TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3844-980e-70a5-9cb1-64c3d1be2065

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:19 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
13841 artifact.fetch complete 1 / 3 3 months ago
13842 tool.cast_disasm complete 1 / 3 3 months ago
85380 analysis.bundle complete 1 / 3 1 week ago
85381 capability.graph complete 1 / 3 1 week ago
85382 detector.run complete 1 / 3 1 week ago
85383 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
1
Total opcodes
834
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x004a
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x3659cfe6
00000019: EQ
0000001a: PUSH2 0x0054
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x4f1ef286
00000024: EQ
00000025: PUSH2 0x0087
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x5c60da1b
0000002f: EQ
00000030: PUSH2 0x0107
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x8f283970
0000003a: EQ
0000003b: PUSH2 0x0138
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf851a440
00000045: EQ
00000046: PUSH2 0x016b
00000049: JUMPI
0000004a: JUMPDEST
0000004b: PUSH2 0x0052
0000004e: PUSH2 0x0180
00000051: JUMP
00000052: JUMPDEST
00000053: STOP
00000054: JUMPDEST
00000055: CALLVALUE
00000056: DUP1
00000057: ISZERO
00000058: PUSH2 0x0060
0000005b: JUMPI
0000005c: PUSH1 0x00
0000005e: DUP1
0000005f: REVERT
00000060: JUMPDEST
00000061: POP
00000062: PUSH2 0x0052
00000065: PUSH1 0x04
00000067: DUP1
00000068: CALLDATASIZE
00000069: SUB
0000006a: PUSH1 0x20
0000006c: DUP2
0000006d: LT
0000006e: ISZERO
0000006f: PUSH2 0x0077
00000072: JUMPI
00000073: PUSH1 0x00
00000075: DUP1
00000076: REVERT
00000077: JUMPDEST
00000078: POP
00000079: CALLDATALOAD
0000007a: PUSH1 0x01
0000007c: PUSH1 0x01
0000007e: PUSH1 0xa0
00000080: SHL
00000081: SUB
00000082: AND
00000083: PUSH2 0x019a
00000086: JUMP
00000087: JUMPDEST
00000088: PUSH2 0x0052
0000008b: PUSH1 0x04
0000008d: DUP1
0000008e: CALLDATASIZE
0000008f: SUB
00000090: PUSH1 0x40
00000092: DUP2
00000093: LT
00000094: ISZERO
00000095: PUSH2 0x009d
00000098: JUMPI
00000099: PUSH1 0x00
0000009b: DUP1
0000009c: REVERT
0000009d: JUMPDEST
0000009e: PUSH1 0x01
000000a0: PUSH1 0x01
000000a2: PUSH1 0xa0
000000a4: SHL
000000a5: SUB
000000a6: DUP3
000000a7: CALLDATALOAD
000000a8: AND
000000a9: SWAP2
000000aa: SWAP1
000000ab: DUP2
000000ac: ADD
000000ad: SWAP1
000000ae: PUSH1 0x40
000000b0: DUP2
000000b1: ADD
000000b2: PUSH1 0x20
000000b4: DUP3
000000b5: ADD
000000b6: CALLDATALOAD
000000b7: PUSH5 0x0100000000
000000bd: DUP2
000000be: GT
000000bf: ISZERO
000000c0: PUSH2 0x00c8
000000c3: JUMPI
000000c4: PUSH1 0x00
000000c6: DUP1
000000c7: REVERT
000000c8: JUMPDEST
000000c9: DUP3
000000ca: ADD
000000cb: DUP4
000000cc: PUSH1 0x20
000000ce: DUP3
000000cf: ADD
000000d0: GT
000000d1: ISZERO
000000d2: PUSH2 0x00da
000000d5: JUMPI
000000d6: PUSH1 0x00
000000d8: DUP1
000000d9: REVERT
000000da: JUMPDEST
000000db: DUP1
000000dc: CALLDATALOAD
000000dd: SWAP1
000000de: PUSH1 0x20
000000e0: ADD
000000e1: SWAP2
000000e2: DUP5
000000e3: PUSH1 0x01
000000e5: DUP4
000000e6: MUL
000000e7: DUP5
000000e8: ADD
000000e9: GT
000000ea: PUSH5 0x0100000000
000000f0: DUP4
000000f1: GT
000000f2: OR
000000f3: ISZERO
000000f4: PUSH2 0x00fc
000000f7: JUMPI
000000f8: PUSH1 0x00
000000fa: DUP1
000000fb: REVERT
000000fc: JUMPDEST
000000fd: POP
000000fe: SWAP1
000000ff: SWAP3
00000100: POP
00000101: SWAP1
00000102: POP
00000103: PUSH2 0x01d4
00000106: JUMP
00000107: JUMPDEST
00000108: CALLVALUE
00000109: DUP1
0000010a: ISZERO
0000010b: PUSH2 0x0113
0000010e: JUMPI
0000010f: PUSH1 0x00
00000111: DUP1
00000112: REVERT
00000113: JUMPDEST
00000114: POP
00000115: PUSH2 0x011c
00000118: PUSH2 0x0281
0000011b: JUMP
0000011c: JUMPDEST
0000011d: PUSH1 0x40
0000011f: DUP1
00000120: MLOAD
00000121: PUSH1 0x01
00000123: PUSH1 0x01
00000125: PUSH1 0xa0
00000127: SHL
00000128: SUB
00000129: SWAP1
0000012a: SWAP3
0000012b: AND
0000012c: DUP3
0000012d: MSTORE
0000012e: MLOAD
0000012f: SWAP1
00000130: DUP2
00000131: SWAP1
00000132: SUB
00000133: PUSH1 0x20
00000135: ADD
00000136: SWAP1
00000137: RETURN
00000138: JUMPDEST
00000139: CALLVALUE
0000013a: DUP1
0000013b: ISZERO
0000013c: PUSH2 0x0144
0000013f: JUMPI
00000140: PUSH1 0x00
00000142: DUP1
00000143: REVERT
00000144: JUMPDEST
00000145: POP
00000146: PUSH2 0x0052
00000149: PUSH1 0x04
0000014b: DUP1
0000014c: CALLDATASIZE
0000014d: SUB
0000014e: PUSH1 0x20
00000150: DUP2
00000151: LT
00000152: ISZERO
00000153: PUSH2 0x015b
00000156: JUMPI
00000157: PUSH1 0x00
00000159: DUP1
0000015a: REVERT
0000015b: JUMPDEST
0000015c: POP
0000015d: CALLDATALOAD
0000015e: PUSH1 0x01
00000160: PUSH1 0x01
00000162: PUSH1 0xa0
00000164: SHL
00000165: SUB
00000166: AND
00000167: PUSH2 0x02be
0000016a: JUMP
0000016b: JUMPDEST
0000016c: CALLVALUE
0000016d: DUP1
0000016e: ISZERO
0000016f: PUSH2 0x0177
00000172: JUMPI
00000173: PUSH1 0x00
00000175: DUP1
00000176: REVERT
00000177: JUMPDEST
00000178: POP
00000179: PUSH2 0x011c
0000017c: PUSH2 0x0378
0000017f: JUMP
00000180: JUMPDEST
00000181: PUSH2 0x0188
00000184: PUSH2 0x03a3
00000187: JUMP
00000188: JUMPDEST
00000189: PUSH2 0x0198
0000018c: PUSH2 0x0193
0000018f: PUSH2 0x0403
00000192: JUMP
00000193: JUMPDEST
00000194: PUSH2 0x0428
00000197: JUMP
00000198: JUMPDEST
00000199: JUMP
0000019a: JUMPDEST
0000019b: PUSH2 0x01a2
0000019e: PUSH2 0x044c
000001a1: JUMP
000001a2: JUMPDEST
000001a3: PUSH1 0x01
000001a5: PUSH1 0x01
000001a7: PUSH1 0xa0
000001a9: SHL
000001aa: SUB
000001ab: AND
000001ac: CALLER
000001ad: PUSH1 0x01
000001af: PUSH1 0x01
000001b1: PUSH1 0xa0
000001b3: SHL
000001b4: SUB
000001b5: AND
000001b6: EQ
000001b7: ISZERO
000001b8: PUSH2 0x01c9
000001bb: JUMPI
000001bc: PUSH2 0x01c4
000001bf: DUP2
000001c0: PUSH2 0x0471
000001c3: JUMP
000001c4: JUMPDEST
000001c5: PUSH2 0x01d1
000001c8: JUMP
000001c9: JUMPDEST
000001ca: PUSH2 0x01d1
000001cd: PUSH2 0x0180
000001d0: JUMP
000001d1: JUMPDEST
000001d2: POP
000001d3: JUMP
000001d4: JUMPDEST
000001d5: PUSH2 0x01dc
000001d8: PUSH2 0x044c
000001db: JUMP
000001dc: JUMPDEST
000001dd: PUSH1 0x01
000001df: PUSH1 0x01
000001e1: PUSH1 0xa0
000001e3: SHL
000001e4: SUB
000001e5: AND
000001e6: CALLER
000001e7: PUSH1 0x01
000001e9: PUSH1 0x01
000001eb: PUSH1 0xa0
000001ed: SHL
000001ee: SUB
000001ef: AND
000001f0: EQ
000001f1: ISZERO
000001f2: PUSH2 0x0274
000001f5: JUMPI
000001f6: PUSH2 0x01fe
000001f9: DUP4
000001fa: PUSH2 0x0471
000001fd: JUMP
000001fe: JUMPDEST
000001ff: PUSH1 0x00
00000201: DUP4
00000202: PUSH1 0x01
00000204: PUSH1 0x01
00000206: PUSH1 0xa0
00000208: SHL
00000209: SUB
0000020a: AND
0000020b: DUP4
0000020c: DUP4
0000020d: PUSH1 0x40
0000020f: MLOAD
00000210: DUP1
00000211: DUP4
00000212: DUP4
00000213: DUP1
00000214: DUP3
00000215: DUP5
00000216: CALLDATACOPY
00000217: PUSH1 0x40
00000219: MLOAD
0000021a: SWAP3
0000021b: ADD
0000021c: SWAP5
0000021d: POP
0000021e: PUSH1 0x00
00000220: SWAP4
00000221: POP
00000222: SWAP1
00000223: SWAP2
00000224: POP
00000225: POP
00000226: DUP1
00000227: DUP4
00000228: SUB
00000229: DUP2
0000022a: DUP6
0000022b: GAS
0000022c: DELEGATECALL
0000022d: SWAP2
0000022e: POP
0000022f: POP
00000230: RETURNDATASIZE
00000231: DUP1
00000232: PUSH1 0x00
00000234: DUP2
00000235: EQ
00000236: PUSH2 0x025b
00000239: JUMPI
0000023a: PUSH1 0x40
0000023c: MLOAD
0000023d: SWAP2
0000023e: POP
0000023f: PUSH1 0x1f
00000241: NOT
00000242: PUSH1 0x3f
00000244: RETURNDATASIZE
00000245: ADD
00000246: AND
00000247: DUP3
00000248: ADD
00000249: PUSH1 0x40
0000024b: MSTORE
0000024c: RETURNDATASIZE
0000024d: DUP3
0000024e: MSTORE
0000024f: RETURNDATASIZE
00000250: PUSH1 0x00
00000252: PUSH1 0x20
00000254: DUP5
00000255: ADD
00000256: RETURNDATACOPY
00000257: PUSH2 0x0260
0000025a: JUMP
0000025b: JUMPDEST
0000025c: PUSH1 0x60
0000025e: SWAP2
0000025f: POP
00000260: JUMPDEST
00000261: POP
00000262: POP
00000263: SWAP1
00000264: POP
00000265: DUP1
00000266: PUSH2 0x026e
00000269: JUMPI
0000026a: PUSH1 0x00
0000026c: DUP1
0000026d: REVERT
0000026e: JUMPDEST
0000026f: POP
00000270: PUSH2 0x027c
00000273: JUMP
00000274: JUMPDEST
00000275: PUSH2 0x027c
00000278: PUSH2 0x0180
0000027b: JUMP
0000027c: JUMPDEST
0000027d: POP
0000027e: POP
0000027f: POP
00000280: JUMP
00000281: JUMPDEST
00000282: PUSH1 0x00
00000284: PUSH2 0x028b
00000287: PUSH2 0x044c
0000028a: JUMP
0000028b: JUMPDEST
0000028c: PUSH1 0x01
0000028e: PUSH1 0x01
00000290: PUSH1 0xa0
00000292: SHL
00000293: SUB
00000294: AND
00000295: CALLER
00000296: PUSH1 0x01
00000298: PUSH1 0x01
0000029a: PUSH1 0xa0
0000029c: SHL
0000029d: SUB
0000029e: AND
0000029f: EQ
000002a0: ISZERO
000002a1: PUSH2 0x02b3
000002a4: JUMPI
000002a5: PUSH2 0x02ac
000002a8: PUSH2 0x0403
000002ab: JUMP
000002ac: JUMPDEST
000002ad: SWAP1
000002ae: POP
000002af: PUSH2 0x02bb
000002b2: JUMP
000002b3: JUMPDEST
000002b4: PUSH2 0x02bb
000002b7: PUSH2 0x0180
000002ba: JUMP
000002bb: JUMPDEST
000002bc: SWAP1
000002bd: JUMP
000002be: JUMPDEST
000002bf: PUSH2 0x02c6
000002c2: PUSH2 0x044c
000002c5: JUMP
000002c6: JUMPDEST
000002c7: PUSH1 0x01
000002c9: PUSH1 0x01
000002cb: PUSH1 0xa0
000002cd: SHL
000002ce: SUB
000002cf: AND
000002d0: CALLER
000002d1: PUSH1 0x01
000002d3: PUSH1 0x01
000002d5: PUSH1 0xa0
000002d7: SHL
000002d8: SUB
000002d9: AND
000002da: EQ
000002db: ISZERO
000002dc: PUSH2 0x01c9
000002df: JUMPI
000002e0: PUSH1 0x01
000002e2: PUSH1 0x01
000002e4: PUSH1 0xa0
000002e6: SHL
000002e7: SUB
000002e8: DUP2
000002e9: AND
000002ea: PUSH2 0x0324
000002ed: JUMPI
000002ee: PUSH1 0x40
000002f0: MLOAD
000002f1: PUSH3 0x461bcd
000002f5: PUSH1 0xe5
000002f7: SHL
000002f8: DUP2
000002f9: MSTORE
000002fa: PUSH1 0x04
000002fc: ADD
000002fd: DUP1
000002fe: DUP1
000002ff: PUSH1 0x20
00000301: ADD
00000302: DUP3
00000303: DUP2
00000304: SUB
00000305: DUP3
00000306: MSTORE
00000307: PUSH1 0x36
00000309: DUP2
0000030a: MSTORE
0000030b: PUSH1 0x20
0000030d: ADD
0000030e: DUP1
0000030f: PUSH2 0x0576
00000312: PUSH1 0x36
00000314: SWAP2
00000315: CODECOPY
00000316: PUSH1 0x40
00000318: ADD
00000319: SWAP2
0000031a: POP
0000031b: POP
0000031c: PUSH1 0x40
0000031e: MLOAD
0000031f: DUP1
00000320: SWAP2
00000321: SUB
00000322: SWAP1
00000323: REVERT
00000324: JUMPDEST
00000325: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
00000346: PUSH2 0x034d
00000349: PUSH2 0x044c
0000034c: JUMP
0000034d: JUMPDEST
0000034e: PUSH1 0x40
00000350: DUP1
00000351: MLOAD
00000352: PUSH1 0x01
00000354: PUSH1 0x01
00000356: PUSH1 0xa0
00000358: SHL
00000359: SUB
0000035a: SWAP3
0000035b: DUP4
0000035c: AND
0000035d: DUP2
0000035e: MSTORE
0000035f: SWAP2
00000360: DUP5
00000361: AND
00000362: PUSH1 0x20
00000364: DUP4
00000365: ADD
00000366: MSTORE
00000367: DUP1
00000368: MLOAD
00000369: SWAP2
0000036a: DUP3
0000036b: SWAP1
0000036c: SUB
0000036d: ADD
0000036e: SWAP1
0000036f: LOG1
00000370: PUSH2 0x01c4
00000373: DUP2
00000374: PUSH2 0x04b1
00000377: JUMP
00000378: JUMPDEST
00000379: PUSH1 0x00
0000037b: PUSH2 0x0382
0000037e: PUSH2 0x044c
00000381: JUMP
00000382: JUMPDEST
00000383: PUSH1 0x01
00000385: PUSH1 0x01
00000387: PUSH1 0xa0
00000389: SHL
0000038a: SUB
0000038b: AND
0000038c: CALLER
0000038d: PUSH1 0x01
0000038f: PUSH1 0x01
00000391: PUSH1 0xa0
00000393: SHL
00000394: SUB
00000395: AND
00000396: EQ
00000397: ISZERO
00000398: PUSH2 0x02b3
0000039b: JUMPI
0000039c: PUSH2 0x02ac
0000039f: PUSH2 0x044c
000003a2: JUMP
000003a3: JUMPDEST
000003a4: PUSH2 0x03ab
000003a7: PUSH2 0x044c
000003aa: JUMP
000003ab: JUMPDEST
000003ac: PUSH1 0x01
000003ae: PUSH1 0x01
000003b0: PUSH1 0xa0
000003b2: SHL
000003b3: SUB
000003b4: AND
000003b5: CALLER
000003b6: PUSH1 0x01
000003b8: PUSH1 0x01
000003ba: PUSH1 0xa0
000003bc: SHL
000003bd: SUB
000003be: AND
000003bf: EQ
000003c0: ISZERO
000003c1: PUSH2 0x03fb
000003c4: JUMPI
000003c5: PUSH1 0x40
000003c7: MLOAD
000003c8: PUSH3 0x461bcd
000003cc: PUSH1 0xe5
000003ce: SHL
000003cf: DUP2
000003d0: MSTORE
000003d1: PUSH1 0x04
000003d3: ADD
000003d4: DUP1
000003d5: DUP1
000003d6: PUSH1 0x20
000003d8: ADD
000003d9: DUP3
000003da: DUP2
000003db: SUB
000003dc: DUP3
000003dd: MSTORE
000003de: PUSH1 0x32
000003e0: DUP2
000003e1: MSTORE
000003e2: PUSH1 0x20
000003e4: ADD
000003e5: DUP1
000003e6: PUSH2 0x0544
000003e9: PUSH1 0x32
000003eb: SWAP2
000003ec: CODECOPY
000003ed: PUSH1 0x40
000003ef: ADD
000003f0: SWAP2
000003f1: POP
000003f2: POP
000003f3: PUSH1 0x40
000003f5: MLOAD
000003f6: DUP1
000003f7: SWAP2
000003f8: SUB
000003f9: SWAP1
000003fa: REVERT
000003fb: JUMPDEST
000003fc: PUSH2 0x0198
000003ff: PUSH2 0x0198
00000402: JUMP
00000403: JUMPDEST
00000404: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000425: SLOAD
00000426: SWAP1
00000427: JUMP
00000428: JUMPDEST
00000429: CALLDATASIZE
0000042a: PUSH1 0x00
0000042c: DUP1
0000042d: CALLDATACOPY
0000042e: PUSH1 0x00
00000430: DUP1
00000431: CALLDATASIZE
00000432: PUSH1 0x00
00000434: DUP5
00000435: GAS
00000436: DELEGATECALL
00000437: RETURNDATASIZE
00000438: PUSH1 0x00
0000043a: DUP1
0000043b: RETURNDATACOPY
0000043c: DUP1
0000043d: DUP1
0000043e: ISZERO
0000043f: PUSH2 0x0447
00000442: JUMPI
00000443: RETURNDATASIZE
00000444: PUSH1 0x00
00000446: RETURN
00000447: JUMPDEST
00000448: RETURNDATASIZE
00000449: PUSH1 0x00
0000044b: REVERT
0000044c: JUMPDEST
0000044d: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000046e: SLOAD
0000046f: SWAP1
00000470: JUMP
00000471: JUMPDEST
00000472: PUSH2 0x047a
00000475: DUP2
00000476: PUSH2 0x04d5
00000479: JUMP
0000047a: JUMPDEST
0000047b: PUSH1 0x40
0000047d: MLOAD
0000047e: PUSH1 0x01
00000480: PUSH1 0x01
00000482: PUSH1 0xa0
00000484: SHL
00000485: SUB
00000486: DUP3
00000487: AND
00000488: SWAP1
00000489: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
000004aa: SWAP1
000004ab: PUSH1 0x00
000004ad: SWAP1
000004ae: LOG2
000004af: POP
000004b0: JUMP
000004b1: JUMPDEST
000004b2: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000004d3: SSTORE
000004d4: JUMP
000004d5: JUMPDEST
000004d6: PUSH2 0x04de
000004d9: DUP2
000004da: PUSH2 0x053d
000004dd: JUMP
000004de: JUMPDEST
000004df: PUSH2 0x0519
000004e2: JUMPI
000004e3: PUSH1 0x40
000004e5: MLOAD
000004e6: PUSH3 0x461bcd
000004ea: PUSH1 0xe5
000004ec: SHL
000004ed: DUP2
000004ee: MSTORE
000004ef: PUSH1 0x04
000004f1: ADD
000004f2: DUP1
000004f3: DUP1
000004f4: PUSH1 0x20
000004f6: ADD
000004f7: DUP3
000004f8: DUP2
000004f9: SUB
000004fa: DUP3
000004fb: MSTORE
000004fc: PUSH1 0x3b
000004fe: DUP2
000004ff: MSTORE
00000500: PUSH1 0x20
00000502: ADD
00000503: DUP1
00000504: PUSH2 0x05ac
00000507: PUSH1 0x3b
00000509: SWAP2
0000050a: CODECOPY
0000050b: PUSH1 0x40
0000050d: ADD
0000050e: SWAP2
0000050f: POP
00000510: POP
00000511: PUSH1 0x40
00000513: MLOAD
00000514: DUP1
00000515: SWAP2
00000516: SUB
00000517: SWAP1
00000518: REVERT
00000519: JUMPDEST
0000051a: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000053b: SSTORE
0000053c: JUMP
0000053d: JUMPDEST
0000053e: EXTCODESIZE
0000053f: ISZERO
00000540: ISZERO
00000541: SWAP1
00000542: JUMP
00000543: INVALID
00000544: NUMBER
00000545: PUSH2 0x6e6e
00000548: PUSH16 0x742063616c6c2066616c6c6261636b20
00000559: PUSH7 0x756e6374696f6e
00000561: KECCAK256
00000562: PUSH7 0x726f6d20746865
0000056a: KECCAK256
0000056b: PUSH17 0x726f78792061646d696e43616e6e6f7420
0000057d: PUSH4 0x68616e67
00000582: PUSH6 0x207468652061
00000589: PUSH5 0x6d696e206f
0000058f: PUSH7 0x20612070726f78
00000597: PUSH26 0x20746f20746865207a65726f206164647265737343616e6e6f74
000005b2: KECCAK256
000005b3: PUSH20 0x657420612070726f787920696d706c656d656e74
000005c8: PUSH2 0x7469
000005cb: PUSH16 0x6e20746f2061206e6f6e2d636f6e7472
000005dc: PUSH2 0x6374
000005df: KECCAK256
000005e0: PUSH2 0x6464
000005e3: PUSH19 0x657373a265627a7a72315820cc2aac989dabb6
000005f7: UNKNOWN(0xAA)
000005f8: UNKNOWN(0xE6)
000005f9: DIFFICULTY
000005fa: UNKNOWN(0xB4)
000005fb: REVERT
000005fc: LOG4
000005fd: DUP5
000005fe: UNKNOWN(0xFC)
000005ff: UNKNOWN(0x2A)
00000600: UNKNOWN(0xBC)
00000601: UNKNOWN(0xE7)
00000602: PUSH30
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0xe3d650d2fa1b0aa185c7dcb6f00f4ebbaaaae96ab875821144a45cc833978af2
call_targets: 0x083877080b3b92f736707b74b0468499a88668e3
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 2,
    "trace_id": "0xe3d650d2fa1b0aa185c7dcb6f00f4ebbaaaae96ab875821144a45cc833978af2",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x083877080b3b92f736707b74b0468499a88668e3"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 556,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1078,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}