Analysis Run

019b3844-96f1-73ed-9706-eb1fc581a4fb

complete

Chain ID

1

Address

0x0771cb048263035870616412d7744e3bbf82befd

Block Number

—

Created

Fri, Dec 19, 2025 8:19 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
13633	artifact.fetch	complete	1 / 3	4 months ago
13634	tool.cast_disasm	complete	1 / 3	4 months ago
56929	analysis.bundle	complete	1 / 3	2 weeks ago
56930	capability.graph	complete	1 / 3	2 weeks ago
56931	detector.run	complete	1 / 3	2 weeks ago
56932	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

4

EXT*/BALANCE

0

Total opcodes

613

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x00ab
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x4089b170
00000019: GT
0000001a: PUSH2 0x0064
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x4089b170
00000024: EQ
00000025: PUSH2 0x0158
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8b9d1207
0000002f: EQ
00000030: PUSH2 0x016d
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x8da5cb5b
0000003a: EQ
0000003b: PUSH2 0x0182
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0x9eea4a3a
00000045: EQ
00000046: PUSH2 0x0197
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0xdf41c182
00000050: EQ
00000051: PUSH2 0x01ac
00000054: JUMPI
00000055: DUP1
00000056: PUSH4 0xedfcee36
0000005b: EQ
0000005c: PUSH2 0x01c1
0000005f: JUMPI
00000060: PUSH2 0x00b2
00000063: JUMP
00000064: JUMPDEST
00000065: DUP1
00000066: PUSH4 0x138eeac2
0000006b: EQ
0000006c: PUSH2 0x00b7
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0x1e38046c
00000076: EQ
00000077: PUSH2 0x00de
0000007a: JUMPI
0000007b: DUP1
0000007c: PUSH4 0x2277d1bd
00000081: EQ
00000082: PUSH2 0x010f
00000085: JUMPI
00000086: DUP1
00000087: PUSH4 0x3254723e
0000008c: EQ
0000008d: PUSH2 0x0119
00000090: JUMPI
00000091: DUP1
00000092: PUSH4 0x325a34a1
00000097: EQ
00000098: PUSH2 0x012e
0000009b: JUMPI
0000009c: DUP1
0000009d: PUSH4 0x3a36399e
000000a2: EQ
000000a3: PUSH2 0x0143
000000a6: JUMPI
000000a7: PUSH2 0x00b2
000000aa: JUMP
000000ab: JUMPDEST
000000ac: CALLDATASIZE
000000ad: PUSH2 0x00b2
000000b0: JUMPI
000000b1: STOP
000000b2: JUMPDEST
000000b3: PUSH1 0x00
000000b5: DUP1
000000b6: REVERT
000000b7: JUMPDEST
000000b8: CALLVALUE
000000b9: DUP1
000000ba: ISZERO
000000bb: PUSH2 0x00c3
000000be: JUMPI
000000bf: PUSH1 0x00
000000c1: DUP1
000000c2: REVERT
000000c3: JUMPDEST
000000c4: POP
000000c5: PUSH2 0x00cc
000000c8: PUSH2 0x01e7
000000cb: JUMP
000000cc: JUMPDEST
000000cd: PUSH1 0x40
000000cf: DUP1
000000d0: MLOAD
000000d1: SWAP2
000000d2: DUP3
000000d3: MSTORE
000000d4: MLOAD
000000d5: SWAP1
000000d6: DUP2
000000d7: SWAP1
000000d8: SUB
000000d9: PUSH1 0x20
000000db: ADD
000000dc: SWAP1
000000dd: RETURN
000000de: JUMPDEST
000000df: CALLVALUE
000000e0: DUP1
000000e1: ISZERO
000000e2: PUSH2 0x00ea
000000e5: JUMPI
000000e6: PUSH1 0x00
000000e8: DUP1
000000e9: REVERT
000000ea: JUMPDEST
000000eb: POP
000000ec: PUSH2 0x00f3
000000ef: PUSH2 0x01ed
000000f2: JUMP
000000f3: JUMPDEST
000000f4: PUSH1 0x40
000000f6: DUP1
000000f7: MLOAD
000000f8: PUSH1 0x01
000000fa: PUSH1 0x01
000000fc: PUSH1 0xa0
000000fe: SHL
000000ff: SUB
00000100: SWAP1
00000101: SWAP3
00000102: AND
00000103: DUP3
00000104: MSTORE
00000105: MLOAD
00000106: SWAP1
00000107: DUP2
00000108: SWAP1
00000109: SUB
0000010a: PUSH1 0x20
0000010c: ADD
0000010d: SWAP1
0000010e: RETURN
0000010f: JUMPDEST
00000110: PUSH2 0x0117
00000113: PUSH2 0x01fc
00000116: JUMP
00000117: JUMPDEST
00000118: STOP
00000119: JUMPDEST
0000011a: CALLVALUE
0000011b: DUP1
0000011c: ISZERO
0000011d: PUSH2 0x0125
00000120: JUMPI
00000121: PUSH1 0x00
00000123: DUP1
00000124: REVERT
00000125: JUMPDEST
00000126: POP
00000127: PUSH2 0x00cc
0000012a: PUSH2 0x02c8
0000012d: JUMP
0000012e: JUMPDEST
0000012f: CALLVALUE
00000130: DUP1
00000131: ISZERO
00000132: PUSH2 0x013a
00000135: JUMPI
00000136: PUSH1 0x00
00000138: DUP1
00000139: REVERT
0000013a: JUMPDEST
0000013b: POP
0000013c: PUSH2 0x00cc
0000013f: PUSH2 0x02ce
00000142: JUMP
00000143: JUMPDEST
00000144: CALLVALUE
00000145: DUP1
00000146: ISZERO
00000147: PUSH2 0x014f
0000014a: JUMPI
0000014b: PUSH1 0x00
0000014d: DUP1
0000014e: REVERT
0000014f: JUMPDEST
00000150: POP
00000151: PUSH2 0x00f3
00000154: PUSH2 0x02d4
00000157: JUMP
00000158: JUMPDEST
00000159: CALLVALUE
0000015a: DUP1
0000015b: ISZERO
0000015c: PUSH2 0x0164
0000015f: JUMPI
00000160: PUSH1 0x00
00000162: DUP1
00000163: REVERT
00000164: JUMPDEST
00000165: POP
00000166: PUSH2 0x00cc
00000169: PUSH2 0x02e3
0000016c: JUMP
0000016d: JUMPDEST
0000016e: CALLVALUE
0000016f: DUP1
00000170: ISZERO
00000171: PUSH2 0x0179
00000174: JUMPI
00000175: PUSH1 0x00
00000177: DUP1
00000178: REVERT
00000179: JUMPDEST
0000017a: POP
0000017b: PUSH2 0x00cc
0000017e: PUSH2 0x02ed
00000181: JUMP
00000182: JUMPDEST
00000183: CALLVALUE
00000184: DUP1
00000185: ISZERO
00000186: PUSH2 0x018e
00000189: JUMPI
0000018a: PUSH1 0x00
0000018c: DUP1
0000018d: REVERT
0000018e: JUMPDEST
0000018f: POP
00000190: PUSH2 0x00f3
00000193: PUSH2 0x02f3
00000196: JUMP
00000197: JUMPDEST
00000198: CALLVALUE
00000199: DUP1
0000019a: ISZERO
0000019b: PUSH2 0x01a3
0000019e: JUMPI
0000019f: PUSH1 0x00
000001a1: DUP1
000001a2: REVERT
000001a3: JUMPDEST
000001a4: POP
000001a5: PUSH2 0x00f3
000001a8: PUSH2 0x0302
000001ab: JUMP
000001ac: JUMPDEST
000001ad: CALLVALUE
000001ae: DUP1
000001af: ISZERO
000001b0: PUSH2 0x01b8
000001b3: JUMPI
000001b4: PUSH1 0x00
000001b6: DUP1
000001b7: REVERT
000001b8: JUMPDEST
000001b9: POP
000001ba: PUSH2 0x00cc
000001bd: PUSH2 0x0311
000001c0: JUMP
000001c1: JUMPDEST
000001c2: PUSH2 0x0117
000001c5: PUSH1 0x04
000001c7: DUP1
000001c8: CALLDATASIZE
000001c9: SUB
000001ca: PUSH1 0x20
000001cc: DUP2
000001cd: LT
000001ce: ISZERO
000001cf: PUSH2 0x01d7
000001d2: JUMPI
000001d3: PUSH1 0x00
000001d5: DUP1
000001d6: REVERT
000001d7: JUMPDEST
000001d8: POP
000001d9: CALLDATALOAD
000001da: PUSH1 0x01
000001dc: PUSH1 0x01
000001de: PUSH1 0xa0
000001e0: SHL
000001e1: SUB
000001e2: AND
000001e3: PUSH2 0x0317
000001e6: JUMP
000001e7: JUMPDEST
000001e8: PUSH1 0x05
000001ea: SLOAD
000001eb: DUP2
000001ec: JUMP
000001ed: JUMPDEST
000001ee: PUSH1 0x02
000001f0: SLOAD
000001f1: PUSH1 0x01
000001f3: PUSH1 0x01
000001f5: PUSH1 0xa0
000001f7: SHL
000001f8: SUB
000001f9: AND
000001fa: DUP2
000001fb: JUMP
000001fc: JUMPDEST
000001fd: PUSH1 0x00
000001ff: SLOAD
00000200: PUSH1 0x04
00000202: SLOAD
00000203: PUSH1 0x01
00000205: PUSH1 0x01
00000207: PUSH1 0xa0
00000209: SHL
0000020a: SUB
0000020b: SWAP1
0000020c: SWAP2
0000020d: AND
0000020e: SWAP1
0000020f: PUSH2 0x08fc
00000212: SWAP1
00000213: PUSH1 0x64
00000215: SWAP1
00000216: CALLVALUE
00000217: MUL
00000218: DUP2
00000219: SWAP1
0000021a: DIV
0000021b: DIV
0000021c: SWAP1
0000021d: DUP2
0000021e: ISZERO
0000021f: MUL
00000220: SWAP1
00000221: PUSH1 0x40
00000223: MLOAD
00000224: PUSH1 0x00
00000226: PUSH1 0x40
00000228: MLOAD
00000229: DUP1
0000022a: DUP4
0000022b: SUB
0000022c: DUP2
0000022d: DUP6
0000022e: DUP9
0000022f: DUP9
00000230: CALL
00000231: SWAP4
00000232: POP
00000233: POP
00000234: POP
00000235: POP
00000236: PUSH2 0x023e
00000239: JUMPI
0000023a: PUSH1 0x00
0000023c: DUP1
0000023d: REVERT
0000023e: JUMPDEST
0000023f: PUSH1 0x01
00000241: SLOAD
00000242: PUSH1 0x05
00000244: SLOAD
00000245: PUSH1 0x40
00000247: MLOAD
00000248: PUSH1 0x01
0000024a: PUSH1 0x01
0000024c: PUSH1 0xa0
0000024e: SHL
0000024f: SUB
00000250: SWAP1
00000251: SWAP3
00000252: AND
00000253: SWAP2
00000254: PUSH1 0x64
00000256: CALLVALUE
00000257: SWAP1
00000258: SWAP3
00000259: MUL
0000025a: DUP3
0000025b: SWAP1
0000025c: DIV
0000025d: SWAP2
0000025e: SWAP1
0000025f: SWAP2
00000260: DIV
00000261: DUP1
00000262: ISZERO
00000263: PUSH2 0x08fc
00000266: MUL
00000267: SWAP2
00000268: PUSH1 0x00
0000026a: DUP2
0000026b: DUP2
0000026c: DUP2
0000026d: DUP6
0000026e: DUP9
0000026f: DUP9
00000270: CALL
00000271: SWAP4
00000272: POP
00000273: POP
00000274: POP
00000275: POP
00000276: PUSH2 0x027e
00000279: JUMPI
0000027a: PUSH1 0x00
0000027c: DUP1
0000027d: REVERT
0000027e: JUMPDEST
0000027f: PUSH1 0x02
00000281: SLOAD
00000282: PUSH1 0x06
00000284: SLOAD
00000285: PUSH1 0x40
00000287: MLOAD
00000288: PUSH1 0x01
0000028a: PUSH1 0x01
0000028c: PUSH1 0xa0
0000028e: SHL
0000028f: SUB
00000290: SWAP1
00000291: SWAP3
00000292: AND
00000293: SWAP2
00000294: PUSH1 0x64
00000296: CALLVALUE
00000297: SWAP1
00000298: SWAP3
00000299: MUL
0000029a: DUP3
0000029b: SWAP1
0000029c: DIV
0000029d: SWAP2
0000029e: SWAP1
0000029f: SWAP2
000002a0: DIV
000002a1: DUP1
000002a2: ISZERO
000002a3: PUSH2 0x08fc
000002a6: MUL
000002a7: SWAP2
000002a8: PUSH1 0x00
000002aa: DUP2
000002ab: DUP2
000002ac: DUP2
000002ad: DUP6
000002ae: DUP9
000002af: DUP9
000002b0: CALL
000002b1: SWAP4
000002b2: POP
000002b3: POP
000002b4: POP
000002b5: POP
000002b6: PUSH2 0x02be
000002b9: JUMPI
000002ba: PUSH1 0x00
000002bc: DUP1
000002bd: REVERT
000002be: JUMPDEST
000002bf: PUSH1 0x08
000002c1: DUP1
000002c2: SLOAD
000002c3: CALLVALUE
000002c4: ADD
000002c5: SWAP1
000002c6: SSTORE
000002c7: JUMP
000002c8: JUMPDEST
000002c9: PUSH1 0x04
000002cb: SLOAD
000002cc: DUP2
000002cd: JUMP
000002ce: JUMPDEST
000002cf: PUSH1 0x07
000002d1: SLOAD
000002d2: DUP2
000002d3: JUMP
000002d4: JUMPDEST
000002d5: PUSH1 0x00
000002d7: SLOAD
000002d8: PUSH1 0x01
000002da: PUSH1 0x01
000002dc: PUSH1 0xa0
000002de: SHL
000002df: SUB
000002e0: AND
000002e1: DUP2
000002e2: JUMP
000002e3: JUMPDEST
000002e4: PUSH1 0x08
000002e6: SLOAD
000002e7: PUSH1 0x07
000002e9: SLOAD
000002ea: ADD
000002eb: SWAP1
000002ec: JUMP
000002ed: JUMPDEST
000002ee: PUSH1 0x08
000002f0: SLOAD
000002f1: DUP2
000002f2: JUMP
000002f3: JUMPDEST
000002f4: PUSH1 0x03
000002f6: SLOAD
000002f7: PUSH1 0x01
000002f9: PUSH1 0x01
000002fb: PUSH1 0xa0
000002fd: SHL
000002fe: SUB
000002ff: AND
00000300: DUP2
00000301: JUMP
00000302: JUMPDEST
00000303: PUSH1 0x01
00000305: SLOAD
00000306: PUSH1 0x01
00000308: PUSH1 0x01
0000030a: PUSH1 0xa0
0000030c: SHL
0000030d: SUB
0000030e: AND
0000030f: DUP2
00000310: JUMP
00000311: JUMPDEST
00000312: PUSH1 0x06
00000314: SLOAD
00000315: DUP2
00000316: JUMP
00000317: JUMPDEST
00000318: PUSH1 0x03
0000031a: SLOAD
0000031b: PUSH1 0x01
0000031d: PUSH1 0x01
0000031f: PUSH1 0xa0
00000321: SHL
00000322: SUB
00000323: AND
00000324: CALLER
00000325: EQ
00000326: ISZERO
00000327: PUSH2 0x0357
0000032a: JUMPI
0000032b: PUSH1 0x40
0000032d: MLOAD
0000032e: PUSH1 0x01
00000330: PUSH1 0x01
00000332: PUSH1 0xa0
00000334: SHL
00000335: SUB
00000336: DUP3
00000337: AND
00000338: SWAP1
00000339: CALLVALUE
0000033a: DUP1
0000033b: ISZERO
0000033c: PUSH2 0x08fc
0000033f: MUL
00000340: SWAP2
00000341: PUSH1 0x00
00000343: DUP2
00000344: DUP2
00000345: DUP2
00000346: DUP6
00000347: DUP9
00000348: DUP9
00000349: CALL
0000034a: SWAP4
0000034b: POP
0000034c: POP
0000034d: POP
0000034e: POP
0000034f: PUSH2 0x0357
00000352: JUMPI
00000353: PUSH1 0x00
00000355: DUP1
00000356: REVERT
00000357: JUMPDEST
00000358: POP
00000359: JUMP
0000035a: INVALID
0000035b: LOG2
0000035c: PUSH5 0x6970667358
00000362: UNKNOWN(0x22)
00000363: SLT
00000364: KECCAK256
00000365: UNKNOWN(0x2F)
00000366: RETURNDATACOPY
00000367: PUSH24 0xcbc72b85cfdfbc7ef85a3bfe35bf94db473b7e7b9f5a2d35
00000380: CHAINID
00000381: SGT
00000382: CALLDATACOPY
00000383: UNKNOWN(0x4C)
00000384: UNKNOWN(0xB0)
00000385: PUSH5 0x736f6c6343
0000038b: STOP
0000038c: MOD
0000038d: MOD
0000038e: STOP
0000038f: CALLER

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x40779f3ba2689dc9346b5e3f20d3418a0dd45007d323679b37554babaeff9b5e call_targets: 0x0771cb048263035870616412d7744e3bbf82befd target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x40779f3ba2689dc9346b5e3f20d3418a0dd45007d323679b37554babaeff9b5e", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x0771cb048263035870616412d7744e3bbf82befd" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x4089b170", "selector": "0x4089b170", "calldata_variants": [ "0x4089b170", "0x4089b1700000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8b9d1207", "selector": "0x8b9d1207", "calldata_variants": [ "0x8b9d1207", "0x8b9d12070000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x9eea4a3a", "selector": "0x9eea4a3a", "calldata_variants": [ "0x9eea4a3a", "0x9eea4a3a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xdf41c182", "selector": "0xdf41c182", "calldata_variants": [ "0xdf41c182", "0xdf41c1820000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xedfcee36", "selector": "0xedfcee36", "calldata_variants": [ "0xedfcee36", "0xedfcee360000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x138eeac2", "selector": "0x138eeac2", "calldata_variants": [ "0x138eeac2", "0x138eeac20000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1e38046c", "selector": "0x1e38046c", "calldata_variants": [ "0x1e38046c", "0x1e38046c0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 560, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 624, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 688, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 4, "guards_detected": [], "untrusted_call_count": 4 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x40779f3ba2689dc9346b5e3f20d3418a0dd45007d323679b37554babaeff9b5e call_targets: 0x0771cb048263035870616412d7744e3bbf82befd target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x40779f3ba2689dc9346b5e3f20d3418a0dd45007d323679b37554babaeff9b5e", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x0771cb048263035870616412d7744e3bbf82befd" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x4089b170", "selector": "0x4089b170", "calldata_variants": [ "0x4089b170", "0x4089b1700000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8b9d1207", "selector": "0x8b9d1207", "calldata_variants": [ "0x8b9d1207", "0x8b9d12070000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x9eea4a3a", "selector": "0x9eea4a3a", "calldata_variants": [ "0x9eea4a3a", "0x9eea4a3a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xdf41c182", "selector": "0xdf41c182", "calldata_variants": [ "0xdf41c182", "0xdf41c1820000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xedfcee36", "selector": "0xedfcee36", "calldata_variants": [ "0xedfcee36", "0xedfcee360000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x138eeac2", "selector": "0x138eeac2", "calldata_variants": [ "0x138eeac2", "0x138eeac20000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1e38046c", "selector": "0x1e38046c", "calldata_variants": [ "0x1e38046c", "0x1e38046c0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 560, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 624, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 688, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 4, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x40779f3ba2689dc9346b5e3f20d3418a0dd45007d323679b37554babaeff9b5e

call_targets: 0x0771cb048263035870616412d7744e3bbf82befd

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x40779f3ba2689dc9346b5e3f20d3418a0dd45007d323679b37554babaeff9b5e",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0771cb048263035870616412d7744e3bbf82befd"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x4089b170",
            "selector": "0x4089b170",
            "calldata_variants": [
                "0x4089b170",
                "0x4089b1700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8b9d1207",
            "selector": "0x8b9d1207",
            "calldata_variants": [
                "0x8b9d1207",
                "0x8b9d12070000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9eea4a3a",
            "selector": "0x9eea4a3a",
            "calldata_variants": [
                "0x9eea4a3a",
                "0x9eea4a3a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xdf41c182",
            "selector": "0xdf41c182",
            "calldata_variants": [
                "0xdf41c182",
                "0xdf41c1820000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xedfcee36",
            "selector": "0xedfcee36",
            "calldata_variants": [
                "0xedfcee36",
                "0xedfcee360000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x138eeac2",
            "selector": "0x138eeac2",
            "calldata_variants": [
                "0x138eeac2",
                "0x138eeac20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1e38046c",
            "selector": "0x1e38046c",
            "calldata_variants": [
                "0x1e38046c",
                "0x1e38046c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 560,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 624,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 688,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 4,
    "guards_detected": [],
    "untrusted_call_count": 4
}