Analysis Run

019b3844-afa3-717a-8cc4-20fb2ec6f547

complete

Chain ID

1

Address

0x816f722424b49cf1275cc86da9840fbd5a6167e9

Block Number

—

Created

Fri, Dec 19, 2025 8:19 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
18007	artifact.fetch	complete	1 / 3	3 months ago
18008	tool.cast_disasm	complete	1 / 3	3 months ago
87372	analysis.bundle	complete	1 / 3	1 week ago
87373	capability.graph	complete	1 / 3	1 week ago
87374	detector.run	complete	1 / 3	1 week ago
87375	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

2

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

0

EXT*/BALANCE

2

Total opcodes

1208

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: PUSH2 0x0013
00000009: JUMPI
0000000a: PUSH2 0x0011
0000000d: PUSH2 0x0017
00000010: JUMP
00000011: JUMPDEST
00000012: STOP
00000013: JUMPDEST
00000014: PUSH2 0x0011
00000017: JUMPDEST
00000018: PUSH2 0x001f
0000001b: PUSH2 0x0202
0000001e: JUMP
0000001f: JUMPDEST
00000020: PUSH1 0x01
00000022: PUSH1 0x01
00000024: PUSH1 0xa0
00000026: SHL
00000027: SUB
00000028: AND
00000029: CALLER
0000002a: SUB
0000002b: PUSH2 0x01f8
0000002e: JUMPI
0000002f: PUSH1 0x60
00000031: PUSH1 0x01
00000033: PUSH1 0x01
00000035: PUSH1 0xe0
00000037: SHL
00000038: SUB
00000039: NOT
0000003a: PUSH1 0x00
0000003c: CALLDATALOAD
0000003d: AND
0000003e: PUSH32 0xc9a6301a00000000000000000000000000000000000000000000000000000000
0000005f: DUP2
00000060: ADD
00000061: PUSH2 0x0073
00000064: JUMPI
00000065: PUSH2 0x006c
00000068: PUSH2 0x0235
0000006b: JUMP
0000006c: JUMPDEST
0000006d: SWAP2
0000006e: POP
0000006f: PUSH2 0x01f0
00000072: JUMP
00000073: JUMPDEST
00000074: PUSH32 0xb0e10d7a00000000000000000000000000000000000000000000000000000000
00000095: PUSH1 0x01
00000097: PUSH1 0x01
00000099: PUSH1 0xe0
0000009b: SHL
0000009c: SUB
0000009d: NOT
0000009e: DUP3
0000009f: AND
000000a0: ADD
000000a1: PUSH2 0x00ac
000000a4: JUMPI
000000a5: PUSH2 0x006c
000000a8: PUSH2 0x028c
000000ab: JUMP
000000ac: JUMPDEST
000000ad: PUSH32 0x70d7c69000000000000000000000000000000000000000000000000000000000
000000ce: PUSH1 0x01
000000d0: PUSH1 0x01
000000d2: PUSH1 0xe0
000000d4: SHL
000000d5: SUB
000000d6: NOT
000000d7: DUP3
000000d8: AND
000000d9: ADD
000000da: PUSH2 0x00e5
000000dd: JUMPI
000000de: PUSH2 0x006c
000000e1: PUSH2 0x02d2
000000e4: JUMP
000000e5: JUMPDEST
000000e6: PUSH32 0x07ae5bc000000000000000000000000000000000000000000000000000000000
00000107: PUSH1 0x01
00000109: PUSH1 0x01
0000010b: PUSH1 0xe0
0000010d: SHL
0000010e: SUB
0000010f: NOT
00000110: DUP3
00000111: AND
00000112: ADD
00000113: PUSH2 0x011e
00000116: JUMPI
00000117: PUSH2 0x006c
0000011a: PUSH2 0x0303
0000011d: JUMP
0000011e: JUMPDEST
0000011f: PUSH32 0xa39f25e500000000000000000000000000000000000000000000000000000000
00000140: PUSH1 0x01
00000142: PUSH1 0x01
00000144: PUSH1 0xe0
00000146: SHL
00000147: SUB
00000148: NOT
00000149: DUP3
0000014a: AND
0000014b: ADD
0000014c: PUSH2 0x0157
0000014f: JUMPI
00000150: PUSH2 0x006c
00000153: PUSH2 0x0343
00000156: JUMP
00000157: JUMPDEST
00000158: PUSH1 0x40
0000015a: MLOAD
0000015b: PUSH3 0x461bcd
0000015f: PUSH1 0xe5
00000161: SHL
00000162: DUP2
00000163: MSTORE
00000164: PUSH1 0x20
00000166: PUSH1 0x04
00000168: DUP3
00000169: ADD
0000016a: MSTORE
0000016b: PUSH1 0x42
0000016d: PUSH1 0x24
0000016f: DUP3
00000170: ADD
00000171: MSTORE
00000172: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
00000193: PUSH1 0x44
00000195: DUP3
00000196: ADD
00000197: MSTORE
00000198: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
000001b9: PUSH1 0x64
000001bb: DUP3
000001bc: ADD
000001bd: MSTORE
000001be: PUSH32 0x6574000000000000000000000000000000000000000000000000000000000000
000001df: PUSH1 0x84
000001e1: DUP3
000001e2: ADD
000001e3: MSTORE
000001e4: PUSH1 0xa4
000001e6: ADD
000001e7: JUMPDEST
000001e8: PUSH1 0x40
000001ea: MLOAD
000001eb: DUP1
000001ec: SWAP2
000001ed: SUB
000001ee: SWAP1
000001ef: REVERT
000001f0: JUMPDEST
000001f1: DUP2
000001f2: MLOAD
000001f3: PUSH1 0x20
000001f5: DUP4
000001f6: ADD
000001f7: RETURN
000001f8: JUMPDEST
000001f9: PUSH2 0x0200
000001fc: PUSH2 0x0357
000001ff: JUMP
00000200: JUMPDEST
00000201: JUMP
00000202: JUMPDEST
00000203: PUSH1 0x00
00000205: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000226: JUMPDEST
00000227: SLOAD
00000228: PUSH1 0x01
0000022a: PUSH1 0x01
0000022c: PUSH1 0xa0
0000022e: SHL
0000022f: SUB
00000230: AND
00000231: SWAP2
00000232: SWAP1
00000233: POP
00000234: JUMP
00000235: JUMPDEST
00000236: PUSH1 0x60
00000238: PUSH2 0x023f
0000023b: PUSH2 0x0367
0000023e: JUMP
0000023f: JUMPDEST
00000240: PUSH1 0x00
00000242: PUSH2 0x024e
00000245: CALLDATASIZE
00000246: PUSH1 0x04
00000248: DUP2
00000249: DUP5
0000024a: PUSH2 0x075b
0000024d: JUMP
0000024e: JUMPDEST
0000024f: DUP2
00000250: ADD
00000251: SWAP1
00000252: PUSH2 0x025b
00000255: SWAP2
00000256: SWAP1
00000257: PUSH2 0x07a1
0000025a: JUMP
0000025b: JUMPDEST
0000025c: SWAP1
0000025d: POP
0000025e: PUSH2 0x0278
00000261: DUP2
00000262: PUSH1 0x40
00000264: MLOAD
00000265: DUP1
00000266: PUSH1 0x20
00000268: ADD
00000269: PUSH1 0x40
0000026b: MSTORE
0000026c: DUP1
0000026d: PUSH1 0x00
0000026f: DUP2
00000270: MSTORE
00000271: POP
00000272: PUSH1 0x00
00000274: PUSH2 0x0372
00000277: JUMP
00000278: JUMPDEST
00000279: POP
0000027a: POP
0000027b: PUSH1 0x40
0000027d: DUP1
0000027e: MLOAD
0000027f: PUSH1 0x20
00000281: DUP2
00000282: ADD
00000283: SWAP1
00000284: SWAP2
00000285: MSTORE
00000286: PUSH1 0x00
00000288: DUP2
00000289: MSTORE
0000028a: SWAP1
0000028b: JUMP
0000028c: JUMPDEST
0000028d: PUSH1 0x60
0000028f: PUSH1 0x00
00000291: DUP1
00000292: PUSH2 0x029e
00000295: CALLDATASIZE
00000296: PUSH1 0x04
00000298: DUP2
00000299: DUP5
0000029a: PUSH2 0x075b
0000029d: JUMP
0000029e: JUMPDEST
0000029f: DUP2
000002a0: ADD
000002a1: SWAP1
000002a2: PUSH2 0x02ab
000002a5: SWAP2
000002a6: SWAP1
000002a7: PUSH2 0x07eb
000002aa: JUMP
000002ab: JUMPDEST
000002ac: SWAP2
000002ad: POP
000002ae: SWAP2
000002af: POP
000002b0: PUSH2 0x02bb
000002b3: DUP3
000002b4: DUP3
000002b5: PUSH1 0x01
000002b7: PUSH2 0x0372
000002ba: JUMP
000002bb: JUMPDEST
000002bc: PUSH1 0x40
000002be: MLOAD
000002bf: DUP1
000002c0: PUSH1 0x20
000002c2: ADD
000002c3: PUSH1 0x40
000002c5: MSTORE
000002c6: DUP1
000002c7: PUSH1 0x00
000002c9: DUP2
000002ca: MSTORE
000002cb: POP
000002cc: SWAP3
000002cd: POP
000002ce: POP
000002cf: POP
000002d0: SWAP1
000002d1: JUMP
000002d2: JUMPDEST
000002d3: PUSH1 0x60
000002d5: PUSH2 0x02dc
000002d8: PUSH2 0x0367
000002db: JUMP
000002dc: JUMPDEST
000002dd: PUSH1 0x00
000002df: PUSH2 0x02eb
000002e2: CALLDATASIZE
000002e3: PUSH1 0x04
000002e5: DUP2
000002e6: DUP5
000002e7: PUSH2 0x075b
000002ea: JUMP
000002eb: JUMPDEST
000002ec: DUP2
000002ed: ADD
000002ee: SWAP1
000002ef: PUSH2 0x02f8
000002f2: SWAP2
000002f3: SWAP1
000002f4: PUSH2 0x07a1
000002f7: JUMP
000002f8: JUMPDEST
000002f9: SWAP1
000002fa: POP
000002fb: PUSH2 0x0278
000002fe: DUP2
000002ff: PUSH2 0x039e
00000302: JUMP
00000303: JUMPDEST
00000304: PUSH1 0x60
00000306: PUSH2 0x030d
00000309: PUSH2 0x0367
0000030c: JUMP
0000030d: JUMPDEST
0000030e: PUSH1 0x00
00000310: PUSH2 0x0317
00000313: PUSH2 0x0202
00000316: JUMP
00000317: JUMPDEST
00000318: PUSH1 0x40
0000031a: DUP1
0000031b: MLOAD
0000031c: PUSH1 0x01
0000031e: PUSH1 0x01
00000320: PUSH1 0xa0
00000322: SHL
00000323: SUB
00000324: DUP4
00000325: AND
00000326: PUSH1 0x20
00000328: DUP3
00000329: ADD
0000032a: MSTORE
0000032b: SWAP2
0000032c: SWAP3
0000032d: POP
0000032e: ADD
0000032f: PUSH1 0x40
00000331: MLOAD
00000332: PUSH1 0x20
00000334: DUP2
00000335: DUP4
00000336: SUB
00000337: SUB
00000338: DUP2
00000339: MSTORE
0000033a: SWAP1
0000033b: PUSH1 0x40
0000033d: MSTORE
0000033e: SWAP2
0000033f: POP
00000340: POP
00000341: SWAP1
00000342: JUMP
00000343: JUMPDEST
00000344: PUSH1 0x60
00000346: PUSH2 0x034d
00000349: PUSH2 0x0367
0000034c: JUMP
0000034d: JUMPDEST
0000034e: PUSH1 0x00
00000350: PUSH2 0x0317
00000353: PUSH2 0x03f5
00000356: JUMP
00000357: JUMPDEST
00000358: PUSH2 0x0200
0000035b: PUSH2 0x0362
0000035e: PUSH2 0x03f5
00000361: JUMP
00000362: JUMPDEST
00000363: PUSH2 0x0404
00000366: JUMP
00000367: JUMPDEST
00000368: CALLVALUE
00000369: ISZERO
0000036a: PUSH2 0x0200
0000036d: JUMPI
0000036e: PUSH1 0x00
00000370: DUP1
00000371: REVERT
00000372: JUMPDEST
00000373: PUSH2 0x037b
00000376: DUP4
00000377: PUSH2 0x0428
0000037a: JUMP
0000037b: JUMPDEST
0000037c: PUSH1 0x00
0000037e: DUP3
0000037f: MLOAD
00000380: GT
00000381: DUP1
00000382: PUSH2 0x0388
00000385: JUMPI
00000386: POP
00000387: DUP1
00000388: JUMPDEST
00000389: ISZERO
0000038a: PUSH2 0x0399
0000038d: JUMPI
0000038e: PUSH2 0x0397
00000391: DUP4
00000392: DUP4
00000393: PUSH2 0x0468
00000396: JUMP
00000397: JUMPDEST
00000398: POP
00000399: JUMPDEST
0000039a: POP
0000039b: POP
0000039c: POP
0000039d: JUMP
0000039e: JUMPDEST
0000039f: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
000003c0: PUSH2 0x03c7
000003c3: PUSH2 0x0202
000003c6: JUMP
000003c7: JUMPDEST
000003c8: PUSH1 0x40
000003ca: DUP1
000003cb: MLOAD
000003cc: PUSH1 0x01
000003ce: PUSH1 0x01
000003d0: PUSH1 0xa0
000003d2: SHL
000003d3: SUB
000003d4: SWAP3
000003d5: DUP4
000003d6: AND
000003d7: DUP2
000003d8: MSTORE
000003d9: SWAP2
000003da: DUP5
000003db: AND
000003dc: PUSH1 0x20
000003de: DUP4
000003df: ADD
000003e0: MSTORE
000003e1: ADD
000003e2: PUSH1 0x40
000003e4: MLOAD
000003e5: DUP1
000003e6: SWAP2
000003e7: SUB
000003e8: SWAP1
000003e9: LOG1
000003ea: PUSH2 0x03f2
000003ed: DUP2
000003ee: PUSH2 0x0494
000003f1: JUMP
000003f2: JUMPDEST
000003f3: POP
000003f4: JUMP
000003f5: JUMPDEST
000003f6: PUSH1 0x00
000003f8: PUSH2 0x03ff
000003fb: PUSH2 0x056c
000003fe: JUMP
000003ff: JUMPDEST
00000400: SWAP1
00000401: POP
00000402: SWAP1
00000403: JUMP
00000404: JUMPDEST
00000405: CALLDATASIZE
00000406: PUSH1 0x00
00000408: DUP1
00000409: CALLDATACOPY
0000040a: PUSH1 0x00
0000040c: DUP1
0000040d: CALLDATASIZE
0000040e: PUSH1 0x00
00000410: DUP5
00000411: GAS
00000412: DELEGATECALL
00000413: RETURNDATASIZE
00000414: PUSH1 0x00
00000416: DUP1
00000417: RETURNDATACOPY
00000418: DUP1
00000419: DUP1
0000041a: ISZERO
0000041b: PUSH2 0x0423
0000041e: JUMPI
0000041f: RETURNDATASIZE
00000420: PUSH1 0x00
00000422: RETURN
00000423: JUMPDEST
00000424: RETURNDATASIZE
00000425: PUSH1 0x00
00000427: REVERT
00000428: JUMPDEST
00000429: PUSH2 0x0431
0000042c: DUP2
0000042d: PUSH2 0x0594
00000430: JUMP
00000431: JUMPDEST
00000432: PUSH1 0x40
00000434: MLOAD
00000435: PUSH1 0x01
00000437: PUSH1 0x01
00000439: PUSH1 0xa0
0000043b: SHL
0000043c: SUB
0000043d: DUP3
0000043e: AND
0000043f: SWAP1
00000440: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
00000461: SWAP1
00000462: PUSH1 0x00
00000464: SWAP1
00000465: LOG2
00000466: POP
00000467: JUMP
00000468: JUMPDEST
00000469: PUSH1 0x60
0000046b: PUSH2 0x048d
0000046e: DUP4
0000046f: DUP4
00000470: PUSH1 0x40
00000472: MLOAD
00000473: DUP1
00000474: PUSH1 0x60
00000476: ADD
00000477: PUSH1 0x40
00000479: MSTORE
0000047a: DUP1
0000047b: PUSH1 0x27
0000047d: DUP2
0000047e: MSTORE
0000047f: PUSH1 0x20
00000481: ADD
00000482: PUSH2 0x0921
00000485: PUSH1 0x27
00000487: SWAP2
00000488: CODECOPY
00000489: PUSH2 0x0638
0000048c: JUMP
0000048d: JUMPDEST
0000048e: SWAP4
0000048f: SWAP3
00000490: POP
00000491: POP
00000492: POP
00000493: JUMP
00000494: JUMPDEST
00000495: PUSH1 0x01
00000497: PUSH1 0x01
00000499: PUSH1 0xa0
0000049b: SHL
0000049c: SUB
0000049d: DUP2
0000049e: AND
0000049f: PUSH2 0x0510
000004a2: JUMPI
000004a3: PUSH1 0x40
000004a5: MLOAD
000004a6: PUSH3 0x461bcd
000004aa: PUSH1 0xe5
000004ac: SHL
000004ad: DUP2
000004ae: MSTORE
000004af: PUSH1 0x20
000004b1: PUSH1 0x04
000004b3: DUP3
000004b4: ADD
000004b5: MSTORE
000004b6: PUSH1 0x26
000004b8: PUSH1 0x24
000004ba: DUP3
000004bb: ADD
000004bc: MSTORE
000004bd: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
000004de: PUSH1 0x44
000004e0: DUP3
000004e1: ADD
000004e2: MSTORE
000004e3: PUSH32 0x6464726573730000000000000000000000000000000000000000000000000000
00000504: PUSH1 0x64
00000506: DUP3
00000507: ADD
00000508: MSTORE
00000509: PUSH1 0x84
0000050b: ADD
0000050c: PUSH2 0x01e7
0000050f: JUMP
00000510: JUMPDEST
00000511: DUP1
00000512: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000533: JUMPDEST
00000534: DUP1
00000535: SLOAD
00000536: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000
00000557: AND
00000558: PUSH1 0x01
0000055a: PUSH1 0x01
0000055c: PUSH1 0xa0
0000055e: SHL
0000055f: SUB
00000560: SWAP3
00000561: SWAP1
00000562: SWAP3
00000563: AND
00000564: SWAP2
00000565: SWAP1
00000566: SWAP2
00000567: OR
00000568: SWAP1
00000569: SSTORE
0000056a: POP
0000056b: JUMP
0000056c: JUMPDEST
0000056d: PUSH1 0x00
0000056f: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000590: PUSH2 0x0226
00000593: JUMP
00000594: JUMPDEST
00000595: PUSH1 0x01
00000597: PUSH1 0x01
00000599: PUSH1 0xa0
0000059b: SHL
0000059c: SUB
0000059d: DUP2
0000059e: AND
0000059f: EXTCODESIZE
000005a0: PUSH2 0x0611
000005a3: JUMPI
000005a4: PUSH1 0x40
000005a6: MLOAD
000005a7: PUSH3 0x461bcd
000005ab: PUSH1 0xe5
000005ad: SHL
000005ae: DUP2
000005af: MSTORE
000005b0: PUSH1 0x20
000005b2: PUSH1 0x04
000005b4: DUP3
000005b5: ADD
000005b6: MSTORE
000005b7: PUSH1 0x2d
000005b9: PUSH1 0x24
000005bb: DUP3
000005bc: ADD
000005bd: MSTORE
000005be: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
000005df: PUSH1 0x44
000005e1: DUP3
000005e2: ADD
000005e3: MSTORE
000005e4: PUSH32 0x6f74206120636f6e747261637400000000000000000000000000000000000000
00000605: PUSH1 0x64
00000607: DUP3
00000608: ADD
00000609: MSTORE
0000060a: PUSH1 0x84
0000060c: ADD
0000060d: PUSH2 0x01e7
00000610: JUMP
00000611: JUMPDEST
00000612: DUP1
00000613: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000634: PUSH2 0x0533
00000637: JUMP
00000638: JUMPDEST
00000639: PUSH1 0x60
0000063b: PUSH1 0x00
0000063d: DUP1
0000063e: DUP6
0000063f: PUSH1 0x01
00000641: PUSH1 0x01
00000643: PUSH1 0xa0
00000645: SHL
00000646: SUB
00000647: AND
00000648: DUP6
00000649: PUSH1 0x40
0000064b: MLOAD
0000064c: PUSH2 0x0655
0000064f: SWAP2
00000650: SWAP1
00000651: PUSH2 0x08d1
00000654: JUMP
00000655: JUMPDEST
00000656: PUSH1 0x00
00000658: PUSH1 0x40
0000065a: MLOAD
0000065b: DUP1
0000065c: DUP4
0000065d: SUB
0000065e: DUP2
0000065f: DUP6
00000660: GAS
00000661: DELEGATECALL
00000662: SWAP2
00000663: POP
00000664: POP
00000665: RETURNDATASIZE
00000666: DUP1
00000667: PUSH1 0x00
00000669: DUP2
0000066a: EQ
0000066b: PUSH2 0x0690
0000066e: JUMPI
0000066f: PUSH1 0x40
00000671: MLOAD
00000672: SWAP2
00000673: POP
00000674: PUSH1 0x1f
00000676: NOT
00000677: PUSH1 0x3f
00000679: RETURNDATASIZE
0000067a: ADD
0000067b: AND
0000067c: DUP3
0000067d: ADD
0000067e: PUSH1 0x40
00000680: MSTORE
00000681: RETURNDATASIZE
00000682: DUP3
00000683: MSTORE
00000684: RETURNDATASIZE
00000685: PUSH1 0x00
00000687: PUSH1 0x20
00000689: DUP5
0000068a: ADD
0000068b: RETURNDATACOPY
0000068c: PUSH2 0x0695
0000068f: JUMP
00000690: JUMPDEST
00000691: PUSH1 0x60
00000693: SWAP2
00000694: POP
00000695: JUMPDEST
00000696: POP
00000697: SWAP2
00000698: POP
00000699: SWAP2
0000069a: POP
0000069b: PUSH2 0x06a6
0000069e: DUP7
0000069f: DUP4
000006a0: DUP4
000006a1: DUP8
000006a2: PUSH2 0x06b0
000006a5: JUMP
000006a6: JUMPDEST
000006a7: SWAP7
000006a8: SWAP6
000006a9: POP
000006aa: POP
000006ab: POP
000006ac: POP
000006ad: POP
000006ae: POP
000006af: JUMP
000006b0: JUMPDEST
000006b1: PUSH1 0x60
000006b3: DUP4
000006b4: ISZERO
000006b5: PUSH2 0x071f
000006b8: JUMPI
000006b9: DUP3
000006ba: MLOAD
000006bb: PUSH1 0x00
000006bd: SUB
000006be: PUSH2 0x0718
000006c1: JUMPI
000006c2: PUSH1 0x01
000006c4: PUSH1 0x01
000006c6: PUSH1 0xa0
000006c8: SHL
000006c9: SUB
000006ca: DUP6
000006cb: AND
000006cc: EXTCODESIZE
000006cd: PUSH2 0x0718
000006d0: JUMPI
000006d1: PUSH1 0x40
000006d3: MLOAD
000006d4: PUSH3 0x461bcd
000006d8: PUSH1 0xe5
000006da: SHL
000006db: DUP2
000006dc: MSTORE
000006dd: PUSH1 0x20
000006df: PUSH1 0x04
000006e1: DUP3
000006e2: ADD
000006e3: MSTORE
000006e4: PUSH1 0x1d
000006e6: PUSH1 0x24
000006e8: DUP3
000006e9: ADD
000006ea: MSTORE
000006eb: PUSH32 0x416464726573733a2063616c6c20746f206e6f6e2d636f6e7472616374000000
0000070c: PUSH1 0x44
0000070e: DUP3
0000070f: ADD
00000710: MSTORE
00000711: PUSH1 0x64
00000713: ADD
00000714: PUSH2 0x01e7
00000717: JUMP
00000718: JUMPDEST
00000719: POP
0000071a: DUP2
0000071b: PUSH2 0x0729
0000071e: JUMP
0000071f: JUMPDEST
00000720: PUSH2 0x0729
00000723: DUP4
00000724: DUP4
00000725: PUSH2 0x0731
00000728: JUMP
00000729: JUMPDEST
0000072a: SWAP5
0000072b: SWAP4
0000072c: POP
0000072d: POP
0000072e: POP
0000072f: POP
00000730: JUMP
00000731: JUMPDEST
00000732: DUP2
00000733: MLOAD
00000734: ISZERO
00000735: PUSH2 0x0741
00000738: JUMPI
00000739: DUP2
0000073a: MLOAD
0000073b: DUP1
0000073c: DUP4
0000073d: PUSH1 0x20
0000073f: ADD
00000740: REVERT
00000741: JUMPDEST
00000742: DUP1
00000743: PUSH1 0x40
00000745: MLOAD
00000746: PUSH3 0x461bcd
0000074a: PUSH1 0xe5
0000074c: SHL
0000074d: DUP2
0000074e: MSTORE
0000074f: PUSH1 0x04
00000751: ADD
00000752: PUSH2 0x01e7
00000755: SWAP2
00000756: SWAP1
00000757: PUSH2 0x08ed
0000075a: JUMP
0000075b: JUMPDEST
0000075c: PUSH1 0x00
0000075e: DUP1
0000075f: DUP6
00000760: DUP6
00000761: GT
00000762: ISZERO
00000763: PUSH2 0x076b
00000766: JUMPI
00000767: PUSH1 0x00
00000769: DUP1
0000076a: REVERT
0000076b: JUMPDEST
0000076c: DUP4
0000076d: DUP7
0000076e: GT
0000076f: ISZERO
00000770: PUSH2 0x0778
00000773: JUMPI
00000774: PUSH1 0x00
00000776: DUP1
00000777: REVERT
00000778: JUMPDEST
00000779: POP
0000077a: POP
0000077b: DUP3
0000077c: ADD
0000077d: SWAP4
0000077e: SWAP2
0000077f: SWAP1
00000780: SWAP3
00000781: SUB
00000782: SWAP2
00000783: POP
00000784: JUMP
00000785: JUMPDEST
00000786: DUP1
00000787: CALLDATALOAD
00000788: PUSH1 0x01
0000078a: PUSH1 0x01
0000078c: PUSH1 0xa0
0000078e: SHL
0000078f: SUB
00000790: DUP2
00000791: AND
00000792: DUP2
00000793: EQ
00000794: PUSH2 0x079c
00000797: JUMPI
00000798: PUSH1 0x00
0000079a: DUP1
0000079b: REVERT
0000079c: JUMPDEST
0000079d: SWAP2
0000079e: SWAP1
0000079f: POP
000007a0: JUMP
000007a1: JUMPDEST
000007a2: PUSH1 0x00
000007a4: PUSH1 0x20
000007a6: DUP3
000007a7: DUP5
000007a8: SUB
000007a9: SLT
000007aa: ISZERO
000007ab: PUSH2 0x07b3
000007ae: JUMPI
000007af: PUSH1 0x00
000007b1: DUP1
000007b2: REVERT
000007b3: JUMPDEST
000007b4: PUSH2 0x048d
000007b7: DUP3
000007b8: PUSH2 0x0785
000007bb: JUMP
000007bc: JUMPDEST
000007bd: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
000007de: PUSH1 0x00
000007e0: MSTORE
000007e1: PUSH1 0x41
000007e3: PUSH1 0x04
000007e5: MSTORE
000007e6: PUSH1 0x24
000007e8: PUSH1 0x00
000007ea: REVERT
000007eb: JUMPDEST
000007ec: PUSH1 0x00
000007ee: DUP1
000007ef: PUSH1 0x40
000007f1: DUP4
000007f2: DUP6
000007f3: SUB
000007f4: SLT
000007f5: ISZERO
000007f6: PUSH2 0x07fe
000007f9: JUMPI
000007fa: PUSH1 0x00
000007fc: DUP1
000007fd: REVERT
000007fe: JUMPDEST
000007ff: PUSH2 0x0807
00000802: DUP4
00000803: PUSH2 0x0785
00000806: JUMP
00000807: JUMPDEST
00000808: SWAP2
00000809: POP
0000080a: PUSH1 0x20
0000080c: DUP4
0000080d: ADD
0000080e: CALLDATALOAD
0000080f: PUSH8 0xffffffffffffffff
00000818: DUP1
00000819: DUP3
0000081a: GT
0000081b: ISZERO
0000081c: PUSH2 0x0824
0000081f: JUMPI
00000820: PUSH1 0x00
00000822: DUP1
00000823: REVERT
00000824: JUMPDEST
00000825: DUP2
00000826: DUP6
00000827: ADD
00000828: SWAP2
00000829: POP
0000082a: DUP6
0000082b: PUSH1 0x1f
0000082d: DUP4
0000082e: ADD
0000082f: SLT
00000830: PUSH2 0x0838
00000833: JUMPI
00000834: PUSH1 0x00
00000836: DUP1
00000837: REVERT
00000838: JUMPDEST
00000839: DUP2
0000083a: CALLDATALOAD
0000083b: DUP2
0000083c: DUP2
0000083d: GT
0000083e: ISZERO
0000083f: PUSH2 0x084a
00000842: JUMPI
00000843: PUSH2 0x084a
00000846: PUSH2 0x07bc
00000849: JUMP
0000084a: JUMPDEST
0000084b: PUSH1 0x40
0000084d: MLOAD
0000084e: PUSH1 0x1f
00000850: DUP3
00000851: ADD
00000852: PUSH1 0x1f
00000854: NOT
00000855: SWAP1
00000856: DUP2
00000857: AND
00000858: PUSH1 0x3f
0000085a: ADD
0000085b: AND
0000085c: DUP2
0000085d: ADD
0000085e: SWAP1
0000085f: DUP4
00000860: DUP3
00000861: GT
00000862: DUP2
00000863: DUP4
00000864: LT
00000865: OR
00000866: ISZERO
00000867: PUSH2 0x0872
0000086a: JUMPI
0000086b: PUSH2 0x0872
0000086e: PUSH2 0x07bc
00000871: JUMP
00000872: JUMPDEST
00000873: DUP2
00000874: PUSH1 0x40
00000876: MSTORE
00000877: DUP3
00000878: DUP2
00000879: MSTORE
0000087a: DUP9
0000087b: PUSH1 0x20
0000087d: DUP5
0000087e: DUP8
0000087f: ADD
00000880: ADD
00000881: GT
00000882: ISZERO
00000883: PUSH2 0x088b
00000886: JUMPI
00000887: PUSH1 0x00
00000889: DUP1
0000088a: REVERT
0000088b: JUMPDEST
0000088c: DUP3
0000088d: PUSH1 0x20
0000088f: DUP7
00000890: ADD
00000891: PUSH1 0x20
00000893: DUP4
00000894: ADD
00000895: CALLDATACOPY
00000896: PUSH1 0x00
00000898: PUSH1 0x20
0000089a: DUP5
0000089b: DUP4
0000089c: ADD
0000089d: ADD
0000089e: MSTORE
0000089f: DUP1
000008a0: SWAP6
000008a1: POP
000008a2: POP
000008a3: POP
000008a4: POP
000008a5: POP
000008a6: POP
000008a7: SWAP3
000008a8: POP
000008a9: SWAP3
000008aa: SWAP1
000008ab: POP
000008ac: JUMP
000008ad: JUMPDEST
000008ae: PUSH1 0x00
000008b0: JUMPDEST
000008b1: DUP4
000008b2: DUP2
000008b3: LT
000008b4: ISZERO
000008b5: PUSH2 0x08c8
000008b8: JUMPI
000008b9: DUP2
000008ba: DUP2
000008bb: ADD
000008bc: MLOAD
000008bd: DUP4
000008be: DUP3
000008bf: ADD
000008c0: MSTORE
000008c1: PUSH1 0x20
000008c3: ADD
000008c4: PUSH2 0x08b0
000008c7: JUMP
000008c8: JUMPDEST
000008c9: POP
000008ca: POP
000008cb: PUSH1 0x00
000008cd: SWAP2
000008ce: ADD
000008cf: MSTORE
000008d0: JUMP
000008d1: JUMPDEST
000008d2: PUSH1 0x00
000008d4: DUP3
000008d5: MLOAD
000008d6: PUSH2 0x08e3
000008d9: DUP2
000008da: DUP5
000008db: PUSH1 0x20
000008dd: DUP8
000008de: ADD
000008df: PUSH2 0x08ad
000008e2: JUMP
000008e3: JUMPDEST
000008e4: SWAP2
000008e5: SWAP1
000008e6: SWAP2
000008e7: ADD
000008e8: SWAP3
000008e9: SWAP2
000008ea: POP
000008eb: POP
000008ec: JUMP
000008ed: JUMPDEST
000008ee: PUSH1 0x20
000008f0: DUP2
000008f1: MSTORE
000008f2: PUSH1 0x00
000008f4: DUP3
000008f5: MLOAD
000008f6: DUP1
000008f7: PUSH1 0x20
000008f9: DUP5
000008fa: ADD
000008fb: MSTORE
000008fc: PUSH2 0x090c
000008ff: DUP2
00000900: PUSH1 0x40
00000902: DUP6
00000903: ADD
00000904: PUSH1 0x20
00000906: DUP8
00000907: ADD
00000908: PUSH2 0x08ad
0000090b: JUMP
0000090c: JUMPDEST
0000090d: PUSH1 0x1f
0000090f: ADD
00000910: PUSH1 0x1f
00000912: NOT
00000913: AND
00000914: SWAP2
00000915: SWAP1
00000916: SWAP2
00000917: ADD
00000918: PUSH1 0x40
0000091a: ADD
0000091b: SWAP3
0000091c: SWAP2
0000091d: POP
0000091e: POP
0000091f: JUMP
00000920: INVALID
00000921: COINBASE
00000922: PUSH5 0x6472657373
00000928: GASPRICE
00000929: KECCAK256
0000092a: PUSH13 0x6f772d6c6576656c2064656c65
00000938: PUSH8 0x6174652063616c6c
00000941: KECCAK256
00000942: PUSH7 0x61696c6564a264
0000094a: PUSH10 0x70667358221220377d5c
00000955: MOD
00000956: UNKNOWN(0xA9)
00000957: UNKNOWN(0xDA)
00000958: OR
00000959: PUSH24 0x5dcb223549c484a643cb87909eaf2057b60f1bacfae49dc3
00000972: PUSH5 0x736f6c6343
00000978: STOP
00000979: ADDMOD
0000097a: SGT
0000097b: STOP
0000097c: CALLER

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0xb1d4f17c72669f9c807d968aca36a7ae0f9f6f7296afba138aaec38103471c32 call_targets: 0xde5ce5dd048596e46ff671b13317acc3c5b59b01 target_varies: no classification: constant_target validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xb1d4f17c72669f9c807d968aca36a7ae0f9f6f7296afba138aaec38103471c32", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xde5ce5dd048596e46ff671b13317acc3c5b59b01" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x", "selector": "fallback", "calldata_variants": [ "0x" ] } ] } evidence_json { "examples": [ { "pc": 1042, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1633, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 2, "untrusted_delegatecall_count": 2 }

Severity