Analysis Run

019b3844-9674-73f2-a5a5-e074c47b921d

complete

Chain ID

1

Address

0x8484ef722627bf18ca5ae6bcf031c23e6e922b30

Block Number

—

Created

Fri, Dec 19, 2025 8:19 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
13545	artifact.fetch	complete	1 / 3	3 months ago
13546	tool.cast_disasm	complete	1 / 3	3 months ago
111922	analysis.bundle	complete	1 / 3	1 week ago
111923	capability.graph	complete	1 / 3	1 week ago
111924	detector.run	complete	1 / 3	1 week ago
111925	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

1

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

2

EXT*/BALANCE

2

Total opcodes

1472

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0059
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x025313a2
00000019: EQ
0000001a: PUSH2 0x010e
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x025b22bc
00000024: EQ
00000025: PUSH2 0x0165
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x4555d5c9
0000002f: EQ
00000030: PUSH2 0x01b6
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x5c60da1b
0000003a: EQ
0000003b: PUSH2 0x01e1
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xd88ca2c8
00000045: EQ
00000046: PUSH2 0x0238
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0xf1739cae
00000050: EQ
00000051: PUSH2 0x0313
00000054: JUMPI
00000055: PUSH2 0x00b6
00000058: JUMP
00000059: JUMPDEST
0000005a: CALLDATASIZE
0000005b: PUSH2 0x00b6
0000005e: JUMPI
0000005f: PUSH2 0x00b4
00000062: PUSH2 0x0069
00000065: PUSH2 0x0364
00000068: JUMP
00000069: JUMPDEST
0000006a: PUSH1 0x00
0000006c: CALLDATASIZE
0000006d: DUP1
0000006e: DUP1
0000006f: PUSH1 0x1f
00000071: ADD
00000072: PUSH1 0x20
00000074: DUP1
00000075: SWAP2
00000076: DIV
00000077: MUL
00000078: PUSH1 0x20
0000007a: ADD
0000007b: PUSH1 0x40
0000007d: MLOAD
0000007e: SWAP1
0000007f: DUP2
00000080: ADD
00000081: PUSH1 0x40
00000083: MSTORE
00000084: DUP1
00000085: SWAP4
00000086: SWAP3
00000087: SWAP2
00000088: SWAP1
00000089: DUP2
0000008a: DUP2
0000008b: MSTORE
0000008c: PUSH1 0x20
0000008e: ADD
0000008f: DUP4
00000090: DUP4
00000091: DUP1
00000092: DUP3
00000093: DUP5
00000094: CALLDATACOPY
00000095: PUSH1 0x00
00000097: DUP2
00000098: DUP5
00000099: ADD
0000009a: MSTORE
0000009b: PUSH1 0x1f
0000009d: NOT
0000009e: PUSH1 0x1f
000000a0: DUP3
000000a1: ADD
000000a2: AND
000000a3: SWAP1
000000a4: POP
000000a5: DUP1
000000a6: DUP4
000000a7: ADD
000000a8: SWAP3
000000a9: POP
000000aa: POP
000000ab: POP
000000ac: POP
000000ad: POP
000000ae: POP
000000af: POP
000000b0: PUSH2 0x0390
000000b3: JUMP
000000b4: JUMPDEST
000000b5: STOP
000000b6: JUMPDEST
000000b7: PUSH2 0x010c
000000ba: PUSH2 0x00c1
000000bd: PUSH2 0x0364
000000c0: JUMP
000000c1: JUMPDEST
000000c2: PUSH1 0x00
000000c4: CALLDATASIZE
000000c5: DUP1
000000c6: DUP1
000000c7: PUSH1 0x1f
000000c9: ADD
000000ca: PUSH1 0x20
000000cc: DUP1
000000cd: SWAP2
000000ce: DIV
000000cf: MUL
000000d0: PUSH1 0x20
000000d2: ADD
000000d3: PUSH1 0x40
000000d5: MLOAD
000000d6: SWAP1
000000d7: DUP2
000000d8: ADD
000000d9: PUSH1 0x40
000000db: MSTORE
000000dc: DUP1
000000dd: SWAP4
000000de: SWAP3
000000df: SWAP2
000000e0: SWAP1
000000e1: DUP2
000000e2: DUP2
000000e3: MSTORE
000000e4: PUSH1 0x20
000000e6: ADD
000000e7: DUP4
000000e8: DUP4
000000e9: DUP1
000000ea: DUP3
000000eb: DUP5
000000ec: CALLDATACOPY
000000ed: PUSH1 0x00
000000ef: DUP2
000000f0: DUP5
000000f1: ADD
000000f2: MSTORE
000000f3: PUSH1 0x1f
000000f5: NOT
000000f6: PUSH1 0x1f
000000f8: DUP3
000000f9: ADD
000000fa: AND
000000fb: SWAP1
000000fc: POP
000000fd: DUP1
000000fe: DUP4
000000ff: ADD
00000100: SWAP3
00000101: POP
00000102: POP
00000103: POP
00000104: POP
00000105: POP
00000106: POP
00000107: POP
00000108: PUSH2 0x0390
0000010b: JUMP
0000010c: JUMPDEST
0000010d: STOP
0000010e: JUMPDEST
0000010f: CALLVALUE
00000110: DUP1
00000111: ISZERO
00000112: PUSH2 0x011a
00000115: JUMPI
00000116: PUSH1 0x00
00000118: DUP1
00000119: REVERT
0000011a: JUMPDEST
0000011b: POP
0000011c: PUSH2 0x0123
0000011f: PUSH2 0x03ba
00000122: JUMP
00000123: JUMPDEST
00000124: PUSH1 0x40
00000126: MLOAD
00000127: DUP1
00000128: DUP3
00000129: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000013e: AND
0000013f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000154: AND
00000155: DUP2
00000156: MSTORE
00000157: PUSH1 0x20
00000159: ADD
0000015a: SWAP2
0000015b: POP
0000015c: POP
0000015d: PUSH1 0x40
0000015f: MLOAD
00000160: DUP1
00000161: SWAP2
00000162: SUB
00000163: SWAP1
00000164: RETURN
00000165: JUMPDEST
00000166: CALLVALUE
00000167: DUP1
00000168: ISZERO
00000169: PUSH2 0x0171
0000016c: JUMPI
0000016d: PUSH1 0x00
0000016f: DUP1
00000170: REVERT
00000171: JUMPDEST
00000172: POP
00000173: PUSH2 0x01b4
00000176: PUSH1 0x04
00000178: DUP1
00000179: CALLDATASIZE
0000017a: SUB
0000017b: PUSH1 0x20
0000017d: DUP2
0000017e: LT
0000017f: ISZERO
00000180: PUSH2 0x0188
00000183: JUMPI
00000184: PUSH1 0x00
00000186: DUP1
00000187: REVERT
00000188: JUMPDEST
00000189: DUP2
0000018a: ADD
0000018b: SWAP1
0000018c: DUP1
0000018d: DUP1
0000018e: CALLDATALOAD
0000018f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001a4: AND
000001a5: SWAP1
000001a6: PUSH1 0x20
000001a8: ADD
000001a9: SWAP1
000001aa: SWAP3
000001ab: SWAP2
000001ac: SWAP1
000001ad: POP
000001ae: POP
000001af: POP
000001b0: PUSH2 0x03c9
000001b3: JUMP
000001b4: JUMPDEST
000001b5: STOP
000001b6: JUMPDEST
000001b7: CALLVALUE
000001b8: DUP1
000001b9: ISZERO
000001ba: PUSH2 0x01c2
000001bd: JUMPI
000001be: PUSH1 0x00
000001c0: DUP1
000001c1: REVERT
000001c2: JUMPDEST
000001c3: POP
000001c4: PUSH2 0x01cb
000001c7: PUSH2 0x05df
000001ca: JUMP
000001cb: JUMPDEST
000001cc: PUSH1 0x40
000001ce: MLOAD
000001cf: DUP1
000001d0: DUP3
000001d1: DUP2
000001d2: MSTORE
000001d3: PUSH1 0x20
000001d5: ADD
000001d6: SWAP2
000001d7: POP
000001d8: POP
000001d9: PUSH1 0x40
000001db: MLOAD
000001dc: DUP1
000001dd: SWAP2
000001de: SUB
000001df: SWAP1
000001e0: RETURN
000001e1: JUMPDEST
000001e2: CALLVALUE
000001e3: DUP1
000001e4: ISZERO
000001e5: PUSH2 0x01ed
000001e8: JUMPI
000001e9: PUSH1 0x00
000001eb: DUP1
000001ec: REVERT
000001ed: JUMPDEST
000001ee: POP
000001ef: PUSH2 0x01f6
000001f2: PUSH2 0x05e8
000001f5: JUMP
000001f6: JUMPDEST
000001f7: PUSH1 0x40
000001f9: MLOAD
000001fa: DUP1
000001fb: DUP3
000001fc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000211: AND
00000212: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000227: AND
00000228: DUP2
00000229: MSTORE
0000022a: PUSH1 0x20
0000022c: ADD
0000022d: SWAP2
0000022e: POP
0000022f: POP
00000230: PUSH1 0x40
00000232: MLOAD
00000233: DUP1
00000234: SWAP2
00000235: SUB
00000236: SWAP1
00000237: RETURN
00000238: JUMPDEST
00000239: PUSH2 0x0311
0000023c: PUSH1 0x04
0000023e: DUP1
0000023f: CALLDATASIZE
00000240: SUB
00000241: PUSH1 0x40
00000243: DUP2
00000244: LT
00000245: ISZERO
00000246: PUSH2 0x024e
00000249: JUMPI
0000024a: PUSH1 0x00
0000024c: DUP1
0000024d: REVERT
0000024e: JUMPDEST
0000024f: DUP2
00000250: ADD
00000251: SWAP1
00000252: DUP1
00000253: DUP1
00000254: CALLDATALOAD
00000255: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000026a: AND
0000026b: SWAP1
0000026c: PUSH1 0x20
0000026e: ADD
0000026f: SWAP1
00000270: SWAP3
00000271: SWAP2
00000272: SWAP1
00000273: DUP1
00000274: CALLDATALOAD
00000275: SWAP1
00000276: PUSH1 0x20
00000278: ADD
00000279: SWAP1
0000027a: PUSH5 0x0100000000
00000280: DUP2
00000281: GT
00000282: ISZERO
00000283: PUSH2 0x028b
00000286: JUMPI
00000287: PUSH1 0x00
00000289: DUP1
0000028a: REVERT
0000028b: JUMPDEST
0000028c: DUP3
0000028d: ADD
0000028e: DUP4
0000028f: PUSH1 0x20
00000291: DUP3
00000292: ADD
00000293: GT
00000294: ISZERO
00000295: PUSH2 0x029d
00000298: JUMPI
00000299: PUSH1 0x00
0000029b: DUP1
0000029c: REVERT
0000029d: JUMPDEST
0000029e: DUP1
0000029f: CALLDATALOAD
000002a0: SWAP1
000002a1: PUSH1 0x20
000002a3: ADD
000002a4: SWAP2
000002a5: DUP5
000002a6: PUSH1 0x01
000002a8: DUP4
000002a9: MUL
000002aa: DUP5
000002ab: ADD
000002ac: GT
000002ad: PUSH5 0x0100000000
000002b3: DUP4
000002b4: GT
000002b5: OR
000002b6: ISZERO
000002b7: PUSH2 0x02bf
000002ba: JUMPI
000002bb: PUSH1 0x00
000002bd: DUP1
000002be: REVERT
000002bf: JUMPDEST
000002c0: SWAP2
000002c1: SWAP1
000002c2: DUP1
000002c3: DUP1
000002c4: PUSH1 0x1f
000002c6: ADD
000002c7: PUSH1 0x20
000002c9: DUP1
000002ca: SWAP2
000002cb: DIV
000002cc: MUL
000002cd: PUSH1 0x20
000002cf: ADD
000002d0: PUSH1 0x40
000002d2: MLOAD
000002d3: SWAP1
000002d4: DUP2
000002d5: ADD
000002d6: PUSH1 0x40
000002d8: MSTORE
000002d9: DUP1
000002da: SWAP4
000002db: SWAP3
000002dc: SWAP2
000002dd: SWAP1
000002de: DUP2
000002df: DUP2
000002e0: MSTORE
000002e1: PUSH1 0x20
000002e3: ADD
000002e4: DUP4
000002e5: DUP4
000002e6: DUP1
000002e7: DUP3
000002e8: DUP5
000002e9: CALLDATACOPY
000002ea: PUSH1 0x00
000002ec: DUP2
000002ed: DUP5
000002ee: ADD
000002ef: MSTORE
000002f0: PUSH1 0x1f
000002f2: NOT
000002f3: PUSH1 0x1f
000002f5: DUP3
000002f6: ADD
000002f7: AND
000002f8: SWAP1
000002f9: POP
000002fa: DUP1
000002fb: DUP4
000002fc: ADD
000002fd: SWAP3
000002fe: POP
000002ff: POP
00000300: POP
00000301: POP
00000302: POP
00000303: POP
00000304: POP
00000305: SWAP2
00000306: SWAP3
00000307: SWAP2
00000308: SWAP3
00000309: SWAP1
0000030a: POP
0000030b: POP
0000030c: POP
0000030d: PUSH2 0x05f7
00000310: JUMP
00000311: JUMPDEST
00000312: STOP
00000313: JUMPDEST
00000314: CALLVALUE
00000315: DUP1
00000316: ISZERO
00000317: PUSH2 0x031f
0000031a: JUMPI
0000031b: PUSH1 0x00
0000031d: DUP1
0000031e: REVERT
0000031f: JUMPDEST
00000320: POP
00000321: PUSH2 0x0362
00000324: PUSH1 0x04
00000326: DUP1
00000327: CALLDATASIZE
00000328: SUB
00000329: PUSH1 0x20
0000032b: DUP2
0000032c: LT
0000032d: ISZERO
0000032e: PUSH2 0x0336
00000331: JUMPI
00000332: PUSH1 0x00
00000334: DUP1
00000335: REVERT
00000336: JUMPDEST
00000337: DUP2
00000338: ADD
00000339: SWAP1
0000033a: DUP1
0000033b: DUP1
0000033c: CALLDATALOAD
0000033d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000352: AND
00000353: SWAP1
00000354: PUSH1 0x20
00000356: ADD
00000357: SWAP1
00000358: SWAP3
00000359: SWAP2
0000035a: SWAP1
0000035b: POP
0000035c: POP
0000035d: POP
0000035e: PUSH2 0x0813
00000361: JUMP
00000362: JUMPDEST
00000363: STOP
00000364: JUMPDEST
00000365: PUSH1 0x00
00000367: DUP1
00000368: PUSH1 0x00
0000036a: PUSH1 0x40
0000036c: MLOAD
0000036d: DUP1
0000036e: DUP1
0000036f: PUSH2 0x0b2e
00000372: PUSH1 0x22
00000374: SWAP2
00000375: CODECOPY
00000376: PUSH1 0x22
00000378: ADD
00000379: SWAP1
0000037a: POP
0000037b: PUSH1 0x40
0000037d: MLOAD
0000037e: DUP1
0000037f: SWAP2
00000380: SUB
00000381: SWAP1
00000382: KECCAK256
00000383: SWAP1
00000384: POP
00000385: DUP1
00000386: SLOAD
00000387: SWAP2
00000388: POP
00000389: DUP2
0000038a: SWAP3
0000038b: POP
0000038c: POP
0000038d: POP
0000038e: SWAP1
0000038f: JUMP
00000390: JUMPDEST
00000391: PUSH1 0x00
00000393: DUP1
00000394: DUP3
00000395: MLOAD
00000396: PUSH1 0x20
00000398: DUP5
00000399: ADD
0000039a: DUP6
0000039b: PUSH2 0x2710
0000039e: GAS
0000039f: SUB
000003a0: DELEGATECALL
000003a1: RETURNDATASIZE
000003a2: PUSH1 0x40
000003a4: MLOAD
000003a5: DUP2
000003a6: PUSH1 0x00
000003a8: DUP3
000003a9: RETURNDATACOPY
000003aa: DUP3
000003ab: PUSH1 0x00
000003ad: DUP2
000003ae: EQ
000003af: PUSH2 0x03b6
000003b2: JUMPI
000003b3: DUP3
000003b4: DUP3
000003b5: RETURN
000003b6: JUMPDEST
000003b7: DUP3
000003b8: DUP3
000003b9: REVERT
000003ba: JUMPDEST
000003bb: PUSH1 0x00
000003bd: PUSH2 0x03c4
000003c0: PUSH2 0x0a08
000003c3: JUMP
000003c4: JUMPDEST
000003c5: SWAP1
000003c6: POP
000003c7: SWAP1
000003c8: JUMP
000003c9: JUMPDEST
000003ca: CALLER
000003cb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003e0: AND
000003e1: PUSH2 0x03e8
000003e4: PUSH2 0x0a08
000003e7: JUMP
000003e8: JUMPDEST
000003e9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003fe: AND
000003ff: EQ
00000400: PUSH2 0x0471
00000403: JUMPI
00000404: PUSH1 0x40
00000406: MLOAD
00000407: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000428: DUP2
00000429: MSTORE
0000042a: PUSH1 0x04
0000042c: ADD
0000042d: DUP1
0000042e: DUP1
0000042f: PUSH1 0x20
00000431: ADD
00000432: DUP3
00000433: DUP2
00000434: SUB
00000435: DUP3
00000436: MSTORE
00000437: PUSH1 0x09
00000439: DUP2
0000043a: MSTORE
0000043b: PUSH1 0x20
0000043d: ADD
0000043e: DUP1
0000043f: PUSH32 0x4e4f545f4f574e45520000000000000000000000000000000000000000000000
00000460: DUP2
00000461: MSTORE
00000462: POP
00000463: PUSH1 0x20
00000465: ADD
00000466: SWAP2
00000467: POP
00000468: POP
00000469: PUSH1 0x40
0000046b: MLOAD
0000046c: DUP1
0000046d: SWAP2
0000046e: SUB
0000046f: SWAP1
00000470: REVERT
00000471: JUMPDEST
00000472: PUSH1 0x00
00000474: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000489: AND
0000048a: DUP2
0000048b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004a0: AND
000004a1: EQ
000004a2: ISZERO
000004a3: PUSH2 0x0514
000004a6: JUMPI
000004a7: PUSH1 0x40
000004a9: MLOAD
000004aa: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000004cb: DUP2
000004cc: MSTORE
000004cd: PUSH1 0x04
000004cf: ADD
000004d0: DUP1
000004d1: DUP1
000004d2: PUSH1 0x20
000004d4: ADD
000004d5: DUP3
000004d6: DUP2
000004d7: SUB
000004d8: DUP3
000004d9: MSTORE
000004da: PUSH1 0x15
000004dc: DUP2
000004dd: MSTORE
000004de: PUSH1 0x20
000004e0: ADD
000004e1: DUP1
000004e2: PUSH32 0x494e56414c49445f50524f58595f414444524553530000000000000000000000
00000503: DUP2
00000504: MSTORE
00000505: POP
00000506: PUSH1 0x20
00000508: ADD
00000509: SWAP2
0000050a: POP
0000050b: POP
0000050c: PUSH1 0x40
0000050e: MLOAD
0000050f: DUP1
00000510: SWAP2
00000511: SUB
00000512: SWAP1
00000513: REVERT
00000514: JUMPDEST
00000515: PUSH2 0x051d
00000518: DUP2
00000519: PUSH2 0x0a51
0000051c: JUMP
0000051d: JUMPDEST
0000051e: PUSH2 0x0572
00000521: JUMPI
00000522: PUSH1 0x40
00000524: MLOAD
00000525: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000546: DUP2
00000547: MSTORE
00000548: PUSH1 0x04
0000054a: ADD
0000054b: DUP1
0000054c: DUP1
0000054d: PUSH1 0x20
0000054f: ADD
00000550: DUP3
00000551: DUP2
00000552: SUB
00000553: DUP3
00000554: MSTORE
00000555: PUSH1 0x25
00000557: DUP2
00000558: MSTORE
00000559: PUSH1 0x20
0000055b: ADD
0000055c: DUP1
0000055d: PUSH2 0x0b09
00000560: PUSH1 0x25
00000562: SWAP2
00000563: CODECOPY
00000564: PUSH1 0x40
00000566: ADD
00000567: SWAP2
00000568: POP
00000569: POP
0000056a: PUSH1 0x40
0000056c: MLOAD
0000056d: DUP1
0000056e: SWAP2
0000056f: SUB
00000570: SWAP1
00000571: REVERT
00000572: JUMPDEST
00000573: PUSH2 0x057a
00000576: PUSH2 0x0364
00000579: JUMP
0000057a: JUMPDEST
0000057b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000590: AND
00000591: DUP2
00000592: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005a7: AND
000005a8: PUSH32 0xd32d24edea94f55e932d9a008afc425a8561462d1b1f57bc6e508e9a6b9509e1
000005c9: PUSH1 0x40
000005cb: MLOAD
000005cc: PUSH1 0x40
000005ce: MLOAD
000005cf: DUP1
000005d0: SWAP2
000005d1: SUB
000005d2: SWAP1
000005d3: LOG3
000005d4: PUSH2 0x05dc
000005d7: DUP2
000005d8: PUSH2 0x0aa3
000005db: JUMP
000005dc: JUMPDEST
000005dd: POP
000005de: JUMP
000005df: JUMPDEST
000005e0: PUSH1 0x00
000005e2: PUSH1 0x02
000005e4: SWAP1
000005e5: POP
000005e6: SWAP1
000005e7: JUMP
000005e8: JUMPDEST
000005e9: PUSH1 0x00
000005eb: PUSH2 0x05f2
000005ee: PUSH2 0x0364
000005f1: JUMP
000005f2: JUMPDEST
000005f3: SWAP1
000005f4: POP
000005f5: SWAP1
000005f6: JUMP
000005f7: JUMPDEST
000005f8: CALLER
000005f9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000060e: AND
0000060f: PUSH2 0x0616
00000612: PUSH2 0x0a08
00000615: JUMP
00000616: JUMPDEST
00000617: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000062c: AND
0000062d: EQ
0000062e: PUSH2 0x069f
00000631: JUMPI
00000632: PUSH1 0x40
00000634: MLOAD
00000635: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000656: DUP2
00000657: MSTORE
00000658: PUSH1 0x04
0000065a: ADD
0000065b: DUP1
0000065c: DUP1
0000065d: PUSH1 0x20
0000065f: ADD
00000660: DUP3
00000661: DUP2
00000662: SUB
00000663: DUP3
00000664: MSTORE
00000665: PUSH1 0x09
00000667: DUP2
00000668: MSTORE
00000669: PUSH1 0x20
0000066b: ADD
0000066c: DUP1
0000066d: PUSH32 0x4e4f545f4f574e45520000000000000000000000000000000000000000000000
0000068e: DUP2
0000068f: MSTORE
00000690: POP
00000691: PUSH1 0x20
00000693: ADD
00000694: SWAP2
00000695: POP
00000696: POP
00000697: PUSH1 0x40
00000699: MLOAD
0000069a: DUP1
0000069b: SWAP2
0000069c: SUB
0000069d: SWAP1
0000069e: REVERT
0000069f: JUMPDEST
000006a0: PUSH2 0x06a8
000006a3: DUP3
000006a4: PUSH2 0x03c9
000006a7: JUMP
000006a8: JUMPDEST
000006a9: PUSH1 0x00
000006ab: PUSH1 0x60
000006ad: ADDRESS
000006ae: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006c3: AND
000006c4: CALLVALUE
000006c5: DUP5
000006c6: PUSH1 0x40
000006c8: MLOAD
000006c9: DUP1
000006ca: DUP3
000006cb: DUP1
000006cc: MLOAD
000006cd: SWAP1
000006ce: PUSH1 0x20
000006d0: ADD
000006d1: SWAP1
000006d2: DUP1
000006d3: DUP4
000006d4: DUP4
000006d5: JUMPDEST
000006d6: PUSH1 0x20
000006d8: DUP4
000006d9: LT
000006da: PUSH2 0x06f8
000006dd: JUMPI
000006de: DUP1
000006df: MLOAD
000006e0: DUP3
000006e1: MSTORE
000006e2: PUSH1 0x20
000006e4: DUP3
000006e5: ADD
000006e6: SWAP2
000006e7: POP
000006e8: PUSH1 0x20
000006ea: DUP2
000006eb: ADD
000006ec: SWAP1
000006ed: POP
000006ee: PUSH1 0x20
000006f0: DUP4
000006f1: SUB
000006f2: SWAP3
000006f3: POP
000006f4: PUSH2 0x06d5
000006f7: JUMP
000006f8: JUMPDEST
000006f9: PUSH1 0x01
000006fb: DUP4
000006fc: PUSH1 0x20
000006fe: SUB
000006ff: PUSH2 0x0100
00000702: EXP
00000703: SUB
00000704: DUP1
00000705: NOT
00000706: DUP3
00000707: MLOAD
00000708: AND
00000709: DUP2
0000070a: DUP5
0000070b: MLOAD
0000070c: AND
0000070d: DUP1
0000070e: DUP3
0000070f: OR
00000710: DUP6
00000711: MSTORE
00000712: POP
00000713: POP
00000714: POP
00000715: POP
00000716: POP
00000717: POP
00000718: SWAP1
00000719: POP
0000071a: ADD
0000071b: SWAP2
0000071c: POP
0000071d: POP
0000071e: PUSH1 0x00
00000720: PUSH1 0x40
00000722: MLOAD
00000723: DUP1
00000724: DUP4
00000725: SUB
00000726: DUP2
00000727: DUP6
00000728: DUP8
00000729: GAS
0000072a: CALL
0000072b: SWAP3
0000072c: POP
0000072d: POP
0000072e: POP
0000072f: RETURNDATASIZE
00000730: DUP1
00000731: PUSH1 0x00
00000733: DUP2
00000734: EQ
00000735: PUSH2 0x075a
00000738: JUMPI
00000739: PUSH1 0x40
0000073b: MLOAD
0000073c: SWAP2
0000073d: POP
0000073e: PUSH1 0x1f
00000740: NOT
00000741: PUSH1 0x3f
00000743: RETURNDATASIZE
00000744: ADD
00000745: AND
00000746: DUP3
00000747: ADD
00000748: PUSH1 0x40
0000074a: MSTORE
0000074b: RETURNDATASIZE
0000074c: DUP3
0000074d: MSTORE
0000074e: RETURNDATASIZE
0000074f: PUSH1 0x00
00000751: PUSH1 0x20
00000753: DUP5
00000754: ADD
00000755: RETURNDATACOPY
00000756: PUSH2 0x075f
00000759: JUMP
0000075a: JUMPDEST
0000075b: PUSH1 0x60
0000075d: SWAP2
0000075e: POP
0000075f: JUMPDEST
00000760: POP
00000761: SWAP2
00000762: POP
00000763: SWAP2
00000764: POP
00000765: DUP2
00000766: DUP2
00000767: SWAP1
00000768: PUSH2 0x080c
0000076b: JUMPI
0000076c: PUSH1 0x40
0000076e: MLOAD
0000076f: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000790: DUP2
00000791: MSTORE
00000792: PUSH1 0x04
00000794: ADD
00000795: DUP1
00000796: DUP1
00000797: PUSH1 0x20
00000799: ADD
0000079a: DUP3
0000079b: DUP2
0000079c: SUB
0000079d: DUP3
0000079e: MSTORE
0000079f: DUP4
000007a0: DUP2
000007a1: DUP2
000007a2: MLOAD
000007a3: DUP2
000007a4: MSTORE
000007a5: PUSH1 0x20
000007a7: ADD
000007a8: SWAP2
000007a9: POP
000007aa: DUP1
000007ab: MLOAD
000007ac: SWAP1
000007ad: PUSH1 0x20
000007af: ADD
000007b0: SWAP1
000007b1: DUP1
000007b2: DUP4
000007b3: DUP4
000007b4: PUSH1 0x00
000007b6: JUMPDEST
000007b7: DUP4
000007b8: DUP2
000007b9: LT
000007ba: ISZERO
000007bb: PUSH2 0x07d1
000007be: JUMPI
000007bf: DUP1
000007c0: DUP3
000007c1: ADD
000007c2: MLOAD
000007c3: DUP2
000007c4: DUP5
000007c5: ADD
000007c6: MSTORE
000007c7: PUSH1 0x20
000007c9: DUP2
000007ca: ADD
000007cb: SWAP1
000007cc: POP
000007cd: PUSH2 0x07b6
000007d0: JUMP
000007d1: JUMPDEST
000007d2: POP
000007d3: POP
000007d4: POP
000007d5: POP
000007d6: SWAP1
000007d7: POP
000007d8: SWAP1
000007d9: DUP2
000007da: ADD
000007db: SWAP1
000007dc: PUSH1 0x1f
000007de: AND
000007df: DUP1
000007e0: ISZERO
000007e1: PUSH2 0x07fe
000007e4: JUMPI
000007e5: DUP1
000007e6: DUP3
000007e7: SUB
000007e8: DUP1
000007e9: MLOAD
000007ea: PUSH1 0x01
000007ec: DUP4
000007ed: PUSH1 0x20
000007ef: SUB
000007f0: PUSH2 0x0100
000007f3: EXP
000007f4: SUB
000007f5: NOT
000007f6: AND
000007f7: DUP2
000007f8: MSTORE
000007f9: PUSH1 0x20
000007fb: ADD
000007fc: SWAP2
000007fd: POP
000007fe: JUMPDEST
000007ff: POP
00000800: SWAP3
00000801: POP
00000802: POP
00000803: POP
00000804: PUSH1 0x40
00000806: MLOAD
00000807: DUP1
00000808: SWAP2
00000809: SUB
0000080a: SWAP1
0000080b: REVERT
0000080c: JUMPDEST
0000080d: POP
0000080e: POP
0000080f: POP
00000810: POP
00000811: POP
00000812: JUMP
00000813: JUMPDEST
00000814: CALLER
00000815: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000082a: AND
0000082b: PUSH2 0x0832
0000082e: PUSH2 0x0a08
00000831: JUMP
00000832: JUMPDEST
00000833: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000848: AND
00000849: EQ
0000084a: PUSH2 0x08bb
0000084d: JUMPI
0000084e: PUSH1 0x40
00000850: MLOAD
00000851: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000872: DUP2
00000873: MSTORE
00000874: PUSH1 0x04
00000876: ADD
00000877: DUP1
00000878: DUP1
00000879: PUSH1 0x20
0000087b: ADD
0000087c: DUP3
0000087d: DUP2
0000087e: SUB
0000087f: DUP3
00000880: MSTORE
00000881: PUSH1 0x09
00000883: DUP2
00000884: MSTORE
00000885: PUSH1 0x20
00000887: ADD
00000888: DUP1
00000889: PUSH32 0x4e4f545f4f574e45520000000000000000000000000000000000000000000000
000008aa: DUP2
000008ab: MSTORE
000008ac: POP
000008ad: PUSH1 0x20
000008af: ADD
000008b0: SWAP2
000008b1: POP
000008b2: POP
000008b3: PUSH1 0x40
000008b5: MLOAD
000008b6: DUP1
000008b7: SWAP2
000008b8: SUB
000008b9: SWAP1
000008ba: REVERT
000008bb: JUMPDEST
000008bc: PUSH1 0x00
000008be: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008d3: AND
000008d4: DUP2
000008d5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008ea: AND
000008eb: EQ
000008ec: ISZERO
000008ed: PUSH2 0x095e
000008f0: JUMPI
000008f1: PUSH1 0x40
000008f3: MLOAD
000008f4: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000915: DUP2
00000916: MSTORE
00000917: PUSH1 0x04
00000919: ADD
0000091a: DUP1
0000091b: DUP1
0000091c: PUSH1 0x20
0000091e: ADD
0000091f: DUP3
00000920: DUP2
00000921: SUB
00000922: DUP3
00000923: MSTORE
00000924: PUSH1 0x0c
00000926: DUP2
00000927: MSTORE
00000928: PUSH1 0x20
0000092a: ADD
0000092b: DUP1
0000092c: PUSH32 0x5a45524f5f414444524553530000000000000000000000000000000000000000
0000094d: DUP2
0000094e: MSTORE
0000094f: POP
00000950: PUSH1 0x20
00000952: ADD
00000953: SWAP2
00000954: POP
00000955: POP
00000956: PUSH1 0x40
00000958: MLOAD
00000959: DUP1
0000095a: SWAP2
0000095b: SUB
0000095c: SWAP1
0000095d: REVERT
0000095e: JUMPDEST
0000095f: PUSH32 0xdbe5fd65bcdbae152f24ab660ea68e72b4d4705b57b16e0caae994e214680ee2
00000980: DUP2
00000981: PUSH2 0x0988
00000984: PUSH2 0x0a08
00000987: JUMP
00000988: JUMPDEST
00000989: PUSH1 0x40
0000098b: MLOAD
0000098c: DUP1
0000098d: DUP4
0000098e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009a3: AND
000009a4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009b9: AND
000009ba: DUP2
000009bb: MSTORE
000009bc: PUSH1 0x20
000009be: ADD
000009bf: DUP3
000009c0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009d5: AND
000009d6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009eb: AND
000009ec: DUP2
000009ed: MSTORE
000009ee: PUSH1 0x20
000009f0: ADD
000009f1: SWAP3
000009f2: POP
000009f3: POP
000009f4: POP
000009f5: PUSH1 0x40
000009f7: MLOAD
000009f8: DUP1
000009f9: SWAP2
000009fa: SUB
000009fb: SWAP1
000009fc: LOG1
000009fd: PUSH2 0x0a05
00000a00: DUP2
00000a01: PUSH2 0x0ac7
00000a04: JUMP
00000a05: JUMPDEST
00000a06: POP
00000a07: JUMP
00000a08: JUMPDEST
00000a09: PUSH1 0x00
00000a0b: DUP1
00000a0c: PUSH1 0x00
00000a0e: PUSH1 0x40
00000a10: MLOAD
00000a11: DUP1
00000a12: DUP1
00000a13: PUSH32 0x6d617469632e6e6574776f726b2e70726f78792e6f776e657200000000000000
00000a34: DUP2
00000a35: MSTORE
00000a36: POP
00000a37: PUSH1 0x19
00000a39: ADD
00000a3a: SWAP1
00000a3b: POP
00000a3c: PUSH1 0x40
00000a3e: MLOAD
00000a3f: DUP1
00000a40: SWAP2
00000a41: SUB
00000a42: SWAP1
00000a43: KECCAK256
00000a44: SWAP1
00000a45: POP
00000a46: DUP1
00000a47: SLOAD
00000a48: SWAP2
00000a49: POP
00000a4a: DUP2
00000a4b: SWAP3
00000a4c: POP
00000a4d: POP
00000a4e: POP
00000a4f: SWAP1
00000a50: JUMP
00000a51: JUMPDEST
00000a52: PUSH1 0x00
00000a54: DUP1
00000a55: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a6a: AND
00000a6b: DUP3
00000a6c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a81: AND
00000a82: EQ
00000a83: ISZERO
00000a84: PUSH2 0x0a90
00000a87: JUMPI
00000a88: PUSH1 0x00
00000a8a: SWAP1
00000a8b: POP
00000a8c: PUSH2 0x0a9e
00000a8f: JUMP
00000a90: JUMPDEST
00000a91: PUSH1 0x00
00000a93: DUP3
00000a94: EXTCODESIZE
00000a95: SWAP1
00000a96: POP
00000a97: PUSH1 0x00
00000a99: DUP2
00000a9a: GT
00000a9b: SWAP2
00000a9c: POP
00000a9d: POP
00000a9e: JUMPDEST
00000a9f: SWAP2
00000aa0: SWAP1
00000aa1: POP
00000aa2: JUMP
00000aa3: JUMPDEST
00000aa4: PUSH1 0x00
00000aa6: PUSH1 0x40
00000aa8: MLOAD
00000aa9: DUP1
00000aaa: DUP1
00000aab: PUSH2 0x0b2e
00000aae: PUSH1 0x22
00000ab0: SWAP2
00000ab1: CODECOPY
00000ab2: PUSH1 0x22
00000ab4: ADD
00000ab5: SWAP1
00000ab6: POP
00000ab7: PUSH1 0x40
00000ab9: MLOAD
00000aba: DUP1
00000abb: SWAP2
00000abc: SUB
00000abd: SWAP1
00000abe: KECCAK256
00000abf: SWAP1
00000ac0: POP
00000ac1: DUP2
00000ac2: DUP2
00000ac3: SSTORE
00000ac4: POP
00000ac5: POP
00000ac6: JUMP
00000ac7: JUMPDEST
00000ac8: PUSH1 0x00
00000aca: PUSH1 0x40
00000acc: MLOAD
00000acd: DUP1
00000ace: DUP1
00000acf: PUSH32 0x6d617469632e6e6574776f726b2e70726f78792e6f776e657200000000000000
00000af0: DUP2
00000af1: MSTORE
00000af2: POP
00000af3: PUSH1 0x19
00000af5: ADD
00000af6: SWAP1
00000af7: POP
00000af8: PUSH1 0x40
00000afa: MLOAD
00000afb: DUP1
00000afc: SWAP2
00000afd: SUB
00000afe: SWAP1
00000aff: KECCAK256
00000b00: SWAP1
00000b01: POP
00000b02: DUP2
00000b03: DUP2
00000b04: SSTORE
00000b05: POP
00000b06: POP
00000b07: JUMP
00000b08: INVALID
00000b09: DIFFICULTY
00000b0a: GASLIMIT
00000b0b: MSTORE8
00000b0c: SLOAD
00000b0d: BLOBHASH
00000b0e: UNKNOWN(0x4E)
00000b0f: COINBASE
00000b10: SLOAD
00000b11: BLOBHASH
00000b12: UNKNOWN(0x4F)
00000b13: UNKNOWN(0x4E)
00000b14: PUSH0
00000b15: COINBASE
00000b16: DIFFICULTY
00000b17: DIFFICULTY
00000b18: MSTORE
00000b19: GASLIMIT
00000b1a: MSTORE8
00000b1b: MSTORE8
00000b1c: PUSH0
00000b1d: BLOBHASH
00000b1e: MSTORE8
00000b1f: PUSH0
00000b20: UNKNOWN(0x4E)
00000b21: UNKNOWN(0x4F)
00000b22: SLOAD
00000b23: PUSH0
00000b24: COINBASE
00000b25: PUSH0
00000b26: NUMBER
00000b27: UNKNOWN(0x4F)
00000b28: UNKNOWN(0x4E)
00000b29: SLOAD
00000b2a: MSTORE
00000b2b: COINBASE
00000b2c: NUMBER
00000b2d: SLOAD
00000b2e: PUSH14 0x617469632e6e6574776f726b2e70
00000b3d: PUSH19 0x6f78792e696d706c656d656e746174696f6ea2
00000b51: PUSH5 0x6970667358
00000b57: UNKNOWN(0x22)
00000b58: SLT
00000b59: KECCAK256
00000b5a: SELFBALANCE
00000b5b: GASPRICE
00000b5c: UNKNOWN(0xDD)
00000b5d: UNKNOWN(0xC2)
00000b5e: UNKNOWN(0xDF)
00000b5f: UNKNOWN(0xD8)
00000b60: STOP
00000b61: UNKNOWN(0xF9)
00000b62: UNKNOWN(0xBD)
00000b63: OR
00000b64: MLOAD
00000b65: SIGNEXTEND
00000b66: CALL
00000b67: CLZ
00000b68: UNKNOWN(0xEF)
00000b69: TIMESTAMP
00000b6a: UNKNOWN(0xD9)
00000b6b: UNKNOWN(0xDD)
00000b6c: UNKNOWN(0xB7)
00000b6d: PUSH9 0x20db4dc99c4a0e72a9
00000b77: MUL
00000b78: BALANCE
00000b79: PUSH23

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0xd0416521cbd9cdce3dcd66879dab0209c5463a7374ed437ab54c0f7dd4f551ee validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "unknown", "attempts": 72, "trace_id": "0xd0416521cbd9cdce3dcd66879dab0209c5463a7374ed437ab54c0f7dd4f551ee", "confirmed": false, "trace_mode": "callTracer", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x025313a2", "selector": "0x025313a2", "calldata_variants": [ "0x025313a2", "0x025313a20000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x025b22bc", "selector": "0x025b22bc", "calldata_variants": [ "0x025b22bc", "0x025b22bc0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4555d5c9", "selector": "0x4555d5c9", "calldata_variants": [ "0x4555d5c9", "0x4555d5c90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x5c60da1b", "selector": "0x5c60da1b", "calldata_variants": [ "0x5c60da1b", "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd88ca2c8", "selector": "0xd88ca2c8", "calldata_variants": [ "0xd88ca2c8", "0xd88ca2c80000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf1739cae", "selector": "0xf1739cae", "calldata_variants": [ "0xf1739cae", "0xf1739cae0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 928, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 1, "untrusted_delegatecall_count": 1 }
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x43772aba777a11d509f6e91eb2abe1edbabd303a178f4781275ce96185f76855 call_targets: 0x8484ef722627bf18ca5ae6bcf031c23e6e922b30 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x43772aba777a11d509f6e91eb2abe1edbabd303a178f4781275ce96185f76855", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x8484ef722627bf18ca5ae6bcf031c23e6e922b30" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x025313a2", "selector": "0x025313a2", "calldata_variants": [ "0x025313a2", "0x025313a20000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x025b22bc", "selector": "0x025b22bc", "calldata_variants": [ "0x025b22bc", "0x025b22bc0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4555d5c9", "selector": "0x4555d5c9", "calldata_variants": [ "0x4555d5c9", "0x4555d5c90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x5c60da1b", "selector": "0x5c60da1b", "calldata_variants": [ "0x5c60da1b", "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd88ca2c8", "selector": "0xd88ca2c8", "calldata_variants": [ "0xd88ca2c8", "0xd88ca2c80000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf1739cae", "selector": "0xf1739cae", "calldata_variants": [ "0xf1739cae", "0xf1739cae0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1834, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 2918, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 2, "guards_detected": [], "untrusted_call_count": 2 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x43772aba777a11d509f6e91eb2abe1edbabd303a178f4781275ce96185f76855 call_targets: 0x8484ef722627bf18ca5ae6bcf031c23e6e922b30 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x43772aba777a11d509f6e91eb2abe1edbabd303a178f4781275ce96185f76855", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x8484ef722627bf18ca5ae6bcf031c23e6e922b30" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x025313a2", "selector": "0x025313a2", "calldata_variants": [ "0x025313a2", "0x025313a20000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x025b22bc", "selector": "0x025b22bc", "calldata_variants": [ "0x025b22bc", "0x025b22bc0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4555d5c9", "selector": "0x4555d5c9", "calldata_variants": [ "0x4555d5c9", "0x4555d5c90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x5c60da1b", "selector": "0x5c60da1b", "calldata_variants": [ "0x5c60da1b", "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd88ca2c8", "selector": "0xd88ca2c8", "calldata_variants": [ "0xd88ca2c8", "0xd88ca2c80000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf1739cae", "selector": "0xf1739cae", "calldata_variants": [ "0xf1739cae", "0xf1739cae0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1834, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 2918, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 2, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

critical

upgradeability

detector

Untrusted DELEGATECALL target reachable

70

no

view

trace_id: 0xd0416521cbd9cdce3dcd66879dab0209c5463a7374ed437ab54c0f7dd4f551ee

validation_json

{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 72,
    "trace_id": "0xd0416521cbd9cdce3dcd66879dab0209c5463a7374ed437ab54c0f7dd4f551ee",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x025313a2",
            "selector": "0x025313a2",
            "calldata_variants": [
                "0x025313a2",
                "0x025313a20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x025b22bc",
            "selector": "0x025b22bc",
            "calldata_variants": [
                "0x025b22bc",
                "0x025b22bc0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4555d5c9",
            "selector": "0x4555d5c9",
            "calldata_variants": [
                "0x4555d5c9",
                "0x4555d5c90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd88ca2c8",
            "selector": "0xd88ca2c8",
            "calldata_variants": [
                "0xd88ca2c8",
                "0xd88ca2c80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf1739cae",
            "selector": "0xf1739cae",
            "calldata_variants": [
                "0xf1739cae",
                "0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 928,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x43772aba777a11d509f6e91eb2abe1edbabd303a178f4781275ce96185f76855

call_targets: 0x8484ef722627bf18ca5ae6bcf031c23e6e922b30

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x43772aba777a11d509f6e91eb2abe1edbabd303a178f4781275ce96185f76855",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8484ef722627bf18ca5ae6bcf031c23e6e922b30"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x025313a2",
            "selector": "0x025313a2",
            "calldata_variants": [
                "0x025313a2",
                "0x025313a20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x025b22bc",
            "selector": "0x025b22bc",
            "calldata_variants": [
                "0x025b22bc",
                "0x025b22bc0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4555d5c9",
            "selector": "0x4555d5c9",
            "calldata_variants": [
                "0x4555d5c9",
                "0x4555d5c90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd88ca2c8",
            "selector": "0xd88ca2c8",
            "calldata_variants": [
                "0xd88ca2c8",
                "0xd88ca2c80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf1739cae",
            "selector": "0xf1739cae",
            "calldata_variants": [
                "0xf1739cae",
                "0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1834,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2918,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}

high

other

detector

ETH value transfer possible

55

no

view

trace_id: 0x43772aba777a11d509f6e91eb2abe1edbabd303a178f4781275ce96185f76855

call_targets: 0x8484ef722627bf18ca5ae6bcf031c23e6e922b30

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x43772aba777a11d509f6e91eb2abe1edbabd303a178f4781275ce96185f76855",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8484ef722627bf18ca5ae6bcf031c23e6e922b30"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x025313a2",
            "selector": "0x025313a2",
            "calldata_variants": [
                "0x025313a2",
                "0x025313a20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x025b22bc",
            "selector": "0x025b22bc",
            "calldata_variants": [
                "0x025b22bc",
                "0x025b22bc0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4555d5c9",
            "selector": "0x4555d5c9",
            "calldata_variants": [
                "0x4555d5c9",
                "0x4555d5c90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd88ca2c8",
            "selector": "0xd88ca2c8",
            "calldata_variants": [
                "0xd88ca2c8",
                "0xd88ca2c80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf1739cae",
            "selector": "0xf1739cae",
            "calldata_variants": [
                "0xf1739cae",
                "0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1834,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2918,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}