Analysis Run

019b3844-988e-73f4-83d0-41694bab8347

complete

Chain ID

1

Address

0xbb44e3349c23cc430cae6ebbaf0256c9f2a1872f

Block Number

—

Created

Fri, Dec 19, 2025 8:19 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
13933	artifact.fetch	complete	1 / 3	3 months ago
13934	tool.cast_disasm	complete	1 / 3	3 months ago
57521	analysis.bundle	complete	1 / 3	1 week ago
57522	capability.graph	complete	1 / 3	1 week ago
57523	detector.run	complete	1 / 3	1 week ago
57524	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

1

Selfdestruct

1

CREATE2

0

CALL-family (heavy)

2

EXT*/BALANCE

1

Total opcodes

862

Flags

delegatecall_present selfdestruct_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x004a
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x0a0a05e6
00000019: EQ
0000001a: PUSH2 0x01d0
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x6b9f96ea
00000024: EQ
00000025: PUSH2 0x0203
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x715018a6
0000002f: EQ
00000030: PUSH2 0x0218
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x8da5cb5b
0000003a: EQ
0000003b: PUSH2 0x022d
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf2fde38b
00000045: EQ
00000046: PUSH2 0x025e
00000049: JUMPI
0000004a: JUMPDEST
0000004b: CALLVALUE
0000004c: ISZERO
0000004d: PUSH2 0x0090
00000050: JUMPI
00000051: PUSH1 0x40
00000053: DUP1
00000054: MLOAD
00000055: CALLVALUE
00000056: DUP2
00000057: MSTORE
00000058: SWAP1
00000059: MLOAD
0000005a: PUSH1 0x00
0000005c: SWAP2
0000005d: DUP3
0000005e: SWAP2
0000005f: CALLER
00000060: SWAP2
00000061: PUSH32 0x700447ec4170a8ebc6b67182ac966faf6dff7d46dc24a1a4a7f0a98e84db9cec
00000082: SWAP2
00000083: SWAP1
00000084: DUP2
00000085: SWAP1
00000086: SUB
00000087: PUSH1 0x20
00000089: ADD
0000008a: SWAP1
0000008b: LOG4
0000008c: PUSH2 0x01ce
0000008f: JUMP
00000090: JUMPDEST
00000091: PUSH2 0x0098
00000094: PUSH2 0x0291
00000097: JUMP
00000098: JUMPDEST
00000099: PUSH1 0x01
0000009b: PUSH1 0x01
0000009d: PUSH1 0xa0
0000009f: SHL
000000a0: SUB
000000a1: AND
000000a2: CALLER
000000a3: PUSH1 0x01
000000a5: PUSH1 0x01
000000a7: PUSH1 0xa0
000000a9: SHL
000000aa: SUB
000000ab: AND
000000ac: EQ
000000ad: ISZERO
000000ae: PUSH2 0x01ce
000000b1: JUMPI
000000b2: PUSH20 0x68ef21a0168bcf753871e9fc26c86dd482cdd035
000000c7: PUSH1 0x00
000000c9: DUP1
000000ca: DUP3
000000cb: PUSH4 0x4a91da90
000000d0: PUSH2 0x00dc
000000d3: PUSH1 0x20
000000d5: DUP5
000000d6: CALLDATASIZE
000000d7: DUP2
000000d8: PUSH2 0x0505
000000db: JUMP
000000dc: JUMPDEST
000000dd: PUSH1 0x20
000000df: DUP2
000000e0: LT
000000e1: ISZERO
000000e2: PUSH2 0x00ea
000000e5: JUMPI
000000e6: PUSH1 0x00
000000e8: DUP1
000000e9: REVERT
000000ea: JUMPDEST
000000eb: POP
000000ec: PUSH1 0x40
000000ee: DUP1
000000ef: MLOAD
000000f0: PUSH1 0x01
000000f2: PUSH1 0x01
000000f4: PUSH1 0xe0
000000f6: SHL
000000f7: SUB
000000f8: NOT
000000f9: PUSH1 0xe0
000000fb: DUP6
000000fc: SWAP1
000000fd: SHL
000000fe: AND
000000ff: DUP2
00000100: MSTORE
00000101: SWAP2
00000102: CALLDATALOAD
00000103: PUSH1 0x04
00000105: DUP4
00000106: ADD
00000107: MSTORE
00000108: MLOAD
00000109: PUSH1 0x24
0000010b: DUP1
0000010c: DUP4
0000010d: ADD
0000010e: SWAP3
0000010f: PUSH1 0x20
00000111: SWAP3
00000112: SWAP2
00000113: SWAP1
00000114: DUP3
00000115: SWAP1
00000116: SUB
00000117: ADD
00000118: DUP2
00000119: DUP7
0000011a: DUP1
0000011b: EXTCODESIZE
0000011c: ISZERO
0000011d: DUP1
0000011e: ISZERO
0000011f: PUSH2 0x0127
00000122: JUMPI
00000123: PUSH1 0x00
00000125: DUP1
00000126: REVERT
00000127: JUMPDEST
00000128: POP
00000129: GAS
0000012a: STATICCALL
0000012b: ISZERO
0000012c: DUP1
0000012d: ISZERO
0000012e: PUSH2 0x013b
00000131: JUMPI
00000132: RETURNDATASIZE
00000133: PUSH1 0x00
00000135: DUP1
00000136: RETURNDATACOPY
00000137: RETURNDATASIZE
00000138: PUSH1 0x00
0000013a: REVERT
0000013b: JUMPDEST
0000013c: POP
0000013d: POP
0000013e: POP
0000013f: POP
00000140: PUSH1 0x40
00000142: MLOAD
00000143: RETURNDATASIZE
00000144: PUSH1 0x20
00000146: DUP2
00000147: LT
00000148: ISZERO
00000149: PUSH2 0x0151
0000014c: JUMPI
0000014d: PUSH1 0x00
0000014f: DUP1
00000150: REVERT
00000151: JUMPDEST
00000152: POP
00000153: MLOAD
00000154: PUSH1 0x40
00000156: MLOAD
00000157: SWAP1
00000158: SWAP2
00000159: POP
0000015a: PUSH1 0x01
0000015c: PUSH1 0x01
0000015e: PUSH1 0xa0
00000160: SHL
00000161: SUB
00000162: DUP3
00000163: AND
00000164: SWAP1
00000165: PUSH1 0x00
00000167: SWAP1
00000168: CALLDATASIZE
00000169: SWAP1
0000016a: DUP1
0000016b: DUP4
0000016c: DUP4
0000016d: DUP1
0000016e: DUP3
0000016f: DUP5
00000170: CALLDATACOPY
00000171: PUSH1 0x40
00000173: MLOAD
00000174: SWAP3
00000175: ADD
00000176: SWAP5
00000177: POP
00000178: PUSH1 0x00
0000017a: SWAP4
0000017b: POP
0000017c: SWAP1
0000017d: SWAP2
0000017e: POP
0000017f: POP
00000180: DUP1
00000181: DUP4
00000182: SUB
00000183: DUP2
00000184: DUP6
00000185: GAS
00000186: DELEGATECALL
00000187: SWAP2
00000188: POP
00000189: POP
0000018a: RETURNDATASIZE
0000018b: DUP1
0000018c: PUSH1 0x00
0000018e: DUP2
0000018f: EQ
00000190: PUSH2 0x01b5
00000193: JUMPI
00000194: PUSH1 0x40
00000196: MLOAD
00000197: SWAP2
00000198: POP
00000199: PUSH1 0x1f
0000019b: NOT
0000019c: PUSH1 0x3f
0000019e: RETURNDATASIZE
0000019f: ADD
000001a0: AND
000001a1: DUP3
000001a2: ADD
000001a3: PUSH1 0x40
000001a5: MSTORE
000001a6: RETURNDATASIZE
000001a7: DUP3
000001a8: MSTORE
000001a9: RETURNDATASIZE
000001aa: PUSH1 0x00
000001ac: PUSH1 0x20
000001ae: DUP5
000001af: ADD
000001b0: RETURNDATACOPY
000001b1: PUSH2 0x01ba
000001b4: JUMP
000001b5: JUMPDEST
000001b6: PUSH1 0x60
000001b8: SWAP2
000001b9: POP
000001ba: JUMPDEST
000001bb: POP
000001bc: POP
000001bd: DUP1
000001be: SWAP3
000001bf: POP
000001c0: POP
000001c1: DUP2
000001c2: PUSH2 0x01ca
000001c5: JUMPI
000001c6: PUSH1 0x00
000001c8: DUP1
000001c9: REVERT
000001ca: JUMPDEST
000001cb: POP
000001cc: POP
000001cd: POP
000001ce: JUMPDEST
000001cf: STOP
000001d0: JUMPDEST
000001d1: CALLVALUE
000001d2: DUP1
000001d3: ISZERO
000001d4: PUSH2 0x01dc
000001d7: JUMPI
000001d8: PUSH1 0x00
000001da: DUP1
000001db: REVERT
000001dc: JUMPDEST
000001dd: POP
000001de: PUSH2 0x01ce
000001e1: PUSH1 0x04
000001e3: DUP1
000001e4: CALLDATASIZE
000001e5: SUB
000001e6: PUSH1 0x20
000001e8: DUP2
000001e9: LT
000001ea: ISZERO
000001eb: PUSH2 0x01f3
000001ee: JUMPI
000001ef: PUSH1 0x00
000001f1: DUP1
000001f2: REVERT
000001f3: JUMPDEST
000001f4: POP
000001f5: CALLDATALOAD
000001f6: PUSH1 0x01
000001f8: PUSH1 0x01
000001fa: PUSH1 0xa0
000001fc: SHL
000001fd: SUB
000001fe: AND
000001ff: PUSH2 0x02a0
00000202: JUMP
00000203: JUMPDEST
00000204: CALLVALUE
00000205: DUP1
00000206: ISZERO
00000207: PUSH2 0x020f
0000020a: JUMPI
0000020b: PUSH1 0x00
0000020d: DUP1
0000020e: REVERT
0000020f: JUMPDEST
00000210: POP
00000211: PUSH2 0x01ce
00000214: PUSH2 0x0321
00000217: JUMP
00000218: JUMPDEST
00000219: CALLVALUE
0000021a: DUP1
0000021b: ISZERO
0000021c: PUSH2 0x0224
0000021f: JUMPI
00000220: PUSH1 0x00
00000222: DUP1
00000223: REVERT
00000224: JUMPDEST
00000225: POP
00000226: PUSH2 0x01ce
00000229: PUSH2 0x035d
0000022c: JUMP
0000022d: JUMPDEST
0000022e: CALLVALUE
0000022f: DUP1
00000230: ISZERO
00000231: PUSH2 0x0239
00000234: JUMPI
00000235: PUSH1 0x00
00000237: DUP1
00000238: REVERT
00000239: JUMPDEST
0000023a: POP
0000023b: PUSH2 0x0242
0000023e: PUSH2 0x0291
00000241: JUMP
00000242: JUMPDEST
00000243: PUSH1 0x40
00000245: DUP1
00000246: MLOAD
00000247: PUSH1 0x01
00000249: PUSH1 0x01
0000024b: PUSH1 0xa0
0000024d: SHL
0000024e: SUB
0000024f: SWAP1
00000250: SWAP3
00000251: AND
00000252: DUP3
00000253: MSTORE
00000254: MLOAD
00000255: SWAP1
00000256: DUP2
00000257: SWAP1
00000258: SUB
00000259: PUSH1 0x20
0000025b: ADD
0000025c: SWAP1
0000025d: RETURN
0000025e: JUMPDEST
0000025f: CALLVALUE
00000260: DUP1
00000261: ISZERO
00000262: PUSH2 0x026a
00000265: JUMPI
00000266: PUSH1 0x00
00000268: DUP1
00000269: REVERT
0000026a: JUMPDEST
0000026b: POP
0000026c: PUSH2 0x01ce
0000026f: PUSH1 0x04
00000271: DUP1
00000272: CALLDATASIZE
00000273: SUB
00000274: PUSH1 0x20
00000276: DUP2
00000277: LT
00000278: ISZERO
00000279: PUSH2 0x0281
0000027c: JUMPI
0000027d: PUSH1 0x00
0000027f: DUP1
00000280: REVERT
00000281: JUMPDEST
00000282: POP
00000283: CALLDATALOAD
00000284: PUSH1 0x01
00000286: PUSH1 0x01
00000288: PUSH1 0xa0
0000028a: SHL
0000028b: SUB
0000028c: AND
0000028d: PUSH2 0x0406
00000290: JUMP
00000291: JUMPDEST
00000292: PUSH1 0x00
00000294: SLOAD
00000295: PUSH1 0x01
00000297: PUSH1 0x01
00000299: PUSH1 0xa0
0000029b: SHL
0000029c: SUB
0000029d: AND
0000029e: SWAP1
0000029f: JUMP
000002a0: JUMPDEST
000002a1: PUSH1 0x00
000002a3: SLOAD
000002a4: PUSH1 0x01
000002a6: PUSH1 0x01
000002a8: PUSH1 0xa0
000002aa: SHL
000002ab: SUB
000002ac: AND
000002ad: CALLER
000002ae: EQ
000002af: PUSH2 0x02ff
000002b2: JUMPI
000002b3: PUSH1 0x40
000002b5: DUP1
000002b6: MLOAD
000002b7: PUSH3 0x461bcd
000002bb: PUSH1 0xe5
000002bd: SHL
000002be: DUP2
000002bf: MSTORE
000002c0: PUSH1 0x20
000002c2: PUSH1 0x04
000002c4: DUP3
000002c5: ADD
000002c6: DUP2
000002c7: SWAP1
000002c8: MSTORE
000002c9: PUSH1 0x24
000002cb: DUP3
000002cc: ADD
000002cd: MSTORE
000002ce: PUSH32 0x4f776e61626c653a2063616c6c6572206973206e6f7420746865206f776e6572
000002ef: PUSH1 0x44
000002f1: DUP3
000002f2: ADD
000002f3: MSTORE
000002f4: SWAP1
000002f5: MLOAD
000002f6: SWAP1
000002f7: DUP2
000002f8: SWAP1
000002f9: SUB
000002fa: PUSH1 0x64
000002fc: ADD
000002fd: SWAP1
000002fe: REVERT
000002ff: JUMPDEST
00000300: PUSH1 0x01
00000302: DUP1
00000303: SLOAD
00000304: PUSH1 0x01
00000306: PUSH1 0x01
00000308: PUSH1 0xa0
0000030a: SHL
0000030b: SUB
0000030c: NOT
0000030d: AND
0000030e: PUSH1 0x01
00000310: PUSH1 0x01
00000312: PUSH1 0xa0
00000314: SHL
00000315: SUB
00000316: SWAP3
00000317: SWAP1
00000318: SWAP3
00000319: AND
0000031a: SWAP2
0000031b: SWAP1
0000031c: SWAP2
0000031d: OR
0000031e: SWAP1
0000031f: SSTORE
00000320: JUMP
00000321: JUMPDEST
00000322: PUSH1 0x01
00000324: SLOAD
00000325: PUSH1 0x40
00000327: MLOAD
00000328: PUSH1 0x01
0000032a: PUSH1 0x01
0000032c: PUSH1 0xa0
0000032e: SHL
0000032f: SUB
00000330: SWAP1
00000331: SWAP2
00000332: AND
00000333: SWAP1
00000334: SELFBALANCE
00000335: DUP1
00000336: ISZERO
00000337: PUSH2 0x08fc
0000033a: MUL
0000033b: SWAP2
0000033c: PUSH1 0x00
0000033e: DUP2
0000033f: DUP2
00000340: DUP2
00000341: DUP6
00000342: DUP9
00000343: DUP9
00000344: CALL
00000345: SWAP4
00000346: POP
00000347: POP
00000348: POP
00000349: POP
0000034a: ISZERO
0000034b: DUP1
0000034c: ISZERO
0000034d: PUSH2 0x035a
00000350: JUMPI
00000351: RETURNDATASIZE
00000352: PUSH1 0x00
00000354: DUP1
00000355: RETURNDATACOPY
00000356: RETURNDATASIZE
00000357: PUSH1 0x00
00000359: REVERT
0000035a: JUMPDEST
0000035b: POP
0000035c: JUMP
0000035d: JUMPDEST
0000035e: PUSH1 0x00
00000360: SLOAD
00000361: PUSH1 0x01
00000363: PUSH1 0x01
00000365: PUSH1 0xa0
00000367: SHL
00000368: SUB
00000369: AND
0000036a: CALLER
0000036b: EQ
0000036c: PUSH2 0x03bc
0000036f: JUMPI
00000370: PUSH1 0x40
00000372: DUP1
00000373: MLOAD
00000374: PUSH3 0x461bcd
00000378: PUSH1 0xe5
0000037a: SHL
0000037b: DUP2
0000037c: MSTORE
0000037d: PUSH1 0x20
0000037f: PUSH1 0x04
00000381: DUP3
00000382: ADD
00000383: DUP2
00000384: SWAP1
00000385: MSTORE
00000386: PUSH1 0x24
00000388: DUP3
00000389: ADD
0000038a: MSTORE
0000038b: PUSH32 0x4f776e61626c653a2063616c6c6572206973206e6f7420746865206f776e6572
000003ac: PUSH1 0x44
000003ae: DUP3
000003af: ADD
000003b0: MSTORE
000003b1: SWAP1
000003b2: MLOAD
000003b3: SWAP1
000003b4: DUP2
000003b5: SWAP1
000003b6: SUB
000003b7: PUSH1 0x64
000003b9: ADD
000003ba: SWAP1
000003bb: REVERT
000003bc: JUMPDEST
000003bd: PUSH1 0x00
000003bf: DUP1
000003c0: SLOAD
000003c1: PUSH1 0x40
000003c3: MLOAD
000003c4: PUSH1 0x01
000003c6: PUSH1 0x01
000003c8: PUSH1 0xa0
000003ca: SHL
000003cb: SUB
000003cc: SWAP1
000003cd: SWAP2
000003ce: AND
000003cf: SWAP1
000003d0: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
000003f1: SWAP1
000003f2: DUP4
000003f3: SWAP1
000003f4: LOG3
000003f5: PUSH1 0x00
000003f7: DUP1
000003f8: SLOAD
000003f9: PUSH1 0x01
000003fb: PUSH1 0x01
000003fd: PUSH1 0xa0
000003ff: SHL
00000400: SUB
00000401: NOT
00000402: AND
00000403: SWAP1
00000404: SSTORE
00000405: JUMP
00000406: JUMPDEST
00000407: PUSH1 0x00
00000409: SLOAD
0000040a: PUSH1 0x01
0000040c: PUSH1 0x01
0000040e: PUSH1 0xa0
00000410: SHL
00000411: SUB
00000412: AND
00000413: CALLER
00000414: EQ
00000415: PUSH2 0x0465
00000418: JUMPI
00000419: PUSH1 0x40
0000041b: DUP1
0000041c: MLOAD
0000041d: PUSH3 0x461bcd
00000421: PUSH1 0xe5
00000423: SHL
00000424: DUP2
00000425: MSTORE
00000426: PUSH1 0x20
00000428: PUSH1 0x04
0000042a: DUP3
0000042b: ADD
0000042c: DUP2
0000042d: SWAP1
0000042e: MSTORE
0000042f: PUSH1 0x24
00000431: DUP3
00000432: ADD
00000433: MSTORE
00000434: PUSH32 0x4f776e61626c653a2063616c6c6572206973206e6f7420746865206f776e6572
00000455: PUSH1 0x44
00000457: DUP3
00000458: ADD
00000459: MSTORE
0000045a: SWAP1
0000045b: MLOAD
0000045c: SWAP1
0000045d: DUP2
0000045e: SWAP1
0000045f: SUB
00000460: PUSH1 0x64
00000462: ADD
00000463: SWAP1
00000464: REVERT
00000465: JUMPDEST
00000466: PUSH1 0x01
00000468: PUSH1 0x01
0000046a: PUSH1 0xa0
0000046c: SHL
0000046d: SUB
0000046e: DUP2
0000046f: AND
00000470: PUSH2 0x04aa
00000473: JUMPI
00000474: PUSH1 0x40
00000476: MLOAD
00000477: PUSH3 0x461bcd
0000047b: PUSH1 0xe5
0000047d: SHL
0000047e: DUP2
0000047f: MSTORE
00000480: PUSH1 0x04
00000482: ADD
00000483: DUP1
00000484: DUP1
00000485: PUSH1 0x20
00000487: ADD
00000488: DUP3
00000489: DUP2
0000048a: SUB
0000048b: DUP3
0000048c: MSTORE
0000048d: PUSH1 0x26
0000048f: DUP2
00000490: MSTORE
00000491: PUSH1 0x20
00000493: ADD
00000494: DUP1
00000495: PUSH2 0x052e
00000498: PUSH1 0x26
0000049a: SWAP2
0000049b: CODECOPY
0000049c: PUSH1 0x40
0000049e: ADD
0000049f: SWAP2
000004a0: POP
000004a1: POP
000004a2: PUSH1 0x40
000004a4: MLOAD
000004a5: DUP1
000004a6: SWAP2
000004a7: SUB
000004a8: SWAP1
000004a9: REVERT
000004aa: JUMPDEST
000004ab: PUSH1 0x00
000004ad: DUP1
000004ae: SLOAD
000004af: PUSH1 0x40
000004b1: MLOAD
000004b2: PUSH1 0x01
000004b4: PUSH1 0x01
000004b6: PUSH1 0xa0
000004b8: SHL
000004b9: SUB
000004ba: DUP1
000004bb: DUP6
000004bc: AND
000004bd: SWAP4
000004be: SWAP3
000004bf: AND
000004c0: SWAP2
000004c1: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
000004e2: SWAP2
000004e3: LOG3
000004e4: PUSH1 0x00
000004e6: DUP1
000004e7: SLOAD
000004e8: PUSH1 0x01
000004ea: PUSH1 0x01
000004ec: PUSH1 0xa0
000004ee: SHL
000004ef: SUB
000004f0: NOT
000004f1: AND
000004f2: PUSH1 0x01
000004f4: PUSH1 0x01
000004f6: PUSH1 0xa0
000004f8: SHL
000004f9: SUB
000004fa: SWAP3
000004fb: SWAP1
000004fc: SWAP3
000004fd: AND
000004fe: SWAP2
000004ff: SWAP1
00000500: SWAP2
00000501: OR
00000502: SWAP1
00000503: SSTORE
00000504: JUMP
00000505: JUMPDEST
00000506: PUSH1 0x00
00000508: DUP1
00000509: DUP6
0000050a: DUP6
0000050b: GT
0000050c: ISZERO
0000050d: PUSH2 0x0514
00000510: JUMPI
00000511: DUP2
00000512: DUP3
00000513: REVERT
00000514: JUMPDEST
00000515: DUP4
00000516: DUP7
00000517: GT
00000518: ISZERO
00000519: PUSH2 0x0520
0000051c: JUMPI
0000051d: DUP2
0000051e: DUP3
0000051f: REVERT
00000520: JUMPDEST
00000521: POP
00000522: POP
00000523: DUP3
00000524: ADD
00000525: SWAP4
00000526: SWAP2
00000527: SWAP1
00000528: SWAP3
00000529: SUB
0000052a: SWAP2
0000052b: POP
0000052c: JUMP
0000052d: INVALID
0000052e: UNKNOWN(0x4F)
0000052f: PUSH24 0x6e61626c653a206e6577206f776e65722069732074686520
00000548: PUSH27 0x65726f2061646472657373a2646970667358221220fad1e906c989
00000564: DUP3
00000565: UNKNOWN(0xCB)
00000566: UNKNOWN(0xC9)
00000567: DUP12
00000568: UNKNOWN(0x1F)
00000569: UNKNOWN(0xD6)
0000056a: LT
0000056b: DUP7
0000056c: UNKNOWN(0x4E)
0000056d: UNKNOWN(0xEA)
0000056e: UNKNOWN(0xBE)
0000056f: RETURNDATACOPY
00000570: DUP7
00000571: EXP
00000572: SELFDESTRUCT
00000573: DIV
00000574: BLOBBASEFEE
00000575: JUMPDEST
00000576: GASPRICE
00000577: SLOAD
00000578: UNKNOWN(0xD5)
00000579: UNKNOWN(0xDD)
0000057a: PUSH3 0x4923dc
0000057e: PUSH5 0x736f6c6343
00000584: STOP
00000585: MOD
00000586: UNKNOWN(0x0C)
00000587: STOP
00000588: CALLER

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0x4ea84ed6b137711c4eee75b16889ec42d2a6a35de992bbe64f23260b2869d92e validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "unknown", "attempts": 60, "trace_id": "0x4ea84ed6b137711c4eee75b16889ec42d2a6a35de992bbe64f23260b2869d92e", "confirmed": false, "trace_mode": "callTracer", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x0a0a05e6", "selector": "0x0a0a05e6", "calldata_variants": [ "0x0a0a05e6", "0x0a0a05e60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x6b9f96ea", "selector": "0x6b9f96ea", "calldata_variants": [ "0x6b9f96ea", "0x6b9f96ea0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf2fde38b", "selector": "0xf2fde38b", "calldata_variants": [ "0xf2fde38b", "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 390, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 1, "untrusted_delegatecall_count": 1 }
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x4c83fd1e3597fba3946cc9a29534f2dac303de1954ce69fd60700dd7e948f79d call_targets: 0xbb44e3349c23cc430cae6ebbaf0256c9f2a1872f target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x4c83fd1e3597fba3946cc9a29534f2dac303de1954ce69fd60700dd7e948f79d", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xbb44e3349c23cc430cae6ebbaf0256c9f2a1872f" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x0a0a05e6", "selector": "0x0a0a05e6", "calldata_variants": [ "0x0a0a05e6", "0x0a0a05e60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x6b9f96ea", "selector": "0x6b9f96ea", "calldata_variants": [ "0x6b9f96ea", "0x6b9f96ea0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf2fde38b", "selector": "0xf2fde38b", "calldata_variants": [ "0xf2fde38b", "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 836, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 1, "guards_detected": [], "untrusted_call_count": 1 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x4c83fd1e3597fba3946cc9a29534f2dac303de1954ce69fd60700dd7e948f79d call_targets: 0xbb44e3349c23cc430cae6ebbaf0256c9f2a1872f target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x4c83fd1e3597fba3946cc9a29534f2dac303de1954ce69fd60700dd7e948f79d", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xbb44e3349c23cc430cae6ebbaf0256c9f2a1872f" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x0a0a05e6", "selector": "0x0a0a05e6", "calldata_variants": [ "0x0a0a05e6", "0x0a0a05e60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x6b9f96ea", "selector": "0x6b9f96ea", "calldata_variants": [ "0x6b9f96ea", "0x6b9f96ea0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf2fde38b", "selector": "0xf2fde38b", "calldata_variants": [ "0xf2fde38b", "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 836, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 1, "guards_detected": [] }
high	other	detector	SELFDESTRUCT reachable	65	no	no	view trace_id: 0x8b581e361b4ff80150c48c27a6b74bb9966b1571cd2b76ef7d651eae72ab4c62 validation_json { "sink": "SELFDESTRUCT", "errors": 0, "status": "unknown", "attempts": 10, "trace_id": "0x8b581e361b4ff80150c48c27a6b74bb9966b1571cd2b76ef7d651eae72ab4c62", "confirmed": false, "trace_mode": "structLogs", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x0a0a05e6", "selector": "0x0a0a05e6", "calldata_variants": [ "0x0a0a05e6", "0x0a0a05e60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x6b9f96ea", "selector": "0x6b9f96ea", "calldata_variants": [ "0x6b9f96ea", "0x6b9f96ea0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf2fde38b", "selector": "0xf2fde38b", "calldata_variants": [ "0xf2fde38b", "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "guards_detected": [], "selfdestruct_count": 1 }