TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-a8bd-7104-b06d-8b7f0c1790ce

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
20485 artifact.fetch complete 1 / 3 3 months ago
20486 tool.cast_disasm complete 1 / 3 3 months ago
88605 analysis.bundle complete 1 / 3 1 week ago
88606 capability.graph complete 1 / 3 1 week ago
88607 detector.run complete 1 / 3 1 week ago
88608 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
0
Total opcodes
1282
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0082
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x095ea7b3
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00c9
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x18160ddd
00000025: EQ
00000026: PUSH2 0x0154
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x23b872dd
00000030: EQ
00000031: PUSH2 0x015d
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x29cbdc86
0000003b: EQ
0000003c: PUSH2 0x0195
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x55234ec0
00000046: EQ
00000047: PUSH2 0x01a8
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x5af36e3e
00000051: EQ
00000052: PUSH2 0x01b1
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x70a08231
0000005c: EQ
0000005d: PUSH2 0x0252
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0xa035b1fe
00000067: EQ
00000068: PUSH2 0x0280
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0xa9059cbb
00000072: EQ
00000073: PUSH2 0x0289
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xdd62ed3e
0000007d: EQ
0000007e: PUSH2 0x02c1
00000081: JUMPI
00000082: JUMPDEST
00000083: PUSH2 0x02fa
00000086: PUSH2 0x02fc
00000089: CALLER
0000008a: PUSH1 0xff
0000008c: PUSH1 0x02
0000008e: EXP
0000008f: JUMPDEST
00000090: CALLVALUE
00000091: PUSH1 0x00
00000093: DUP1
00000094: DUP1
00000095: JUMPDEST
00000096: PUSH1 0x00
00000098: DUP5
00000099: GT
0000009a: DUP1
0000009b: ISZERO
0000009c: PUSH2 0x00a8
0000009f: JUMPI
000000a0: POP
000000a1: PUSH1 0x02
000000a3: SLOAD
000000a4: DUP6
000000a5: SWAP1
000000a6: GT
000000a7: ISZERO
000000a8: JUMPDEST
000000a9: ISZERO
000000aa: PUSH2 0x0312
000000ad: JUMPI
000000ae: PUSH1 0x02
000000b0: SLOAD
000000b1: PUSH1 0x03
000000b3: SLOAD
000000b4: PUSH3 0x0f4240
000000b8: SWAP2
000000b9: MUL
000000ba: DIV
000000bb: SWAP3
000000bc: POP
000000bd: DUP3
000000be: DUP5
000000bf: GT
000000c0: PUSH2 0x031a
000000c3: JUMPI
000000c4: DUP4
000000c5: PUSH2 0x031c
000000c8: JUMP
000000c9: JUMPDEST
000000ca: PUSH2 0x02fe
000000cd: PUSH1 0x04
000000cf: CALLDATALOAD
000000d0: PUSH1 0x24
000000d2: CALLDATALOAD
000000d3: PUSH1 0x00
000000d5: DUP3
000000d6: PUSH1 0x01
000000d8: PUSH1 0xa0
000000da: PUSH1 0x02
000000dc: EXP
000000dd: SUB
000000de: AND
000000df: CALLER
000000e0: PUSH1 0x01
000000e2: PUSH1 0xa0
000000e4: PUSH1 0x02
000000e6: EXP
000000e7: SUB
000000e8: AND
000000e9: PUSH32 0x8c5be1e5ebec7d5bd14f71427d1e84f3dd0314c0f7b2291e5b200ac8c7c3b925
0000010a: DUP5
0000010b: PUSH1 0x40
0000010d: MLOAD
0000010e: DUP1
0000010f: DUP3
00000110: DUP2
00000111: MSTORE
00000112: PUSH1 0x20
00000114: ADD
00000115: SWAP2
00000116: POP
00000117: POP
00000118: PUSH1 0x40
0000011a: MLOAD
0000011b: DUP1
0000011c: SWAP2
0000011d: SUB
0000011e: SWAP1
0000011f: LOG3
00000120: PUSH1 0x01
00000122: PUSH1 0xa0
00000124: PUSH1 0x02
00000126: EXP
00000127: SUB
00000128: CALLER
00000129: DUP2
0000012a: AND
0000012b: DUP3
0000012c: MSTORE
0000012d: PUSH1 0x01
0000012f: PUSH1 0x20
00000131: DUP2
00000132: DUP2
00000133: MSTORE
00000134: PUSH1 0x40
00000136: DUP1
00000137: DUP6
00000138: KECCAK256
00000139: SWAP4
0000013a: DUP8
0000013b: AND
0000013c: DUP6
0000013d: MSTORE
0000013e: PUSH1 0x02
00000140: SWAP4
00000141: SWAP1
00000142: SWAP4
00000143: ADD
00000144: SWAP1
00000145: MSTORE
00000146: SWAP2
00000147: KECCAK256
00000148: DUP1
00000149: SLOAD
0000014a: DUP4
0000014b: ADD
0000014c: SWAP1
0000014d: SSTORE
0000014e: JUMPDEST
0000014f: SWAP3
00000150: SWAP2
00000151: POP
00000152: POP
00000153: JUMP
00000154: JUMPDEST
00000155: PUSH2 0x026e
00000158: PUSH1 0x00
0000015a: SLOAD
0000015b: DUP2
0000015c: JUMP
0000015d: JUMPDEST
0000015e: PUSH2 0x02fe
00000161: PUSH1 0x04
00000163: CALLDATALOAD
00000164: PUSH1 0x24
00000166: CALLDATALOAD
00000167: PUSH1 0x44
00000169: CALLDATALOAD
0000016a: PUSH1 0x01
0000016c: PUSH1 0xa0
0000016e: PUSH1 0x02
00000170: EXP
00000171: SUB
00000172: DUP4
00000173: AND
00000174: PUSH1 0x00
00000176: SWAP1
00000177: DUP2
00000178: MSTORE
00000179: PUSH1 0x01
0000017b: PUSH1 0x20
0000017d: MSTORE
0000017e: PUSH1 0x40
00000180: DUP2
00000181: KECCAK256
00000182: SLOAD
00000183: DUP5
00000184: SWAP1
00000185: DUP4
00000186: SWAP1
00000187: DUP2
00000188: SWAP1
00000189: LT
0000018a: ISZERO
0000018b: PUSH2 0x056f
0000018e: JUMPI
0000018f: POP
00000190: POP
00000191: PUSH2 0x0568
00000194: JUMP
00000195: JUMPDEST
00000196: PUSH2 0x02fa
00000199: PUSH1 0x04
0000019b: CALLDATALOAD
0000019c: PUSH1 0x24
0000019e: CALLDATALOAD
0000019f: PUSH2 0x05b1
000001a2: DUP3
000001a3: DUP3
000001a4: PUSH2 0x008f
000001a7: JUMP
000001a8: JUMPDEST
000001a9: PUSH2 0x026e
000001ac: PUSH1 0x03
000001ae: SLOAD
000001af: DUP2
000001b0: JUMP
000001b1: JUMPDEST
000001b2: PUSH2 0x02fe
000001b5: PUSH1 0x04
000001b7: CALLDATALOAD
000001b8: PUSH1 0x24
000001ba: CALLDATALOAD
000001bb: PUSH1 0x01
000001bd: PUSH1 0xa0
000001bf: PUSH1 0x02
000001c1: EXP
000001c2: SUB
000001c3: CALLER
000001c4: AND
000001c5: PUSH1 0x00
000001c7: SWAP1
000001c8: DUP2
000001c9: MSTORE
000001ca: PUSH1 0x01
000001cc: PUSH1 0x20
000001ce: DUP2
000001cf: DUP2
000001d0: MSTORE
000001d1: PUSH1 0x40
000001d3: DUP1
000001d4: DUP5
000001d5: KECCAK256
000001d6: DUP7
000001d7: DUP6
000001d8: MSTORE
000001d9: SWAP1
000001da: SWAP3
000001db: ADD
000001dc: SWAP1
000001dd: MSTORE
000001de: DUP2
000001df: KECCAK256
000001e0: SLOAD
000001e1: DUP4
000001e2: SWAP1
000001e3: DUP4
000001e4: SWAP1
000001e5: DUP2
000001e6: SWAP1
000001e7: LT
000001e8: DUP1
000001e9: PUSH2 0x0246
000001ec: JUMPI
000001ed: POP
000001ee: PUSH1 0x01
000001f0: PUSH1 0x00
000001f2: POP
000001f3: PUSH1 0x00
000001f5: CALLER
000001f6: PUSH1 0x01
000001f8: PUSH1 0xa0
000001fa: PUSH1 0x02
000001fc: EXP
000001fd: SUB
000001fe: AND
000001ff: DUP2
00000200: MSTORE
00000201: PUSH1 0x20
00000203: ADD
00000204: SWAP1
00000205: DUP2
00000206: MSTORE
00000207: PUSH1 0x20
00000209: ADD
0000020a: PUSH1 0x00
0000020c: KECCAK256
0000020d: PUSH1 0x00
0000020f: POP
00000210: PUSH1 0x01
00000212: ADD
00000213: PUSH1 0x00
00000215: POP
00000216: PUSH1 0x00
00000218: DUP4
00000219: DUP2
0000021a: MSTORE
0000021b: PUSH1 0x20
0000021d: ADD
0000021e: SWAP1
0000021f: DUP2
00000220: MSTORE
00000221: PUSH1 0x20
00000223: ADD
00000224: PUSH1 0x00
00000226: KECCAK256
00000227: PUSH1 0x00
00000229: POP
0000022a: PUSH1 0x01
0000022c: ADD
0000022d: PUSH1 0x00
0000022f: SWAP1
00000230: SLOAD
00000231: SWAP1
00000232: PUSH2 0x0100
00000235: EXP
00000236: SWAP1
00000237: DIV
00000238: PUSH4 0xffffffff
0000023d: AND
0000023e: PUSH4 0xffffffff
00000243: AND
00000244: TIMESTAMP
00000245: LT
00000246: JUMPDEST
00000247: ISZERO
00000248: PUSH2 0x05b5
0000024b: JUMPI
0000024c: POP
0000024d: POP
0000024e: PUSH2 0x014e
00000251: JUMP
00000252: JUMPDEST
00000253: PUSH1 0x04
00000255: CALLDATALOAD
00000256: PUSH1 0x01
00000258: PUSH1 0xa0
0000025a: PUSH1 0x02
0000025c: EXP
0000025d: SUB
0000025e: AND
0000025f: PUSH1 0x00
00000261: SWAP1
00000262: DUP2
00000263: MSTORE
00000264: PUSH1 0x01
00000266: PUSH1 0x20
00000268: MSTORE
00000269: PUSH1 0x40
0000026b: SWAP1
0000026c: KECCAK256
0000026d: SLOAD
0000026e: JUMPDEST
0000026f: PUSH1 0x40
00000271: DUP1
00000272: MLOAD
00000273: SWAP2
00000274: DUP3
00000275: MSTORE
00000276: MLOAD
00000277: SWAP1
00000278: DUP2
00000279: SWAP1
0000027a: SUB
0000027b: PUSH1 0x20
0000027d: ADD
0000027e: SWAP1
0000027f: RETURN
00000280: JUMPDEST
00000281: PUSH2 0x026e
00000284: PUSH1 0x02
00000286: SLOAD
00000287: DUP2
00000288: JUMP
00000289: JUMPDEST
0000028a: PUSH2 0x02fe
0000028d: PUSH1 0x04
0000028f: CALLDATALOAD
00000290: PUSH1 0x24
00000292: CALLDATALOAD
00000293: PUSH1 0x01
00000295: PUSH1 0xa0
00000297: PUSH1 0x02
00000299: EXP
0000029a: SUB
0000029b: CALLER
0000029c: SWAP1
0000029d: DUP2
0000029e: AND
0000029f: PUSH1 0x00
000002a1: SWAP1
000002a2: DUP2
000002a3: MSTORE
000002a4: PUSH1 0x01
000002a6: PUSH1 0x20
000002a8: MSTORE
000002a9: PUSH1 0x40
000002ab: DUP2
000002ac: KECCAK256
000002ad: SLOAD
000002ae: SWAP1
000002af: SWAP2
000002b0: SWAP1
000002b1: DUP4
000002b2: SWAP1
000002b3: DUP2
000002b4: SWAP1
000002b5: LT
000002b6: ISZERO
000002b7: PUSH2 0x06fb
000002ba: JUMPI
000002bb: POP
000002bc: POP
000002bd: PUSH2 0x014e
000002c0: JUMP
000002c1: JUMPDEST
000002c2: PUSH2 0x026e
000002c5: PUSH1 0x04
000002c7: CALLDATALOAD
000002c8: PUSH1 0x24
000002ca: CALLDATALOAD
000002cb: PUSH1 0x01
000002cd: PUSH1 0xa0
000002cf: PUSH1 0x02
000002d1: EXP
000002d2: SUB
000002d3: DUP3
000002d4: DUP2
000002d5: AND
000002d6: PUSH1 0x00
000002d8: SWAP1
000002d9: DUP2
000002da: MSTORE
000002db: PUSH1 0x01
000002dd: PUSH1 0x20
000002df: SWAP1
000002e0: DUP2
000002e1: MSTORE
000002e2: PUSH1 0x40
000002e4: DUP1
000002e5: DUP4
000002e6: KECCAK256
000002e7: SWAP4
000002e8: DUP6
000002e9: AND
000002ea: DUP4
000002eb: MSTORE
000002ec: PUSH1 0x02
000002ee: SWAP4
000002ef: SWAP1
000002f0: SWAP4
000002f1: ADD
000002f2: SWAP1
000002f3: MSTORE
000002f4: KECCAK256
000002f5: SLOAD
000002f6: PUSH2 0x014e
000002f9: JUMP
000002fa: JUMPDEST
000002fb: STOP
000002fc: JUMPDEST
000002fd: JUMP
000002fe: JUMPDEST
000002ff: PUSH1 0x40
00000301: DUP1
00000302: MLOAD
00000303: SWAP2
00000304: ISZERO
00000305: ISZERO
00000306: DUP3
00000307: MSTORE
00000308: MLOAD
00000309: SWAP1
0000030a: DUP2
0000030b: SWAP1
0000030c: SUB
0000030d: PUSH1 0x20
0000030f: ADD
00000310: SWAP1
00000311: RETURN
00000312: JUMPDEST
00000313: POP
00000314: POP
00000315: POP
00000316: POP
00000317: POP
00000318: POP
00000319: JUMP
0000031a: JUMPDEST
0000031b: DUP3
0000031c: JUMPDEST
0000031d: SWAP2
0000031e: POP
0000031f: PUSH1 0x02
00000321: PUSH1 0x00
00000323: POP
00000324: SLOAD
00000325: PUSH3 0x0f4240
00000329: DUP4
0000032a: MUL
0000032b: DIV
0000032c: SWAP1
0000032d: POP
0000032e: DUP1
0000032f: PUSH1 0x01
00000331: PUSH1 0x00
00000333: POP
00000334: PUSH1 0x00
00000336: CALLER
00000337: PUSH1 0x01
00000339: PUSH1 0xa0
0000033b: PUSH1 0x02
0000033d: EXP
0000033e: SUB
0000033f: AND
00000340: DUP2
00000341: MSTORE
00000342: PUSH1 0x20
00000344: ADD
00000345: SWAP1
00000346: DUP2
00000347: MSTORE
00000348: PUSH1 0x20
0000034a: ADD
0000034b: PUSH1 0x00
0000034d: KECCAK256
0000034e: PUSH1 0x00
00000350: POP
00000351: PUSH1 0x00
00000353: ADD
00000354: PUSH1 0x00
00000356: DUP3
00000357: DUP3
00000358: DUP3
00000359: POP
0000035a: SLOAD
0000035b: ADD
0000035c: SWAP3
0000035d: POP
0000035e: POP
0000035f: DUP2
00000360: SWAP1
00000361: SSTORE
00000362: POP
00000363: DUP1
00000364: PUSH1 0x01
00000366: PUSH1 0x00
00000368: POP
00000369: PUSH1 0x00
0000036b: CALLER
0000036c: PUSH1 0x01
0000036e: PUSH1 0xa0
00000370: PUSH1 0x02
00000372: EXP
00000373: SUB
00000374: AND
00000375: DUP2
00000376: MSTORE
00000377: PUSH1 0x20
00000379: ADD
0000037a: SWAP1
0000037b: DUP2
0000037c: MSTORE
0000037d: PUSH1 0x20
0000037f: ADD
00000380: PUSH1 0x00
00000382: KECCAK256
00000383: PUSH1 0x00
00000385: POP
00000386: PUSH1 0x01
00000388: ADD
00000389: PUSH1 0x00
0000038b: POP
0000038c: PUSH1 0x00
0000038e: PUSH1 0x02
00000390: PUSH1 0x00
00000392: POP
00000393: SLOAD
00000394: DUP2
00000395: MSTORE
00000396: PUSH1 0x20
00000398: ADD
00000399: SWAP1
0000039a: DUP2
0000039b: MSTORE
0000039c: PUSH1 0x20
0000039e: ADD
0000039f: PUSH1 0x00
000003a1: KECCAK256
000003a2: PUSH1 0x00
000003a4: POP
000003a5: PUSH1 0x00
000003a7: ADD
000003a8: PUSH1 0x00
000003aa: DUP3
000003ab: DUP3
000003ac: DUP3
000003ad: POP
000003ae: SLOAD
000003af: ADD
000003b0: SWAP3
000003b1: POP
000003b2: POP
000003b3: DUP2
000003b4: SWAP1
000003b5: SSTORE
000003b6: POP
000003b7: PUSH3 0x093a80
000003bb: TIMESTAMP
000003bc: ADD
000003bd: PUSH1 0x01
000003bf: PUSH1 0x00
000003c1: POP
000003c2: PUSH1 0x00
000003c4: CALLER
000003c5: PUSH1 0x01
000003c7: PUSH1 0xa0
000003c9: PUSH1 0x02
000003cb: EXP
000003cc: SUB
000003cd: AND
000003ce: DUP2
000003cf: MSTORE
000003d0: PUSH1 0x20
000003d2: ADD
000003d3: SWAP1
000003d4: DUP2
000003d5: MSTORE
000003d6: PUSH1 0x20
000003d8: ADD
000003d9: PUSH1 0x00
000003db: KECCAK256
000003dc: PUSH1 0x00
000003de: POP
000003df: PUSH1 0x01
000003e1: ADD
000003e2: PUSH1 0x00
000003e4: POP
000003e5: PUSH1 0x00
000003e7: PUSH1 0x02
000003e9: PUSH1 0x00
000003eb: POP
000003ec: SLOAD
000003ed: DUP2
000003ee: MSTORE
000003ef: PUSH1 0x20
000003f1: ADD
000003f2: SWAP1
000003f3: DUP2
000003f4: MSTORE
000003f5: PUSH1 0x20
000003f7: ADD
000003f8: PUSH1 0x00
000003fa: KECCAK256
000003fb: PUSH1 0x00
000003fd: POP
000003fe: PUSH1 0x01
00000400: ADD
00000401: PUSH1 0x00
00000403: PUSH2 0x0100
00000406: EXP
00000407: DUP2
00000408: SLOAD
00000409: DUP2
0000040a: PUSH4 0xffffffff
0000040f: MUL
00000410: NOT
00000411: AND
00000412: SWAP1
00000413: DUP4
00000414: MUL
00000415: OR
00000416: SWAP1
00000417: SSTORE
00000418: POP
00000419: DUP1
0000041a: PUSH1 0x00
0000041c: PUSH1 0x00
0000041e: DUP3
0000041f: DUP3
00000420: DUP3
00000421: POP
00000422: SLOAD
00000423: ADD
00000424: SWAP3
00000425: POP
00000426: POP
00000427: DUP2
00000428: SWAP1
00000429: SSTORE
0000042a: POP
0000042b: DUP1
0000042c: PUSH1 0x02
0000042e: PUSH1 0x00
00000430: POP
00000431: SLOAD
00000432: CALLER
00000433: PUSH1 0x01
00000435: PUSH1 0xa0
00000437: PUSH1 0x02
00000439: EXP
0000043a: SUB
0000043b: AND
0000043c: PUSH32 0x689dcb02b6a65e0e2f1d23ef47c1ec86604ffbed0bcb65f20150cfc7d5e5a948
0000045d: PUSH1 0x40
0000045f: MLOAD
00000460: DUP1
00000461: SWAP1
00000462: POP
00000463: PUSH1 0x40
00000465: MLOAD
00000466: DUP1
00000467: SWAP2
00000468: SUB
00000469: SWAP1
0000046a: LOG4
0000046b: PUSH1 0x03
0000046d: DUP1
0000046e: SLOAD
0000046f: DUP3
00000470: SWAP1
00000471: SUB
00000472: SWAP1
00000473: DUP2
00000474: SWAP1
00000475: SSTORE
00000476: SWAP4
00000477: DUP3
00000478: SWAP1
00000479: SUB
0000047a: SWAP4
0000047b: PUSH1 0x00
0000047d: EQ
0000047e: ISZERO
0000047f: PUSH2 0x04c5
00000482: JUMPI
00000483: PUSH1 0x02
00000485: DUP1
00000486: SLOAD
00000487: PUSH7 0x038d7ea4c68000
0000048f: ADD
00000490: SWAP1
00000491: DUP2
00000492: SWAP1
00000493: SSTORE
00000494: PUSH4 0x05f5e100
00000499: PUSH1 0x03
0000049b: SSTORE
0000049c: PUSH1 0x40
0000049e: MLOAD
0000049f: PUSH32 0x23c3dae768238f239632b5c4acb89485b440e0fa72481c4aad9f9b4f9b5a0a5f
000004c0: SWAP1
000004c1: PUSH1 0x00
000004c3: SWAP1
000004c4: LOG2
000004c5: JUMPDEST
000004c6: PUSH2 0x0095
000004c9: JUMP
000004ca: JUMPDEST
000004cb: DUP8
000004cc: PUSH1 0x01
000004ce: PUSH1 0xa0
000004d0: PUSH1 0x02
000004d2: EXP
000004d3: SUB
000004d4: AND
000004d5: DUP10
000004d6: PUSH1 0x01
000004d8: PUSH1 0xa0
000004da: PUSH1 0x02
000004dc: EXP
000004dd: SUB
000004de: AND
000004df: PUSH32 0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef
00000500: DUP10
00000501: PUSH1 0x40
00000503: MLOAD
00000504: DUP1
00000505: DUP3
00000506: DUP2
00000507: MSTORE
00000508: PUSH1 0x20
0000050a: ADD
0000050b: SWAP2
0000050c: POP
0000050d: POP
0000050e: PUSH1 0x40
00000510: MLOAD
00000511: DUP1
00000512: SWAP2
00000513: SUB
00000514: SWAP1
00000515: LOG3
00000516: POP
00000517: POP
00000518: POP
00000519: POP
0000051a: PUSH1 0x01
0000051c: PUSH1 0xa0
0000051e: PUSH1 0x02
00000520: EXP
00000521: SUB
00000522: DUP6
00000523: DUP2
00000524: AND
00000525: PUSH1 0x00
00000527: SWAP1
00000528: DUP2
00000529: MSTORE
0000052a: PUSH1 0x01
0000052c: PUSH1 0x20
0000052e: DUP2
0000052f: DUP2
00000530: MSTORE
00000531: PUSH1 0x40
00000533: DUP1
00000534: DUP5
00000535: KECCAK256
00000536: CALLER
00000537: DUP7
00000538: AND
00000539: DUP6
0000053a: MSTORE
0000053b: PUSH1 0x02
0000053d: DUP2
0000053e: ADD
0000053f: DUP4
00000540: MSTORE
00000541: DUP2
00000542: DUP6
00000543: KECCAK256
00000544: DUP1
00000545: SLOAD
00000546: DUP11
00000547: SWAP1
00000548: SUB
00000549: SWAP1
0000054a: SSTORE
0000054b: SWAP2
0000054c: DUP4
0000054d: SWAP1
0000054e: MSTORE
0000054f: DUP2
00000550: SLOAD
00000551: DUP9
00000552: SWAP1
00000553: SUB
00000554: SWAP1
00000555: SWAP2
00000556: SSTORE
00000557: SWAP3
00000558: DUP8
00000559: AND
0000055a: DUP3
0000055b: MSTORE
0000055c: SWAP2
0000055d: SWAP1
0000055e: KECCAK256
0000055f: DUP1
00000560: SLOAD
00000561: DUP6
00000562: ADD
00000563: SWAP1
00000564: SSTORE
00000565: SWAP2
00000566: POP
00000567: POP
00000568: JUMPDEST
00000569: SWAP4
0000056a: SWAP3
0000056b: POP
0000056c: POP
0000056d: POP
0000056e: JUMP
0000056f: JUMPDEST
00000570: PUSH1 0x01
00000572: PUSH1 0xa0
00000574: PUSH1 0x02
00000576: EXP
00000577: SUB
00000578: DUP7
00000579: DUP2
0000057a: AND
0000057b: PUSH1 0x00
0000057d: SWAP1
0000057e: DUP2
0000057f: MSTORE
00000580: PUSH1 0x01
00000582: PUSH1 0x20
00000584: SWAP1
00000585: DUP2
00000586: MSTORE
00000587: PUSH1 0x40
00000589: DUP1
0000058a: DUP4
0000058b: KECCAK256
0000058c: CALLER
0000058d: SWAP5
0000058e: DUP6
0000058f: AND
00000590: DUP5
00000591: MSTORE
00000592: PUSH1 0x02
00000594: ADD
00000595: SWAP1
00000596: SWAP2
00000597: MSTORE
00000598: SWAP1
00000599: KECCAK256
0000059a: SLOAD
0000059b: DUP8
0000059c: SWAP2
0000059d: SWAP1
0000059e: DUP7
0000059f: SWAP1
000005a0: DUP2
000005a1: SWAP1
000005a2: LT
000005a3: ISZERO
000005a4: PUSH2 0x04ca
000005a7: JUMPI
000005a8: POP
000005a9: POP
000005aa: POP
000005ab: POP
000005ac: POP
000005ad: PUSH2 0x0568
000005b0: JUMP
000005b1: JUMPDEST
000005b2: POP
000005b3: POP
000005b4: JUMP
000005b5: JUMPDEST
000005b6: PUSH1 0x01
000005b8: PUSH1 0xa0
000005ba: PUSH1 0x02
000005bc: EXP
000005bd: SUB
000005be: CALLER
000005bf: SWAP1
000005c0: DUP2
000005c1: AND
000005c2: PUSH1 0x00
000005c4: SWAP1
000005c5: DUP2
000005c6: MSTORE
000005c7: PUSH1 0x01
000005c9: PUSH1 0x20
000005cb: MSTORE
000005cc: PUSH1 0x40
000005ce: SWAP1
000005cf: KECCAK256
000005d0: SLOAD
000005d1: DUP6
000005d2: SWAP1
000005d3: DUP2
000005d4: SWAP1
000005d5: LT
000005d6: ISZERO
000005d7: PUSH2 0x05e3
000005da: JUMPI
000005db: POP
000005dc: POP
000005dd: POP
000005de: POP
000005df: PUSH2 0x014e
000005e2: JUMP
000005e3: JUMPDEST
000005e4: PUSH1 0x40
000005e6: MLOAD
000005e7: DUP7
000005e8: SWAP1
000005e9: DUP9
000005ea: SWAP1
000005eb: PUSH1 0x01
000005ed: PUSH1 0xa0
000005ef: PUSH1 0x02
000005f1: EXP
000005f2: SUB
000005f3: CALLER
000005f4: AND
000005f5: SWAP1
000005f6: PUSH32 0x73f04af9dcc582a923ec15d3eea990fe34adabfff2879e28d44572e01a54abb6
00000617: SWAP1
00000618: PUSH1 0x00
0000061a: SWAP1
0000061b: LOG4
0000061c: PUSH1 0x01
0000061e: PUSH1 0xa0
00000620: PUSH1 0x02
00000622: EXP
00000623: SUB
00000624: CALLER
00000625: AND
00000626: PUSH1 0x00
00000628: SWAP1
00000629: DUP2
0000062a: MSTORE
0000062b: PUSH1 0x01
0000062d: PUSH1 0x20
0000062f: DUP2
00000630: DUP2
00000631: MSTORE
00000632: PUSH1 0x40
00000634: DUP1
00000635: DUP5
00000636: KECCAK256
00000637: DUP1
00000638: SLOAD
00000639: DUP12
0000063a: SWAP1
0000063b: SUB
0000063c: DUP2
0000063d: SSTORE
0000063e: DUP5
0000063f: SLOAD
00000640: DUP12
00000641: ADD
00000642: DUP6
00000643: SSTORE
00000644: DUP12
00000645: DUP6
00000646: MSTORE
00000647: SWAP1
00000648: SWAP3
00000649: ADD
0000064a: SWAP1
0000064b: MSTORE
0000064c: DUP2
0000064d: KECCAK256
0000064e: DUP1
0000064f: SLOAD
00000650: DUP9
00000651: SWAP1
00000652: SUB
00000653: SWAP1
00000654: DUP2
00000655: SWAP1
00000656: SSTORE
00000657: EQ
00000658: ISZERO
00000659: PUSH2 0x06bc
0000065c: JUMPI
0000065d: PUSH1 0x01
0000065f: PUSH1 0x00
00000661: POP
00000662: PUSH1 0x00
00000664: CALLER
00000665: PUSH1 0x01
00000667: PUSH1 0xa0
00000669: PUSH1 0x02
0000066b: EXP
0000066c: SUB
0000066d: AND
0000066e: DUP2
0000066f: MSTORE
00000670: PUSH1 0x20
00000672: ADD
00000673: SWAP1
00000674: DUP2
00000675: MSTORE
00000676: PUSH1 0x20
00000678: ADD
00000679: PUSH1 0x00
0000067b: KECCAK256
0000067c: PUSH1 0x00
0000067e: POP
0000067f: PUSH1 0x01
00000681: ADD
00000682: PUSH1 0x00
00000684: POP
00000685: PUSH1 0x00
00000687: DUP9
00000688: DUP2
00000689: MSTORE
0000068a: PUSH1 0x20
0000068c: ADD
0000068d: SWAP1
0000068e: DUP2
0000068f: MSTORE
00000690: PUSH1 0x20
00000692: ADD
00000693: PUSH1 0x00
00000695: KECCAK256
00000696: PUSH1 0x00
00000698: PUSH1 0x00
0000069a: DUP3
0000069b: ADD
0000069c: PUSH1 0x00
0000069e: POP
0000069f: PUSH1 0x00
000006a1: SWAP1
000006a2: SSTORE
000006a3: PUSH1 0x01
000006a5: DUP3
000006a6: ADD
000006a7: PUSH1 0x00
000006a9: PUSH2 0x0100
000006ac: EXP
000006ad: DUP2
000006ae: SLOAD
000006af: SWAP1
000006b0: PUSH4 0xffffffff
000006b5: MUL
000006b6: NOT
000006b7: AND
000006b8: SWAP1
000006b9: SSTORE
000006ba: POP
000006bb: POP
000006bc: JUMPDEST
000006bd: PUSH1 0x40
000006bf: MLOAD
000006c0: PUSH1 0x01
000006c2: PUSH1 0xa0
000006c4: PUSH1 0x02
000006c6: EXP
000006c7: SUB
000006c8: CALLER
000006c9: AND
000006ca: SWAP1
000006cb: PUSH1 0x00
000006cd: SWAP1
000006ce: PUSH3 0x0f4240
000006d2: DUP11
000006d3: DUP11
000006d4: MUL
000006d5: DIV
000006d6: SWAP1
000006d7: DUP3
000006d8: DUP2
000006d9: DUP2
000006da: DUP2
000006db: DUP6
000006dc: DUP9
000006dd: DUP4
000006de: CALL
000006df: SWAP4
000006e0: POP
000006e1: POP
000006e2: POP
000006e3: POP
000006e4: ISZERO
000006e5: ISZERO
000006e6: PUSH2 0x06ee
000006e9: JUMPI
000006ea: PUSH2 0x0002
000006ed: JUMP
000006ee: JUMPDEST
000006ef: PUSH1 0x01
000006f1: SWAP5
000006f2: POP
000006f3: POP
000006f4: POP
000006f5: POP
000006f6: POP
000006f7: PUSH2 0x014e
000006fa: JUMP
000006fb: JUMPDEST
000006fc: DUP5
000006fd: PUSH1 0x01
000006ff: PUSH1 0xa0
00000701: PUSH1 0x02
00000703: EXP
00000704: SUB
00000705: AND
00000706: CALLER
00000707: PUSH1 0x01
00000709: PUSH1 0xa0
0000070b: PUSH1 0x02
0000070d: EXP
0000070e: SUB
0000070f: AND
00000710: PUSH32 0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef
00000731: DUP7
00000732: PUSH1 0x40
00000734: MLOAD
00000735: DUP1
00000736: DUP3
00000737: DUP2
00000738: MSTORE
00000739: PUSH1 0x20
0000073b: ADD
0000073c: SWAP2
0000073d: POP
0000073e: POP
0000073f: PUSH1 0x40
00000741: MLOAD
00000742: DUP1
00000743: SWAP2
00000744: SUB
00000745: SWAP1
00000746: LOG3
00000747: POP
00000748: POP
00000749: PUSH1 0x01
0000074b: PUSH1 0xa0
0000074d: PUSH1 0x02
0000074f: EXP
00000750: SUB
00000751: CALLER
00000752: DUP2
00000753: AND
00000754: PUSH1 0x00
00000756: SWAP1
00000757: DUP2
00000758: MSTORE
00000759: PUSH1 0x01
0000075b: PUSH1 0x20
0000075d: MSTORE
0000075e: PUSH1 0x40
00000760: DUP1
00000761: DUP3
00000762: KECCAK256
00000763: DUP1
00000764: SLOAD
00000765: DUP7
00000766: SWAP1
00000767: SUB
00000768: SWAP1
00000769: SSTORE
0000076a: SWAP2
0000076b: DUP6
0000076c: AND
0000076d: DUP2
0000076e: MSTORE
0000076f: KECCAK256
00000770: DUP1
00000771: SLOAD
00000772: DUP4
00000773: ADD
00000774: SWAP1
00000775: SSTORE
00000776: SWAP3
00000777: SWAP2
00000778: POP
00000779: POP
0000077a: JUMP

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x4e174e5c4e46cbb54689542377b8e3f3b5e13bff741497351926c8b09e1994a9
call_targets: 0x0b8d56c26d8cf16fe1bddf4967753503d974de06
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x4e174e5c4e46cbb54689542377b8e3f3b5e13bff741497351926c8b09e1994a9",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0b8d56c26d8cf16fe1bddf4967753503d974de06"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x095ea7b3",
            "selector": "0x095ea7b3",
            "calldata_variants": [
                "0x095ea7b3",
                "0x095ea7b30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x29cbdc86",
            "selector": "0x29cbdc86",
            "calldata_variants": [
                "0x29cbdc86",
                "0x29cbdc860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x55234ec0",
            "selector": "0x55234ec0",
            "calldata_variants": [
                "0x55234ec0",
                "0x55234ec00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5af36e3e",
            "selector": "0x5af36e3e",
            "calldata_variants": [
                "0x5af36e3e",
                "0x5af36e3e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa035b1fe",
            "selector": "0xa035b1fe",
            "calldata_variants": [
                "0xa035b1fe",
                "0xa035b1fe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1758,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [],
    "untrusted_call_count": 1
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x4e174e5c4e46cbb54689542377b8e3f3b5e13bff741497351926c8b09e1994a9
call_targets: 0x0b8d56c26d8cf16fe1bddf4967753503d974de06
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x4e174e5c4e46cbb54689542377b8e3f3b5e13bff741497351926c8b09e1994a9",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0b8d56c26d8cf16fe1bddf4967753503d974de06"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x095ea7b3",
            "selector": "0x095ea7b3",
            "calldata_variants": [
                "0x095ea7b3",
                "0x095ea7b30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x29cbdc86",
            "selector": "0x29cbdc86",
            "calldata_variants": [
                "0x29cbdc86",
                "0x29cbdc860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x55234ec0",
            "selector": "0x55234ec0",
            "calldata_variants": [
                "0x55234ec0",
                "0x55234ec00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5af36e3e",
            "selector": "0x5af36e3e",
            "calldata_variants": [
                "0x5af36e3e",
                "0x5af36e3e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa035b1fe",
            "selector": "0xa035b1fe",
            "calldata_variants": [
                "0xa035b1fe",
                "0xa035b1fe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1758,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": []
}