019b477e-a6c1-73b8-abfd-fd9c67f8ccfc
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 20139 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 20140 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 63586 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 63587 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 63588 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 63589 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x001f 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x72ea4b8c 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x010c 0000001e: JUMPI 0000001f: JUMPDEST 00000020: PUSH2 0x011b 00000023: CALLVALUE 00000024: PUSH1 0x00 00000026: DUP1 00000027: DUP1 00000028: PUSH8 0x0de0b6b3a7640000 00000031: DUP5 00000032: LT 00000033: PUSH2 0x01d5 00000036: JUMPI 00000037: PUSH1 0x01 00000039: DUP1 0000003a: SLOAD 0000003b: DUP2 0000003c: ADD 0000003d: SWAP1 0000003e: DUP2 0000003f: SWAP1 00000040: SSTORE 00000041: PUSH1 0x03 00000043: DUP1 00000044: SLOAD 00000045: CALLER 00000046: SWAP3 00000047: SWAP1 00000048: DUP2 00000049: LT 0000004a: ISZERO 0000004b: PUSH2 0x0002 0000004e: JUMPI 0000004f: SWAP1 00000050: PUSH1 0x00 00000052: MSTORE 00000053: PUSH1 0x20 00000055: PUSH1 0x00 00000057: KECCAK256 00000058: SWAP1 00000059: ADD 0000005a: PUSH1 0x00 0000005c: PUSH2 0x0100 0000005f: EXP 00000060: DUP2 00000061: SLOAD 00000062: DUP2 00000063: PUSH1 0x01 00000065: PUSH1 0xa0 00000067: PUSH1 0x02 00000069: EXP 0000006a: SUB 0000006b: MUL 0000006c: NOT 0000006d: AND 0000006e: SWAP1 0000006f: DUP4 00000070: MUL 00000071: OR 00000072: SWAP1 00000073: SSTORE 00000074: POP 00000075: PUSH8 0x0de0b6b3a7640000 0000007e: DUP5 0000007f: SUB 00000080: SWAP4 00000081: POP 00000082: DUP4 00000083: POP 00000084: PUSH8 0x0de0b6b3a7640000 0000008d: PUSH1 0x00 0000008f: PUSH1 0x00 00000091: DUP3 00000092: DUP3 00000093: DUP3 00000094: POP 00000095: SLOAD 00000096: ADD 00000097: SWAP3 00000098: POP 00000099: POP 0000009a: DUP2 0000009b: SWAP1 0000009c: SSTORE 0000009d: POP 0000009e: PUSH1 0x02 000000a0: PUSH1 0x01 000000a2: PUSH1 0x00 000000a4: POP 000000a5: SLOAD 000000a6: GT 000000a7: ISZERO 000000a8: ISZERO 000000a9: PUSH2 0x011d 000000ac: JUMPI 000000ad: PUSH1 0x03 000000af: DUP1 000000b0: SLOAD 000000b1: DUP3 000000b2: SWAP1 000000b3: DUP2 000000b4: LT 000000b5: ISZERO 000000b6: PUSH2 0x0002 000000b9: JUMPI 000000ba: SWAP1 000000bb: PUSH1 0x00 000000bd: MSTORE 000000be: PUSH1 0x20 000000c0: PUSH1 0x00 000000c2: KECCAK256 000000c3: SWAP1 000000c4: ADD 000000c5: PUSH1 0x00 000000c7: SWAP1 000000c8: SLOAD 000000c9: SWAP1 000000ca: PUSH2 0x0100 000000cd: EXP 000000ce: SWAP1 000000cf: DIV 000000d0: PUSH1 0x01 000000d2: PUSH1 0xa0 000000d4: PUSH1 0x02 000000d6: EXP 000000d7: SUB 000000d8: AND 000000d9: PUSH1 0x01 000000db: PUSH1 0xa0 000000dd: PUSH1 0x02 000000df: EXP 000000e0: SUB 000000e1: AND 000000e2: PUSH1 0x00 000000e4: PUSH1 0x00 000000e6: PUSH1 0x00 000000e8: POP 000000e9: SLOAD 000000ea: PUSH1 0x40 000000ec: MLOAD 000000ed: DUP1 000000ee: SWAP1 000000ef: POP 000000f0: PUSH1 0x00 000000f2: PUSH1 0x40 000000f4: MLOAD 000000f5: DUP1 000000f6: DUP4 000000f7: SUB 000000f8: DUP2 000000f9: DUP6 000000fa: DUP9 000000fb: DUP9 000000fc: CALL 000000fd: POP 000000fe: POP 000000ff: POP 00000100: DUP1 00000101: SSTORE 00000102: POP 00000103: PUSH1 0x01 00000105: PUSH1 0x02 00000107: SSTORE 00000108: PUSH2 0x01d5 0000010b: JUMP 0000010c: JUMPDEST 0000010d: PUSH1 0x01 0000010f: DUP1 00000110: SLOAD 00000111: ADD 00000112: PUSH1 0x60 00000114: SWAP1 00000115: DUP2 00000116: MSTORE 00000117: PUSH1 0x20 00000119: SWAP1 0000011a: RETURN 0000011b: JUMPDEST 0000011c: STOP 0000011d: JUMPDEST 0000011e: PUSH1 0x01 00000120: DUP1 00000121: SLOAD 00000122: PUSH1 0x03 00000124: SLOAD 00000125: SWAP2 00000126: ADD 00000127: EQ 00000128: ISZERO 00000129: PUSH2 0x01d5 0000012c: JUMPI 0000012d: PUSH1 0x03 0000012f: DUP1 00000130: SLOAD 00000131: PUSH1 0x02 00000133: SLOAD 00000134: PUSH1 0x01 00000136: ADD 00000137: SWAP1 00000138: SWAP2 00000139: MUL 0000013a: SWAP1 0000013b: SUB 0000013c: SWAP3 0000013d: POP 0000013e: JUMPDEST 0000013f: PUSH1 0x03 00000141: SLOAD 00000142: PUSH1 0x02 00000144: SLOAD 00000145: SWAP1 00000146: SUB 00000147: PUSH1 0x01 00000149: NOT 0000014a: ADD 0000014b: DUP4 0000014c: LT 0000014d: ISZERO 0000014e: PUSH2 0x01e3 00000151: JUMPI 00000152: PUSH1 0x03 00000154: DUP1 00000155: SLOAD 00000156: DUP5 00000157: SWAP1 00000158: DUP2 00000159: LT 0000015a: ISZERO 0000015b: PUSH2 0x0002 0000015e: JUMPI 0000015f: SWAP1 00000160: DUP3 00000161: MSTORE 00000162: PUSH1 0x40 00000164: MLOAD 00000165: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85b 00000186: SWAP2 00000187: SWAP1 00000188: SWAP2 00000189: ADD 0000018a: SLOAD 0000018b: PUSH1 0x01 0000018d: PUSH1 0xa0 0000018f: PUSH1 0x02 00000191: EXP 00000192: SUB 00000193: AND 00000194: SWAP1 00000195: DUP3 00000196: SWAP1 00000197: PUSH8 0x06f05b59d3b20000 000001a0: SWAP1 000001a1: DUP3 000001a2: DUP2 000001a3: DUP2 000001a4: DUP2 000001a5: DUP6 000001a6: DUP9 000001a7: DUP4 000001a8: CALL 000001a9: POP 000001aa: POP 000001ab: SWAP1 000001ac: SLOAD 000001ad: PUSH8 0x06f05b59d3b1ffff 000001b6: NOT 000001b7: ADD 000001b8: DUP4 000001b9: SSTORE 000001ba: POP 000001bb: POP 000001bc: PUSH1 0x01 000001be: SWAP3 000001bf: SWAP1 000001c0: SWAP3 000001c1: ADD 000001c2: SWAP2 000001c3: PUSH2 0x013e 000001c6: JUMP 000001c7: JUMPDEST 000001c8: POP 000001c9: POP 000001ca: PUSH1 0x02 000001cc: DUP1 000001cd: SLOAD 000001ce: PUSH1 0x01 000001d0: ADD 000001d1: SWAP1 000001d2: SSTORE 000001d3: POP 000001d4: POP 000001d5: JUMPDEST 000001d6: PUSH1 0x00 000001d8: DUP1 000001d9: SLOAD 000001da: DUP6 000001db: ADD 000001dc: SWAP1 000001dd: SSTORE 000001de: POP 000001df: POP 000001e0: POP 000001e1: POP 000001e2: JUMP 000001e3: JUMPDEST 000001e4: POP 000001e5: PUSH1 0x02 000001e7: SLOAD 000001e8: DUP2 000001e9: SLOAD 000001ea: SWAP2 000001eb: SWAP3 000001ec: POP 000001ed: PUSH1 0x01 000001ef: SWAP1 000001f0: DUP2 000001f1: ADD 000001f2: SWAP1 000001f3: SWAP2 000001f4: DIV 000001f5: PUSH1 0x00 000001f7: NOT 000001f8: ADD 000001f9: SWAP1 000001fa: JUMPDEST 000001fb: PUSH1 0x03 000001fd: SLOAD 000001fe: PUSH1 0x02 00000200: SLOAD 00000201: SWAP1 00000202: SUB 00000203: PUSH1 0x01 00000205: NOT 00000206: ADD 00000207: DUP4 00000208: LT 00000209: ISZERO 0000020a: PUSH2 0x029a 0000020d: JUMPI 0000020e: PUSH1 0x03 00000210: DUP1 00000211: SLOAD 00000212: DUP5 00000213: SWAP1 00000214: DUP2 00000215: LT 00000216: ISZERO 00000217: PUSH2 0x0002 0000021a: JUMPI 0000021b: PUSH1 0x00 0000021d: SWAP2 0000021e: DUP3 0000021f: MSTORE 00000220: PUSH1 0x40 00000222: MLOAD 00000223: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85b 00000244: SWAP2 00000245: SWAP1 00000246: SWAP2 00000247: ADD 00000248: SLOAD 00000249: PUSH1 0x01 0000024b: PUSH1 0xa0 0000024d: PUSH1 0x02 0000024f: EXP 00000250: SUB 00000251: AND 00000252: SWAP2 00000253: SWAP1 00000254: DUP4 00000255: DUP6 00000256: DIV 00000257: PUSH1 0x00 00000259: NOT 0000025a: ADD 0000025b: SWAP1 0000025c: DUP3 0000025d: DUP2 0000025e: DUP2 0000025f: DUP2 00000260: DUP6 00000261: DUP9 00000262: DUP4 00000263: CALL 00000264: POP 00000265: POP 00000266: DUP2 00000267: SLOAD 00000268: DUP5 00000269: DUP7 0000026a: DIV 0000026b: SWAP1 0000026c: SUB 0000026d: PUSH1 0x01 0000026f: SWAP1 00000270: DUP2 00000271: ADD 00000272: SWAP1 00000273: SWAP3 00000274: SSTORE 00000275: POP 00000276: PUSH1 0x02 00000278: SWAP1 00000279: DUP4 0000027a: ADD 0000027b: DUP4 0000027c: MUL 0000027d: DIV 0000027e: PUSH1 0x00 00000280: NOT 00000281: ADD 00000282: DUP5 00000283: EQ 00000284: ISZERO 00000285: SWAP1 00000286: POP 00000287: PUSH2 0x028e 0000028a: JUMPI 0000028b: PUSH1 0x01 0000028d: ADD 0000028e: JUMPDEST 0000028f: PUSH1 0x01 00000291: SWAP3 00000292: SWAP1 00000293: SWAP3 00000294: ADD 00000295: SWAP2 00000296: PUSH2 0x01fa 00000299: JUMP 0000029a: JUMPDEST 0000029b: PUSH1 0x03 0000029d: DUP1 0000029e: SLOAD 0000029f: PUSH1 0x02 000002a1: SLOAD 000002a2: DUP2 000002a3: ADD 000002a4: DUP3 000002a5: ADD 000002a6: DUP1 000002a7: DUP4 000002a8: SSTORE 000002a9: SWAP2 000002aa: SWAP1 000002ab: DUP3 000002ac: SWAP1 000002ad: DUP1 000002ae: ISZERO 000002af: DUP3 000002b0: SWAP1 000002b1: GT 000002b2: PUSH2 0x01c7 000002b5: JUMPI 000002b6: PUSH1 0x00 000002b8: DUP4 000002b9: SWAP1 000002ba: MSTORE 000002bb: PUSH2 0x01c7 000002be: SWAP1 000002bf: PUSH32 0xc2575a0e9e593c00f959f8c92f12db2869c3395a3b0502d05e2516446f71f85b 000002e0: SWAP1 000002e1: DUP2 000002e2: ADD 000002e3: SWAP1 000002e4: DUP4 000002e5: ADD 000002e6: JUMPDEST 000002e7: DUP1 000002e8: DUP3 000002e9: GT 000002ea: ISZERO 000002eb: PUSH2 0x02fa 000002ee: JUMPI 000002ef: PUSH1 0x00 000002f1: DUP2 000002f2: SSTORE 000002f3: PUSH1 0x01 000002f5: ADD 000002f6: PUSH2 0x02e6 000002f9: JUMP 000002fa: JUMPDEST 000002fb: POP 000002fc: SWAP1 000002fd: JUMP
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x9d64db1e92d849d38ec236c536ca12e9268102bea80efb307effbdbdcf189846
call_targets:
0x109c4f2ccc82c4d77bde15f306707320294aea3f
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x9d64db1e92d849d38ec236c536ca12e9268102bea80efb307effbdbdcf189846",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x109c4f2ccc82c4d77bde15f306707320294aea3f"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x72ea4b8c",
"selector": "0x72ea4b8c",
"calldata_variants": [
"0x72ea4b8c",
"0x72ea4b8c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 252,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 424,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 611,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 3,
"guards_detected": [],
"untrusted_call_count": 3
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x9d64db1e92d849d38ec236c536ca12e9268102bea80efb307effbdbdcf189846
call_targets:
0x109c4f2ccc82c4d77bde15f306707320294aea3f
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x9d64db1e92d849d38ec236c536ca12e9268102bea80efb307effbdbdcf189846",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x109c4f2ccc82c4d77bde15f306707320294aea3f"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x72ea4b8c",
"selector": "0x72ea4b8c",
"calldata_variants": [
"0x72ea4b8c",
"0x72ea4b8c0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 252,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 424,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 611,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 3,
"guards_detected": []
}
|