019b477e-a8de-73fc-bb17-775e1ac00f1b
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 20509 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 20510 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 88557 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 88558 | capability.graph | complete | 1 / 3 | 1 week ago |
| 88559 | detector.run | complete | 1 / 3 | 1 week ago |
| 88560 | validation.fork | complete | 1 / 3 | 1 week ago |
| 113727 | report.consolidate | complete | 1 / 6 | 1 week ago |
No slither job recorded yet.
OpenAI Codex v0.118.0 (research preview) -------- workdir: /tmp/codex-b_8etnkr model: gpt-5.4 provider: openai approval: never sandbox: read-only reasoning effort: high reasoning summaries: none session id: 019d5c9c-d815-76e0-abcb-e9a5f3d1942c -------- user You are a security auditor. You ONLY have runtime bytecode + analysis artifacts. You MUST read `BYTECODE_BUNDLE.json` before concluding; it contains the bytecode summary, evidence bundle, callsites, storage slots, and detector findings. Special cases when reasoning from bytecode (be explicit about uncertainty): - Selector inference is best-effort; missing selectors are common. - Fallback/receive paths may be the only entrypoints. - CALL vs DELEGATECALL semantics differ; DELEGATECALL executes in caller storage. - Proxy patterns (EIP-1967, minimal proxies, beacon) change which storage is authoritative. - Storage slots are raw; mappings/arrays appear via keccak patterns, names are unknown. - Guard detection is heuristic; absence of guards does NOT mean unguarded. - Returndata checking is unknown unless explicitly shown in evidence. - Precompiles (0x1..0x9) and common ERC20 transfer selectors may appear; do not over-claim. Output MUST be valid JSON matching the provided schema. - If you find nothing meaningful: set no_findings=true and findings=[]. - Otherwise: set no_findings=false and include findings with severity/category/title. - Locations can be pc references like "pc:0x123" or selectors like "selector:0xa9059cbb". Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, accounting/invariant breaks, dangerous delegatecall, and untrusted external calls. Be conservative: if evidence is weak, mark severity low/medium and explain why. warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
{
"codex": {
"ran_at": "2026-04-05T07:47:57.755803+00:00",
"returncode": 1
},
"project": {
"mode": "bytecode",
"bytecode_length": 3266,
"bytecode_truncated": false,
"capability_graph_present": true,
"analysis_artifact_present": true
},
"summary": null,
"no_findings": null,
"schema_version": 1
}
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x008d 0000000a: JUMPI 0000000b: PUSH1 0xe0 0000000d: PUSH1 0x02 0000000f: EXP 00000010: PUSH1 0x00 00000012: CALLDATALOAD 00000013: DIV 00000014: PUSH4 0x06fdde03 00000019: DUP2 0000001a: EQ 0000001b: PUSH2 0x009a 0000001e: JUMPI 0000001f: DUP1 00000020: PUSH4 0x095ea7b3 00000025: EQ 00000026: PUSH2 0x00fc 00000029: JUMPI 0000002a: DUP1 0000002b: PUSH4 0x18160ddd 00000030: EQ 00000031: PUSH2 0x010f 00000034: JUMPI 00000035: DUP1 00000036: PUSH4 0x23b872dd 0000003b: EQ 0000003c: PUSH2 0x011d 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0x313ce567 00000046: EQ 00000047: PUSH2 0x0154 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0x5a3b7e42 00000051: EQ 00000052: PUSH2 0x0165 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0x70a08231 0000005c: EQ 0000005d: PUSH2 0x01c8 00000060: JUMPI 00000061: DUP1 00000062: PUSH4 0x95d89b41 00000067: EQ 00000068: PUSH2 0x01e5 0000006b: JUMPI 0000006c: DUP1 0000006d: PUSH4 0xa9059cbb 00000072: EQ 00000073: PUSH2 0x0245 00000076: JUMPI 00000077: DUP1 00000078: PUSH4 0xcae9ca51 0000007d: EQ 0000007e: PUSH2 0x0279 00000081: JUMPI 00000082: DUP1 00000083: PUSH4 0xdd62ed3e 00000088: EQ 00000089: PUSH2 0x0303 0000008c: JUMPI 0000008d: JUMPDEST 0000008e: CALLVALUE 0000008f: PUSH2 0x0002 00000092: JUMPI 00000093: PUSH2 0x032d 00000096: PUSH2 0x0002 00000099: JUMP 0000009a: JUMPDEST 0000009b: CALLVALUE 0000009c: PUSH2 0x0002 0000009f: JUMPI 000000a0: PUSH1 0x40 000000a2: DUP1 000000a3: MLOAD 000000a4: PUSH1 0x01 000000a6: DUP1 000000a7: SLOAD 000000a8: PUSH1 0x20 000000aa: PUSH1 0x02 000000ac: DUP3 000000ad: DUP5 000000ae: AND 000000af: ISZERO 000000b0: PUSH2 0x0100 000000b3: MUL 000000b4: PUSH1 0x00 000000b6: NOT 000000b7: ADD 000000b8: SWAP1 000000b9: SWAP3 000000ba: AND 000000bb: SWAP2 000000bc: SWAP1 000000bd: SWAP2 000000be: DIV 000000bf: PUSH1 0x1f 000000c1: DUP2 000000c2: ADD 000000c3: DUP3 000000c4: SWAP1 000000c5: DIV 000000c6: DUP3 000000c7: MUL 000000c8: DUP5 000000c9: ADD 000000ca: DUP3 000000cb: ADD 000000cc: SWAP1 000000cd: SWAP5 000000ce: MSTORE 000000cf: DUP4 000000d0: DUP4 000000d1: MSTORE 000000d2: PUSH2 0x032f 000000d5: SWAP4 000000d6: SWAP1 000000d7: DUP4 000000d8: ADD 000000d9: DUP3 000000da: DUP3 000000db: DUP1 000000dc: ISZERO 000000dd: PUSH2 0x0404 000000e0: JUMPI 000000e1: DUP1 000000e2: PUSH1 0x1f 000000e4: LT 000000e5: PUSH2 0x03d9 000000e8: JUMPI 000000e9: PUSH2 0x0100 000000ec: DUP1 000000ed: DUP4 000000ee: SLOAD 000000ef: DIV 000000f0: MUL 000000f1: DUP4 000000f2: MSTORE 000000f3: SWAP2 000000f4: PUSH1 0x20 000000f6: ADD 000000f7: SWAP2 000000f8: PUSH2 0x0404 000000fb: JUMP 000000fc: JUMPDEST 000000fd: CALLVALUE 000000fe: PUSH2 0x0002 00000101: JUMPI 00000102: PUSH2 0x039d 00000105: PUSH1 0x04 00000107: CALLDATALOAD 00000108: PUSH1 0x24 0000010a: CALLDATALOAD 0000010b: PUSH2 0x02d3 0000010e: JUMP 0000010f: JUMPDEST 00000110: CALLVALUE 00000111: PUSH2 0x0002 00000114: JUMPI 00000115: PUSH2 0x03b1 00000118: PUSH1 0x04 0000011a: SLOAD 0000011b: DUP2 0000011c: JUMP 0000011d: JUMPDEST 0000011e: CALLVALUE 0000011f: PUSH2 0x0002 00000122: JUMPI 00000123: PUSH2 0x039d 00000126: PUSH1 0x04 00000128: CALLDATALOAD 00000129: PUSH1 0x24 0000012b: CALLDATALOAD 0000012c: PUSH1 0x44 0000012e: CALLDATALOAD 0000012f: PUSH1 0x01 00000131: PUSH1 0xa0 00000133: PUSH1 0x02 00000135: EXP 00000136: SUB 00000137: DUP4 00000138: AND 00000139: PUSH1 0x00 0000013b: SWAP1 0000013c: DUP2 0000013d: MSTORE 0000013e: PUSH1 0x05 00000140: PUSH1 0x20 00000142: MSTORE 00000143: PUSH1 0x40 00000145: DUP2 00000146: KECCAK256 00000147: SLOAD 00000148: DUP3 00000149: SWAP1 0000014a: LT 0000014b: ISZERO 0000014c: PUSH2 0x040c 0000014f: JUMPI 00000150: PUSH2 0x0002 00000153: JUMP 00000154: JUMPDEST 00000155: CALLVALUE 00000156: PUSH2 0x0002 00000159: JUMPI 0000015a: PUSH2 0x03c3 0000015d: PUSH1 0x03 0000015f: SLOAD 00000160: PUSH1 0xff 00000162: AND 00000163: DUP2 00000164: JUMP 00000165: JUMPDEST 00000166: CALLVALUE 00000167: PUSH2 0x0002 0000016a: JUMPI 0000016b: PUSH1 0x40 0000016d: DUP1 0000016e: MLOAD 0000016f: PUSH1 0x00 00000171: DUP1 00000172: SLOAD 00000173: PUSH1 0x20 00000175: PUSH1 0x02 00000177: PUSH1 0x01 00000179: DUP4 0000017a: AND 0000017b: ISZERO 0000017c: PUSH2 0x0100 0000017f: MUL 00000180: PUSH1 0x00 00000182: NOT 00000183: ADD 00000184: SWAP1 00000185: SWAP3 00000186: AND 00000187: SWAP2 00000188: SWAP1 00000189: SWAP2 0000018a: DIV 0000018b: PUSH1 0x1f 0000018d: DUP2 0000018e: ADD 0000018f: DUP3 00000190: SWAP1 00000191: DIV 00000192: DUP3 00000193: MUL 00000194: DUP5 00000195: ADD 00000196: DUP3 00000197: ADD 00000198: SWAP1 00000199: SWAP5 0000019a: MSTORE 0000019b: DUP4 0000019c: DUP4 0000019d: MSTORE 0000019e: PUSH2 0x032f 000001a1: SWAP4 000001a2: SWAP1 000001a3: DUP4 000001a4: ADD 000001a5: DUP3 000001a6: DUP3 000001a7: DUP1 000001a8: ISZERO 000001a9: PUSH2 0x0404 000001ac: JUMPI 000001ad: DUP1 000001ae: PUSH1 0x1f 000001b0: LT 000001b1: PUSH2 0x03d9 000001b4: JUMPI 000001b5: PUSH2 0x0100 000001b8: DUP1 000001b9: DUP4 000001ba: SLOAD 000001bb: DIV 000001bc: MUL 000001bd: DUP4 000001be: MSTORE 000001bf: SWAP2 000001c0: PUSH1 0x20 000001c2: ADD 000001c3: SWAP2 000001c4: PUSH2 0x0404 000001c7: JUMP 000001c8: JUMPDEST 000001c9: CALLVALUE 000001ca: PUSH2 0x0002 000001cd: JUMPI 000001ce: PUSH2 0x03b1 000001d1: PUSH1 0x04 000001d3: CALLDATALOAD 000001d4: PUSH1 0x05 000001d6: PUSH1 0x20 000001d8: MSTORE 000001d9: PUSH1 0x00 000001db: SWAP1 000001dc: DUP2 000001dd: MSTORE 000001de: PUSH1 0x40 000001e0: SWAP1 000001e1: KECCAK256 000001e2: SLOAD 000001e3: DUP2 000001e4: JUMP 000001e5: JUMPDEST 000001e6: CALLVALUE 000001e7: PUSH2 0x0002 000001ea: JUMPI 000001eb: PUSH2 0x032f 000001ee: PUSH1 0x02 000001f0: DUP1 000001f1: SLOAD 000001f2: PUSH1 0x40 000001f4: DUP1 000001f5: MLOAD 000001f6: PUSH1 0x20 000001f8: PUSH1 0x01 000001fa: DUP5 000001fb: AND 000001fc: ISZERO 000001fd: PUSH2 0x0100 00000200: MUL 00000201: PUSH1 0x00 00000203: NOT 00000204: ADD 00000205: SWAP1 00000206: SWAP4 00000207: AND 00000208: DUP5 00000209: SWAP1 0000020a: DIV 0000020b: PUSH1 0x1f 0000020d: DUP2 0000020e: ADD 0000020f: DUP5 00000210: SWAP1 00000211: DIV 00000212: DUP5 00000213: MUL 00000214: DUP3 00000215: ADD 00000216: DUP5 00000217: ADD 00000218: SWAP1 00000219: SWAP3 0000021a: MSTORE 0000021b: DUP2 0000021c: DUP2 0000021d: MSTORE 0000021e: SWAP3 0000021f: SWAP2 00000220: DUP4 00000221: ADD 00000222: DUP3 00000223: DUP3 00000224: DUP1 00000225: ISZERO 00000226: PUSH2 0x0404 00000229: JUMPI 0000022a: DUP1 0000022b: PUSH1 0x1f 0000022d: LT 0000022e: PUSH2 0x03d9 00000231: JUMPI 00000232: PUSH2 0x0100 00000235: DUP1 00000236: DUP4 00000237: SLOAD 00000238: DIV 00000239: MUL 0000023a: DUP4 0000023b: MSTORE 0000023c: SWAP2 0000023d: PUSH1 0x20 0000023f: ADD 00000240: SWAP2 00000241: PUSH2 0x0404 00000244: JUMP 00000245: JUMPDEST 00000246: CALLVALUE 00000247: PUSH2 0x0002 0000024a: JUMPI 0000024b: PUSH2 0x032d 0000024e: PUSH1 0x04 00000250: CALLDATALOAD 00000251: PUSH1 0x24 00000253: CALLDATALOAD 00000254: PUSH1 0x01 00000256: PUSH1 0xa0 00000258: PUSH1 0x02 0000025a: EXP 0000025b: SUB 0000025c: CALLER 0000025d: AND 0000025e: PUSH1 0x00 00000260: SWAP1 00000261: DUP2 00000262: MSTORE 00000263: PUSH1 0x05 00000265: PUSH1 0x20 00000267: MSTORE 00000268: PUSH1 0x40 0000026a: SWAP1 0000026b: KECCAK256 0000026c: SLOAD 0000026d: DUP2 0000026e: SWAP1 0000026f: LT 00000270: ISZERO 00000271: PUSH2 0x04f1 00000274: JUMPI 00000275: PUSH2 0x0002 00000278: JUMP 00000279: JUMPDEST 0000027a: CALLVALUE 0000027b: PUSH2 0x0002 0000027e: JUMPI 0000027f: PUSH1 0x40 00000281: DUP1 00000282: MLOAD 00000283: PUSH1 0x20 00000285: PUSH1 0x44 00000287: CALLDATALOAD 00000288: PUSH1 0x04 0000028a: DUP2 0000028b: DUP2 0000028c: ADD 0000028d: CALLDATALOAD 0000028e: PUSH1 0x1f 00000290: DUP2 00000291: ADD 00000292: DUP5 00000293: SWAP1 00000294: DIV 00000295: DUP5 00000296: MUL 00000297: DUP6 00000298: ADD 00000299: DUP5 0000029a: ADD 0000029b: SWAP1 0000029c: SWAP6 0000029d: MSTORE 0000029e: DUP5 0000029f: DUP5 000002a0: MSTORE 000002a1: PUSH2 0x039d 000002a4: SWAP5 000002a5: DUP2 000002a6: CALLDATALOAD 000002a7: SWAP5 000002a8: PUSH1 0x24 000002aa: DUP1 000002ab: CALLDATALOAD 000002ac: SWAP6 000002ad: SWAP4 000002ae: SWAP5 000002af: PUSH1 0x64 000002b1: SWAP5 000002b2: SWAP3 000002b3: SWAP4 000002b4: SWAP2 000002b5: ADD 000002b6: SWAP2 000002b7: DUP2 000002b8: SWAP1 000002b9: DUP5 000002ba: ADD 000002bb: DUP4 000002bc: DUP3 000002bd: DUP1 000002be: DUP3 000002bf: DUP5 000002c0: CALLDATACOPY 000002c1: POP 000002c2: SWAP5 000002c3: SWAP7 000002c4: POP 000002c5: POP 000002c6: POP 000002c7: POP 000002c8: POP 000002c9: POP 000002ca: POP 000002cb: PUSH1 0x00 000002cd: DUP4 000002ce: PUSH2 0x0583 000002d1: DUP2 000002d2: DUP6 000002d3: JUMPDEST 000002d4: PUSH1 0x01 000002d6: PUSH1 0xa0 000002d8: PUSH1 0x02 000002da: EXP 000002db: SUB 000002dc: CALLER 000002dd: DUP2 000002de: AND 000002df: PUSH1 0x00 000002e1: SWAP1 000002e2: DUP2 000002e3: MSTORE 000002e4: PUSH1 0x06 000002e6: PUSH1 0x20 000002e8: SWAP1 000002e9: DUP2 000002ea: MSTORE 000002eb: PUSH1 0x40 000002ed: DUP1 000002ee: DUP4 000002ef: KECCAK256 000002f0: SWAP4 000002f1: DUP7 000002f2: AND 000002f3: DUP4 000002f4: MSTORE 000002f5: SWAP3 000002f6: SWAP1 000002f7: MSTORE 000002f8: KECCAK256 000002f9: DUP2 000002fa: SWAP1 000002fb: SSTORE 000002fc: PUSH1 0x01 000002fe: SWAP3 000002ff: SWAP2 00000300: POP 00000301: POP 00000302: JUMP 00000303: JUMPDEST 00000304: CALLVALUE 00000305: PUSH2 0x0002 00000308: JUMPI 00000309: PUSH1 0x06 0000030b: PUSH1 0x20 0000030d: SWAP1 0000030e: DUP2 0000030f: MSTORE 00000310: PUSH1 0x04 00000312: CALLDATALOAD 00000313: PUSH1 0x00 00000315: SWAP1 00000316: DUP2 00000317: MSTORE 00000318: PUSH1 0x40 0000031a: DUP1 0000031b: DUP3 0000031c: KECCAK256 0000031d: SWAP1 0000031e: SWAP3 0000031f: MSTORE 00000320: PUSH1 0x24 00000322: CALLDATALOAD 00000323: DUP2 00000324: MSTORE 00000325: KECCAK256 00000326: SLOAD 00000327: PUSH2 0x03b1 0000032a: SWAP1 0000032b: DUP2 0000032c: JUMP 0000032d: JUMPDEST 0000032e: STOP 0000032f: JUMPDEST 00000330: PUSH1 0x40 00000332: MLOAD 00000333: DUP1 00000334: DUP1 00000335: PUSH1 0x20 00000337: ADD 00000338: DUP3 00000339: DUP2 0000033a: SUB 0000033b: DUP3 0000033c: MSTORE 0000033d: DUP4 0000033e: DUP2 0000033f: DUP2 00000340: MLOAD 00000341: DUP2 00000342: MSTORE 00000343: PUSH1 0x20 00000345: ADD 00000346: SWAP2 00000347: POP 00000348: DUP1 00000349: MLOAD 0000034a: SWAP1 0000034b: PUSH1 0x20 0000034d: ADD 0000034e: SWAP1 0000034f: DUP1 00000350: DUP4 00000351: DUP4 00000352: DUP3 00000353: SWAP1 00000354: PUSH1 0x00 00000356: PUSH1 0x04 00000358: PUSH1 0x20 0000035a: DUP5 0000035b: PUSH1 0x1f 0000035d: ADD 0000035e: DIV 0000035f: PUSH1 0x03 00000361: MUL 00000362: PUSH1 0x0f 00000364: ADD 00000365: CALL 00000366: POP 00000367: SWAP1 00000368: POP 00000369: SWAP1 0000036a: DUP2 0000036b: ADD 0000036c: SWAP1 0000036d: PUSH1 0x1f 0000036f: AND 00000370: DUP1 00000371: ISZERO 00000372: PUSH2 0x038f 00000375: JUMPI 00000376: DUP1 00000377: DUP3 00000378: SUB 00000379: DUP1 0000037a: MLOAD 0000037b: PUSH1 0x01 0000037d: DUP4 0000037e: PUSH1 0x20 00000380: SUB 00000381: PUSH2 0x0100 00000384: EXP 00000385: SUB 00000386: NOT 00000387: AND 00000388: DUP2 00000389: MSTORE 0000038a: PUSH1 0x20 0000038c: ADD 0000038d: SWAP2 0000038e: POP 0000038f: JUMPDEST 00000390: POP 00000391: SWAP3 00000392: POP 00000393: POP 00000394: POP 00000395: PUSH1 0x40 00000397: MLOAD 00000398: DUP1 00000399: SWAP2 0000039a: SUB 0000039b: SWAP1 0000039c: RETURN 0000039d: JUMPDEST 0000039e: PUSH1 0x40 000003a0: DUP1 000003a1: MLOAD 000003a2: SWAP2 000003a3: ISZERO 000003a4: ISZERO 000003a5: DUP3 000003a6: MSTORE 000003a7: MLOAD 000003a8: SWAP1 000003a9: DUP2 000003aa: SWAP1 000003ab: SUB 000003ac: PUSH1 0x20 000003ae: ADD 000003af: SWAP1 000003b0: RETURN 000003b1: JUMPDEST 000003b2: PUSH1 0x40 000003b4: DUP1 000003b5: MLOAD 000003b6: SWAP2 000003b7: DUP3 000003b8: MSTORE 000003b9: MLOAD 000003ba: SWAP1 000003bb: DUP2 000003bc: SWAP1 000003bd: SUB 000003be: PUSH1 0x20 000003c0: ADD 000003c1: SWAP1 000003c2: RETURN 000003c3: JUMPDEST 000003c4: PUSH1 0x40 000003c6: DUP1 000003c7: MLOAD 000003c8: PUSH1 0xff 000003ca: SWAP1 000003cb: SWAP3 000003cc: AND 000003cd: DUP3 000003ce: MSTORE 000003cf: MLOAD 000003d0: SWAP1 000003d1: DUP2 000003d2: SWAP1 000003d3: SUB 000003d4: PUSH1 0x20 000003d6: ADD 000003d7: SWAP1 000003d8: RETURN 000003d9: JUMPDEST 000003da: DUP3 000003db: ADD 000003dc: SWAP2 000003dd: SWAP1 000003de: PUSH1 0x00 000003e0: MSTORE 000003e1: PUSH1 0x20 000003e3: PUSH1 0x00 000003e5: KECCAK256 000003e6: SWAP1 000003e7: JUMPDEST 000003e8: DUP2 000003e9: SLOAD 000003ea: DUP2 000003eb: MSTORE 000003ec: SWAP1 000003ed: PUSH1 0x01 000003ef: ADD 000003f0: SWAP1 000003f1: PUSH1 0x20 000003f3: ADD 000003f4: DUP1 000003f5: DUP4 000003f6: GT 000003f7: PUSH2 0x03e7 000003fa: JUMPI 000003fb: DUP3 000003fc: SWAP1 000003fd: SUB 000003fe: PUSH1 0x1f 00000400: AND 00000401: DUP3 00000402: ADD 00000403: SWAP2 00000404: JUMPDEST 00000405: POP 00000406: POP 00000407: POP 00000408: POP 00000409: POP 0000040a: DUP2 0000040b: JUMP 0000040c: JUMPDEST 0000040d: PUSH1 0x01 0000040f: PUSH1 0xa0 00000411: PUSH1 0x02 00000413: EXP 00000414: SUB 00000415: DUP4 00000416: AND 00000417: PUSH1 0x00 00000419: SWAP1 0000041a: DUP2 0000041b: MSTORE 0000041c: PUSH1 0x05 0000041e: PUSH1 0x20 00000420: MSTORE 00000421: PUSH1 0x40 00000423: SWAP1 00000424: KECCAK256 00000425: SLOAD 00000426: DUP1 00000427: DUP4 00000428: ADD 00000429: LT 0000042a: ISZERO 0000042b: PUSH2 0x0433 0000042e: JUMPI 0000042f: PUSH2 0x0002 00000432: JUMP 00000433: JUMPDEST 00000434: PUSH1 0x01 00000436: PUSH1 0xa0 00000438: PUSH1 0x02 0000043a: EXP 0000043b: SUB 0000043c: DUP5 0000043d: DUP2 0000043e: AND 0000043f: PUSH1 0x00 00000441: SWAP1 00000442: DUP2 00000443: MSTORE 00000444: PUSH1 0x06 00000446: PUSH1 0x20 00000448: SWAP1 00000449: DUP2 0000044a: MSTORE 0000044b: PUSH1 0x40 0000044d: DUP1 0000044e: DUP4 0000044f: KECCAK256 00000450: CALLER 00000451: SWAP1 00000452: SWAP5 00000453: AND 00000454: DUP4 00000455: MSTORE 00000456: SWAP3 00000457: SWAP1 00000458: MSTORE 00000459: KECCAK256 0000045a: SLOAD 0000045b: DUP3 0000045c: GT 0000045d: ISZERO 0000045e: PUSH2 0x0466 00000461: JUMPI 00000462: PUSH2 0x0002 00000465: JUMP 00000466: JUMPDEST 00000467: PUSH1 0x01 00000469: PUSH1 0xa0 0000046b: PUSH1 0x02 0000046d: EXP 0000046e: SUB 0000046f: DUP5 00000470: DUP2 00000471: AND 00000472: PUSH1 0x00 00000474: DUP2 00000475: DUP2 00000476: MSTORE 00000477: PUSH1 0x05 00000479: PUSH1 0x20 0000047b: SWAP1 0000047c: DUP2 0000047d: MSTORE 0000047e: PUSH1 0x40 00000480: DUP1 00000481: DUP4 00000482: KECCAK256 00000483: DUP1 00000484: SLOAD 00000485: DUP9 00000486: SWAP1 00000487: SUB 00000488: SWAP1 00000489: SSTORE 0000048a: DUP8 0000048b: DUP6 0000048c: AND 0000048d: DUP1 0000048e: DUP5 0000048f: MSTORE 00000490: DUP2 00000491: DUP5 00000492: KECCAK256 00000493: DUP1 00000494: SLOAD 00000495: DUP10 00000496: ADD 00000497: SWAP1 00000498: SSTORE 00000499: DUP5 0000049a: DUP5 0000049b: MSTORE 0000049c: PUSH1 0x06 0000049e: DUP4 0000049f: MSTORE 000004a0: DUP2 000004a1: DUP5 000004a2: KECCAK256 000004a3: CALLER 000004a4: SWAP1 000004a5: SWAP7 000004a6: AND 000004a7: DUP5 000004a8: MSTORE 000004a9: SWAP5 000004aa: DUP3 000004ab: MSTORE 000004ac: SWAP2 000004ad: DUP3 000004ae: SWAP1 000004af: KECCAK256 000004b0: DUP1 000004b1: SLOAD 000004b2: DUP8 000004b3: SWAP1 000004b4: SUB 000004b5: SWAP1 000004b6: SSTORE 000004b7: DUP2 000004b8: MLOAD 000004b9: DUP7 000004ba: DUP2 000004bb: MSTORE 000004bc: SWAP2 000004bd: MLOAD 000004be: PUSH32 0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef 000004df: SWAP3 000004e0: DUP2 000004e1: SWAP1 000004e2: SUB 000004e3: SWAP1 000004e4: SWAP2 000004e5: ADD 000004e6: SWAP1 000004e7: LOG3 000004e8: POP 000004e9: PUSH1 0x01 000004eb: SWAP4 000004ec: SWAP3 000004ed: POP 000004ee: POP 000004ef: POP 000004f0: JUMP 000004f1: JUMPDEST 000004f2: PUSH1 0x01 000004f4: PUSH1 0xa0 000004f6: PUSH1 0x02 000004f8: EXP 000004f9: SUB 000004fa: DUP3 000004fb: AND 000004fc: PUSH1 0x00 000004fe: SWAP1 000004ff: DUP2 00000500: MSTORE 00000501: PUSH1 0x05 00000503: PUSH1 0x20 00000505: MSTORE 00000506: PUSH1 0x40 00000508: SWAP1 00000509: KECCAK256 0000050a: SLOAD 0000050b: DUP1 0000050c: DUP3 0000050d: ADD 0000050e: LT 0000050f: ISZERO 00000510: PUSH2 0x0518 00000513: JUMPI 00000514: PUSH2 0x0002 00000517: JUMP 00000518: JUMPDEST 00000519: PUSH1 0x01 0000051b: PUSH1 0xa0 0000051d: PUSH1 0x02 0000051f: EXP 00000520: SUB 00000521: CALLER 00000522: DUP2 00000523: AND 00000524: PUSH1 0x00 00000526: DUP2 00000527: DUP2 00000528: MSTORE 00000529: PUSH1 0x05 0000052b: PUSH1 0x20 0000052d: SWAP1 0000052e: DUP2 0000052f: MSTORE 00000530: PUSH1 0x40 00000532: DUP1 00000533: DUP4 00000534: KECCAK256 00000535: DUP1 00000536: SLOAD 00000537: DUP8 00000538: SWAP1 00000539: SUB 0000053a: SWAP1 0000053b: SSTORE 0000053c: SWAP4 0000053d: DUP7 0000053e: AND 0000053f: DUP1 00000540: DUP4 00000541: MSTORE 00000542: SWAP2 00000543: DUP5 00000544: SWAP1 00000545: KECCAK256 00000546: DUP1 00000547: SLOAD 00000548: DUP7 00000549: ADD 0000054a: SWAP1 0000054b: SSTORE 0000054c: DUP4 0000054d: MLOAD 0000054e: DUP6 0000054f: DUP2 00000550: MSTORE 00000551: SWAP4 00000552: MLOAD 00000553: SWAP2 00000554: SWAP4 00000555: PUSH32 0xddf252ad1be2c89b69c2b068fc378daa952ba7f163c4a11628f55a4df523b3ef 00000576: SWAP3 00000577: SWAP1 00000578: DUP2 00000579: SWAP1 0000057a: SUB 0000057b: SWAP1 0000057c: SWAP2 0000057d: ADD 0000057e: SWAP1 0000057f: LOG3 00000580: POP 00000581: POP 00000582: JUMP 00000583: JUMPDEST 00000584: ISZERO 00000585: PUSH2 0x0658 00000588: JUMPI 00000589: DUP1 0000058a: PUSH1 0x01 0000058c: PUSH1 0xa0 0000058e: PUSH1 0x02 00000590: EXP 00000591: SUB 00000592: AND 00000593: PUSH4 0x8f4ffcb1 00000598: CALLER 00000599: DUP7 0000059a: ADDRESS 0000059b: DUP8 0000059c: PUSH1 0x40 0000059e: MLOAD 0000059f: DUP6 000005a0: PUSH1 0xe0 000005a2: PUSH1 0x02 000005a4: EXP 000005a5: MUL 000005a6: DUP2 000005a7: MSTORE 000005a8: PUSH1 0x04 000005aa: ADD 000005ab: DUP1 000005ac: DUP6 000005ad: PUSH1 0x01 000005af: PUSH1 0xa0 000005b1: PUSH1 0x02 000005b3: EXP 000005b4: SUB 000005b5: AND 000005b6: DUP2 000005b7: MSTORE 000005b8: PUSH1 0x20 000005ba: ADD 000005bb: DUP5 000005bc: DUP2 000005bd: MSTORE 000005be: PUSH1 0x20 000005c0: ADD 000005c1: DUP4 000005c2: PUSH1 0x01 000005c4: PUSH1 0xa0 000005c6: PUSH1 0x02 000005c8: EXP 000005c9: SUB 000005ca: AND 000005cb: DUP2 000005cc: MSTORE 000005cd: PUSH1 0x20 000005cf: ADD 000005d0: DUP1 000005d1: PUSH1 0x20 000005d3: ADD 000005d4: DUP3 000005d5: DUP2 000005d6: SUB 000005d7: DUP3 000005d8: MSTORE 000005d9: DUP4 000005da: DUP2 000005db: DUP2 000005dc: MLOAD 000005dd: DUP2 000005de: MSTORE 000005df: PUSH1 0x20 000005e1: ADD 000005e2: SWAP2 000005e3: POP 000005e4: DUP1 000005e5: MLOAD 000005e6: SWAP1 000005e7: PUSH1 0x20 000005e9: ADD 000005ea: SWAP1 000005eb: DUP1 000005ec: DUP4 000005ed: DUP4 000005ee: DUP3 000005ef: SWAP1 000005f0: PUSH1 0x00 000005f2: PUSH1 0x04 000005f4: PUSH1 0x20 000005f6: DUP5 000005f7: PUSH1 0x1f 000005f9: ADD 000005fa: DIV 000005fb: PUSH1 0x03 000005fd: MUL 000005fe: PUSH1 0x0f 00000600: ADD 00000601: CALL 00000602: POP 00000603: SWAP1 00000604: POP 00000605: SWAP1 00000606: DUP2 00000607: ADD 00000608: SWAP1 00000609: PUSH1 0x1f 0000060b: AND 0000060c: DUP1 0000060d: ISZERO 0000060e: PUSH2 0x062b 00000611: JUMPI 00000612: DUP1 00000613: DUP3 00000614: SUB 00000615: DUP1 00000616: MLOAD 00000617: PUSH1 0x01 00000619: DUP4 0000061a: PUSH1 0x20 0000061c: SUB 0000061d: PUSH2 0x0100 00000620: EXP 00000621: SUB 00000622: NOT 00000623: AND 00000624: DUP2 00000625: MSTORE 00000626: PUSH1 0x20 00000628: ADD 00000629: SWAP2 0000062a: POP 0000062b: JUMPDEST 0000062c: POP 0000062d: SWAP6 0000062e: POP 0000062f: POP 00000630: POP 00000631: POP 00000632: POP 00000633: POP 00000634: PUSH1 0x00 00000636: PUSH1 0x40 00000638: MLOAD 00000639: DUP1 0000063a: DUP4 0000063b: SUB 0000063c: DUP2 0000063d: PUSH1 0x00 0000063f: DUP8 00000640: DUP1 00000641: EXTCODESIZE 00000642: ISZERO 00000643: PUSH2 0x0002 00000646: JUMPI 00000647: PUSH1 0x32 00000649: GAS 0000064a: SUB 0000064b: CALL 0000064c: ISZERO 0000064d: PUSH2 0x0002 00000650: JUMPI 00000651: POP 00000652: POP 00000653: POP 00000654: PUSH1 0x01 00000656: SWAP2 00000657: POP 00000658: JUMPDEST 00000659: POP 0000065a: SWAP4 0000065b: SWAP3 0000065c: POP 0000065d: POP 0000065e: POP 0000065f: JUMP
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | yes | yes |
viewtrace_id: 0x997c54451302d4956146416c074d12bef0fd6361a4e1710ae6671e982f64035f
call_targets:
0x0000000000000000000000000000000000000004, 0x9aed2219cf464f4c9dc584f2b6fe47b204ac7d12
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x997c54451302d4956146416c074d12bef0fd6361a4e1710ae6671e982f64035f",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x0000000000000000000000000000000000000004",
"0x9aed2219cf464f4c9dc584f2b6fe47b204ac7d12"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x06fdde03",
"selector": "0x06fdde03",
"calldata_variants": [
"0x06fdde03",
"0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x095ea7b3",
"selector": "0x095ea7b3",
"calldata_variants": [
"0x095ea7b3",
"0x095ea7b30000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x18160ddd",
"selector": "0x18160ddd",
"calldata_variants": [
"0x18160ddd",
"0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x23b872dd",
"selector": "0x23b872dd",
"calldata_variants": [
"0x23b872dd",
"0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x313ce567",
"selector": "0x313ce567",
"calldata_variants": [
"0x313ce567",
"0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5a3b7e42",
"selector": "0x5a3b7e42",
"calldata_variants": [
"0x5a3b7e42",
"0x5a3b7e420000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x70a08231",
"selector": "0x70a08231",
"calldata_variants": [
"0x70a08231",
"0x70a082310000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x95d89b41",
"selector": "0x95d89b41",
"calldata_variants": [
"0x95d89b41",
"0x95d89b410000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 869,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1537,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1611,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 3,
"guards_detected": [],
"untrusted_call_count": 3
}
|
| high | other | detector | ETH value transfer possible | 55 | yes | yes |
viewtrace_id: 0x997c54451302d4956146416c074d12bef0fd6361a4e1710ae6671e982f64035f
call_targets:
0x0000000000000000000000000000000000000004, 0x9aed2219cf464f4c9dc584f2b6fe47b204ac7d12
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x997c54451302d4956146416c074d12bef0fd6361a4e1710ae6671e982f64035f",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x0000000000000000000000000000000000000004",
"0x9aed2219cf464f4c9dc584f2b6fe47b204ac7d12"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x06fdde03",
"selector": "0x06fdde03",
"calldata_variants": [
"0x06fdde03",
"0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x095ea7b3",
"selector": "0x095ea7b3",
"calldata_variants": [
"0x095ea7b3",
"0x095ea7b30000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x18160ddd",
"selector": "0x18160ddd",
"calldata_variants": [
"0x18160ddd",
"0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x23b872dd",
"selector": "0x23b872dd",
"calldata_variants": [
"0x23b872dd",
"0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x313ce567",
"selector": "0x313ce567",
"calldata_variants": [
"0x313ce567",
"0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5a3b7e42",
"selector": "0x5a3b7e42",
"calldata_variants": [
"0x5a3b7e42",
"0x5a3b7e420000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x70a08231",
"selector": "0x70a08231",
"calldata_variants": [
"0x70a08231",
"0x70a082310000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x95d89b41",
"selector": "0x95d89b41",
"calldata_variants": [
"0x95d89b41",
"0x95d89b410000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 869,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1537,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1611,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 3,
"guards_detected": []
}
|