TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3836-5efe-7393-9e55-5cbd774d329a

complete
Chain ID
1
Address
0x8560c507f1c4d475360d55617db92162da744f02
Block Number
—
Created
Fri, Dec 19, 2025 8:04 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
9567 artifact.fetch complete 1 / 3 4 months ago
9568 tool.cast_disasm complete 1 / 3 4 months ago
53080 analysis.bundle complete 1 / 3 2 weeks ago
53081 capability.graph complete 1 / 3 2 weeks ago
53082 detector.run complete 1 / 3 2 weeks ago
53083 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
1
CREATE2
0
CALL-family (heavy)
4
EXT*/BALANCE
4
Total opcodes
1254
Flags
selfdestruct_present
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0132
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x03f499b8
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x0134
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x0a0ef373
00000025: EQ
00000026: PUSH2 0x014d
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x0dd27120
00000030: EQ
00000031: PUSH2 0x017e
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x12065fe0
0000003b: EQ
0000003c: PUSH2 0x01ac
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x1429e26c
00000046: EQ
00000047: PUSH2 0x01be
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x199ea58b
00000051: EQ
00000052: PUSH2 0x01d0
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x3d18b60b
0000005c: EQ
0000005d: PUSH2 0x01e8
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x41c0e1b5
00000067: EQ
00000068: PUSH2 0x0266
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x61461954
00000072: EQ
00000073: PUSH2 0x0285
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x62a02fe3
0000007d: EQ
0000007e: PUSH2 0x02b2
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0x759491d3
00000088: EQ
00000089: PUSH2 0x0305
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0x8da5cb5b
00000093: EQ
00000094: PUSH2 0x038b
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0x9a328ea3
0000009e: EQ
0000009f: PUSH2 0x039d
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xa0d3db85
000000a9: EQ
000000aa: PUSH2 0x03a9
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0xafe62d85
000000b4: EQ
000000b5: PUSH2 0x03f0
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0xc19d93fb
000000bf: EQ
000000c0: PUSH2 0x046c
000000c3: JUMPI
000000c4: DUP1
000000c5: PUSH4 0xce92f8e4
000000ca: EQ
000000cb: PUSH2 0x047d
000000ce: JUMPI
000000cf: DUP1
000000d0: PUSH4 0xcffe00f9
000000d5: EQ
000000d6: PUSH2 0x0506
000000d9: JUMPI
000000da: DUP1
000000db: PUSH4 0xd19eb0a0
000000e0: EQ
000000e1: PUSH2 0x0520
000000e4: JUMPI
000000e5: DUP1
000000e6: PUSH4 0xdb022a55
000000eb: EQ
000000ec: PUSH2 0x0573
000000ef: JUMPI
000000f0: DUP1
000000f1: PUSH4 0xe1c7392a
000000f6: EQ
000000f7: PUSH2 0x0585
000000fa: JUMPI
000000fb: DUP1
000000fc: PUSH4 0xf0136a63
00000101: EQ
00000102: PUSH2 0x059e
00000105: JUMPI
00000106: DUP1
00000107: PUSH4 0xf24a534e
0000010c: EQ
0000010d: PUSH2 0x05b2
00000110: JUMPI
00000111: DUP1
00000112: PUSH4 0xf441b1c8
00000117: EQ
00000118: PUSH2 0x05c4
0000011b: JUMPI
0000011c: DUP1
0000011d: PUSH4 0xf74e54e1
00000122: EQ
00000123: PUSH2 0x05cd
00000126: JUMPI
00000127: DUP1
00000128: PUSH4 0xfc735e99
0000012d: EQ
0000012e: PUSH2 0x05e5
00000131: JUMPI
00000132: JUMPDEST
00000133: STOP
00000134: JUMPDEST
00000135: PUSH2 0x0132
00000138: JUMPDEST
00000139: PUSH1 0x00
0000013b: DUP1
0000013c: SLOAD
0000013d: PUSH1 0xff
0000013f: NOT
00000140: AND
00000141: PUSH1 0x03
00000143: OR
00000144: PUSH2 0xff00
00000147: NOT
00000148: AND
00000149: SWAP1
0000014a: SSTORE
0000014b: JUMPDEST
0000014c: JUMP
0000014d: JUMPDEST
0000014e: PUSH2 0x0669
00000151: PUSH1 0x04
00000153: CALLDATALOAD
00000154: PUSH1 0x03
00000156: SLOAD
00000157: PUSH1 0x40
00000159: MLOAD
0000015a: PUSH1 0x00
0000015c: SWAP2
0000015d: PUSH1 0x01
0000015f: PUSH1 0xa0
00000161: PUSH1 0x02
00000163: EXP
00000164: SUB
00000165: AND
00000166: SWAP1
00000167: DUP3
00000168: SWAP1
00000169: DUP5
0000016a: SWAP1
0000016b: DUP3
0000016c: DUP2
0000016d: DUP2
0000016e: DUP2
0000016f: DUP6
00000170: DUP9
00000171: DUP4
00000172: CALL
00000173: SWAP5
00000174: POP
00000175: POP
00000176: POP
00000177: POP
00000178: POP
00000179: JUMPDEST
0000017a: SWAP2
0000017b: SWAP1
0000017c: POP
0000017d: JUMP
0000017e: JUMPDEST
0000017f: PUSH2 0x0132
00000182: JUMPDEST
00000183: PUSH1 0x00
00000185: SLOAD
00000186: PUSH2 0x0100
00000189: SWAP1
0000018a: DIV
0000018b: PUSH1 0xff
0000018d: AND
0000018e: PUSH1 0x01
00000190: EQ
00000191: ISZERO
00000192: PUSH2 0x06ac
00000195: JUMPI
00000196: PUSH1 0x00
00000198: DUP1
00000199: SLOAD
0000019a: PUSH1 0xff
0000019c: NOT
0000019d: AND
0000019e: PUSH1 0x02
000001a0: OR
000001a1: PUSH2 0xff00
000001a4: NOT
000001a5: AND
000001a6: SWAP1
000001a7: SSTORE
000001a8: PUSH2 0x014b
000001ab: JUMP
000001ac: JUMPDEST
000001ad: PUSH2 0x067d
000001b0: ADDRESS
000001b1: PUSH1 0x01
000001b3: PUSH1 0xa0
000001b5: PUSH1 0x02
000001b7: EXP
000001b8: SUB
000001b9: AND
000001ba: BALANCE
000001bb: JUMPDEST
000001bc: SWAP1
000001bd: JUMP
000001be: JUMPDEST
000001bf: PUSH2 0x068f
000001c2: PUSH1 0x02
000001c4: SLOAD
000001c5: PUSH1 0x01
000001c7: PUSH1 0xa0
000001c9: PUSH1 0x02
000001cb: EXP
000001cc: SUB
000001cd: AND
000001ce: DUP2
000001cf: JUMP
000001d0: JUMPDEST
000001d1: PUSH2 0x0132
000001d4: JUMPDEST
000001d5: PUSH1 0x00
000001d7: DUP1
000001d8: SLOAD
000001d9: PUSH1 0xff
000001db: NOT
000001dc: AND
000001dd: PUSH1 0x01
000001df: OR
000001e0: PUSH2 0xff00
000001e3: NOT
000001e4: AND
000001e5: SWAP1
000001e6: SSTORE
000001e7: JUMP
000001e8: JUMPDEST
000001e9: PUSH2 0x0669
000001ec: JUMPDEST
000001ed: PUSH1 0x00
000001ef: DUP1
000001f0: SLOAD
000001f1: PUSH2 0x0100
000001f4: SWAP1
000001f5: DIV
000001f6: PUSH1 0xff
000001f8: AND
000001f9: DUP2
000001fa: EQ
000001fb: ISZERO
000001fc: PUSH2 0x06ac
000001ff: JUMPI
00000200: PUSH1 0x05
00000202: SLOAD
00000203: PUSH1 0x40
00000205: MLOAD
00000206: PUSH32 0x52267c24870cdb90b3fd492f3a606bb05c86283836646a258134e82b9bd7bc0e
00000227: SWAP1
00000228: PUSH1 0x00
0000022a: SWAP1
0000022b: LOG2
0000022c: PUSH1 0x00
0000022e: DUP1
0000022f: SLOAD
00000230: PUSH1 0x05
00000232: SLOAD
00000233: PUSH1 0x40
00000235: MLOAD
00000236: PUSH3 0x010000
0000023a: SWAP1
0000023b: SWAP3
0000023c: DIV
0000023d: PUSH1 0x01
0000023f: PUSH1 0xa0
00000241: PUSH1 0x02
00000243: EXP
00000244: SUB
00000245: AND
00000246: SWAP3
00000247: SWAP2
00000248: DUP3
00000249: DUP2
0000024a: DUP2
0000024b: DUP2
0000024c: DUP6
0000024d: DUP9
0000024e: DUP4
0000024f: CALL
00000250: SWAP4
00000251: POP
00000252: POP
00000253: POP
00000254: POP
00000255: ISZERO
00000256: PUSH2 0x06b1
00000259: JUMPI
0000025a: PUSH1 0x00
0000025c: PUSH1 0x05
0000025e: SSTORE
0000025f: PUSH2 0x06b9
00000262: PUSH2 0x0589
00000265: JUMP
00000266: JUMPDEST
00000267: PUSH2 0x0132
0000026a: PUSH1 0x03
0000026c: SLOAD
0000026d: PUSH1 0x01
0000026f: PUSH1 0xa0
00000271: PUSH1 0x02
00000273: EXP
00000274: SUB
00000275: SWAP1
00000276: DUP2
00000277: AND
00000278: CALLER
00000279: SWAP1
0000027a: SWAP2
0000027b: AND
0000027c: EQ
0000027d: PUSH2 0x06c1
00000280: JUMPI
00000281: PUSH2 0x0002
00000284: JUMP
00000285: JUMPDEST
00000286: PUSH2 0x0669
00000289: JUMPDEST
0000028a: PUSH1 0x00
0000028c: DUP1
0000028d: SLOAD
0000028e: PUSH2 0x0100
00000291: SWAP1
00000292: DIV
00000293: PUSH1 0xff
00000295: AND
00000296: DUP2
00000297: EQ
00000298: ISZERO
00000299: PUSH2 0x06ac
0000029c: JUMPI
0000029d: PUSH1 0x00
0000029f: SLOAD
000002a0: PUSH1 0xff
000002a2: AND
000002a3: PUSH1 0x02
000002a5: EQ
000002a6: ISZERO
000002a7: PUSH2 0x06cf
000002aa: JUMPI
000002ab: PUSH2 0x06e7
000002ae: PUSH2 0x01ec
000002b1: JUMP
000002b2: JUMPDEST
000002b3: PUSH2 0x0669
000002b6: PUSH1 0x04
000002b8: CALLDATALOAD
000002b9: PUSH1 0x00
000002bb: DUP1
000002bc: SLOAD
000002bd: PUSH3 0x010000
000002c1: SWAP1
000002c2: DIV
000002c3: PUSH1 0x01
000002c5: PUSH1 0xa0
000002c7: PUSH1 0x02
000002c9: EXP
000002ca: SUB
000002cb: SWAP1
000002cc: DUP2
000002cd: AND
000002ce: CALLER
000002cf: SWAP1
000002d0: SWAP2
000002d1: AND
000002d2: EQ
000002d3: ISZERO
000002d4: PUSH2 0x06ac
000002d7: JUMPI
000002d8: DUP1
000002d9: SLOAD
000002da: PUSH1 0xff
000002dc: AND
000002dd: DUP2
000002de: EQ
000002df: DUP1
000002e0: ISZERO
000002e1: PUSH2 0x02f3
000002e4: JUMPI
000002e5: POP
000002e6: DUP1
000002e7: SLOAD
000002e8: PUSH2 0x0100
000002eb: SWAP1
000002ec: DIV
000002ed: PUSH1 0xff
000002ef: AND
000002f0: PUSH1 0x01
000002f2: EQ
000002f3: JUMPDEST
000002f4: ISZERO
000002f5: PUSH2 0x06ac
000002f8: JUMPI
000002f9: PUSH1 0x05
000002fb: DUP3
000002fc: SWAP1
000002fd: SSTORE
000002fe: PUSH2 0x0707
00000301: PUSH2 0x0138
00000304: JUMP
00000305: JUMPDEST
00000306: PUSH2 0x0669
00000309: JUMPDEST
0000030a: PUSH1 0x00
0000030c: DUP1
0000030d: SLOAD
0000030e: PUSH2 0x0100
00000311: SWAP1
00000312: DIV
00000313: PUSH1 0xff
00000315: AND
00000316: DUP2
00000317: EQ
00000318: ISZERO
00000319: PUSH2 0x06ac
0000031c: JUMPI
0000031d: PUSH1 0x40
0000031f: MLOAD
00000320: ADDRESS
00000321: PUSH1 0x01
00000323: PUSH1 0xa0
00000325: PUSH1 0x02
00000327: EXP
00000328: SUB
00000329: AND
0000032a: BALANCE
0000032b: SWAP1
0000032c: PUSH32 0x829a8683c544ad289ce92d3ce06e9ebad69b18a6916e60ec766c2c217461d8e9
0000034d: SWAP1
0000034e: PUSH1 0x00
00000350: SWAP1
00000351: LOG2
00000352: PUSH1 0x02
00000354: SLOAD
00000355: PUSH1 0x40
00000357: MLOAD
00000358: PUSH1 0x01
0000035a: PUSH1 0xa0
0000035c: PUSH1 0x02
0000035e: EXP
0000035f: SUB
00000360: SWAP2
00000361: DUP3
00000362: AND
00000363: SWAP2
00000364: PUSH1 0x00
00000366: SWAP2
00000367: ADDRESS
00000368: SWAP1
00000369: SWAP2
0000036a: AND
0000036b: BALANCE
0000036c: SWAP1
0000036d: DUP3
0000036e: DUP2
0000036f: DUP2
00000370: DUP2
00000371: DUP6
00000372: DUP9
00000373: DUP4
00000374: CALL
00000375: SWAP4
00000376: POP
00000377: POP
00000378: POP
00000379: POP
0000037a: ISZERO
0000037b: PUSH2 0x06b1
0000037e: JUMPI
0000037f: PUSH1 0x00
00000381: PUSH1 0x05
00000383: SSTORE
00000384: PUSH2 0x06b9
00000387: PUSH2 0x0589
0000038a: JUMP
0000038b: JUMPDEST
0000038c: PUSH2 0x068f
0000038f: PUSH1 0x03
00000391: SLOAD
00000392: PUSH1 0x01
00000394: PUSH1 0xa0
00000396: PUSH1 0x02
00000398: EXP
00000399: SUB
0000039a: AND
0000039b: DUP2
0000039c: JUMP
0000039d: JUMPDEST
0000039e: PUSH2 0x067d
000003a1: PUSH1 0x00
000003a3: SLOAD
000003a4: PUSH1 0xff
000003a6: AND
000003a7: DUP2
000003a8: JUMP
000003a9: JUMPDEST
000003aa: PUSH2 0x0669
000003ad: PUSH1 0x02
000003af: SLOAD
000003b0: PUSH1 0x00
000003b2: SWAP1
000003b3: PUSH1 0x01
000003b5: PUSH1 0xa0
000003b7: PUSH1 0x02
000003b9: EXP
000003ba: SUB
000003bb: SWAP1
000003bc: DUP2
000003bd: AND
000003be: CALLER
000003bf: SWAP1
000003c0: SWAP2
000003c1: AND
000003c2: EQ
000003c3: ISZERO
000003c4: PUSH2 0x06ac
000003c7: JUMPI
000003c8: DUP1
000003c9: SLOAD
000003ca: PUSH1 0xff
000003cc: AND
000003cd: DUP2
000003ce: EQ
000003cf: DUP1
000003d0: ISZERO
000003d1: PUSH2 0x03e3
000003d4: JUMPI
000003d5: POP
000003d6: DUP1
000003d7: SLOAD
000003d8: PUSH2 0x0100
000003db: SWAP1
000003dc: DIV
000003dd: PUSH1 0xff
000003df: AND
000003e0: PUSH1 0x01
000003e2: EQ
000003e3: JUMPDEST
000003e4: ISZERO
000003e5: PUSH2 0x06ac
000003e8: JUMPI
000003e9: PUSH2 0x074c
000003ec: PUSH2 0x01d4
000003ef: JUMP
000003f0: JUMPDEST
000003f1: PUSH2 0x0669
000003f4: JUMPDEST
000003f5: PUSH1 0x00
000003f7: DUP1
000003f8: SLOAD
000003f9: PUSH2 0x0100
000003fc: SWAP1
000003fd: DIV
000003fe: PUSH1 0xff
00000400: AND
00000401: DUP2
00000402: EQ
00000403: ISZERO
00000404: PUSH2 0x06ac
00000407: JUMPI
00000408: PUSH1 0x05
0000040a: SLOAD
0000040b: PUSH1 0x40
0000040d: MLOAD
0000040e: PUSH32 0x3d2a04f53164bedf9a8a46353305d6b2d2261410406df3b41f99ce6489dc003c
0000042f: SWAP1
00000430: PUSH1 0x00
00000432: SWAP1
00000433: LOG2
00000434: PUSH1 0x02
00000436: SLOAD
00000437: PUSH1 0x05
00000439: SLOAD
0000043a: PUSH1 0x40
0000043c: MLOAD
0000043d: PUSH1 0x01
0000043f: PUSH1 0xa0
00000441: PUSH1 0x02
00000443: EXP
00000444: SUB
00000445: SWAP3
00000446: SWAP1
00000447: SWAP3
00000448: AND
00000449: SWAP2
0000044a: PUSH1 0x00
0000044c: SWAP2
0000044d: SWAP1
0000044e: DUP3
0000044f: DUP2
00000450: DUP2
00000451: DUP2
00000452: DUP6
00000453: DUP9
00000454: DUP4
00000455: CALL
00000456: SWAP4
00000457: POP
00000458: POP
00000459: POP
0000045a: POP
0000045b: ISZERO
0000045c: PUSH2 0x06b1
0000045f: JUMPI
00000460: PUSH1 0x00
00000462: PUSH1 0x05
00000464: SSTORE
00000465: PUSH2 0x06b9
00000468: PUSH2 0x0589
0000046b: JUMP
0000046c: JUMPDEST
0000046d: PUSH2 0x067d
00000470: PUSH1 0x00
00000472: SLOAD
00000473: PUSH2 0x0100
00000476: SWAP1
00000477: DIV
00000478: PUSH1 0xff
0000047a: AND
0000047b: DUP2
0000047c: JUMP
0000047d: JUMPDEST
0000047e: PUSH2 0x0669
00000481: PUSH1 0x04
00000483: CALLDATALOAD
00000484: PUSH1 0x00
00000486: DUP1
00000487: SLOAD
00000488: PUSH3 0x010000
0000048c: SWAP1
0000048d: DIV
0000048e: PUSH1 0x01
00000490: PUSH1 0xa0
00000492: PUSH1 0x02
00000494: EXP
00000495: SUB
00000496: SWAP1
00000497: DUP2
00000498: AND
00000499: CALLER
0000049a: SWAP1
0000049b: SWAP2
0000049c: AND
0000049d: EQ
0000049e: ISZERO
0000049f: PUSH2 0x06ac
000004a2: JUMPI
000004a3: DUP2
000004a4: PUSH1 0x01
000004a6: PUSH1 0xa0
000004a8: PUSH1 0x02
000004aa: EXP
000004ab: SUB
000004ac: AND
000004ad: PUSH1 0x00
000004af: EQ
000004b0: DUP1
000004b1: PUSH2 0x04cc
000004b4: JUMPI
000004b5: POP
000004b6: DUP1
000004b7: SLOAD
000004b8: PUSH1 0x01
000004ba: PUSH1 0xa0
000004bc: PUSH1 0x02
000004be: EXP
000004bf: SUB
000004c0: DUP4
000004c1: DUP2
000004c2: AND
000004c3: PUSH3 0x010000
000004c7: SWAP1
000004c8: SWAP3
000004c9: DIV
000004ca: AND
000004cb: EQ
000004cc: JUMPDEST
000004cd: DUP1
000004ce: PUSH2 0x04e4
000004d1: JUMPI
000004d2: POP
000004d3: PUSH1 0x01
000004d5: SLOAD
000004d6: PUSH1 0x01
000004d8: PUSH1 0xa0
000004da: PUSH1 0x02
000004dc: EXP
000004dd: SUB
000004de: DUP4
000004df: DUP2
000004e0: AND
000004e1: SWAP2
000004e2: AND
000004e3: EQ
000004e4: JUMPDEST
000004e5: DUP1
000004e6: PUSH2 0x04f9
000004e9: JUMPI
000004ea: POP
000004eb: PUSH1 0x00
000004ed: ADDRESS
000004ee: PUSH1 0x01
000004f0: PUSH1 0xa0
000004f2: PUSH1 0x02
000004f4: EXP
000004f5: SUB
000004f6: AND
000004f7: BALANCE
000004f8: GT
000004f9: JUMPDEST
000004fa: ISZERO
000004fb: PUSH2 0x078f
000004fe: JUMPI
000004ff: POP
00000500: PUSH1 0x00
00000502: PUSH2 0x0179
00000505: JUMP
00000506: JUMPDEST
00000507: PUSH2 0x068f
0000050a: PUSH1 0x00
0000050c: SLOAD
0000050d: PUSH3 0x010000
00000511: SWAP1
00000512: DIV
00000513: PUSH1 0x01
00000515: PUSH1 0xa0
00000517: PUSH1 0x02
00000519: EXP
0000051a: SUB
0000051b: AND
0000051c: PUSH2 0x01bb
0000051f: JUMP
00000520: JUMPDEST
00000521: PUSH2 0x0669
00000524: PUSH1 0x04
00000526: CALLDATALOAD
00000527: PUSH1 0x00
00000529: DUP1
0000052a: SLOAD
0000052b: PUSH3 0x010000
0000052f: SWAP1
00000530: DIV
00000531: PUSH1 0x01
00000533: PUSH1 0xa0
00000535: PUSH1 0x02
00000537: EXP
00000538: SUB
00000539: SWAP1
0000053a: DUP2
0000053b: AND
0000053c: CALLER
0000053d: SWAP1
0000053e: SWAP2
0000053f: AND
00000540: EQ
00000541: ISZERO
00000542: PUSH2 0x06ac
00000545: JUMPI
00000546: DUP1
00000547: SLOAD
00000548: PUSH1 0xff
0000054a: AND
0000054b: DUP2
0000054c: EQ
0000054d: DUP1
0000054e: ISZERO
0000054f: PUSH2 0x0561
00000552: JUMPI
00000553: POP
00000554: DUP1
00000555: SLOAD
00000556: PUSH2 0x0100
00000559: SWAP1
0000055a: DIV
0000055b: PUSH1 0xff
0000055d: AND
0000055e: PUSH1 0x01
00000560: EQ
00000561: JUMPDEST
00000562: ISZERO
00000563: PUSH2 0x06ac
00000566: JUMPI
00000567: PUSH1 0x05
00000569: DUP3
0000056a: SWAP1
0000056b: SSTORE
0000056c: PUSH2 0x07dd
0000056f: PUSH2 0x0182
00000572: JUMP
00000573: JUMPDEST
00000574: PUSH2 0x068f
00000577: PUSH1 0x04
00000579: SLOAD
0000057a: PUSH1 0x01
0000057c: PUSH1 0xa0
0000057e: PUSH1 0x02
00000580: EXP
00000581: SUB
00000582: AND
00000583: DUP2
00000584: JUMP
00000585: JUMPDEST
00000586: PUSH2 0x0132
00000589: JUMPDEST
0000058a: PUSH1 0x00
0000058c: DUP1
0000058d: SLOAD
0000058e: PUSH2 0xff00
00000591: NOT
00000592: AND
00000593: PUSH2 0x0100
00000596: OR
00000597: PUSH1 0xff
00000599: NOT
0000059a: AND
0000059b: SWAP1
0000059c: SSTORE
0000059d: JUMP
0000059e: JUMPDEST
0000059f: PUSH2 0x0132
000005a2: PUSH1 0x00
000005a4: DUP1
000005a5: SLOAD
000005a6: PUSH2 0xff00
000005a9: NOT
000005aa: AND
000005ab: PUSH2 0x0100
000005ae: OR
000005af: SWAP1
000005b0: SSTORE
000005b1: JUMP
000005b2: JUMPDEST
000005b3: PUSH2 0x068f
000005b6: PUSH1 0x01
000005b8: SLOAD
000005b9: PUSH1 0x01
000005bb: PUSH1 0xa0
000005bd: PUSH1 0x02
000005bf: EXP
000005c0: SUB
000005c1: AND
000005c2: DUP2
000005c3: JUMP
000005c4: JUMPDEST
000005c5: PUSH2 0x067d
000005c8: PUSH1 0x05
000005ca: SLOAD
000005cb: DUP2
000005cc: JUMP
000005cd: JUMPDEST
000005ce: PUSH2 0x068f
000005d1: PUSH1 0x00
000005d3: SLOAD
000005d4: PUSH3 0x010000
000005d8: SWAP1
000005d9: DIV
000005da: PUSH1 0x01
000005dc: PUSH1 0xa0
000005de: PUSH1 0x02
000005e0: EXP
000005e1: SUB
000005e2: AND
000005e3: DUP2
000005e4: JUMP
000005e5: JUMPDEST
000005e6: PUSH2 0x0669
000005e9: PUSH1 0x00
000005eb: DUP1
000005ec: SLOAD
000005ed: CALLER
000005ee: PUSH1 0x01
000005f0: PUSH1 0xa0
000005f2: PUSH1 0x02
000005f4: EXP
000005f5: SUB
000005f6: SWAP1
000005f7: DUP2
000005f8: AND
000005f9: PUSH3 0x010000
000005fd: SWAP1
000005fe: SWAP3
000005ff: DIV
00000600: AND
00000601: EQ
00000602: DUP1
00000603: PUSH2 0x061b
00000606: JUMPI
00000607: POP
00000608: PUSH1 0x02
0000060a: SLOAD
0000060b: PUSH1 0x01
0000060d: PUSH1 0xa0
0000060f: PUSH1 0x02
00000611: EXP
00000612: SUB
00000613: SWAP1
00000614: DUP2
00000615: AND
00000616: CALLER
00000617: SWAP1
00000618: SWAP2
00000619: AND
0000061a: EQ
0000061b: JUMPDEST
0000061c: DUP1
0000061d: PUSH2 0x0635
00000620: JUMPI
00000621: POP
00000622: PUSH1 0x01
00000624: SLOAD
00000625: PUSH1 0x01
00000627: PUSH1 0xa0
00000629: PUSH1 0x02
0000062b: EXP
0000062c: SUB
0000062d: SWAP1
0000062e: DUP2
0000062f: AND
00000630: CALLER
00000631: SWAP1
00000632: SWAP2
00000633: AND
00000634: EQ
00000635: JUMPDEST
00000636: ISZERO
00000637: PUSH2 0x06ac
0000063a: JUMPI
0000063b: PUSH1 0x00
0000063d: DUP1
0000063e: SLOAD
0000063f: PUSH2 0x0100
00000642: SWAP1
00000643: DIV
00000644: PUSH1 0xff
00000646: AND
00000647: EQ
00000648: ISZERO
00000649: PUSH2 0x06ac
0000064c: JUMPI
0000064d: PUSH1 0x04
0000064f: SLOAD
00000650: PUSH1 0x01
00000652: PUSH1 0xa0
00000654: PUSH1 0x02
00000656: EXP
00000657: SUB
00000658: SWAP1
00000659: DUP2
0000065a: AND
0000065b: CALLER
0000065c: SWAP1
0000065d: SWAP2
0000065e: AND
0000065f: EQ
00000660: ISZERO
00000661: PUSH2 0x0822
00000664: JUMPI
00000665: PUSH2 0x0002
00000668: JUMP
00000669: JUMPDEST
0000066a: PUSH1 0x40
0000066c: DUP1
0000066d: MLOAD
0000066e: SWAP2
0000066f: ISZERO
00000670: ISZERO
00000671: DUP3
00000672: MSTORE
00000673: MLOAD
00000674: SWAP1
00000675: DUP2
00000676: SWAP1
00000677: SUB
00000678: PUSH1 0x20
0000067a: ADD
0000067b: SWAP1
0000067c: RETURN
0000067d: JUMPDEST
0000067e: PUSH1 0x40
00000680: DUP1
00000681: MLOAD
00000682: SWAP2
00000683: DUP3
00000684: MSTORE
00000685: MLOAD
00000686: SWAP1
00000687: DUP2
00000688: SWAP1
00000689: SUB
0000068a: PUSH1 0x20
0000068c: ADD
0000068d: SWAP1
0000068e: RETURN
0000068f: JUMPDEST
00000690: PUSH1 0x40
00000692: DUP1
00000693: MLOAD
00000694: PUSH1 0x01
00000696: PUSH1 0xa0
00000698: PUSH1 0x02
0000069a: EXP
0000069b: SUB
0000069c: SWAP3
0000069d: SWAP1
0000069e: SWAP3
0000069f: AND
000006a0: DUP3
000006a1: MSTORE
000006a2: MLOAD
000006a3: SWAP1
000006a4: DUP2
000006a5: SWAP1
000006a6: SUB
000006a7: PUSH1 0x20
000006a9: ADD
000006aa: SWAP1
000006ab: RETURN
000006ac: JUMPDEST
000006ad: PUSH2 0x0002
000006b0: JUMP
000006b1: JUMPDEST
000006b2: POP
000006b3: PUSH1 0x00
000006b5: PUSH2 0x01bb
000006b8: JUMP
000006b9: JUMPDEST
000006ba: POP
000006bb: PUSH1 0x01
000006bd: PUSH2 0x01bb
000006c0: JUMP
000006c1: JUMPDEST
000006c2: PUSH1 0x03
000006c4: SLOAD
000006c5: PUSH1 0x01
000006c7: PUSH1 0xa0
000006c9: PUSH1 0x02
000006cb: EXP
000006cc: SUB
000006cd: AND
000006ce: SELFDESTRUCT
000006cf: JUMPDEST
000006d0: PUSH1 0x00
000006d2: SLOAD
000006d3: PUSH1 0x03
000006d5: PUSH1 0xff
000006d7: SWAP1
000006d8: SWAP2
000006d9: AND
000006da: EQ
000006db: ISZERO
000006dc: PUSH2 0x06f1
000006df: JUMPI
000006e0: PUSH2 0x06e7
000006e3: PUSH2 0x03f4
000006e6: JUMP
000006e7: JUMPDEST
000006e8: POP
000006e9: PUSH1 0x01
000006eb: SWAP1
000006ec: POP
000006ed: PUSH2 0x01bb
000006f0: JUMP
000006f1: JUMPDEST
000006f2: PUSH1 0x00
000006f4: SLOAD
000006f5: PUSH1 0xff
000006f7: AND
000006f8: PUSH1 0x01
000006fa: EQ
000006fb: ISZERO
000006fc: PUSH2 0x06b1
000006ff: JUMPI
00000700: PUSH2 0x06e7
00000703: PUSH2 0x0309
00000706: JUMP
00000707: JUMPDEST
00000708: PUSH1 0x04
0000070a: DUP1
0000070b: SLOAD
0000070c: PUSH1 0x01
0000070e: PUSH1 0xa0
00000710: PUSH1 0x02
00000712: EXP
00000713: SUB
00000714: NOT
00000715: AND
00000716: CALLER
00000717: OR
00000718: SWAP1
00000719: SSTORE
0000071a: PUSH1 0x40
0000071c: MLOAD
0000071d: DUP3
0000071e: SWAP1
0000071f: PUSH32 0xae43dd3358f65c6efef529278b7a550819d849362f2848848455f3f3494459c8
00000740: SWAP1
00000741: PUSH1 0x00
00000743: SWAP1
00000744: LOG2
00000745: POP
00000746: PUSH1 0x01
00000748: PUSH2 0x0179
0000074b: JUMP
0000074c: JUMPDEST
0000074d: PUSH1 0x04
0000074f: DUP1
00000750: SLOAD
00000751: PUSH1 0x01
00000753: PUSH1 0xa0
00000755: PUSH1 0x02
00000757: EXP
00000758: SUB
00000759: NOT
0000075a: AND
0000075b: CALLER
0000075c: OR
0000075d: SWAP1
0000075e: SSTORE
0000075f: PUSH1 0x40
00000761: MLOAD
00000762: PUSH32 0x53ddea148750b0b990165e949829f8f0c683567ba194fb21040354774957f8c7
00000783: SWAP1
00000784: PUSH1 0x00
00000786: SWAP1
00000787: LOG1
00000788: POP
00000789: PUSH1 0x01
0000078b: PUSH2 0x01bb
0000078e: JUMP
0000078f: JUMPDEST
00000790: PUSH1 0x02
00000792: DUP1
00000793: SLOAD
00000794: PUSH1 0x01
00000796: PUSH1 0xa0
00000798: PUSH1 0x02
0000079a: EXP
0000079b: SUB
0000079c: NOT
0000079d: AND
0000079e: DUP4
0000079f: OR
000007a0: SWAP1
000007a1: SSTORE
000007a2: PUSH1 0x40
000007a4: MLOAD
000007a5: PUSH1 0x01
000007a7: PUSH1 0xa0
000007a9: PUSH1 0x02
000007ab: EXP
000007ac: SUB
000007ad: DUP4
000007ae: AND
000007af: SWAP1
000007b0: PUSH32 0x162f46783fcc741c289a7af5bd16474ace09d7e8a9d5fe1ac0d37b12afc0ccac
000007d1: SWAP1
000007d2: PUSH1 0x00
000007d4: SWAP1
000007d5: LOG2
000007d6: POP
000007d7: PUSH1 0x01
000007d9: PUSH2 0x0179
000007dc: JUMP
000007dd: JUMPDEST
000007de: PUSH1 0x04
000007e0: DUP1
000007e1: SLOAD
000007e2: PUSH1 0x01
000007e4: PUSH1 0xa0
000007e6: PUSH1 0x02
000007e8: EXP
000007e9: SUB
000007ea: NOT
000007eb: AND
000007ec: CALLER
000007ed: OR
000007ee: SWAP1
000007ef: SSTORE
000007f0: PUSH1 0x40
000007f2: MLOAD
000007f3: DUP3
000007f4: SWAP1
000007f5: PUSH32 0x042c0f00a28dd760021d21584ce1e057244ad44ec61ceeb87162a1449f7f6b4f
00000816: SWAP1
00000817: PUSH1 0x00
00000819: SWAP1
0000081a: LOG2
0000081b: POP
0000081c: PUSH1 0x01
0000081e: PUSH2 0x0179
00000821: JUMP
00000822: JUMPDEST
00000823: PUSH1 0x40
00000825: MLOAD
00000826: PUSH32 0x2e5e1405bcc465f1fe8b5964e79910ef9548bb882e1bae02ca901e855a7a4ff5
00000847: SWAP1
00000848: PUSH1 0x00
0000084a: SWAP1
0000084b: LOG1
0000084c: PUSH2 0x0853
0000084f: PUSH2 0x0289
00000852: JUMP
00000853: JUMPDEST
00000854: SWAP1
00000855: POP
00000856: PUSH2 0x01bb
00000859: JUMP
View stderr 
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x125add189e7192cec35af0b4a38d73d1084c854b62db45ae505740ca8c22ffae
call_targets: 0x8560c507f1c4d475360d55617db92162da744f02
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x125add189e7192cec35af0b4a38d73d1084c854b62db45ae505740ca8c22ffae",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8560c507f1c4d475360d55617db92162da744f02"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x03f499b8",
            "selector": "0x03f499b8",
            "calldata_variants": [
                "0x03f499b8",
                "0x03f499b80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0a0ef373",
            "selector": "0x0a0ef373",
            "calldata_variants": [
                "0x0a0ef373",
                "0x0a0ef3730000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0dd27120",
            "selector": "0x0dd27120",
            "calldata_variants": [
                "0x0dd27120",
                "0x0dd271200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x12065fe0",
            "selector": "0x12065fe0",
            "calldata_variants": [
                "0x12065fe0",
                "0x12065fe00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1429e26c",
            "selector": "0x1429e26c",
            "calldata_variants": [
                "0x1429e26c",
                "0x1429e26c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x199ea58b",
            "selector": "0x199ea58b",
            "calldata_variants": [
                "0x199ea58b",
                "0x199ea58b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3d18b60b",
            "selector": "0x3d18b60b",
            "calldata_variants": [
                "0x3d18b60b",
                "0x3d18b60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41c0e1b5",
            "selector": "0x41c0e1b5",
            "calldata_variants": [
                "0x41c0e1b5",
                "0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 370,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "constant",
            "target_expression_category": "computed"
        },
        {
            "pc": 884,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 4,
    "guards_detected": [],
    "untrusted_call_count": 2
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x125add189e7192cec35af0b4a38d73d1084c854b62db45ae505740ca8c22ffae
call_targets: 0x8560c507f1c4d475360d55617db92162da744f02
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x125add189e7192cec35af0b4a38d73d1084c854b62db45ae505740ca8c22ffae",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8560c507f1c4d475360d55617db92162da744f02"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x03f499b8",
            "selector": "0x03f499b8",
            "calldata_variants": [
                "0x03f499b8",
                "0x03f499b80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0a0ef373",
            "selector": "0x0a0ef373",
            "calldata_variants": [
                "0x0a0ef373",
                "0x0a0ef3730000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0dd27120",
            "selector": "0x0dd27120",
            "calldata_variants": [
                "0x0dd27120",
                "0x0dd271200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x12065fe0",
            "selector": "0x12065fe0",
            "calldata_variants": [
                "0x12065fe0",
                "0x12065fe00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1429e26c",
            "selector": "0x1429e26c",
            "calldata_variants": [
                "0x1429e26c",
                "0x1429e26c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x199ea58b",
            "selector": "0x199ea58b",
            "calldata_variants": [
                "0x199ea58b",
                "0x199ea58b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3d18b60b",
            "selector": "0x3d18b60b",
            "calldata_variants": [
                "0x3d18b60b",
                "0x3d18b60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41c0e1b5",
            "selector": "0x41c0e1b5",
            "calldata_variants": [
                "0x41c0e1b5",
                "0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 370,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "constant",
            "target_expression_category": "computed"
        },
        {
            "pc": 591,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "constant",
            "target_expression_category": "constant"
        },
        {
            "pc": 884,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 3,
    "guards_detected": []
}
high other detector SELFDESTRUCT reachable 65 no no
view
trace_id: 0x3ede8883023a2e0294b82321ef5884092cf9e424eae3d6a6617f67bf3eda29bb
validation_json 
{
    "sink": "SELFDESTRUCT",
    "errors": 0,
    "status": "unknown",
    "attempts": 32,
    "trace_id": "0x3ede8883023a2e0294b82321ef5884092cf9e424eae3d6a6617f67bf3eda29bb",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x03f499b8",
            "selector": "0x03f499b8",
            "calldata_variants": [
                "0x03f499b8",
                "0x03f499b80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0a0ef373",
            "selector": "0x0a0ef373",
            "calldata_variants": [
                "0x0a0ef373",
                "0x0a0ef3730000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0dd27120",
            "selector": "0x0dd27120",
            "calldata_variants": [
                "0x0dd27120",
                "0x0dd271200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x12065fe0",
            "selector": "0x12065fe0",
            "calldata_variants": [
                "0x12065fe0",
                "0x12065fe00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1429e26c",
            "selector": "0x1429e26c",
            "calldata_variants": [
                "0x1429e26c",
                "0x1429e26c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x199ea58b",
            "selector": "0x199ea58b",
            "calldata_variants": [
                "0x199ea58b",
                "0x199ea58b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3d18b60b",
            "selector": "0x3d18b60b",
            "calldata_variants": [
                "0x3d18b60b",
                "0x3d18b60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41c0e1b5",
            "selector": "0x41c0e1b5",
            "calldata_variants": [
                "0x41c0e1b5",
                "0x41c0e1b50000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "guards_detected": [],
    "selfdestruct_count": 1
}