TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b3844-b00e-71df-8510-82e7da107bee

complete
Chain ID
1
Address
Block Number
Created
Fri, Dec 19, 2025 8:19 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
18087 artifact.fetch complete 1 / 3 3 months ago
18088 tool.cast_disasm complete 1 / 3 3 months ago
100943 analysis.bundle complete 1 / 3 1 week ago
100944 capability.graph complete 1 / 3 1 week ago
100945 detector.run complete 1 / 3 1 week ago
100946 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
1
Total opcodes
1073
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x004e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x3659cfe6
00000019: EQ
0000001a: PUSH2 0x0065
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x4f1ef286
00000024: EQ
00000025: PUSH2 0x0085
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x5c60da1b
0000002f: EQ
00000030: PUSH2 0x00ae
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x8f283970
0000003a: EQ
0000003b: PUSH2 0x00d0
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf851a440
00000045: EQ
00000046: PUSH2 0x00f0
00000049: JUMPI
0000004a: PUSH2 0x005d
0000004d: JUMP
0000004e: JUMPDEST
0000004f: CALLDATASIZE
00000050: PUSH2 0x005d
00000053: JUMPI
00000054: PUSH2 0x005b
00000057: PUSH2 0x0105
0000005a: JUMP
0000005b: JUMPDEST
0000005c: STOP
0000005d: JUMPDEST
0000005e: PUSH2 0x005b
00000061: PUSH2 0x0105
00000064: JUMP
00000065: JUMPDEST
00000066: CALLVALUE
00000067: DUP1
00000068: ISZERO
00000069: PUSH2 0x0071
0000006c: JUMPI
0000006d: PUSH1 0x00
0000006f: DUP1
00000070: REVERT
00000071: JUMPDEST
00000072: POP
00000073: PUSH2 0x005b
00000076: PUSH2 0x0080
00000079: CALLDATASIZE
0000007a: PUSH1 0x04
0000007c: PUSH2 0x0491
0000007f: JUMP
00000080: JUMPDEST
00000081: PUSH2 0x0182
00000084: JUMP
00000085: JUMPDEST
00000086: PUSH2 0x0098
00000089: PUSH2 0x0093
0000008c: CALLDATASIZE
0000008d: PUSH1 0x04
0000008f: PUSH2 0x050c
00000092: JUMP
00000093: JUMPDEST
00000094: PUSH2 0x01c8
00000097: JUMP
00000098: JUMPDEST
00000099: PUSH1 0x40
0000009b: MLOAD
0000009c: PUSH2 0x00a5
0000009f: SWAP2
000000a0: SWAP1
000000a1: PUSH2 0x05be
000000a4: JUMP
000000a5: JUMPDEST
000000a6: PUSH1 0x40
000000a8: MLOAD
000000a9: DUP1
000000aa: SWAP2
000000ab: SUB
000000ac: SWAP1
000000ad: RETURN
000000ae: JUMPDEST
000000af: CALLVALUE
000000b0: DUP1
000000b1: ISZERO
000000b2: PUSH2 0x00ba
000000b5: JUMPI
000000b6: PUSH1 0x00
000000b8: DUP1
000000b9: REVERT
000000ba: JUMPDEST
000000bb: POP
000000bc: PUSH2 0x00c3
000000bf: PUSH2 0x02a2
000000c2: JUMP
000000c3: JUMPDEST
000000c4: PUSH1 0x40
000000c6: MLOAD
000000c7: PUSH2 0x00a5
000000ca: SWAP2
000000cb: SWAP1
000000cc: PUSH2 0x05de
000000cf: JUMP
000000d0: JUMPDEST
000000d1: CALLVALUE
000000d2: DUP1
000000d3: ISZERO
000000d4: PUSH2 0x00dc
000000d7: JUMPI
000000d8: PUSH1 0x00
000000da: DUP1
000000db: REVERT
000000dc: JUMPDEST
000000dd: POP
000000de: PUSH2 0x005b
000000e1: PUSH2 0x00eb
000000e4: CALLDATASIZE
000000e5: PUSH1 0x04
000000e7: PUSH2 0x0491
000000ea: JUMP
000000eb: JUMPDEST
000000ec: PUSH2 0x030d
000000ef: JUMP
000000f0: JUMPDEST
000000f1: CALLVALUE
000000f2: DUP1
000000f3: ISZERO
000000f4: PUSH2 0x00fc
000000f7: JUMPI
000000f8: PUSH1 0x00
000000fa: DUP1
000000fb: REVERT
000000fc: JUMPDEST
000000fd: POP
000000fe: PUSH2 0x00c3
00000101: PUSH2 0x0348
00000104: JUMP
00000105: JUMPDEST
00000106: PUSH1 0x00
00000108: PUSH2 0x012f
0000010b: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000012c: SLOAD
0000012d: SWAP1
0000012e: JUMP
0000012f: JUMPDEST
00000130: SWAP1
00000131: POP
00000132: PUSH1 0x01
00000134: PUSH1 0x01
00000136: PUSH1 0xa0
00000138: SHL
00000139: SUB
0000013a: DUP2
0000013b: AND
0000013c: PUSH2 0x0160
0000013f: JUMPI
00000140: PUSH1 0x40
00000142: MLOAD
00000143: PUSH3 0x461bcd
00000147: PUSH1 0xe5
00000149: SHL
0000014a: DUP2
0000014b: MSTORE
0000014c: PUSH1 0x04
0000014e: ADD
0000014f: PUSH2 0x0157
00000152: SWAP1
00000153: PUSH2 0x0631
00000156: JUMP
00000157: JUMPDEST
00000158: PUSH1 0x40
0000015a: MLOAD
0000015b: DUP1
0000015c: SWAP2
0000015d: SUB
0000015e: SWAP1
0000015f: REVERT
00000160: JUMPDEST
00000161: CALLDATASIZE
00000162: PUSH1 0x00
00000164: DUP1
00000165: CALLDATACOPY
00000166: PUSH1 0x00
00000168: DUP1
00000169: CALLDATASIZE
0000016a: PUSH1 0x00
0000016c: DUP5
0000016d: GAS
0000016e: DELEGATECALL
0000016f: RETURNDATASIZE
00000170: PUSH1 0x00
00000172: DUP1
00000173: RETURNDATACOPY
00000174: DUP1
00000175: PUSH2 0x017d
00000178: JUMPI
00000179: RETURNDATASIZE
0000017a: PUSH1 0x00
0000017c: REVERT
0000017d: JUMPDEST
0000017e: RETURNDATASIZE
0000017f: PUSH1 0x00
00000181: RETURN
00000182: JUMPDEST
00000183: PUSH1 0x00
00000185: DUP1
00000186: MLOAD
00000187: PUSH1 0x20
00000189: PUSH2 0x06f3
0000018c: DUP4
0000018d: CODECOPY
0000018e: DUP2
0000018f: MLOAD
00000190: SWAP2
00000191: MSTORE
00000192: SLOAD
00000193: PUSH1 0x01
00000195: PUSH1 0x01
00000197: PUSH1 0xa0
00000199: SHL
0000019a: SUB
0000019b: AND
0000019c: CALLER
0000019d: PUSH1 0x01
0000019f: PUSH1 0x01
000001a1: PUSH1 0xa0
000001a3: SHL
000001a4: SUB
000001a5: AND
000001a6: EQ
000001a7: DUP1
000001a8: PUSH2 0x01af
000001ab: JUMPI
000001ac: POP
000001ad: CALLER
000001ae: ISZERO
000001af: JUMPDEST
000001b0: ISZERO
000001b1: PUSH2 0x01c0
000001b4: JUMPI
000001b5: PUSH2 0x01bd
000001b8: DUP2
000001b9: PUSH2 0x0396
000001bc: JUMP
000001bd: JUMPDEST
000001be: POP
000001bf: JUMP
000001c0: JUMPDEST
000001c1: PUSH2 0x01bd
000001c4: PUSH2 0x0105
000001c7: JUMP
000001c8: JUMPDEST
000001c9: PUSH1 0x60
000001cb: PUSH2 0x01e0
000001ce: PUSH1 0x00
000001d0: DUP1
000001d1: MLOAD
000001d2: PUSH1 0x20
000001d4: PUSH2 0x06f3
000001d7: DUP4
000001d8: CODECOPY
000001d9: DUP2
000001da: MLOAD
000001db: SWAP2
000001dc: MSTORE
000001dd: SLOAD
000001de: SWAP1
000001df: JUMP
000001e0: JUMPDEST
000001e1: PUSH1 0x01
000001e3: PUSH1 0x01
000001e5: PUSH1 0xa0
000001e7: SHL
000001e8: SUB
000001e9: AND
000001ea: CALLER
000001eb: PUSH1 0x01
000001ed: PUSH1 0x01
000001ef: PUSH1 0xa0
000001f1: SHL
000001f2: SUB
000001f3: AND
000001f4: EQ
000001f5: DUP1
000001f6: PUSH2 0x01fd
000001f9: JUMPI
000001fa: POP
000001fb: CALLER
000001fc: ISZERO
000001fd: JUMPDEST
000001fe: ISZERO
000001ff: PUSH2 0x0293
00000202: JUMPI
00000203: PUSH2 0x020b
00000206: DUP5
00000207: PUSH2 0x0396
0000020a: JUMP
0000020b: JUMPDEST
0000020c: PUSH1 0x00
0000020e: DUP1
0000020f: DUP6
00000210: PUSH1 0x01
00000212: PUSH1 0x01
00000214: PUSH1 0xa0
00000216: SHL
00000217: SUB
00000218: AND
00000219: DUP6
0000021a: DUP6
0000021b: PUSH1 0x40
0000021d: MLOAD
0000021e: PUSH2 0x0228
00000221: SWAP3
00000222: SWAP2
00000223: SWAP1
00000224: PUSH2 0x0660
00000227: JUMP
00000228: JUMPDEST
00000229: PUSH1 0x00
0000022b: PUSH1 0x40
0000022d: MLOAD
0000022e: DUP1
0000022f: DUP4
00000230: SUB
00000231: DUP2
00000232: DUP6
00000233: GAS
00000234: DELEGATECALL
00000235: SWAP2
00000236: POP
00000237: POP
00000238: RETURNDATASIZE
00000239: DUP1
0000023a: PUSH1 0x00
0000023c: DUP2
0000023d: EQ
0000023e: PUSH2 0x0263
00000241: JUMPI
00000242: PUSH1 0x40
00000244: MLOAD
00000245: SWAP2
00000246: POP
00000247: PUSH1 0x1f
00000249: NOT
0000024a: PUSH1 0x3f
0000024c: RETURNDATASIZE
0000024d: ADD
0000024e: AND
0000024f: DUP3
00000250: ADD
00000251: PUSH1 0x40
00000253: MSTORE
00000254: RETURNDATASIZE
00000255: DUP3
00000256: MSTORE
00000257: RETURNDATASIZE
00000258: PUSH1 0x00
0000025a: PUSH1 0x20
0000025c: DUP5
0000025d: ADD
0000025e: RETURNDATACOPY
0000025f: PUSH2 0x0268
00000262: JUMP
00000263: JUMPDEST
00000264: PUSH1 0x60
00000266: SWAP2
00000267: POP
00000268: JUMPDEST
00000269: POP
0000026a: SWAP2
0000026b: POP
0000026c: SWAP2
0000026d: POP
0000026e: DUP2
0000026f: PUSH2 0x028a
00000272: JUMPI
00000273: PUSH1 0x40
00000275: MLOAD
00000276: PUSH3 0x461bcd
0000027a: PUSH1 0xe5
0000027c: SHL
0000027d: DUP2
0000027e: MSTORE
0000027f: PUSH1 0x04
00000281: ADD
00000282: PUSH2 0x0157
00000285: SWAP1
00000286: PUSH2 0x06c7
00000289: JUMP
0000028a: JUMPDEST
0000028b: SWAP2
0000028c: POP
0000028d: PUSH2 0x029b
00000290: SWAP1
00000291: POP
00000292: JUMP
00000293: JUMPDEST
00000294: PUSH2 0x029b
00000297: PUSH2 0x0105
0000029a: JUMP
0000029b: JUMPDEST
0000029c: SWAP4
0000029d: SWAP3
0000029e: POP
0000029f: POP
000002a0: POP
000002a1: JUMP
000002a2: JUMPDEST
000002a3: PUSH1 0x00
000002a5: PUSH2 0x02ba
000002a8: PUSH1 0x00
000002aa: DUP1
000002ab: MLOAD
000002ac: PUSH1 0x20
000002ae: PUSH2 0x06f3
000002b1: DUP4
000002b2: CODECOPY
000002b3: DUP2
000002b4: MLOAD
000002b5: SWAP2
000002b6: MSTORE
000002b7: SLOAD
000002b8: SWAP1
000002b9: JUMP
000002ba: JUMPDEST
000002bb: PUSH1 0x01
000002bd: PUSH1 0x01
000002bf: PUSH1 0xa0
000002c1: SHL
000002c2: SUB
000002c3: AND
000002c4: CALLER
000002c5: PUSH1 0x01
000002c7: PUSH1 0x01
000002c9: PUSH1 0xa0
000002cb: SHL
000002cc: SUB
000002cd: AND
000002ce: EQ
000002cf: DUP1
000002d0: PUSH2 0x02d7
000002d3: JUMPI
000002d4: POP
000002d5: CALLER
000002d6: ISZERO
000002d7: JUMPDEST
000002d8: ISZERO
000002d9: PUSH2 0x0302
000002dc: JUMPI
000002dd: POP
000002de: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000002ff: SLOAD
00000300: SWAP1
00000301: JUMP
00000302: JUMPDEST
00000303: PUSH2 0x030a
00000306: PUSH2 0x0105
00000309: JUMP
0000030a: JUMPDEST
0000030b: SWAP1
0000030c: JUMP
0000030d: JUMPDEST
0000030e: PUSH1 0x00
00000310: DUP1
00000311: MLOAD
00000312: PUSH1 0x20
00000314: PUSH2 0x06f3
00000317: DUP4
00000318: CODECOPY
00000319: DUP2
0000031a: MLOAD
0000031b: SWAP2
0000031c: MSTORE
0000031d: SLOAD
0000031e: PUSH1 0x01
00000320: PUSH1 0x01
00000322: PUSH1 0xa0
00000324: SHL
00000325: SUB
00000326: AND
00000327: CALLER
00000328: PUSH1 0x01
0000032a: PUSH1 0x01
0000032c: PUSH1 0xa0
0000032e: SHL
0000032f: SUB
00000330: AND
00000331: EQ
00000332: DUP1
00000333: PUSH2 0x033a
00000336: JUMPI
00000337: POP
00000338: CALLER
00000339: ISZERO
0000033a: JUMPDEST
0000033b: ISZERO
0000033c: PUSH2 0x01c0
0000033f: JUMPI
00000340: PUSH2 0x01bd
00000343: DUP2
00000344: PUSH2 0x03f2
00000347: JUMP
00000348: JUMPDEST
00000349: PUSH1 0x00
0000034b: PUSH2 0x0360
0000034e: PUSH1 0x00
00000350: DUP1
00000351: MLOAD
00000352: PUSH1 0x20
00000354: PUSH2 0x06f3
00000357: DUP4
00000358: CODECOPY
00000359: DUP2
0000035a: MLOAD
0000035b: SWAP2
0000035c: MSTORE
0000035d: SLOAD
0000035e: SWAP1
0000035f: JUMP
00000360: JUMPDEST
00000361: PUSH1 0x01
00000363: PUSH1 0x01
00000365: PUSH1 0xa0
00000367: SHL
00000368: SUB
00000369: AND
0000036a: CALLER
0000036b: PUSH1 0x01
0000036d: PUSH1 0x01
0000036f: PUSH1 0xa0
00000371: SHL
00000372: SUB
00000373: AND
00000374: EQ
00000375: DUP1
00000376: PUSH2 0x037d
00000379: JUMPI
0000037a: POP
0000037b: CALLER
0000037c: ISZERO
0000037d: JUMPDEST
0000037e: ISZERO
0000037f: PUSH2 0x0302
00000382: JUMPI
00000383: POP
00000384: PUSH1 0x00
00000386: DUP1
00000387: MLOAD
00000388: PUSH1 0x20
0000038a: PUSH2 0x06f3
0000038d: DUP4
0000038e: CODECOPY
0000038f: DUP2
00000390: MLOAD
00000391: SWAP2
00000392: MSTORE
00000393: SLOAD
00000394: SWAP1
00000395: JUMP
00000396: JUMPDEST
00000397: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000003b8: DUP2
000003b9: DUP2
000003ba: SSTORE
000003bb: PUSH1 0x40
000003bd: MLOAD
000003be: PUSH1 0x01
000003c0: PUSH1 0x01
000003c2: PUSH1 0xa0
000003c4: SHL
000003c5: SUB
000003c6: DUP4
000003c7: AND
000003c8: SWAP1
000003c9: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
000003ea: SWAP1
000003eb: PUSH1 0x00
000003ed: SWAP1
000003ee: LOG2
000003ef: POP
000003f0: POP
000003f1: JUMP
000003f2: JUMPDEST
000003f3: PUSH1 0x00
000003f5: PUSH2 0x040a
000003f8: PUSH1 0x00
000003fa: DUP1
000003fb: MLOAD
000003fc: PUSH1 0x20
000003fe: PUSH2 0x06f3
00000401: DUP4
00000402: CODECOPY
00000403: DUP2
00000404: MLOAD
00000405: SWAP2
00000406: MSTORE
00000407: SLOAD
00000408: SWAP1
00000409: JUMP
0000040a: JUMPDEST
0000040b: PUSH1 0x00
0000040d: DUP1
0000040e: MLOAD
0000040f: PUSH1 0x20
00000411: PUSH2 0x06f3
00000414: DUP4
00000415: CODECOPY
00000416: DUP2
00000417: MLOAD
00000418: SWAP2
00000419: MSTORE
0000041a: DUP4
0000041b: DUP2
0000041c: SSTORE
0000041d: PUSH1 0x40
0000041f: MLOAD
00000420: SWAP2
00000421: SWAP3
00000422: POP
00000423: SWAP1
00000424: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
00000445: SWAP1
00000446: PUSH2 0x0452
00000449: SWAP1
0000044a: DUP5
0000044b: SWAP1
0000044c: DUP7
0000044d: SWAP1
0000044e: PUSH2 0x06d7
00000451: JUMP
00000452: JUMPDEST
00000453: PUSH1 0x40
00000455: MLOAD
00000456: DUP1
00000457: SWAP2
00000458: SUB
00000459: SWAP1
0000045a: LOG1
0000045b: POP
0000045c: POP
0000045d: POP
0000045e: JUMP
0000045f: JUMPDEST
00000460: PUSH1 0x00
00000462: PUSH1 0x01
00000464: PUSH1 0x01
00000466: PUSH1 0xa0
00000468: SHL
00000469: SUB
0000046a: DUP3
0000046b: AND
0000046c: JUMPDEST
0000046d: SWAP3
0000046e: SWAP2
0000046f: POP
00000470: POP
00000471: JUMP
00000472: JUMPDEST
00000473: PUSH2 0x047b
00000476: DUP2
00000477: PUSH2 0x045f
0000047a: JUMP
0000047b: JUMPDEST
0000047c: DUP2
0000047d: EQ
0000047e: PUSH2 0x01bd
00000481: JUMPI
00000482: PUSH1 0x00
00000484: DUP1
00000485: REVERT
00000486: JUMPDEST
00000487: DUP1
00000488: CALLDATALOAD
00000489: PUSH2 0x046c
0000048c: DUP2
0000048d: PUSH2 0x0472
00000490: JUMP
00000491: JUMPDEST
00000492: PUSH1 0x00
00000494: PUSH1 0x20
00000496: DUP3
00000497: DUP5
00000498: SUB
00000499: SLT
0000049a: ISZERO
0000049b: PUSH2 0x04a6
0000049e: JUMPI
0000049f: PUSH2 0x04a6
000004a2: PUSH1 0x00
000004a4: DUP1
000004a5: REVERT
000004a6: JUMPDEST
000004a7: PUSH1 0x00
000004a9: PUSH2 0x04b2
000004ac: DUP5
000004ad: DUP5
000004ae: PUSH2 0x0486
000004b1: JUMP
000004b2: JUMPDEST
000004b3: SWAP5
000004b4: SWAP4
000004b5: POP
000004b6: POP
000004b7: POP
000004b8: POP
000004b9: JUMP
000004ba: JUMPDEST
000004bb: PUSH1 0x00
000004bd: DUP1
000004be: DUP4
000004bf: PUSH1 0x1f
000004c1: DUP5
000004c2: ADD
000004c3: SLT
000004c4: PUSH2 0x04cf
000004c7: JUMPI
000004c8: PUSH2 0x04cf
000004cb: PUSH1 0x00
000004cd: DUP1
000004ce: REVERT
000004cf: JUMPDEST
000004d0: POP
000004d1: DUP2
000004d2: CALLDATALOAD
000004d3: PUSH8 0xffffffffffffffff
000004dc: DUP2
000004dd: GT
000004de: ISZERO
000004df: PUSH2 0x04ea
000004e2: JUMPI
000004e3: PUSH2 0x04ea
000004e6: PUSH1 0x00
000004e8: DUP1
000004e9: REVERT
000004ea: JUMPDEST
000004eb: PUSH1 0x20
000004ed: DUP4
000004ee: ADD
000004ef: SWAP2
000004f0: POP
000004f1: DUP4
000004f2: PUSH1 0x01
000004f4: DUP3
000004f5: MUL
000004f6: DUP4
000004f7: ADD
000004f8: GT
000004f9: ISZERO
000004fa: PUSH2 0x0505
000004fd: JUMPI
000004fe: PUSH2 0x0505
00000501: PUSH1 0x00
00000503: DUP1
00000504: REVERT
00000505: JUMPDEST
00000506: SWAP3
00000507: POP
00000508: SWAP3
00000509: SWAP1
0000050a: POP
0000050b: JUMP
0000050c: JUMPDEST
0000050d: PUSH1 0x00
0000050f: DUP1
00000510: PUSH1 0x00
00000512: PUSH1 0x40
00000514: DUP5
00000515: DUP7
00000516: SUB
00000517: SLT
00000518: ISZERO
00000519: PUSH2 0x0524
0000051c: JUMPI
0000051d: PUSH2 0x0524
00000520: PUSH1 0x00
00000522: DUP1
00000523: REVERT
00000524: JUMPDEST
00000525: PUSH1 0x00
00000527: PUSH2 0x0530
0000052a: DUP7
0000052b: DUP7
0000052c: PUSH2 0x0486
0000052f: JUMP
00000530: JUMPDEST
00000531: SWAP4
00000532: POP
00000533: POP
00000534: PUSH1 0x20
00000536: DUP5
00000537: ADD
00000538: CALLDATALOAD
00000539: PUSH8 0xffffffffffffffff
00000542: DUP2
00000543: GT
00000544: ISZERO
00000545: PUSH2 0x0550
00000548: JUMPI
00000549: PUSH2 0x0550
0000054c: PUSH1 0x00
0000054e: DUP1
0000054f: REVERT
00000550: JUMPDEST
00000551: PUSH2 0x055c
00000554: DUP7
00000555: DUP3
00000556: DUP8
00000557: ADD
00000558: PUSH2 0x04ba
0000055b: JUMP
0000055c: JUMPDEST
0000055d: SWAP3
0000055e: POP
0000055f: SWAP3
00000560: POP
00000561: POP
00000562: SWAP3
00000563: POP
00000564: SWAP3
00000565: POP
00000566: SWAP3
00000567: JUMP
00000568: JUMPDEST
00000569: PUSH1 0x00
0000056b: JUMPDEST
0000056c: DUP4
0000056d: DUP2
0000056e: LT
0000056f: ISZERO
00000570: PUSH2 0x0583
00000573: JUMPI
00000574: DUP2
00000575: DUP2
00000576: ADD
00000577: MLOAD
00000578: DUP4
00000579: DUP3
0000057a: ADD
0000057b: MSTORE
0000057c: PUSH1 0x20
0000057e: ADD
0000057f: PUSH2 0x056b
00000582: JUMP
00000583: JUMPDEST
00000584: POP
00000585: POP
00000586: PUSH1 0x00
00000588: SWAP2
00000589: ADD
0000058a: MSTORE
0000058b: JUMP
0000058c: JUMPDEST
0000058d: PUSH1 0x00
0000058f: PUSH2 0x0596
00000592: DUP3
00000593: MLOAD
00000594: SWAP1
00000595: JUMP
00000596: JUMPDEST
00000597: DUP1
00000598: DUP5
00000599: MSTORE
0000059a: PUSH1 0x20
0000059c: DUP5
0000059d: ADD
0000059e: SWAP4
0000059f: POP
000005a0: PUSH2 0x05ad
000005a3: DUP2
000005a4: DUP6
000005a5: PUSH1 0x20
000005a7: DUP7
000005a8: ADD
000005a9: PUSH2 0x0568
000005ac: JUMP
000005ad: JUMPDEST
000005ae: PUSH1 0x1f
000005b0: ADD
000005b1: PUSH1 0x1f
000005b3: NOT
000005b4: AND
000005b5: SWAP3
000005b6: SWAP1
000005b7: SWAP3
000005b8: ADD
000005b9: SWAP3
000005ba: SWAP2
000005bb: POP
000005bc: POP
000005bd: JUMP
000005be: JUMPDEST
000005bf: PUSH1 0x20
000005c1: DUP1
000005c2: DUP3
000005c3: MSTORE
000005c4: DUP2
000005c5: ADD
000005c6: PUSH2 0x029b
000005c9: DUP2
000005ca: DUP5
000005cb: PUSH2 0x058c
000005ce: JUMP
000005cf: JUMPDEST
000005d0: PUSH2 0x05d8
000005d3: DUP2
000005d4: PUSH2 0x045f
000005d7: JUMP
000005d8: JUMPDEST
000005d9: DUP3
000005da: MSTORE
000005db: POP
000005dc: POP
000005dd: JUMP
000005de: JUMPDEST
000005df: PUSH1 0x20
000005e1: DUP2
000005e2: ADD
000005e3: PUSH2 0x046c
000005e6: DUP3
000005e7: DUP5
000005e8: PUSH2 0x05cf
000005eb: JUMP
000005ec: JUMPDEST
000005ed: PUSH1 0x25
000005ef: DUP2
000005f0: MSTORE
000005f1: PUSH1 0x00
000005f3: PUSH1 0x20
000005f5: DUP3
000005f6: ADD
000005f7: PUSH32 0x50726f78793a20696d706c656d656e746174696f6e206e6f7420696e69746961
00000618: DUP2
00000619: MSTORE
0000061a: PUSH5 0x1b1a5e9959
00000620: PUSH1 0xda
00000622: SHL
00000623: PUSH1 0x20
00000625: DUP3
00000626: ADD
00000627: MSTORE
00000628: SWAP2
00000629: POP
0000062a: JUMPDEST
0000062b: POP
0000062c: PUSH1 0x40
0000062e: ADD
0000062f: SWAP1
00000630: JUMP
00000631: JUMPDEST
00000632: PUSH1 0x20
00000634: DUP1
00000635: DUP3
00000636: MSTORE
00000637: DUP2
00000638: ADD
00000639: PUSH2 0x046c
0000063c: DUP2
0000063d: PUSH2 0x05ec
00000640: JUMP
00000641: JUMPDEST
00000642: DUP3
00000643: DUP2
00000644: DUP4
00000645: CALLDATACOPY
00000646: POP
00000647: PUSH1 0x00
00000649: SWAP2
0000064a: ADD
0000064b: MSTORE
0000064c: JUMP
0000064d: JUMPDEST
0000064e: PUSH1 0x00
00000650: PUSH2 0x065a
00000653: DUP4
00000654: DUP6
00000655: DUP5
00000656: PUSH2 0x0641
00000659: JUMP
0000065a: JUMPDEST
0000065b: POP
0000065c: POP
0000065d: ADD
0000065e: SWAP1
0000065f: JUMP
00000660: JUMPDEST
00000661: PUSH1 0x00
00000663: PUSH2 0x04b2
00000666: DUP3
00000667: DUP5
00000668: DUP7
00000669: PUSH2 0x064d
0000066c: JUMP
0000066d: JUMPDEST
0000066e: PUSH1 0x39
00000670: DUP2
00000671: MSTORE
00000672: PUSH1 0x00
00000674: PUSH1 0x20
00000676: DUP3
00000677: ADD
00000678: PUSH32 0x50726f78793a2064656c656761746563616c6c20746f206e657720696d706c65
00000699: DUP2
0000069a: MSTORE
0000069b: PUSH32 0x6d656e746174696f6e20636f6e7472616374206661696c656400000000000000
000006bc: PUSH1 0x20
000006be: DUP3
000006bf: ADD
000006c0: MSTORE
000006c1: SWAP2
000006c2: POP
000006c3: PUSH2 0x062a
000006c6: JUMP
000006c7: JUMPDEST
000006c8: PUSH1 0x20
000006ca: DUP1
000006cb: DUP3
000006cc: MSTORE
000006cd: DUP2
000006ce: ADD
000006cf: PUSH2 0x046c
000006d2: DUP2
000006d3: PUSH2 0x066d
000006d6: JUMP
000006d7: JUMPDEST
000006d8: PUSH1 0x40
000006da: DUP2
000006db: ADD
000006dc: PUSH2 0x06e5
000006df: DUP3
000006e0: DUP6
000006e1: PUSH2 0x05cf
000006e4: JUMP
000006e5: JUMPDEST
000006e6: PUSH2 0x029b
000006e9: PUSH1 0x20
000006eb: DUP4
000006ec: ADD
000006ed: DUP5
000006ee: PUSH2 0x05cf
000006f1: JUMP
000006f2: INVALID
000006f3: UNKNOWN(0xB5)
000006f4: BALANCE
000006f5: UNKNOWN(0x27)
000006f6: PUSH9 0x4a568b3173ae13b9f8
00000700: UNKNOWN(0xA6)
00000701: ADD
00000702: PUSH15 0x243e63b6e8ee1178d6a717850b5d61
00000712: SUB
00000713: LOG1
00000714: PUSH5 0x736f6c6343
0000071a: STOP
0000071b: ADDMOD
0000071c: EQ
0000071d: STOP
0000071e: EXP
View stderr
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0xff0dadfc00bccecd715dc91876593685b36298932ce1a7c8f7dce24bc928c774
call_targets: 0xf7209f5471628ac5f68fe4ae98feb7f02e0f40be
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 2,
    "trace_id": "0xff0dadfc00bccecd715dc91876593685b36298932ce1a7c8f7dce24bc928c774",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xf7209f5471628ac5f68fe4ae98feb7f02e0f40be"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 366,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 564,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}