Analysis Run

019b3844-b43b-72ae-acd1-6b610c0b966d

complete

Chain ID

1

Address

0x9eb1124772cbaa5d52c7e532603c79291584b06a

Block Number

—

Created

Fri, Dec 19, 2025 8:19 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
18879	artifact.fetch	complete	1 / 3	3 months ago
18880	tool.cast_disasm	complete	1 / 3	3 months ago
87793	analysis.bundle	complete	1 / 3	1 week ago
87794	capability.graph	complete	1 / 3	1 week ago
87795	detector.run	complete	1 / 3	1 week ago
87796	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

1

CALL-family (heavy)

5

EXT*/BALANCE

1

Total opcodes

1557

Flags

create_opcodes_present

View cast disassembly output

00000000: PUSH1 0x40
00000002: PUSH1 0x80
00000004: DUP2
00000005: MSTORE
00000006: PUSH1 0x04
00000008: DUP1
00000009: CALLDATASIZE
0000000a: LT
0000000b: ISZERO
0000000c: PUSH2 0x001f
0000000f: JUMPI
00000010: JUMPDEST
00000011: POP
00000012: POP
00000013: CALLDATASIZE
00000014: ISZERO
00000015: PUSH2 0x001d
00000018: JUMPI
00000019: PUSH1 0x00
0000001b: DUP1
0000001c: REVERT
0000001d: JUMPDEST
0000001e: STOP
0000001f: JUMPDEST
00000020: PUSH1 0x00
00000022: SWAP2
00000023: DUP3
00000024: CALLDATALOAD
00000025: PUSH1 0xe0
00000027: SHR
00000028: DUP1
00000029: PUSH4 0x2f52ebb7
0000002e: EQ
0000002f: PUSH2 0x04e3
00000032: JUMPI
00000033: DUP1
00000034: PUSH4 0x690d8320
00000039: EQ
0000003a: PUSH2 0x044e
0000003d: JUMPI
0000003e: DUP1
0000003f: PUSH4 0x715018a6
00000044: EQ
00000045: PUSH2 0x03f1
00000048: JUMPI
00000049: DUP1
0000004a: PUSH4 0x8da5cb5b
0000004f: EQ
00000050: PUSH2 0x03c9
00000053: JUMPI
00000054: DUP1
00000055: PUSH4 0xa37be75f
0000005a: EQ
0000005b: PUSH2 0x03aa
0000005e: JUMPI
0000005f: DUP1
00000060: PUSH4 0xb61daaee
00000065: EQ
00000066: PUSH2 0x038b
00000069: JUMPI
0000006a: DUP1
0000006b: PUSH4 0xc884ef83
00000070: EQ
00000071: PUSH2 0x0351
00000074: JUMPI
00000075: DUP1
00000076: PUSH4 0xd1af0c7d
0000007b: EQ
0000007c: PUSH2 0x0328
0000007f: JUMPI
00000080: DUP1
00000081: PUSH4 0xdab5f340
00000086: EQ
00000087: PUSH2 0x0306
0000008a: JUMPI
0000008b: DUP1
0000008c: PUSH4 0xde320cc1
00000091: EQ
00000092: PUSH2 0x02bd
00000095: JUMPI
00000096: DUP1
00000097: PUSH4 0xea493952
0000009c: EQ
0000009d: PUSH2 0x029e
000000a0: JUMPI
000000a1: DUP1
000000a2: PUSH4 0xebf0c717
000000a7: EQ
000000a8: PUSH2 0x027f
000000ab: JUMPI
000000ac: DUP1
000000ad: PUSH4 0xf2fde38b
000000b2: EQ
000000b3: PUSH2 0x01f2
000000b6: JUMPI
000000b7: PUSH4 0xf4f3b200
000000bc: EQ
000000bd: PUSH2 0x00c6
000000c0: JUMPI
000000c1: POP
000000c2: PUSH2 0x0010
000000c5: JUMP
000000c6: JUMPDEST
000000c7: CALLVALUE
000000c8: PUSH2 0x01d5
000000cb: JUMPI
000000cc: PUSH1 0x20
000000ce: SWAP1
000000cf: DUP2
000000d0: PUSH1 0x03
000000d2: NOT
000000d3: CALLDATASIZE
000000d4: ADD
000000d5: SLT
000000d6: PUSH2 0x01ee
000000d9: JUMPI
000000da: DUP3
000000db: CALLDATALOAD
000000dc: SWAP2
000000dd: DUP5
000000de: PUSH1 0x01
000000e0: PUSH1 0x01
000000e2: PUSH1 0xa0
000000e4: SHL
000000e5: SUB
000000e6: DUP1
000000e7: DUP6
000000e8: AND
000000e9: DUP6
000000ea: SUB
000000eb: PUSH2 0x01ea
000000ee: JUMPI
000000ef: PUSH2 0x00f6
000000f2: PUSH2 0x08ce
000000f5: JUMP
000000f6: JUMPDEST
000000f7: PUSH2 0x00fe
000000fa: PUSH2 0x08ab
000000fd: JUMP
000000fe: JUMPDEST
000000ff: PUSH1 0x03
00000101: SLOAD
00000102: AND
00000103: SWAP4
00000104: DUP4
00000105: MLOAD
00000106: PUSH4 0x70a08231
0000010b: PUSH1 0xe0
0000010d: SHL
0000010e: DUP2
0000010f: MSTORE
00000110: ADDRESS
00000111: DUP8
00000112: DUP3
00000113: ADD
00000114: MSTORE
00000115: DUP4
00000116: DUP2
00000117: PUSH1 0x24
00000119: DUP2
0000011a: DUP10
0000011b: GAS
0000011c: STATICCALL
0000011d: SWAP1
0000011e: DUP2
0000011f: ISZERO
00000120: PUSH2 0x01e0
00000123: JUMPI
00000124: DUP4
00000125: SWAP2
00000126: PUSH2 0x01ad
00000129: JUMPI
0000012a: JUMPDEST
0000012b: POP
0000012c: DUP5
0000012d: MLOAD
0000012e: PUSH4 0xa9059cbb
00000133: PUSH1 0xe0
00000135: SHL
00000136: DUP6
00000137: DUP3
00000138: ADD
00000139: SWAP1
0000013a: DUP2
0000013b: MSTORE
0000013c: PUSH1 0x01
0000013e: PUSH1 0x01
00000140: PUSH1 0xa0
00000142: SHL
00000143: SUB
00000144: SWAP4
00000145: SWAP1
00000146: SWAP4
00000147: AND
00000148: PUSH1 0x24
0000014a: DUP3
0000014b: ADD
0000014c: MSTORE
0000014d: PUSH1 0x44
0000014f: DUP1
00000150: DUP3
00000151: ADD
00000152: SWAP3
00000153: SWAP1
00000154: SWAP3
00000155: MSTORE
00000156: SWAP1
00000157: DUP2
00000158: MSTORE
00000159: PUSH2 0x0163
0000015c: PUSH1 0x64
0000015e: DUP3
0000015f: PUSH2 0x0543
00000162: JUMP
00000163: JUMPDEST
00000164: MLOAD
00000165: SWAP1
00000166: DUP3
00000167: DUP7
00000168: GAS
00000169: CALL
0000016a: ISZERO
0000016b: PUSH2 0x01a4
0000016e: JUMPI
0000016f: DUP4
00000170: MLOAD
00000171: RETURNDATASIZE
00000172: PUSH2 0x019b
00000175: JUMPI
00000176: POP
00000177: DUP2
00000178: EXTCODESIZE
00000179: ISZERO
0000017a: JUMPDEST
0000017b: PUSH2 0x0186
0000017e: JUMPI
0000017f: DUP4
00000180: PUSH1 0x01
00000182: DUP1
00000183: SSTORE
00000184: DUP1
00000185: RETURN
00000186: JUMPDEST
00000187: MLOAD
00000188: PUSH4 0x5274afe7
0000018d: PUSH1 0xe0
0000018f: SHL
00000190: DUP2
00000191: MSTORE
00000192: SWAP2
00000193: DUP3
00000194: ADD
00000195: MSTORE
00000196: PUSH1 0x24
00000198: SWAP2
00000199: POP
0000019a: REVERT
0000019b: JUMPDEST
0000019c: PUSH1 0x01
0000019e: EQ
0000019f: ISZERO
000001a0: PUSH2 0x017a
000001a3: JUMP
000001a4: JUMPDEST
000001a5: MLOAD
000001a6: RETURNDATASIZE
000001a7: DUP5
000001a8: DUP3
000001a9: RETURNDATACOPY
000001aa: RETURNDATASIZE
000001ab: SWAP1
000001ac: REVERT
000001ad: JUMPDEST
000001ae: SWAP1
000001af: POP
000001b0: DUP4
000001b1: DUP2
000001b2: DUP2
000001b3: RETURNDATASIZE
000001b4: DUP4
000001b5: GT
000001b6: PUSH2 0x01d9
000001b9: JUMPI
000001ba: JUMPDEST
000001bb: PUSH2 0x01c4
000001be: DUP2
000001bf: DUP4
000001c0: PUSH2 0x0543
000001c3: JUMP
000001c4: JUMPDEST
000001c5: DUP2
000001c6: ADD
000001c7: SUB
000001c8: SLT
000001c9: PUSH2 0x01d5
000001cc: JUMPI
000001cd: MLOAD
000001ce: PUSH2 0x0163
000001d1: PUSH2 0x012a
000001d4: JUMP
000001d5: JUMPDEST
000001d6: DUP3
000001d7: DUP1
000001d8: REVERT
000001d9: JUMPDEST
000001da: POP
000001db: RETURNDATASIZE
000001dc: PUSH2 0x01ba
000001df: JUMP
000001e0: JUMPDEST
000001e1: DUP6
000001e2: MLOAD
000001e3: RETURNDATASIZE
000001e4: DUP6
000001e5: DUP3
000001e6: RETURNDATACOPY
000001e7: RETURNDATASIZE
000001e8: SWAP1
000001e9: REVERT
000001ea: JUMPDEST
000001eb: POP
000001ec: DUP1
000001ed: REVERT
000001ee: JUMPDEST
000001ef: DUP4
000001f0: DUP1
000001f1: REVERT
000001f2: JUMPDEST
000001f3: POP
000001f4: CALLVALUE
000001f5: PUSH2 0x01d5
000001f8: JUMPI
000001f9: PUSH1 0x20
000001fb: CALLDATASIZE
000001fc: PUSH1 0x03
000001fe: NOT
000001ff: ADD
00000200: SLT
00000201: PUSH2 0x01d5
00000204: JUMPI
00000205: PUSH1 0x01
00000207: PUSH1 0x01
00000209: PUSH1 0xa0
0000020b: SHL
0000020c: SUB
0000020d: DUP3
0000020e: CALLDATALOAD
0000020f: DUP2
00000210: DUP2
00000211: AND
00000212: SWAP4
00000213: SWAP2
00000214: SWAP3
00000215: SWAP1
00000216: DUP5
00000217: SWAP1
00000218: SUB
00000219: PUSH2 0x027b
0000021c: JUMPI
0000021d: PUSH2 0x0224
00000220: PUSH2 0x08ce
00000223: JUMP
00000224: JUMPDEST
00000225: DUP4
00000226: ISZERO
00000227: PUSH2 0x0265
0000022a: JUMPI
0000022b: POP
0000022c: POP
0000022d: DUP3
0000022e: SLOAD
0000022f: PUSH1 0x01
00000231: PUSH1 0x01
00000233: PUSH1 0xa0
00000235: SHL
00000236: SUB
00000237: NOT
00000238: DUP2
00000239: AND
0000023a: DUP4
0000023b: OR
0000023c: DUP5
0000023d: SSTORE
0000023e: AND
0000023f: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
00000260: DUP4
00000261: DUP1
00000262: LOG3
00000263: DUP1
00000264: RETURN
00000265: JUMPDEST
00000266: MLOAD
00000267: PUSH4 0x1e4fbdf7
0000026c: PUSH1 0xe0
0000026e: SHL
0000026f: DUP2
00000270: MSTORE
00000271: SWAP1
00000272: DUP2
00000273: ADD
00000274: DUP5
00000275: SWAP1
00000276: MSTORE
00000277: PUSH1 0x24
00000279: SWAP1
0000027a: REVERT
0000027b: JUMPDEST
0000027c: DUP5
0000027d: DUP1
0000027e: REVERT
0000027f: JUMPDEST
00000280: DUP4
00000281: DUP3
00000282: CALLVALUE
00000283: PUSH2 0x01ea
00000286: JUMPI
00000287: DUP2
00000288: PUSH1 0x03
0000028a: NOT
0000028b: CALLDATASIZE
0000028c: ADD
0000028d: SLT
0000028e: PUSH2 0x01ea
00000291: JUMPI
00000292: PUSH1 0x20
00000294: SWAP1
00000295: PUSH1 0x02
00000297: SLOAD
00000298: SWAP1
00000299: MLOAD
0000029a: SWAP1
0000029b: DUP2
0000029c: MSTORE
0000029d: RETURN
0000029e: JUMPDEST
0000029f: DUP4
000002a0: DUP3
000002a1: CALLVALUE
000002a2: PUSH2 0x01ea
000002a5: JUMPI
000002a6: DUP2
000002a7: PUSH1 0x03
000002a9: NOT
000002aa: CALLDATASIZE
000002ab: ADD
000002ac: SLT
000002ad: PUSH2 0x01ea
000002b0: JUMPI
000002b1: PUSH1 0x20
000002b3: SWAP1
000002b4: PUSH1 0x07
000002b6: SLOAD
000002b7: SWAP1
000002b8: MLOAD
000002b9: SWAP1
000002ba: DUP2
000002bb: MSTORE
000002bc: RETURN
000002bd: JUMPDEST
000002be: POP
000002bf: POP
000002c0: CALLVALUE
000002c1: PUSH2 0x01ea
000002c4: JUMPI
000002c5: PUSH1 0x20
000002c7: CALLDATASIZE
000002c8: PUSH1 0x03
000002ca: NOT
000002cb: ADD
000002cc: SLT
000002cd: PUSH2 0x01ea
000002d0: JUMPI
000002d1: CALLDATALOAD
000002d2: PUSH1 0x01
000002d4: PUSH1 0x01
000002d6: PUSH1 0xa0
000002d8: SHL
000002d9: SUB
000002da: DUP2
000002db: AND
000002dc: SWAP1
000002dd: DUP2
000002de: SWAP1
000002df: SUB
000002e0: PUSH2 0x01ea
000002e3: JUMPI
000002e4: PUSH2 0x02eb
000002e7: PUSH2 0x08ce
000002ea: JUMP
000002eb: JUMPDEST
000002ec: PUSH12 0xffffffffffffffffffffffff
000002f9: PUSH1 0xa0
000002fb: SHL
000002fc: PUSH1 0x03
000002fe: SLOAD
000002ff: AND
00000300: OR
00000301: PUSH1 0x03
00000303: SSTORE
00000304: DUP1
00000305: RETURN
00000306: JUMPDEST
00000307: POP
00000308: POP
00000309: CALLVALUE
0000030a: PUSH2 0x01ea
0000030d: JUMPI
0000030e: PUSH1 0x20
00000310: CALLDATASIZE
00000311: PUSH1 0x03
00000313: NOT
00000314: ADD
00000315: SLT
00000316: PUSH2 0x01ea
00000319: JUMPI
0000031a: PUSH2 0x0321
0000031d: PUSH2 0x08ce
00000320: JUMP
00000321: JUMPDEST
00000322: CALLDATALOAD
00000323: PUSH1 0x02
00000325: SSTORE
00000326: DUP1
00000327: RETURN
00000328: JUMPDEST
00000329: DUP4
0000032a: DUP3
0000032b: CALLVALUE
0000032c: PUSH2 0x01ea
0000032f: JUMPI
00000330: DUP2
00000331: PUSH1 0x03
00000333: NOT
00000334: CALLDATASIZE
00000335: ADD
00000336: SLT
00000337: PUSH2 0x01ea
0000033a: JUMPI
0000033b: PUSH1 0x03
0000033d: SLOAD
0000033e: SWAP1
0000033f: MLOAD
00000340: PUSH1 0x01
00000342: PUSH1 0x01
00000344: PUSH1 0xa0
00000346: SHL
00000347: SUB
00000348: SWAP1
00000349: SWAP2
0000034a: AND
0000034b: DUP2
0000034c: MSTORE
0000034d: PUSH1 0x20
0000034f: SWAP1
00000350: RETURN
00000351: JUMPDEST
00000352: POP
00000353: SWAP1
00000354: CALLVALUE
00000355: PUSH2 0x01d5
00000358: JUMPI
00000359: PUSH1 0x20
0000035b: CALLDATASIZE
0000035c: PUSH1 0x03
0000035e: NOT
0000035f: ADD
00000360: SLT
00000361: PUSH2 0x01d5
00000364: JUMPI
00000365: DUP1
00000366: CALLDATALOAD
00000367: PUSH1 0x01
00000369: PUSH1 0x01
0000036b: PUSH1 0xa0
0000036d: SHL
0000036e: SUB
0000036f: DUP2
00000370: AND
00000371: SWAP1
00000372: DUP2
00000373: SWAP1
00000374: SUB
00000375: PUSH2 0x01ee
00000378: JUMPI
00000379: SWAP3
0000037a: DUP3
0000037b: SWAP2
0000037c: PUSH1 0x20
0000037e: SWAP5
0000037f: DUP3
00000380: MSTORE
00000381: DUP5
00000382: MSTORE
00000383: KECCAK256
00000384: SLOAD
00000385: SWAP1
00000386: MLOAD
00000387: SWAP1
00000388: DUP2
00000389: MSTORE
0000038a: RETURN
0000038b: JUMPDEST
0000038c: DUP4
0000038d: DUP3
0000038e: CALLVALUE
0000038f: PUSH2 0x01ea
00000392: JUMPI
00000393: DUP2
00000394: PUSH1 0x03
00000396: NOT
00000397: CALLDATASIZE
00000398: ADD
00000399: SLT
0000039a: PUSH2 0x01ea
0000039d: JUMPI
0000039e: PUSH1 0x20
000003a0: SWAP1
000003a1: PUSH1 0x05
000003a3: SLOAD
000003a4: SWAP1
000003a5: MLOAD
000003a6: SWAP1
000003a7: DUP2
000003a8: MSTORE
000003a9: RETURN
000003aa: JUMPDEST
000003ab: DUP4
000003ac: DUP3
000003ad: CALLVALUE
000003ae: PUSH2 0x01ea
000003b1: JUMPI
000003b2: DUP2
000003b3: PUSH1 0x03
000003b5: NOT
000003b6: CALLDATASIZE
000003b7: ADD
000003b8: SLT
000003b9: PUSH2 0x01ea
000003bc: JUMPI
000003bd: PUSH1 0x20
000003bf: SWAP1
000003c0: PUSH1 0x06
000003c2: SLOAD
000003c3: SWAP1
000003c4: MLOAD
000003c5: SWAP1
000003c6: DUP2
000003c7: MSTORE
000003c8: RETURN
000003c9: JUMPDEST
000003ca: DUP4
000003cb: DUP3
000003cc: CALLVALUE
000003cd: PUSH2 0x01ea
000003d0: JUMPI
000003d1: DUP2
000003d2: PUSH1 0x03
000003d4: NOT
000003d5: CALLDATASIZE
000003d6: ADD
000003d7: SLT
000003d8: PUSH2 0x01ea
000003db: JUMPI
000003dc: SWAP1
000003dd: SLOAD
000003de: SWAP1
000003df: MLOAD
000003e0: PUSH1 0x01
000003e2: PUSH1 0x01
000003e4: PUSH1 0xa0
000003e6: SHL
000003e7: SUB
000003e8: SWAP1
000003e9: SWAP2
000003ea: AND
000003eb: DUP2
000003ec: MSTORE
000003ed: PUSH1 0x20
000003ef: SWAP1
000003f0: RETURN
000003f1: JUMPDEST
000003f2: DUP4
000003f3: CALLVALUE
000003f4: PUSH2 0x044b
000003f7: JUMPI
000003f8: DUP1
000003f9: PUSH1 0x03
000003fb: NOT
000003fc: CALLDATASIZE
000003fd: ADD
000003fe: SLT
000003ff: PUSH2 0x044b
00000402: JUMPI
00000403: PUSH2 0x040a
00000406: PUSH2 0x08ce
00000409: JUMP
0000040a: JUMPDEST
0000040b: DUP1
0000040c: SLOAD
0000040d: PUSH1 0x01
0000040f: PUSH1 0x01
00000411: PUSH1 0xa0
00000413: SHL
00000414: SUB
00000415: NOT
00000416: DUP2
00000417: AND
00000418: DUP3
00000419: SSTORE
0000041a: DUP2
0000041b: SWAP1
0000041c: PUSH1 0x01
0000041e: PUSH1 0x01
00000420: PUSH1 0xa0
00000422: SHL
00000423: SUB
00000424: AND
00000425: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
00000446: DUP3
00000447: DUP1
00000448: LOG3
00000449: DUP1
0000044a: RETURN
0000044b: JUMPDEST
0000044c: DUP1
0000044d: REVERT
0000044e: JUMPDEST
0000044f: POP
00000450: SWAP1
00000451: CALLVALUE
00000452: PUSH2 0x01d5
00000455: JUMPI
00000456: PUSH1 0x20
00000458: CALLDATASIZE
00000459: PUSH1 0x03
0000045b: NOT
0000045c: ADD
0000045d: SLT
0000045e: PUSH2 0x01d5
00000461: JUMPI
00000462: DUP1
00000463: CALLDATALOAD
00000464: PUSH1 0x01
00000466: PUSH1 0x01
00000468: PUSH1 0xa0
0000046a: SHL
0000046b: SUB
0000046c: DUP2
0000046d: AND
0000046e: SWAP2
0000046f: SWAP1
00000470: DUP3
00000471: SWAP1
00000472: SUB
00000473: PUSH2 0x01ee
00000476: JUMPI
00000477: PUSH2 0x047e
0000047a: PUSH2 0x08ce
0000047d: JUMP
0000047e: JUMPDEST
0000047f: PUSH2 0x0486
00000482: PUSH2 0x08ab
00000485: JUMP
00000486: JUMPDEST
00000487: SELFBALANCE
00000488: SWAP3
00000489: DUP4
0000048a: ISZERO
0000048b: PUSH2 0x04af
0000048e: JUMPI
0000048f: DUP5
00000490: PUSH2 0x04a8
00000493: DUP2
00000494: DUP1
00000495: DUP1
00000496: DUP1
00000497: DUP10
00000498: DUP10
00000499: GAS
0000049a: CALL
0000049b: PUSH2 0x04a2
0000049e: PUSH2 0x05a4
000004a1: JUMP
000004a2: JUMPDEST
000004a3: POP
000004a4: PUSH2 0x05e4
000004a7: JUMP
000004a8: JUMPDEST
000004a9: PUSH1 0x01
000004ab: DUP1
000004ac: SSTORE
000004ad: DUP1
000004ae: RETURN
000004af: JUMPDEST
000004b0: SWAP1
000004b1: PUSH1 0x20
000004b3: PUSH1 0x64
000004b5: SWAP3
000004b6: MLOAD
000004b7: SWAP2
000004b8: PUSH3 0x461bcd
000004bc: PUSH1 0xe5
000004be: SHL
000004bf: DUP4
000004c0: MSTORE
000004c1: DUP3
000004c2: ADD
000004c3: MSTORE
000004c4: PUSH1 0x0e
000004c6: PUSH1 0x24
000004c8: DUP3
000004c9: ADD
000004ca: MSTORE
000004cb: PUSH14 0x4e6f204554482062616c616e6365
000004da: PUSH1 0x90
000004dc: SHL
000004dd: PUSH1 0x44
000004df: DUP3
000004e0: ADD
000004e1: MSTORE
000004e2: REVERT
000004e3: JUMPDEST
000004e4: POP
000004e5: CALLVALUE
000004e6: PUSH2 0x01d5
000004e9: JUMPI
000004ea: CALLDATASIZE
000004eb: PUSH1 0x03
000004ed: NOT
000004ee: ADD
000004ef: SLT
000004f0: PUSH2 0x01ea
000004f3: JUMPI
000004f4: PUSH1 0x24
000004f6: CALLDATALOAD
000004f7: SWAP1
000004f8: PUSH8 0xffffffffffffffff
00000501: SWAP1
00000502: DUP2
00000503: DUP4
00000504: GT
00000505: PUSH2 0x01ee
00000508: JUMPI
00000509: CALLDATASIZE
0000050a: PUSH1 0x23
0000050c: DUP5
0000050d: ADD
0000050e: SLT
0000050f: ISZERO
00000510: PUSH2 0x01ee
00000513: JUMPI
00000514: DUP3
00000515: DUP2
00000516: ADD
00000517: CALLDATALOAD
00000518: SWAP2
00000519: DUP3
0000051a: GT
0000051b: PUSH2 0x01ee
0000051e: JUMPI
0000051f: CALLDATASIZE
00000520: PUSH1 0x24
00000522: DUP4
00000523: PUSH1 0x05
00000525: SHL
00000526: DUP6
00000527: ADD
00000528: ADD
00000529: GT
0000052a: PUSH2 0x01ee
0000052d: JUMPI
0000052e: PUSH1 0x24
00000530: PUSH2 0x04a8
00000533: SWAP4
00000534: PUSH2 0x053b
00000537: PUSH2 0x08ab
0000053a: JUMP
0000053b: JUMPDEST
0000053c: ADD
0000053d: SWAP1
0000053e: CALLDATALOAD
0000053f: PUSH2 0x0626
00000542: JUMP
00000543: JUMPDEST
00000544: SWAP1
00000545: PUSH1 0x1f
00000547: DUP1
00000548: NOT
00000549: SWAP2
0000054a: ADD
0000054b: AND
0000054c: DUP2
0000054d: ADD
0000054e: SWAP1
0000054f: DUP2
00000550: LT
00000551: PUSH8 0xffffffffffffffff
0000055a: DUP3
0000055b: GT
0000055c: OR
0000055d: PUSH2 0x0565
00000560: JUMPI
00000561: PUSH1 0x40
00000563: MSTORE
00000564: JUMP
00000565: JUMPDEST
00000566: PUSH4 0x4e487b71
0000056b: PUSH1 0xe0
0000056d: SHL
0000056e: PUSH1 0x00
00000570: MSTORE
00000571: PUSH1 0x41
00000573: PUSH1 0x04
00000575: MSTORE
00000576: PUSH1 0x24
00000578: PUSH1 0x00
0000057a: REVERT
0000057b: JUMPDEST
0000057c: DUP2
0000057d: DUP2
0000057e: MUL
0000057f: SWAP3
00000580: SWAP2
00000581: DUP2
00000582: ISZERO
00000583: SWAP2
00000584: DUP5
00000585: DIV
00000586: EQ
00000587: OR
00000588: ISZERO
00000589: PUSH2 0x058e
0000058c: JUMPI
0000058d: JUMP
0000058e: JUMPDEST
0000058f: PUSH4 0x4e487b71
00000594: PUSH1 0xe0
00000596: SHL
00000597: PUSH1 0x00
00000599: MSTORE
0000059a: PUSH1 0x11
0000059c: PUSH1 0x04
0000059e: MSTORE
0000059f: PUSH1 0x24
000005a1: PUSH1 0x00
000005a3: REVERT
000005a4: JUMPDEST
000005a5: RETURNDATASIZE
000005a6: ISZERO
000005a7: PUSH2 0x05df
000005aa: JUMPI
000005ab: RETURNDATASIZE
000005ac: SWAP1
000005ad: PUSH8 0xffffffffffffffff
000005b6: DUP3
000005b7: GT
000005b8: PUSH2 0x0565
000005bb: JUMPI
000005bc: PUSH1 0x40
000005be: MLOAD
000005bf: SWAP2
000005c0: PUSH2 0x05d3
000005c3: PUSH1 0x1f
000005c5: DUP3
000005c6: ADD
000005c7: PUSH1 0x1f
000005c9: NOT
000005ca: AND
000005cb: PUSH1 0x20
000005cd: ADD
000005ce: DUP5
000005cf: PUSH2 0x0543
000005d2: JUMP
000005d3: JUMPDEST
000005d4: DUP3
000005d5: MSTORE
000005d6: RETURNDATASIZE
000005d7: PUSH1 0x00
000005d9: PUSH1 0x20
000005db: DUP5
000005dc: ADD
000005dd: RETURNDATACOPY
000005de: JUMP
000005df: JUMPDEST
000005e0: PUSH1 0x60
000005e2: SWAP1
000005e3: JUMP
000005e4: JUMPDEST
000005e5: ISZERO
000005e6: PUSH2 0x05eb
000005e9: JUMPI
000005ea: JUMP
000005eb: JUMPDEST
000005ec: PUSH1 0x40
000005ee: MLOAD
000005ef: PUSH3 0x461bcd
000005f3: PUSH1 0xe5
000005f5: SHL
000005f6: DUP2
000005f7: MSTORE
000005f8: PUSH1 0x20
000005fa: PUSH1 0x04
000005fc: DUP3
000005fd: ADD
000005fe: MSTORE
000005ff: PUSH1 0x13
00000601: PUSH1 0x24
00000603: DUP3
00000604: ADD
00000605: MSTORE
00000606: PUSH19 0x115512081d1c985b9cd9995c8819985a5b1959
0000061a: PUSH1 0x6a
0000061c: SHL
0000061d: PUSH1 0x44
0000061f: DUP3
00000620: ADD
00000621: MSTORE
00000622: PUSH1 0x64
00000624: SWAP1
00000625: REVERT
00000626: JUMPDEST
00000627: SWAP2
00000628: SWAP1
00000629: SWAP3
0000062a: PUSH1 0x40
0000062c: SWAP2
0000062d: DUP3
0000062e: MLOAD
0000062f: SWAP1
00000630: PUSH1 0x20
00000632: SWAP2
00000633: DUP3
00000634: DUP2
00000635: ADD
00000636: SWAP4
00000637: CALLER
00000638: PUSH1 0x60
0000063a: SHL
0000063b: DUP6
0000063c: MSTORE
0000063d: DUP7
0000063e: PUSH1 0x34
00000640: DUP4
00000641: ADD
00000642: MSTORE
00000643: PUSH1 0x34
00000645: DUP3
00000646: MSTORE
00000647: PUSH1 0x60
00000649: DUP3
0000064a: ADD
0000064b: SWAP7
0000064c: PUSH8 0xffffffffffffffff
00000655: SWAP6
00000656: DUP4
00000657: DUP10
00000658: LT
00000659: DUP8
0000065a: DUP11
0000065b: GT
0000065c: OR
0000065d: PUSH2 0x0565
00000660: JUMPI
00000661: DUP9
00000662: DUP9
00000663: MSTORE
00000664: DUP4
00000665: MLOAD
00000666: SWAP1
00000667: KECCAK256
00000668: PUSH1 0x02
0000066a: SLOAD
0000066b: SWAP7
0000066c: DUP6
0000066d: GT
0000066e: PUSH2 0x0565
00000671: JUMPI
00000672: PUSH1 0x05
00000674: SWAP10
00000675: DUP6
00000676: PUSH1 0x05
00000678: SHL
00000679: SWAP6
0000067a: PUSH2 0x0685
0000067d: DUP9
0000067e: DUP9
0000067f: ADD
00000680: DUP13
00000681: PUSH2 0x0543
00000684: JUMP
00000685: JUMPDEST
00000686: DUP11
00000687: MSTORE
00000688: PUSH1 0x80
0000068a: SWAP6
0000068b: PUSH1 0x80
0000068d: DUP7
0000068e: ADD
0000068f: SWAP1
00000690: DUP3
00000691: ADD
00000692: SWAP2
00000693: CALLDATASIZE
00000694: DUP4
00000695: GT
00000696: PUSH2 0x07f9
00000699: JUMPI
0000069a: DUP9
0000069b: SWAP1
0000069c: SWAP2
0000069d: JUMPDEST
0000069e: DUP4
0000069f: DUP4
000006a0: LT
000006a1: PUSH2 0x089b
000006a4: JUMPI
000006a5: POP
000006a6: POP
000006a7: POP
000006a8: POP
000006a9: SWAP6
000006aa: PUSH1 0x00
000006ac: SWAP7
000006ad: JUMPDEST
000006ae: DUP10
000006af: MLOAD
000006b0: DUP9
000006b1: LT
000006b2: ISZERO
000006b3: PUSH2 0x06ef
000006b6: JUMPI
000006b7: DUP8
000006b8: DUP12
000006b9: SHL
000006ba: DUP6
000006bb: ADD
000006bc: DUP7
000006bd: ADD
000006be: MLOAD
000006bf: SWAP1
000006c0: DUP10
000006c1: PUSH1 0x00
000006c3: DUP4
000006c4: DUP4
000006c5: LT
000006c6: ISZERO
000006c7: PUSH2 0x06e0
000006ca: JUMPI
000006cb: POP
000006cc: POP
000006cd: PUSH1 0x00
000006cf: MSTORE
000006d0: DUP7
000006d1: MSTORE
000006d2: PUSH1 0x01
000006d4: DUP9
000006d5: PUSH1 0x00
000006d7: KECCAK256
000006d8: JUMPDEST
000006d9: SWAP8
000006da: ADD
000006db: SWAP7
000006dc: PUSH2 0x06ad
000006df: JUMP
000006e0: JUMPDEST
000006e1: SWAP1
000006e2: SWAP2
000006e3: PUSH1 0x01
000006e5: SWAP4
000006e6: DUP3
000006e7: MSTORE
000006e8: DUP10
000006e9: MSTORE
000006ea: KECCAK256
000006eb: PUSH2 0x06d8
000006ee: JUMP
000006ef: JUMPDEST
000006f0: SWAP5
000006f1: POP
000006f2: SWAP5
000006f3: SWAP6
000006f4: POP
000006f5: SWAP7
000006f6: POP
000006f7: SWAP7
000006f8: POP
000006f9: POP
000006fa: SUB
000006fb: PUSH2 0x0861
000006fe: JUMPI
000006ff: CALLER
00000700: PUSH1 0x00
00000702: MSTORE
00000703: PUSH1 0x04
00000705: SWAP1
00000706: DUP2
00000707: DUP2
00000708: MSTORE
00000709: DUP3
0000070a: PUSH1 0x00
0000070c: KECCAK256
0000070d: SLOAD
0000070e: DUP5
0000070f: LT
00000710: PUSH2 0x082b
00000713: JUMPI
00000714: CALLER
00000715: PUSH1 0x00
00000717: MSTORE
00000718: DUP2
00000719: DUP2
0000071a: MSTORE
0000071b: DUP3
0000071c: PUSH1 0x00
0000071e: KECCAK256
0000071f: SLOAD
00000720: DUP5
00000721: DUP2
00000722: DUP2
00000723: SUB
00000724: GT
00000725: PUSH2 0x0816
00000728: JUMPI
00000729: DUP5
0000072a: EQ
0000072b: PUSH2 0x0810
0000072e: JUMPI
0000072f: PUSH1 0x07
00000731: SLOAD
00000732: ISZERO
00000733: PUSH2 0x0771
00000736: JUMPI
00000737: JUMPDEST
00000738: PUSH1 0x01
0000073a: PUSH1 0x07
0000073c: SLOAD
0000073d: EQ
0000073e: PUSH2 0x074d
00000741: JUMPI
00000742: JUMPDEST
00000743: CALLER
00000744: PUSH1 0x00
00000746: MSTORE
00000747: MSTORE
00000748: PUSH1 0x00
0000074a: KECCAK256
0000074b: SSTORE
0000074c: JUMP
0000074d: JUMPDEST
0000074e: PUSH2 0x076c
00000751: PUSH1 0x00
00000753: DUP1
00000754: DUP1
00000755: DUP1
00000756: PUSH2 0x0761
00000759: PUSH1 0x06
0000075b: SLOAD
0000075c: DUP11
0000075d: PUSH2 0x057b
00000760: JUMP
00000761: JUMPDEST
00000762: CALLER
00000763: GAS
00000764: CALL
00000765: PUSH2 0x04a2
00000768: PUSH2 0x05a4
0000076b: JUMP
0000076c: JUMPDEST
0000076d: PUSH2 0x0742
00000770: JUMP
00000771: JUMPDEST
00000772: PUSH1 0x00
00000774: DUP2
00000775: PUSH2 0x07b8
00000778: PUSH1 0x01
0000077a: DUP1
0000077b: PUSH1 0xa0
0000077d: SHL
0000077e: SUB
0000077f: PUSH1 0x03
00000781: SLOAD
00000782: AND
00000783: PUSH2 0x078e
00000786: PUSH1 0x05
00000788: SLOAD
00000789: DUP10
0000078a: PUSH2 0x057b
0000078d: JUMP
0000078e: JUMPDEST
0000078f: DUP8
00000790: MLOAD
00000791: PUSH4 0xa9059cbb
00000796: PUSH1 0xe0
00000798: SHL
00000799: DUP2
0000079a: MSTORE
0000079b: CALLER
0000079c: DUP9
0000079d: DUP3
0000079e: ADD
0000079f: SWAP1
000007a0: DUP2
000007a1: MSTORE
000007a2: PUSH1 0x20
000007a4: DUP2
000007a5: ADD
000007a6: SWAP3
000007a7: SWAP1
000007a8: SWAP3
000007a9: MSTORE
000007aa: SWAP5
000007ab: DUP6
000007ac: SWAP4
000007ad: DUP5
000007ae: SWAP3
000007af: DUP4
000007b0: SWAP2
000007b1: PUSH1 0x40
000007b3: SWAP1
000007b4: SWAP2
000007b5: ADD
000007b6: SWAP1
000007b7: JUMP
000007b8: JUMPDEST
000007b9: SUB
000007ba: SWAP3
000007bb: GAS
000007bc: CALL
000007bd: DUP1
000007be: ISZERO
000007bf: PUSH2 0x0805
000007c2: JUMPI
000007c3: PUSH2 0x07cd
000007c6: JUMPI
000007c7: JUMPDEST
000007c8: POP
000007c9: PUSH2 0x0737
000007cc: JUMP
000007cd: JUMPDEST
000007ce: DUP2
000007cf: DUP2
000007d0: DUP2
000007d1: RETURNDATASIZE
000007d2: DUP4
000007d3: GT
000007d4: PUSH2 0x07fe
000007d7: JUMPI
000007d8: JUMPDEST
000007d9: PUSH2 0x07e2
000007dc: DUP2
000007dd: DUP4
000007de: PUSH2 0x0543
000007e1: JUMP
000007e2: JUMPDEST
000007e3: DUP2
000007e4: ADD
000007e5: SUB
000007e6: SLT
000007e7: PUSH2 0x07f9
000007ea: JUMPI
000007eb: MLOAD
000007ec: DUP1
000007ed: ISZERO
000007ee: ISZERO
000007ef: SUB
000007f0: PUSH2 0x07f9
000007f3: JUMPI
000007f4: CODESIZE
000007f5: PUSH2 0x07c7
000007f8: JUMP
000007f9: JUMPDEST
000007fa: PUSH1 0x00
000007fc: DUP1
000007fd: REVERT
000007fe: JUMPDEST
000007ff: POP
00000800: RETURNDATASIZE
00000801: PUSH2 0x07d8
00000804: JUMP
00000805: JUMPDEST
00000806: DUP5
00000807: MLOAD
00000808: RETURNDATASIZE
00000809: PUSH1 0x00
0000080b: DUP3
0000080c: RETURNDATACOPY
0000080d: RETURNDATASIZE
0000080e: SWAP1
0000080f: REVERT
00000810: JUMPDEST
00000811: POP
00000812: POP
00000813: POP
00000814: POP
00000815: JUMP
00000816: JUMPDEST
00000817: PUSH1 0x11
00000819: DUP4
0000081a: PUSH4 0x4e487b71
0000081f: PUSH1 0xe0
00000821: SHL
00000822: PUSH1 0x00
00000824: MSTORE
00000825: MSTORE
00000826: PUSH1 0x24
00000828: PUSH1 0x00
0000082a: REVERT
0000082b: JUMPDEST
0000082c: PUSH1 0x64
0000082e: SWAP3
0000082f: MLOAD
00000830: SWAP2
00000831: PUSH3 0x461bcd
00000835: PUSH1 0xe5
00000837: SHL
00000838: DUP4
00000839: MSTORE
0000083a: DUP3
0000083b: ADD
0000083c: MSTORE
0000083d: PUSH1 0x13
0000083f: PUSH1 0x24
00000841: DUP3
00000842: ADD
00000843: MSTORE
00000844: PUSH19 0x086d8c2d2da40744092dcecc2d8d2c840dac2f
00000858: PUSH1 0x6b
0000085a: SHL
0000085b: PUSH1 0x44
0000085d: DUP3
0000085e: ADD
0000085f: MSTORE
00000860: REVERT
00000861: JUMPDEST
00000862: PUSH1 0x64
00000864: SWAP2
00000865: MLOAD
00000866: SWAP1
00000867: PUSH3 0x461bcd
0000086b: PUSH1 0xe5
0000086d: SHL
0000086e: DUP3
0000086f: MSTORE
00000870: PUSH1 0x04
00000872: DUP3
00000873: ADD
00000874: MSTORE
00000875: PUSH1 0x15
00000877: PUSH1 0x24
00000879: DUP3
0000087a: ADD
0000087b: MSTORE
0000087c: PUSH21 0x21b630b4b6901d1024b73b30b634b210383937b7b3
00000892: PUSH1 0x59
00000894: SHL
00000895: PUSH1 0x44
00000897: DUP3
00000898: ADD
00000899: MSTORE
0000089a: REVERT
0000089b: JUMPDEST
0000089c: DUP3
0000089d: CALLDATALOAD
0000089e: DUP2
0000089f: MSTORE
000008a0: SWAP2
000008a1: DUP2
000008a2: ADD
000008a3: SWAP2
000008a4: DUP10
000008a5: SWAP2
000008a6: ADD
000008a7: PUSH2 0x069d
000008aa: JUMP
000008ab: JUMPDEST
000008ac: PUSH1 0x02
000008ae: PUSH1 0x01
000008b0: SLOAD
000008b1: EQ
000008b2: PUSH2 0x08bc
000008b5: JUMPI
000008b6: PUSH1 0x02
000008b8: PUSH1 0x01
000008ba: SSTORE
000008bb: JUMP
000008bc: JUMPDEST
000008bd: PUSH1 0x40
000008bf: MLOAD
000008c0: PUSH4 0x3ee5aeb5
000008c5: PUSH1 0xe0
000008c7: SHL
000008c8: DUP2
000008c9: MSTORE
000008ca: PUSH1 0x04
000008cc: SWAP1
000008cd: REVERT
000008ce: JUMPDEST
000008cf: PUSH1 0x00
000008d1: SLOAD
000008d2: PUSH1 0x01
000008d4: PUSH1 0x01
000008d6: PUSH1 0xa0
000008d8: SHL
000008d9: SUB
000008da: AND
000008db: CALLER
000008dc: SUB
000008dd: PUSH2 0x08e2
000008e0: JUMPI
000008e1: JUMP
000008e2: JUMPDEST
000008e3: PUSH1 0x40
000008e5: MLOAD
000008e6: PUSH4 0x118cdaa7
000008eb: PUSH1 0xe0
000008ed: SHL
000008ee: DUP2
000008ef: MSTORE
000008f0: CALLER
000008f1: PUSH1 0x04
000008f3: DUP3
000008f4: ADD
000008f5: MSTORE
000008f6: PUSH1 0x24
000008f8: SWAP1
000008f9: REVERT
000008fa: INVALID
000008fb: LOG2
000008fc: PUSH5 0x6970667358
00000902: UNKNOWN(0x22)
00000903: SLT
00000904: KECCAK256
00000905: CALLDATASIZE
00000906: UNKNOWN(0xAA)
00000907: PUSH2 0xfa36
0000090a: DUP9
0000090b: UNKNOWN(0xBA)
0000090c: UNKNOWN(0x26)
0000090d: CREATE2
0000090e: UNKNOWN(0xCC)
0000090f: DUP7
00000910: PUSH11 0xde08615e836e77dc97b95d
0000091c: UNKNOWN(0xAC)
0000091d: SIGNEXTEND
0000091e: LOG1
0000091f: RETURN
00000920: RETURNDATACOPY
00000921: UNKNOWN(0xA9)
00000922: UNKNOWN(0xCC)
00000923: DUP7
00000924: SLT
00000925: PUSH5 0x736f6c6343
0000092b: STOP
0000092c: ADDMOD
0000092d: OR
0000092e: STOP
0000092f: CALLER

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0xb79b38d9f83d6160691fc03e46eb9cf3c74e28483b715d5a454ed3ca60a0d8ee call_targets: 0x9eb1124772cbaa5d52c7e532603c79291584b06a target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xb79b38d9f83d6160691fc03e46eb9cf3c74e28483b715d5a454ed3ca60a0d8ee", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x9eb1124772cbaa5d52c7e532603c79291584b06a" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x2f52ebb7", "selector": "0x2f52ebb7", "calldata_variants": [ "0x2f52ebb7", "0x2f52ebb70000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x690d8320", "selector": "0x690d8320", "calldata_variants": [ "0x690d8320", "0x690d83200000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa37be75f", "selector": "0xa37be75f", "calldata_variants": [ "0xa37be75f", "0xa37be75f0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xb61daaee", "selector": "0xb61daaee", "calldata_variants": [ "0xb61daaee", "0xb61daaee0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xc884ef83", "selector": "0xc884ef83", "calldata_variants": [ "0xc884ef83", "0xc884ef830000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd1af0c7d", "selector": "0xd1af0c7d", "calldata_variants": [ "0xd1af0c7d", "0xd1af0c7d0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 361, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1178, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1892, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 4, "guards_detected": [], "untrusted_call_count": 4 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0xb79b38d9f83d6160691fc03e46eb9cf3c74e28483b715d5a454ed3ca60a0d8ee call_targets: 0x9eb1124772cbaa5d52c7e532603c79291584b06a target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xb79b38d9f83d6160691fc03e46eb9cf3c74e28483b715d5a454ed3ca60a0d8ee", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x9eb1124772cbaa5d52c7e532603c79291584b06a" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x2f52ebb7", "selector": "0x2f52ebb7", "calldata_variants": [ "0x2f52ebb7", "0x2f52ebb70000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x690d8320", "selector": "0x690d8320", "calldata_variants": [ "0x690d8320", "0x690d83200000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa37be75f", "selector": "0xa37be75f", "calldata_variants": [ "0xa37be75f", "0xa37be75f0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xb61daaee", "selector": "0xb61daaee", "calldata_variants": [ "0xb61daaee", "0xb61daaee0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xc884ef83", "selector": "0xc884ef83", "calldata_variants": [ "0xc884ef83", "0xc884ef830000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd1af0c7d", "selector": "0xd1af0c7d", "calldata_variants": [ "0xd1af0c7d", "0xd1af0c7d0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 361, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1178, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1892, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 4, "guards_detected": [] }
medium	other	detector	CREATE/CREATE2 reachable	45	no	no	view trace_id: 0x25b1705ed0b44edc02c7d5470a3770db2bcc470214a0274dba236bdac1f8dff6 validation_json { "sink": "CREATE", "errors": 0, "status": "unknown", "attempts": 28, "trace_id": "0x25b1705ed0b44edc02c7d5470a3770db2bcc470214a0274dba236bdac1f8dff6", "confirmed": false, "trace_mode": "structLogs", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x2f52ebb7", "selector": "0x2f52ebb7", "calldata_variants": [ "0x2f52ebb7", "0x2f52ebb70000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x690d8320", "selector": "0x690d8320", "calldata_variants": [ "0x690d8320", "0x690d83200000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa37be75f", "selector": "0xa37be75f", "calldata_variants": [ "0xa37be75f", "0xa37be75f0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xb61daaee", "selector": "0xb61daaee", "calldata_variants": [ "0xb61daaee", "0xb61daaee0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xc884ef83", "selector": "0xc884ef83", "calldata_variants": [ "0xc884ef83", "0xc884ef830000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd1af0c7d", "selector": "0xd1af0c7d", "calldata_variants": [ "0xd1af0c7d", "0xd1af0c7d0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "create_count": 0, "create2_count": 1 }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0xb79b38d9f83d6160691fc03e46eb9cf3c74e28483b715d5a454ed3ca60a0d8ee

call_targets: 0x9eb1124772cbaa5d52c7e532603c79291584b06a

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xb79b38d9f83d6160691fc03e46eb9cf3c74e28483b715d5a454ed3ca60a0d8ee",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x9eb1124772cbaa5d52c7e532603c79291584b06a"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2f52ebb7",
            "selector": "0x2f52ebb7",
            "calldata_variants": [
                "0x2f52ebb7",
                "0x2f52ebb70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x690d8320",
            "selector": "0x690d8320",
            "calldata_variants": [
                "0x690d8320",
                "0x690d83200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x715018a6",
            "selector": "0x715018a6",
            "calldata_variants": [
                "0x715018a6",
                "0x715018a60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa37be75f",
            "selector": "0xa37be75f",
            "calldata_variants": [
                "0xa37be75f",
                "0xa37be75f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb61daaee",
            "selector": "0xb61daaee",
            "calldata_variants": [
                "0xb61daaee",
                "0xb61daaee0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc884ef83",
            "selector": "0xc884ef83",
            "calldata_variants": [
                "0xc884ef83",
                "0xc884ef830000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd1af0c7d",
            "selector": "0xd1af0c7d",
            "calldata_variants": [
                "0xd1af0c7d",
                "0xd1af0c7d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 361,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1178,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1892,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 4,
    "guards_detected": [],
    "untrusted_call_count": 4
}

high

other

detector

ETH value transfer possible

55

no

view

trace_id: 0xb79b38d9f83d6160691fc03e46eb9cf3c74e28483b715d5a454ed3ca60a0d8ee

call_targets: 0x9eb1124772cbaa5d52c7e532603c79291584b06a

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xb79b38d9f83d6160691fc03e46eb9cf3c74e28483b715d5a454ed3ca60a0d8ee",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x9eb1124772cbaa5d52c7e532603c79291584b06a"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2f52ebb7",
            "selector": "0x2f52ebb7",
            "calldata_variants": [
                "0x2f52ebb7",
                "0x2f52ebb70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x690d8320",
            "selector": "0x690d8320",
            "calldata_variants": [
                "0x690d8320",
                "0x690d83200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x715018a6",
            "selector": "0x715018a6",
            "calldata_variants": [
                "0x715018a6",
                "0x715018a60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa37be75f",
            "selector": "0xa37be75f",
            "calldata_variants": [
                "0xa37be75f",
                "0xa37be75f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb61daaee",
            "selector": "0xb61daaee",
            "calldata_variants": [
                "0xb61daaee",
                "0xb61daaee0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc884ef83",
            "selector": "0xc884ef83",
            "calldata_variants": [
                "0xc884ef83",
                "0xc884ef830000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd1af0c7d",
            "selector": "0xd1af0c7d",
            "calldata_variants": [
                "0xd1af0c7d",
                "0xd1af0c7d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 361,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1178,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1892,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 4,
    "guards_detected": []
}

medium

other

detector

CREATE/CREATE2 reachable

45

no

view

trace_id: 0x25b1705ed0b44edc02c7d5470a3770db2bcc470214a0274dba236bdac1f8dff6

validation_json

{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 28,
    "trace_id": "0x25b1705ed0b44edc02c7d5470a3770db2bcc470214a0274dba236bdac1f8dff6",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2f52ebb7",
            "selector": "0x2f52ebb7",
            "calldata_variants": [
                "0x2f52ebb7",
                "0x2f52ebb70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x690d8320",
            "selector": "0x690d8320",
            "calldata_variants": [
                "0x690d8320",
                "0x690d83200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x715018a6",
            "selector": "0x715018a6",
            "calldata_variants": [
                "0x715018a6",
                "0x715018a60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa37be75f",
            "selector": "0xa37be75f",
            "calldata_variants": [
                "0xa37be75f",
                "0xa37be75f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb61daaee",
            "selector": "0xb61daaee",
            "calldata_variants": [
                "0xb61daaee",
                "0xb61daaee0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc884ef83",
            "selector": "0xc884ef83",
            "calldata_variants": [
                "0xc884ef83",
                "0xc884ef830000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd1af0c7d",
            "selector": "0xd1af0c7d",
            "calldata_variants": [
                "0xd1af0c7d",
                "0xd1af0c7d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "create_count": 0,
    "create2_count": 1
}