Analysis Run

019b477e-a6d0-736a-93d3-ecc6c4ec7644

complete

Chain ID

1

Address

0xd79b4c6791784184e2755b2fc1659eaab0f80456

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Verified

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
20149	artifact.fetch	complete	1 / 3	3 months ago
20150	tool.cast_disasm	complete	1 / 3	3 months ago
63566	analysis.bundle	complete	1 / 3	2 weeks ago
63567	capability.graph	complete	1 / 3	2 weeks ago
63568	detector.run	complete	1 / 3	2 weeks ago
63569	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

4

EXT*/BALANCE

2

Total opcodes

1300

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00f0
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x021991e7
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00f2
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x03750d94
00000025: EQ
00000026: PUSH2 0x00fc
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x06b5f02d
00000030: EQ
00000031: PUSH2 0x0122
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x0d1fce42
0000003b: EQ
0000003c: PUSH2 0x0140
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x0e1da6c3
00000046: EQ
00000047: PUSH2 0x0153
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x0f06670a
00000051: EQ
00000052: PUSH2 0x0160
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x2d9a37d3
0000005c: EQ
0000005d: PUSH2 0x0190
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x2e1a7d4d
00000067: EQ
00000068: PUSH2 0x01aa
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x2fac1d36
00000072: EQ
00000073: PUSH2 0x01cd
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x46b305d6
0000007d: EQ
0000007e: PUSH2 0x01fe
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0x55b775ea
00000088: EQ
00000089: PUSH2 0x0221
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0x839930ba
00000093: EQ
00000094: PUSH2 0x0244
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0x8d216186
0000009e: EQ
0000009f: PUSH2 0x024f
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xa094a031
000000a9: EQ
000000aa: PUSH2 0x0281
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0xa1b9af31
000000b4: EQ
000000b5: PUSH2 0x01fe
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0xadd4c784
000000bf: EQ
000000c0: PUSH2 0x028f
000000c3: JUMPI
000000c4: DUP1
000000c5: PUSH4 0xbd66528a
000000ca: EQ
000000cb: PUSH2 0x02bf
000000ce: JUMPI
000000cf: DUP1
000000d0: PUSH4 0xc7cf28fe
000000d5: EQ
000000d6: PUSH2 0x02f0
000000d9: JUMPI
000000da: DUP1
000000db: PUSH4 0xcb96012e
000000e0: EQ
000000e1: PUSH2 0x031d
000000e4: JUMPI
000000e5: DUP1
000000e6: PUSH4 0xd8389dc5
000000eb: EQ
000000ec: PUSH2 0x032e
000000ef: JUMPI
000000f0: JUMPDEST
000000f1: STOP
000000f2: JUMPDEST
000000f3: PUSH2 0x034b
000000f6: PUSH1 0x00
000000f8: SLOAD
000000f9: JUMPDEST
000000fa: SWAP1
000000fb: JUMP
000000fc: JUMPDEST
000000fd: PUSH2 0x00f0
00000100: PUSH1 0x04
00000102: CALLDATALOAD
00000103: PUSH1 0x24
00000105: CALLDATALOAD
00000106: PUSH1 0x02
00000108: SLOAD
00000109: PUSH1 0x01
0000010b: PUSH1 0xa0
0000010d: PUSH1 0x02
0000010f: EXP
00000110: SUB
00000111: SWAP1
00000112: DUP2
00000113: AND
00000114: CALLER
00000115: SWAP2
00000116: SWAP1
00000117: SWAP2
00000118: AND
00000119: EQ
0000011a: PUSH2 0x044c
0000011d: JUMPI
0000011e: PUSH2 0x0404
00000121: JUMP
00000122: JUMPDEST
00000123: PUSH2 0x034b
00000126: PUSH1 0x04
00000128: CALLDATALOAD
00000129: PUSH1 0x24
0000012b: CALLDATALOAD
0000012c: JUMPDEST
0000012d: PUSH1 0x64
0000012f: PUSH1 0x63
00000131: DUP4
00000132: MUL
00000133: DIV
00000134: PUSH2 0x0100
00000137: MUL
00000138: DUP2
00000139: SWAP1
0000013a: DIV
0000013b: SWAP3
0000013c: SWAP2
0000013d: POP
0000013e: POP
0000013f: JUMP
00000140: JUMPDEST
00000141: PUSH2 0x034b
00000144: ADDRESS
00000145: PUSH1 0x01
00000147: PUSH1 0xa0
00000149: PUSH1 0x02
0000014b: EXP
0000014c: SUB
0000014d: AND
0000014e: BALANCE
0000014f: PUSH2 0x00f9
00000152: JUMP
00000153: JUMPDEST
00000154: PUSH2 0x00f0
00000157: PUSH1 0x00
00000159: PUSH2 0x06ed
0000015c: PUSH2 0x02f4
0000015f: JUMP
00000160: JUMPDEST
00000161: PUSH2 0x034b
00000164: PUSH1 0x04
00000166: CALLDATALOAD
00000167: PUSH1 0x01
00000169: PUSH1 0xa0
0000016b: PUSH1 0x02
0000016d: EXP
0000016e: SUB
0000016f: CALLER
00000170: AND
00000171: PUSH1 0x00
00000173: SWAP1
00000174: DUP2
00000175: MSTORE
00000176: PUSH1 0x04
00000178: PUSH1 0x20
0000017a: DUP2
0000017b: SWAP1
0000017c: MSTORE
0000017d: PUSH1 0x40
0000017f: DUP3
00000180: KECCAK256
00000181: SWAP1
00000182: DUP2
00000183: ADD
00000184: SLOAD
00000185: DUP3
00000186: EQ
00000187: ISZERO
00000188: PUSH2 0x04f2
0000018b: JUMPI
0000018c: PUSH2 0x049f
0000018f: JUMP
00000190: JUMPDEST
00000191: PUSH2 0x034b
00000194: JUMPDEST
00000195: PUSH1 0x64
00000197: ADDRESS
00000198: PUSH1 0x01
0000019a: PUSH1 0xa0
0000019c: PUSH1 0x02
0000019e: EXP
0000019f: SUB
000001a0: AND
000001a1: BALANCE
000001a2: PUSH1 0x05
000001a4: MUL
000001a5: DIV
000001a6: PUSH2 0x00f9
000001a9: JUMP
000001aa: JUMPDEST
000001ab: PUSH2 0x00f0
000001ae: PUSH1 0x04
000001b0: CALLDATALOAD
000001b1: PUSH1 0x01
000001b3: SLOAD
000001b4: PUSH1 0x01
000001b6: PUSH1 0xa0
000001b8: PUSH1 0x02
000001ba: EXP
000001bb: SUB
000001bc: SWAP1
000001bd: DUP2
000001be: AND
000001bf: CALLER
000001c0: SWAP2
000001c1: SWAP1
000001c2: SWAP2
000001c3: AND
000001c4: EQ
000001c5: PUSH2 0x071a
000001c8: JUMPI
000001c9: PUSH2 0x06ea
000001cc: JUMP
000001cd: JUMPDEST
000001ce: PUSH2 0x034b
000001d1: PUSH1 0x04
000001d3: CALLDATALOAD
000001d4: JUMPDEST
000001d5: PUSH1 0x01
000001d7: PUSH1 0xa0
000001d9: PUSH1 0x02
000001db: EXP
000001dc: SUB
000001dd: DUP2
000001de: AND
000001df: PUSH1 0x00
000001e1: SWAP1
000001e2: DUP2
000001e3: MSTORE
000001e4: PUSH1 0x04
000001e6: PUSH1 0x20
000001e8: DUP2
000001e9: SWAP1
000001ea: MSTORE
000001eb: PUSH1 0x40
000001ed: DUP3
000001ee: KECCAK256
000001ef: SWAP1
000001f0: DUP2
000001f1: ADD
000001f2: SLOAD
000001f3: DUP3
000001f4: EQ
000001f5: ISZERO
000001f6: PUSH2 0x049a
000001f9: JUMPI
000001fa: PUSH2 0x049f
000001fd: JUMP
000001fe: JUMPDEST
000001ff: PUSH2 0x00f0
00000202: PUSH1 0x01
00000204: SLOAD
00000205: PUSH1 0x00
00000207: SWAP1
00000208: PUSH1 0x01
0000020a: PUSH1 0xa0
0000020c: PUSH1 0x02
0000020e: EXP
0000020f: SUB
00000210: SWAP1
00000211: DUP2
00000212: AND
00000213: CALLER
00000214: SWAP2
00000215: SWAP1
00000216: SWAP2
00000217: AND
00000218: EQ
00000219: PUSH2 0x06ea
0000021c: JUMPI
0000021d: PUSH2 0x06ea
00000220: JUMP
00000221: JUMPDEST
00000222: PUSH2 0x00f0
00000225: PUSH1 0x04
00000227: CALLDATALOAD
00000228: PUSH1 0x01
0000022a: SLOAD
0000022b: PUSH1 0x01
0000022d: PUSH1 0xa0
0000022f: PUSH1 0x02
00000231: EXP
00000232: SUB
00000233: SWAP1
00000234: DUP2
00000235: AND
00000236: CALLER
00000237: SWAP2
00000238: SWAP1
00000239: SWAP2
0000023a: AND
0000023b: EQ
0000023c: PUSH2 0x06f8
0000023f: JUMPI
00000240: PUSH2 0x06ea
00000243: JUMP
00000244: JUMPDEST
00000245: PUSH2 0x034b
00000248: PUSH1 0x03
0000024a: SLOAD
0000024b: PUSH2 0x00f9
0000024e: JUMP
0000024f: JUMPDEST
00000250: PUSH2 0x00f0
00000253: PUSH1 0x04
00000255: CALLDATALOAD
00000256: PUSH1 0x24
00000258: CALLDATALOAD
00000259: PUSH1 0x01
0000025b: DUP3
0000025c: LT
0000025d: DUP1
0000025e: PUSH2 0x0267
00000261: JUMPI
00000262: POP
00000263: PUSH1 0xff
00000265: DUP3
00000266: GT
00000267: JUMPDEST
00000268: DUP1
00000269: PUSH2 0x0273
0000026c: JUMPI
0000026d: POP
0000026e: PUSH1 0x03
00000270: SLOAD
00000271: CALLVALUE
00000272: LT
00000273: JUMPDEST
00000274: DUP1
00000275: PUSH2 0x040a
00000278: JUMPI
00000279: POP
0000027a: PUSH2 0x0442
0000027d: PUSH2 0x0194
00000280: JUMP
00000281: JUMPDEST
00000282: PUSH2 0x034b
00000285: PUSH1 0x00
00000287: PUSH2 0x0493
0000028a: CALLER
0000028b: PUSH2 0x01d4
0000028e: JUMP
0000028f: JUMPDEST
00000290: PUSH2 0x034b
00000293: PUSH1 0x04
00000295: CALLDATALOAD
00000296: PUSH1 0x01
00000298: PUSH1 0xa0
0000029a: PUSH1 0x02
0000029c: EXP
0000029d: SUB
0000029e: CALLER
0000029f: AND
000002a0: PUSH1 0x00
000002a2: SWAP1
000002a3: DUP2
000002a4: MSTORE
000002a5: PUSH1 0x04
000002a7: PUSH1 0x20
000002a9: DUP2
000002aa: SWAP1
000002ab: MSTORE
000002ac: PUSH1 0x40
000002ae: DUP3
000002af: KECCAK256
000002b0: SWAP1
000002b1: DUP2
000002b2: ADD
000002b3: SLOAD
000002b4: DUP3
000002b5: EQ
000002b6: ISZERO
000002b7: PUSH2 0x04a5
000002ba: JUMPI
000002bb: PUSH2 0x049f
000002be: JUMP
000002bf: JUMPDEST
000002c0: PUSH2 0x00f0
000002c3: PUSH1 0x04
000002c5: CALLDATALOAD
000002c6: PUSH1 0x01
000002c8: PUSH1 0xa0
000002ca: PUSH1 0x02
000002cc: EXP
000002cd: SUB
000002ce: CALLER
000002cf: AND
000002d0: PUSH1 0x00
000002d2: SWAP1
000002d3: DUP2
000002d4: MSTORE
000002d5: PUSH1 0x04
000002d7: PUSH1 0x20
000002d9: DUP2
000002da: SWAP1
000002db: MSTORE
000002dc: PUSH1 0x40
000002de: DUP3
000002df: KECCAK256
000002e0: SWAP1
000002e1: DUP2
000002e2: ADD
000002e3: SLOAD
000002e4: SWAP1
000002e5: SWAP2
000002e6: EQ
000002e7: ISZERO
000002e8: PUSH2 0x0555
000002eb: JUMPI
000002ec: PUSH2 0x0404
000002ef: JUMP
000002f0: JUMPDEST
000002f1: PUSH2 0x034b
000002f4: JUMPDEST
000002f5: PUSH1 0x01
000002f7: PUSH1 0xa0
000002f9: PUSH1 0x02
000002fb: EXP
000002fc: SUB
000002fd: CALLER
000002fe: AND
000002ff: PUSH1 0x00
00000301: SWAP1
00000302: DUP2
00000303: MSTORE
00000304: PUSH1 0x04
00000306: PUSH1 0x20
00000308: DUP2
00000309: SWAP1
0000030a: MSTORE
0000030b: PUSH1 0x40
0000030d: DUP3
0000030e: KECCAK256
0000030f: SWAP1
00000310: DUP2
00000311: ADD
00000312: SLOAD
00000313: DUP3
00000314: EQ
00000315: PUSH2 0x066b
00000318: JUMPI
00000319: PUSH2 0x0667
0000031c: JUMP
0000031d: JUMPDEST
0000031e: PUSH2 0x034b
00000321: PUSH1 0x04
00000323: CALLDATALOAD
00000324: JUMPDEST
00000325: PUSH1 0xff
00000327: DUP2
00000328: AND
00000329: JUMPDEST
0000032a: SWAP2
0000032b: SWAP1
0000032c: POP
0000032d: JUMP
0000032e: JUMPDEST
0000032f: PUSH2 0x034b
00000332: PUSH1 0x04
00000334: CALLDATALOAD
00000335: PUSH1 0x40
00000337: DUP1
00000338: MLOAD
00000339: DUP3
0000033a: DUP2
0000033b: MSTORE
0000033c: SWAP1
0000033d: MLOAD
0000033e: SWAP1
0000033f: DUP2
00000340: SWAP1
00000341: SUB
00000342: PUSH1 0x20
00000344: ADD
00000345: SWAP1
00000346: KECCAK256
00000347: PUSH2 0x0329
0000034a: JUMP
0000034b: JUMPDEST
0000034c: PUSH1 0x40
0000034e: DUP1
0000034f: MLOAD
00000350: SWAP2
00000351: DUP3
00000352: MSTORE
00000353: MLOAD
00000354: SWAP1
00000355: DUP2
00000356: SWAP1
00000357: SUB
00000358: PUSH1 0x20
0000035a: ADD
0000035b: SWAP1
0000035c: RETURN
0000035d: JUMPDEST
0000035e: PUSH1 0x40
00000360: DUP1
00000361: MLOAD
00000362: PUSH1 0xa0
00000364: DUP2
00000365: ADD
00000366: DUP3
00000367: MSTORE
00000368: CALLVALUE
00000369: DUP1
0000036a: DUP3
0000036b: MSTORE
0000036c: PUSH1 0x20
0000036e: DUP3
0000036f: DUP2
00000370: ADD
00000371: DUP7
00000372: DUP2
00000373: MSTORE
00000374: NUMBER
00000375: DUP5
00000376: DUP7
00000377: ADD
00000378: DUP2
00000379: DUP2
0000037a: MSTORE
0000037b: PUSH1 0x60
0000037d: DUP7
0000037e: DUP2
0000037f: ADD
00000380: DUP10
00000381: DUP2
00000382: MSTORE
00000383: PUSH1 0x00
00000385: PUSH1 0x80
00000387: DUP10
00000388: ADD
00000389: DUP2
0000038a: DUP2
0000038b: MSTORE
0000038c: PUSH1 0x01
0000038e: PUSH1 0xa0
00000390: PUSH1 0x02
00000392: EXP
00000393: SUB
00000394: CALLER
00000395: AND
00000396: DUP1
00000397: DUP4
00000398: MSTORE
00000399: PUSH1 0x04
0000039b: DUP1
0000039c: DUP11
0000039d: MSTORE
0000039e: SWAP3
0000039f: DUP13
000003a0: SWAP1
000003a1: KECCAK256
000003a2: SWAP11
000003a3: MLOAD
000003a4: DUP12
000003a5: SSTORE
000003a6: SWAP7
000003a7: MLOAD
000003a8: PUSH1 0x01
000003aa: DUP12
000003ab: ADD
000003ac: SSTORE
000003ad: SWAP4
000003ae: MLOAD
000003af: PUSH1 0x02
000003b1: DUP11
000003b2: ADD
000003b3: SSTORE
000003b4: SWAP1
000003b5: MLOAD
000003b6: PUSH1 0x03
000003b8: DUP10
000003b9: ADD
000003ba: SSTORE
000003bb: SWAP2
000003bc: MLOAD
000003bd: SWAP7
000003be: SWAP1
000003bf: SWAP2
000003c0: ADD
000003c1: SWAP6
000003c2: SWAP1
000003c3: SWAP6
000003c4: SSTORE
000003c5: DUP6
000003c6: MLOAD
000003c7: SWAP1
000003c8: DUP2
000003c9: MSTORE
000003ca: SWAP2
000003cb: DUP3
000003cc: ADD
000003cd: SWAP3
000003ce: SWAP1
000003cf: SWAP3
000003d0: MSTORE
000003d1: DUP1
000003d2: DUP5
000003d3: ADD
000003d4: DUP7
000003d5: SWAP1
000003d6: MSTORE
000003d7: SWAP3
000003d8: MLOAD
000003d9: SWAP1
000003da: SWAP3
000003db: PUSH32 0x97371a3349bea11f577edf6e64350a3dfb9de665d1154c7e6d08eb0805aa0430
000003fc: SWAP3
000003fd: SWAP1
000003fe: DUP3
000003ff: SWAP1
00000400: SUB
00000401: ADD
00000402: SWAP1
00000403: LOG2
00000404: JUMPDEST
00000405: POP
00000406: POP
00000407: JUMP
00000408: JUMPDEST
00000409: GT
0000040a: JUMPDEST
0000040b: DUP1
0000040c: PUSH2 0x0417
0000040f: JUMPI
00000410: POP
00000411: PUSH1 0x00
00000413: DUP1
00000414: SLOAD
00000415: EQ
00000416: ISZERO
00000417: JUMPDEST
00000418: ISZERO
00000419: PUSH2 0x035d
0000041c: JUMPI
0000041d: PUSH1 0x40
0000041f: MLOAD
00000420: PUSH1 0x01
00000422: PUSH1 0xa0
00000424: PUSH1 0x02
00000426: EXP
00000427: SUB
00000428: CALLER
00000429: AND
0000042a: SWAP1
0000042b: PUSH1 0x00
0000042d: SWAP1
0000042e: CALLVALUE
0000042f: SWAP1
00000430: DUP3
00000431: DUP2
00000432: DUP2
00000433: DUP2
00000434: DUP6
00000435: DUP9
00000436: DUP4
00000437: CALL
00000438: SWAP4
00000439: POP
0000043a: POP
0000043b: POP
0000043c: POP
0000043d: POP
0000043e: PUSH2 0x0404
00000441: JUMP
00000442: JUMPDEST
00000443: PUSH2 0x0408
00000446: CALLVALUE
00000447: DUP5
00000448: PUSH2 0x012c
0000044b: JUMP
0000044c: JUMPDEST
0000044d: PUSH1 0x01
0000044f: PUSH1 0xa0
00000451: PUSH1 0x02
00000453: EXP
00000454: SUB
00000455: DUP3
00000456: AND
00000457: PUSH1 0x00
00000459: SWAP1
0000045a: DUP2
0000045b: MSTORE
0000045c: PUSH1 0x04
0000045e: PUSH1 0x20
00000460: DUP2
00000461: SWAP1
00000462: MSTORE
00000463: PUSH1 0x40
00000465: DUP3
00000466: KECCAK256
00000467: ADD
00000468: SLOAD
00000469: EQ
0000046a: PUSH2 0x0472
0000046d: JUMPI
0000046e: PUSH2 0x0404
00000471: JUMP
00000472: JUMPDEST
00000473: PUSH1 0x01
00000475: PUSH1 0xa0
00000477: PUSH1 0x02
00000479: EXP
0000047a: SUB
0000047b: SWAP2
0000047c: SWAP1
0000047d: SWAP2
0000047e: AND
0000047f: PUSH1 0x00
00000481: SWAP1
00000482: DUP2
00000483: MSTORE
00000484: PUSH1 0x04
00000486: PUSH1 0x20
00000488: DUP2
00000489: SWAP1
0000048a: MSTORE
0000048b: PUSH1 0x40
0000048d: SWAP1
0000048e: SWAP2
0000048f: KECCAK256
00000490: ADD
00000491: SSTORE
00000492: JUMP
00000493: JUMPDEST
00000494: SWAP1
00000495: POP
00000496: PUSH2 0x00f9
00000499: JUMP
0000049a: JUMPDEST
0000049b: PUSH1 0x01
0000049d: SWAP2
0000049e: POP
0000049f: JUMPDEST
000004a0: POP
000004a1: SWAP2
000004a2: SWAP1
000004a3: POP
000004a4: JUMP
000004a5: JUMPDEST
000004a6: PUSH1 0x40
000004a8: DUP1
000004a9: MLOAD
000004aa: PUSH1 0x03
000004ac: DUP4
000004ad: ADD
000004ae: SLOAD
000004af: DUP6
000004b0: DUP3
000004b1: MSTORE
000004b2: SWAP2
000004b3: MLOAD
000004b4: SWAP1
000004b5: DUP2
000004b6: SWAP1
000004b7: SUB
000004b8: PUSH1 0x20
000004ba: ADD
000004bb: SWAP1
000004bc: KECCAK256
000004bd: EQ
000004be: PUSH2 0x04c6
000004c1: JUMPI
000004c2: PUSH2 0x049f
000004c5: JUMP
000004c6: JUMPDEST
000004c7: PUSH1 0x40
000004c9: DUP1
000004ca: MLOAD
000004cb: PUSH1 0x04
000004cd: DUP4
000004ce: ADD
000004cf: SLOAD
000004d0: DUP6
000004d1: DUP3
000004d2: MSTORE
000004d3: PUSH1 0x20
000004d5: DUP3
000004d6: ADD
000004d7: MSTORE
000004d8: DUP2
000004d9: MLOAD
000004da: SWAP1
000004db: DUP2
000004dc: SWAP1
000004dd: SUB
000004de: SWAP1
000004df: SWAP2
000004e0: ADD
000004e1: SWAP1
000004e2: KECCAK256
000004e3: PUSH2 0x04eb
000004e6: SWAP1
000004e7: PUSH2 0x0324
000004ea: JUMP
000004eb: JUMPDEST
000004ec: SWAP2
000004ed: POP
000004ee: PUSH2 0x049f
000004f1: JUMP
000004f2: JUMPDEST
000004f3: PUSH1 0x40
000004f5: DUP1
000004f6: MLOAD
000004f7: PUSH1 0x03
000004f9: DUP4
000004fa: ADD
000004fb: SLOAD
000004fc: DUP6
000004fd: DUP3
000004fe: MSTORE
000004ff: SWAP2
00000500: MLOAD
00000501: SWAP1
00000502: DUP2
00000503: SWAP1
00000504: SUB
00000505: PUSH1 0x20
00000507: ADD
00000508: SWAP1
00000509: KECCAK256
0000050a: EQ
0000050b: PUSH2 0x0513
0000050e: JUMPI
0000050f: PUSH2 0x049f
00000512: JUMP
00000513: JUMPDEST
00000514: PUSH1 0x40
00000516: DUP1
00000517: MLOAD
00000518: PUSH1 0x01
0000051a: DUP4
0000051b: ADD
0000051c: SLOAD
0000051d: PUSH1 0x04
0000051f: DUP5
00000520: ADD
00000521: SLOAD
00000522: DUP7
00000523: DUP4
00000524: MSTORE
00000525: PUSH1 0x20
00000527: DUP4
00000528: ADD
00000529: MSTORE
0000052a: DUP3
0000052b: MLOAD
0000052c: SWAP2
0000052d: DUP3
0000052e: SWAP1
0000052f: SUB
00000530: SWAP1
00000531: SWAP3
00000532: ADD
00000533: SWAP1
00000534: KECCAK256
00000535: PUSH2 0x053d
00000538: SWAP1
00000539: PUSH2 0x0324
0000053c: JUMP
0000053d: JUMPDEST
0000053e: LT
0000053f: ISZERO
00000540: PUSH2 0x054c
00000543: JUMPI
00000544: PUSH1 0x01
00000546: SWAP2
00000547: POP
00000548: PUSH2 0x049f
0000054b: JUMP
0000054c: JUMPDEST
0000054d: PUSH1 0x00
0000054f: SWAP2
00000550: POP
00000551: PUSH2 0x049f
00000554: JUMP
00000555: JUMPDEST
00000556: PUSH1 0x40
00000558: DUP1
00000559: MLOAD
0000055a: PUSH1 0x03
0000055c: DUP4
0000055d: ADD
0000055e: SLOAD
0000055f: DUP5
00000560: DUP3
00000561: MSTORE
00000562: SWAP2
00000563: MLOAD
00000564: SWAP1
00000565: DUP2
00000566: SWAP1
00000567: SUB
00000568: PUSH1 0x20
0000056a: ADD
0000056b: SWAP1
0000056c: KECCAK256
0000056d: EQ
0000056e: PUSH2 0x0576
00000571: JUMPI
00000572: PUSH2 0x0404
00000575: JUMP
00000576: JUMPDEST
00000577: PUSH1 0x40
00000579: DUP1
0000057a: MLOAD
0000057b: PUSH1 0x01
0000057d: DUP4
0000057e: ADD
0000057f: SLOAD
00000580: PUSH1 0x04
00000582: DUP5
00000583: ADD
00000584: SLOAD
00000585: DUP6
00000586: DUP4
00000587: MSTORE
00000588: PUSH1 0x20
0000058a: DUP4
0000058b: ADD
0000058c: MSTORE
0000058d: DUP3
0000058e: MLOAD
0000058f: SWAP2
00000590: DUP3
00000591: SWAP1
00000592: SUB
00000593: SWAP1
00000594: SWAP3
00000595: ADD
00000596: SWAP1
00000597: KECCAK256
00000598: PUSH2 0x05a0
0000059b: SWAP1
0000059c: PUSH2 0x0324
0000059f: JUMP
000005a0: JUMPDEST
000005a1: LT
000005a2: ISZERO
000005a3: PUSH2 0x062a
000005a6: JUMPI
000005a7: DUP1
000005a8: SLOAD
000005a9: PUSH1 0x01
000005ab: DUP3
000005ac: ADD
000005ad: SLOAD
000005ae: PUSH1 0x01
000005b0: PUSH1 0xa0
000005b2: PUSH1 0x02
000005b4: EXP
000005b5: SUB
000005b6: CALLER
000005b7: AND
000005b8: SWAP2
000005b9: PUSH1 0x00
000005bb: SWAP2
000005bc: PUSH8 0x016345785d8a0000
000005c5: SWAP2
000005c6: PUSH2 0x05ce
000005c9: SWAP2
000005ca: PUSH2 0x012c
000005cd: JUMP
000005ce: JUMPDEST
000005cf: PUSH1 0x40
000005d1: MLOAD
000005d2: SWAP2
000005d3: SWAP1
000005d4: SUB
000005d5: SWAP1
000005d6: PUSH1 0x00
000005d8: DUP2
000005d9: DUP2
000005da: DUP2
000005db: DUP6
000005dc: DUP9
000005dd: DUP9
000005de: CALL
000005df: POP
000005e0: DUP5
000005e1: SLOAD
000005e2: PUSH1 0x01
000005e4: DUP7
000005e5: ADD
000005e6: SLOAD
000005e7: SWAP1
000005e8: DUP3
000005e9: MSTORE
000005ea: PUSH1 0x20
000005ec: DUP3
000005ed: ADD
000005ee: MSTORE
000005ef: PUSH1 0x40
000005f1: DUP1
000005f2: MLOAD
000005f3: PUSH1 0x01
000005f5: PUSH1 0xa0
000005f7: PUSH1 0x02
000005f9: EXP
000005fa: SUB
000005fb: CALLER
000005fc: AND
000005fd: SWAP6
000005fe: POP
000005ff: PUSH32 0xfdc49939175858b2bb557093a7d52fa6b6f3aad917d282d61758fab4805f102a
00000620: SWAP5
00000621: POP
00000622: SWAP2
00000623: DUP3
00000624: SWAP1
00000625: SUB
00000626: ADD
00000627: SWAP2
00000628: POP
00000629: LOG2
0000062a: JUMPDEST
0000062b: PUSH1 0x01
0000062d: PUSH1 0xa0
0000062f: PUSH1 0x02
00000631: EXP
00000632: SUB
00000633: CALLER
00000634: AND
00000635: PUSH1 0x00
00000637: SWAP1
00000638: DUP2
00000639: MSTORE
0000063a: PUSH1 0x04
0000063c: PUSH1 0x20
0000063e: DUP2
0000063f: SWAP1
00000640: MSTORE
00000641: PUSH1 0x40
00000643: DUP3
00000644: KECCAK256
00000645: DUP3
00000646: DUP2
00000647: SSTORE
00000648: PUSH1 0x01
0000064a: DUP2
0000064b: ADD
0000064c: DUP4
0000064d: SWAP1
0000064e: SSTORE
0000064f: PUSH1 0x02
00000651: DUP2
00000652: ADD
00000653: DUP4
00000654: SWAP1
00000655: SSTORE
00000656: PUSH1 0x03
00000658: DUP2
00000659: ADD
0000065a: DUP4
0000065b: SWAP1
0000065c: SSTORE
0000065d: ADD
0000065e: SSTORE
0000065f: POP
00000660: POP
00000661: JUMP
00000662: JUMPDEST
00000663: PUSH1 0x01
00000665: SWAP2
00000666: POP
00000667: JUMPDEST
00000668: POP
00000669: SWAP1
0000066a: JUMP
0000066b: JUMPDEST
0000066c: DUP1
0000066d: SLOAD
0000066e: PUSH1 0x00
00000670: SWAP1
00000671: GT
00000672: PUSH2 0x067e
00000675: JUMPI
00000676: PUSH1 0x00
00000678: SWAP2
00000679: POP
0000067a: PUSH2 0x0667
0000067d: JUMP
0000067e: JUMPDEST
0000067f: PUSH1 0x02
00000681: DUP2
00000682: ADD
00000683: SLOAD
00000684: PUSH1 0x14
00000686: ADD
00000687: NUMBER
00000688: LT
00000689: ISZERO
0000068a: PUSH2 0x0662
0000068d: JUMPI
0000068e: PUSH1 0x00
00000690: SWAP2
00000691: POP
00000692: PUSH2 0x0667
00000695: JUMP
00000696: JUMPDEST
00000697: POP
00000698: PUSH1 0x01
0000069a: PUSH1 0xa0
0000069c: PUSH1 0x02
0000069e: EXP
0000069f: SUB
000006a0: CALLER
000006a1: AND
000006a2: PUSH1 0x00
000006a4: DUP2
000006a5: DUP2
000006a6: MSTORE
000006a7: PUSH1 0x04
000006a9: PUSH1 0x20
000006ab: MSTORE
000006ac: PUSH1 0x40
000006ae: DUP1
000006af: DUP3
000006b0: KECCAK256
000006b1: DUP1
000006b2: SLOAD
000006b3: SWAP2
000006b4: MLOAD
000006b5: SWAP1
000006b6: SWAP4
000006b7: SWAP3
000006b8: SWAP2
000006b9: SWAP1
000006ba: DUP3
000006bb: DUP2
000006bc: DUP2
000006bd: DUP2
000006be: DUP6
000006bf: DUP9
000006c0: DUP4
000006c1: CALL
000006c2: POP
000006c3: POP
000006c4: POP
000006c5: SWAP1
000006c6: DUP2
000006c7: MSTORE
000006c8: PUSH1 0x04
000006ca: PUSH1 0x20
000006cc: DUP2
000006cd: SWAP1
000006ce: MSTORE
000006cf: DUP2
000006d0: DUP4
000006d1: SSTORE
000006d2: PUSH1 0x01
000006d4: DUP4
000006d5: ADD
000006d6: DUP3
000006d7: SWAP1
000006d8: SSTORE
000006d9: PUSH1 0x02
000006db: DUP4
000006dc: ADD
000006dd: DUP3
000006de: SWAP1
000006df: SSTORE
000006e0: PUSH1 0x03
000006e2: DUP4
000006e3: ADD
000006e4: DUP3
000006e5: SWAP1
000006e6: SSTORE
000006e7: DUP3
000006e8: ADD
000006e9: SSTORE
000006ea: JUMPDEST
000006eb: POP
000006ec: JUMP
000006ed: JUMPDEST
000006ee: ISZERO
000006ef: ISZERO
000006f0: PUSH2 0x0696
000006f3: JUMPI
000006f4: PUSH2 0x06ea
000006f7: JUMP
000006f8: JUMPDEST
000006f9: PUSH1 0x02
000006fb: DUP1
000006fc: SLOAD
000006fd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000712: NOT
00000713: AND
00000714: DUP3
00000715: OR
00000716: SWAP1
00000717: SSTORE
00000718: POP
00000719: JUMP
0000071a: JUMPDEST
0000071b: PUSH1 0x00
0000071d: DUP1
0000071e: SLOAD
0000071f: EQ
00000720: DUP1
00000721: PUSH2 0x072f
00000724: JUMPI
00000725: POP
00000726: PUSH1 0x00
00000728: SLOAD
00000729: PUSH2 0x1680
0000072c: ADD
0000072d: NUMBER
0000072e: LT
0000072f: JUMPDEST
00000730: ISZERO
00000731: PUSH2 0x0739
00000734: JUMPI
00000735: PUSH2 0x06ea
00000738: JUMP
00000739: JUMPDEST
0000073a: PUSH1 0x01
0000073c: SLOAD
0000073d: PUSH1 0x40
0000073f: MLOAD
00000740: PUSH1 0x01
00000742: PUSH1 0xa0
00000744: PUSH1 0x02
00000746: EXP
00000747: SUB
00000748: SWAP2
00000749: SWAP1
0000074a: SWAP2
0000074b: AND
0000074c: SWAP1
0000074d: PUSH1 0x00
0000074f: SWAP1
00000750: DUP4
00000751: SWAP1
00000752: DUP3
00000753: DUP2
00000754: DUP2
00000755: DUP2
00000756: DUP6
00000757: DUP9
00000758: DUP4
00000759: CALL
0000075a: POP
0000075b: POP
0000075c: POP
0000075d: POP
0000075e: POP
0000075f: POP
00000760: JUMP

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x2e8d1d7a1d099beca4da027c72d101c11e7dfdf3ad20ee3e7c7fe18c5a911975 call_targets: 0xd79b4c6791784184e2755b2fc1659eaab0f80456 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x2e8d1d7a1d099beca4da027c72d101c11e7dfdf3ad20ee3e7c7fe18c5a911975", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xd79b4c6791784184e2755b2fc1659eaab0f80456" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x021991e7", "selector": "0x021991e7", "calldata_variants": [ "0x021991e7", "0x021991e70000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x03750d94", "selector": "0x03750d94", "calldata_variants": [ "0x03750d94", "0x03750d940000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x06b5f02d", "selector": "0x06b5f02d", "calldata_variants": [ "0x06b5f02d", "0x06b5f02d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0d1fce42", "selector": "0x0d1fce42", "calldata_variants": [ "0x0d1fce42", "0x0d1fce420000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0e1da6c3", "selector": "0x0e1da6c3", "calldata_variants": [ "0x0e1da6c3", "0x0e1da6c30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0f06670a", "selector": "0x0f06670a", "calldata_variants": [ "0x0f06670a", "0x0f06670a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x2d9a37d3", "selector": "0x2d9a37d3", "calldata_variants": [ "0x2d9a37d3", "0x2d9a37d30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x2e1a7d4d", "selector": "0x2e1a7d4d", "calldata_variants": [ "0x2e1a7d4d", "0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1079, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1502, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1729, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 4, "guards_detected": [], "untrusted_call_count": 4 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x2e8d1d7a1d099beca4da027c72d101c11e7dfdf3ad20ee3e7c7fe18c5a911975 call_targets: 0xd79b4c6791784184e2755b2fc1659eaab0f80456 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x2e8d1d7a1d099beca4da027c72d101c11e7dfdf3ad20ee3e7c7fe18c5a911975", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xd79b4c6791784184e2755b2fc1659eaab0f80456" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x021991e7", "selector": "0x021991e7", "calldata_variants": [ "0x021991e7", "0x021991e70000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x03750d94", "selector": "0x03750d94", "calldata_variants": [ "0x03750d94", "0x03750d940000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x06b5f02d", "selector": "0x06b5f02d", "calldata_variants": [ "0x06b5f02d", "0x06b5f02d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0d1fce42", "selector": "0x0d1fce42", "calldata_variants": [ "0x0d1fce42", "0x0d1fce420000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0e1da6c3", "selector": "0x0e1da6c3", "calldata_variants": [ "0x0e1da6c3", "0x0e1da6c30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x0f06670a", "selector": "0x0f06670a", "calldata_variants": [ "0x0f06670a", "0x0f06670a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x2d9a37d3", "selector": "0x2d9a37d3", "calldata_variants": [ "0x2d9a37d3", "0x2d9a37d30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x2e1a7d4d", "selector": "0x2e1a7d4d", "calldata_variants": [ "0x2e1a7d4d", "0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1079, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1502, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1729, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 4, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x2e8d1d7a1d099beca4da027c72d101c11e7dfdf3ad20ee3e7c7fe18c5a911975

call_targets: 0xd79b4c6791784184e2755b2fc1659eaab0f80456

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x2e8d1d7a1d099beca4da027c72d101c11e7dfdf3ad20ee3e7c7fe18c5a911975",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xd79b4c6791784184e2755b2fc1659eaab0f80456"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x021991e7",
            "selector": "0x021991e7",
            "calldata_variants": [
                "0x021991e7",
                "0x021991e70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x03750d94",
            "selector": "0x03750d94",
            "calldata_variants": [
                "0x03750d94",
                "0x03750d940000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x06b5f02d",
            "selector": "0x06b5f02d",
            "calldata_variants": [
                "0x06b5f02d",
                "0x06b5f02d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0d1fce42",
            "selector": "0x0d1fce42",
            "calldata_variants": [
                "0x0d1fce42",
                "0x0d1fce420000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0e1da6c3",
            "selector": "0x0e1da6c3",
            "calldata_variants": [
                "0x0e1da6c3",
                "0x0e1da6c30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x0f06670a",
            "selector": "0x0f06670a",
            "calldata_variants": [
                "0x0f06670a",
                "0x0f06670a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2d9a37d3",
            "selector": "0x2d9a37d3",
            "calldata_variants": [
                "0x2d9a37d3",
                "0x2d9a37d30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2e1a7d4d",
            "selector": "0x2e1a7d4d",
            "calldata_variants": [
                "0x2e1a7d4d",
                "0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1079,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1502,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1729,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 4,
    "guards_detected": [],
    "untrusted_call_count": 4
}