Analysis Run

019b3844-a1bd-70e9-8b8c-a3cd6833c7b1

complete

Chain ID

1

Address

0x2807b4ae232b624023f87d0e237a3b1bf200fd99

Block Number

—

Created

Fri, Dec 19, 2025 8:19 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
15513	artifact.fetch	complete	1 / 3	4 months ago
15514	tool.cast_disasm	complete	1 / 3	4 months ago
58861	analysis.bundle	complete	1 / 3	2 weeks ago
58862	capability.graph	complete	1 / 3	2 weeks ago
58863	detector.run	complete	1 / 3	2 weeks ago
58864	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

2

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

1

EXT*/BALANCE

0

Total opcodes

1416

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x004e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x01ffc9a7
00000019: EQ
0000001a: PUSH2 0x0067
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x3659cfe6
00000024: EQ
00000025: PUSH2 0x00a4
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x3e47158c
0000002f: EQ
00000030: PUSH2 0x00cd
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x4f1ef286
0000003a: EQ
0000003b: PUSH2 0x00f8
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0x8356ca4f
00000045: EQ
00000046: PUSH2 0x0114
00000049: JUMPI
0000004a: PUSH2 0x005d
0000004d: JUMP
0000004e: JUMPDEST
0000004f: CALLDATASIZE
00000050: PUSH2 0x005d
00000053: JUMPI
00000054: PUSH2 0x005b
00000057: PUSH2 0x013d
0000005a: JUMP
0000005b: JUMPDEST
0000005c: STOP
0000005d: JUMPDEST
0000005e: PUSH2 0x0065
00000061: PUSH2 0x013d
00000064: JUMP
00000065: JUMPDEST
00000066: STOP
00000067: JUMPDEST
00000068: CALLVALUE
00000069: DUP1
0000006a: ISZERO
0000006b: PUSH2 0x0073
0000006e: JUMPI
0000006f: PUSH1 0x00
00000071: DUP1
00000072: REVERT
00000073: JUMPDEST
00000074: POP
00000075: PUSH2 0x008e
00000078: PUSH1 0x04
0000007a: DUP1
0000007b: CALLDATASIZE
0000007c: SUB
0000007d: DUP2
0000007e: ADD
0000007f: SWAP1
00000080: PUSH2 0x0089
00000083: SWAP2
00000084: SWAP1
00000085: PUSH2 0x0708
00000088: JUMP
00000089: JUMPDEST
0000008a: PUSH2 0x0186
0000008d: JUMP
0000008e: JUMPDEST
0000008f: PUSH1 0x40
00000091: MLOAD
00000092: PUSH2 0x009b
00000095: SWAP2
00000096: SWAP1
00000097: PUSH2 0x0750
0000009a: JUMP
0000009b: JUMPDEST
0000009c: PUSH1 0x40
0000009e: MLOAD
0000009f: DUP1
000000a0: SWAP2
000000a1: SUB
000000a2: SWAP1
000000a3: RETURN
000000a4: JUMPDEST
000000a5: CALLVALUE
000000a6: DUP1
000000a7: ISZERO
000000a8: PUSH2 0x00b0
000000ab: JUMPI
000000ac: PUSH1 0x00
000000ae: DUP1
000000af: REVERT
000000b0: JUMPDEST
000000b1: POP
000000b2: PUSH2 0x00cb
000000b5: PUSH1 0x04
000000b7: DUP1
000000b8: CALLDATASIZE
000000b9: SUB
000000ba: DUP2
000000bb: ADD
000000bc: SWAP1
000000bd: PUSH2 0x00c6
000000c0: SWAP2
000000c1: SWAP1
000000c2: PUSH2 0x07c9
000000c5: JUMP
000000c6: JUMPDEST
000000c7: PUSH2 0x02d8
000000ca: JUMP
000000cb: JUMPDEST
000000cc: STOP
000000cd: JUMPDEST
000000ce: CALLVALUE
000000cf: DUP1
000000d0: ISZERO
000000d1: PUSH2 0x00d9
000000d4: JUMPI
000000d5: PUSH1 0x00
000000d7: DUP1
000000d8: REVERT
000000d9: JUMPDEST
000000da: POP
000000db: PUSH2 0x00e2
000000de: PUSH2 0x0369
000000e1: JUMP
000000e2: JUMPDEST
000000e3: PUSH1 0x40
000000e5: MLOAD
000000e6: PUSH2 0x00ef
000000e9: SWAP2
000000ea: SWAP1
000000eb: PUSH2 0x0805
000000ee: JUMP
000000ef: JUMPDEST
000000f0: PUSH1 0x40
000000f2: MLOAD
000000f3: DUP1
000000f4: SWAP2
000000f5: SUB
000000f6: SWAP1
000000f7: RETURN
000000f8: JUMPDEST
000000f9: PUSH2 0x0112
000000fc: PUSH1 0x04
000000fe: DUP1
000000ff: CALLDATASIZE
00000100: SUB
00000101: DUP2
00000102: ADD
00000103: SWAP1
00000104: PUSH2 0x010d
00000107: SWAP2
00000108: SWAP1
00000109: PUSH2 0x0885
0000010c: JUMP
0000010d: JUMPDEST
0000010e: PUSH2 0x0378
00000111: JUMP
00000112: JUMPDEST
00000113: STOP
00000114: JUMPDEST
00000115: CALLVALUE
00000116: DUP1
00000117: ISZERO
00000118: PUSH2 0x0120
0000011b: JUMPI
0000011c: PUSH1 0x00
0000011e: DUP1
0000011f: REVERT
00000120: JUMPDEST
00000121: POP
00000122: PUSH2 0x013b
00000125: PUSH1 0x04
00000127: DUP1
00000128: CALLDATASIZE
00000129: SUB
0000012a: DUP2
0000012b: ADD
0000012c: SWAP1
0000012d: PUSH2 0x0136
00000130: SWAP2
00000131: SWAP1
00000132: PUSH2 0x07c9
00000135: JUMP
00000136: JUMPDEST
00000137: PUSH2 0x0440
0000013a: JUMP
0000013b: JUMPDEST
0000013c: STOP
0000013d: JUMPDEST
0000013e: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000015f: SLOAD
00000160: CALLDATASIZE
00000161: PUSH1 0x00
00000163: DUP1
00000164: CALLDATACOPY
00000165: PUSH1 0x00
00000167: DUP1
00000168: CALLDATASIZE
00000169: PUSH1 0x00
0000016b: DUP5
0000016c: GAS
0000016d: DELEGATECALL
0000016e: RETURNDATASIZE
0000016f: DUP1
00000170: PUSH1 0x00
00000172: DUP1
00000173: RETURNDATACOPY
00000174: DUP2
00000175: PUSH1 0x00
00000177: DUP2
00000178: EQ
00000179: PUSH2 0x0181
0000017c: JUMPI
0000017d: DUP2
0000017e: PUSH1 0x00
00000180: RETURN
00000181: JUMPDEST
00000182: DUP2
00000183: PUSH1 0x00
00000185: REVERT
00000186: JUMPDEST
00000187: PUSH1 0x00
00000189: PUSH4 0x01ffc9a7
0000018e: PUSH1 0xe0
00000190: SHL
00000191: DUP3
00000192: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
000001af: NOT
000001b0: AND
000001b1: EQ
000001b2: DUP1
000001b3: PUSH2 0x01e1
000001b6: JUMPI
000001b7: POP
000001b8: PUSH4 0x7f5828d0
000001bd: PUSH1 0xe0
000001bf: SHL
000001c0: DUP3
000001c1: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
000001de: NOT
000001df: AND
000001e0: EQ
000001e1: JUMPDEST
000001e2: ISZERO
000001e3: PUSH2 0x01ef
000001e6: JUMPI
000001e7: PUSH1 0x01
000001e9: SWAP1
000001ea: POP
000001eb: PUSH2 0x02d3
000001ee: JUMP
000001ef: JUMPDEST
000001f0: PUSH4 0xffffffff
000001f5: PUSH1 0xe0
000001f7: SHL
000001f8: DUP3
000001f9: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
00000216: NOT
00000217: AND
00000218: EQ
00000219: ISZERO
0000021a: PUSH2 0x0226
0000021d: JUMPI
0000021e: PUSH1 0x00
00000220: SWAP1
00000221: POP
00000222: PUSH2 0x02d3
00000225: JUMP
00000226: JUMPDEST
00000227: PUSH1 0x00
00000229: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000024a: SLOAD
0000024b: SWAP1
0000024c: POP
0000024d: DUP1
0000024e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000263: AND
00000264: PUSH4 0x01ffc9a7
00000269: DUP5
0000026a: PUSH1 0x40
0000026c: MLOAD
0000026d: DUP3
0000026e: PUSH4 0xffffffff
00000273: AND
00000274: PUSH1 0xe0
00000276: SHL
00000277: DUP2
00000278: MSTORE
00000279: PUSH1 0x04
0000027b: ADD
0000027c: PUSH2 0x0285
0000027f: SWAP2
00000280: SWAP1
00000281: PUSH2 0x08f4
00000284: JUMP
00000285: JUMPDEST
00000286: PUSH1 0x20
00000288: PUSH1 0x40
0000028a: MLOAD
0000028b: DUP1
0000028c: DUP4
0000028d: SUB
0000028e: DUP2
0000028f: DUP7
00000290: GAS
00000291: STATICCALL
00000292: SWAP3
00000293: POP
00000294: POP
00000295: POP
00000296: DUP1
00000297: ISZERO
00000298: PUSH2 0x02bf
0000029b: JUMPI
0000029c: POP
0000029d: PUSH1 0x40
0000029f: MLOAD
000002a0: RETURNDATASIZE
000002a1: PUSH1 0x1f
000002a3: NOT
000002a4: PUSH1 0x1f
000002a6: DUP3
000002a7: ADD
000002a8: AND
000002a9: DUP3
000002aa: ADD
000002ab: DUP1
000002ac: PUSH1 0x40
000002ae: MSTORE
000002af: POP
000002b0: DUP2
000002b1: ADD
000002b2: SWAP1
000002b3: PUSH2 0x02bc
000002b6: SWAP2
000002b7: SWAP1
000002b8: PUSH2 0x093b
000002bb: JUMP
000002bc: JUMPDEST
000002bd: PUSH1 0x01
000002bf: JUMPDEST
000002c0: PUSH2 0x02cd
000002c3: JUMPI
000002c4: PUSH1 0x00
000002c6: SWAP2
000002c7: POP
000002c8: POP
000002c9: PUSH2 0x02d3
000002cc: JUMP
000002cd: JUMPDEST
000002ce: DUP1
000002cf: SWAP3
000002d0: POP
000002d1: POP
000002d2: POP
000002d3: JUMPDEST
000002d4: SWAP2
000002d5: SWAP1
000002d6: POP
000002d7: JUMP
000002d8: JUMPDEST
000002d9: PUSH2 0x02e0
000002dc: PUSH2 0x04c1
000002df: JUMP
000002e0: JUMPDEST
000002e1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002f6: AND
000002f7: CALLER
000002f8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000030d: AND
0000030e: EQ
0000030f: PUSH2 0x034d
00000312: JUMPI
00000313: PUSH1 0x40
00000315: MLOAD
00000316: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000337: DUP2
00000338: MSTORE
00000339: PUSH1 0x04
0000033b: ADD
0000033c: PUSH2 0x0344
0000033f: SWAP1
00000340: PUSH2 0x09c5
00000343: JUMP
00000344: JUMPDEST
00000345: PUSH1 0x40
00000347: MLOAD
00000348: DUP1
00000349: SWAP2
0000034a: SUB
0000034b: SWAP1
0000034c: REVERT
0000034d: JUMPDEST
0000034e: PUSH2 0x0366
00000351: DUP2
00000352: PUSH1 0x40
00000354: MLOAD
00000355: DUP1
00000356: PUSH1 0x20
00000358: ADD
00000359: PUSH1 0x40
0000035b: MSTORE
0000035c: DUP1
0000035d: PUSH1 0x00
0000035f: DUP2
00000360: MSTORE
00000361: POP
00000362: PUSH2 0x04ea
00000365: JUMP
00000366: JUMPDEST
00000367: POP
00000368: JUMP
00000369: JUMPDEST
0000036a: PUSH1 0x00
0000036c: PUSH2 0x0373
0000036f: PUSH2 0x04c1
00000372: JUMP
00000373: JUMPDEST
00000374: SWAP1
00000375: POP
00000376: SWAP1
00000377: JUMP
00000378: JUMPDEST
00000379: PUSH2 0x0380
0000037c: PUSH2 0x04c1
0000037f: JUMP
00000380: JUMPDEST
00000381: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000396: AND
00000397: CALLER
00000398: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003ad: AND
000003ae: EQ
000003af: PUSH2 0x03ed
000003b2: JUMPI
000003b3: PUSH1 0x40
000003b5: MLOAD
000003b6: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000003d7: DUP2
000003d8: MSTORE
000003d9: PUSH1 0x04
000003db: ADD
000003dc: PUSH2 0x03e4
000003df: SWAP1
000003e0: PUSH2 0x09c5
000003e3: JUMP
000003e4: JUMPDEST
000003e5: PUSH1 0x40
000003e7: MLOAD
000003e8: DUP1
000003e9: SWAP2
000003ea: SUB
000003eb: SWAP1
000003ec: REVERT
000003ed: JUMPDEST
000003ee: PUSH2 0x043b
000003f1: DUP4
000003f2: DUP4
000003f3: DUP4
000003f4: DUP1
000003f5: DUP1
000003f6: PUSH1 0x1f
000003f8: ADD
000003f9: PUSH1 0x20
000003fb: DUP1
000003fc: SWAP2
000003fd: DIV
000003fe: MUL
000003ff: PUSH1 0x20
00000401: ADD
00000402: PUSH1 0x40
00000404: MLOAD
00000405: SWAP1
00000406: DUP2
00000407: ADD
00000408: PUSH1 0x40
0000040a: MSTORE
0000040b: DUP1
0000040c: SWAP4
0000040d: SWAP3
0000040e: SWAP2
0000040f: SWAP1
00000410: DUP2
00000411: DUP2
00000412: MSTORE
00000413: PUSH1 0x20
00000415: ADD
00000416: DUP4
00000417: DUP4
00000418: DUP1
00000419: DUP3
0000041a: DUP5
0000041b: CALLDATACOPY
0000041c: PUSH1 0x00
0000041e: DUP2
0000041f: DUP5
00000420: ADD
00000421: MSTORE
00000422: PUSH1 0x1f
00000424: NOT
00000425: PUSH1 0x1f
00000427: DUP3
00000428: ADD
00000429: AND
0000042a: SWAP1
0000042b: POP
0000042c: DUP1
0000042d: DUP4
0000042e: ADD
0000042f: SWAP3
00000430: POP
00000431: POP
00000432: POP
00000433: POP
00000434: POP
00000435: POP
00000436: POP
00000437: PUSH2 0x04ea
0000043a: JUMP
0000043b: JUMPDEST
0000043c: POP
0000043d: POP
0000043e: POP
0000043f: JUMP
00000440: JUMPDEST
00000441: PUSH2 0x0448
00000444: PUSH2 0x04c1
00000447: JUMP
00000448: JUMPDEST
00000449: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000045e: AND
0000045f: CALLER
00000460: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000475: AND
00000476: EQ
00000477: PUSH2 0x04b5
0000047a: JUMPI
0000047b: PUSH1 0x40
0000047d: MLOAD
0000047e: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000049f: DUP2
000004a0: MSTORE
000004a1: PUSH1 0x04
000004a3: ADD
000004a4: PUSH2 0x04ac
000004a7: SWAP1
000004a8: PUSH2 0x09c5
000004ab: JUMP
000004ac: JUMPDEST
000004ad: PUSH1 0x40
000004af: MLOAD
000004b0: DUP1
000004b1: SWAP2
000004b2: SUB
000004b3: SWAP1
000004b4: REVERT
000004b5: JUMPDEST
000004b6: PUSH2 0x04be
000004b9: DUP2
000004ba: PUSH2 0x0619
000004bd: JUMP
000004be: JUMPDEST
000004bf: POP
000004c0: JUMP
000004c1: JUMPDEST
000004c2: PUSH1 0x00
000004c4: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000004e5: SLOAD
000004e6: SWAP1
000004e7: POP
000004e8: SWAP1
000004e9: JUMP
000004ea: JUMPDEST
000004eb: PUSH1 0x00
000004ed: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000050e: SLOAD
0000050f: SWAP1
00000510: POP
00000511: DUP3
00000512: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000533: SSTORE
00000534: DUP3
00000535: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000054a: AND
0000054b: DUP2
0000054c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000561: AND
00000562: PUSH32 0x5570d70a002632a7b0b3c9304cc89efb62d8da9eca0dbd7752c83b7379068296
00000583: PUSH1 0x40
00000585: MLOAD
00000586: PUSH1 0x40
00000588: MLOAD
00000589: DUP1
0000058a: SWAP2
0000058b: SUB
0000058c: SWAP1
0000058d: LOG3
0000058e: PUSH1 0x00
00000590: DUP3
00000591: MLOAD
00000592: GT
00000593: ISZERO
00000594: PUSH2 0x0614
00000597: JUMPI
00000598: PUSH1 0x00
0000059a: DUP4
0000059b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005b0: AND
000005b1: DUP4
000005b2: PUSH1 0x40
000005b4: MLOAD
000005b5: PUSH2 0x05be
000005b8: SWAP2
000005b9: SWAP1
000005ba: PUSH2 0x0a5f
000005bd: JUMP
000005be: JUMPDEST
000005bf: PUSH1 0x00
000005c1: PUSH1 0x40
000005c3: MLOAD
000005c4: DUP1
000005c5: DUP4
000005c6: SUB
000005c7: DUP2
000005c8: DUP6
000005c9: GAS
000005ca: DELEGATECALL
000005cb: SWAP2
000005cc: POP
000005cd: POP
000005ce: RETURNDATASIZE
000005cf: DUP1
000005d0: PUSH1 0x00
000005d2: DUP2
000005d3: EQ
000005d4: PUSH2 0x05f9
000005d7: JUMPI
000005d8: PUSH1 0x40
000005da: MLOAD
000005db: SWAP2
000005dc: POP
000005dd: PUSH1 0x1f
000005df: NOT
000005e0: PUSH1 0x3f
000005e2: RETURNDATASIZE
000005e3: ADD
000005e4: AND
000005e5: DUP3
000005e6: ADD
000005e7: PUSH1 0x40
000005e9: MSTORE
000005ea: RETURNDATASIZE
000005eb: DUP3
000005ec: MSTORE
000005ed: RETURNDATASIZE
000005ee: PUSH1 0x00
000005f0: PUSH1 0x20
000005f2: DUP5
000005f3: ADD
000005f4: RETURNDATACOPY
000005f5: PUSH2 0x05fe
000005f8: JUMP
000005f9: JUMPDEST
000005fa: PUSH1 0x60
000005fc: SWAP2
000005fd: POP
000005fe: JUMPDEST
000005ff: POP
00000600: POP
00000601: SWAP1
00000602: POP
00000603: DUP1
00000604: PUSH2 0x0612
00000607: JUMPI
00000608: RETURNDATASIZE
00000609: DUP1
0000060a: PUSH1 0x00
0000060c: DUP1
0000060d: RETURNDATACOPY
0000060e: DUP1
0000060f: PUSH1 0x00
00000611: REVERT
00000612: JUMPDEST
00000613: POP
00000614: JUMPDEST
00000615: POP
00000616: POP
00000617: POP
00000618: JUMP
00000619: JUMPDEST
0000061a: PUSH1 0x00
0000061c: PUSH2 0x0623
0000061f: PUSH2 0x04c1
00000622: JUMP
00000623: JUMPDEST
00000624: SWAP1
00000625: POP
00000626: DUP2
00000627: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000648: SSTORE
00000649: DUP2
0000064a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000065f: AND
00000660: DUP2
00000661: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000676: AND
00000677: PUSH32 0xdf435d422321da6b195902d70fc417c06a32f88379c20dd8f2a8da07088cec29
00000698: PUSH1 0x40
0000069a: MLOAD
0000069b: PUSH1 0x40
0000069d: MLOAD
0000069e: DUP1
0000069f: SWAP2
000006a0: SUB
000006a1: SWAP1
000006a2: LOG3
000006a3: POP
000006a4: POP
000006a5: JUMP
000006a6: JUMPDEST
000006a7: PUSH1 0x00
000006a9: DUP1
000006aa: REVERT
000006ab: JUMPDEST
000006ac: PUSH1 0x00
000006ae: DUP1
000006af: REVERT
000006b0: JUMPDEST
000006b1: PUSH1 0x00
000006b3: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
000006d4: DUP3
000006d5: AND
000006d6: SWAP1
000006d7: POP
000006d8: SWAP2
000006d9: SWAP1
000006da: POP
000006db: JUMP
000006dc: JUMPDEST
000006dd: PUSH2 0x06e5
000006e0: DUP2
000006e1: PUSH2 0x06b0
000006e4: JUMP
000006e5: JUMPDEST
000006e6: DUP2
000006e7: EQ
000006e8: PUSH2 0x06f0
000006eb: JUMPI
000006ec: PUSH1 0x00
000006ee: DUP1
000006ef: REVERT
000006f0: JUMPDEST
000006f1: POP
000006f2: JUMP
000006f3: JUMPDEST
000006f4: PUSH1 0x00
000006f6: DUP2
000006f7: CALLDATALOAD
000006f8: SWAP1
000006f9: POP
000006fa: PUSH2 0x0702
000006fd: DUP2
000006fe: PUSH2 0x06dc
00000701: JUMP
00000702: JUMPDEST
00000703: SWAP3
00000704: SWAP2
00000705: POP
00000706: POP
00000707: JUMP
00000708: JUMPDEST
00000709: PUSH1 0x00
0000070b: PUSH1 0x20
0000070d: DUP3
0000070e: DUP5
0000070f: SUB
00000710: SLT
00000711: ISZERO
00000712: PUSH2 0x071e
00000715: JUMPI
00000716: PUSH2 0x071d
00000719: PUSH2 0x06a6
0000071c: JUMP
0000071d: JUMPDEST
0000071e: JUMPDEST
0000071f: PUSH1 0x00
00000721: PUSH2 0x072c
00000724: DUP5
00000725: DUP3
00000726: DUP6
00000727: ADD
00000728: PUSH2 0x06f3
0000072b: JUMP
0000072c: JUMPDEST
0000072d: SWAP2
0000072e: POP
0000072f: POP
00000730: SWAP3
00000731: SWAP2
00000732: POP
00000733: POP
00000734: JUMP
00000735: JUMPDEST
00000736: PUSH1 0x00
00000738: DUP2
00000739: ISZERO
0000073a: ISZERO
0000073b: SWAP1
0000073c: POP
0000073d: SWAP2
0000073e: SWAP1
0000073f: POP
00000740: JUMP
00000741: JUMPDEST
00000742: PUSH2 0x074a
00000745: DUP2
00000746: PUSH2 0x0735
00000749: JUMP
0000074a: JUMPDEST
0000074b: DUP3
0000074c: MSTORE
0000074d: POP
0000074e: POP
0000074f: JUMP
00000750: JUMPDEST
00000751: PUSH1 0x00
00000753: PUSH1 0x20
00000755: DUP3
00000756: ADD
00000757: SWAP1
00000758: POP
00000759: PUSH2 0x0765
0000075c: PUSH1 0x00
0000075e: DUP4
0000075f: ADD
00000760: DUP5
00000761: PUSH2 0x0741
00000764: JUMP
00000765: JUMPDEST
00000766: SWAP3
00000767: SWAP2
00000768: POP
00000769: POP
0000076a: JUMP
0000076b: JUMPDEST
0000076c: PUSH1 0x00
0000076e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000783: DUP3
00000784: AND
00000785: SWAP1
00000786: POP
00000787: SWAP2
00000788: SWAP1
00000789: POP
0000078a: JUMP
0000078b: JUMPDEST
0000078c: PUSH1 0x00
0000078e: PUSH2 0x0796
00000791: DUP3
00000792: PUSH2 0x076b
00000795: JUMP
00000796: JUMPDEST
00000797: SWAP1
00000798: POP
00000799: SWAP2
0000079a: SWAP1
0000079b: POP
0000079c: JUMP
0000079d: JUMPDEST
0000079e: PUSH2 0x07a6
000007a1: DUP2
000007a2: PUSH2 0x078b
000007a5: JUMP
000007a6: JUMPDEST
000007a7: DUP2
000007a8: EQ
000007a9: PUSH2 0x07b1
000007ac: JUMPI
000007ad: PUSH1 0x00
000007af: DUP1
000007b0: REVERT
000007b1: JUMPDEST
000007b2: POP
000007b3: JUMP
000007b4: JUMPDEST
000007b5: PUSH1 0x00
000007b7: DUP2
000007b8: CALLDATALOAD
000007b9: SWAP1
000007ba: POP
000007bb: PUSH2 0x07c3
000007be: DUP2
000007bf: PUSH2 0x079d
000007c2: JUMP
000007c3: JUMPDEST
000007c4: SWAP3
000007c5: SWAP2
000007c6: POP
000007c7: POP
000007c8: JUMP
000007c9: JUMPDEST
000007ca: PUSH1 0x00
000007cc: PUSH1 0x20
000007ce: DUP3
000007cf: DUP5
000007d0: SUB
000007d1: SLT
000007d2: ISZERO
000007d3: PUSH2 0x07df
000007d6: JUMPI
000007d7: PUSH2 0x07de
000007da: PUSH2 0x06a6
000007dd: JUMP
000007de: JUMPDEST
000007df: JUMPDEST
000007e0: PUSH1 0x00
000007e2: PUSH2 0x07ed
000007e5: DUP5
000007e6: DUP3
000007e7: DUP6
000007e8: ADD
000007e9: PUSH2 0x07b4
000007ec: JUMP
000007ed: JUMPDEST
000007ee: SWAP2
000007ef: POP
000007f0: POP
000007f1: SWAP3
000007f2: SWAP2
000007f3: POP
000007f4: POP
000007f5: JUMP
000007f6: JUMPDEST
000007f7: PUSH2 0x07ff
000007fa: DUP2
000007fb: PUSH2 0x078b
000007fe: JUMP
000007ff: JUMPDEST
00000800: DUP3
00000801: MSTORE
00000802: POP
00000803: POP
00000804: JUMP
00000805: JUMPDEST
00000806: PUSH1 0x00
00000808: PUSH1 0x20
0000080a: DUP3
0000080b: ADD
0000080c: SWAP1
0000080d: POP
0000080e: PUSH2 0x081a
00000811: PUSH1 0x00
00000813: DUP4
00000814: ADD
00000815: DUP5
00000816: PUSH2 0x07f6
00000819: JUMP
0000081a: JUMPDEST
0000081b: SWAP3
0000081c: SWAP2
0000081d: POP
0000081e: POP
0000081f: JUMP
00000820: JUMPDEST
00000821: PUSH1 0x00
00000823: DUP1
00000824: REVERT
00000825: JUMPDEST
00000826: PUSH1 0x00
00000828: DUP1
00000829: REVERT
0000082a: JUMPDEST
0000082b: PUSH1 0x00
0000082d: DUP1
0000082e: REVERT
0000082f: JUMPDEST
00000830: PUSH1 0x00
00000832: DUP1
00000833: DUP4
00000834: PUSH1 0x1f
00000836: DUP5
00000837: ADD
00000838: SLT
00000839: PUSH2 0x0845
0000083c: JUMPI
0000083d: PUSH2 0x0844
00000840: PUSH2 0x0820
00000843: JUMP
00000844: JUMPDEST
00000845: JUMPDEST
00000846: DUP3
00000847: CALLDATALOAD
00000848: SWAP1
00000849: POP
0000084a: PUSH8 0xffffffffffffffff
00000853: DUP2
00000854: GT
00000855: ISZERO
00000856: PUSH2 0x0862
00000859: JUMPI
0000085a: PUSH2 0x0861
0000085d: PUSH2 0x0825
00000860: JUMP
00000861: JUMPDEST
00000862: JUMPDEST
00000863: PUSH1 0x20
00000865: DUP4
00000866: ADD
00000867: SWAP2
00000868: POP
00000869: DUP4
0000086a: PUSH1 0x01
0000086c: DUP3
0000086d: MUL
0000086e: DUP4
0000086f: ADD
00000870: GT
00000871: ISZERO
00000872: PUSH2 0x087e
00000875: JUMPI
00000876: PUSH2 0x087d
00000879: PUSH2 0x082a
0000087c: JUMP
0000087d: JUMPDEST
0000087e: JUMPDEST
0000087f: SWAP3
00000880: POP
00000881: SWAP3
00000882: SWAP1
00000883: POP
00000884: JUMP
00000885: JUMPDEST
00000886: PUSH1 0x00
00000888: DUP1
00000889: PUSH1 0x00
0000088b: PUSH1 0x40
0000088d: DUP5
0000088e: DUP7
0000088f: SUB
00000890: SLT
00000891: ISZERO
00000892: PUSH2 0x089e
00000895: JUMPI
00000896: PUSH2 0x089d
00000899: PUSH2 0x06a6
0000089c: JUMP
0000089d: JUMPDEST
0000089e: JUMPDEST
0000089f: PUSH1 0x00
000008a1: PUSH2 0x08ac
000008a4: DUP7
000008a5: DUP3
000008a6: DUP8
000008a7: ADD
000008a8: PUSH2 0x07b4
000008ab: JUMP
000008ac: JUMPDEST
000008ad: SWAP4
000008ae: POP
000008af: POP
000008b0: PUSH1 0x20
000008b2: DUP5
000008b3: ADD
000008b4: CALLDATALOAD
000008b5: PUSH8 0xffffffffffffffff
000008be: DUP2
000008bf: GT
000008c0: ISZERO
000008c1: PUSH2 0x08cd
000008c4: JUMPI
000008c5: PUSH2 0x08cc
000008c8: PUSH2 0x06ab
000008cb: JUMP
000008cc: JUMPDEST
000008cd: JUMPDEST
000008ce: PUSH2 0x08d9
000008d1: DUP7
000008d2: DUP3
000008d3: DUP8
000008d4: ADD
000008d5: PUSH2 0x082f
000008d8: JUMP
000008d9: JUMPDEST
000008da: SWAP3
000008db: POP
000008dc: SWAP3
000008dd: POP
000008de: POP
000008df: SWAP3
000008e0: POP
000008e1: SWAP3
000008e2: POP
000008e3: SWAP3
000008e4: JUMP
000008e5: JUMPDEST
000008e6: PUSH2 0x08ee
000008e9: DUP2
000008ea: PUSH2 0x06b0
000008ed: JUMP
000008ee: JUMPDEST
000008ef: DUP3
000008f0: MSTORE
000008f1: POP
000008f2: POP
000008f3: JUMP
000008f4: JUMPDEST
000008f5: PUSH1 0x00
000008f7: PUSH1 0x20
000008f9: DUP3
000008fa: ADD
000008fb: SWAP1
000008fc: POP
000008fd: PUSH2 0x0909
00000900: PUSH1 0x00
00000902: DUP4
00000903: ADD
00000904: DUP5
00000905: PUSH2 0x08e5
00000908: JUMP
00000909: JUMPDEST
0000090a: SWAP3
0000090b: SWAP2
0000090c: POP
0000090d: POP
0000090e: JUMP
0000090f: JUMPDEST
00000910: PUSH2 0x0918
00000913: DUP2
00000914: PUSH2 0x0735
00000917: JUMP
00000918: JUMPDEST
00000919: DUP2
0000091a: EQ
0000091b: PUSH2 0x0923
0000091e: JUMPI
0000091f: PUSH1 0x00
00000921: DUP1
00000922: REVERT
00000923: JUMPDEST
00000924: POP
00000925: JUMP
00000926: JUMPDEST
00000927: PUSH1 0x00
00000929: DUP2
0000092a: MLOAD
0000092b: SWAP1
0000092c: POP
0000092d: PUSH2 0x0935
00000930: DUP2
00000931: PUSH2 0x090f
00000934: JUMP
00000935: JUMPDEST
00000936: SWAP3
00000937: SWAP2
00000938: POP
00000939: POP
0000093a: JUMP
0000093b: JUMPDEST
0000093c: PUSH1 0x00
0000093e: PUSH1 0x20
00000940: DUP3
00000941: DUP5
00000942: SUB
00000943: SLT
00000944: ISZERO
00000945: PUSH2 0x0951
00000948: JUMPI
00000949: PUSH2 0x0950
0000094c: PUSH2 0x06a6
0000094f: JUMP
00000950: JUMPDEST
00000951: JUMPDEST
00000952: PUSH1 0x00
00000954: PUSH2 0x095f
00000957: DUP5
00000958: DUP3
00000959: DUP6
0000095a: ADD
0000095b: PUSH2 0x0926
0000095e: JUMP
0000095f: JUMPDEST
00000960: SWAP2
00000961: POP
00000962: POP
00000963: SWAP3
00000964: SWAP2
00000965: POP
00000966: POP
00000967: JUMP
00000968: JUMPDEST
00000969: PUSH1 0x00
0000096b: DUP3
0000096c: DUP3
0000096d: MSTORE
0000096e: PUSH1 0x20
00000970: DUP3
00000971: ADD
00000972: SWAP1
00000973: POP
00000974: SWAP3
00000975: SWAP2
00000976: POP
00000977: POP
00000978: JUMP
00000979: JUMPDEST
0000097a: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000
0000099b: PUSH1 0x00
0000099d: DUP3
0000099e: ADD
0000099f: MSTORE
000009a0: POP
000009a1: JUMP
000009a2: JUMPDEST
000009a3: PUSH1 0x00
000009a5: PUSH2 0x09af
000009a8: PUSH1 0x0e
000009aa: DUP4
000009ab: PUSH2 0x0968
000009ae: JUMP
000009af: JUMPDEST
000009b0: SWAP2
000009b1: POP
000009b2: PUSH2 0x09ba
000009b5: DUP3
000009b6: PUSH2 0x0979
000009b9: JUMP
000009ba: JUMPDEST
000009bb: PUSH1 0x20
000009bd: DUP3
000009be: ADD
000009bf: SWAP1
000009c0: POP
000009c1: SWAP2
000009c2: SWAP1
000009c3: POP
000009c4: JUMP
000009c5: JUMPDEST
000009c6: PUSH1 0x00
000009c8: PUSH1 0x20
000009ca: DUP3
000009cb: ADD
000009cc: SWAP1
000009cd: POP
000009ce: DUP2
000009cf: DUP2
000009d0: SUB
000009d1: PUSH1 0x00
000009d3: DUP4
000009d4: ADD
000009d5: MSTORE
000009d6: PUSH2 0x09de
000009d9: DUP2
000009da: PUSH2 0x09a2
000009dd: JUMP
000009de: JUMPDEST
000009df: SWAP1
000009e0: POP
000009e1: SWAP2
000009e2: SWAP1
000009e3: POP
000009e4: JUMP
000009e5: JUMPDEST
000009e6: PUSH1 0x00
000009e8: DUP2
000009e9: MLOAD
000009ea: SWAP1
000009eb: POP
000009ec: SWAP2
000009ed: SWAP1
000009ee: POP
000009ef: JUMP
000009f0: JUMPDEST
000009f1: PUSH1 0x00
000009f3: DUP2
000009f4: SWAP1
000009f5: POP
000009f6: SWAP3
000009f7: SWAP2
000009f8: POP
000009f9: POP
000009fa: JUMP
000009fb: JUMPDEST
000009fc: PUSH1 0x00
000009fe: JUMPDEST
000009ff: DUP4
00000a00: DUP2
00000a01: LT
00000a02: ISZERO
00000a03: PUSH2 0x0a19
00000a06: JUMPI
00000a07: DUP1
00000a08: DUP3
00000a09: ADD
00000a0a: MLOAD
00000a0b: DUP2
00000a0c: DUP5
00000a0d: ADD
00000a0e: MSTORE
00000a0f: PUSH1 0x20
00000a11: DUP2
00000a12: ADD
00000a13: SWAP1
00000a14: POP
00000a15: PUSH2 0x09fe
00000a18: JUMP
00000a19: JUMPDEST
00000a1a: DUP4
00000a1b: DUP2
00000a1c: GT
00000a1d: ISZERO
00000a1e: PUSH2 0x0a28
00000a21: JUMPI
00000a22: PUSH1 0x00
00000a24: DUP5
00000a25: DUP5
00000a26: ADD
00000a27: MSTORE
00000a28: JUMPDEST
00000a29: POP
00000a2a: POP
00000a2b: POP
00000a2c: POP
00000a2d: JUMP
00000a2e: JUMPDEST
00000a2f: PUSH1 0x00
00000a31: PUSH2 0x0a39
00000a34: DUP3
00000a35: PUSH2 0x09e5
00000a38: JUMP
00000a39: JUMPDEST
00000a3a: PUSH2 0x0a43
00000a3d: DUP2
00000a3e: DUP6
00000a3f: PUSH2 0x09f0
00000a42: JUMP
00000a43: JUMPDEST
00000a44: SWAP4
00000a45: POP
00000a46: PUSH2 0x0a53
00000a49: DUP2
00000a4a: DUP6
00000a4b: PUSH1 0x20
00000a4d: DUP7
00000a4e: ADD
00000a4f: PUSH2 0x09fb
00000a52: JUMP
00000a53: JUMPDEST
00000a54: DUP1
00000a55: DUP5
00000a56: ADD
00000a57: SWAP2
00000a58: POP
00000a59: POP
00000a5a: SWAP3
00000a5b: SWAP2
00000a5c: POP
00000a5d: POP
00000a5e: JUMP
00000a5f: JUMPDEST
00000a60: PUSH1 0x00
00000a62: PUSH2 0x0a6b
00000a65: DUP3
00000a66: DUP5
00000a67: PUSH2 0x0a2e
00000a6a: JUMP
00000a6b: JUMPDEST
00000a6c: SWAP2
00000a6d: POP
00000a6e: DUP2
00000a6f: SWAP1
00000a70: POP
00000a71: SWAP3
00000a72: SWAP2
00000a73: POP
00000a74: POP
00000a75: JUMP
00000a76: INVALID
00000a77: LOG2
00000a78: PUSH5 0x6970667358
00000a7e: UNKNOWN(0x22)
00000a7f: SLT
00000a80: KECCAK256
00000a81: SHR
00000a82: MUL
00000a83: UNKNOWN(0xF9)
00000a84: DUP7
00000a85: DUP12
00000a86: UNKNOWN(0xEA)
00000a87: UNKNOWN(0x1F)
00000a88: DUP15
00000a89: PUSH20 0x92ef8bead12df2b877f9987cd7b4eafcdf405b99
00000a9e: ADDMOD
00000a9f: JUMPDEST
00000aa0: UNKNOWN(0xAE)
00000aa1: PUSH5 0x736f6c6343
00000aa7: STOP
00000aa8: ADDMOD
00000aa9: UNKNOWN(0x0C)
00000aaa: STOP
00000aab: CALLER

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	upgradeability	detector	Untrusted DELEGATECALL target reachable	55	no	no	view trace_id: 0x8071cb2531a12776b697592962ae1ec98d4e8078992ab595bb33d2afce835ed4 validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "unknown", "attempts": 60, "trace_id": "0x8071cb2531a12776b697592962ae1ec98d4e8078992ab595bb33d2afce835ed4", "confirmed": false, "trace_mode": "callTracer", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x01ffc9a7", "selector": "0x01ffc9a7", "calldata_variants": [ "0x01ffc9a7", "0x01ffc9a70000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x3659cfe6", "selector": "0x3659cfe6", "calldata_variants": [ "0x3659cfe6", "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x3e47158c", "selector": "0x3e47158c", "calldata_variants": [ "0x3e47158c", "0x3e47158c0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4f1ef286", "selector": "0x4f1ef286", "calldata_variants": [ "0x4f1ef286", "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8356ca4f", "selector": "0x8356ca4f", "calldata_variants": [ "0x8356ca4f", "0x8356ca4f0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 365, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1482, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [ { "pc": 759, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 919, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1119, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" } ], "delegatecall_count": 2, "untrusted_delegatecall_count": 2 }

Severity