
00000653: PUSH1 0x00
00000655: SWAP2
00000656: POP
00000657: DUP2
00000658: POP
00000659: PUSH2 0x0543
0000065c: JUMP
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x890cf0382df548b5aa18a01c22fe83a7eae8e0caffb3580d3e83cf13533f60c9
call_targets: 0x8c0bd73fb7fe62805a431d3b471c4eae9a17d004
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x890cf0382df548b5aa18a01c22fe83a7eae8e0caffb3580d3e83cf13533f60c9",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8c0bd73fb7fe62805a431d3b471c4eae9a17d004"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x31a00e51",
            "selector": "0x31a00e51",
            "calldata_variants": [
                "0x31a00e51",
                "0x31a00e510000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4ad211ca",
            "selector": "0x4ad211ca",
            "calldata_variants": [
                "0x4ad211ca",
                "0x4ad211ca0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6497fc25",
            "selector": "0x6497fc25",
            "calldata_variants": [
                "0x6497fc25",
                "0x6497fc250000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc532892c",
            "selector": "0xc532892c",
            "calldata_variants": [
                "0xc532892c",
                "0xc532892c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd2424162",
            "selector": "0xd2424162",
            "calldata_variants": [
                "0xd2424162",
                "0xd24241620000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf77df859",
            "selector": "0xf77df859",
            "calldata_variants": [
                "0xf77df859",
                "0xf77df8590000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 728,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1250,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1559,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 3
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x890cf0382df548b5aa18a01c22fe83a7eae8e0caffb3580d3e83cf13533f60c9
call_targets: 0x8c0bd73fb7fe62805a431d3b471c4eae9a17d004
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x890cf0382df548b5aa18a01c22fe83a7eae8e0caffb3580d3e83cf13533f60c9",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8c0bd73fb7fe62805a431d3b471c4eae9a17d004"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x31a00e51",
            "selector": "0x31a00e51",
            "calldata_variants": [
                "0x31a00e51",
                "0x31a00e510000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4ad211ca",
            "selector": "0x4ad211ca",
            "calldata_variants": [
                "0x4ad211ca",
                "0x4ad211ca0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6497fc25",
            "selector": "0x6497fc25",
            "calldata_variants": [
                "0x6497fc25",
                "0x6497fc250000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc532892c",
            "selector": "0xc532892c",
            "calldata_variants": [
                "0xc532892c",
                "0xc532892c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd2424162",
            "selector": "0xd2424162",
            "calldata_variants": [
                "0xd2424162",
                "0xd24241620000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf77df859",
            "selector": "0xf77df859",
            "calldata_variants": [
                "0xf77df859",
                "0xf77df8590000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 728,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1250,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1559,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 3,
    "guards_detected": []
}