TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3844-a648-71fc-b713-78b3744284f0

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:19 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
16345 artifact.fetch complete 1 / 3 3 months ago
16346 tool.cast_disasm complete 1 / 3 3 months ago
59545 analysis.bundle complete 1 / 3 1 week ago
59546 capability.graph complete 1 / 3 1 week ago
59547 detector.run complete 1 / 3 1 week ago
59548 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
3
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
3
Total opcodes
1074
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x005e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x5c60da1b
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x5c60da1b
00000024: EQ
00000025: PUSH2 0x00a8
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8f283970
0000002f: EQ
00000030: PUSH2 0x00e6
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf851a440
0000003a: EQ
0000003b: PUSH2 0x0106
0000003e: JUMPI
0000003f: PUSH2 0x006d
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x3659cfe6
0000004a: EQ
0000004b: PUSH2 0x0075
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x4f1ef286
00000055: EQ
00000056: PUSH2 0x0095
00000059: JUMPI
0000005a: PUSH2 0x006d
0000005d: JUMP
0000005e: JUMPDEST
0000005f: CALLDATASIZE
00000060: PUSH2 0x006d
00000063: JUMPI
00000064: PUSH2 0x006b
00000067: PUSH2 0x011b
0000006a: JUMP
0000006b: JUMPDEST
0000006c: STOP
0000006d: JUMPDEST
0000006e: PUSH2 0x006b
00000071: PUSH2 0x011b
00000074: JUMP
00000075: JUMPDEST
00000076: CALLVALUE
00000077: DUP1
00000078: ISZERO
00000079: PUSH2 0x0081
0000007c: JUMPI
0000007d: PUSH1 0x00
0000007f: DUP1
00000080: REVERT
00000081: JUMPDEST
00000082: POP
00000083: PUSH2 0x006b
00000086: PUSH2 0x0090
00000089: CALLDATASIZE
0000008a: PUSH1 0x04
0000008c: PUSH2 0x088b
0000008f: JUMP
00000090: JUMPDEST
00000091: PUSH2 0x0135
00000094: JUMP
00000095: JUMPDEST
00000096: PUSH2 0x006b
00000099: PUSH2 0x00a3
0000009c: CALLDATASIZE
0000009d: PUSH1 0x04
0000009f: PUSH2 0x08a6
000000a2: JUMP
000000a3: JUMPDEST
000000a4: PUSH2 0x017f
000000a7: JUMP
000000a8: JUMPDEST
000000a9: CALLVALUE
000000aa: DUP1
000000ab: ISZERO
000000ac: PUSH2 0x00b4
000000af: JUMPI
000000b0: PUSH1 0x00
000000b2: DUP1
000000b3: REVERT
000000b4: JUMPDEST
000000b5: POP
000000b6: PUSH2 0x00bd
000000b9: PUSH2 0x01f3
000000bc: JUMP
000000bd: JUMPDEST
000000be: PUSH1 0x40
000000c0: MLOAD
000000c1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000d6: SWAP1
000000d7: SWAP2
000000d8: AND
000000d9: DUP2
000000da: MSTORE
000000db: PUSH1 0x20
000000dd: ADD
000000de: PUSH1 0x40
000000e0: MLOAD
000000e1: DUP1
000000e2: SWAP2
000000e3: SUB
000000e4: SWAP1
000000e5: RETURN
000000e6: JUMPDEST
000000e7: CALLVALUE
000000e8: DUP1
000000e9: ISZERO
000000ea: PUSH2 0x00f2
000000ed: JUMPI
000000ee: PUSH1 0x00
000000f0: DUP1
000000f1: REVERT
000000f2: JUMPDEST
000000f3: POP
000000f4: PUSH2 0x006b
000000f7: PUSH2 0x0101
000000fa: CALLDATASIZE
000000fb: PUSH1 0x04
000000fd: PUSH2 0x088b
00000100: JUMP
00000101: JUMPDEST
00000102: PUSH2 0x0231
00000105: JUMP
00000106: JUMPDEST
00000107: CALLVALUE
00000108: DUP1
00000109: ISZERO
0000010a: PUSH2 0x0112
0000010d: JUMPI
0000010e: PUSH1 0x00
00000110: DUP1
00000111: REVERT
00000112: JUMPDEST
00000113: POP
00000114: PUSH2 0x00bd
00000117: PUSH2 0x025e
0000011a: JUMP
0000011b: JUMPDEST
0000011c: PUSH2 0x0123
0000011f: PUSH2 0x02d4
00000122: JUMP
00000123: JUMPDEST
00000124: PUSH2 0x0133
00000127: PUSH2 0x012e
0000012a: PUSH2 0x03ab
0000012d: JUMP
0000012e: JUMPDEST
0000012f: PUSH2 0x03b5
00000132: JUMP
00000133: JUMPDEST
00000134: JUMP
00000135: JUMPDEST
00000136: PUSH2 0x013d
00000139: PUSH2 0x03d9
0000013c: JUMP
0000013d: JUMPDEST
0000013e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000153: AND
00000154: CALLER
00000155: SUB
00000156: PUSH2 0x0177
00000159: JUMPI
0000015a: PUSH2 0x0174
0000015d: DUP2
0000015e: PUSH1 0x40
00000160: MLOAD
00000161: DUP1
00000162: PUSH1 0x20
00000164: ADD
00000165: PUSH1 0x40
00000167: MSTORE
00000168: DUP1
00000169: PUSH1 0x00
0000016b: DUP2
0000016c: MSTORE
0000016d: POP
0000016e: PUSH1 0x00
00000170: PUSH2 0x0419
00000173: JUMP
00000174: JUMPDEST
00000175: POP
00000176: JUMP
00000177: JUMPDEST
00000178: PUSH2 0x0174
0000017b: PUSH2 0x011b
0000017e: JUMP
0000017f: JUMPDEST
00000180: PUSH2 0x0187
00000183: PUSH2 0x03d9
00000186: JUMP
00000187: JUMPDEST
00000188: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000019d: AND
0000019e: CALLER
0000019f: SUB
000001a0: PUSH2 0x01eb
000001a3: JUMPI
000001a4: PUSH2 0x01e6
000001a7: DUP4
000001a8: DUP4
000001a9: DUP4
000001aa: DUP1
000001ab: DUP1
000001ac: PUSH1 0x1f
000001ae: ADD
000001af: PUSH1 0x20
000001b1: DUP1
000001b2: SWAP2
000001b3: DIV
000001b4: MUL
000001b5: PUSH1 0x20
000001b7: ADD
000001b8: PUSH1 0x40
000001ba: MLOAD
000001bb: SWAP1
000001bc: DUP2
000001bd: ADD
000001be: PUSH1 0x40
000001c0: MSTORE
000001c1: DUP1
000001c2: SWAP4
000001c3: SWAP3
000001c4: SWAP2
000001c5: SWAP1
000001c6: DUP2
000001c7: DUP2
000001c8: MSTORE
000001c9: PUSH1 0x20
000001cb: ADD
000001cc: DUP4
000001cd: DUP4
000001ce: DUP1
000001cf: DUP3
000001d0: DUP5
000001d1: CALLDATACOPY
000001d2: PUSH1 0x00
000001d4: SWAP3
000001d5: ADD
000001d6: SWAP2
000001d7: SWAP1
000001d8: SWAP2
000001d9: MSTORE
000001da: POP
000001db: PUSH1 0x01
000001dd: SWAP3
000001de: POP
000001df: PUSH2 0x0419
000001e2: SWAP2
000001e3: POP
000001e4: POP
000001e5: JUMP
000001e6: JUMPDEST
000001e7: POP
000001e8: POP
000001e9: POP
000001ea: JUMP
000001eb: JUMPDEST
000001ec: PUSH2 0x01e6
000001ef: PUSH2 0x011b
000001f2: JUMP
000001f3: JUMPDEST
000001f4: PUSH1 0x00
000001f6: PUSH2 0x01fd
000001f9: PUSH2 0x03d9
000001fc: JUMP
000001fd: JUMPDEST
000001fe: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000213: AND
00000214: CALLER
00000215: SUB
00000216: PUSH2 0x0226
00000219: JUMPI
0000021a: PUSH2 0x0221
0000021d: PUSH2 0x03ab
00000220: JUMP
00000221: JUMPDEST
00000222: SWAP1
00000223: POP
00000224: SWAP1
00000225: JUMP
00000226: JUMPDEST
00000227: PUSH2 0x022e
0000022a: PUSH2 0x011b
0000022d: JUMP
0000022e: JUMPDEST
0000022f: SWAP1
00000230: JUMP
00000231: JUMPDEST
00000232: PUSH2 0x0239
00000235: PUSH2 0x03d9
00000238: JUMP
00000239: JUMPDEST
0000023a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000024f: AND
00000250: CALLER
00000251: SUB
00000252: PUSH2 0x0177
00000255: JUMPI
00000256: PUSH2 0x0174
00000259: DUP2
0000025a: PUSH2 0x0444
0000025d: JUMP
0000025e: JUMPDEST
0000025f: PUSH1 0x00
00000261: PUSH2 0x0268
00000264: PUSH2 0x03d9
00000267: JUMP
00000268: JUMPDEST
00000269: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000027e: AND
0000027f: CALLER
00000280: SUB
00000281: PUSH2 0x0226
00000284: JUMPI
00000285: PUSH2 0x0221
00000288: PUSH2 0x03d9
0000028b: JUMP
0000028c: JUMPDEST
0000028d: PUSH1 0x60
0000028f: PUSH2 0x02b1
00000292: DUP4
00000293: DUP4
00000294: PUSH1 0x40
00000296: MLOAD
00000297: DUP1
00000298: PUSH1 0x60
0000029a: ADD
0000029b: PUSH1 0x40
0000029d: MSTORE
0000029e: DUP1
0000029f: PUSH1 0x27
000002a1: DUP2
000002a2: MSTORE
000002a3: PUSH1 0x20
000002a5: ADD
000002a6: PUSH2 0x09bb
000002a9: PUSH1 0x27
000002ab: SWAP2
000002ac: CODECOPY
000002ad: PUSH2 0x04a5
000002b0: JUMP
000002b1: JUMPDEST
000002b2: SWAP4
000002b3: SWAP3
000002b4: POP
000002b5: POP
000002b6: POP
000002b7: JUMP
000002b8: JUMPDEST
000002b9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002ce: AND
000002cf: EXTCODESIZE
000002d0: ISZERO
000002d1: ISZERO
000002d2: SWAP1
000002d3: JUMP
000002d4: JUMPDEST
000002d5: PUSH2 0x02dc
000002d8: PUSH2 0x03d9
000002db: JUMP
000002dc: JUMPDEST
000002dd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002f2: AND
000002f3: CALLER
000002f4: SUB
000002f5: PUSH2 0x0133
000002f8: JUMPI
000002f9: PUSH1 0x40
000002fb: MLOAD
000002fc: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000031d: DUP2
0000031e: MSTORE
0000031f: PUSH1 0x20
00000321: PUSH1 0x04
00000323: DUP3
00000324: ADD
00000325: MSTORE
00000326: PUSH1 0x42
00000328: PUSH1 0x24
0000032a: DUP3
0000032b: ADD
0000032c: MSTORE
0000032d: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
0000034e: PUSH1 0x44
00000350: DUP3
00000351: ADD
00000352: MSTORE
00000353: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
00000374: PUSH1 0x64
00000376: DUP3
00000377: ADD
00000378: MSTORE
00000379: PUSH32 0x6574000000000000000000000000000000000000000000000000000000000000
0000039a: PUSH1 0x84
0000039c: DUP3
0000039d: ADD
0000039e: MSTORE
0000039f: PUSH1 0xa4
000003a1: ADD
000003a2: JUMPDEST
000003a3: PUSH1 0x40
000003a5: MLOAD
000003a6: DUP1
000003a7: SWAP2
000003a8: SUB
000003a9: SWAP1
000003aa: REVERT
000003ab: JUMPDEST
000003ac: PUSH1 0x00
000003ae: PUSH2 0x0221
000003b1: PUSH2 0x052a
000003b4: JUMP
000003b5: JUMPDEST
000003b6: CALLDATASIZE
000003b7: PUSH1 0x00
000003b9: DUP1
000003ba: CALLDATACOPY
000003bb: PUSH1 0x00
000003bd: DUP1
000003be: CALLDATASIZE
000003bf: PUSH1 0x00
000003c1: DUP5
000003c2: GAS
000003c3: DELEGATECALL
000003c4: RETURNDATASIZE
000003c5: PUSH1 0x00
000003c7: DUP1
000003c8: RETURNDATACOPY
000003c9: DUP1
000003ca: DUP1
000003cb: ISZERO
000003cc: PUSH2 0x03d4
000003cf: JUMPI
000003d0: RETURNDATASIZE
000003d1: PUSH1 0x00
000003d3: RETURN
000003d4: JUMPDEST
000003d5: RETURNDATASIZE
000003d6: PUSH1 0x00
000003d8: REVERT
000003d9: JUMPDEST
000003da: PUSH1 0x00
000003dc: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000003fd: JUMPDEST
000003fe: SLOAD
000003ff: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000414: AND
00000415: SWAP2
00000416: SWAP1
00000417: POP
00000418: JUMP
00000419: JUMPDEST
0000041a: PUSH2 0x0422
0000041d: DUP4
0000041e: PUSH2 0x0552
00000421: JUMP
00000422: JUMPDEST
00000423: PUSH1 0x00
00000425: DUP3
00000426: MLOAD
00000427: GT
00000428: DUP1
00000429: PUSH2 0x042f
0000042c: JUMPI
0000042d: POP
0000042e: DUP1
0000042f: JUMPDEST
00000430: ISZERO
00000431: PUSH2 0x01e6
00000434: JUMPI
00000435: PUSH2 0x043e
00000438: DUP4
00000439: DUP4
0000043a: PUSH2 0x028c
0000043d: JUMP
0000043e: JUMPDEST
0000043f: POP
00000440: POP
00000441: POP
00000442: POP
00000443: JUMP
00000444: JUMPDEST
00000445: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
00000466: PUSH2 0x046d
00000469: PUSH2 0x03d9
0000046c: JUMP
0000046d: JUMPDEST
0000046e: PUSH1 0x40
00000470: DUP1
00000471: MLOAD
00000472: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000487: SWAP3
00000488: DUP4
00000489: AND
0000048a: DUP2
0000048b: MSTORE
0000048c: SWAP2
0000048d: DUP5
0000048e: AND
0000048f: PUSH1 0x20
00000491: DUP4
00000492: ADD
00000493: MSTORE
00000494: ADD
00000495: PUSH1 0x40
00000497: MLOAD
00000498: DUP1
00000499: SWAP2
0000049a: SUB
0000049b: SWAP1
0000049c: LOG1
0000049d: PUSH2 0x0174
000004a0: DUP2
000004a1: PUSH2 0x059f
000004a4: JUMP
000004a5: JUMPDEST
000004a6: PUSH1 0x60
000004a8: PUSH1 0x00
000004aa: DUP1
000004ab: DUP6
000004ac: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004c1: AND
000004c2: DUP6
000004c3: PUSH1 0x40
000004c5: MLOAD
000004c6: PUSH2 0x04cf
000004c9: SWAP2
000004ca: SWAP1
000004cb: PUSH2 0x094d
000004ce: JUMP
000004cf: JUMPDEST
000004d0: PUSH1 0x00
000004d2: PUSH1 0x40
000004d4: MLOAD
000004d5: DUP1
000004d6: DUP4
000004d7: SUB
000004d8: DUP2
000004d9: DUP6
000004da: GAS
000004db: DELEGATECALL
000004dc: SWAP2
000004dd: POP
000004de: POP
000004df: RETURNDATASIZE
000004e0: DUP1
000004e1: PUSH1 0x00
000004e3: DUP2
000004e4: EQ
000004e5: PUSH2 0x050a
000004e8: JUMPI
000004e9: PUSH1 0x40
000004eb: MLOAD
000004ec: SWAP2
000004ed: POP
000004ee: PUSH1 0x1f
000004f0: NOT
000004f1: PUSH1 0x3f
000004f3: RETURNDATASIZE
000004f4: ADD
000004f5: AND
000004f6: DUP3
000004f7: ADD
000004f8: PUSH1 0x40
000004fa: MSTORE
000004fb: RETURNDATASIZE
000004fc: DUP3
000004fd: MSTORE
000004fe: RETURNDATASIZE
000004ff: PUSH1 0x00
00000501: PUSH1 0x20
00000503: DUP5
00000504: ADD
00000505: RETURNDATACOPY
00000506: PUSH2 0x050f
00000509: JUMP
0000050a: JUMPDEST
0000050b: PUSH1 0x60
0000050d: SWAP2
0000050e: POP
0000050f: JUMPDEST
00000510: POP
00000511: SWAP2
00000512: POP
00000513: SWAP2
00000514: POP
00000515: PUSH2 0x0520
00000518: DUP7
00000519: DUP4
0000051a: DUP4
0000051b: DUP8
0000051c: PUSH2 0x06ab
0000051f: JUMP
00000520: JUMPDEST
00000521: SWAP7
00000522: SWAP6
00000523: POP
00000524: POP
00000525: POP
00000526: POP
00000527: POP
00000528: POP
00000529: JUMP
0000052a: JUMPDEST
0000052b: PUSH1 0x00
0000052d: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000054e: PUSH2 0x03fd
00000551: JUMP
00000552: JUMPDEST
00000553: PUSH2 0x055b
00000556: DUP2
00000557: PUSH2 0x0753
0000055a: JUMP
0000055b: JUMPDEST
0000055c: PUSH1 0x40
0000055e: MLOAD
0000055f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000574: DUP3
00000575: AND
00000576: SWAP1
00000577: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
00000598: SWAP1
00000599: PUSH1 0x00
0000059b: SWAP1
0000059c: LOG2
0000059d: POP
0000059e: JUMP
0000059f: JUMPDEST
000005a0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005b5: DUP2
000005b6: AND
000005b7: PUSH2 0x0642
000005ba: JUMPI
000005bb: PUSH1 0x40
000005bd: MLOAD
000005be: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000005df: DUP2
000005e0: MSTORE
000005e1: PUSH1 0x20
000005e3: PUSH1 0x04
000005e5: DUP3
000005e6: ADD
000005e7: MSTORE
000005e8: PUSH1 0x26
000005ea: PUSH1 0x24
000005ec: DUP3
000005ed: ADD
000005ee: MSTORE
000005ef: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
00000610: PUSH1 0x44
00000612: DUP3
00000613: ADD
00000614: MSTORE
00000615: PUSH32 0x6464726573730000000000000000000000000000000000000000000000000000
00000636: PUSH1 0x64
00000638: DUP3
00000639: ADD
0000063a: MSTORE
0000063b: PUSH1 0x84
0000063d: ADD
0000063e: PUSH2 0x03a2
00000641: JUMP
00000642: JUMPDEST
00000643: DUP1
00000644: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000665: JUMPDEST
00000666: DUP1
00000667: SLOAD
00000668: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000
00000689: AND
0000068a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000069f: SWAP3
000006a0: SWAP1
000006a1: SWAP3
000006a2: AND
000006a3: SWAP2
000006a4: SWAP1
000006a5: SWAP2
000006a6: OR
000006a7: SWAP1
000006a8: SSTORE
000006a9: POP
000006aa: JUMP
000006ab: JUMPDEST
000006ac: PUSH1 0x60
000006ae: DUP4
000006af: ISZERO
000006b0: PUSH2 0x0741
000006b3: JUMPI
000006b4: DUP3
000006b5: MLOAD
000006b6: PUSH1 0x00
000006b8: SUB
000006b9: PUSH2 0x073a
000006bc: JUMPI
000006bd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006d2: DUP6
000006d3: AND
000006d4: EXTCODESIZE
000006d5: PUSH2 0x073a
000006d8: JUMPI
000006d9: PUSH1 0x40
000006db: MLOAD
000006dc: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000006fd: DUP2
000006fe: MSTORE
000006ff: PUSH1 0x20
00000701: PUSH1 0x04
00000703: DUP3
00000704: ADD
00000705: MSTORE
00000706: PUSH1 0x1d
00000708: PUSH1 0x24
0000070a: DUP3
0000070b: ADD
0000070c: MSTORE
0000070d: PUSH32 0x416464726573733a2063616c6c20746f206e6f6e2d636f6e7472616374000000
0000072e: PUSH1 0x44
00000730: DUP3
00000731: ADD
00000732: MSTORE
00000733: PUSH1 0x64
00000735: ADD
00000736: PUSH2 0x03a2
00000739: JUMP
0000073a: JUMPDEST
0000073b: POP
0000073c: DUP2
0000073d: PUSH2 0x074b
00000740: JUMP
00000741: JUMPDEST
00000742: PUSH2 0x074b
00000745: DUP4
00000746: DUP4
00000747: PUSH2 0x081e
0000074a: JUMP
0000074b: JUMPDEST
0000074c: SWAP5
0000074d: SWAP4
0000074e: POP
0000074f: POP
00000750: POP
00000751: POP
00000752: JUMP
00000753: JUMPDEST
00000754: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000769: DUP2
0000076a: AND
0000076b: EXTCODESIZE
0000076c: PUSH2 0x07f7
0000076f: JUMPI
00000770: PUSH1 0x40
00000772: MLOAD
00000773: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000794: DUP2
00000795: MSTORE
00000796: PUSH1 0x20
00000798: PUSH1 0x04
0000079a: DUP3
0000079b: ADD
0000079c: MSTORE
0000079d: PUSH1 0x2d
0000079f: PUSH1 0x24
000007a1: DUP3
000007a2: ADD
000007a3: MSTORE
000007a4: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
000007c5: PUSH1 0x44
000007c7: DUP3
000007c8: ADD
000007c9: MSTORE
000007ca: PUSH32 0x6f74206120636f6e747261637400000000000000000000000000000000000000
000007eb: PUSH1 0x64
000007ed: DUP3
000007ee: ADD
000007ef: MSTORE
000007f0: PUSH1 0x84
000007f2: ADD
000007f3: PUSH2 0x03a2
000007f6: JUMP
000007f7: JUMPDEST
000007f8: DUP1
000007f9: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000081a: PUSH2 0x0665
0000081d: JUMP
0000081e: JUMPDEST
0000081f: DUP2
00000820: MLOAD
00000821: ISZERO
00000822: PUSH2 0x082e
00000825: JUMPI
00000826: DUP2
00000827: MLOAD
00000828: DUP1
00000829: DUP4
0000082a: PUSH1 0x20
0000082c: ADD
0000082d: REVERT
0000082e: JUMPDEST
0000082f: DUP1
00000830: PUSH1 0x40
00000832: MLOAD
00000833: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000854: DUP2
00000855: MSTORE
00000856: PUSH1 0x04
00000858: ADD
00000859: PUSH2 0x03a2
0000085c: SWAP2
0000085d: SWAP1
0000085e: PUSH2 0x0969
00000861: JUMP
00000862: JUMPDEST
00000863: DUP1
00000864: CALLDATALOAD
00000865: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000087a: DUP2
0000087b: AND
0000087c: DUP2
0000087d: EQ
0000087e: PUSH2 0x0886
00000881: JUMPI
00000882: PUSH1 0x00
00000884: DUP1
00000885: REVERT
00000886: JUMPDEST
00000887: SWAP2
00000888: SWAP1
00000889: POP
0000088a: JUMP
0000088b: JUMPDEST
0000088c: PUSH1 0x00
0000088e: PUSH1 0x20
00000890: DUP3
00000891: DUP5
00000892: SUB
00000893: SLT
00000894: ISZERO
00000895: PUSH2 0x089d
00000898: JUMPI
00000899: PUSH1 0x00
0000089b: DUP1
0000089c: REVERT
0000089d: JUMPDEST
0000089e: PUSH2 0x02b1
000008a1: DUP3
000008a2: PUSH2 0x0862
000008a5: JUMP
000008a6: JUMPDEST
000008a7: PUSH1 0x00
000008a9: DUP1
000008aa: PUSH1 0x00
000008ac: PUSH1 0x40
000008ae: DUP5
000008af: DUP7
000008b0: SUB
000008b1: SLT
000008b2: ISZERO
000008b3: PUSH2 0x08bb
000008b6: JUMPI
000008b7: PUSH1 0x00
000008b9: DUP1
000008ba: REVERT
000008bb: JUMPDEST
000008bc: PUSH2 0x08c4
000008bf: DUP5
000008c0: PUSH2 0x0862
000008c3: JUMP
000008c4: JUMPDEST
000008c5: SWAP3
000008c6: POP
000008c7: PUSH1 0x20
000008c9: DUP5
000008ca: ADD
000008cb: CALLDATALOAD
000008cc: PUSH8 0xffffffffffffffff
000008d5: DUP1
000008d6: DUP3
000008d7: GT
000008d8: ISZERO
000008d9: PUSH2 0x08e1
000008dc: JUMPI
000008dd: PUSH1 0x00
000008df: DUP1
000008e0: REVERT
000008e1: JUMPDEST
000008e2: DUP2
000008e3: DUP7
000008e4: ADD
000008e5: SWAP2
000008e6: POP
000008e7: DUP7
000008e8: PUSH1 0x1f
000008ea: DUP4
000008eb: ADD
000008ec: SLT
000008ed: PUSH2 0x08f5
000008f0: JUMPI
000008f1: PUSH1 0x00
000008f3: DUP1
000008f4: REVERT
000008f5: JUMPDEST
000008f6: DUP2
000008f7: CALLDATALOAD
000008f8: DUP2
000008f9: DUP2
000008fa: GT
000008fb: ISZERO
000008fc: PUSH2 0x0904
000008ff: JUMPI
00000900: PUSH1 0x00
00000902: DUP1
00000903: REVERT
00000904: JUMPDEST
00000905: DUP8
00000906: PUSH1 0x20
00000908: DUP3
00000909: DUP6
0000090a: ADD
0000090b: ADD
0000090c: GT
0000090d: ISZERO
0000090e: PUSH2 0x0916
00000911: JUMPI
00000912: PUSH1 0x00
00000914: DUP1
00000915: REVERT
00000916: JUMPDEST
00000917: PUSH1 0x20
00000919: DUP4
0000091a: ADD
0000091b: SWAP5
0000091c: POP
0000091d: DUP1
0000091e: SWAP4
0000091f: POP
00000920: POP
00000921: POP
00000922: POP
00000923: SWAP3
00000924: POP
00000925: SWAP3
00000926: POP
00000927: SWAP3
00000928: JUMP
00000929: JUMPDEST
0000092a: PUSH1 0x00
0000092c: JUMPDEST
0000092d: DUP4
0000092e: DUP2
0000092f: LT
00000930: ISZERO
00000931: PUSH2 0x0944
00000934: JUMPI
00000935: DUP2
00000936: DUP2
00000937: ADD
00000938: MLOAD
00000939: DUP4
0000093a: DUP3
0000093b: ADD
0000093c: MSTORE
0000093d: PUSH1 0x20
0000093f: ADD
00000940: PUSH2 0x092c
00000943: JUMP
00000944: JUMPDEST
00000945: POP
00000946: POP
00000947: PUSH1 0x00
00000949: SWAP2
0000094a: ADD
0000094b: MSTORE
0000094c: JUMP
0000094d: JUMPDEST
0000094e: PUSH1 0x00
00000950: DUP3
00000951: MLOAD
00000952: PUSH2 0x095f
00000955: DUP2
00000956: DUP5
00000957: PUSH1 0x20
00000959: DUP8
0000095a: ADD
0000095b: PUSH2 0x0929
0000095e: JUMP
0000095f: JUMPDEST
00000960: SWAP2
00000961: SWAP1
00000962: SWAP2
00000963: ADD
00000964: SWAP3
00000965: SWAP2
00000966: POP
00000967: POP
00000968: JUMP
00000969: JUMPDEST
0000096a: PUSH1 0x20
0000096c: DUP2
0000096d: MSTORE
0000096e: PUSH1 0x00
00000970: DUP3
00000971: MLOAD
00000972: DUP1
00000973: PUSH1 0x20
00000975: DUP5
00000976: ADD
00000977: MSTORE
00000978: PUSH2 0x0988
0000097b: DUP2
0000097c: PUSH1 0x40
0000097e: DUP6
0000097f: ADD
00000980: PUSH1 0x20
00000982: DUP8
00000983: ADD
00000984: PUSH2 0x0929
00000987: JUMP
00000988: JUMPDEST
00000989: PUSH1 0x1f
0000098b: ADD
0000098c: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
000009ad: AND
000009ae: SWAP2
000009af: SWAP1
000009b0: SWAP2
000009b1: ADD
000009b2: PUSH1 0x40
000009b4: ADD
000009b5: SWAP3
000009b6: SWAP2
000009b7: POP
000009b8: POP
000009b9: JUMP
000009ba: INVALID
000009bb: COINBASE
000009bc: PUSH5 0x6472657373
000009c2: GASPRICE
000009c3: KECCAK256
000009c4: PUSH13 0x6f772d6c6576656c2064656c65
000009d2: PUSH8 0x6174652063616c6c
000009db: KECCAK256
000009dc: PUSH7 0x61696c6564a264
000009e4: PUSH10 0x70667358221220a1af0d
000009ef: PUSH13 0xb4f1e31496a4c5c1448913bce4
000009fd: UNKNOWN(0xBD)
000009fe: PUSH11 0xd3a39e47c6f7190c114d6f
00000a0a: SWAP12
00000a0b: DELEGATECALL
00000a0c: PUSH5 0x736f6c6343
00000a12: STOP
00000a13: ADDMOD
00000a14: GT
00000a15: STOP
00000a16: CALLER
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0x9ad7f6ff36464c3de1720ed30e70cd08b9c2cae937c024bc0eba0ae4b6c40074
call_targets: 0x66e0120e3c965552a89acc37b03f762624bac5ad
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x9ad7f6ff36464c3de1720ed30e70cd08b9c2cae937c024bc0eba0ae4b6c40074",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x66e0120e3c965552a89acc37b03f762624bac5ad"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 963,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1243,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 2571,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 3,
    "untrusted_delegatecall_count": 3
}