Analysis Run

019b3844-b795-7076-9dbb-0374e155fd9d

complete

Chain ID

1

Address

0x61c4b51f9388a2dd62c791341f0d50ad88d64fd4

Block Number

—

Created

Fri, Dec 19, 2025 8:19 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
19503	artifact.fetch	complete	1 / 3	3 months ago
19504	tool.cast_disasm	complete	1 / 3	3 months ago
109958	analysis.bundle	complete	1 / 3	1 week ago
109959	capability.graph	complete	1 / 3	1 week ago
109960	detector.run	complete	1 / 3	1 week ago
109961	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

2

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

0

EXT*/BALANCE

3

Total opcodes

1140

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x005e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x5c60da1b
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x5c60da1b
00000024: EQ
00000025: PUSH2 0x00a8
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8f283970
0000002f: EQ
00000030: PUSH2 0x00d9
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf851a440
0000003a: EQ
0000003b: PUSH2 0x00f9
0000003e: JUMPI
0000003f: PUSH2 0x006d
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x3659cfe6
0000004a: EQ
0000004b: PUSH2 0x0075
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x4f1ef286
00000055: EQ
00000056: PUSH2 0x0095
00000059: JUMPI
0000005a: PUSH2 0x006d
0000005d: JUMP
0000005e: JUMPDEST
0000005f: CALLDATASIZE
00000060: PUSH2 0x006d
00000063: JUMPI
00000064: PUSH2 0x006b
00000067: PUSH2 0x010e
0000006a: JUMP
0000006b: JUMPDEST
0000006c: STOP
0000006d: JUMPDEST
0000006e: PUSH2 0x006b
00000071: PUSH2 0x010e
00000074: JUMP
00000075: JUMPDEST
00000076: CALLVALUE
00000077: DUP1
00000078: ISZERO
00000079: PUSH2 0x0081
0000007c: JUMPI
0000007d: PUSH1 0x00
0000007f: DUP1
00000080: REVERT
00000081: JUMPDEST
00000082: POP
00000083: PUSH2 0x006b
00000086: PUSH2 0x0090
00000089: CALLDATASIZE
0000008a: PUSH1 0x04
0000008c: PUSH2 0x0736
0000008f: JUMP
00000090: JUMPDEST
00000091: PUSH2 0x0128
00000094: JUMP
00000095: JUMPDEST
00000096: PUSH2 0x006b
00000099: PUSH2 0x00a3
0000009c: CALLDATASIZE
0000009d: PUSH1 0x04
0000009f: PUSH2 0x0751
000000a2: JUMP
000000a3: JUMPDEST
000000a4: PUSH2 0x0165
000000a7: JUMP
000000a8: JUMPDEST
000000a9: CALLVALUE
000000aa: DUP1
000000ab: ISZERO
000000ac: PUSH2 0x00b4
000000af: JUMPI
000000b0: PUSH1 0x00
000000b2: DUP1
000000b3: REVERT
000000b4: JUMPDEST
000000b5: POP
000000b6: PUSH2 0x00bd
000000b9: PUSH2 0x01cc
000000bc: JUMP
000000bd: JUMPDEST
000000be: PUSH1 0x40
000000c0: MLOAD
000000c1: PUSH1 0x01
000000c3: PUSH1 0x01
000000c5: PUSH1 0xa0
000000c7: SHL
000000c8: SUB
000000c9: SWAP1
000000ca: SWAP2
000000cb: AND
000000cc: DUP2
000000cd: MSTORE
000000ce: PUSH1 0x20
000000d0: ADD
000000d1: PUSH1 0x40
000000d3: MLOAD
000000d4: DUP1
000000d5: SWAP2
000000d6: SUB
000000d7: SWAP1
000000d8: RETURN
000000d9: JUMPDEST
000000da: CALLVALUE
000000db: DUP1
000000dc: ISZERO
000000dd: PUSH2 0x00e5
000000e0: JUMPI
000000e1: PUSH1 0x00
000000e3: DUP1
000000e4: REVERT
000000e5: JUMPDEST
000000e6: POP
000000e7: PUSH2 0x006b
000000ea: PUSH2 0x00f4
000000ed: CALLDATASIZE
000000ee: PUSH1 0x04
000000f0: PUSH2 0x0736
000000f3: JUMP
000000f4: JUMPDEST
000000f5: PUSH2 0x01fd
000000f8: JUMP
000000f9: JUMPDEST
000000fa: CALLVALUE
000000fb: DUP1
000000fc: ISZERO
000000fd: PUSH2 0x0105
00000100: JUMPI
00000101: PUSH1 0x00
00000103: DUP1
00000104: REVERT
00000105: JUMPDEST
00000106: POP
00000107: PUSH2 0x00bd
0000010a: PUSH2 0x021d
0000010d: JUMP
0000010e: JUMPDEST
0000010f: PUSH2 0x0116
00000112: PUSH2 0x0279
00000115: JUMP
00000116: JUMPDEST
00000117: PUSH2 0x0126
0000011a: PUSH2 0x0121
0000011d: PUSH2 0x0329
00000120: JUMP
00000121: JUMPDEST
00000122: PUSH2 0x0333
00000125: JUMP
00000126: JUMPDEST
00000127: JUMP
00000128: JUMPDEST
00000129: PUSH2 0x0130
0000012c: PUSH2 0x0357
0000012f: JUMP
00000130: JUMPDEST
00000131: PUSH1 0x01
00000133: PUSH1 0x01
00000135: PUSH1 0xa0
00000137: SHL
00000138: SUB
00000139: AND
0000013a: CALLER
0000013b: SUB
0000013c: PUSH2 0x015d
0000013f: JUMPI
00000140: PUSH2 0x015a
00000143: DUP2
00000144: PUSH1 0x40
00000146: MLOAD
00000147: DUP1
00000148: PUSH1 0x20
0000014a: ADD
0000014b: PUSH1 0x40
0000014d: MSTORE
0000014e: DUP1
0000014f: PUSH1 0x00
00000151: DUP2
00000152: MSTORE
00000153: POP
00000154: PUSH1 0x00
00000156: PUSH2 0x038a
00000159: JUMP
0000015a: JUMPDEST
0000015b: POP
0000015c: JUMP
0000015d: JUMPDEST
0000015e: PUSH2 0x015a
00000161: PUSH2 0x010e
00000164: JUMP
00000165: JUMPDEST
00000166: PUSH2 0x016d
00000169: PUSH2 0x0357
0000016c: JUMP
0000016d: JUMPDEST
0000016e: PUSH1 0x01
00000170: PUSH1 0x01
00000172: PUSH1 0xa0
00000174: SHL
00000175: SUB
00000176: AND
00000177: CALLER
00000178: SUB
00000179: PUSH2 0x01c4
0000017c: JUMPI
0000017d: PUSH2 0x01bf
00000180: DUP4
00000181: DUP4
00000182: DUP4
00000183: DUP1
00000184: DUP1
00000185: PUSH1 0x1f
00000187: ADD
00000188: PUSH1 0x20
0000018a: DUP1
0000018b: SWAP2
0000018c: DIV
0000018d: MUL
0000018e: PUSH1 0x20
00000190: ADD
00000191: PUSH1 0x40
00000193: MLOAD
00000194: SWAP1
00000195: DUP2
00000196: ADD
00000197: PUSH1 0x40
00000199: MSTORE
0000019a: DUP1
0000019b: SWAP4
0000019c: SWAP3
0000019d: SWAP2
0000019e: SWAP1
0000019f: DUP2
000001a0: DUP2
000001a1: MSTORE
000001a2: PUSH1 0x20
000001a4: ADD
000001a5: DUP4
000001a6: DUP4
000001a7: DUP1
000001a8: DUP3
000001a9: DUP5
000001aa: CALLDATACOPY
000001ab: PUSH1 0x00
000001ad: SWAP3
000001ae: ADD
000001af: SWAP2
000001b0: SWAP1
000001b1: SWAP2
000001b2: MSTORE
000001b3: POP
000001b4: PUSH1 0x01
000001b6: SWAP3
000001b7: POP
000001b8: PUSH2 0x038a
000001bb: SWAP2
000001bc: POP
000001bd: POP
000001be: JUMP
000001bf: JUMPDEST
000001c0: POP
000001c1: POP
000001c2: POP
000001c3: JUMP
000001c4: JUMPDEST
000001c5: PUSH2 0x01bf
000001c8: PUSH2 0x010e
000001cb: JUMP
000001cc: JUMPDEST
000001cd: PUSH1 0x00
000001cf: PUSH2 0x01d6
000001d2: PUSH2 0x0357
000001d5: JUMP
000001d6: JUMPDEST
000001d7: PUSH1 0x01
000001d9: PUSH1 0x01
000001db: PUSH1 0xa0
000001dd: SHL
000001de: SUB
000001df: AND
000001e0: CALLER
000001e1: SUB
000001e2: PUSH2 0x01f2
000001e5: JUMPI
000001e6: PUSH2 0x01ed
000001e9: PUSH2 0x0329
000001ec: JUMP
000001ed: JUMPDEST
000001ee: SWAP1
000001ef: POP
000001f0: SWAP1
000001f1: JUMP
000001f2: JUMPDEST
000001f3: PUSH2 0x01fa
000001f6: PUSH2 0x010e
000001f9: JUMP
000001fa: JUMPDEST
000001fb: SWAP1
000001fc: JUMP
000001fd: JUMPDEST
000001fe: PUSH2 0x0205
00000201: PUSH2 0x0357
00000204: JUMP
00000205: JUMPDEST
00000206: PUSH1 0x01
00000208: PUSH1 0x01
0000020a: PUSH1 0xa0
0000020c: SHL
0000020d: SUB
0000020e: AND
0000020f: CALLER
00000210: SUB
00000211: PUSH2 0x015d
00000214: JUMPI
00000215: PUSH2 0x015a
00000218: DUP2
00000219: PUSH2 0x03b5
0000021c: JUMP
0000021d: JUMPDEST
0000021e: PUSH1 0x00
00000220: PUSH2 0x0227
00000223: PUSH2 0x0357
00000226: JUMP
00000227: JUMPDEST
00000228: PUSH1 0x01
0000022a: PUSH1 0x01
0000022c: PUSH1 0xa0
0000022e: SHL
0000022f: SUB
00000230: AND
00000231: CALLER
00000232: SUB
00000233: PUSH2 0x01f2
00000236: JUMPI
00000237: PUSH2 0x01ed
0000023a: PUSH2 0x0357
0000023d: JUMP
0000023e: JUMPDEST
0000023f: PUSH1 0x60
00000241: PUSH2 0x0263
00000244: DUP4
00000245: DUP4
00000246: PUSH1 0x40
00000248: MLOAD
00000249: DUP1
0000024a: PUSH1 0x60
0000024c: ADD
0000024d: PUSH1 0x40
0000024f: MSTORE
00000250: DUP1
00000251: PUSH1 0x27
00000253: DUP2
00000254: MSTORE
00000255: PUSH1 0x20
00000257: ADD
00000258: PUSH2 0x0866
0000025b: PUSH1 0x27
0000025d: SWAP2
0000025e: CODECOPY
0000025f: PUSH2 0x0409
00000262: JUMP
00000263: JUMPDEST
00000264: SWAP4
00000265: SWAP3
00000266: POP
00000267: POP
00000268: POP
00000269: JUMP
0000026a: JUMPDEST
0000026b: PUSH1 0x01
0000026d: PUSH1 0x01
0000026f: PUSH1 0xa0
00000271: SHL
00000272: SUB
00000273: AND
00000274: EXTCODESIZE
00000275: ISZERO
00000276: ISZERO
00000277: SWAP1
00000278: JUMP
00000279: JUMPDEST
0000027a: PUSH2 0x0281
0000027d: PUSH2 0x0357
00000280: JUMP
00000281: JUMPDEST
00000282: PUSH1 0x01
00000284: PUSH1 0x01
00000286: PUSH1 0xa0
00000288: SHL
00000289: SUB
0000028a: AND
0000028b: CALLER
0000028c: SUB
0000028d: PUSH2 0x0126
00000290: JUMPI
00000291: PUSH1 0x40
00000293: MLOAD
00000294: PUSH3 0x461bcd
00000298: PUSH1 0xe5
0000029a: SHL
0000029b: DUP2
0000029c: MSTORE
0000029d: PUSH1 0x20
0000029f: PUSH1 0x04
000002a1: DUP3
000002a2: ADD
000002a3: MSTORE
000002a4: PUSH1 0x42
000002a6: PUSH1 0x24
000002a8: DUP3
000002a9: ADD
000002aa: MSTORE
000002ab: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
000002cc: PUSH1 0x44
000002ce: DUP3
000002cf: ADD
000002d0: MSTORE
000002d1: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
000002f2: PUSH1 0x64
000002f4: DUP3
000002f5: ADD
000002f6: MSTORE
000002f7: PUSH32 0x6574000000000000000000000000000000000000000000000000000000000000
00000318: PUSH1 0x84
0000031a: DUP3
0000031b: ADD
0000031c: MSTORE
0000031d: PUSH1 0xa4
0000031f: ADD
00000320: JUMPDEST
00000321: PUSH1 0x40
00000323: MLOAD
00000324: DUP1
00000325: SWAP2
00000326: SUB
00000327: SWAP1
00000328: REVERT
00000329: JUMPDEST
0000032a: PUSH1 0x00
0000032c: PUSH2 0x01ed
0000032f: PUSH2 0x04fd
00000332: JUMP
00000333: JUMPDEST
00000334: CALLDATASIZE
00000335: PUSH1 0x00
00000337: DUP1
00000338: CALLDATACOPY
00000339: PUSH1 0x00
0000033b: DUP1
0000033c: CALLDATASIZE
0000033d: PUSH1 0x00
0000033f: DUP5
00000340: GAS
00000341: DELEGATECALL
00000342: RETURNDATASIZE
00000343: PUSH1 0x00
00000345: DUP1
00000346: RETURNDATACOPY
00000347: DUP1
00000348: DUP1
00000349: ISZERO
0000034a: PUSH2 0x0352
0000034d: JUMPI
0000034e: RETURNDATASIZE
0000034f: PUSH1 0x00
00000351: RETURN
00000352: JUMPDEST
00000353: RETURNDATASIZE
00000354: PUSH1 0x00
00000356: REVERT
00000357: JUMPDEST
00000358: PUSH1 0x00
0000035a: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000037b: JUMPDEST
0000037c: SLOAD
0000037d: PUSH1 0x01
0000037f: PUSH1 0x01
00000381: PUSH1 0xa0
00000383: SHL
00000384: SUB
00000385: AND
00000386: SWAP2
00000387: SWAP1
00000388: POP
00000389: JUMP
0000038a: JUMPDEST
0000038b: PUSH2 0x0393
0000038e: DUP4
0000038f: PUSH2 0x0525
00000392: JUMP
00000393: JUMPDEST
00000394: PUSH1 0x00
00000396: DUP3
00000397: MLOAD
00000398: GT
00000399: DUP1
0000039a: PUSH2 0x03a0
0000039d: JUMPI
0000039e: POP
0000039f: DUP1
000003a0: JUMPDEST
000003a1: ISZERO
000003a2: PUSH2 0x01bf
000003a5: JUMPI
000003a6: PUSH2 0x03af
000003a9: DUP4
000003aa: DUP4
000003ab: PUSH2 0x023e
000003ae: JUMP
000003af: JUMPDEST
000003b0: POP
000003b1: POP
000003b2: POP
000003b3: POP
000003b4: JUMP
000003b5: JUMPDEST
000003b6: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
000003d7: PUSH2 0x03de
000003da: PUSH2 0x0357
000003dd: JUMP
000003de: JUMPDEST
000003df: PUSH1 0x40
000003e1: DUP1
000003e2: MLOAD
000003e3: PUSH1 0x01
000003e5: PUSH1 0x01
000003e7: PUSH1 0xa0
000003e9: SHL
000003ea: SUB
000003eb: SWAP3
000003ec: DUP4
000003ed: AND
000003ee: DUP2
000003ef: MSTORE
000003f0: SWAP2
000003f1: DUP5
000003f2: AND
000003f3: PUSH1 0x20
000003f5: DUP4
000003f6: ADD
000003f7: MSTORE
000003f8: ADD
000003f9: PUSH1 0x40
000003fb: MLOAD
000003fc: DUP1
000003fd: SWAP2
000003fe: SUB
000003ff: SWAP1
00000400: LOG1
00000401: PUSH2 0x015a
00000404: DUP2
00000405: PUSH2 0x0565
00000408: JUMP
00000409: JUMPDEST
0000040a: PUSH1 0x60
0000040c: PUSH1 0x01
0000040e: PUSH1 0x01
00000410: PUSH1 0xa0
00000412: SHL
00000413: SUB
00000414: DUP5
00000415: AND
00000416: EXTCODESIZE
00000417: PUSH2 0x0488
0000041a: JUMPI
0000041b: PUSH1 0x40
0000041d: MLOAD
0000041e: PUSH3 0x461bcd
00000422: PUSH1 0xe5
00000424: SHL
00000425: DUP2
00000426: MSTORE
00000427: PUSH1 0x20
00000429: PUSH1 0x04
0000042b: DUP3
0000042c: ADD
0000042d: MSTORE
0000042e: PUSH1 0x26
00000430: PUSH1 0x24
00000432: DUP3
00000433: ADD
00000434: MSTORE
00000435: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f
00000456: PUSH1 0x44
00000458: DUP3
00000459: ADD
0000045a: MSTORE
0000045b: PUSH32 0x6e74726163740000000000000000000000000000000000000000000000000000
0000047c: PUSH1 0x64
0000047e: DUP3
0000047f: ADD
00000480: MSTORE
00000481: PUSH1 0x84
00000483: ADD
00000484: PUSH2 0x0320
00000487: JUMP
00000488: JUMPDEST
00000489: PUSH1 0x00
0000048b: DUP1
0000048c: DUP6
0000048d: PUSH1 0x01
0000048f: PUSH1 0x01
00000491: PUSH1 0xa0
00000493: SHL
00000494: SUB
00000495: AND
00000496: DUP6
00000497: PUSH1 0x40
00000499: MLOAD
0000049a: PUSH2 0x04a3
0000049d: SWAP2
0000049e: SWAP1
0000049f: PUSH2 0x07f8
000004a2: JUMP
000004a3: JUMPDEST
000004a4: PUSH1 0x00
000004a6: PUSH1 0x40
000004a8: MLOAD
000004a9: DUP1
000004aa: DUP4
000004ab: SUB
000004ac: DUP2
000004ad: DUP6
000004ae: GAS
000004af: DELEGATECALL
000004b0: SWAP2
000004b1: POP
000004b2: POP
000004b3: RETURNDATASIZE
000004b4: DUP1
000004b5: PUSH1 0x00
000004b7: DUP2
000004b8: EQ
000004b9: PUSH2 0x04de
000004bc: JUMPI
000004bd: PUSH1 0x40
000004bf: MLOAD
000004c0: SWAP2
000004c1: POP
000004c2: PUSH1 0x1f
000004c4: NOT
000004c5: PUSH1 0x3f
000004c7: RETURNDATASIZE
000004c8: ADD
000004c9: AND
000004ca: DUP3
000004cb: ADD
000004cc: PUSH1 0x40
000004ce: MSTORE
000004cf: RETURNDATASIZE
000004d0: DUP3
000004d1: MSTORE
000004d2: RETURNDATASIZE
000004d3: PUSH1 0x00
000004d5: PUSH1 0x20
000004d7: DUP5
000004d8: ADD
000004d9: RETURNDATACOPY
000004da: PUSH2 0x04e3
000004dd: JUMP
000004de: JUMPDEST
000004df: PUSH1 0x60
000004e1: SWAP2
000004e2: POP
000004e3: JUMPDEST
000004e4: POP
000004e5: SWAP2
000004e6: POP
000004e7: SWAP2
000004e8: POP
000004e9: PUSH2 0x04f3
000004ec: DUP3
000004ed: DUP3
000004ee: DUP7
000004ef: PUSH2 0x063d
000004f2: JUMP
000004f3: JUMPDEST
000004f4: SWAP7
000004f5: SWAP6
000004f6: POP
000004f7: POP
000004f8: POP
000004f9: POP
000004fa: POP
000004fb: POP
000004fc: JUMP
000004fd: JUMPDEST
000004fe: PUSH1 0x00
00000500: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000521: PUSH2 0x037b
00000524: JUMP
00000525: JUMPDEST
00000526: PUSH2 0x052e
00000529: DUP2
0000052a: PUSH2 0x0676
0000052d: JUMP
0000052e: JUMPDEST
0000052f: PUSH1 0x40
00000531: MLOAD
00000532: PUSH1 0x01
00000534: PUSH1 0x01
00000536: PUSH1 0xa0
00000538: SHL
00000539: SUB
0000053a: DUP3
0000053b: AND
0000053c: SWAP1
0000053d: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
0000055e: SWAP1
0000055f: PUSH1 0x00
00000561: SWAP1
00000562: LOG2
00000563: POP
00000564: JUMP
00000565: JUMPDEST
00000566: PUSH1 0x01
00000568: PUSH1 0x01
0000056a: PUSH1 0xa0
0000056c: SHL
0000056d: SUB
0000056e: DUP2
0000056f: AND
00000570: PUSH2 0x05e1
00000573: JUMPI
00000574: PUSH1 0x40
00000576: MLOAD
00000577: PUSH3 0x461bcd
0000057b: PUSH1 0xe5
0000057d: SHL
0000057e: DUP2
0000057f: MSTORE
00000580: PUSH1 0x20
00000582: PUSH1 0x04
00000584: DUP3
00000585: ADD
00000586: MSTORE
00000587: PUSH1 0x26
00000589: PUSH1 0x24
0000058b: DUP3
0000058c: ADD
0000058d: MSTORE
0000058e: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
000005af: PUSH1 0x44
000005b1: DUP3
000005b2: ADD
000005b3: MSTORE
000005b4: PUSH32 0x6464726573730000000000000000000000000000000000000000000000000000
000005d5: PUSH1 0x64
000005d7: DUP3
000005d8: ADD
000005d9: MSTORE
000005da: PUSH1 0x84
000005dc: ADD
000005dd: PUSH2 0x0320
000005e0: JUMP
000005e1: JUMPDEST
000005e2: DUP1
000005e3: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000604: JUMPDEST
00000605: DUP1
00000606: SLOAD
00000607: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000
00000628: AND
00000629: PUSH1 0x01
0000062b: PUSH1 0x01
0000062d: PUSH1 0xa0
0000062f: SHL
00000630: SUB
00000631: SWAP3
00000632: SWAP1
00000633: SWAP3
00000634: AND
00000635: SWAP2
00000636: SWAP1
00000637: SWAP2
00000638: OR
00000639: SWAP1
0000063a: SSTORE
0000063b: POP
0000063c: JUMP
0000063d: JUMPDEST
0000063e: PUSH1 0x60
00000640: DUP4
00000641: ISZERO
00000642: PUSH2 0x064c
00000645: JUMPI
00000646: POP
00000647: DUP2
00000648: PUSH2 0x0263
0000064b: JUMP
0000064c: JUMPDEST
0000064d: DUP3
0000064e: MLOAD
0000064f: ISZERO
00000650: PUSH2 0x065c
00000653: JUMPI
00000654: DUP3
00000655: MLOAD
00000656: DUP1
00000657: DUP5
00000658: PUSH1 0x20
0000065a: ADD
0000065b: REVERT
0000065c: JUMPDEST
0000065d: DUP2
0000065e: PUSH1 0x40
00000660: MLOAD
00000661: PUSH3 0x461bcd
00000665: PUSH1 0xe5
00000667: SHL
00000668: DUP2
00000669: MSTORE
0000066a: PUSH1 0x04
0000066c: ADD
0000066d: PUSH2 0x0320
00000670: SWAP2
00000671: SWAP1
00000672: PUSH2 0x0814
00000675: JUMP
00000676: JUMPDEST
00000677: PUSH1 0x01
00000679: PUSH1 0x01
0000067b: PUSH1 0xa0
0000067d: SHL
0000067e: SUB
0000067f: DUP2
00000680: AND
00000681: EXTCODESIZE
00000682: PUSH2 0x06f3
00000685: JUMPI
00000686: PUSH1 0x40
00000688: MLOAD
00000689: PUSH3 0x461bcd
0000068d: PUSH1 0xe5
0000068f: SHL
00000690: DUP2
00000691: MSTORE
00000692: PUSH1 0x20
00000694: PUSH1 0x04
00000696: DUP3
00000697: ADD
00000698: MSTORE
00000699: PUSH1 0x2d
0000069b: PUSH1 0x24
0000069d: DUP3
0000069e: ADD
0000069f: MSTORE
000006a0: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
000006c1: PUSH1 0x44
000006c3: DUP3
000006c4: ADD
000006c5: MSTORE
000006c6: PUSH32 0x6f74206120636f6e747261637400000000000000000000000000000000000000
000006e7: PUSH1 0x64
000006e9: DUP3
000006ea: ADD
000006eb: MSTORE
000006ec: PUSH1 0x84
000006ee: ADD
000006ef: PUSH2 0x0320
000006f2: JUMP
000006f3: JUMPDEST
000006f4: DUP1
000006f5: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000716: PUSH2 0x0604
00000719: JUMP
0000071a: JUMPDEST
0000071b: DUP1
0000071c: CALLDATALOAD
0000071d: PUSH1 0x01
0000071f: PUSH1 0x01
00000721: PUSH1 0xa0
00000723: SHL
00000724: SUB
00000725: DUP2
00000726: AND
00000727: DUP2
00000728: EQ
00000729: PUSH2 0x0731
0000072c: JUMPI
0000072d: PUSH1 0x00
0000072f: DUP1
00000730: REVERT
00000731: JUMPDEST
00000732: SWAP2
00000733: SWAP1
00000734: POP
00000735: JUMP
00000736: JUMPDEST
00000737: PUSH1 0x00
00000739: PUSH1 0x20
0000073b: DUP3
0000073c: DUP5
0000073d: SUB
0000073e: SLT
0000073f: ISZERO
00000740: PUSH2 0x0748
00000743: JUMPI
00000744: PUSH1 0x00
00000746: DUP1
00000747: REVERT
00000748: JUMPDEST
00000749: PUSH2 0x0263
0000074c: DUP3
0000074d: PUSH2 0x071a
00000750: JUMP
00000751: JUMPDEST
00000752: PUSH1 0x00
00000754: DUP1
00000755: PUSH1 0x00
00000757: PUSH1 0x40
00000759: DUP5
0000075a: DUP7
0000075b: SUB
0000075c: SLT
0000075d: ISZERO
0000075e: PUSH2 0x0766
00000761: JUMPI
00000762: PUSH1 0x00
00000764: DUP1
00000765: REVERT
00000766: JUMPDEST
00000767: PUSH2 0x076f
0000076a: DUP5
0000076b: PUSH2 0x071a
0000076e: JUMP
0000076f: JUMPDEST
00000770: SWAP3
00000771: POP
00000772: PUSH1 0x20
00000774: DUP5
00000775: ADD
00000776: CALLDATALOAD
00000777: PUSH8 0xffffffffffffffff
00000780: DUP1
00000781: DUP3
00000782: GT
00000783: ISZERO
00000784: PUSH2 0x078c
00000787: JUMPI
00000788: PUSH1 0x00
0000078a: DUP1
0000078b: REVERT
0000078c: JUMPDEST
0000078d: DUP2
0000078e: DUP7
0000078f: ADD
00000790: SWAP2
00000791: POP
00000792: DUP7
00000793: PUSH1 0x1f
00000795: DUP4
00000796: ADD
00000797: SLT
00000798: PUSH2 0x07a0
0000079b: JUMPI
0000079c: PUSH1 0x00
0000079e: DUP1
0000079f: REVERT
000007a0: JUMPDEST
000007a1: DUP2
000007a2: CALLDATALOAD
000007a3: DUP2
000007a4: DUP2
000007a5: GT
000007a6: ISZERO
000007a7: PUSH2 0x07af
000007aa: JUMPI
000007ab: PUSH1 0x00
000007ad: DUP1
000007ae: REVERT
000007af: JUMPDEST
000007b0: DUP8
000007b1: PUSH1 0x20
000007b3: DUP3
000007b4: DUP6
000007b5: ADD
000007b6: ADD
000007b7: GT
000007b8: ISZERO
000007b9: PUSH2 0x07c1
000007bc: JUMPI
000007bd: PUSH1 0x00
000007bf: DUP1
000007c0: REVERT
000007c1: JUMPDEST
000007c2: PUSH1 0x20
000007c4: DUP4
000007c5: ADD
000007c6: SWAP5
000007c7: POP
000007c8: DUP1
000007c9: SWAP4
000007ca: POP
000007cb: POP
000007cc: POP
000007cd: POP
000007ce: SWAP3
000007cf: POP
000007d0: SWAP3
000007d1: POP
000007d2: SWAP3
000007d3: JUMP
000007d4: JUMPDEST
000007d5: PUSH1 0x00
000007d7: JUMPDEST
000007d8: DUP4
000007d9: DUP2
000007da: LT
000007db: ISZERO
000007dc: PUSH2 0x07ef
000007df: JUMPI
000007e0: DUP2
000007e1: DUP2
000007e2: ADD
000007e3: MLOAD
000007e4: DUP4
000007e5: DUP3
000007e6: ADD
000007e7: MSTORE
000007e8: PUSH1 0x20
000007ea: ADD
000007eb: PUSH2 0x07d7
000007ee: JUMP
000007ef: JUMPDEST
000007f0: POP
000007f1: POP
000007f2: PUSH1 0x00
000007f4: SWAP2
000007f5: ADD
000007f6: MSTORE
000007f7: JUMP
000007f8: JUMPDEST
000007f9: PUSH1 0x00
000007fb: DUP3
000007fc: MLOAD
000007fd: PUSH2 0x080a
00000800: DUP2
00000801: DUP5
00000802: PUSH1 0x20
00000804: DUP8
00000805: ADD
00000806: PUSH2 0x07d4
00000809: JUMP
0000080a: JUMPDEST
0000080b: SWAP2
0000080c: SWAP1
0000080d: SWAP2
0000080e: ADD
0000080f: SWAP3
00000810: SWAP2
00000811: POP
00000812: POP
00000813: JUMP
00000814: JUMPDEST
00000815: PUSH1 0x20
00000817: DUP2
00000818: MSTORE
00000819: PUSH1 0x00
0000081b: DUP3
0000081c: MLOAD
0000081d: DUP1
0000081e: PUSH1 0x20
00000820: DUP5
00000821: ADD
00000822: MSTORE
00000823: PUSH2 0x0833
00000826: DUP2
00000827: PUSH1 0x40
00000829: DUP6
0000082a: ADD
0000082b: PUSH1 0x20
0000082d: DUP8
0000082e: ADD
0000082f: PUSH2 0x07d4
00000832: JUMP
00000833: JUMPDEST
00000834: PUSH1 0x1f
00000836: ADD
00000837: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
00000858: AND
00000859: SWAP2
0000085a: SWAP1
0000085b: SWAP2
0000085c: ADD
0000085d: PUSH1 0x40
0000085f: ADD
00000860: SWAP3
00000861: SWAP2
00000862: POP
00000863: POP
00000864: JUMP
00000865: INVALID
00000866: COINBASE
00000867: PUSH5 0x6472657373
0000086d: GASPRICE
0000086e: KECCAK256
0000086f: PUSH13 0x6f772d6c6576656c2064656c65
0000087d: PUSH8 0x6174652063616c6c
00000886: KECCAK256
00000887: PUSH7 0x61696c6564a264
0000088f: PUSH10 0x70667358221220c1888b
0000089a: TIMESTAMP
0000089b: XOR
0000089c: CALLDATASIZE
0000089d: UNKNOWN(0xE4)
0000089e: PUSH20 0xbfc3e72d153dc5c76569ce769e37cfa444506490
000008b3: UNKNOWN(0xE1)
000008b4: TIMESTAMP
000008b5: UNKNOWN(0xDA)
000008b6: UNKNOWN(0xA5)
000008b7: PUSH5 0x736f6c6343
000008bd: STOP
000008be: ADDMOD
000008bf: GT
000008c0: STOP
000008c1: CALLER

View stderr

Warning: This is a nightly build of Foundry. It is recommended to use the latest stable version. To mute this warning set `FOUNDRY_DISABLE_NIGHTLY_WARNING` in your environment.

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0xe1a89fc38b1cdcb2c366e2d888163841359e2a2bd4d3a97da7a682b203cdb3b3 call_targets: 0x677ecf96dbfee1defbde8d2e905a39f73aa27b89 target_varies: no classification: constant_target validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xe1a89fc38b1cdcb2c366e2d888163841359e2a2bd4d3a97da7a682b203cdb3b3", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x677ecf96dbfee1defbde8d2e905a39f73aa27b89" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x5c60da1b", "selector": "0x5c60da1b", "calldata_variants": [ "0x5c60da1b", "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8f283970", "selector": "0x8f283970", "calldata_variants": [ "0x8f283970", "0x8f2839700000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf851a440", "selector": "0xf851a440", "calldata_variants": [ "0xf851a440", "0xf851a4400000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x3659cfe6", "selector": "0x3659cfe6", "calldata_variants": [ "0x3659cfe6", "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4f1ef286", "selector": "0x4f1ef286", "calldata_variants": [ "0x4f1ef286", "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 833, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1199, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 2, "untrusted_delegatecall_count": 2 }

Severity