TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3844-8c4d-7258-947c-12cc79a45557

complete
Chain ID
1
Address
0xa33c4a314faa9684eeffa6ba334688001ea99bbc
Block Number
—
Created
Fri, Dec 19, 2025 8:19 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
11945 artifact.fetch complete 1 / 3 3 months ago
11946 tool.cast_disasm complete 1 / 3 3 months ago
55204 analysis.bundle complete 1 / 3 1 week ago
55205 capability.graph complete 1 / 3 1 week ago
55206 detector.run complete 1 / 3 1 week ago
55207 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
2
EXT*/BALANCE
2
Total opcodes
1221
Flags
create_opcodes_present
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x006d
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002e: SWAP1
0000002f: DIV
00000030: PUSH4 0xffffffff
00000035: AND
00000036: DUP1
00000037: PUSH4 0x032fc13b
0000003c: EQ
0000003d: PUSH2 0x008b
00000040: JUMPI
00000041: DUP1
00000042: PUSH4 0x3f9942ff
00000047: EQ
00000048: PUSH2 0x00c9
0000004b: JUMPI
0000004c: DUP1
0000004d: PUSH4 0x70c10578
00000052: EQ
00000053: PUSH2 0x00f6
00000056: JUMPI
00000057: DUP1
00000058: PUSH4 0xb29c62f4
0000005d: EQ
0000005e: PUSH2 0x010b
00000061: JUMPI
00000062: DUP1
00000063: PUSH4 0xd0e30db0
00000068: EQ
00000069: PUSH2 0x0149
0000006c: JUMPI
0000006d: JUMPDEST
0000006e: PUSH2 0x0075
00000071: PUSH2 0x0153
00000074: JUMP
00000075: JUMPDEST
00000076: ISZERO
00000077: ISZERO
00000078: ISZERO
00000079: PUSH2 0x0081
0000007c: JUMPI
0000007d: PUSH1 0x00
0000007f: DUP1
00000080: REVERT
00000081: JUMPDEST
00000082: PUSH2 0x0089
00000085: PUSH2 0x0163
00000088: JUMP
00000089: JUMPDEST
0000008a: STOP
0000008b: JUMPDEST
0000008c: CALLVALUE
0000008d: ISZERO
0000008e: PUSH2 0x0096
00000091: JUMPI
00000092: PUSH1 0x00
00000094: DUP1
00000095: REVERT
00000096: JUMPDEST
00000097: PUSH2 0x009e
0000009a: PUSH2 0x0281
0000009d: JUMP
0000009e: JUMPDEST
0000009f: PUSH1 0x40
000000a1: MLOAD
000000a2: DUP1
000000a3: DUP6
000000a4: DUP2
000000a5: MSTORE
000000a6: PUSH1 0x20
000000a8: ADD
000000a9: DUP5
000000aa: DUP2
000000ab: MSTORE
000000ac: PUSH1 0x20
000000ae: ADD
000000af: DUP4
000000b0: DUP2
000000b1: MSTORE
000000b2: PUSH1 0x20
000000b4: ADD
000000b5: DUP3
000000b6: DUP2
000000b7: MSTORE
000000b8: PUSH1 0x20
000000ba: ADD
000000bb: SWAP5
000000bc: POP
000000bd: POP
000000be: POP
000000bf: POP
000000c0: POP
000000c1: PUSH1 0x40
000000c3: MLOAD
000000c4: DUP1
000000c5: SWAP2
000000c6: SUB
000000c7: SWAP1
000000c8: RETURN
000000c9: JUMPDEST
000000ca: CALLVALUE
000000cb: ISZERO
000000cc: PUSH2 0x00d4
000000cf: JUMPI
000000d0: PUSH1 0x00
000000d2: DUP1
000000d3: REVERT
000000d4: JUMPDEST
000000d5: PUSH2 0x00dc
000000d8: PUSH2 0x0153
000000db: JUMP
000000dc: JUMPDEST
000000dd: PUSH1 0x40
000000df: MLOAD
000000e0: DUP1
000000e1: DUP3
000000e2: ISZERO
000000e3: ISZERO
000000e4: ISZERO
000000e5: ISZERO
000000e6: DUP2
000000e7: MSTORE
000000e8: PUSH1 0x20
000000ea: ADD
000000eb: SWAP2
000000ec: POP
000000ed: POP
000000ee: PUSH1 0x40
000000f0: MLOAD
000000f1: DUP1
000000f2: SWAP2
000000f3: SUB
000000f4: SWAP1
000000f5: RETURN
000000f6: JUMPDEST
000000f7: CALLVALUE
000000f8: ISZERO
000000f9: PUSH2 0x0101
000000fc: JUMPI
000000fd: PUSH1 0x00
000000ff: DUP1
00000100: REVERT
00000101: JUMPDEST
00000102: PUSH2 0x0109
00000105: PUSH2 0x02a5
00000108: JUMP
00000109: JUMPDEST
0000010a: STOP
0000010b: JUMPDEST
0000010c: CALLVALUE
0000010d: ISZERO
0000010e: PUSH2 0x0116
00000111: JUMPI
00000112: PUSH1 0x00
00000114: DUP1
00000115: REVERT
00000116: JUMPDEST
00000117: PUSH2 0x011e
0000011a: PUSH2 0x03b5
0000011d: JUMP
0000011e: JUMPDEST
0000011f: PUSH1 0x40
00000121: MLOAD
00000122: DUP1
00000123: DUP6
00000124: DUP2
00000125: MSTORE
00000126: PUSH1 0x20
00000128: ADD
00000129: DUP5
0000012a: DUP2
0000012b: MSTORE
0000012c: PUSH1 0x20
0000012e: ADD
0000012f: DUP4
00000130: DUP2
00000131: MSTORE
00000132: PUSH1 0x20
00000134: ADD
00000135: DUP3
00000136: DUP2
00000137: MSTORE
00000138: PUSH1 0x20
0000013a: ADD
0000013b: SWAP5
0000013c: POP
0000013d: POP
0000013e: POP
0000013f: POP
00000140: POP
00000141: PUSH1 0x40
00000143: MLOAD
00000144: DUP1
00000145: SWAP2
00000146: SUB
00000147: SWAP1
00000148: RETURN
00000149: JUMPDEST
0000014a: PUSH2 0x0151
0000014d: PUSH2 0x0163
00000150: JUMP
00000151: JUMPDEST
00000152: STOP
00000153: JUMPDEST
00000154: PUSH1 0x00
00000156: DUP1
00000157: SLOAD
00000158: PUSH1 0x06
0000015a: SLOAD
0000015b: ADD
0000015c: TIMESTAMP
0000015d: LT
0000015e: ISZERO
0000015f: SWAP1
00000160: POP
00000161: SWAP1
00000162: JUMP
00000163: JUMPDEST
00000164: PUSH1 0x00
00000166: PUSH2 0x016d
00000169: PUSH2 0x0153
0000016c: JUMP
0000016d: JUMPDEST
0000016e: ISZERO
0000016f: ISZERO
00000170: ISZERO
00000171: PUSH2 0x0179
00000174: JUMPI
00000175: PUSH1 0x00
00000177: DUP1
00000178: REVERT
00000179: JUMPDEST
0000017a: PUSH2 0x0182
0000017d: CALLER
0000017e: PUSH2 0x03fd
00000181: JUMP
00000182: JUMPDEST
00000183: POP
00000184: CALLVALUE
00000185: SWAP1
00000186: POP
00000187: CALLVALUE
00000188: PUSH1 0x01
0000018a: PUSH1 0x00
0000018c: DUP3
0000018d: DUP3
0000018e: SLOAD
0000018f: ADD
00000190: SWAP3
00000191: POP
00000192: POP
00000193: DUP2
00000194: SWAP1
00000195: SSTORE
00000196: POP
00000197: JUMPDEST
00000198: PUSH1 0x05
0000019a: SLOAD
0000019b: DUP2
0000019c: PUSH1 0x03
0000019e: SLOAD
0000019f: ADD
000001a0: LT
000001a1: ISZERO
000001a2: ISZERO
000001a3: PUSH2 0x021e
000001a6: JUMPI
000001a7: PUSH1 0x03
000001a9: SLOAD
000001aa: PUSH1 0x05
000001ac: SLOAD
000001ad: SUB
000001ae: PUSH1 0x07
000001b0: PUSH1 0x00
000001b2: CALLER
000001b3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001c8: AND
000001c9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001de: AND
000001df: DUP2
000001e0: MSTORE
000001e1: PUSH1 0x20
000001e3: ADD
000001e4: SWAP1
000001e5: DUP2
000001e6: MSTORE
000001e7: PUSH1 0x20
000001e9: ADD
000001ea: PUSH1 0x00
000001ec: KECCAK256
000001ed: PUSH1 0x00
000001ef: ADD
000001f0: PUSH1 0x00
000001f2: DUP3
000001f3: DUP3
000001f4: SLOAD
000001f5: ADD
000001f6: SWAP3
000001f7: POP
000001f8: POP
000001f9: DUP2
000001fa: SWAP1
000001fb: SSTORE
000001fc: POP
000001fd: PUSH1 0x03
000001ff: SLOAD
00000200: PUSH1 0x05
00000202: SLOAD
00000203: SUB
00000204: DUP2
00000205: SUB
00000206: SWAP1
00000207: POP
00000208: PUSH2 0x020f
0000020b: PUSH2 0x0496
0000020e: JUMP
0000020f: JUMPDEST
00000210: PUSH2 0x0218
00000213: CALLER
00000214: PUSH2 0x03fd
00000217: JUMP
00000218: JUMPDEST
00000219: POP
0000021a: PUSH2 0x0197
0000021d: JUMP
0000021e: JUMPDEST
0000021f: DUP1
00000220: PUSH1 0x07
00000222: PUSH1 0x00
00000224: CALLER
00000225: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000023a: AND
0000023b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000250: AND
00000251: DUP2
00000252: MSTORE
00000253: PUSH1 0x20
00000255: ADD
00000256: SWAP1
00000257: DUP2
00000258: MSTORE
00000259: PUSH1 0x20
0000025b: ADD
0000025c: PUSH1 0x00
0000025e: KECCAK256
0000025f: PUSH1 0x00
00000261: ADD
00000262: PUSH1 0x00
00000264: DUP3
00000265: DUP3
00000266: SLOAD
00000267: ADD
00000268: SWAP3
00000269: POP
0000026a: POP
0000026b: DUP2
0000026c: SWAP1
0000026d: SSTORE
0000026e: POP
0000026f: DUP1
00000270: PUSH1 0x03
00000272: PUSH1 0x00
00000274: DUP3
00000275: DUP3
00000276: SLOAD
00000277: ADD
00000278: SWAP3
00000279: POP
0000027a: POP
0000027b: DUP2
0000027c: SWAP1
0000027d: SSTORE
0000027e: POP
0000027f: POP
00000280: JUMP
00000281: JUMPDEST
00000282: PUSH1 0x00
00000284: DUP1
00000285: PUSH1 0x00
00000287: DUP1
00000288: PUSH1 0x01
0000028a: SLOAD
0000028b: PUSH1 0x03
0000028d: SLOAD
0000028e: PUSH1 0x02
00000290: SLOAD
00000291: PUSH1 0x03
00000293: SLOAD
00000294: PUSH1 0x05
00000296: SLOAD
00000297: SUB
00000298: SWAP4
00000299: POP
0000029a: SWAP4
0000029b: POP
0000029c: SWAP4
0000029d: POP
0000029e: SWAP4
0000029f: POP
000002a0: SWAP1
000002a1: SWAP2
000002a2: SWAP3
000002a3: SWAP4
000002a4: JUMP
000002a5: JUMPDEST
000002a6: PUSH2 0x02ad
000002a9: PUSH2 0x0767
000002ac: JUMP
000002ad: JUMPDEST
000002ae: PUSH1 0x00
000002b0: PUSH2 0x02b8
000002b3: CALLER
000002b4: PUSH2 0x03fd
000002b7: JUMP
000002b8: JUMPDEST
000002b9: SWAP2
000002ba: POP
000002bb: PUSH2 0x02c2
000002be: PUSH2 0x0153
000002c1: JUMP
000002c2: JUMPDEST
000002c3: ISZERO
000002c4: PUSH2 0x02d4
000002c7: JUMPI
000002c8: PUSH2 0x02cf
000002cb: PUSH2 0x04fc
000002ce: JUMP
000002cf: JUMPDEST
000002d0: PUSH2 0x03b1
000002d3: JUMP
000002d4: JUMPDEST
000002d5: DUP2
000002d6: PUSH1 0x60
000002d8: ADD
000002d9: MLOAD
000002da: DUP3
000002db: PUSH1 0x40
000002dd: ADD
000002de: MLOAD
000002df: SUB
000002e0: SWAP1
000002e1: POP
000002e2: DUP1
000002e3: DUP3
000002e4: PUSH1 0x60
000002e6: ADD
000002e7: DUP2
000002e8: DUP2
000002e9: MLOAD
000002ea: ADD
000002eb: SWAP2
000002ec: POP
000002ed: DUP2
000002ee: DUP2
000002ef: MSTORE
000002f0: POP
000002f1: POP
000002f2: DUP2
000002f3: PUSH1 0x07
000002f5: PUSH1 0x00
000002f7: CALLER
000002f8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000030d: AND
0000030e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000323: AND
00000324: DUP2
00000325: MSTORE
00000326: PUSH1 0x20
00000328: ADD
00000329: SWAP1
0000032a: DUP2
0000032b: MSTORE
0000032c: PUSH1 0x20
0000032e: ADD
0000032f: PUSH1 0x00
00000331: KECCAK256
00000332: PUSH1 0x00
00000334: DUP3
00000335: ADD
00000336: MLOAD
00000337: DUP2
00000338: PUSH1 0x00
0000033a: ADD
0000033b: SSTORE
0000033c: PUSH1 0x20
0000033e: DUP3
0000033f: ADD
00000340: MLOAD
00000341: DUP2
00000342: PUSH1 0x01
00000344: ADD
00000345: SSTORE
00000346: PUSH1 0x40
00000348: DUP3
00000349: ADD
0000034a: MLOAD
0000034b: DUP2
0000034c: PUSH1 0x02
0000034e: ADD
0000034f: SSTORE
00000350: PUSH1 0x60
00000352: DUP3
00000353: ADD
00000354: MLOAD
00000355: DUP2
00000356: PUSH1 0x03
00000358: ADD
00000359: SSTORE
0000035a: PUSH1 0x80
0000035c: DUP3
0000035d: ADD
0000035e: MLOAD
0000035f: DUP2
00000360: PUSH1 0x04
00000362: ADD
00000363: SSTORE
00000364: SWAP1
00000365: POP
00000366: POP
00000367: PUSH1 0x00
00000369: DUP2
0000036a: GT
0000036b: ISZERO
0000036c: PUSH2 0x03b0
0000036f: JUMPI
00000370: CALLER
00000371: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000386: AND
00000387: PUSH2 0x08fc
0000038a: DUP3
0000038b: SWAP1
0000038c: DUP2
0000038d: ISZERO
0000038e: MUL
0000038f: SWAP1
00000390: PUSH1 0x40
00000392: MLOAD
00000393: PUSH1 0x00
00000395: PUSH1 0x40
00000397: MLOAD
00000398: DUP1
00000399: DUP4
0000039a: SUB
0000039b: DUP2
0000039c: DUP6
0000039d: DUP9
0000039e: DUP9
0000039f: CALL
000003a0: SWAP4
000003a1: POP
000003a2: POP
000003a3: POP
000003a4: POP
000003a5: ISZERO
000003a6: ISZERO
000003a7: PUSH2 0x03af
000003aa: JUMPI
000003ab: PUSH1 0x00
000003ad: DUP1
000003ae: REVERT
000003af: JUMPDEST
000003b0: JUMPDEST
000003b1: JUMPDEST
000003b2: POP
000003b3: POP
000003b4: JUMP
000003b5: JUMPDEST
000003b6: PUSH1 0x00
000003b8: DUP1
000003b9: PUSH1 0x00
000003bb: DUP1
000003bc: PUSH2 0x03c3
000003bf: PUSH2 0x0767
000003c2: JUMP
000003c3: JUMPDEST
000003c4: PUSH2 0x03cc
000003c7: CALLER
000003c8: PUSH2 0x0639
000003cb: JUMP
000003cc: JUMPDEST
000003cd: SWAP1
000003ce: POP
000003cf: DUP1
000003d0: PUSH1 0x40
000003d2: ADD
000003d3: MLOAD
000003d4: DUP2
000003d5: PUSH1 0x60
000003d7: ADD
000003d8: MLOAD
000003d9: DUP3
000003da: PUSH1 0x60
000003dc: ADD
000003dd: MLOAD
000003de: DUP4
000003df: PUSH1 0x40
000003e1: ADD
000003e2: MLOAD
000003e3: SUB
000003e4: DUP4
000003e5: PUSH1 0x20
000003e7: ADD
000003e8: MLOAD
000003e9: DUP5
000003ea: PUSH1 0x00
000003ec: ADD
000003ed: MLOAD
000003ee: ADD
000003ef: SWAP5
000003f0: POP
000003f1: SWAP5
000003f2: POP
000003f3: SWAP5
000003f4: POP
000003f5: SWAP5
000003f6: POP
000003f7: POP
000003f8: SWAP1
000003f9: SWAP2
000003fa: SWAP3
000003fb: SWAP4
000003fc: JUMP
000003fd: JUMPDEST
000003fe: PUSH2 0x0405
00000401: PUSH2 0x0767
00000404: JUMP
00000405: JUMPDEST
00000406: PUSH2 0x040d
00000409: PUSH2 0x0767
0000040c: JUMP
0000040d: JUMPDEST
0000040e: PUSH2 0x0416
00000411: DUP4
00000412: PUSH2 0x0639
00000415: JUMP
00000416: JUMPDEST
00000417: SWAP1
00000418: POP
00000419: DUP1
0000041a: PUSH1 0x07
0000041c: PUSH1 0x00
0000041e: DUP6
0000041f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000434: AND
00000435: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000044a: AND
0000044b: DUP2
0000044c: MSTORE
0000044d: PUSH1 0x20
0000044f: ADD
00000450: SWAP1
00000451: DUP2
00000452: MSTORE
00000453: PUSH1 0x20
00000455: ADD
00000456: PUSH1 0x00
00000458: KECCAK256
00000459: PUSH1 0x00
0000045b: DUP3
0000045c: ADD
0000045d: MLOAD
0000045e: DUP2
0000045f: PUSH1 0x00
00000461: ADD
00000462: SSTORE
00000463: PUSH1 0x20
00000465: DUP3
00000466: ADD
00000467: MLOAD
00000468: DUP2
00000469: PUSH1 0x01
0000046b: ADD
0000046c: SSTORE
0000046d: PUSH1 0x40
0000046f: DUP3
00000470: ADD
00000471: MLOAD
00000472: DUP2
00000473: PUSH1 0x02
00000475: ADD
00000476: SSTORE
00000477: PUSH1 0x60
00000479: DUP3
0000047a: ADD
0000047b: MLOAD
0000047c: DUP2
0000047d: PUSH1 0x03
0000047f: ADD
00000480: SSTORE
00000481: PUSH1 0x80
00000483: DUP3
00000484: ADD
00000485: MLOAD
00000486: DUP2
00000487: PUSH1 0x04
00000489: ADD
0000048a: SSTORE
0000048b: SWAP1
0000048c: POP
0000048d: POP
0000048e: DUP1
0000048f: SWAP2
00000490: POP
00000491: POP
00000492: SWAP2
00000493: SWAP1
00000494: POP
00000495: JUMP
00000496: JUMPDEST
00000497: PUSH1 0x00
00000499: PUSH1 0x02
0000049b: PUSH1 0x00
0000049d: DUP2
0000049e: SLOAD
0000049f: DUP1
000004a0: SWAP3
000004a1: SWAP2
000004a2: SWAP1
000004a3: PUSH1 0x01
000004a5: ADD
000004a6: SWAP2
000004a7: SWAP1
000004a8: POP
000004a9: SSTORE
000004aa: POP
000004ab: PUSH1 0x05
000004ad: SLOAD
000004ae: SWAP1
000004af: POP
000004b0: PUSH1 0x01
000004b2: PUSH1 0x02
000004b4: SLOAD
000004b5: EQ
000004b6: ISZERO
000004b7: PUSH2 0x04cf
000004ba: JUMPI
000004bb: PUSH9 0x0ad78ebc5ac6200000
000004c5: PUSH1 0x05
000004c7: DUP2
000004c8: SWAP1
000004c9: SSTORE
000004ca: POP
000004cb: PUSH2 0x04e3
000004ce: JUMP
000004cf: JUMPDEST
000004d0: PUSH1 0x04
000004d2: SLOAD
000004d3: PUSH1 0x02
000004d5: MUL
000004d6: PUSH1 0x05
000004d8: SLOAD
000004d9: PUSH1 0x04
000004db: MUL
000004dc: SUB
000004dd: PUSH1 0x05
000004df: DUP2
000004e0: SWAP1
000004e1: SSTORE
000004e2: POP
000004e3: JUMPDEST
000004e4: DUP1
000004e5: PUSH1 0x04
000004e7: DUP2
000004e8: SWAP1
000004e9: SSTORE
000004ea: POP
000004eb: TIMESTAMP
000004ec: PUSH1 0x06
000004ee: DUP2
000004ef: SWAP1
000004f0: SSTORE
000004f1: POP
000004f2: PUSH1 0x00
000004f4: PUSH1 0x03
000004f6: DUP2
000004f7: SWAP1
000004f8: SSTORE
000004f9: POP
000004fa: POP
000004fb: JUMP
000004fc: JUMPDEST
000004fd: PUSH1 0x00
000004ff: DUP1
00000500: PUSH1 0x00
00000502: PUSH2 0x0509
00000505: PUSH2 0x0153
00000508: JUMP
00000509: JUMPDEST
0000050a: ISZERO
0000050b: ISZERO
0000050c: PUSH2 0x0514
0000050f: JUMPI
00000510: PUSH1 0x00
00000512: DUP1
00000513: REVERT
00000514: JUMPDEST
00000515: PUSH1 0x07
00000517: PUSH1 0x00
00000519: CALLER
0000051a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000052f: AND
00000530: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000545: AND
00000546: DUP2
00000547: MSTORE
00000548: PUSH1 0x20
0000054a: ADD
0000054b: SWAP1
0000054c: DUP2
0000054d: MSTORE
0000054e: PUSH1 0x20
00000550: ADD
00000551: PUSH1 0x00
00000553: KECCAK256
00000554: SWAP3
00000555: POP
00000556: PUSH1 0x00
00000558: SWAP2
00000559: POP
0000055a: PUSH1 0x00
0000055c: PUSH1 0x04
0000055e: SLOAD
0000055f: GT
00000560: ISZERO
00000561: PUSH2 0x0584
00000564: JUMPI
00000565: PUSH1 0x04
00000567: SLOAD
00000568: PUSH9 0x056bc75e2d63100000
00000572: DUP5
00000573: PUSH1 0x01
00000575: ADD
00000576: SLOAD
00000577: MUL
00000578: DUP2
00000579: ISZERO
0000057a: ISZERO
0000057b: PUSH2 0x0580
0000057e: JUMPI
0000057f: INVALID
00000580: JUMPDEST
00000581: DIV
00000582: SWAP2
00000583: POP
00000584: JUMPDEST
00000585: DUP2
00000586: DUP4
00000587: PUSH1 0x03
00000589: ADD
0000058a: SLOAD
0000058b: DUP5
0000058c: PUSH1 0x02
0000058e: ADD
0000058f: SLOAD
00000590: DUP6
00000591: PUSH1 0x00
00000593: ADD
00000594: SLOAD
00000595: ADD
00000596: SUB
00000597: ADD
00000598: SWAP1
00000599: POP
0000059a: ADDRESS
0000059b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005b0: AND
000005b1: BALANCE
000005b2: DUP2
000005b3: GT
000005b4: ISZERO
000005b5: PUSH2 0x05d3
000005b8: JUMPI
000005b9: ADDRESS
000005ba: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005cf: AND
000005d0: BALANCE
000005d1: SWAP1
000005d2: POP
000005d3: JUMPDEST
000005d4: PUSH1 0x00
000005d6: DUP4
000005d7: PUSH1 0x00
000005d9: ADD
000005da: DUP2
000005db: SWAP1
000005dc: SSTORE
000005dd: POP
000005de: PUSH1 0x00
000005e0: DUP4
000005e1: PUSH1 0x01
000005e3: ADD
000005e4: DUP2
000005e5: SWAP1
000005e6: SSTORE
000005e7: POP
000005e8: DUP3
000005e9: PUSH1 0x02
000005eb: ADD
000005ec: SLOAD
000005ed: DUP4
000005ee: PUSH1 0x03
000005f0: ADD
000005f1: DUP2
000005f2: SWAP1
000005f3: SSTORE
000005f4: POP
000005f5: CALLER
000005f6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000060b: AND
0000060c: PUSH2 0x08fc
0000060f: DUP3
00000610: SWAP1
00000611: DUP2
00000612: ISZERO
00000613: MUL
00000614: SWAP1
00000615: PUSH1 0x40
00000617: MLOAD
00000618: PUSH1 0x00
0000061a: PUSH1 0x40
0000061c: MLOAD
0000061d: DUP1
0000061e: DUP4
0000061f: SUB
00000620: DUP2
00000621: DUP6
00000622: DUP9
00000623: DUP9
00000624: CALL
00000625: SWAP4
00000626: POP
00000627: POP
00000628: POP
00000629: POP
0000062a: ISZERO
0000062b: ISZERO
0000062c: PUSH2 0x0634
0000062f: JUMPI
00000630: PUSH1 0x00
00000632: DUP1
00000633: REVERT
00000634: JUMPDEST
00000635: POP
00000636: POP
00000637: POP
00000638: JUMP
00000639: JUMPDEST
0000063a: PUSH2 0x0641
0000063d: PUSH2 0x0767
00000640: JUMP
00000641: JUMPDEST
00000642: PUSH2 0x0649
00000645: PUSH2 0x0767
00000648: JUMP
00000649: JUMPDEST
0000064a: PUSH1 0x00
0000064c: PUSH1 0x07
0000064e: PUSH1 0x00
00000650: DUP6
00000651: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000666: AND
00000667: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000067c: AND
0000067d: DUP2
0000067e: MSTORE
0000067f: PUSH1 0x20
00000681: ADD
00000682: SWAP1
00000683: DUP2
00000684: MSTORE
00000685: PUSH1 0x20
00000687: ADD
00000688: PUSH1 0x00
0000068a: KECCAK256
0000068b: PUSH1 0xa0
0000068d: PUSH1 0x40
0000068f: MLOAD
00000690: SWAP1
00000691: DUP2
00000692: ADD
00000693: PUSH1 0x40
00000695: MSTORE
00000696: SWAP1
00000697: DUP2
00000698: PUSH1 0x00
0000069a: DUP3
0000069b: ADD
0000069c: SLOAD
0000069d: DUP2
0000069e: MSTORE
0000069f: PUSH1 0x20
000006a1: ADD
000006a2: PUSH1 0x01
000006a4: DUP3
000006a5: ADD
000006a6: SLOAD
000006a7: DUP2
000006a8: MSTORE
000006a9: PUSH1 0x20
000006ab: ADD
000006ac: PUSH1 0x02
000006ae: DUP3
000006af: ADD
000006b0: SLOAD
000006b1: DUP2
000006b2: MSTORE
000006b3: PUSH1 0x20
000006b5: ADD
000006b6: PUSH1 0x03
000006b8: DUP3
000006b9: ADD
000006ba: SLOAD
000006bb: DUP2
000006bc: MSTORE
000006bd: PUSH1 0x20
000006bf: ADD
000006c0: PUSH1 0x04
000006c2: DUP3
000006c3: ADD
000006c4: SLOAD
000006c5: DUP2
000006c6: MSTORE
000006c7: POP
000006c8: POP
000006c9: SWAP2
000006ca: POP
000006cb: DUP2
000006cc: PUSH1 0x80
000006ce: ADD
000006cf: MLOAD
000006d0: SWAP1
000006d1: POP
000006d2: JUMPDEST
000006d3: PUSH1 0x02
000006d5: SLOAD
000006d6: DUP2
000006d7: LT
000006d8: ISZERO
000006d9: PUSH2 0x0751
000006dc: JUMPI
000006dd: PUSH1 0x02
000006df: DUP3
000006e0: PUSH1 0x40
000006e2: ADD
000006e3: DUP2
000006e4: DUP2
000006e5: MLOAD
000006e6: MUL
000006e7: SWAP2
000006e8: POP
000006e9: DUP2
000006ea: DUP2
000006eb: MSTORE
000006ec: POP
000006ed: POP
000006ee: PUSH1 0x00
000006f0: DUP3
000006f1: PUSH1 0x20
000006f3: ADD
000006f4: MLOAD
000006f5: GT
000006f6: ISZERO
000006f7: PUSH2 0x071d
000006fa: JUMPI
000006fb: PUSH1 0x02
000006fd: DUP3
000006fe: PUSH1 0x20
00000700: ADD
00000701: MLOAD
00000702: MUL
00000703: DUP3
00000704: PUSH1 0x40
00000706: ADD
00000707: DUP2
00000708: DUP2
00000709: MLOAD
0000070a: ADD
0000070b: SWAP2
0000070c: POP
0000070d: DUP2
0000070e: DUP2
0000070f: MSTORE
00000710: POP
00000711: POP
00000712: PUSH1 0x00
00000714: DUP3
00000715: PUSH1 0x20
00000717: ADD
00000718: DUP2
00000719: DUP2
0000071a: MSTORE
0000071b: POP
0000071c: POP
0000071d: JUMPDEST
0000071e: PUSH1 0x00
00000720: DUP3
00000721: PUSH1 0x00
00000723: ADD
00000724: MLOAD
00000725: GT
00000726: ISZERO
00000727: PUSH2 0x0744
0000072a: JUMPI
0000072b: DUP2
0000072c: PUSH1 0x00
0000072e: ADD
0000072f: MLOAD
00000730: DUP3
00000731: PUSH1 0x20
00000733: ADD
00000734: DUP2
00000735: DUP2
00000736: MSTORE
00000737: POP
00000738: POP
00000739: PUSH1 0x00
0000073b: DUP3
0000073c: PUSH1 0x00
0000073e: ADD
0000073f: DUP2
00000740: DUP2
00000741: MSTORE
00000742: POP
00000743: POP
00000744: JUMPDEST
00000745: DUP1
00000746: DUP1
00000747: PUSH1 0x01
00000749: ADD
0000074a: SWAP2
0000074b: POP
0000074c: POP
0000074d: PUSH2 0x06d2
00000750: JUMP
00000751: JUMPDEST
00000752: PUSH1 0x02
00000754: SLOAD
00000755: DUP3
00000756: PUSH1 0x80
00000758: ADD
00000759: DUP2
0000075a: DUP2
0000075b: MSTORE
0000075c: POP
0000075d: POP
0000075e: DUP2
0000075f: SWAP3
00000760: POP
00000761: POP
00000762: POP
00000763: SWAP2
00000764: SWAP1
00000765: POP
00000766: JUMP
00000767: JUMPDEST
00000768: PUSH1 0xa0
0000076a: PUSH1 0x40
0000076c: MLOAD
0000076d: SWAP1
0000076e: DUP2
0000076f: ADD
00000770: PUSH1 0x40
00000772: MSTORE
00000773: DUP1
00000774: PUSH1 0x00
00000776: DUP2
00000777: MSTORE
00000778: PUSH1 0x20
0000077a: ADD
0000077b: PUSH1 0x00
0000077d: DUP2
0000077e: MSTORE
0000077f: PUSH1 0x20
00000781: ADD
00000782: PUSH1 0x00
00000784: DUP2
00000785: MSTORE
00000786: PUSH1 0x20
00000788: ADD
00000789: PUSH1 0x00
0000078b: DUP2
0000078c: MSTORE
0000078d: PUSH1 0x20
0000078f: ADD
00000790: PUSH1 0x00
00000792: DUP2
00000793: MSTORE
00000794: POP
00000795: SWAP1
00000796: JUMP
00000797: STOP
00000798: LOG1
00000799: PUSH6 0x627a7a723058
000007a0: KECCAK256
000007a1: UNKNOWN(0xE1)
000007a2: UNKNOWN(0xCA)
000007a3: UNKNOWN(0xDD)
000007a4: UNKNOWN(0xE3)
000007a5: UNKNOWN(0xCB)
000007a6: UNKNOWN(0x22)
000007a7: CALLER
000007a8: UNKNOWN(0x2C)
000007a9: MOD
000007aa: PUSH16 0x91cbccfa733eab396516183c626699e7
000007bb: UNKNOWN(0x28)
000007bc: UNKNOWN(0xEC)
000007bd: MSTORE8
000007be: CREATE
000007bf: DUP13
000007c0: BLOBHASH
000007c1: STOP
000007c2: UNKNOWN(0x29)
View stderr 
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x3c59f967270e55e6757fe9c3623e0b623e7fa8f3c1843c0269b9fa81152424a6
call_targets: 0xa33c4a314faa9684eeffa6ba334688001ea99bbc
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x3c59f967270e55e6757fe9c3623e0b623e7fa8f3c1843c0269b9fa81152424a6",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xa33c4a314faa9684eeffa6ba334688001ea99bbc"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x032fc13b",
            "selector": "0x032fc13b",
            "calldata_variants": [
                "0x032fc13b",
                "0x032fc13b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3f9942ff",
            "selector": "0x3f9942ff",
            "calldata_variants": [
                "0x3f9942ff",
                "0x3f9942ff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70c10578",
            "selector": "0x70c10578",
            "calldata_variants": [
                "0x70c10578",
                "0x70c105780000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb29c62f4",
            "selector": "0xb29c62f4",
            "calldata_variants": [
                "0xb29c62f4",
                "0xb29c62f40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd0e30db0",
            "selector": "0xd0e30db0",
            "calldata_variants": [
                "0xd0e30db0",
                "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 927,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1572,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x3c59f967270e55e6757fe9c3623e0b623e7fa8f3c1843c0269b9fa81152424a6
call_targets: 0xa33c4a314faa9684eeffa6ba334688001ea99bbc
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x3c59f967270e55e6757fe9c3623e0b623e7fa8f3c1843c0269b9fa81152424a6",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xa33c4a314faa9684eeffa6ba334688001ea99bbc"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x032fc13b",
            "selector": "0x032fc13b",
            "calldata_variants": [
                "0x032fc13b",
                "0x032fc13b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3f9942ff",
            "selector": "0x3f9942ff",
            "calldata_variants": [
                "0x3f9942ff",
                "0x3f9942ff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70c10578",
            "selector": "0x70c10578",
            "calldata_variants": [
                "0x70c10578",
                "0x70c105780000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb29c62f4",
            "selector": "0xb29c62f4",
            "calldata_variants": [
                "0xb29c62f4",
                "0xb29c62f40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd0e30db0",
            "selector": "0xd0e30db0",
            "calldata_variants": [
                "0xd0e30db0",
                "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 927,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1572,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}
medium other detector CREATE/CREATE2 reachable 45 no no
view
trace_id: 0x56a5422326dee88c03965b826fc29994ef94249f61f50644472fcf573864cd09
validation_json 
{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 12,
    "trace_id": "0x56a5422326dee88c03965b826fc29994ef94249f61f50644472fcf573864cd09",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x032fc13b",
            "selector": "0x032fc13b",
            "calldata_variants": [
                "0x032fc13b",
                "0x032fc13b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3f9942ff",
            "selector": "0x3f9942ff",
            "calldata_variants": [
                "0x3f9942ff",
                "0x3f9942ff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70c10578",
            "selector": "0x70c10578",
            "calldata_variants": [
                "0x70c10578",
                "0x70c105780000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb29c62f4",
            "selector": "0xb29c62f4",
            "calldata_variants": [
                "0xb29c62f4",
                "0xb29c62f40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd0e30db0",
            "selector": "0xd0e30db0",
            "calldata_variants": [
                "0xd0e30db0",
                "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "create_count": 1,
    "create2_count": 0
}