Analysis Run

019b3844-b1bd-730d-b988-3a0d73d47d02

complete

Chain ID

1

Address

0xdc71366effa760804dcfc3edf87fa2a6f1623304

Block Number

—

Created

Fri, Dec 19, 2025 8:19 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
18403	artifact.fetch	complete	1 / 3	3 months ago
18404	tool.cast_disasm	complete	1 / 3	3 months ago
61634	analysis.bundle	complete	1 / 3	1 week ago
61635	capability.graph	complete	1 / 3	1 week ago
61636	detector.run	complete	1 / 3	1 week ago
61637	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

2

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

0

EXT*/BALANCE

2

Total opcodes

1116

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: PUSH2 0x0013
00000009: JUMPI
0000000a: PUSH2 0x0011
0000000d: PUSH2 0x0017
00000010: JUMP
00000011: JUMPDEST
00000012: STOP
00000013: JUMPDEST
00000014: PUSH2 0x0011
00000017: JUMPDEST
00000018: PUSH2 0x001f
0000001b: PUSH2 0x02a0
0000001e: JUMP
0000001f: JUMPDEST
00000020: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000035: AND
00000036: CALLER
00000037: SUB
00000038: PUSH2 0x0296
0000003b: JUMPI
0000003c: PUSH1 0x60
0000003e: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
0000005f: PUSH0
00000060: CALLDATALOAD
00000061: AND
00000062: PUSH32 0xc9a6301a00000000000000000000000000000000000000000000000000000000
00000083: DUP2
00000084: ADD
00000085: PUSH2 0x0097
00000088: JUMPI
00000089: PUSH2 0x0090
0000008c: PUSH2 0x02df
0000008f: JUMP
00000090: JUMPDEST
00000091: SWAP2
00000092: POP
00000093: PUSH2 0x028e
00000096: JUMP
00000097: JUMPDEST
00000098: PUSH32 0xb0e10d7a00000000000000000000000000000000000000000000000000000000
000000b9: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
000000da: DUP3
000000db: AND
000000dc: ADD
000000dd: PUSH2 0x00e8
000000e0: JUMPI
000000e1: PUSH2 0x0090
000000e4: PUSH2 0x0332
000000e7: JUMP
000000e8: JUMPDEST
000000e9: PUSH32 0x70d7c69000000000000000000000000000000000000000000000000000000000
0000010a: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
0000012b: DUP3
0000012c: AND
0000012d: ADD
0000012e: PUSH2 0x0139
00000131: JUMPI
00000132: PUSH2 0x0090
00000135: PUSH2 0x0376
00000138: JUMP
00000139: JUMPDEST
0000013a: PUSH32 0x07ae5bc000000000000000000000000000000000000000000000000000000000
0000015b: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
0000017c: DUP3
0000017d: AND
0000017e: ADD
0000017f: PUSH2 0x018a
00000182: JUMPI
00000183: PUSH2 0x0090
00000186: PUSH2 0x03a6
00000189: JUMP
0000018a: JUMPDEST
0000018b: PUSH32 0xa39f25e500000000000000000000000000000000000000000000000000000000
000001ac: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
000001cd: DUP3
000001ce: AND
000001cf: ADD
000001d0: PUSH2 0x01db
000001d3: JUMPI
000001d4: PUSH2 0x0090
000001d7: PUSH2 0x03f2
000001da: JUMP
000001db: JUMPDEST
000001dc: PUSH1 0x40
000001de: MLOAD
000001df: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000200: DUP2
00000201: MSTORE
00000202: PUSH1 0x20
00000204: PUSH1 0x04
00000206: DUP3
00000207: ADD
00000208: MSTORE
00000209: PUSH1 0x42
0000020b: PUSH1 0x24
0000020d: DUP3
0000020e: ADD
0000020f: MSTORE
00000210: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
00000231: PUSH1 0x44
00000233: DUP3
00000234: ADD
00000235: MSTORE
00000236: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
00000257: PUSH1 0x64
00000259: DUP3
0000025a: ADD
0000025b: MSTORE
0000025c: PUSH32 0x6574000000000000000000000000000000000000000000000000000000000000
0000027d: PUSH1 0x84
0000027f: DUP3
00000280: ADD
00000281: MSTORE
00000282: PUSH1 0xa4
00000284: ADD
00000285: JUMPDEST
00000286: PUSH1 0x40
00000288: MLOAD
00000289: DUP1
0000028a: SWAP2
0000028b: SUB
0000028c: SWAP1
0000028d: REVERT
0000028e: JUMPDEST
0000028f: DUP2
00000290: MLOAD
00000291: PUSH1 0x20
00000293: DUP4
00000294: ADD
00000295: RETURN
00000296: JUMPDEST
00000297: PUSH2 0x029e
0000029a: PUSH2 0x0405
0000029d: JUMP
0000029e: JUMPDEST
0000029f: JUMP
000002a0: JUMPDEST
000002a1: PUSH0
000002a2: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000002c3: JUMPDEST
000002c4: SLOAD
000002c5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002da: AND
000002db: SWAP2
000002dc: SWAP1
000002dd: POP
000002de: JUMP
000002df: JUMPDEST
000002e0: PUSH1 0x60
000002e2: PUSH2 0x02e9
000002e5: PUSH2 0x0415
000002e8: JUMP
000002e9: JUMPDEST
000002ea: PUSH0
000002eb: PUSH2 0x02f7
000002ee: CALLDATASIZE
000002ef: PUSH1 0x04
000002f1: DUP2
000002f2: DUP5
000002f3: PUSH2 0x08bc
000002f6: JUMP
000002f7: JUMPDEST
000002f8: DUP2
000002f9: ADD
000002fa: SWAP1
000002fb: PUSH2 0x0304
000002fe: SWAP2
000002ff: SWAP1
00000300: PUSH2 0x090b
00000303: JUMP
00000304: JUMPDEST
00000305: SWAP1
00000306: POP
00000307: PUSH2 0x031f
0000030a: DUP2
0000030b: PUSH1 0x40
0000030d: MLOAD
0000030e: DUP1
0000030f: PUSH1 0x20
00000311: ADD
00000312: PUSH1 0x40
00000314: MSTORE
00000315: DUP1
00000316: PUSH0
00000317: DUP2
00000318: MSTORE
00000319: POP
0000031a: PUSH0
0000031b: PUSH2 0x041f
0000031e: JUMP
0000031f: JUMPDEST
00000320: POP
00000321: POP
00000322: PUSH1 0x40
00000324: DUP1
00000325: MLOAD
00000326: PUSH1 0x20
00000328: DUP2
00000329: ADD
0000032a: SWAP1
0000032b: SWAP2
0000032c: MSTORE
0000032d: PUSH0
0000032e: DUP2
0000032f: MSTORE
00000330: SWAP1
00000331: JUMP
00000332: JUMPDEST
00000333: PUSH1 0x60
00000335: PUSH0
00000336: DUP1
00000337: PUSH2 0x0343
0000033a: CALLDATASIZE
0000033b: PUSH1 0x04
0000033d: DUP2
0000033e: DUP5
0000033f: PUSH2 0x08bc
00000342: JUMP
00000343: JUMPDEST
00000344: DUP2
00000345: ADD
00000346: SWAP1
00000347: PUSH2 0x0350
0000034a: SWAP2
0000034b: SWAP1
0000034c: PUSH2 0x0951
0000034f: JUMP
00000350: JUMPDEST
00000351: SWAP2
00000352: POP
00000353: SWAP2
00000354: POP
00000355: PUSH2 0x0360
00000358: DUP3
00000359: DUP3
0000035a: PUSH1 0x01
0000035c: PUSH2 0x041f
0000035f: JUMP
00000360: JUMPDEST
00000361: PUSH1 0x40
00000363: MLOAD
00000364: DUP1
00000365: PUSH1 0x20
00000367: ADD
00000368: PUSH1 0x40
0000036a: MSTORE
0000036b: DUP1
0000036c: PUSH0
0000036d: DUP2
0000036e: MSTORE
0000036f: POP
00000370: SWAP3
00000371: POP
00000372: POP
00000373: POP
00000374: SWAP1
00000375: JUMP
00000376: JUMPDEST
00000377: PUSH1 0x60
00000379: PUSH2 0x0380
0000037c: PUSH2 0x0415
0000037f: JUMP
00000380: JUMPDEST
00000381: PUSH0
00000382: PUSH2 0x038e
00000385: CALLDATASIZE
00000386: PUSH1 0x04
00000388: DUP2
00000389: DUP5
0000038a: PUSH2 0x08bc
0000038d: JUMP
0000038e: JUMPDEST
0000038f: DUP2
00000390: ADD
00000391: SWAP1
00000392: PUSH2 0x039b
00000395: SWAP2
00000396: SWAP1
00000397: PUSH2 0x090b
0000039a: JUMP
0000039b: JUMPDEST
0000039c: SWAP1
0000039d: POP
0000039e: PUSH2 0x031f
000003a1: DUP2
000003a2: PUSH2 0x044a
000003a5: JUMP
000003a6: JUMPDEST
000003a7: PUSH1 0x60
000003a9: PUSH2 0x03b0
000003ac: PUSH2 0x0415
000003af: JUMP
000003b0: JUMPDEST
000003b1: PUSH0
000003b2: PUSH2 0x03b9
000003b5: PUSH2 0x02a0
000003b8: JUMP
000003b9: JUMPDEST
000003ba: PUSH1 0x40
000003bc: DUP1
000003bd: MLOAD
000003be: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003d3: DUP4
000003d4: AND
000003d5: PUSH1 0x20
000003d7: DUP3
000003d8: ADD
000003d9: MSTORE
000003da: SWAP2
000003db: SWAP3
000003dc: POP
000003dd: ADD
000003de: PUSH1 0x40
000003e0: MLOAD
000003e1: PUSH1 0x20
000003e3: DUP2
000003e4: DUP4
000003e5: SUB
000003e6: SUB
000003e7: DUP2
000003e8: MSTORE
000003e9: SWAP1
000003ea: PUSH1 0x40
000003ec: MSTORE
000003ed: SWAP2
000003ee: POP
000003ef: POP
000003f0: SWAP1
000003f1: JUMP
000003f2: JUMPDEST
000003f3: PUSH1 0x60
000003f5: PUSH2 0x03fc
000003f8: PUSH2 0x0415
000003fb: JUMP
000003fc: JUMPDEST
000003fd: PUSH0
000003fe: PUSH2 0x03b9
00000401: PUSH2 0x04ae
00000404: JUMP
00000405: JUMPDEST
00000406: PUSH2 0x029e
00000409: PUSH2 0x0410
0000040c: PUSH2 0x04ae
0000040f: JUMP
00000410: JUMPDEST
00000411: PUSH2 0x04bc
00000414: JUMP
00000415: JUMPDEST
00000416: CALLVALUE
00000417: ISZERO
00000418: PUSH2 0x029e
0000041b: JUMPI
0000041c: PUSH0
0000041d: DUP1
0000041e: REVERT
0000041f: JUMPDEST
00000420: PUSH2 0x0428
00000423: DUP4
00000424: PUSH2 0x04da
00000427: JUMP
00000428: JUMPDEST
00000429: PUSH0
0000042a: DUP3
0000042b: MLOAD
0000042c: GT
0000042d: DUP1
0000042e: PUSH2 0x0434
00000431: JUMPI
00000432: POP
00000433: DUP1
00000434: JUMPDEST
00000435: ISZERO
00000436: PUSH2 0x0445
00000439: JUMPI
0000043a: PUSH2 0x0443
0000043d: DUP4
0000043e: DUP4
0000043f: PUSH2 0x0526
00000442: JUMP
00000443: JUMPDEST
00000444: POP
00000445: JUMPDEST
00000446: POP
00000447: POP
00000448: POP
00000449: JUMP
0000044a: JUMPDEST
0000044b: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
0000046c: PUSH2 0x0473
0000046f: PUSH2 0x02a0
00000472: JUMP
00000473: JUMPDEST
00000474: PUSH1 0x40
00000476: DUP1
00000477: MLOAD
00000478: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000048d: SWAP3
0000048e: DUP4
0000048f: AND
00000490: DUP2
00000491: MSTORE
00000492: SWAP2
00000493: DUP5
00000494: AND
00000495: PUSH1 0x20
00000497: DUP4
00000498: ADD
00000499: MSTORE
0000049a: ADD
0000049b: PUSH1 0x40
0000049d: MLOAD
0000049e: DUP1
0000049f: SWAP2
000004a0: SUB
000004a1: SWAP1
000004a2: LOG1
000004a3: PUSH2 0x04ab
000004a6: DUP2
000004a7: PUSH2 0x0552
000004aa: JUMP
000004ab: JUMPDEST
000004ac: POP
000004ad: JUMP
000004ae: JUMPDEST
000004af: PUSH0
000004b0: PUSH2 0x04b7
000004b3: PUSH2 0x065e
000004b6: JUMP
000004b7: JUMPDEST
000004b8: SWAP1
000004b9: POP
000004ba: SWAP1
000004bb: JUMP
000004bc: JUMPDEST
000004bd: CALLDATASIZE
000004be: PUSH0
000004bf: DUP1
000004c0: CALLDATACOPY
000004c1: PUSH0
000004c2: DUP1
000004c3: CALLDATASIZE
000004c4: PUSH0
000004c5: DUP5
000004c6: GAS
000004c7: DELEGATECALL
000004c8: RETURNDATASIZE
000004c9: PUSH0
000004ca: DUP1
000004cb: RETURNDATACOPY
000004cc: DUP1
000004cd: DUP1
000004ce: ISZERO
000004cf: PUSH2 0x04d6
000004d2: JUMPI
000004d3: RETURNDATASIZE
000004d4: PUSH0
000004d5: RETURN
000004d6: JUMPDEST
000004d7: RETURNDATASIZE
000004d8: PUSH0
000004d9: REVERT
000004da: JUMPDEST
000004db: PUSH2 0x04e3
000004de: DUP2
000004df: PUSH2 0x0685
000004e2: JUMP
000004e3: JUMPDEST
000004e4: PUSH1 0x40
000004e6: MLOAD
000004e7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004fc: DUP3
000004fd: AND
000004fe: SWAP1
000004ff: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
00000520: SWAP1
00000521: PUSH0
00000522: SWAP1
00000523: LOG2
00000524: POP
00000525: JUMP
00000526: JUMPDEST
00000527: PUSH1 0x60
00000529: PUSH2 0x054b
0000052c: DUP4
0000052d: DUP4
0000052e: PUSH1 0x40
00000530: MLOAD
00000531: DUP1
00000532: PUSH1 0x60
00000534: ADD
00000535: PUSH1 0x40
00000537: MSTORE
00000538: DUP1
00000539: PUSH1 0x27
0000053b: DUP2
0000053c: MSTORE
0000053d: PUSH1 0x20
0000053f: ADD
00000540: PUSH2 0x0ab9
00000543: PUSH1 0x27
00000545: SWAP2
00000546: CODECOPY
00000547: PUSH2 0x0750
0000054a: JUMP
0000054b: JUMPDEST
0000054c: SWAP4
0000054d: SWAP3
0000054e: POP
0000054f: POP
00000550: POP
00000551: JUMP
00000552: JUMPDEST
00000553: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000568: DUP2
00000569: AND
0000056a: PUSH2 0x05f5
0000056d: JUMPI
0000056e: PUSH1 0x40
00000570: MLOAD
00000571: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000592: DUP2
00000593: MSTORE
00000594: PUSH1 0x20
00000596: PUSH1 0x04
00000598: DUP3
00000599: ADD
0000059a: MSTORE
0000059b: PUSH1 0x26
0000059d: PUSH1 0x24
0000059f: DUP3
000005a0: ADD
000005a1: MSTORE
000005a2: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
000005c3: PUSH1 0x44
000005c5: DUP3
000005c6: ADD
000005c7: MSTORE
000005c8: PUSH32 0x6464726573730000000000000000000000000000000000000000000000000000
000005e9: PUSH1 0x64
000005eb: DUP3
000005ec: ADD
000005ed: MSTORE
000005ee: PUSH1 0x84
000005f0: ADD
000005f1: PUSH2 0x0285
000005f4: JUMP
000005f5: JUMPDEST
000005f6: DUP1
000005f7: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000618: JUMPDEST
00000619: DUP1
0000061a: SLOAD
0000061b: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000
0000063c: AND
0000063d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000652: SWAP3
00000653: SWAP1
00000654: SWAP3
00000655: AND
00000656: SWAP2
00000657: SWAP1
00000658: SWAP2
00000659: OR
0000065a: SWAP1
0000065b: SSTORE
0000065c: POP
0000065d: JUMP
0000065e: JUMPDEST
0000065f: PUSH0
00000660: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000681: PUSH2 0x02c3
00000684: JUMP
00000685: JUMPDEST
00000686: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000069b: DUP2
0000069c: AND
0000069d: EXTCODESIZE
0000069e: PUSH2 0x0729
000006a1: JUMPI
000006a2: PUSH1 0x40
000006a4: MLOAD
000006a5: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000006c6: DUP2
000006c7: MSTORE
000006c8: PUSH1 0x20
000006ca: PUSH1 0x04
000006cc: DUP3
000006cd: ADD
000006ce: MSTORE
000006cf: PUSH1 0x2d
000006d1: PUSH1 0x24
000006d3: DUP3
000006d4: ADD
000006d5: MSTORE
000006d6: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
000006f7: PUSH1 0x44
000006f9: DUP3
000006fa: ADD
000006fb: MSTORE
000006fc: PUSH32 0x6f74206120636f6e747261637400000000000000000000000000000000000000
0000071d: PUSH1 0x64
0000071f: DUP3
00000720: ADD
00000721: MSTORE
00000722: PUSH1 0x84
00000724: ADD
00000725: PUSH2 0x0285
00000728: JUMP
00000729: JUMPDEST
0000072a: DUP1
0000072b: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000074c: PUSH2 0x0618
0000074f: JUMP
00000750: JUMPDEST
00000751: PUSH1 0x60
00000753: PUSH0
00000754: DUP1
00000755: DUP6
00000756: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000076b: AND
0000076c: DUP6
0000076d: PUSH1 0x40
0000076f: MLOAD
00000770: PUSH2 0x0779
00000773: SWAP2
00000774: SWAP1
00000775: PUSH2 0x0a4d
00000778: JUMP
00000779: JUMPDEST
0000077a: PUSH0
0000077b: PUSH1 0x40
0000077d: MLOAD
0000077e: DUP1
0000077f: DUP4
00000780: SUB
00000781: DUP2
00000782: DUP6
00000783: GAS
00000784: DELEGATECALL
00000785: SWAP2
00000786: POP
00000787: POP
00000788: RETURNDATASIZE
00000789: DUP1
0000078a: PUSH0
0000078b: DUP2
0000078c: EQ
0000078d: PUSH2 0x07b1
00000790: JUMPI
00000791: PUSH1 0x40
00000793: MLOAD
00000794: SWAP2
00000795: POP
00000796: PUSH1 0x1f
00000798: NOT
00000799: PUSH1 0x3f
0000079b: RETURNDATASIZE
0000079c: ADD
0000079d: AND
0000079e: DUP3
0000079f: ADD
000007a0: PUSH1 0x40
000007a2: MSTORE
000007a3: RETURNDATASIZE
000007a4: DUP3
000007a5: MSTORE
000007a6: RETURNDATASIZE
000007a7: PUSH0
000007a8: PUSH1 0x20
000007aa: DUP5
000007ab: ADD
000007ac: RETURNDATACOPY
000007ad: PUSH2 0x07b6
000007b0: JUMP
000007b1: JUMPDEST
000007b2: PUSH1 0x60
000007b4: SWAP2
000007b5: POP
000007b6: JUMPDEST
000007b7: POP
000007b8: SWAP2
000007b9: POP
000007ba: SWAP2
000007bb: POP
000007bc: PUSH2 0x07c7
000007bf: DUP7
000007c0: DUP4
000007c1: DUP4
000007c2: DUP8
000007c3: PUSH2 0x07d1
000007c6: JUMP
000007c7: JUMPDEST
000007c8: SWAP7
000007c9: SWAP6
000007ca: POP
000007cb: POP
000007cc: POP
000007cd: POP
000007ce: POP
000007cf: POP
000007d0: JUMP
000007d1: JUMPDEST
000007d2: PUSH1 0x60
000007d4: DUP4
000007d5: ISZERO
000007d6: PUSH2 0x0866
000007d9: JUMPI
000007da: DUP3
000007db: MLOAD
000007dc: PUSH0
000007dd: SUB
000007de: PUSH2 0x085f
000007e1: JUMPI
000007e2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007f7: DUP6
000007f8: AND
000007f9: EXTCODESIZE
000007fa: PUSH2 0x085f
000007fd: JUMPI
000007fe: PUSH1 0x40
00000800: MLOAD
00000801: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000822: DUP2
00000823: MSTORE
00000824: PUSH1 0x20
00000826: PUSH1 0x04
00000828: DUP3
00000829: ADD
0000082a: MSTORE
0000082b: PUSH1 0x1d
0000082d: PUSH1 0x24
0000082f: DUP3
00000830: ADD
00000831: MSTORE
00000832: PUSH32 0x416464726573733a2063616c6c20746f206e6f6e2d636f6e7472616374000000
00000853: PUSH1 0x44
00000855: DUP3
00000856: ADD
00000857: MSTORE
00000858: PUSH1 0x64
0000085a: ADD
0000085b: PUSH2 0x0285
0000085e: JUMP
0000085f: JUMPDEST
00000860: POP
00000861: DUP2
00000862: PUSH2 0x0870
00000865: JUMP
00000866: JUMPDEST
00000867: PUSH2 0x0870
0000086a: DUP4
0000086b: DUP4
0000086c: PUSH2 0x0878
0000086f: JUMP
00000870: JUMPDEST
00000871: SWAP5
00000872: SWAP4
00000873: POP
00000874: POP
00000875: POP
00000876: POP
00000877: JUMP
00000878: JUMPDEST
00000879: DUP2
0000087a: MLOAD
0000087b: ISZERO
0000087c: PUSH2 0x0888
0000087f: JUMPI
00000880: DUP2
00000881: MLOAD
00000882: DUP1
00000883: DUP4
00000884: PUSH1 0x20
00000886: ADD
00000887: REVERT
00000888: JUMPDEST
00000889: DUP1
0000088a: PUSH1 0x40
0000088c: MLOAD
0000088d: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000008ae: DUP2
000008af: MSTORE
000008b0: PUSH1 0x04
000008b2: ADD
000008b3: PUSH2 0x0285
000008b6: SWAP2
000008b7: SWAP1
000008b8: PUSH2 0x0a68
000008bb: JUMP
000008bc: JUMPDEST
000008bd: PUSH0
000008be: DUP1
000008bf: DUP6
000008c0: DUP6
000008c1: GT
000008c2: ISZERO
000008c3: PUSH2 0x08ca
000008c6: JUMPI
000008c7: PUSH0
000008c8: DUP1
000008c9: REVERT
000008ca: JUMPDEST
000008cb: DUP4
000008cc: DUP7
000008cd: GT
000008ce: ISZERO
000008cf: PUSH2 0x08d6
000008d2: JUMPI
000008d3: PUSH0
000008d4: DUP1
000008d5: REVERT
000008d6: JUMPDEST
000008d7: POP
000008d8: POP
000008d9: DUP3
000008da: ADD
000008db: SWAP4
000008dc: SWAP2
000008dd: SWAP1
000008de: SWAP3
000008df: SUB
000008e0: SWAP2
000008e1: POP
000008e2: JUMP
000008e3: JUMPDEST
000008e4: DUP1
000008e5: CALLDATALOAD
000008e6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008fb: DUP2
000008fc: AND
000008fd: DUP2
000008fe: EQ
000008ff: PUSH2 0x0906
00000902: JUMPI
00000903: PUSH0
00000904: DUP1
00000905: REVERT
00000906: JUMPDEST
00000907: SWAP2
00000908: SWAP1
00000909: POP
0000090a: JUMP
0000090b: JUMPDEST
0000090c: PUSH0
0000090d: PUSH1 0x20
0000090f: DUP3
00000910: DUP5
00000911: SUB
00000912: SLT
00000913: ISZERO
00000914: PUSH2 0x091b
00000917: JUMPI
00000918: PUSH0
00000919: DUP1
0000091a: REVERT
0000091b: JUMPDEST
0000091c: PUSH2 0x054b
0000091f: DUP3
00000920: PUSH2 0x08e3
00000923: JUMP
00000924: JUMPDEST
00000925: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
00000946: PUSH0
00000947: MSTORE
00000948: PUSH1 0x41
0000094a: PUSH1 0x04
0000094c: MSTORE
0000094d: PUSH1 0x24
0000094f: PUSH0
00000950: REVERT
00000951: JUMPDEST
00000952: PUSH0
00000953: DUP1
00000954: PUSH1 0x40
00000956: DUP4
00000957: DUP6
00000958: SUB
00000959: SLT
0000095a: ISZERO
0000095b: PUSH2 0x0962
0000095e: JUMPI
0000095f: PUSH0
00000960: DUP1
00000961: REVERT
00000962: JUMPDEST
00000963: PUSH2 0x096b
00000966: DUP4
00000967: PUSH2 0x08e3
0000096a: JUMP
0000096b: JUMPDEST
0000096c: SWAP2
0000096d: POP
0000096e: PUSH1 0x20
00000970: DUP4
00000971: ADD
00000972: CALLDATALOAD
00000973: PUSH8 0xffffffffffffffff
0000097c: DUP1
0000097d: DUP3
0000097e: GT
0000097f: ISZERO
00000980: PUSH2 0x0987
00000983: JUMPI
00000984: PUSH0
00000985: DUP1
00000986: REVERT
00000987: JUMPDEST
00000988: DUP2
00000989: DUP6
0000098a: ADD
0000098b: SWAP2
0000098c: POP
0000098d: DUP6
0000098e: PUSH1 0x1f
00000990: DUP4
00000991: ADD
00000992: SLT
00000993: PUSH2 0x099a
00000996: JUMPI
00000997: PUSH0
00000998: DUP1
00000999: REVERT
0000099a: JUMPDEST
0000099b: DUP2
0000099c: CALLDATALOAD
0000099d: DUP2
0000099e: DUP2
0000099f: GT
000009a0: ISZERO
000009a1: PUSH2 0x09ac
000009a4: JUMPI
000009a5: PUSH2 0x09ac
000009a8: PUSH2 0x0924
000009ab: JUMP
000009ac: JUMPDEST
000009ad: PUSH1 0x40
000009af: MLOAD
000009b0: PUSH1 0x1f
000009b2: DUP3
000009b3: ADD
000009b4: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
000009d5: SWAP1
000009d6: DUP2
000009d7: AND
000009d8: PUSH1 0x3f
000009da: ADD
000009db: AND
000009dc: DUP2
000009dd: ADD
000009de: SWAP1
000009df: DUP4
000009e0: DUP3
000009e1: GT
000009e2: DUP2
000009e3: DUP4
000009e4: LT
000009e5: OR
000009e6: ISZERO
000009e7: PUSH2 0x09f2
000009ea: JUMPI
000009eb: PUSH2 0x09f2
000009ee: PUSH2 0x0924
000009f1: JUMP
000009f2: JUMPDEST
000009f3: DUP2
000009f4: PUSH1 0x40
000009f6: MSTORE
000009f7: DUP3
000009f8: DUP2
000009f9: MSTORE
000009fa: DUP9
000009fb: PUSH1 0x20
000009fd: DUP5
000009fe: DUP8
000009ff: ADD
00000a00: ADD
00000a01: GT
00000a02: ISZERO
00000a03: PUSH2 0x0a0a
00000a06: JUMPI
00000a07: PUSH0
00000a08: DUP1
00000a09: REVERT
00000a0a: JUMPDEST
00000a0b: DUP3
00000a0c: PUSH1 0x20
00000a0e: DUP7
00000a0f: ADD
00000a10: PUSH1 0x20
00000a12: DUP4
00000a13: ADD
00000a14: CALLDATACOPY
00000a15: PUSH0
00000a16: PUSH1 0x20
00000a18: DUP5
00000a19: DUP4
00000a1a: ADD
00000a1b: ADD
00000a1c: MSTORE
00000a1d: DUP1
00000a1e: SWAP6
00000a1f: POP
00000a20: POP
00000a21: POP
00000a22: POP
00000a23: POP
00000a24: POP
00000a25: SWAP3
00000a26: POP
00000a27: SWAP3
00000a28: SWAP1
00000a29: POP
00000a2a: JUMP
00000a2b: JUMPDEST
00000a2c: PUSH0
00000a2d: JUMPDEST
00000a2e: DUP4
00000a2f: DUP2
00000a30: LT
00000a31: ISZERO
00000a32: PUSH2 0x0a45
00000a35: JUMPI
00000a36: DUP2
00000a37: DUP2
00000a38: ADD
00000a39: MLOAD
00000a3a: DUP4
00000a3b: DUP3
00000a3c: ADD
00000a3d: MSTORE
00000a3e: PUSH1 0x20
00000a40: ADD
00000a41: PUSH2 0x0a2d
00000a44: JUMP
00000a45: JUMPDEST
00000a46: POP
00000a47: POP
00000a48: PUSH0
00000a49: SWAP2
00000a4a: ADD
00000a4b: MSTORE
00000a4c: JUMP
00000a4d: JUMPDEST
00000a4e: PUSH0
00000a4f: DUP3
00000a50: MLOAD
00000a51: PUSH2 0x0a5e
00000a54: DUP2
00000a55: DUP5
00000a56: PUSH1 0x20
00000a58: DUP8
00000a59: ADD
00000a5a: PUSH2 0x0a2b
00000a5d: JUMP
00000a5e: JUMPDEST
00000a5f: SWAP2
00000a60: SWAP1
00000a61: SWAP2
00000a62: ADD
00000a63: SWAP3
00000a64: SWAP2
00000a65: POP
00000a66: POP
00000a67: JUMP
00000a68: JUMPDEST
00000a69: PUSH1 0x20
00000a6b: DUP2
00000a6c: MSTORE
00000a6d: PUSH0
00000a6e: DUP3
00000a6f: MLOAD
00000a70: DUP1
00000a71: PUSH1 0x20
00000a73: DUP5
00000a74: ADD
00000a75: MSTORE
00000a76: PUSH2 0x0a86
00000a79: DUP2
00000a7a: PUSH1 0x40
00000a7c: DUP6
00000a7d: ADD
00000a7e: PUSH1 0x20
00000a80: DUP8
00000a81: ADD
00000a82: PUSH2 0x0a2b
00000a85: JUMP
00000a86: JUMPDEST
00000a87: PUSH1 0x1f
00000a89: ADD
00000a8a: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
00000aab: AND
00000aac: SWAP2
00000aad: SWAP1
00000aae: SWAP2
00000aaf: ADD
00000ab0: PUSH1 0x40
00000ab2: ADD
00000ab3: SWAP3
00000ab4: SWAP2
00000ab5: POP
00000ab6: POP
00000ab7: JUMP
00000ab8: INVALID
00000ab9: COINBASE
00000aba: PUSH5 0x6472657373
00000ac0: GASPRICE
00000ac1: KECCAK256
00000ac2: PUSH13 0x6f772d6c6576656c2064656c65
00000ad0: PUSH8 0x6174652063616c6c
00000ad9: KECCAK256
00000ada: PUSH7 0x61696c6564a164
00000ae2: PUSH20

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0x5ce1a8eed5152c3272d094b4190230e6cd9d97fe550121d9ec0a91ad5dd94970 call_targets: 0x0cc37d5239f9027a1269f53d83c73084d538f3a9 target_varies: no classification: constant_target validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x5ce1a8eed5152c3272d094b4190230e6cd9d97fe550121d9ec0a91ad5dd94970", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x0cc37d5239f9027a1269f53d83c73084d538f3a9" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x", "selector": "fallback", "calldata_variants": [ "0x" ] } ] } evidence_json { "examples": [ { "pc": 1223, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1924, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 2, "untrusted_delegatecall_count": 2 }

Severity