TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-a6fb-73de-bb9e-2ed146953d7a

complete
Chain ID
1
Address
0x6fdf04b93af8e9ef67ca5ee14e621bb0b046b4be
Block Number
—
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
20181 artifact.fetch complete 1 / 3 3 months ago
20182 tool.cast_disasm complete 1 / 3 3 months ago
63486 analysis.bundle complete 1 / 3 2 weeks ago
63487 capability.graph complete 1 / 3 2 weeks ago
63488 detector.run complete 1 / 3 2 weeks ago
63489 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
1
CREATE2
0
CALL-family (heavy)
5
EXT*/BALANCE
0
Total opcodes
1149
Flags
selfdestruct_present
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00e5
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x0a16697a
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x012e
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x137c638b
00000025: EQ
00000026: PUSH2 0x0137
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x37f4c00e
00000030: EQ
00000031: PUSH2 0x0142
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x4136aa35
0000003b: EQ
0000003c: PUSH2 0x014d
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x4e417a98
00000046: EQ
00000047: PUSH2 0x0157
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x61461954
00000051: EQ
00000052: PUSH2 0x01c0
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x6560a307
0000005c: EQ
0000005d: PUSH2 0x01e9
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x67ce940d
00000067: EQ
00000068: PUSH2 0x01f4
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x6ef25c3a
00000072: EQ
00000073: PUSH2 0x0200
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x8da5cb5b
0000007d: EQ
0000007e: PUSH2 0x0209
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xa06db7dc
00000088: EQ
00000089: PUSH2 0x021b
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xae45850b
00000093: EQ
00000094: PUSH2 0x0227
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0xb0f07e44
0000009e: EQ
0000009f: PUSH2 0x0239
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xc032dc30
000000a9: EQ
000000aa: PUSH2 0x027a
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0xc6502da8
000000b4: EQ
000000b5: PUSH2 0x02d1
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0xca94692d
000000bf: EQ
000000c0: PUSH2 0x02da
000000c3: JUMPI
000000c4: DUP1
000000c5: PUSH4 0xea8a1af0
000000ca: EQ
000000cb: PUSH2 0x0303
000000ce: JUMPI
000000cf: DUP1
000000d0: PUSH4 0xeec2b628
000000d5: EQ
000000d6: PUSH2 0x0397
000000d9: JUMPI
000000da: DUP1
000000db: PUSH4 0xf6b4dfb4
000000e0: EQ
000000e1: PUSH2 0x045f
000000e4: JUMPI
000000e5: JUMPDEST
000000e6: PUSH2 0x0473
000000e9: PUSH1 0x01
000000eb: SLOAD
000000ec: PUSH1 0x01
000000ee: PUSH1 0xa0
000000f0: PUSH1 0x02
000000f2: EXP
000000f3: SUB
000000f4: SWAP1
000000f5: DUP2
000000f6: AND
000000f7: CALLER
000000f8: SWAP1
000000f9: SWAP2
000000fa: AND
000000fb: EQ
000000fc: DUP1
000000fd: ISZERO
000000fe: PUSH2 0x0107
00000101: JUMPI
00000102: POP
00000103: PUSH1 0x00
00000105: CALLDATASIZE
00000106: GT
00000107: JUMPDEST
00000108: ISZERO
00000109: PUSH2 0x0478
0000010c: JUMPI
0000010d: PUSH1 0x05
0000010f: SLOAD
00000110: PUSH1 0x02
00000112: PUSH1 0x01
00000114: DUP3
00000115: AND
00000116: ISZERO
00000117: PUSH2 0x0100
0000011a: MUL
0000011b: PUSH1 0x00
0000011d: NOT
0000011e: ADD
0000011f: SWAP1
00000120: SWAP2
00000121: AND
00000122: DIV
00000123: PUSH1 0x00
00000125: EQ
00000126: PUSH2 0x047a
00000129: JUMPI
0000012a: PUSH2 0x0002
0000012d: JUMP
0000012e: JUMPDEST
0000012f: PUSH2 0x0530
00000132: PUSH1 0x08
00000134: SLOAD
00000135: DUP2
00000136: JUMP
00000137: JUMPDEST
00000138: PUSH2 0x0530
0000013b: JUMPDEST
0000013c: PUSH2 0x4268
0000013f: JUMPDEST
00000140: SWAP1
00000141: JUMP
00000142: JUMPDEST
00000143: PUSH2 0x0530
00000146: PUSH1 0x06
00000148: SLOAD
00000149: PUSH2 0x013f
0000014c: JUMP
0000014d: JUMPDEST
0000014e: PUSH2 0x0530
00000151: PUSH1 0x01
00000153: PUSH2 0x013f
00000156: JUMP
00000157: JUMPDEST
00000158: PUSH2 0x0542
0000015b: PUSH1 0x40
0000015d: DUP1
0000015e: MLOAD
0000015f: PUSH1 0x20
00000161: DUP2
00000162: DUP2
00000163: ADD
00000164: DUP4
00000165: MSTORE
00000166: PUSH1 0x00
00000168: DUP3
00000169: MSTORE
0000016a: DUP3
0000016b: MLOAD
0000016c: PUSH1 0x05
0000016e: DUP1
0000016f: SLOAD
00000170: PUSH1 0x02
00000172: PUSH1 0x01
00000174: DUP3
00000175: AND
00000176: ISZERO
00000177: PUSH2 0x0100
0000017a: MUL
0000017b: PUSH1 0x00
0000017d: NOT
0000017e: ADD
0000017f: SWAP1
00000180: SWAP2
00000181: AND
00000182: DIV
00000183: PUSH1 0x1f
00000185: DUP2
00000186: ADD
00000187: DUP5
00000188: SWAP1
00000189: DIV
0000018a: DUP5
0000018b: MUL
0000018c: DUP4
0000018d: ADD
0000018e: DUP5
0000018f: ADD
00000190: SWAP1
00000191: SWAP6
00000192: MSTORE
00000193: DUP5
00000194: DUP3
00000195: MSTORE
00000196: SWAP3
00000197: SWAP4
00000198: SWAP1
00000199: SWAP3
0000019a: SWAP2
0000019b: DUP4
0000019c: ADD
0000019d: DUP3
0000019e: DUP3
0000019f: DUP1
000001a0: ISZERO
000001a1: PUSH2 0x060f
000001a4: JUMPI
000001a5: DUP1
000001a6: PUSH1 0x1f
000001a8: LT
000001a9: PUSH2 0x05e4
000001ac: JUMPI
000001ad: PUSH2 0x0100
000001b0: DUP1
000001b1: DUP4
000001b2: SLOAD
000001b3: DIV
000001b4: MUL
000001b5: DUP4
000001b6: MSTORE
000001b7: SWAP2
000001b8: PUSH1 0x20
000001ba: ADD
000001bb: SWAP2
000001bc: PUSH2 0x060f
000001bf: JUMP
000001c0: JUMPDEST
000001c1: PUSH2 0x0473
000001c4: PUSH1 0x00
000001c6: DUP1
000001c7: SLOAD
000001c8: PUSH1 0x01
000001ca: PUSH1 0xa0
000001cc: PUSH1 0x02
000001ce: EXP
000001cf: SUB
000001d0: SWAP1
000001d1: DUP2
000001d2: AND
000001d3: CALLER
000001d4: SWAP1
000001d5: SWAP2
000001d6: AND
000001d7: EQ
000001d8: ISZERO
000001d9: PUSH2 0x06a9
000001dc: JUMPI
000001dd: GAS
000001de: SWAP1
000001df: POP
000001e0: PUSH2 0x06a9
000001e3: DUP2
000001e4: CALLER
000001e5: PUSH2 0x0284
000001e8: JUMP
000001e9: JUMPDEST
000001ea: PUSH2 0x0530
000001ed: PUSH1 0x07
000001ef: SLOAD
000001f0: PUSH2 0x013f
000001f3: JUMP
000001f4: JUMPDEST
000001f5: PUSH2 0x0530
000001f8: JUMPDEST
000001f9: PUSH2 0xb3b0
000001fc: PUSH2 0x013f
000001ff: JUMP
00000200: JUMPDEST
00000201: PUSH2 0x0530
00000204: PUSH1 0x03
00000206: SLOAD
00000207: DUP2
00000208: JUMP
00000209: JUMPDEST
0000020a: PUSH2 0x05b0
0000020d: PUSH1 0x00
0000020f: SLOAD
00000210: PUSH1 0x01
00000212: PUSH1 0xa0
00000214: PUSH1 0x02
00000216: EXP
00000217: SUB
00000218: AND
00000219: DUP2
0000021a: JUMP
0000021b: JUMPDEST
0000021c: PUSH2 0x05cd
0000021f: PUSH1 0x09
00000221: SLOAD
00000222: PUSH1 0xff
00000224: AND
00000225: DUP2
00000226: JUMP
00000227: JUMPDEST
00000228: PUSH2 0x05b0
0000022b: PUSH1 0x01
0000022d: SLOAD
0000022e: PUSH1 0x01
00000230: PUSH1 0xa0
00000232: PUSH1 0x02
00000234: EXP
00000235: SUB
00000236: AND
00000237: DUP2
00000238: JUMP
00000239: JUMPDEST
0000023a: PUSH2 0x0473
0000023d: PUSH1 0x01
0000023f: SLOAD
00000240: PUSH1 0x01
00000242: PUSH1 0xa0
00000244: PUSH1 0x02
00000246: EXP
00000247: SUB
00000248: SWAP1
00000249: DUP2
0000024a: AND
0000024b: CALLER
0000024c: SWAP1
0000024d: SWAP2
0000024e: AND
0000024f: EQ
00000250: ISZERO
00000251: PUSH2 0x0478
00000254: JUMPI
00000255: PUSH1 0x05
00000257: SLOAD
00000258: PUSH1 0x00
0000025a: PUSH1 0x02
0000025c: PUSH1 0x01
0000025e: DUP4
0000025f: AND
00000260: ISZERO
00000261: PUSH2 0x0100
00000264: MUL
00000265: PUSH1 0x00
00000267: NOT
00000268: ADD
00000269: SWAP1
0000026a: SWAP3
0000026b: AND
0000026c: SWAP2
0000026d: SWAP1
0000026e: SWAP2
0000026f: DIV
00000270: GT
00000271: ISZERO
00000272: PUSH2 0x061b
00000275: JUMPI
00000276: PUSH2 0x0002
00000279: JUMP
0000027a: JUMPDEST
0000027b: PUSH2 0x0473
0000027e: PUSH1 0x04
00000280: CALLDATALOAD
00000281: PUSH1 0x24
00000283: CALLDATALOAD
00000284: JUMPDEST
00000285: PUSH1 0x00
00000287: SLOAD
00000288: PUSH1 0x01
0000028a: PUSH1 0xa0
0000028c: PUSH1 0x02
0000028e: EXP
0000028f: SUB
00000290: SWAP1
00000291: DUP2
00000292: AND
00000293: CALLER
00000294: SWAP1
00000295: SWAP2
00000296: AND
00000297: EQ
00000298: ISZERO
00000299: PUSH2 0x0475
0000029c: JUMPI
0000029d: PUSH20 0x2746bcf29bffafcc7906752f639819171d18ce2b
000002b2: PUSH4 0x115256d8
000002b7: PUSH1 0x04
000002b9: PUSH1 0x00
000002bb: POP
000002bc: DUP5
000002bd: DUP5
000002be: PUSH1 0x02
000002c0: PUSH1 0x00
000002c2: POP
000002c3: SLOAD
000002c4: PUSH1 0x03
000002c6: PUSH1 0x00
000002c8: POP
000002c9: SLOAD
000002ca: PUSH2 0x06ac
000002cd: PUSH2 0x01f8
000002d0: JUMP
000002d1: JUMPDEST
000002d2: PUSH2 0x0530
000002d5: PUSH1 0x02
000002d7: SLOAD
000002d8: DUP2
000002d9: JUMP
000002da: JUMPDEST
000002db: PUSH2 0x0530
000002de: PUSH1 0x04
000002e0: SLOAD
000002e1: PUSH21 0x010000000000000000000000000000000000000000
000002f7: SWAP1
000002f8: DIV
000002f9: PUSH1 0xe0
000002fb: PUSH1 0x02
000002fd: EXP
000002fe: MUL
000002ff: PUSH2 0x013f
00000302: JUMP
00000303: JUMPDEST
00000304: PUSH2 0x0473
00000307: PUSH1 0x01
00000309: SLOAD
0000030a: PUSH1 0x01
0000030c: PUSH1 0xa0
0000030e: PUSH1 0x02
00000310: EXP
00000311: SUB
00000312: SWAP1
00000313: DUP2
00000314: AND
00000315: CALLER
00000316: SWAP1
00000317: SWAP2
00000318: AND
00000319: EQ
0000031a: ISZERO
0000031b: PUSH2 0x0478
0000031e: JUMPI
0000031f: PUSH1 0x08
00000321: SLOAD
00000322: PUSH1 0x09
00000324: NOT
00000325: ADD
00000326: NUMBER
00000327: LT
00000328: DUP1
00000329: PUSH2 0x033a
0000032c: JUMPI
0000032d: POP
0000032e: PUSH1 0x08
00000330: SLOAD
00000331: PUSH1 0x09
00000333: SLOAD
00000334: PUSH1 0xff
00000336: AND
00000337: ADD
00000338: NUMBER
00000339: GT
0000033a: JUMPDEST
0000033b: ISZERO
0000033c: PUSH2 0x0478
0000033f: JUMPI
00000340: PUSH20 0x2746bcf29bffafcc7906752f639819171d18ce2b
00000355: PUSH4 0x4c33fe94
0000035a: CALLER
0000035b: PUSH1 0x40
0000035d: MLOAD
0000035e: DUP3
0000035f: PUSH1 0xe0
00000361: PUSH1 0x02
00000363: EXP
00000364: MUL
00000365: DUP2
00000366: MSTORE
00000367: PUSH1 0x04
00000369: ADD
0000036a: DUP1
0000036b: DUP3
0000036c: PUSH1 0x01
0000036e: PUSH1 0xa0
00000370: PUSH1 0x02
00000372: EXP
00000373: SUB
00000374: AND
00000375: DUP2
00000376: MSTORE
00000377: PUSH1 0x20
00000379: ADD
0000037a: SWAP2
0000037b: POP
0000037c: POP
0000037d: PUSH1 0x00
0000037f: PUSH1 0x40
00000381: MLOAD
00000382: DUP1
00000383: DUP4
00000384: SUB
00000385: DUP2
00000386: PUSH1 0x00
00000388: DUP8
00000389: PUSH1 0x32
0000038b: GAS
0000038c: SUB
0000038d: CALLCODE
0000038e: ISZERO
0000038f: PUSH2 0x0002
00000392: JUMPI
00000393: POP
00000394: POP
00000395: POP
00000396: JUMP
00000397: JUMPDEST
00000398: PUSH2 0x0530
0000039b: PUSH1 0x04
0000039d: CALLDATALOAD
0000039e: PUSH1 0x08
000003a0: SLOAD
000003a1: PUSH1 0x00
000003a3: SWAP1
000003a4: NUMBER
000003a5: LT
000003a6: DUP1
000003a7: PUSH2 0x03b8
000003aa: JUMPI
000003ab: POP
000003ac: PUSH1 0x08
000003ae: SLOAD
000003af: PUSH1 0x09
000003b1: SLOAD
000003b2: PUSH1 0xff
000003b4: AND
000003b5: ADD
000003b6: NUMBER
000003b7: GT
000003b8: JUMPDEST
000003b9: ISZERO
000003ba: PUSH2 0x072b
000003bd: JUMPI
000003be: PUSH1 0x40
000003c0: DUP1
000003c1: MLOAD
000003c2: PUSH32 0xdcb2788300000000000000000000000000000000000000000000000000000000
000003e3: DUP2
000003e4: MSTORE
000003e5: PUSH1 0x01
000003e7: PUSH1 0xa0
000003e9: PUSH1 0x02
000003eb: EXP
000003ec: SUB
000003ed: DUP5
000003ee: AND
000003ef: PUSH1 0x04
000003f1: DUP3
000003f2: ADD
000003f3: MSTORE
000003f4: PUSH32 0x4e4f545f494e5f43414c4c5f57494e444f570000000000000000000000000000
00000415: PUSH1 0x24
00000417: DUP3
00000418: ADD
00000419: MSTORE
0000041a: SWAP1
0000041b: MLOAD
0000041c: PUSH20 0x2746bcf29bffafcc7906752f639819171d18ce2b
00000431: SWAP2
00000432: PUSH4 0xdcb27883
00000437: SWAP2
00000438: PUSH1 0x44
0000043a: DUP3
0000043b: DUP2
0000043c: ADD
0000043d: SWAP3
0000043e: PUSH1 0x00
00000440: SWAP3
00000441: SWAP2
00000442: SWAP1
00000443: DUP3
00000444: SWAP1
00000445: SUB
00000446: ADD
00000447: DUP2
00000448: DUP4
00000449: DUP8
0000044a: PUSH1 0x32
0000044c: GAS
0000044d: SUB
0000044e: CALLCODE
0000044f: ISZERO
00000450: PUSH2 0x0002
00000453: JUMPI
00000454: POP
00000455: POP
00000456: POP
00000457: PUSH1 0x00
00000459: SWAP1
0000045a: POP
0000045b: PUSH2 0x072f
0000045e: JUMP
0000045f: JUMPDEST
00000460: PUSH2 0x05b0
00000463: PUSH1 0x04
00000465: SLOAD
00000466: PUSH1 0x01
00000468: PUSH1 0xa0
0000046a: PUSH1 0x02
0000046c: EXP
0000046d: SUB
0000046e: AND
0000046f: PUSH2 0x013f
00000472: JUMP
00000473: JUMPDEST
00000474: STOP
00000475: JUMPDEST
00000476: POP
00000477: POP
00000478: JUMPDEST
00000479: JUMP
0000047a: JUMPDEST
0000047b: PUSH1 0x05
0000047d: DUP1
0000047e: SLOAD
0000047f: PUSH1 0x00
00000481: DUP3
00000482: DUP2
00000483: MSTORE
00000484: PUSH1 0x20
00000486: PUSH1 0x02
00000488: PUSH1 0x01
0000048a: DUP5
0000048b: AND
0000048c: ISZERO
0000048d: PUSH2 0x0100
00000490: MUL
00000491: PUSH1 0x00
00000493: NOT
00000494: ADD
00000495: SWAP1
00000496: SWAP4
00000497: AND
00000498: SWAP3
00000499: SWAP1
0000049a: SWAP3
0000049b: DIV
0000049c: PUSH1 0x1f
0000049e: SWAP1
0000049f: DUP2
000004a0: ADD
000004a1: SWAP3
000004a2: SWAP1
000004a3: SWAP3
000004a4: DIV
000004a5: PUSH32 0x036b6384b5eca791c62761152d0c79bb0604c104a5fb6f4eb0703f3154bb3db0
000004c6: SWAP1
000004c7: DUP2
000004c8: ADD
000004c9: SWAP3
000004ca: CALLDATASIZE
000004cb: SWAP3
000004cc: SWAP1
000004cd: DUP4
000004ce: SWAP1
000004cf: LT
000004d0: PUSH2 0x04fc
000004d3: JUMPI
000004d4: DUP3
000004d5: DUP1
000004d6: ADD
000004d7: PUSH1 0xff
000004d9: NOT
000004da: DUP3
000004db: CALLDATALOAD
000004dc: AND
000004dd: OR
000004de: DUP6
000004df: SSTORE
000004e0: JUMPDEST
000004e1: POP
000004e2: PUSH2 0x0475
000004e5: SWAP3
000004e6: SWAP2
000004e7: POP
000004e8: JUMPDEST
000004e9: DUP1
000004ea: DUP3
000004eb: GT
000004ec: ISZERO
000004ed: PUSH2 0x052c
000004f0: JUMPI
000004f1: PUSH1 0x00
000004f3: DUP2
000004f4: SSTORE
000004f5: PUSH1 0x01
000004f7: ADD
000004f8: PUSH2 0x04e8
000004fb: JUMP
000004fc: JUMPDEST
000004fd: DUP3
000004fe: DUP1
000004ff: ADD
00000500: PUSH1 0x01
00000502: ADD
00000503: DUP6
00000504: SSTORE
00000505: DUP3
00000506: ISZERO
00000507: PUSH2 0x04e0
0000050a: JUMPI
0000050b: SWAP2
0000050c: DUP3
0000050d: ADD
0000050e: JUMPDEST
0000050f: DUP3
00000510: DUP2
00000511: GT
00000512: ISZERO
00000513: PUSH2 0x04e0
00000516: JUMPI
00000517: DUP3
00000518: CALLDATALOAD
00000519: DUP3
0000051a: PUSH1 0x00
0000051c: POP
0000051d: SSTORE
0000051e: SWAP2
0000051f: PUSH1 0x20
00000521: ADD
00000522: SWAP2
00000523: SWAP1
00000524: PUSH1 0x01
00000526: ADD
00000527: SWAP1
00000528: PUSH2 0x050e
0000052b: JUMP
0000052c: JUMPDEST
0000052d: POP
0000052e: SWAP1
0000052f: JUMP
00000530: JUMPDEST
00000531: PUSH1 0x40
00000533: DUP1
00000534: MLOAD
00000535: SWAP2
00000536: DUP3
00000537: MSTORE
00000538: MLOAD
00000539: SWAP1
0000053a: DUP2
0000053b: SWAP1
0000053c: SUB
0000053d: PUSH1 0x20
0000053f: ADD
00000540: SWAP1
00000541: RETURN
00000542: JUMPDEST
00000543: PUSH1 0x40
00000545: MLOAD
00000546: DUP1
00000547: DUP1
00000548: PUSH1 0x20
0000054a: ADD
0000054b: DUP3
0000054c: DUP2
0000054d: SUB
0000054e: DUP3
0000054f: MSTORE
00000550: DUP4
00000551: DUP2
00000552: DUP2
00000553: MLOAD
00000554: DUP2
00000555: MSTORE
00000556: PUSH1 0x20
00000558: ADD
00000559: SWAP2
0000055a: POP
0000055b: DUP1
0000055c: MLOAD
0000055d: SWAP1
0000055e: PUSH1 0x20
00000560: ADD
00000561: SWAP1
00000562: DUP1
00000563: DUP4
00000564: DUP4
00000565: DUP3
00000566: SWAP1
00000567: PUSH1 0x00
00000569: PUSH1 0x04
0000056b: PUSH1 0x20
0000056d: DUP5
0000056e: PUSH1 0x1f
00000570: ADD
00000571: DIV
00000572: PUSH1 0x03
00000574: MUL
00000575: PUSH1 0x0f
00000577: ADD
00000578: CALL
00000579: POP
0000057a: SWAP1
0000057b: POP
0000057c: SWAP1
0000057d: DUP2
0000057e: ADD
0000057f: SWAP1
00000580: PUSH1 0x1f
00000582: AND
00000583: DUP1
00000584: ISZERO
00000585: PUSH2 0x05a2
00000588: JUMPI
00000589: DUP1
0000058a: DUP3
0000058b: SUB
0000058c: DUP1
0000058d: MLOAD
0000058e: PUSH1 0x01
00000590: DUP4
00000591: PUSH1 0x20
00000593: SUB
00000594: PUSH2 0x0100
00000597: EXP
00000598: SUB
00000599: NOT
0000059a: AND
0000059b: DUP2
0000059c: MSTORE
0000059d: PUSH1 0x20
0000059f: ADD
000005a0: SWAP2
000005a1: POP
000005a2: JUMPDEST
000005a3: POP
000005a4: SWAP3
000005a5: POP
000005a6: POP
000005a7: POP
000005a8: PUSH1 0x40
000005aa: MLOAD
000005ab: DUP1
000005ac: SWAP2
000005ad: SUB
000005ae: SWAP1
000005af: RETURN
000005b0: JUMPDEST
000005b1: PUSH1 0x40
000005b3: DUP1
000005b4: MLOAD
000005b5: PUSH1 0x01
000005b7: PUSH1 0xa0
000005b9: PUSH1 0x02
000005bb: EXP
000005bc: SUB
000005bd: SWAP3
000005be: SWAP1
000005bf: SWAP3
000005c0: AND
000005c1: DUP3
000005c2: MSTORE
000005c3: MLOAD
000005c4: SWAP1
000005c5: DUP2
000005c6: SWAP1
000005c7: SUB
000005c8: PUSH1 0x20
000005ca: ADD
000005cb: SWAP1
000005cc: RETURN
000005cd: JUMPDEST
000005ce: PUSH1 0x40
000005d0: DUP1
000005d1: MLOAD
000005d2: PUSH1 0xff
000005d4: SWAP3
000005d5: SWAP1
000005d6: SWAP3
000005d7: AND
000005d8: DUP3
000005d9: MSTORE
000005da: MLOAD
000005db: SWAP1
000005dc: DUP2
000005dd: SWAP1
000005de: SUB
000005df: PUSH1 0x20
000005e1: ADD
000005e2: SWAP1
000005e3: RETURN
000005e4: JUMPDEST
000005e5: DUP3
000005e6: ADD
000005e7: SWAP2
000005e8: SWAP1
000005e9: PUSH1 0x00
000005eb: MSTORE
000005ec: PUSH1 0x20
000005ee: PUSH1 0x00
000005f0: KECCAK256
000005f1: SWAP1
000005f2: JUMPDEST
000005f3: DUP2
000005f4: SLOAD
000005f5: DUP2
000005f6: MSTORE
000005f7: SWAP1
000005f8: PUSH1 0x01
000005fa: ADD
000005fb: SWAP1
000005fc: PUSH1 0x20
000005fe: ADD
000005ff: DUP1
00000600: DUP4
00000601: GT
00000602: PUSH2 0x05f2
00000605: JUMPI
00000606: DUP3
00000607: SWAP1
00000608: SUB
00000609: PUSH1 0x1f
0000060b: AND
0000060c: DUP3
0000060d: ADD
0000060e: SWAP2
0000060f: JUMPDEST
00000610: POP
00000611: POP
00000612: POP
00000613: POP
00000614: POP
00000615: SWAP1
00000616: POP
00000617: PUSH2 0x013f
0000061a: JUMP
0000061b: JUMPDEST
0000061c: PUSH1 0x40
0000061e: DUP1
0000061f: MLOAD
00000620: PUSH32 0x7c0278fc00000000000000000000000000000000000000000000000000000000
00000641: DUP2
00000642: MSTORE
00000643: PUSH1 0x04
00000645: DUP2
00000646: DUP2
00000647: ADD
00000648: DUP2
00000649: DUP2
0000064a: MSTORE
0000064b: PUSH1 0x24
0000064d: DUP4
0000064e: ADD
0000064f: SWAP4
00000650: DUP5
00000651: MSTORE
00000652: CALLDATASIZE
00000653: PUSH1 0x44
00000655: DUP5
00000656: ADD
00000657: DUP2
00000658: SWAP1
00000659: MSTORE
0000065a: PUSH20 0x2746bcf29bffafcc7906752f639819171d18ce2b
0000066f: SWAP5
00000670: PUSH4 0x7c0278fc
00000675: SWAP5
00000676: PUSH1 0x00
00000678: SWAP4
00000679: SWAP2
0000067a: SWAP1
0000067b: PUSH1 0x64
0000067d: ADD
0000067e: DUP5
0000067f: DUP5
00000680: DUP1
00000681: DUP3
00000682: DUP5
00000683: CALLDATACOPY
00000684: DUP3
00000685: ADD
00000686: SWAP2
00000687: POP
00000688: POP
00000689: SWAP5
0000068a: POP
0000068b: POP
0000068c: POP
0000068d: POP
0000068e: POP
0000068f: PUSH1 0x00
00000691: PUSH1 0x40
00000693: MLOAD
00000694: DUP1
00000695: DUP4
00000696: SUB
00000697: DUP2
00000698: PUSH1 0x00
0000069a: DUP8
0000069b: PUSH1 0x32
0000069d: GAS
0000069e: SUB
0000069f: CALLCODE
000006a0: ISZERO
000006a1: PUSH2 0x0002
000006a4: JUMPI
000006a5: POP
000006a6: POP
000006a7: POP
000006a8: JUMP
000006a9: JUMPDEST
000006aa: POP
000006ab: JUMP
000006ac: JUMPDEST
000006ad: PUSH2 0x06b4
000006b0: PUSH2 0x013b
000006b3: JUMP
000006b4: JUMPDEST
000006b5: PUSH1 0x40
000006b7: MLOAD
000006b8: DUP9
000006b9: PUSH1 0xe0
000006bb: PUSH1 0x02
000006bd: EXP
000006be: MUL
000006bf: DUP2
000006c0: MSTORE
000006c1: PUSH1 0x04
000006c3: ADD
000006c4: DUP1
000006c5: DUP9
000006c6: DUP2
000006c7: MSTORE
000006c8: PUSH1 0x20
000006ca: ADD
000006cb: DUP8
000006cc: DUP2
000006cd: MSTORE
000006ce: PUSH1 0x20
000006d0: ADD
000006d1: DUP7
000006d2: PUSH1 0x01
000006d4: PUSH1 0xa0
000006d6: PUSH1 0x02
000006d8: EXP
000006d9: SUB
000006da: AND
000006db: DUP2
000006dc: MSTORE
000006dd: PUSH1 0x20
000006df: ADD
000006e0: DUP6
000006e1: DUP2
000006e2: MSTORE
000006e3: PUSH1 0x20
000006e5: ADD
000006e6: DUP5
000006e7: DUP2
000006e8: MSTORE
000006e9: PUSH1 0x20
000006eb: ADD
000006ec: DUP4
000006ed: DUP2
000006ee: MSTORE
000006ef: PUSH1 0x20
000006f1: ADD
000006f2: DUP3
000006f3: DUP2
000006f4: MSTORE
000006f5: PUSH1 0x20
000006f7: ADD
000006f8: SWAP8
000006f9: POP
000006fa: POP
000006fb: POP
000006fc: POP
000006fd: POP
000006fe: POP
000006ff: POP
00000700: POP
00000701: PUSH1 0x00
00000703: PUSH1 0x40
00000705: MLOAD
00000706: DUP1
00000707: DUP4
00000708: SUB
00000709: DUP2
0000070a: PUSH1 0x00
0000070c: DUP8
0000070d: PUSH1 0x32
0000070f: GAS
00000710: SUB
00000711: CALLCODE
00000712: ISZERO
00000713: PUSH2 0x0002
00000716: JUMPI
00000717: POP
00000718: POP
00000719: POP
0000071a: PUSH2 0x0475
0000071d: DUP2
0000071e: PUSH1 0x01
00000720: SLOAD
00000721: PUSH1 0x01
00000723: PUSH1 0xa0
00000725: PUSH1 0x02
00000727: EXP
00000728: SUB
00000729: AND
0000072a: SELFDESTRUCT
0000072b: JUMPDEST
0000072c: POP
0000072d: PUSH1 0x01
0000072f: JUMPDEST
00000730: SWAP2
00000731: SWAP1
00000732: POP
00000733: JUMP

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x81006a13948d50e27809d956e7fc66fb95b40d79e03501581039b55751353b1c
call_targets: 0x6fdf04b93af8e9ef67ca5ee14e621bb0b046b4be
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x81006a13948d50e27809d956e7fc66fb95b40d79e03501581039b55751353b1c",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x6fdf04b93af8e9ef67ca5ee14e621bb0b046b4be"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x0a16697a",
            "selector": "0x0a16697a",
            "calldata_variants": [
                "0x0a16697a",
                "0x0a16697a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x137c638b",
            "selector": "0x137c638b",
            "calldata_variants": [
                "0x137c638b",
                "0x137c638b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x37f4c00e",
            "selector": "0x37f4c00e",
            "calldata_variants": [
                "0x37f4c00e",
                "0x37f4c00e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4136aa35",
            "selector": "0x4136aa35",
            "calldata_variants": [
                "0x4136aa35",
                "0x4136aa350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4e417a98",
            "selector": "0x4e417a98",
            "calldata_variants": [
                "0x4e417a98",
                "0x4e417a980000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x61461954",
            "selector": "0x61461954",
            "calldata_variants": [
                "0x61461954",
                "0x614619540000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6560a307",
            "selector": "0x6560a307",
            "calldata_variants": [
                "0x6560a307",
                "0x6560a3070000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x67ce940d",
            "selector": "0x67ce940d",
            "calldata_variants": [
                "0x67ce940d",
                "0x67ce940d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 909,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1102,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1400,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 5,
    "guards_detected": [],
    "untrusted_call_count": 5
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x81006a13948d50e27809d956e7fc66fb95b40d79e03501581039b55751353b1c
call_targets: 0x6fdf04b93af8e9ef67ca5ee14e621bb0b046b4be
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x81006a13948d50e27809d956e7fc66fb95b40d79e03501581039b55751353b1c",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x6fdf04b93af8e9ef67ca5ee14e621bb0b046b4be"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x0a16697a",
            "selector": "0x0a16697a",
            "calldata_variants": [
                "0x0a16697a",
                "0x0a16697a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x137c638b",
            "selector": "0x137c638b",
            "calldata_variants": [
                "0x137c638b",
                "0x137c638b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x37f4c00e",
            "selector": "0x37f4c00e",
            "calldata_variants": [
                "0x37f4c00e",
                "0x37f4c00e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4136aa35",
            "selector": "0x4136aa35",
            "calldata_variants": [
                "0x4136aa35",
                "0x4136aa350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4e417a98",
            "selector": "0x4e417a98",
            "calldata_variants": [
                "0x4e417a98",
                "0x4e417a980000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x61461954",
            "selector": "0x61461954",
            "calldata_variants": [
                "0x61461954",
                "0x614619540000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6560a307",
            "selector": "0x6560a307",
            "calldata_variants": [
                "0x6560a307",
                "0x6560a3070000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x67ce940d",
            "selector": "0x67ce940d",
            "calldata_variants": [
                "0x67ce940d",
                "0x67ce940d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 909,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1102,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1400,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 5,
    "guards_detected": []
}
high other detector SELFDESTRUCT reachable 65 no no
view
trace_id: 0x9b549857f32f377427c295c1f78240cdf379b29fb0428c71cd261c7f75af996d
validation_json 
{
    "sink": "SELFDESTRUCT",
    "errors": 0,
    "status": "unknown",
    "attempts": 32,
    "trace_id": "0x9b549857f32f377427c295c1f78240cdf379b29fb0428c71cd261c7f75af996d",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x0a16697a",
            "selector": "0x0a16697a",
            "calldata_variants": [
                "0x0a16697a",
                "0x0a16697a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x137c638b",
            "selector": "0x137c638b",
            "calldata_variants": [
                "0x137c638b",
                "0x137c638b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x37f4c00e",
            "selector": "0x37f4c00e",
            "calldata_variants": [
                "0x37f4c00e",
                "0x37f4c00e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4136aa35",
            "selector": "0x4136aa35",
            "calldata_variants": [
                "0x4136aa35",
                "0x4136aa350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4e417a98",
            "selector": "0x4e417a98",
            "calldata_variants": [
                "0x4e417a98",
                "0x4e417a980000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x61461954",
            "selector": "0x61461954",
            "calldata_variants": [
                "0x61461954",
                "0x614619540000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6560a307",
            "selector": "0x6560a307",
            "calldata_variants": [
                "0x6560a307",
                "0x6560a3070000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x67ce940d",
            "selector": "0x67ce940d",
            "calldata_variants": [
                "0x67ce940d",
                "0x67ce940d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "guards_detected": [],
    "selfdestruct_count": 1
}