019b3844-b1cd-7353-bc37-ed40a47fea1f
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 18415 | artifact.fetch | complete | 1 / 3 | 4 months ago |
| 18416 | tool.cast_disasm | complete | 1 / 3 | 4 months ago |
| 87396 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 87397 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 87398 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 87399 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x0038 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH1 0xe0 00000012: SHR 00000013: DUP1 00000014: PUSH4 0x04d7aef2 00000019: EQ 0000001a: PUSH2 0x0051 0000001d: JUMPI 0000001e: DUP1 0000001f: PUSH4 0x433ee057 00000024: EQ 00000025: PUSH2 0x007c 00000028: JUMPI 00000029: DUP1 0000002a: PUSH4 0xba0f7a89 0000002f: EQ 00000030: PUSH2 0x00a5 00000033: JUMPI 00000034: PUSH2 0x0047 00000037: JUMP 00000038: JUMPDEST 00000039: CALLDATASIZE 0000003a: PUSH2 0x0047 0000003d: JUMPI 0000003e: PUSH2 0x0045 00000041: PUSH2 0x00d0 00000044: JUMP 00000045: JUMPDEST 00000046: STOP 00000047: JUMPDEST 00000048: PUSH2 0x004f 0000004b: PUSH2 0x00d0 0000004e: JUMP 0000004f: JUMPDEST 00000050: STOP 00000051: JUMPDEST 00000052: CALLVALUE 00000053: DUP1 00000054: ISZERO 00000055: PUSH2 0x005d 00000058: JUMPI 00000059: PUSH1 0x00 0000005b: DUP1 0000005c: REVERT 0000005d: JUMPDEST 0000005e: POP 0000005f: PUSH2 0x0066 00000062: PUSH2 0x00ea 00000065: JUMP 00000066: JUMPDEST 00000067: PUSH1 0x40 00000069: MLOAD 0000006a: PUSH2 0x0073 0000006d: SWAP2 0000006e: SWAP1 0000006f: PUSH2 0x03e7 00000072: JUMP 00000073: JUMPDEST 00000074: PUSH1 0x40 00000076: MLOAD 00000077: DUP1 00000078: SWAP2 00000079: SUB 0000007a: SWAP1 0000007b: RETURN 0000007c: JUMPDEST 0000007d: CALLVALUE 0000007e: DUP1 0000007f: ISZERO 00000080: PUSH2 0x0088 00000083: JUMPI 00000084: PUSH1 0x00 00000086: DUP1 00000087: REVERT 00000088: JUMPDEST 00000089: POP 0000008a: PUSH2 0x00a3 0000008d: PUSH1 0x04 0000008f: DUP1 00000090: CALLDATASIZE 00000091: SUB 00000092: DUP2 00000093: ADD 00000094: SWAP1 00000095: PUSH2 0x009e 00000098: SWAP2 00000099: SWAP1 0000009a: PUSH2 0x0433 0000009d: JUMP 0000009e: JUMPDEST 0000009f: PUSH2 0x00f9 000000a2: JUMP 000000a3: JUMPDEST 000000a4: STOP 000000a5: JUMPDEST 000000a6: CALLVALUE 000000a7: DUP1 000000a8: ISZERO 000000a9: PUSH2 0x00b1 000000ac: JUMPI 000000ad: PUSH1 0x00 000000af: DUP1 000000b0: REVERT 000000b1: JUMPDEST 000000b2: POP 000000b3: PUSH2 0x00ba 000000b6: PUSH2 0x0205 000000b9: JUMP 000000ba: JUMPDEST 000000bb: PUSH1 0x40 000000bd: MLOAD 000000be: PUSH2 0x00c7 000000c1: SWAP2 000000c2: SWAP1 000000c3: PUSH2 0x03e7 000000c6: JUMP 000000c7: JUMPDEST 000000c8: PUSH1 0x40 000000ca: MLOAD 000000cb: DUP1 000000cc: SWAP2 000000cd: SUB 000000ce: SWAP1 000000cf: RETURN 000000d0: JUMPDEST 000000d1: PUSH2 0x00d8 000000d4: PUSH2 0x0214 000000d7: JUMP 000000d8: JUMPDEST 000000d9: PUSH2 0x00e8 000000dc: PUSH2 0x00e3 000000df: PUSH2 0x0293 000000e2: JUMP 000000e3: JUMPDEST 000000e4: PUSH2 0x02c4 000000e7: JUMP 000000e8: JUMPDEST 000000e9: JUMP 000000ea: JUMPDEST 000000eb: PUSH1 0x00 000000ed: PUSH2 0x00f4 000000f0: PUSH2 0x02ea 000000f3: JUMP 000000f4: JUMPDEST 000000f5: SWAP1 000000f6: POP 000000f7: SWAP1 000000f8: JUMP 000000f9: JUMPDEST 000000fa: PUSH1 0x00 000000fc: PUSH2 0x0103 000000ff: PUSH2 0x02ea 00000102: JUMP 00000103: JUMPDEST 00000104: SWAP1 00000105: POP 00000106: DUP1 00000107: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000011c: AND 0000011d: CALLER 0000011e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000133: AND 00000134: EQ 00000135: DUP1 00000136: PUSH2 0x016a 00000139: JUMPI 0000013a: POP 0000013b: DUP1 0000013c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000151: AND 00000152: ORIGIN 00000153: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000168: AND 00000169: EQ 0000016a: JUMPDEST 0000016b: ISZERO 0000016c: PUSH2 0x01f8 0000016f: JUMPI 00000170: PUSH1 0x00 00000172: PUSH2 0x0179 00000175: PUSH2 0x0293 00000178: JUMP 00000179: JUMPDEST 0000017a: SWAP1 0000017b: POP 0000017c: DUP1 0000017d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000192: AND 00000193: DUP4 00000194: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001a9: AND 000001aa: SUB 000001ab: PUSH2 0x01e9 000001ae: JUMPI 000001af: PUSH1 0x40 000001b1: MLOAD 000001b2: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 000001d3: DUP2 000001d4: MSTORE 000001d5: PUSH1 0x04 000001d7: ADD 000001d8: PUSH2 0x01e0 000001db: SWAP1 000001dc: PUSH2 0x04bd 000001df: JUMP 000001e0: JUMPDEST 000001e1: PUSH1 0x40 000001e3: MLOAD 000001e4: DUP1 000001e5: SWAP2 000001e6: SUB 000001e7: SWAP1 000001e8: REVERT 000001e9: JUMPDEST 000001ea: PUSH2 0x01f2 000001ed: DUP4 000001ee: PUSH2 0x031b 000001f1: JUMP 000001f2: JUMPDEST 000001f3: POP 000001f4: PUSH2 0x0201 000001f7: JUMP 000001f8: JUMPDEST 000001f9: PUSH2 0x0200 000001fc: PUSH2 0x00d0 000001ff: JUMP 00000200: JUMPDEST 00000201: JUMPDEST 00000202: POP 00000203: POP 00000204: JUMP 00000205: JUMPDEST 00000206: PUSH1 0x00 00000208: PUSH2 0x020f 0000020b: PUSH2 0x0293 0000020e: JUMP 0000020f: JUMPDEST 00000210: SWAP1 00000211: POP 00000212: SWAP1 00000213: JUMP 00000214: JUMPDEST 00000215: PUSH2 0x021c 00000218: PUSH2 0x02ea 0000021b: JUMP 0000021c: JUMPDEST 0000021d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000232: AND 00000233: CALLER 00000234: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000249: AND 0000024a: SUB 0000024b: PUSH2 0x0289 0000024e: JUMPI 0000024f: PUSH1 0x40 00000251: MLOAD 00000252: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 00000273: DUP2 00000274: MSTORE 00000275: PUSH1 0x04 00000277: ADD 00000278: PUSH2 0x0280 0000027b: SWAP1 0000027c: PUSH2 0x054f 0000027f: JUMP 00000280: JUMPDEST 00000281: PUSH1 0x40 00000283: MLOAD 00000284: DUP1 00000285: SWAP2 00000286: SUB 00000287: SWAP1 00000288: REVERT 00000289: JUMPDEST 0000028a: PUSH2 0x0291 0000028d: PUSH2 0x03a4 00000290: JUMP 00000291: JUMPDEST 00000292: JUMP 00000293: JUMPDEST 00000294: PUSH1 0x00 00000296: DUP1 00000297: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000002b8: PUSH1 0x00 000002ba: SHL 000002bb: SWAP1 000002bc: POP 000002bd: DUP1 000002be: SLOAD 000002bf: SWAP2 000002c0: POP 000002c1: POP 000002c2: SWAP1 000002c3: JUMP 000002c4: JUMPDEST 000002c5: CALLDATASIZE 000002c6: PUSH1 0x00 000002c8: DUP1 000002c9: CALLDATACOPY 000002ca: PUSH1 0x00 000002cc: DUP1 000002cd: CALLDATASIZE 000002ce: PUSH1 0x00 000002d0: DUP5 000002d1: GAS 000002d2: DELEGATECALL 000002d3: RETURNDATASIZE 000002d4: PUSH1 0x00 000002d6: DUP1 000002d7: RETURNDATACOPY 000002d8: DUP1 000002d9: PUSH1 0x00 000002db: DUP2 000002dc: EQ 000002dd: PUSH2 0x02e5 000002e0: JUMPI 000002e1: RETURNDATASIZE 000002e2: PUSH1 0x00 000002e4: RETURN 000002e5: JUMPDEST 000002e6: RETURNDATASIZE 000002e7: PUSH1 0x00 000002e9: REVERT 000002ea: JUMPDEST 000002eb: PUSH1 0x00 000002ed: DUP1 000002ee: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 0000030f: PUSH1 0x00 00000311: SHL 00000312: SWAP1 00000313: POP 00000314: DUP1 00000315: SLOAD 00000316: SWAP2 00000317: POP 00000318: POP 00000319: SWAP1 0000031a: JUMP 0000031b: JUMPDEST 0000031c: PUSH1 0x00 0000031e: DUP2 0000031f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000334: AND 00000335: EXTCODESIZE 00000336: GT 00000337: PUSH2 0x0375 0000033a: JUMPI 0000033b: PUSH1 0x40 0000033d: MLOAD 0000033e: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 0000035f: DUP2 00000360: MSTORE 00000361: PUSH1 0x04 00000363: ADD 00000364: PUSH2 0x036c 00000367: SWAP1 00000368: PUSH2 0x05bb 0000036b: JUMP 0000036c: JUMPDEST 0000036d: PUSH1 0x40 0000036f: MLOAD 00000370: DUP1 00000371: SWAP2 00000372: SUB 00000373: SWAP1 00000374: REVERT 00000375: JUMPDEST 00000376: PUSH1 0x00 00000378: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000399: PUSH1 0x00 0000039b: SHL 0000039c: SWAP1 0000039d: POP 0000039e: DUP2 0000039f: DUP2 000003a0: SSTORE 000003a1: POP 000003a2: POP 000003a3: JUMP 000003a4: JUMPDEST 000003a5: JUMP 000003a6: JUMPDEST 000003a7: PUSH1 0x00 000003a9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003be: DUP3 000003bf: AND 000003c0: SWAP1 000003c1: POP 000003c2: SWAP2 000003c3: SWAP1 000003c4: POP 000003c5: JUMP 000003c6: JUMPDEST 000003c7: PUSH1 0x00 000003c9: PUSH2 0x03d1 000003cc: DUP3 000003cd: PUSH2 0x03a6 000003d0: JUMP 000003d1: JUMPDEST 000003d2: SWAP1 000003d3: POP 000003d4: SWAP2 000003d5: SWAP1 000003d6: POP 000003d7: JUMP 000003d8: JUMPDEST 000003d9: PUSH2 0x03e1 000003dc: DUP2 000003dd: PUSH2 0x03c6 000003e0: JUMP 000003e1: JUMPDEST 000003e2: DUP3 000003e3: MSTORE 000003e4: POP 000003e5: POP 000003e6: JUMP 000003e7: JUMPDEST 000003e8: PUSH1 0x00 000003ea: PUSH1 0x20 000003ec: DUP3 000003ed: ADD 000003ee: SWAP1 000003ef: POP 000003f0: PUSH2 0x03fc 000003f3: PUSH1 0x00 000003f5: DUP4 000003f6: ADD 000003f7: DUP5 000003f8: PUSH2 0x03d8 000003fb: JUMP 000003fc: JUMPDEST 000003fd: SWAP3 000003fe: SWAP2 000003ff: POP 00000400: POP 00000401: JUMP 00000402: JUMPDEST 00000403: PUSH1 0x00 00000405: DUP1 00000406: REVERT 00000407: JUMPDEST 00000408: PUSH2 0x0410 0000040b: DUP2 0000040c: PUSH2 0x03c6 0000040f: JUMP 00000410: JUMPDEST 00000411: DUP2 00000412: EQ 00000413: PUSH2 0x041b 00000416: JUMPI 00000417: PUSH1 0x00 00000419: DUP1 0000041a: REVERT 0000041b: JUMPDEST 0000041c: POP 0000041d: JUMP 0000041e: JUMPDEST 0000041f: PUSH1 0x00 00000421: DUP2 00000422: CALLDATALOAD 00000423: SWAP1 00000424: POP 00000425: PUSH2 0x042d 00000428: DUP2 00000429: PUSH2 0x0407 0000042c: JUMP 0000042d: JUMPDEST 0000042e: SWAP3 0000042f: SWAP2 00000430: POP 00000431: POP 00000432: JUMP 00000433: JUMPDEST 00000434: PUSH1 0x00 00000436: PUSH1 0x20 00000438: DUP3 00000439: DUP5 0000043a: SUB 0000043b: SLT 0000043c: ISZERO 0000043d: PUSH2 0x0449 00000440: JUMPI 00000441: PUSH2 0x0448 00000444: PUSH2 0x0402 00000447: JUMP 00000448: JUMPDEST 00000449: JUMPDEST 0000044a: PUSH1 0x00 0000044c: PUSH2 0x0457 0000044f: DUP5 00000450: DUP3 00000451: DUP6 00000452: ADD 00000453: PUSH2 0x041e 00000456: JUMP 00000457: JUMPDEST 00000458: SWAP2 00000459: POP 0000045a: POP 0000045b: SWAP3 0000045c: SWAP2 0000045d: POP 0000045e: POP 0000045f: JUMP 00000460: JUMPDEST 00000461: PUSH1 0x00 00000463: DUP3 00000464: DUP3 00000465: MSTORE 00000466: PUSH1 0x20 00000468: DUP3 00000469: ADD 0000046a: SWAP1 0000046b: POP 0000046c: SWAP3 0000046d: SWAP2 0000046e: POP 0000046f: POP 00000470: JUMP 00000471: JUMPDEST 00000472: PUSH32 0x6100000000000000000000000000000000000000000000000000000000000000 00000493: PUSH1 0x00 00000495: DUP3 00000496: ADD 00000497: MSTORE 00000498: POP 00000499: JUMP 0000049a: JUMPDEST 0000049b: PUSH1 0x00 0000049d: PUSH2 0x04a7 000004a0: PUSH1 0x01 000004a2: DUP4 000004a3: PUSH2 0x0460 000004a6: JUMP 000004a7: JUMPDEST 000004a8: SWAP2 000004a9: POP 000004aa: PUSH2 0x04b2 000004ad: DUP3 000004ae: PUSH2 0x0471 000004b1: JUMP 000004b2: JUMPDEST 000004b3: PUSH1 0x20 000004b5: DUP3 000004b6: ADD 000004b7: SWAP1 000004b8: POP 000004b9: SWAP2 000004ba: SWAP1 000004bb: POP 000004bc: JUMP 000004bd: JUMPDEST 000004be: PUSH1 0x00 000004c0: PUSH1 0x20 000004c2: DUP3 000004c3: ADD 000004c4: SWAP1 000004c5: POP 000004c6: DUP2 000004c7: DUP2 000004c8: SUB 000004c9: PUSH1 0x00 000004cb: DUP4 000004cc: ADD 000004cd: MSTORE 000004ce: PUSH2 0x04d6 000004d1: DUP2 000004d2: PUSH2 0x049a 000004d5: JUMP 000004d6: JUMPDEST 000004d7: SWAP1 000004d8: POP 000004d9: SWAP2 000004da: SWAP1 000004db: POP 000004dc: JUMP 000004dd: JUMPDEST 000004de: PUSH32 0x43616e6e6f742063616c6c2066616c6c6261636b2066756e6374696f6e206672 000004ff: PUSH1 0x00 00000501: DUP3 00000502: ADD 00000503: MSTORE 00000504: PUSH32 0x6f6d207468652070726f78792061646d696e0000000000000000000000000000 00000525: PUSH1 0x20 00000527: DUP3 00000528: ADD 00000529: MSTORE 0000052a: POP 0000052b: JUMP 0000052c: JUMPDEST 0000052d: PUSH1 0x00 0000052f: PUSH2 0x0539 00000532: PUSH1 0x32 00000534: DUP4 00000535: PUSH2 0x0460 00000538: JUMP 00000539: JUMPDEST 0000053a: SWAP2 0000053b: POP 0000053c: PUSH2 0x0544 0000053f: DUP3 00000540: PUSH2 0x04dd 00000543: JUMP 00000544: JUMPDEST 00000545: PUSH1 0x40 00000547: DUP3 00000548: ADD 00000549: SWAP1 0000054a: POP 0000054b: SWAP2 0000054c: SWAP1 0000054d: POP 0000054e: JUMP 0000054f: JUMPDEST 00000550: PUSH1 0x00 00000552: PUSH1 0x20 00000554: DUP3 00000555: ADD 00000556: SWAP1 00000557: POP 00000558: DUP2 00000559: DUP2 0000055a: SUB 0000055b: PUSH1 0x00 0000055d: DUP4 0000055e: ADD 0000055f: MSTORE 00000560: PUSH2 0x0568 00000563: DUP2 00000564: PUSH2 0x052c 00000567: JUMP 00000568: JUMPDEST 00000569: SWAP1 0000056a: POP 0000056b: SWAP2 0000056c: SWAP1 0000056d: POP 0000056e: JUMP 0000056f: JUMPDEST 00000570: PUSH32 0x6300000000000000000000000000000000000000000000000000000000000000 00000591: PUSH1 0x00 00000593: DUP3 00000594: ADD 00000595: MSTORE 00000596: POP 00000597: JUMP 00000598: JUMPDEST 00000599: PUSH1 0x00 0000059b: PUSH2 0x05a5 0000059e: PUSH1 0x01 000005a0: DUP4 000005a1: PUSH2 0x0460 000005a4: JUMP 000005a5: JUMPDEST 000005a6: SWAP2 000005a7: POP 000005a8: PUSH2 0x05b0 000005ab: DUP3 000005ac: PUSH2 0x056f 000005af: JUMP 000005b0: JUMPDEST 000005b1: PUSH1 0x20 000005b3: DUP3 000005b4: ADD 000005b5: SWAP1 000005b6: POP 000005b7: SWAP2 000005b8: SWAP1 000005b9: POP 000005ba: JUMP 000005bb: JUMPDEST 000005bc: PUSH1 0x00 000005be: PUSH1 0x20 000005c0: DUP3 000005c1: ADD 000005c2: SWAP1 000005c3: POP 000005c4: DUP2 000005c5: DUP2 000005c6: SUB 000005c7: PUSH1 0x00 000005c9: DUP4 000005ca: ADD 000005cb: MSTORE 000005cc: PUSH2 0x05d4 000005cf: DUP2 000005d0: PUSH2 0x0598 000005d3: JUMP 000005d4: JUMPDEST 000005d5: SWAP1 000005d6: POP 000005d7: SWAP2 000005d8: SWAP1 000005d9: POP 000005da: JUMP 000005db: INVALID 000005dc: LOG2 000005dd: PUSH5 0x6970667358 000005e3: UNKNOWN(0x22) 000005e4: SLT 000005e5: KECCAK256 000005e6: UNKNOWN(0x24) 000005e7: SWAP1 000005e8: UNKNOWN(0xF7) 000005e9: DIV 000005ea: ADD 000005eb: UNKNOWN(0xBB) 000005ec: DIV 000005ed: UNKNOWN(0xA6) 000005ee: DUP2 000005ef: DUP11 000005f0: DUP2 000005f1: CODESIZE 000005f2: SWAP3 000005f3: UNKNOWN(0x2F) 000005f4: SWAP11 000005f5: JUMPDEST 000005f6: UNKNOWN(0x2E) 000005f7: UNKNOWN(0xED) 000005f8: DUP15 000005f9: CALLDATASIZE 000005fa: MSIZE 000005fb: INVALID 000005fc: MOD 000005fd: ORIGIN 000005fe: UNKNOWN(0xCC) 000005ff: PUSH27
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | upgradeability | detector | Untrusted DELEGATECALL target reachable | 55 | no | no |
viewtrace_id: 0x070b50f0a8415c5cae0be426966947d488acfd96e9e64646c9ee8b86efcc9648
call_targets:
0xc4254b6b356c668a9d951f068e3e0d99dd08798d
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 14,
"trace_id": "0x070b50f0a8415c5cae0be426966947d488acfd96e9e64646c9ee8b86efcc9648",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xc4254b6b356c668a9d951f068e3e0d99dd08798d"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x04d7aef2",
"selector": "0x04d7aef2",
"calldata_variants": [
"0x04d7aef2",
"0x04d7aef20000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x433ee057",
"selector": "0x433ee057",
"calldata_variants": [
"0x433ee057",
"0x433ee0570000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xba0f7a89",
"selector": "0xba0f7a89",
"calldata_variants": [
"0xba0f7a89",
"0xba0f7a890000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 722,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [
{
"pc": 285,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 338,
"type": "tx_origin_used"
},
{
"pc": 1533,
"type": "tx_origin_used"
}
],
"delegatecall_count": 1,
"untrusted_delegatecall_count": 1
}
|
| high | auth | detector | Authorization based on tx.origin | 70 | no | — |
viewvalidation_json{
"reason": "missing sink mapping",
"status": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x04d7aef2",
"selector": "0x04d7aef2",
"calldata_variants": [
"0x04d7aef2",
"0x04d7aef20000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x433ee057",
"selector": "0x433ee057",
"calldata_variants": [
"0x433ee057",
"0x433ee0570000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xba0f7a89",
"selector": "0xba0f7a89",
"calldata_variants": [
"0xba0f7a89",
"0xba0f7a890000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [
{
"pc": 285,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 338,
"type": "tx_origin_used"
},
{
"pc": 1533,
"type": "tx_origin_used"
}
]
}
|