019b3844-b53e-7001-9b45-08b2f6c03111
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 19069 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 19070 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 87649 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 87650 | capability.graph | complete | 1 / 3 | 1 week ago |
| 87651 | detector.run | complete | 1 / 3 | 1 week ago |
| 87652 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: CALLDATASIZE 00000001: RETURNDATASIZE 00000002: RETURNDATASIZE 00000003: CALLDATACOPY 00000004: RETURNDATASIZE 00000005: RETURNDATASIZE 00000006: CALLDATASIZE 00000007: RETURNDATASIZE 00000008: PUSH1 0x20 0000000a: CALLDATASIZE 0000000b: PUSH1 0x04 0000000d: CALLDATASIZE 0000000e: PUSH4 0x5c60da1b 00000013: PUSH1 0xe0 00000015: SHL 00000016: CALLDATASIZE 00000017: MSTORE 00000018: PUSH32 0xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50 00000039: SLOAD 0000003a: GAS 0000003b: STATICCALL 0000003c: POP 0000003d: CALLDATASIZE 0000003e: MLOAD 0000003f: GAS 00000040: DELEGATECALL 00000041: RETURNDATASIZE 00000042: PUSH1 0x00 00000044: DUP1 00000045: RETURNDATACOPY 00000046: PUSH1 0x4d 00000048: JUMPI 00000049: RETURNDATASIZE 0000004a: PUSH1 0x00 0000004c: REVERT 0000004d: JUMPDEST 0000004e: RETURNDATASIZE 0000004f: PUSH1 0x00 00000051: RETURN
Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0xbbb9f49e406da6bc59c4836494456489c3c9ea08f49727378009832e682c09d8
call_targets:
0xe5a320ac6a685e3ef7076e34d968984cb1896c04
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xbbb9f49e406da6bc59c4836494456489c3c9ea08f49727378009832e682c09d8",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xe5a320ac6a685e3ef7076e34d968984cb1896c04"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 64,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 1,
"untrusted_delegatecall_count": 1
}
|