Analysis Run

019b3844-a573-7083-8ca5-aca2f088b582

complete

Chain ID

1

Address

0x2f95c102cc26875406bc689fb01ae382b82aa535

Block Number

—

Created

Fri, Dec 19, 2025 8:19 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
16199	artifact.fetch	complete	1 / 3	3 months ago
16200	tool.cast_disasm	complete	1 / 3	3 months ago
86532	analysis.bundle	complete	1 / 3	1 week ago
86533	capability.graph	complete	1 / 3	1 week ago
86534	detector.run	complete	1 / 3	1 week ago
86535	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

2

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

0

EXT*/BALANCE

3

Total opcodes

1204

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x004e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x3659cfe6
00000019: EQ
0000001a: PUSH2 0x0065
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x4f1ef286
00000024: EQ
00000025: PUSH2 0x0085
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x5c60da1b
0000002f: EQ
00000030: PUSH2 0x0098
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x8f283970
0000003a: EQ
0000003b: PUSH2 0x00c9
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf851a440
00000045: EQ
00000046: PUSH2 0x00e9
00000049: JUMPI
0000004a: PUSH2 0x005d
0000004d: JUMP
0000004e: JUMPDEST
0000004f: CALLDATASIZE
00000050: PUSH2 0x005d
00000053: JUMPI
00000054: PUSH2 0x005b
00000057: PUSH2 0x00fe
0000005a: JUMP
0000005b: JUMPDEST
0000005c: STOP
0000005d: JUMPDEST
0000005e: PUSH2 0x005b
00000061: PUSH2 0x00fe
00000064: JUMP
00000065: JUMPDEST
00000066: CALLVALUE
00000067: DUP1
00000068: ISZERO
00000069: PUSH2 0x0071
0000006c: JUMPI
0000006d: PUSH1 0x00
0000006f: DUP1
00000070: REVERT
00000071: JUMPDEST
00000072: POP
00000073: PUSH2 0x005b
00000076: PUSH2 0x0080
00000079: CALLDATASIZE
0000007a: PUSH1 0x04
0000007c: PUSH2 0x0676
0000007f: JUMP
00000080: JUMPDEST
00000081: PUSH2 0x0118
00000084: JUMP
00000085: JUMPDEST
00000086: PUSH2 0x005b
00000089: PUSH2 0x0093
0000008c: CALLDATASIZE
0000008d: PUSH1 0x04
0000008f: PUSH2 0x0691
00000092: JUMP
00000093: JUMPDEST
00000094: PUSH2 0x0155
00000097: JUMP
00000098: JUMPDEST
00000099: CALLVALUE
0000009a: DUP1
0000009b: ISZERO
0000009c: PUSH2 0x00a4
0000009f: JUMPI
000000a0: PUSH1 0x00
000000a2: DUP1
000000a3: REVERT
000000a4: JUMPDEST
000000a5: POP
000000a6: PUSH2 0x00ad
000000a9: PUSH2 0x01bc
000000ac: JUMP
000000ad: JUMPDEST
000000ae: PUSH1 0x40
000000b0: MLOAD
000000b1: PUSH1 0x01
000000b3: PUSH1 0x01
000000b5: PUSH1 0xa0
000000b7: SHL
000000b8: SUB
000000b9: SWAP1
000000ba: SWAP2
000000bb: AND
000000bc: DUP2
000000bd: MSTORE
000000be: PUSH1 0x20
000000c0: ADD
000000c1: PUSH1 0x40
000000c3: MLOAD
000000c4: DUP1
000000c5: SWAP2
000000c6: SUB
000000c7: SWAP1
000000c8: RETURN
000000c9: JUMPDEST
000000ca: CALLVALUE
000000cb: DUP1
000000cc: ISZERO
000000cd: PUSH2 0x00d5
000000d0: JUMPI
000000d1: PUSH1 0x00
000000d3: DUP1
000000d4: REVERT
000000d5: JUMPDEST
000000d6: POP
000000d7: PUSH2 0x005b
000000da: PUSH2 0x00e4
000000dd: CALLDATASIZE
000000de: PUSH1 0x04
000000e0: PUSH2 0x0676
000000e3: JUMP
000000e4: JUMPDEST
000000e5: PUSH2 0x01ed
000000e8: JUMP
000000e9: JUMPDEST
000000ea: CALLVALUE
000000eb: DUP1
000000ec: ISZERO
000000ed: PUSH2 0x00f5
000000f0: JUMPI
000000f1: PUSH1 0x00
000000f3: DUP1
000000f4: REVERT
000000f5: JUMPDEST
000000f6: POP
000000f7: PUSH2 0x00ad
000000fa: PUSH2 0x020d
000000fd: JUMP
000000fe: JUMPDEST
000000ff: PUSH2 0x0106
00000102: PUSH2 0x0269
00000105: JUMP
00000106: JUMPDEST
00000107: PUSH2 0x0116
0000010a: PUSH2 0x0111
0000010d: PUSH2 0x02fe
00000110: JUMP
00000111: JUMPDEST
00000112: PUSH2 0x0308
00000115: JUMP
00000116: JUMPDEST
00000117: JUMP
00000118: JUMPDEST
00000119: PUSH2 0x0120
0000011c: PUSH2 0x032c
0000011f: JUMP
00000120: JUMPDEST
00000121: PUSH1 0x01
00000123: PUSH1 0x01
00000125: PUSH1 0xa0
00000127: SHL
00000128: SUB
00000129: AND
0000012a: CALLER
0000012b: SUB
0000012c: PUSH2 0x014d
0000012f: JUMPI
00000130: PUSH2 0x014a
00000133: DUP2
00000134: PUSH1 0x40
00000136: MLOAD
00000137: DUP1
00000138: PUSH1 0x20
0000013a: ADD
0000013b: PUSH1 0x40
0000013d: MSTORE
0000013e: DUP1
0000013f: PUSH1 0x00
00000141: DUP2
00000142: MSTORE
00000143: POP
00000144: PUSH1 0x00
00000146: PUSH2 0x034d
00000149: JUMP
0000014a: JUMPDEST
0000014b: POP
0000014c: JUMP
0000014d: JUMPDEST
0000014e: PUSH2 0x014a
00000151: PUSH2 0x00fe
00000154: JUMP
00000155: JUMPDEST
00000156: PUSH2 0x015d
00000159: PUSH2 0x032c
0000015c: JUMP
0000015d: JUMPDEST
0000015e: PUSH1 0x01
00000160: PUSH1 0x01
00000162: PUSH1 0xa0
00000164: SHL
00000165: SUB
00000166: AND
00000167: CALLER
00000168: SUB
00000169: PUSH2 0x01b4
0000016c: JUMPI
0000016d: PUSH2 0x01af
00000170: DUP4
00000171: DUP4
00000172: DUP4
00000173: DUP1
00000174: DUP1
00000175: PUSH1 0x1f
00000177: ADD
00000178: PUSH1 0x20
0000017a: DUP1
0000017b: SWAP2
0000017c: DIV
0000017d: MUL
0000017e: PUSH1 0x20
00000180: ADD
00000181: PUSH1 0x40
00000183: MLOAD
00000184: SWAP1
00000185: DUP2
00000186: ADD
00000187: PUSH1 0x40
00000189: MSTORE
0000018a: DUP1
0000018b: SWAP4
0000018c: SWAP3
0000018d: SWAP2
0000018e: SWAP1
0000018f: DUP2
00000190: DUP2
00000191: MSTORE
00000192: PUSH1 0x20
00000194: ADD
00000195: DUP4
00000196: DUP4
00000197: DUP1
00000198: DUP3
00000199: DUP5
0000019a: CALLDATACOPY
0000019b: PUSH1 0x00
0000019d: SWAP3
0000019e: ADD
0000019f: SWAP2
000001a0: SWAP1
000001a1: SWAP2
000001a2: MSTORE
000001a3: POP
000001a4: PUSH1 0x01
000001a6: SWAP3
000001a7: POP
000001a8: PUSH2 0x034d
000001ab: SWAP2
000001ac: POP
000001ad: POP
000001ae: JUMP
000001af: JUMPDEST
000001b0: POP
000001b1: POP
000001b2: POP
000001b3: JUMP
000001b4: JUMPDEST
000001b5: PUSH2 0x01af
000001b8: PUSH2 0x00fe
000001bb: JUMP
000001bc: JUMPDEST
000001bd: PUSH1 0x00
000001bf: PUSH2 0x01c6
000001c2: PUSH2 0x032c
000001c5: JUMP
000001c6: JUMPDEST
000001c7: PUSH1 0x01
000001c9: PUSH1 0x01
000001cb: PUSH1 0xa0
000001cd: SHL
000001ce: SUB
000001cf: AND
000001d0: CALLER
000001d1: SUB
000001d2: PUSH2 0x01e2
000001d5: JUMPI
000001d6: PUSH2 0x01dd
000001d9: PUSH2 0x02fe
000001dc: JUMP
000001dd: JUMPDEST
000001de: SWAP1
000001df: POP
000001e0: SWAP1
000001e1: JUMP
000001e2: JUMPDEST
000001e3: PUSH2 0x01ea
000001e6: PUSH2 0x00fe
000001e9: JUMP
000001ea: JUMPDEST
000001eb: SWAP1
000001ec: JUMP
000001ed: JUMPDEST
000001ee: PUSH2 0x01f5
000001f1: PUSH2 0x032c
000001f4: JUMP
000001f5: JUMPDEST
000001f6: PUSH1 0x01
000001f8: PUSH1 0x01
000001fa: PUSH1 0xa0
000001fc: SHL
000001fd: SUB
000001fe: AND
000001ff: CALLER
00000200: SUB
00000201: PUSH2 0x014d
00000204: JUMPI
00000205: PUSH2 0x014a
00000208: DUP2
00000209: PUSH2 0x0378
0000020c: JUMP
0000020d: JUMPDEST
0000020e: PUSH1 0x00
00000210: PUSH2 0x0217
00000213: PUSH2 0x032c
00000216: JUMP
00000217: JUMPDEST
00000218: PUSH1 0x01
0000021a: PUSH1 0x01
0000021c: PUSH1 0xa0
0000021e: SHL
0000021f: SUB
00000220: AND
00000221: CALLER
00000222: SUB
00000223: PUSH2 0x01e2
00000226: JUMPI
00000227: PUSH2 0x01dd
0000022a: PUSH2 0x032c
0000022d: JUMP
0000022e: JUMPDEST
0000022f: PUSH1 0x60
00000231: PUSH2 0x0253
00000234: DUP4
00000235: DUP4
00000236: PUSH1 0x40
00000238: MLOAD
00000239: DUP1
0000023a: PUSH1 0x60
0000023c: ADD
0000023d: PUSH1 0x40
0000023f: MSTORE
00000240: DUP1
00000241: PUSH1 0x27
00000243: DUP2
00000244: MSTORE
00000245: PUSH1 0x20
00000247: ADD
00000248: PUSH2 0x07cf
0000024b: PUSH1 0x27
0000024d: SWAP2
0000024e: CODECOPY
0000024f: PUSH2 0x03cc
00000252: JUMP
00000253: JUMPDEST
00000254: SWAP4
00000255: SWAP3
00000256: POP
00000257: POP
00000258: POP
00000259: JUMP
0000025a: JUMPDEST
0000025b: PUSH1 0x01
0000025d: PUSH1 0x01
0000025f: PUSH1 0xa0
00000261: SHL
00000262: SUB
00000263: AND
00000264: EXTCODESIZE
00000265: ISZERO
00000266: ISZERO
00000267: SWAP1
00000268: JUMP
00000269: JUMPDEST
0000026a: PUSH2 0x0271
0000026d: PUSH2 0x032c
00000270: JUMP
00000271: JUMPDEST
00000272: PUSH1 0x01
00000274: PUSH1 0x01
00000276: PUSH1 0xa0
00000278: SHL
00000279: SUB
0000027a: AND
0000027b: CALLER
0000027c: SUB
0000027d: PUSH2 0x0116
00000280: JUMPI
00000281: PUSH1 0x40
00000283: MLOAD
00000284: PUSH3 0x461bcd
00000288: PUSH1 0xe5
0000028a: SHL
0000028b: DUP2
0000028c: MSTORE
0000028d: PUSH1 0x20
0000028f: PUSH1 0x04
00000291: DUP3
00000292: ADD
00000293: MSTORE
00000294: PUSH1 0x42
00000296: PUSH1 0x24
00000298: DUP3
00000299: ADD
0000029a: MSTORE
0000029b: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
000002bc: PUSH1 0x44
000002be: DUP3
000002bf: ADD
000002c0: MSTORE
000002c1: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
000002e2: PUSH1 0x64
000002e4: DUP3
000002e5: ADD
000002e6: MSTORE
000002e7: PUSH2 0x195d
000002ea: PUSH1 0xf2
000002ec: SHL
000002ed: PUSH1 0x84
000002ef: DUP3
000002f0: ADD
000002f1: MSTORE
000002f2: PUSH1 0xa4
000002f4: ADD
000002f5: JUMPDEST
000002f6: PUSH1 0x40
000002f8: MLOAD
000002f9: DUP1
000002fa: SWAP2
000002fb: SUB
000002fc: SWAP1
000002fd: REVERT
000002fe: JUMPDEST
000002ff: PUSH1 0x00
00000301: PUSH2 0x01dd
00000304: PUSH2 0x0444
00000307: JUMP
00000308: JUMPDEST
00000309: CALLDATASIZE
0000030a: PUSH1 0x00
0000030c: DUP1
0000030d: CALLDATACOPY
0000030e: PUSH1 0x00
00000310: DUP1
00000311: CALLDATASIZE
00000312: PUSH1 0x00
00000314: DUP5
00000315: GAS
00000316: DELEGATECALL
00000317: RETURNDATASIZE
00000318: PUSH1 0x00
0000031a: DUP1
0000031b: RETURNDATACOPY
0000031c: DUP1
0000031d: DUP1
0000031e: ISZERO
0000031f: PUSH2 0x0327
00000322: JUMPI
00000323: RETURNDATASIZE
00000324: PUSH1 0x00
00000326: RETURN
00000327: JUMPDEST
00000328: RETURNDATASIZE
00000329: PUSH1 0x00
0000032b: REVERT
0000032c: JUMPDEST
0000032d: PUSH1 0x00
0000032f: PUSH1 0x00
00000331: DUP1
00000332: MLOAD
00000333: PUSH1 0x20
00000335: PUSH2 0x078f
00000338: DUP4
00000339: CODECOPY
0000033a: DUP2
0000033b: MLOAD
0000033c: SWAP2
0000033d: MSTORE
0000033e: JUMPDEST
0000033f: SLOAD
00000340: PUSH1 0x01
00000342: PUSH1 0x01
00000344: PUSH1 0xa0
00000346: SHL
00000347: SUB
00000348: AND
00000349: SWAP2
0000034a: SWAP1
0000034b: POP
0000034c: JUMP
0000034d: JUMPDEST
0000034e: PUSH2 0x0356
00000351: DUP4
00000352: PUSH2 0x045a
00000355: JUMP
00000356: JUMPDEST
00000357: PUSH1 0x00
00000359: DUP3
0000035a: MLOAD
0000035b: GT
0000035c: DUP1
0000035d: PUSH2 0x0363
00000360: JUMPI
00000361: POP
00000362: DUP1
00000363: JUMPDEST
00000364: ISZERO
00000365: PUSH2 0x01af
00000368: JUMPI
00000369: PUSH2 0x0372
0000036c: DUP4
0000036d: DUP4
0000036e: PUSH2 0x022e
00000371: JUMP
00000372: JUMPDEST
00000373: POP
00000374: POP
00000375: POP
00000376: POP
00000377: JUMP
00000378: JUMPDEST
00000379: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
0000039a: PUSH2 0x03a1
0000039d: PUSH2 0x032c
000003a0: JUMP
000003a1: JUMPDEST
000003a2: PUSH1 0x40
000003a4: DUP1
000003a5: MLOAD
000003a6: PUSH1 0x01
000003a8: PUSH1 0x01
000003aa: PUSH1 0xa0
000003ac: SHL
000003ad: SUB
000003ae: SWAP3
000003af: DUP4
000003b0: AND
000003b1: DUP2
000003b2: MSTORE
000003b3: SWAP2
000003b4: DUP5
000003b5: AND
000003b6: PUSH1 0x20
000003b8: DUP4
000003b9: ADD
000003ba: MSTORE
000003bb: ADD
000003bc: PUSH1 0x40
000003be: MLOAD
000003bf: DUP1
000003c0: SWAP2
000003c1: SUB
000003c2: SWAP1
000003c3: LOG1
000003c4: PUSH2 0x014a
000003c7: DUP2
000003c8: PUSH2 0x049a
000003cb: JUMP
000003cc: JUMPDEST
000003cd: PUSH1 0x60
000003cf: PUSH1 0x00
000003d1: DUP1
000003d2: DUP6
000003d3: PUSH1 0x01
000003d5: PUSH1 0x01
000003d7: PUSH1 0xa0
000003d9: SHL
000003da: SUB
000003db: AND
000003dc: DUP6
000003dd: PUSH1 0x40
000003df: MLOAD
000003e0: PUSH2 0x03e9
000003e3: SWAP2
000003e4: SWAP1
000003e5: PUSH2 0x073f
000003e8: JUMP
000003e9: JUMPDEST
000003ea: PUSH1 0x00
000003ec: PUSH1 0x40
000003ee: MLOAD
000003ef: DUP1
000003f0: DUP4
000003f1: SUB
000003f2: DUP2
000003f3: DUP6
000003f4: GAS
000003f5: DELEGATECALL
000003f6: SWAP2
000003f7: POP
000003f8: POP
000003f9: RETURNDATASIZE
000003fa: DUP1
000003fb: PUSH1 0x00
000003fd: DUP2
000003fe: EQ
000003ff: PUSH2 0x0424
00000402: JUMPI
00000403: PUSH1 0x40
00000405: MLOAD
00000406: SWAP2
00000407: POP
00000408: PUSH1 0x1f
0000040a: NOT
0000040b: PUSH1 0x3f
0000040d: RETURNDATASIZE
0000040e: ADD
0000040f: AND
00000410: DUP3
00000411: ADD
00000412: PUSH1 0x40
00000414: MSTORE
00000415: RETURNDATASIZE
00000416: DUP3
00000417: MSTORE
00000418: RETURNDATASIZE
00000419: PUSH1 0x00
0000041b: PUSH1 0x20
0000041d: DUP5
0000041e: ADD
0000041f: RETURNDATACOPY
00000420: PUSH2 0x0429
00000423: JUMP
00000424: JUMPDEST
00000425: PUSH1 0x60
00000427: SWAP2
00000428: POP
00000429: JUMPDEST
0000042a: POP
0000042b: SWAP2
0000042c: POP
0000042d: SWAP2
0000042e: POP
0000042f: PUSH2 0x043a
00000432: DUP7
00000433: DUP4
00000434: DUP4
00000435: DUP8
00000436: PUSH2 0x0531
00000439: JUMP
0000043a: JUMPDEST
0000043b: SWAP7
0000043c: SWAP6
0000043d: POP
0000043e: POP
0000043f: POP
00000440: POP
00000441: POP
00000442: POP
00000443: JUMP
00000444: JUMPDEST
00000445: PUSH1 0x00
00000447: PUSH1 0x00
00000449: DUP1
0000044a: MLOAD
0000044b: PUSH1 0x20
0000044d: PUSH2 0x07af
00000450: DUP4
00000451: CODECOPY
00000452: DUP2
00000453: MLOAD
00000454: SWAP2
00000455: MSTORE
00000456: PUSH2 0x033e
00000459: JUMP
0000045a: JUMPDEST
0000045b: PUSH2 0x0463
0000045e: DUP2
0000045f: PUSH2 0x05b0
00000462: JUMP
00000463: JUMPDEST
00000464: PUSH1 0x40
00000466: MLOAD
00000467: PUSH1 0x01
00000469: PUSH1 0x01
0000046b: PUSH1 0xa0
0000046d: SHL
0000046e: SUB
0000046f: DUP3
00000470: AND
00000471: SWAP1
00000472: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
00000493: SWAP1
00000494: PUSH1 0x00
00000496: SWAP1
00000497: LOG2
00000498: POP
00000499: JUMP
0000049a: JUMPDEST
0000049b: PUSH1 0x01
0000049d: PUSH1 0x01
0000049f: PUSH1 0xa0
000004a1: SHL
000004a2: SUB
000004a3: DUP2
000004a4: AND
000004a5: PUSH2 0x04ff
000004a8: JUMPI
000004a9: PUSH1 0x40
000004ab: MLOAD
000004ac: PUSH3 0x461bcd
000004b0: PUSH1 0xe5
000004b2: SHL
000004b3: DUP2
000004b4: MSTORE
000004b5: PUSH1 0x20
000004b7: PUSH1 0x04
000004b9: DUP3
000004ba: ADD
000004bb: MSTORE
000004bc: PUSH1 0x26
000004be: PUSH1 0x24
000004c0: DUP3
000004c1: ADD
000004c2: MSTORE
000004c3: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
000004e4: PUSH1 0x44
000004e6: DUP3
000004e7: ADD
000004e8: MSTORE
000004e9: PUSH6 0x646472657373
000004f0: PUSH1 0xd0
000004f2: SHL
000004f3: PUSH1 0x64
000004f5: DUP3
000004f6: ADD
000004f7: MSTORE
000004f8: PUSH1 0x84
000004fa: ADD
000004fb: PUSH2 0x02f5
000004fe: JUMP
000004ff: JUMPDEST
00000500: DUP1
00000501: PUSH1 0x00
00000503: DUP1
00000504: MLOAD
00000505: PUSH1 0x20
00000507: PUSH2 0x078f
0000050a: DUP4
0000050b: CODECOPY
0000050c: DUP2
0000050d: MLOAD
0000050e: SWAP2
0000050f: MSTORE
00000510: JUMPDEST
00000511: DUP1
00000512: SLOAD
00000513: PUSH1 0x01
00000515: PUSH1 0x01
00000517: PUSH1 0xa0
00000519: SHL
0000051a: SUB
0000051b: NOT
0000051c: AND
0000051d: PUSH1 0x01
0000051f: PUSH1 0x01
00000521: PUSH1 0xa0
00000523: SHL
00000524: SUB
00000525: SWAP3
00000526: SWAP1
00000527: SWAP3
00000528: AND
00000529: SWAP2
0000052a: SWAP1
0000052b: SWAP2
0000052c: OR
0000052d: SWAP1
0000052e: SSTORE
0000052f: POP
00000530: JUMP
00000531: JUMPDEST
00000532: PUSH1 0x60
00000534: DUP4
00000535: ISZERO
00000536: PUSH2 0x059e
00000539: JUMPI
0000053a: DUP3
0000053b: MLOAD
0000053c: PUSH1 0x00
0000053e: SUB
0000053f: PUSH2 0x0597
00000542: JUMPI
00000543: PUSH2 0x054b
00000546: DUP6
00000547: PUSH2 0x025a
0000054a: JUMP
0000054b: JUMPDEST
0000054c: PUSH2 0x0597
0000054f: JUMPI
00000550: PUSH1 0x40
00000552: MLOAD
00000553: PUSH3 0x461bcd
00000557: PUSH1 0xe5
00000559: SHL
0000055a: DUP2
0000055b: MSTORE
0000055c: PUSH1 0x20
0000055e: PUSH1 0x04
00000560: DUP3
00000561: ADD
00000562: MSTORE
00000563: PUSH1 0x1d
00000565: PUSH1 0x24
00000567: DUP3
00000568: ADD
00000569: MSTORE
0000056a: PUSH32 0x416464726573733a2063616c6c20746f206e6f6e2d636f6e7472616374000000
0000058b: PUSH1 0x44
0000058d: DUP3
0000058e: ADD
0000058f: MSTORE
00000590: PUSH1 0x64
00000592: ADD
00000593: PUSH2 0x02f5
00000596: JUMP
00000597: JUMPDEST
00000598: POP
00000599: DUP2
0000059a: PUSH2 0x05a8
0000059d: JUMP
0000059e: JUMPDEST
0000059f: PUSH2 0x05a8
000005a2: DUP4
000005a3: DUP4
000005a4: PUSH2 0x0630
000005a7: JUMP
000005a8: JUMPDEST
000005a9: SWAP5
000005aa: SWAP4
000005ab: POP
000005ac: POP
000005ad: POP
000005ae: POP
000005af: JUMP
000005b0: JUMPDEST
000005b1: PUSH2 0x05b9
000005b4: DUP2
000005b5: PUSH2 0x025a
000005b8: JUMP
000005b9: JUMPDEST
000005ba: PUSH2 0x061b
000005bd: JUMPI
000005be: PUSH1 0x40
000005c0: MLOAD
000005c1: PUSH3 0x461bcd
000005c5: PUSH1 0xe5
000005c7: SHL
000005c8: DUP2
000005c9: MSTORE
000005ca: PUSH1 0x20
000005cc: PUSH1 0x04
000005ce: DUP3
000005cf: ADD
000005d0: MSTORE
000005d1: PUSH1 0x2d
000005d3: PUSH1 0x24
000005d5: DUP3
000005d6: ADD
000005d7: MSTORE
000005d8: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
000005f9: PUSH1 0x44
000005fb: DUP3
000005fc: ADD
000005fd: MSTORE
000005fe: PUSH13 0x1bdd08184818dbdb9d1c9858dd
0000060c: PUSH1 0x9a
0000060e: SHL
0000060f: PUSH1 0x64
00000611: DUP3
00000612: ADD
00000613: MSTORE
00000614: PUSH1 0x84
00000616: ADD
00000617: PUSH2 0x02f5
0000061a: JUMP
0000061b: JUMPDEST
0000061c: DUP1
0000061d: PUSH1 0x00
0000061f: DUP1
00000620: MLOAD
00000621: PUSH1 0x20
00000623: PUSH2 0x07af
00000626: DUP4
00000627: CODECOPY
00000628: DUP2
00000629: MLOAD
0000062a: SWAP2
0000062b: MSTORE
0000062c: PUSH2 0x0510
0000062f: JUMP
00000630: JUMPDEST
00000631: DUP2
00000632: MLOAD
00000633: ISZERO
00000634: PUSH2 0x0640
00000637: JUMPI
00000638: DUP2
00000639: MLOAD
0000063a: DUP1
0000063b: DUP4
0000063c: PUSH1 0x20
0000063e: ADD
0000063f: REVERT
00000640: JUMPDEST
00000641: DUP1
00000642: PUSH1 0x40
00000644: MLOAD
00000645: PUSH3 0x461bcd
00000649: PUSH1 0xe5
0000064b: SHL
0000064c: DUP2
0000064d: MSTORE
0000064e: PUSH1 0x04
00000650: ADD
00000651: PUSH2 0x02f5
00000654: SWAP2
00000655: SWAP1
00000656: PUSH2 0x075b
00000659: JUMP
0000065a: JUMPDEST
0000065b: DUP1
0000065c: CALLDATALOAD
0000065d: PUSH1 0x01
0000065f: PUSH1 0x01
00000661: PUSH1 0xa0
00000663: SHL
00000664: SUB
00000665: DUP2
00000666: AND
00000667: DUP2
00000668: EQ
00000669: PUSH2 0x0671
0000066c: JUMPI
0000066d: PUSH1 0x00
0000066f: DUP1
00000670: REVERT
00000671: JUMPDEST
00000672: SWAP2
00000673: SWAP1
00000674: POP
00000675: JUMP
00000676: JUMPDEST
00000677: PUSH1 0x00
00000679: PUSH1 0x20
0000067b: DUP3
0000067c: DUP5
0000067d: SUB
0000067e: SLT
0000067f: ISZERO
00000680: PUSH2 0x0688
00000683: JUMPI
00000684: PUSH1 0x00
00000686: DUP1
00000687: REVERT
00000688: JUMPDEST
00000689: PUSH2 0x0253
0000068c: DUP3
0000068d: PUSH2 0x065a
00000690: JUMP
00000691: JUMPDEST
00000692: PUSH1 0x00
00000694: DUP1
00000695: PUSH1 0x00
00000697: PUSH1 0x40
00000699: DUP5
0000069a: DUP7
0000069b: SUB
0000069c: SLT
0000069d: ISZERO
0000069e: PUSH2 0x06a6
000006a1: JUMPI
000006a2: PUSH1 0x00
000006a4: DUP1
000006a5: REVERT
000006a6: JUMPDEST
000006a7: PUSH2 0x06af
000006aa: DUP5
000006ab: PUSH2 0x065a
000006ae: JUMP
000006af: JUMPDEST
000006b0: SWAP3
000006b1: POP
000006b2: PUSH1 0x20
000006b4: DUP5
000006b5: ADD
000006b6: CALLDATALOAD
000006b7: PUSH1 0x01
000006b9: PUSH1 0x01
000006bb: PUSH1 0x40
000006bd: SHL
000006be: SUB
000006bf: DUP1
000006c0: DUP3
000006c1: GT
000006c2: ISZERO
000006c3: PUSH2 0x06cb
000006c6: JUMPI
000006c7: PUSH1 0x00
000006c9: DUP1
000006ca: REVERT
000006cb: JUMPDEST
000006cc: DUP2
000006cd: DUP7
000006ce: ADD
000006cf: SWAP2
000006d0: POP
000006d1: DUP7
000006d2: PUSH1 0x1f
000006d4: DUP4
000006d5: ADD
000006d6: SLT
000006d7: PUSH2 0x06df
000006da: JUMPI
000006db: PUSH1 0x00
000006dd: DUP1
000006de: REVERT
000006df: JUMPDEST
000006e0: DUP2
000006e1: CALLDATALOAD
000006e2: DUP2
000006e3: DUP2
000006e4: GT
000006e5: ISZERO
000006e6: PUSH2 0x06ee
000006e9: JUMPI
000006ea: PUSH1 0x00
000006ec: DUP1
000006ed: REVERT
000006ee: JUMPDEST
000006ef: DUP8
000006f0: PUSH1 0x20
000006f2: DUP3
000006f3: DUP6
000006f4: ADD
000006f5: ADD
000006f6: GT
000006f7: ISZERO
000006f8: PUSH2 0x0700
000006fb: JUMPI
000006fc: PUSH1 0x00
000006fe: DUP1
000006ff: REVERT
00000700: JUMPDEST
00000701: PUSH1 0x20
00000703: DUP4
00000704: ADD
00000705: SWAP5
00000706: POP
00000707: DUP1
00000708: SWAP4
00000709: POP
0000070a: POP
0000070b: POP
0000070c: POP
0000070d: SWAP3
0000070e: POP
0000070f: SWAP3
00000710: POP
00000711: SWAP3
00000712: JUMP
00000713: JUMPDEST
00000714: PUSH1 0x00
00000716: JUMPDEST
00000717: DUP4
00000718: DUP2
00000719: LT
0000071a: ISZERO
0000071b: PUSH2 0x072e
0000071e: JUMPI
0000071f: DUP2
00000720: DUP2
00000721: ADD
00000722: MLOAD
00000723: DUP4
00000724: DUP3
00000725: ADD
00000726: MSTORE
00000727: PUSH1 0x20
00000729: ADD
0000072a: PUSH2 0x0716
0000072d: JUMP
0000072e: JUMPDEST
0000072f: DUP4
00000730: DUP2
00000731: GT
00000732: ISZERO
00000733: PUSH2 0x0372
00000736: JUMPI
00000737: POP
00000738: POP
00000739: PUSH1 0x00
0000073b: SWAP2
0000073c: ADD
0000073d: MSTORE
0000073e: JUMP
0000073f: JUMPDEST
00000740: PUSH1 0x00
00000742: DUP3
00000743: MLOAD
00000744: PUSH2 0x0751
00000747: DUP2
00000748: DUP5
00000749: PUSH1 0x20
0000074b: DUP8
0000074c: ADD
0000074d: PUSH2 0x0713
00000750: JUMP
00000751: JUMPDEST
00000752: SWAP2
00000753: SWAP1
00000754: SWAP2
00000755: ADD
00000756: SWAP3
00000757: SWAP2
00000758: POP
00000759: POP
0000075a: JUMP
0000075b: JUMPDEST
0000075c: PUSH1 0x20
0000075e: DUP2
0000075f: MSTORE
00000760: PUSH1 0x00
00000762: DUP3
00000763: MLOAD
00000764: DUP1
00000765: PUSH1 0x20
00000767: DUP5
00000768: ADD
00000769: MSTORE
0000076a: PUSH2 0x077a
0000076d: DUP2
0000076e: PUSH1 0x40
00000770: DUP6
00000771: ADD
00000772: PUSH1 0x20
00000774: DUP8
00000775: ADD
00000776: PUSH2 0x0713
00000779: JUMP
0000077a: JUMPDEST
0000077b: PUSH1 0x1f
0000077d: ADD
0000077e: PUSH1 0x1f
00000780: NOT
00000781: AND
00000782: SWAP2
00000783: SWAP1
00000784: SWAP2
00000785: ADD
00000786: PUSH1 0x40
00000788: ADD
00000789: SWAP3
0000078a: SWAP2
0000078b: POP
0000078c: POP
0000078d: JUMP
0000078e: INVALID
0000078f: UNKNOWN(0xB5)
00000790: BALANCE
00000791: UNKNOWN(0x27)
00000792: PUSH9 0x4a568b3173ae13b9f8
0000079c: UNKNOWN(0xA6)
0000079d: ADD
0000079e: PUSH15 0x243e63b6e8ee1178d6a717850b5d61
000007ae: SUB
000007af: CALLDATASIZE
000007b0: ADDMOD
000007b1: SWAP5
000007b2: LOG1
000007b3: EXTCODESIZE
000007b4: LOG1
000007b5: LOG3
000007b6: UNKNOWN(0x21)
000007b7: MOD
000007b8: PUSH8 0xc828492db98dca3e
000007c1: KECCAK256
000007c2: PUSH23 0xcc3735a920a3ca505d382bbc416464726573733a206c6f
000007da: PUSH24 0x2d6c6576656c2064656c65676174652063616c6c20666169
000007f3: PUSH13 0x6564a2646970667358221220bd
00000801: PUSH12 0x4274687636ed06d1a414793d
0000080e: PUSH28 0x90c00323c28eea6a00b666d02f97dc64b864736f6c634300080d0033

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0x188e2e7fb102d893d2766ae70d23df6ec2935439c82a7e2ba42f94b553e915f2 call_targets: 0xd16281bce036d58fc22222e9dac13260fc185907 target_varies: no classification: constant_target validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "sink_reached", "attempts": 2, "trace_id": "0x188e2e7fb102d893d2766ae70d23df6ec2935439c82a7e2ba42f94b553e915f2", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xd16281bce036d58fc22222e9dac13260fc185907" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x3659cfe6", "selector": "0x3659cfe6", "calldata_variants": [ "0x3659cfe6", "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4f1ef286", "selector": "0x4f1ef286", "calldata_variants": [ "0x4f1ef286", "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x5c60da1b", "selector": "0x5c60da1b", "calldata_variants": [ "0x5c60da1b", "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8f283970", "selector": "0x8f283970", "calldata_variants": [ "0x8f283970", "0x8f2839700000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf851a440", "selector": "0xf851a440", "calldata_variants": [ "0xf851a440", "0xf851a4400000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 790, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1013, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 2, "untrusted_delegatecall_count": 2 }

Severity