TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3844-9710-73f7-a35c-d3e4df8da050

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:19 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
13655 artifact.fetch complete 1 / 3 3 months ago
13656 tool.cast_disasm complete 1 / 3 3 months ago
56909 analysis.bundle complete 1 / 3 1 week ago
56910 capability.graph complete 1 / 3 1 week ago
56911 detector.run complete 1 / 3 1 week ago
56912 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
0
Total opcodes
1143
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x00b9
0000000c: JUMPI
0000000d: PUSH4 0xffffffff
00000012: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
00000030: PUSH1 0x00
00000032: CALLDATALOAD
00000033: DIV
00000034: AND
00000035: PUSH4 0x3659cfe6
0000003a: DUP2
0000003b: EQ
0000003c: PUSH2 0x0115
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x4fb2e45d
00000046: EQ
00000047: PUSH2 0x0137
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x5c60da1b
00000051: EQ
00000052: PUSH2 0x0157
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x715018a6
0000005c: EQ
0000005d: PUSH2 0x0182
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x79ba5097
00000067: EQ
00000068: PUSH2 0x0197
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x8da5cb5b
00000072: EQ
00000073: PUSH2 0x01ac
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xa6f9dae1
0000007d: EQ
0000007e: PUSH2 0x01c1
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xa8b38205
00000088: EQ
00000089: PUSH2 0x01e1
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xb9b8af0b
00000093: EQ
00000094: PUSH2 0x0203
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0xd4ee1d90
0000009e: EQ
0000009f: PUSH2 0x0225
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xe92e2c1b
000000a9: EQ
000000aa: PUSH2 0x023a
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0xf4954387
000000b4: EQ
000000b5: PUSH2 0x024f
000000b8: JUMPI
000000b9: JUMPDEST
000000ba: PUSH1 0x15
000000bc: SLOAD
000000bd: PUSH1 0x01
000000bf: PUSH1 0xa0
000000c1: PUSH1 0x02
000000c3: EXP
000000c4: SUB
000000c5: AND
000000c6: DUP1
000000c7: ISZERO
000000c8: ISZERO
000000c9: PUSH2 0x00f0
000000cc: JUMPI
000000cd: PUSH1 0x40
000000cf: MLOAD
000000d0: PUSH1 0xe5
000000d2: PUSH1 0x02
000000d4: EXP
000000d5: PUSH3 0x461bcd
000000d9: MUL
000000da: DUP2
000000db: MSTORE
000000dc: PUSH1 0x04
000000de: ADD
000000df: PUSH2 0x00e7
000000e2: SWAP1
000000e3: PUSH2 0x07e7
000000e6: JUMP
000000e7: JUMPDEST
000000e8: PUSH1 0x40
000000ea: MLOAD
000000eb: DUP1
000000ec: SWAP2
000000ed: SUB
000000ee: SWAP1
000000ef: REVERT
000000f0: JUMPDEST
000000f1: PUSH1 0x40
000000f3: MLOAD
000000f4: CALLDATASIZE
000000f5: PUSH1 0x00
000000f7: DUP3
000000f8: CALLDATACOPY
000000f9: PUSH1 0x00
000000fb: DUP1
000000fc: CALLDATASIZE
000000fd: DUP4
000000fe: DUP6
000000ff: GAS
00000100: DELEGATECALL
00000101: RETURNDATASIZE
00000102: DUP1
00000103: PUSH1 0x00
00000105: DUP5
00000106: RETURNDATACOPY
00000107: DUP2
00000108: DUP1
00000109: ISZERO
0000010a: PUSH2 0x0111
0000010d: JUMPI
0000010e: DUP2
0000010f: DUP5
00000110: RETURN
00000111: JUMPDEST
00000112: DUP2
00000113: DUP5
00000114: REVERT
00000115: JUMPDEST
00000116: CALLVALUE
00000117: DUP1
00000118: ISZERO
00000119: PUSH2 0x0121
0000011c: JUMPI
0000011d: PUSH1 0x00
0000011f: DUP1
00000120: REVERT
00000121: JUMPDEST
00000122: POP
00000123: PUSH2 0x0135
00000126: PUSH2 0x0130
00000129: CALLDATASIZE
0000012a: PUSH1 0x04
0000012c: PUSH2 0x0614
0000012f: JUMP
00000130: JUMPDEST
00000131: PUSH2 0x026f
00000134: JUMP
00000135: JUMPDEST
00000136: STOP
00000137: JUMPDEST
00000138: CALLVALUE
00000139: DUP1
0000013a: ISZERO
0000013b: PUSH2 0x0143
0000013e: JUMPI
0000013f: PUSH1 0x00
00000141: DUP1
00000142: REVERT
00000143: JUMPDEST
00000144: POP
00000145: PUSH2 0x0135
00000148: PUSH2 0x0152
0000014b: CALLDATASIZE
0000014c: PUSH1 0x04
0000014e: PUSH2 0x0614
00000151: JUMP
00000152: JUMPDEST
00000153: PUSH2 0x0354
00000156: JUMP
00000157: JUMPDEST
00000158: CALLVALUE
00000159: DUP1
0000015a: ISZERO
0000015b: PUSH2 0x0163
0000015e: JUMPI
0000015f: PUSH1 0x00
00000161: DUP1
00000162: REVERT
00000163: JUMPDEST
00000164: POP
00000165: PUSH2 0x016c
00000168: PUSH2 0x0425
0000016b: JUMP
0000016c: JUMPDEST
0000016d: PUSH1 0x40
0000016f: MLOAD
00000170: PUSH2 0x0179
00000173: SWAP2
00000174: SWAP1
00000175: PUSH2 0x07b5
00000178: JUMP
00000179: JUMPDEST
0000017a: PUSH1 0x40
0000017c: MLOAD
0000017d: DUP1
0000017e: SWAP2
0000017f: SUB
00000180: SWAP1
00000181: RETURN
00000182: JUMPDEST
00000183: CALLVALUE
00000184: DUP1
00000185: ISZERO
00000186: PUSH2 0x018e
00000189: JUMPI
0000018a: PUSH1 0x00
0000018c: DUP1
0000018d: REVERT
0000018e: JUMPDEST
0000018f: POP
00000190: PUSH2 0x0135
00000193: PUSH2 0x0434
00000196: JUMP
00000197: JUMPDEST
00000198: CALLVALUE
00000199: DUP1
0000019a: ISZERO
0000019b: PUSH2 0x01a3
0000019e: JUMPI
0000019f: PUSH1 0x00
000001a1: DUP1
000001a2: REVERT
000001a3: JUMPDEST
000001a4: POP
000001a5: PUSH2 0x0135
000001a8: PUSH2 0x0486
000001ab: JUMP
000001ac: JUMPDEST
000001ad: CALLVALUE
000001ae: DUP1
000001af: ISZERO
000001b0: PUSH2 0x01b8
000001b3: JUMPI
000001b4: PUSH1 0x00
000001b6: DUP1
000001b7: REVERT
000001b8: JUMPDEST
000001b9: POP
000001ba: PUSH2 0x016c
000001bd: PUSH2 0x04d2
000001c0: JUMP
000001c1: JUMPDEST
000001c2: CALLVALUE
000001c3: DUP1
000001c4: ISZERO
000001c5: PUSH2 0x01cd
000001c8: JUMPI
000001c9: PUSH1 0x00
000001cb: DUP1
000001cc: REVERT
000001cd: JUMPDEST
000001ce: POP
000001cf: PUSH2 0x0135
000001d2: PUSH2 0x01dc
000001d5: CALLDATASIZE
000001d6: PUSH1 0x04
000001d8: PUSH2 0x0614
000001db: JUMP
000001dc: JUMPDEST
000001dd: PUSH2 0x04e6
000001e0: JUMP
000001e1: JUMPDEST
000001e2: CALLVALUE
000001e3: DUP1
000001e4: ISZERO
000001e5: PUSH2 0x01ed
000001e8: JUMPI
000001e9: PUSH1 0x00
000001eb: DUP1
000001ec: REVERT
000001ed: JUMPDEST
000001ee: POP
000001ef: PUSH2 0x01f6
000001f2: PUSH2 0x0547
000001f5: JUMP
000001f6: JUMPDEST
000001f7: PUSH1 0x40
000001f9: MLOAD
000001fa: PUSH2 0x0179
000001fd: SWAP2
000001fe: SWAP1
000001ff: PUSH2 0x0827
00000202: JUMP
00000203: JUMPDEST
00000204: CALLVALUE
00000205: DUP1
00000206: ISZERO
00000207: PUSH2 0x020f
0000020a: JUMPI
0000020b: PUSH1 0x00
0000020d: DUP1
0000020e: REVERT
0000020f: JUMPDEST
00000210: POP
00000211: PUSH2 0x0218
00000214: PUSH2 0x054d
00000217: JUMP
00000218: JUMPDEST
00000219: PUSH1 0x40
0000021b: MLOAD
0000021c: PUSH2 0x0179
0000021f: SWAP2
00000220: SWAP1
00000221: PUSH2 0x07c9
00000224: JUMP
00000225: JUMPDEST
00000226: CALLVALUE
00000227: DUP1
00000228: ISZERO
00000229: PUSH2 0x0231
0000022c: JUMPI
0000022d: PUSH1 0x00
0000022f: DUP1
00000230: REVERT
00000231: JUMPDEST
00000232: POP
00000233: PUSH2 0x016c
00000236: PUSH2 0x056e
00000239: JUMP
0000023a: JUMPDEST
0000023b: CALLVALUE
0000023c: DUP1
0000023d: ISZERO
0000023e: PUSH2 0x0246
00000241: JUMPI
00000242: PUSH1 0x00
00000244: DUP1
00000245: REVERT
00000246: JUMPDEST
00000247: POP
00000248: PUSH2 0x01f6
0000024b: PUSH2 0x057d
0000024e: JUMP
0000024f: JUMPDEST
00000250: CALLVALUE
00000251: DUP1
00000252: ISZERO
00000253: PUSH2 0x025b
00000256: JUMPI
00000257: PUSH1 0x00
00000259: DUP1
0000025a: REVERT
0000025b: JUMPDEST
0000025c: POP
0000025d: PUSH2 0x0135
00000260: PUSH2 0x026a
00000263: CALLDATASIZE
00000264: PUSH1 0x04
00000266: PUSH2 0x063a
00000269: JUMP
0000026a: JUMPDEST
0000026b: PUSH2 0x0583
0000026e: JUMP
0000026f: JUMPDEST
00000270: PUSH1 0x13
00000272: SLOAD
00000273: PUSH2 0x0100
00000276: SWAP1
00000277: DIV
00000278: PUSH1 0x01
0000027a: PUSH1 0xa0
0000027c: PUSH1 0x02
0000027e: EXP
0000027f: SUB
00000280: AND
00000281: CALLER
00000282: EQ
00000283: PUSH2 0x02a1
00000286: JUMPI
00000287: PUSH1 0x40
00000289: MLOAD
0000028a: PUSH1 0xe5
0000028c: PUSH1 0x02
0000028e: EXP
0000028f: PUSH3 0x461bcd
00000293: MUL
00000294: DUP2
00000295: MSTORE
00000296: PUSH1 0x04
00000298: ADD
00000299: PUSH2 0x00e7
0000029c: SWAP1
0000029d: PUSH2 0x0807
000002a0: JUMP
000002a1: JUMPDEST
000002a2: PUSH1 0x01
000002a4: PUSH1 0xa0
000002a6: PUSH1 0x02
000002a8: EXP
000002a9: SUB
000002aa: DUP2
000002ab: AND
000002ac: ISZERO
000002ad: ISZERO
000002ae: PUSH2 0x02cc
000002b1: JUMPI
000002b2: PUSH1 0x40
000002b4: MLOAD
000002b5: PUSH1 0xe5
000002b7: PUSH1 0x02
000002b9: EXP
000002ba: PUSH3 0x461bcd
000002be: MUL
000002bf: DUP2
000002c0: MSTORE
000002c1: PUSH1 0x04
000002c3: ADD
000002c4: PUSH2 0x00e7
000002c7: SWAP1
000002c8: PUSH2 0x07d7
000002cb: JUMP
000002cc: JUMPDEST
000002cd: PUSH1 0x15
000002cf: SLOAD
000002d0: PUSH1 0x01
000002d2: PUSH1 0xa0
000002d4: PUSH1 0x02
000002d6: EXP
000002d7: SUB
000002d8: DUP3
000002d9: DUP2
000002da: AND
000002db: SWAP2
000002dc: AND
000002dd: EQ
000002de: ISZERO
000002df: PUSH2 0x02fd
000002e2: JUMPI
000002e3: PUSH1 0x40
000002e5: MLOAD
000002e6: PUSH1 0xe5
000002e8: PUSH1 0x02
000002ea: EXP
000002eb: PUSH3 0x461bcd
000002ef: MUL
000002f0: DUP2
000002f1: MSTORE
000002f2: PUSH1 0x04
000002f4: ADD
000002f5: PUSH2 0x00e7
000002f8: SWAP1
000002f9: PUSH2 0x0817
000002fc: JUMP
000002fd: JUMPDEST
000002fe: PUSH1 0x15
00000300: DUP1
00000301: SLOAD
00000302: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000317: NOT
00000318: AND
00000319: PUSH1 0x01
0000031b: PUSH1 0xa0
0000031d: PUSH1 0x02
0000031f: EXP
00000320: SUB
00000321: DUP4
00000322: AND
00000323: SWAP1
00000324: DUP2
00000325: OR
00000326: SWAP1
00000327: SWAP2
00000328: SSTORE
00000329: PUSH1 0x40
0000032b: MLOAD
0000032c: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
0000034d: SWAP1
0000034e: PUSH1 0x00
00000350: SWAP1
00000351: LOG2
00000352: POP
00000353: JUMP
00000354: JUMPDEST
00000355: PUSH1 0x13
00000357: SLOAD
00000358: PUSH2 0x0100
0000035b: SWAP1
0000035c: DIV
0000035d: PUSH1 0x01
0000035f: PUSH1 0xa0
00000361: PUSH1 0x02
00000363: EXP
00000364: SUB
00000365: AND
00000366: CALLER
00000367: EQ
00000368: PUSH2 0x0386
0000036b: JUMPI
0000036c: PUSH1 0x40
0000036e: MLOAD
0000036f: PUSH1 0xe5
00000371: PUSH1 0x02
00000373: EXP
00000374: PUSH3 0x461bcd
00000378: MUL
00000379: DUP2
0000037a: MSTORE
0000037b: PUSH1 0x04
0000037d: ADD
0000037e: PUSH2 0x00e7
00000381: SWAP1
00000382: PUSH2 0x0807
00000385: JUMP
00000386: JUMPDEST
00000387: PUSH1 0x01
00000389: PUSH1 0xa0
0000038b: PUSH1 0x02
0000038d: EXP
0000038e: SUB
0000038f: DUP2
00000390: AND
00000391: ISZERO
00000392: ISZERO
00000393: PUSH2 0x03b1
00000396: JUMPI
00000397: PUSH1 0x40
00000399: MLOAD
0000039a: PUSH1 0xe5
0000039c: PUSH1 0x02
0000039e: EXP
0000039f: PUSH3 0x461bcd
000003a3: MUL
000003a4: DUP2
000003a5: MSTORE
000003a6: PUSH1 0x04
000003a8: ADD
000003a9: PUSH2 0x00e7
000003ac: SWAP1
000003ad: PUSH2 0x07f7
000003b0: JUMP
000003b1: JUMPDEST
000003b2: PUSH1 0x13
000003b4: SLOAD
000003b5: PUSH1 0x40
000003b7: MLOAD
000003b8: PUSH1 0x01
000003ba: PUSH1 0xa0
000003bc: PUSH1 0x02
000003be: EXP
000003bf: SUB
000003c0: DUP1
000003c1: DUP5
000003c2: AND
000003c3: SWAP3
000003c4: PUSH2 0x0100
000003c7: SWAP1
000003c8: DIV
000003c9: AND
000003ca: SWAP1
000003cb: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
000003ec: SWAP1
000003ed: PUSH1 0x00
000003ef: SWAP1
000003f0: LOG3
000003f1: PUSH1 0x13
000003f3: DUP1
000003f4: SLOAD
000003f5: PUSH1 0x01
000003f7: PUSH1 0xa0
000003f9: PUSH1 0x02
000003fb: EXP
000003fc: SUB
000003fd: SWAP1
000003fe: SWAP3
000003ff: AND
00000400: PUSH2 0x0100
00000403: MUL
00000404: PUSH21 0xffffffffffffffffffffffffffffffffffffffff00
0000041a: NOT
0000041b: SWAP1
0000041c: SWAP3
0000041d: AND
0000041e: SWAP2
0000041f: SWAP1
00000420: SWAP2
00000421: OR
00000422: SWAP1
00000423: SSTORE
00000424: JUMP
00000425: JUMPDEST
00000426: PUSH1 0x15
00000428: SLOAD
00000429: PUSH1 0x01
0000042b: PUSH1 0xa0
0000042d: PUSH1 0x02
0000042f: EXP
00000430: SUB
00000431: AND
00000432: SWAP1
00000433: JUMP
00000434: JUMPDEST
00000435: PUSH1 0x13
00000437: SLOAD
00000438: PUSH2 0x0100
0000043b: SWAP1
0000043c: DIV
0000043d: PUSH1 0x01
0000043f: PUSH1 0xa0
00000441: PUSH1 0x02
00000443: EXP
00000444: SUB
00000445: AND
00000446: CALLER
00000447: EQ
00000448: PUSH2 0x0466
0000044b: JUMPI
0000044c: PUSH1 0x40
0000044e: MLOAD
0000044f: PUSH1 0xe5
00000451: PUSH1 0x02
00000453: EXP
00000454: PUSH3 0x461bcd
00000458: MUL
00000459: DUP2
0000045a: MSTORE
0000045b: PUSH1 0x04
0000045d: ADD
0000045e: PUSH2 0x00e7
00000461: SWAP1
00000462: PUSH2 0x0807
00000465: JUMP
00000466: JUMPDEST
00000467: PUSH1 0x13
00000469: DUP1
0000046a: SLOAD
0000046b: PUSH21 0xffffffffffffffffffffffffffffffffffffffff00
00000481: NOT
00000482: AND
00000483: SWAP1
00000484: SSTORE
00000485: JUMP
00000486: JUMPDEST
00000487: PUSH1 0x14
00000489: SLOAD
0000048a: PUSH1 0x01
0000048c: PUSH1 0xa0
0000048e: PUSH1 0x02
00000490: EXP
00000491: SUB
00000492: AND
00000493: CALLER
00000494: EQ
00000495: ISZERO
00000496: PUSH2 0x04d0
00000499: JUMPI
0000049a: PUSH1 0x14
0000049c: SLOAD
0000049d: PUSH1 0x13
0000049f: DUP1
000004a0: SLOAD
000004a1: PUSH1 0x01
000004a3: PUSH1 0xa0
000004a5: PUSH1 0x02
000004a7: EXP
000004a8: SUB
000004a9: SWAP1
000004aa: SWAP3
000004ab: AND
000004ac: PUSH2 0x0100
000004af: MUL
000004b0: PUSH21 0xffffffffffffffffffffffffffffffffffffffff00
000004c6: NOT
000004c7: SWAP1
000004c8: SWAP3
000004c9: AND
000004ca: SWAP2
000004cb: SWAP1
000004cc: SWAP2
000004cd: OR
000004ce: SWAP1
000004cf: SSTORE
000004d0: JUMPDEST
000004d1: JUMP
000004d2: JUMPDEST
000004d3: PUSH1 0x13
000004d5: SLOAD
000004d6: PUSH2 0x0100
000004d9: SWAP1
000004da: DIV
000004db: PUSH1 0x01
000004dd: PUSH1 0xa0
000004df: PUSH1 0x02
000004e1: EXP
000004e2: SUB
000004e3: AND
000004e4: DUP2
000004e5: JUMP
000004e6: JUMPDEST
000004e7: PUSH1 0x13
000004e9: SLOAD
000004ea: PUSH2 0x0100
000004ed: SWAP1
000004ee: DIV
000004ef: PUSH1 0x01
000004f1: PUSH1 0xa0
000004f3: PUSH1 0x02
000004f5: EXP
000004f6: SUB
000004f7: AND
000004f8: CALLER
000004f9: EQ
000004fa: PUSH2 0x0518
000004fd: JUMPI
000004fe: PUSH1 0x40
00000500: MLOAD
00000501: PUSH1 0xe5
00000503: PUSH1 0x02
00000505: EXP
00000506: PUSH3 0x461bcd
0000050a: MUL
0000050b: DUP2
0000050c: MSTORE
0000050d: PUSH1 0x04
0000050f: ADD
00000510: PUSH2 0x00e7
00000513: SWAP1
00000514: PUSH2 0x0807
00000517: JUMP
00000518: JUMPDEST
00000519: PUSH1 0x14
0000051b: DUP1
0000051c: SLOAD
0000051d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000532: NOT
00000533: AND
00000534: PUSH1 0x01
00000536: PUSH1 0xa0
00000538: PUSH1 0x02
0000053a: EXP
0000053b: SUB
0000053c: SWAP3
0000053d: SWAP1
0000053e: SWAP3
0000053f: AND
00000540: SWAP2
00000541: SWAP1
00000542: SWAP2
00000543: OR
00000544: SWAP1
00000545: SSTORE
00000546: JUMP
00000547: JUMPDEST
00000548: PUSH1 0x11
0000054a: SLOAD
0000054b: DUP2
0000054c: JUMP
0000054d: JUMPDEST
0000054e: PUSH1 0x14
00000550: SLOAD
00000551: PUSH21 0x010000000000000000000000000000000000000000
00000567: SWAP1
00000568: DIV
00000569: PUSH1 0xff
0000056b: AND
0000056c: DUP2
0000056d: JUMP
0000056e: JUMPDEST
0000056f: PUSH1 0x14
00000571: SLOAD
00000572: PUSH1 0x01
00000574: PUSH1 0xa0
00000576: PUSH1 0x02
00000578: EXP
00000579: SUB
0000057a: AND
0000057b: DUP2
0000057c: JUMP
0000057d: JUMPDEST
0000057e: PUSH1 0x12
00000580: SLOAD
00000581: DUP2
00000582: JUMP
00000583: JUMPDEST
00000584: PUSH1 0x13
00000586: SLOAD
00000587: PUSH2 0x0100
0000058a: SWAP1
0000058b: DIV
0000058c: PUSH1 0x01
0000058e: PUSH1 0xa0
00000590: PUSH1 0x02
00000592: EXP
00000593: SUB
00000594: AND
00000595: CALLER
00000596: EQ
00000597: PUSH2 0x05b5
0000059a: JUMPI
0000059b: PUSH1 0x40
0000059d: MLOAD
0000059e: PUSH1 0xe5
000005a0: PUSH1 0x02
000005a2: EXP
000005a3: PUSH3 0x461bcd
000005a7: MUL
000005a8: DUP2
000005a9: MSTORE
000005aa: PUSH1 0x04
000005ac: ADD
000005ad: PUSH2 0x00e7
000005b0: SWAP1
000005b1: PUSH2 0x0807
000005b4: JUMP
000005b5: JUMPDEST
000005b6: PUSH1 0x14
000005b8: DUP1
000005b9: SLOAD
000005ba: SWAP2
000005bb: ISZERO
000005bc: ISZERO
000005bd: PUSH21 0x010000000000000000000000000000000000000000
000005d3: MUL
000005d4: PUSH21 0xff0000000000000000000000000000000000000000
000005ea: NOT
000005eb: SWAP1
000005ec: SWAP3
000005ed: AND
000005ee: SWAP2
000005ef: SWAP1
000005f0: SWAP2
000005f1: OR
000005f2: SWAP1
000005f3: SSTORE
000005f4: JUMP
000005f5: JUMPDEST
000005f6: PUSH1 0x00
000005f8: PUSH2 0x0601
000005fb: DUP3
000005fc: CALLDATALOAD
000005fd: PUSH2 0x0835
00000600: JUMP
00000601: JUMPDEST
00000602: SWAP4
00000603: SWAP3
00000604: POP
00000605: POP
00000606: POP
00000607: JUMP
00000608: JUMPDEST
00000609: PUSH1 0x00
0000060b: PUSH2 0x0601
0000060e: DUP3
0000060f: CALLDATALOAD
00000610: PUSH2 0x0841
00000613: JUMP
00000614: JUMPDEST
00000615: PUSH1 0x00
00000617: PUSH1 0x20
00000619: DUP3
0000061a: DUP5
0000061b: SUB
0000061c: SLT
0000061d: ISZERO
0000061e: PUSH2 0x0626
00000621: JUMPI
00000622: PUSH1 0x00
00000624: DUP1
00000625: REVERT
00000626: JUMPDEST
00000627: PUSH1 0x00
00000629: PUSH2 0x0632
0000062c: DUP5
0000062d: DUP5
0000062e: PUSH2 0x05f5
00000631: JUMP
00000632: JUMPDEST
00000633: SWAP5
00000634: SWAP4
00000635: POP
00000636: POP
00000637: POP
00000638: POP
00000639: JUMP
0000063a: JUMPDEST
0000063b: PUSH1 0x00
0000063d: PUSH1 0x20
0000063f: DUP3
00000640: DUP5
00000641: SUB
00000642: SLT
00000643: ISZERO
00000644: PUSH2 0x064c
00000647: JUMPI
00000648: PUSH1 0x00
0000064a: DUP1
0000064b: REVERT
0000064c: JUMPDEST
0000064d: PUSH1 0x00
0000064f: PUSH2 0x0632
00000652: DUP5
00000653: DUP5
00000654: PUSH2 0x0608
00000657: JUMP
00000658: JUMPDEST
00000659: PUSH2 0x0661
0000065c: DUP2
0000065d: PUSH2 0x0835
00000660: JUMP
00000661: JUMPDEST
00000662: DUP3
00000663: MSTORE
00000664: POP
00000665: POP
00000666: JUMP
00000667: JUMPDEST
00000668: PUSH2 0x0661
0000066b: DUP2
0000066c: PUSH2 0x0841
0000066f: JUMP
00000670: JUMPDEST
00000671: PUSH1 0x21
00000673: DUP2
00000674: MSTORE
00000675: PUSH32 0x43616e6e6f74207570677261646520746f20696e76616c696420616464726573
00000696: PUSH1 0x20
00000698: DUP3
00000699: ADD
0000069a: MSTORE
0000069b: PUSH32 0x7300000000000000000000000000000000000000000000000000000000000000
000006bc: PUSH1 0x40
000006be: DUP3
000006bf: ADD
000006c0: MSTORE
000006c1: PUSH1 0x60
000006c3: ADD
000006c4: SWAP1
000006c5: JUMP
000006c6: JUMPDEST
000006c7: PUSH1 0x1f
000006c9: DUP2
000006ca: MSTORE
000006cb: PUSH32 0x696d706c656d656e746174696f6e20636f6e7472616374206e6f742073657400
000006ec: PUSH1 0x20
000006ee: DUP3
000006ef: ADD
000006f0: MSTORE
000006f1: PUSH1 0x40
000006f3: ADD
000006f4: SWAP1
000006f5: JUMP
000006f6: JUMPDEST
000006f7: PUSH1 0x1d
000006f9: DUP2
000006fa: MSTORE
000006fb: PUSH32 0x4e6577206f776e657220697320746865207a65726f2061646472657373000000
0000071c: PUSH1 0x20
0000071e: DUP3
0000071f: ADD
00000720: MSTORE
00000721: PUSH1 0x40
00000723: ADD
00000724: SWAP1
00000725: JUMP
00000726: JUMPDEST
00000727: PUSH1 0x09
00000729: DUP2
0000072a: MSTORE
0000072b: PUSH32 0x4e6f74206f776e65720000000000000000000000000000000000000000000000
0000074c: PUSH1 0x20
0000074e: DUP3
0000074f: ADD
00000750: MSTORE
00000751: PUSH1 0x40
00000753: ADD
00000754: SWAP1
00000755: JUMP
00000756: JUMPDEST
00000757: PUSH1 0x29
00000759: DUP2
0000075a: MSTORE
0000075b: PUSH32 0x43616e6e6f74207570677261646520746f207468652073616d6520696d706c65
0000077c: PUSH1 0x20
0000077e: DUP3
0000077f: ADD
00000780: MSTORE
00000781: PUSH32 0x6d656e746174696f6e0000000000000000000000000000000000000000000000
000007a2: PUSH1 0x40
000007a4: DUP3
000007a5: ADD
000007a6: MSTORE
000007a7: PUSH1 0x60
000007a9: ADD
000007aa: SWAP1
000007ab: JUMP
000007ac: JUMPDEST
000007ad: PUSH2 0x0661
000007b0: DUP2
000007b1: PUSH2 0x0846
000007b4: JUMP
000007b5: JUMPDEST
000007b6: PUSH1 0x20
000007b8: DUP2
000007b9: ADD
000007ba: PUSH2 0x07c3
000007bd: DUP3
000007be: DUP5
000007bf: PUSH2 0x0658
000007c2: JUMP
000007c3: JUMPDEST
000007c4: SWAP3
000007c5: SWAP2
000007c6: POP
000007c7: POP
000007c8: JUMP
000007c9: JUMPDEST
000007ca: PUSH1 0x20
000007cc: DUP2
000007cd: ADD
000007ce: PUSH2 0x07c3
000007d1: DUP3
000007d2: DUP5
000007d3: PUSH2 0x0667
000007d6: JUMP
000007d7: JUMPDEST
000007d8: PUSH1 0x20
000007da: DUP1
000007db: DUP3
000007dc: MSTORE
000007dd: DUP2
000007de: ADD
000007df: PUSH2 0x07c3
000007e2: DUP2
000007e3: PUSH2 0x0670
000007e6: JUMP
000007e7: JUMPDEST
000007e8: PUSH1 0x20
000007ea: DUP1
000007eb: DUP3
000007ec: MSTORE
000007ed: DUP2
000007ee: ADD
000007ef: PUSH2 0x07c3
000007f2: DUP2
000007f3: PUSH2 0x06c6
000007f6: JUMP
000007f7: JUMPDEST
000007f8: PUSH1 0x20
000007fa: DUP1
000007fb: DUP3
000007fc: MSTORE
000007fd: DUP2
000007fe: ADD
000007ff: PUSH2 0x07c3
00000802: DUP2
00000803: PUSH2 0x06f6
00000806: JUMP
00000807: JUMPDEST
00000808: PUSH1 0x20
0000080a: DUP1
0000080b: DUP3
0000080c: MSTORE
0000080d: DUP2
0000080e: ADD
0000080f: PUSH2 0x07c3
00000812: DUP2
00000813: PUSH2 0x0726
00000816: JUMP
00000817: JUMPDEST
00000818: PUSH1 0x20
0000081a: DUP1
0000081b: DUP3
0000081c: MSTORE
0000081d: DUP2
0000081e: ADD
0000081f: PUSH2 0x07c3
00000822: DUP2
00000823: PUSH2 0x0756
00000826: JUMP
00000827: JUMPDEST
00000828: PUSH1 0x20
0000082a: DUP2
0000082b: ADD
0000082c: PUSH2 0x07c3
0000082f: DUP3
00000830: DUP5
00000831: PUSH2 0x07ac
00000834: JUMP
00000835: JUMPDEST
00000836: PUSH1 0x01
00000838: PUSH1 0xa0
0000083a: PUSH1 0x02
0000083c: EXP
0000083d: SUB
0000083e: AND
0000083f: SWAP1
00000840: JUMP
00000841: JUMPDEST
00000842: ISZERO
00000843: ISZERO
00000844: SWAP1
00000845: JUMP
00000846: JUMPDEST
00000847: SWAP1
00000848: JUMP
00000849: STOP
0000084a: LOG2
0000084b: PUSH6 0x627a7a723058
00000852: KECCAK256
00000853: DIV
00000854: LOG0
00000855: STOP
00000856: TLOAD
00000857: SWAP11
00000858: SLT
00000859: SWAP13
0000085a: CALLER
0000085b: PUSH0
0000085c: BLOBHASH
0000085d: ADDMOD
0000085e: UNKNOWN(0x2C)
0000085f: UNKNOWN(0xEA)
00000860: NOT
00000861: UNKNOWN(0x21)
00000862: UNKNOWN(0xB0)
00000863: INVALID
00000864: SGT
00000865: LOG2
00000866: UNKNOWN(0xC3)
00000867: EQ
00000868: UNKNOWN(0xD3)
00000869: MLOAD
0000086a: UNKNOWN(0x1F)
0000086b: UNKNOWN(0x28)
0000086c: BLOBBASEFEE
0000086d: PUSH16 0x9bd263c5ff6c6578706572696d656e74
0000087e: PUSH2 0x6cf5
00000881: STOP
00000882: CALLDATACOPY
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0xcb13d937e9d45195b88fa8ef2c9ef369806ee6d05869342f43253593e1907983
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 144,
    "trace_id": "0xcb13d937e9d45195b88fa8ef2c9ef369806ee6d05869342f43253593e1907983",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4fb2e45d",
            "selector": "0x4fb2e45d",
            "calldata_variants": [
                "0x4fb2e45d",
                "0x4fb2e45d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x715018a6",
            "selector": "0x715018a6",
            "calldata_variants": [
                "0x715018a6",
                "0x715018a60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x79ba5097",
            "selector": "0x79ba5097",
            "calldata_variants": [
                "0x79ba5097",
                "0x79ba50970000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa6f9dae1",
            "selector": "0xa6f9dae1",
            "calldata_variants": [
                "0xa6f9dae1",
                "0xa6f9dae10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa8b38205",
            "selector": "0xa8b38205",
            "calldata_variants": [
                "0xa8b38205",
                "0xa8b382050000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 256,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}