TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-a955-72ff-b50d-119edcc6ac19

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
20607 artifact.fetch complete 1 / 3 3 months ago
20608 tool.cast_disasm complete 1 / 3 3 months ago
88369 analysis.bundle complete 1 / 3 1 week ago
88370 capability.graph complete 1 / 3 1 week ago
88371 detector.run complete 1 / 3 1 week ago
88372 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
7
EXT*/BALANCE
5
Total opcodes
1341
Flags
delegatecall_present heavy_ext_balance_usage
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x0088
0000000a: JUMPI
0000000b: PUSH4 0xffffffff
00000010: PUSH1 0xe0
00000012: PUSH1 0x02
00000014: EXP
00000015: PUSH1 0x00
00000017: CALLDATALOAD
00000018: DIV
00000019: AND
0000001a: PUSH4 0x01cb3b20
0000001f: DUP2
00000020: EQ
00000021: PUSH2 0x0394
00000024: JUMPI
00000025: DUP1
00000026: PUSH4 0x29dcb0cf
0000002b: EQ
0000002c: PUSH2 0x03a3
0000002f: JUMPI
00000030: DUP1
00000031: PUSH4 0x38af3eed
00000036: EQ
00000037: PUSH2 0x03c2
0000003a: JUMPI
0000003b: DUP1
0000003c: PUSH4 0x411b007e
00000041: EQ
00000042: PUSH2 0x03eb
00000045: JUMPI
00000046: DUP1
00000047: PUSH4 0x6e66f6e9
0000004c: EQ
0000004d: PUSH2 0x0414
00000050: JUMPI
00000051: DUP1
00000052: PUSH4 0x70a08231
00000057: EQ
00000058: PUSH2 0x043d
0000005b: JUMPI
0000005c: DUP1
0000005d: PUSH4 0x7a3a0e84
00000062: EQ
00000063: PUSH2 0x0468
00000066: JUMPI
00000067: DUP1
00000068: PUSH4 0x7b3e5e7b
0000006d: EQ
0000006e: PUSH2 0x0487
00000071: JUMPI
00000072: DUP1
00000073: PUSH4 0x7ff9b596
00000078: EQ
00000079: PUSH2 0x04a6
0000007c: JUMPI
0000007d: DUP1
0000007e: PUSH4 0xfd6b7ef8
00000083: EQ
00000084: PUSH2 0x04c5
00000087: JUMPI
00000088: JUMPDEST
00000089: PUSH2 0x0392
0000008c: JUMPDEST
0000008d: PUSH1 0x09
0000008f: SLOAD
00000090: PUSH1 0x00
00000092: SWAP1
00000093: DUP2
00000094: SWAP1
00000095: PUSH2 0x0100
00000098: SWAP1
00000099: DIV
0000009a: PUSH1 0xff
0000009c: AND
0000009d: ISZERO
0000009e: PUSH2 0x00a6
000000a1: JUMPI
000000a2: PUSH2 0x0000
000000a5: JUMP
000000a6: JUMPDEST
000000a7: PUSH1 0x0b
000000a9: SLOAD
000000aa: PUSH1 0x03
000000ac: SLOAD
000000ad: GT
000000ae: PUSH2 0x00c1
000000b1: JUMPI
000000b2: PUSH7 0x0e35fa931a0000
000000ba: PUSH1 0x05
000000bc: SSTORE
000000bd: PUSH2 0x00e8
000000c0: JUMP
000000c1: JUMPDEST
000000c2: PUSH1 0x0c
000000c4: SLOAD
000000c5: PUSH1 0x03
000000c7: SLOAD
000000c8: GT
000000c9: PUSH2 0x00dc
000000cc: JUMPI
000000cd: PUSH7 0x1550f7dca70000
000000d5: PUSH1 0x05
000000d7: SSTORE
000000d8: PUSH2 0x00e8
000000db: JUMP
000000dc: JUMPDEST
000000dd: PUSH7 0x2386f26fc10000
000000e5: PUSH1 0x05
000000e7: SSTORE
000000e8: JUMPDEST
000000e9: JUMPDEST
000000ea: PUSH1 0x0a
000000ec: SLOAD
000000ed: PUSH1 0x05
000000ef: SLOAD
000000f0: DUP2
000000f1: ISZERO
000000f2: PUSH2 0x0000
000000f5: JUMPI
000000f6: DIV
000000f7: PUSH1 0x06
000000f9: SWAP1
000000fa: DUP2
000000fb: SSTORE
000000fc: CALLER
000000fd: PUSH1 0x01
000000ff: PUSH1 0xa0
00000101: PUSH1 0x02
00000103: EXP
00000104: SUB
00000105: DUP2
00000106: DUP2
00000107: AND
00000108: PUSH1 0x00
0000010a: SWAP1
0000010b: DUP2
0000010c: MSTORE
0000010d: PUSH1 0x08
0000010f: PUSH1 0x20
00000111: MSTORE
00000112: PUSH1 0x40
00000114: SWAP1
00000115: KECCAK256
00000116: CALLVALUE
00000117: SWAP1
00000118: DUP2
00000119: SWAP1
0000011a: SSTORE
0000011b: PUSH1 0x03
0000011d: DUP1
0000011e: SLOAD
0000011f: DUP3
00000120: ADD
00000121: SWAP1
00000122: SSTORE
00000123: PUSH1 0x07
00000125: SLOAD
00000126: SWAP4
00000127: SLOAD
00000128: SWAP1
00000129: SWAP5
0000012a: POP
0000012b: SWAP3
0000012c: AND
0000012d: SWAP2
0000012e: PUSH4 0x79c65068
00000133: SWAP2
00000134: SWAP1
00000135: DUP5
00000136: DUP2
00000137: ISZERO
00000138: PUSH2 0x0000
0000013b: JUMPI
0000013c: DIV
0000013d: PUSH1 0x40
0000013f: MLOAD
00000140: DUP4
00000141: PUSH4 0xffffffff
00000146: AND
00000147: PUSH1 0xe0
00000149: PUSH1 0x02
0000014b: EXP
0000014c: MUL
0000014d: DUP2
0000014e: MSTORE
0000014f: PUSH1 0x04
00000151: ADD
00000152: DUP1
00000153: DUP4
00000154: PUSH1 0x01
00000156: PUSH1 0xa0
00000158: PUSH1 0x02
0000015a: EXP
0000015b: SUB
0000015c: AND
0000015d: PUSH1 0x01
0000015f: PUSH1 0xa0
00000161: PUSH1 0x02
00000163: EXP
00000164: SUB
00000165: AND
00000166: DUP2
00000167: MSTORE
00000168: PUSH1 0x20
0000016a: ADD
0000016b: DUP3
0000016c: DUP2
0000016d: MSTORE
0000016e: PUSH1 0x20
00000170: ADD
00000171: SWAP3
00000172: POP
00000173: POP
00000174: POP
00000175: PUSH1 0x00
00000177: PUSH1 0x40
00000179: MLOAD
0000017a: DUP1
0000017b: DUP4
0000017c: SUB
0000017d: DUP2
0000017e: PUSH1 0x00
00000180: DUP8
00000181: DUP1
00000182: EXTCODESIZE
00000183: ISZERO
00000184: PUSH2 0x0000
00000187: JUMPI
00000188: PUSH1 0x32
0000018a: GAS
0000018b: SUB
0000018c: CALL
0000018d: ISZERO
0000018e: PUSH2 0x0000
00000191: JUMPI
00000192: POP
00000193: POP
00000194: PUSH1 0x07
00000196: SLOAD
00000197: PUSH1 0x00
00000199: SLOAD
0000019a: PUSH1 0x06
0000019c: SLOAD
0000019d: PUSH1 0x01
0000019f: PUSH1 0xa0
000001a1: PUSH1 0x02
000001a3: EXP
000001a4: SUB
000001a5: SWAP3
000001a6: DUP4
000001a7: AND
000001a8: SWAP4
000001a9: POP
000001aa: PUSH4 0x79c65068
000001af: SWAP3
000001b0: SWAP1
000001b1: SWAP2
000001b2: AND
000001b3: SWAP1
000001b4: PUSH1 0x64
000001b6: SWAP1
000001b7: DUP6
000001b8: DUP2
000001b9: ISZERO
000001ba: PUSH2 0x0000
000001bd: JUMPI
000001be: DIV
000001bf: PUSH1 0x1d
000001c1: MUL
000001c2: DUP2
000001c3: ISZERO
000001c4: PUSH2 0x0000
000001c7: JUMPI
000001c8: DIV
000001c9: PUSH1 0x40
000001cb: MLOAD
000001cc: DUP4
000001cd: PUSH4 0xffffffff
000001d2: AND
000001d3: PUSH1 0xe0
000001d5: PUSH1 0x02
000001d7: EXP
000001d8: MUL
000001d9: DUP2
000001da: MSTORE
000001db: PUSH1 0x04
000001dd: ADD
000001de: DUP1
000001df: DUP4
000001e0: PUSH1 0x01
000001e2: PUSH1 0xa0
000001e4: PUSH1 0x02
000001e6: EXP
000001e7: SUB
000001e8: AND
000001e9: PUSH1 0x01
000001eb: PUSH1 0xa0
000001ed: PUSH1 0x02
000001ef: EXP
000001f0: SUB
000001f1: AND
000001f2: DUP2
000001f3: MSTORE
000001f4: PUSH1 0x20
000001f6: ADD
000001f7: DUP3
000001f8: DUP2
000001f9: MSTORE
000001fa: PUSH1 0x20
000001fc: ADD
000001fd: SWAP3
000001fe: POP
000001ff: POP
00000200: POP
00000201: PUSH1 0x00
00000203: PUSH1 0x40
00000205: MLOAD
00000206: DUP1
00000207: DUP4
00000208: SUB
00000209: DUP2
0000020a: PUSH1 0x00
0000020c: DUP8
0000020d: DUP1
0000020e: EXTCODESIZE
0000020f: ISZERO
00000210: PUSH2 0x0000
00000213: JUMPI
00000214: PUSH1 0x32
00000216: GAS
00000217: SUB
00000218: CALL
00000219: ISZERO
0000021a: PUSH2 0x0000
0000021d: JUMPI
0000021e: POP
0000021f: POP
00000220: PUSH1 0x07
00000222: SLOAD
00000223: PUSH1 0x01
00000225: SLOAD
00000226: PUSH1 0x06
00000228: SLOAD
00000229: PUSH1 0x01
0000022b: PUSH1 0xa0
0000022d: PUSH1 0x02
0000022f: EXP
00000230: SUB
00000231: SWAP3
00000232: DUP4
00000233: AND
00000234: SWAP4
00000235: POP
00000236: PUSH4 0x79c65068
0000023b: SWAP3
0000023c: SWAP1
0000023d: SWAP2
0000023e: AND
0000023f: SWAP1
00000240: PUSH1 0x64
00000242: SWAP1
00000243: DUP6
00000244: DUP2
00000245: ISZERO
00000246: PUSH2 0x0000
00000249: JUMPI
0000024a: DIV
0000024b: PUSH1 0x0e
0000024d: MUL
0000024e: DUP2
0000024f: ISZERO
00000250: PUSH2 0x0000
00000253: JUMPI
00000254: DIV
00000255: PUSH1 0x40
00000257: MLOAD
00000258: DUP4
00000259: PUSH4 0xffffffff
0000025e: AND
0000025f: PUSH1 0xe0
00000261: PUSH1 0x02
00000263: EXP
00000264: MUL
00000265: DUP2
00000266: MSTORE
00000267: PUSH1 0x04
00000269: ADD
0000026a: DUP1
0000026b: DUP4
0000026c: PUSH1 0x01
0000026e: PUSH1 0xa0
00000270: PUSH1 0x02
00000272: EXP
00000273: SUB
00000274: AND
00000275: PUSH1 0x01
00000277: PUSH1 0xa0
00000279: PUSH1 0x02
0000027b: EXP
0000027c: SUB
0000027d: AND
0000027e: DUP2
0000027f: MSTORE
00000280: PUSH1 0x20
00000282: ADD
00000283: DUP3
00000284: DUP2
00000285: MSTORE
00000286: PUSH1 0x20
00000288: ADD
00000289: SWAP3
0000028a: POP
0000028b: POP
0000028c: POP
0000028d: PUSH1 0x00
0000028f: PUSH1 0x40
00000291: MLOAD
00000292: DUP1
00000293: DUP4
00000294: SUB
00000295: DUP2
00000296: PUSH1 0x00
00000298: DUP8
00000299: DUP1
0000029a: EXTCODESIZE
0000029b: ISZERO
0000029c: PUSH2 0x0000
0000029f: JUMPI
000002a0: PUSH1 0x32
000002a2: GAS
000002a3: SUB
000002a4: CALL
000002a5: ISZERO
000002a6: PUSH2 0x0000
000002a9: JUMPI
000002aa: POP
000002ab: POP
000002ac: PUSH1 0x40
000002ae: DUP1
000002af: MLOAD
000002b0: PUSH1 0x01
000002b2: PUSH1 0xa0
000002b4: PUSH1 0x02
000002b6: EXP
000002b7: SUB
000002b8: CALLER
000002b9: AND
000002ba: DUP2
000002bb: MSTORE
000002bc: PUSH1 0x20
000002be: DUP2
000002bf: ADD
000002c0: DUP5
000002c1: SWAP1
000002c2: MSTORE
000002c3: PUSH1 0x01
000002c5: DUP2
000002c6: DUP4
000002c7: ADD
000002c8: MSTORE
000002c9: SWAP1
000002ca: MLOAD
000002cb: PUSH1 0x00
000002cd: DUP1
000002ce: MLOAD
000002cf: PUSH1 0x20
000002d1: PUSH2 0x071c
000002d4: DUP4
000002d5: CODECOPY
000002d6: DUP2
000002d7: MLOAD
000002d8: SWAP2
000002d9: MSTORE
000002da: SWAP3
000002db: POP
000002dc: SWAP1
000002dd: DUP2
000002de: SWAP1
000002df: SUB
000002e0: PUSH1 0x60
000002e2: ADD
000002e3: SWAP1
000002e4: LOG1
000002e5: PUSH1 0x00
000002e7: PUSH1 0x06
000002e9: SLOAD
000002ea: DUP3
000002eb: DUP2
000002ec: ISZERO
000002ed: PUSH2 0x0000
000002f0: JUMPI
000002f1: MOD
000002f2: GT
000002f3: ISZERO
000002f4: PUSH2 0x038c
000002f7: JUMPI
000002f8: PUSH1 0x06
000002fa: SLOAD
000002fb: DUP2
000002fc: DUP2
000002fd: ISZERO
000002fe: PUSH2 0x0000
00000301: JUMPI
00000302: MOD
00000303: PUSH1 0x03
00000305: PUSH1 0x00
00000307: DUP3
00000308: DUP3
00000309: SLOAD
0000030a: SUB
0000030b: SWAP3
0000030c: POP
0000030d: POP
0000030e: DUP2
0000030f: SWAP1
00000310: SSTORE
00000311: POP
00000312: CALLER
00000313: PUSH1 0x01
00000315: PUSH1 0xa0
00000317: PUSH1 0x02
00000319: EXP
0000031a: SUB
0000031b: AND
0000031c: PUSH2 0x08fc
0000031f: PUSH1 0x06
00000321: SLOAD
00000322: DUP4
00000323: DUP2
00000324: ISZERO
00000325: PUSH2 0x0000
00000328: JUMPI
00000329: PUSH1 0x40
0000032b: MLOAD
0000032c: SWAP2
0000032d: SWAP1
0000032e: MOD
0000032f: DUP1
00000330: ISZERO
00000331: SWAP1
00000332: SWAP3
00000333: MUL
00000334: SWAP2
00000335: SWAP1
00000336: PUSH1 0x00
00000338: DUP2
00000339: DUP2
0000033a: DUP2
0000033b: DUP6
0000033c: DUP9
0000033d: DUP9
0000033e: CALL
0000033f: SWAP4
00000340: POP
00000341: POP
00000342: POP
00000343: POP
00000344: ISZERO
00000345: PUSH2 0x038c
00000348: JUMPI
00000349: PUSH1 0x00
0000034b: DUP1
0000034c: MLOAD
0000034d: PUSH1 0x20
0000034f: PUSH2 0x071c
00000352: DUP4
00000353: CODECOPY
00000354: DUP2
00000355: MLOAD
00000356: SWAP2
00000357: MSTORE
00000358: CALLER
00000359: PUSH1 0x06
0000035b: SLOAD
0000035c: DUP4
0000035d: DUP2
0000035e: ISZERO
0000035f: PUSH2 0x0000
00000362: JUMPI
00000363: PUSH1 0x40
00000365: DUP1
00000366: MLOAD
00000367: PUSH1 0x01
00000369: PUSH1 0xa0
0000036b: PUSH1 0x02
0000036d: EXP
0000036e: SUB
0000036f: SWAP1
00000370: SWAP5
00000371: AND
00000372: DUP5
00000373: MSTORE
00000374: SWAP2
00000375: SWAP1
00000376: MOD
00000377: PUSH1 0x20
00000379: DUP4
0000037a: ADD
0000037b: MSTORE
0000037c: PUSH1 0x00
0000037e: DUP3
0000037f: DUP3
00000380: ADD
00000381: MSTORE
00000382: MLOAD
00000383: SWAP1
00000384: DUP2
00000385: SWAP1
00000386: SUB
00000387: PUSH1 0x60
00000389: ADD
0000038a: SWAP1
0000038b: LOG1
0000038c: JUMPDEST
0000038d: JUMPDEST
0000038e: JUMPDEST
0000038f: POP
00000390: POP
00000391: JUMP
00000392: JUMPDEST
00000393: STOP
00000394: JUMPDEST
00000395: CALLVALUE
00000396: PUSH2 0x0000
00000399: JUMPI
0000039a: PUSH2 0x0392
0000039d: PUSH2 0x04d4
000003a0: JUMP
000003a1: JUMPDEST
000003a2: STOP
000003a3: JUMPDEST
000003a4: CALLVALUE
000003a5: PUSH2 0x0000
000003a8: JUMPI
000003a9: PUSH2 0x03b0
000003ac: PUSH2 0x0555
000003af: JUMP
000003b0: JUMPDEST
000003b1: PUSH1 0x40
000003b3: DUP1
000003b4: MLOAD
000003b5: SWAP2
000003b6: DUP3
000003b7: MSTORE
000003b8: MLOAD
000003b9: SWAP1
000003ba: DUP2
000003bb: SWAP1
000003bc: SUB
000003bd: PUSH1 0x20
000003bf: ADD
000003c0: SWAP1
000003c1: RETURN
000003c2: JUMPDEST
000003c3: CALLVALUE
000003c4: PUSH2 0x0000
000003c7: JUMPI
000003c8: PUSH2 0x03cf
000003cb: PUSH2 0x055b
000003ce: JUMP
000003cf: JUMPDEST
000003d0: PUSH1 0x40
000003d2: DUP1
000003d3: MLOAD
000003d4: PUSH1 0x01
000003d6: PUSH1 0xa0
000003d8: PUSH1 0x02
000003da: EXP
000003db: SUB
000003dc: SWAP1
000003dd: SWAP3
000003de: AND
000003df: DUP3
000003e0: MSTORE
000003e1: MLOAD
000003e2: SWAP1
000003e3: DUP2
000003e4: SWAP1
000003e5: SUB
000003e6: PUSH1 0x20
000003e8: ADD
000003e9: SWAP1
000003ea: RETURN
000003eb: JUMPDEST
000003ec: CALLVALUE
000003ed: PUSH2 0x0000
000003f0: JUMPI
000003f1: PUSH2 0x03cf
000003f4: PUSH2 0x056a
000003f7: JUMP
000003f8: JUMPDEST
000003f9: PUSH1 0x40
000003fb: DUP1
000003fc: MLOAD
000003fd: PUSH1 0x01
000003ff: PUSH1 0xa0
00000401: PUSH1 0x02
00000403: EXP
00000404: SUB
00000405: SWAP1
00000406: SWAP3
00000407: AND
00000408: DUP3
00000409: MSTORE
0000040a: MLOAD
0000040b: SWAP1
0000040c: DUP2
0000040d: SWAP1
0000040e: SUB
0000040f: PUSH1 0x20
00000411: ADD
00000412: SWAP1
00000413: RETURN
00000414: JUMPDEST
00000415: CALLVALUE
00000416: PUSH2 0x0000
00000419: JUMPI
0000041a: PUSH2 0x03cf
0000041d: PUSH2 0x0579
00000420: JUMP
00000421: JUMPDEST
00000422: PUSH1 0x40
00000424: DUP1
00000425: MLOAD
00000426: PUSH1 0x01
00000428: PUSH1 0xa0
0000042a: PUSH1 0x02
0000042c: EXP
0000042d: SUB
0000042e: SWAP1
0000042f: SWAP3
00000430: AND
00000431: DUP3
00000432: MSTORE
00000433: MLOAD
00000434: SWAP1
00000435: DUP2
00000436: SWAP1
00000437: SUB
00000438: PUSH1 0x20
0000043a: ADD
0000043b: SWAP1
0000043c: RETURN
0000043d: JUMPDEST
0000043e: CALLVALUE
0000043f: PUSH2 0x0000
00000442: JUMPI
00000443: PUSH2 0x03b0
00000446: PUSH1 0x01
00000448: PUSH1 0xa0
0000044a: PUSH1 0x02
0000044c: EXP
0000044d: SUB
0000044e: PUSH1 0x04
00000450: CALLDATALOAD
00000451: AND
00000452: PUSH2 0x0588
00000455: JUMP
00000456: JUMPDEST
00000457: PUSH1 0x40
00000459: DUP1
0000045a: MLOAD
0000045b: SWAP2
0000045c: DUP3
0000045d: MSTORE
0000045e: MLOAD
0000045f: SWAP1
00000460: DUP2
00000461: SWAP1
00000462: SUB
00000463: PUSH1 0x20
00000465: ADD
00000466: SWAP1
00000467: RETURN
00000468: JUMPDEST
00000469: CALLVALUE
0000046a: PUSH2 0x0000
0000046d: JUMPI
0000046e: PUSH2 0x03b0
00000471: PUSH2 0x059a
00000474: JUMP
00000475: JUMPDEST
00000476: PUSH1 0x40
00000478: DUP1
00000479: MLOAD
0000047a: SWAP2
0000047b: DUP3
0000047c: MSTORE
0000047d: MLOAD
0000047e: SWAP1
0000047f: DUP2
00000480: SWAP1
00000481: SUB
00000482: PUSH1 0x20
00000484: ADD
00000485: SWAP1
00000486: RETURN
00000487: JUMPDEST
00000488: CALLVALUE
00000489: PUSH2 0x0000
0000048c: JUMPI
0000048d: PUSH2 0x03b0
00000490: PUSH2 0x05a0
00000493: JUMP
00000494: JUMPDEST
00000495: PUSH1 0x40
00000497: DUP1
00000498: MLOAD
00000499: SWAP2
0000049a: DUP3
0000049b: MSTORE
0000049c: MLOAD
0000049d: SWAP1
0000049e: DUP2
0000049f: SWAP1
000004a0: SUB
000004a1: PUSH1 0x20
000004a3: ADD
000004a4: SWAP1
000004a5: RETURN
000004a6: JUMPDEST
000004a7: CALLVALUE
000004a8: PUSH2 0x0000
000004ab: JUMPI
000004ac: PUSH2 0x03b0
000004af: PUSH2 0x05a6
000004b2: JUMP
000004b3: JUMPDEST
000004b4: PUSH1 0x40
000004b6: DUP1
000004b7: MLOAD
000004b8: SWAP2
000004b9: DUP3
000004ba: MSTORE
000004bb: MLOAD
000004bc: SWAP1
000004bd: DUP2
000004be: SWAP1
000004bf: SUB
000004c0: PUSH1 0x20
000004c2: ADD
000004c3: SWAP1
000004c4: RETURN
000004c5: JUMPDEST
000004c6: CALLVALUE
000004c7: PUSH2 0x0000
000004ca: JUMPI
000004cb: PUSH2 0x0392
000004ce: PUSH2 0x05ac
000004d1: JUMP
000004d2: JUMPDEST
000004d3: STOP
000004d4: JUMPDEST
000004d5: PUSH1 0x04
000004d7: SLOAD
000004d8: TIMESTAMP
000004d9: LT
000004da: PUSH2 0x0551
000004dd: JUMPI
000004de: PUSH1 0x02
000004e0: SLOAD
000004e1: PUSH1 0x03
000004e3: SLOAD
000004e4: LT
000004e5: PUSH2 0x0541
000004e8: JUMPI
000004e9: PUSH1 0x09
000004eb: DUP1
000004ec: SLOAD
000004ed: PUSH1 0xff
000004ef: NOT
000004f0: AND
000004f1: PUSH1 0x01
000004f3: OR
000004f4: SWAP1
000004f5: SSTORE
000004f6: PUSH1 0x00
000004f8: SLOAD
000004f9: PUSH1 0x03
000004fb: SLOAD
000004fc: PUSH1 0x40
000004fe: DUP1
000004ff: MLOAD
00000500: PUSH1 0x01
00000502: PUSH1 0xa0
00000504: PUSH1 0x02
00000506: EXP
00000507: SUB
00000508: SWAP1
00000509: SWAP4
0000050a: AND
0000050b: DUP4
0000050c: MSTORE
0000050d: PUSH1 0x20
0000050f: DUP4
00000510: ADD
00000511: SWAP2
00000512: SWAP1
00000513: SWAP2
00000514: MSTORE
00000515: DUP1
00000516: MLOAD
00000517: PUSH32 0xec3f991caf7857d61663fd1bba1739e04abd4781238508cde554bb849d790c85
00000538: SWAP3
00000539: DUP2
0000053a: SWAP1
0000053b: SUB
0000053c: SWAP1
0000053d: SWAP2
0000053e: ADD
0000053f: SWAP1
00000540: LOG1
00000541: JUMPDEST
00000542: PUSH1 0x09
00000544: DUP1
00000545: SLOAD
00000546: PUSH2 0xff00
00000549: NOT
0000054a: AND
0000054b: PUSH2 0x0100
0000054e: OR
0000054f: SWAP1
00000550: SSTORE
00000551: JUMPDEST
00000552: JUMPDEST
00000553: JUMPDEST
00000554: JUMP
00000555: JUMPDEST
00000556: PUSH1 0x04
00000558: SLOAD
00000559: DUP2
0000055a: JUMP
0000055b: JUMPDEST
0000055c: PUSH1 0x00
0000055e: SLOAD
0000055f: PUSH1 0x01
00000561: PUSH1 0xa0
00000563: PUSH1 0x02
00000565: EXP
00000566: SUB
00000567: AND
00000568: DUP2
00000569: JUMP
0000056a: JUMPDEST
0000056b: PUSH1 0x01
0000056d: SLOAD
0000056e: PUSH1 0x01
00000570: PUSH1 0xa0
00000572: PUSH1 0x02
00000574: EXP
00000575: SUB
00000576: AND
00000577: DUP2
00000578: JUMP
00000579: JUMPDEST
0000057a: PUSH1 0x07
0000057c: SLOAD
0000057d: PUSH1 0x01
0000057f: PUSH1 0xa0
00000581: PUSH1 0x02
00000583: EXP
00000584: SUB
00000585: AND
00000586: DUP2
00000587: JUMP
00000588: JUMPDEST
00000589: PUSH1 0x08
0000058b: PUSH1 0x20
0000058d: MSTORE
0000058e: PUSH1 0x00
00000590: SWAP1
00000591: DUP2
00000592: MSTORE
00000593: PUSH1 0x40
00000595: SWAP1
00000596: KECCAK256
00000597: SLOAD
00000598: DUP2
00000599: JUMP
0000059a: JUMPDEST
0000059b: PUSH1 0x02
0000059d: SLOAD
0000059e: DUP2
0000059f: JUMP
000005a0: JUMPDEST
000005a1: PUSH1 0x03
000005a3: SLOAD
000005a4: DUP2
000005a5: JUMP
000005a6: JUMPDEST
000005a7: PUSH1 0x05
000005a9: SLOAD
000005aa: DUP2
000005ab: JUMP
000005ac: JUMPDEST
000005ad: PUSH1 0x04
000005af: SLOAD
000005b0: PUSH1 0x00
000005b2: SWAP1
000005b3: TIMESTAMP
000005b4: LT
000005b5: PUSH2 0x0714
000005b8: JUMPI
000005b9: PUSH1 0x09
000005bb: SLOAD
000005bc: PUSH1 0xff
000005be: AND
000005bf: ISZERO
000005c0: ISZERO
000005c1: PUSH2 0x066d
000005c4: JUMPI
000005c5: POP
000005c6: PUSH1 0x01
000005c8: PUSH1 0xa0
000005ca: PUSH1 0x02
000005cc: EXP
000005cd: SUB
000005ce: CALLER
000005cf: AND
000005d0: PUSH1 0x00
000005d2: SWAP1
000005d3: DUP2
000005d4: MSTORE
000005d5: PUSH1 0x08
000005d7: PUSH1 0x20
000005d9: MSTORE
000005da: PUSH1 0x40
000005dc: DUP2
000005dd: KECCAK256
000005de: DUP1
000005df: SLOAD
000005e0: SWAP1
000005e1: DUP3
000005e2: SWAP1
000005e3: SSTORE
000005e4: SWAP1
000005e5: DUP2
000005e6: GT
000005e7: ISZERO
000005e8: PUSH2 0x066d
000005eb: JUMPI
000005ec: PUSH1 0x40
000005ee: MLOAD
000005ef: PUSH1 0x01
000005f1: PUSH1 0xa0
000005f3: PUSH1 0x02
000005f5: EXP
000005f6: SUB
000005f7: CALLER
000005f8: AND
000005f9: SWAP1
000005fa: DUP3
000005fb: ISZERO
000005fc: PUSH2 0x08fc
000005ff: MUL
00000600: SWAP1
00000601: DUP4
00000602: SWAP1
00000603: PUSH1 0x00
00000605: DUP2
00000606: DUP2
00000607: DUP2
00000608: DUP6
00000609: DUP9
0000060a: DUP9
0000060b: CALL
0000060c: SWAP4
0000060d: POP
0000060e: POP
0000060f: POP
00000610: POP
00000611: ISZERO
00000612: PUSH2 0x0651
00000615: JUMPI
00000616: PUSH1 0x40
00000618: DUP1
00000619: MLOAD
0000061a: PUSH1 0x01
0000061c: PUSH1 0xa0
0000061e: PUSH1 0x02
00000620: EXP
00000621: SUB
00000622: CALLER
00000623: AND
00000624: DUP2
00000625: MSTORE
00000626: PUSH1 0x20
00000628: DUP2
00000629: ADD
0000062a: DUP4
0000062b: SWAP1
0000062c: MSTORE
0000062d: PUSH1 0x00
0000062f: DUP2
00000630: DUP4
00000631: ADD
00000632: MSTORE
00000633: SWAP1
00000634: MLOAD
00000635: PUSH1 0x00
00000637: DUP1
00000638: MLOAD
00000639: PUSH1 0x20
0000063b: PUSH2 0x071c
0000063e: DUP4
0000063f: CODECOPY
00000640: DUP2
00000641: MLOAD
00000642: SWAP2
00000643: MSTORE
00000644: SWAP2
00000645: DUP2
00000646: SWAP1
00000647: SUB
00000648: PUSH1 0x60
0000064a: ADD
0000064b: SWAP1
0000064c: LOG1
0000064d: PUSH2 0x066d
00000650: JUMP
00000651: JUMPDEST
00000652: PUSH1 0x01
00000654: PUSH1 0xa0
00000656: PUSH1 0x02
00000658: EXP
00000659: SUB
0000065a: CALLER
0000065b: AND
0000065c: PUSH1 0x00
0000065e: SWAP1
0000065f: DUP2
00000660: MSTORE
00000661: PUSH1 0x08
00000663: PUSH1 0x20
00000665: MSTORE
00000666: PUSH1 0x40
00000668: SWAP1
00000669: KECCAK256
0000066a: DUP2
0000066b: SWAP1
0000066c: SSTORE
0000066d: JUMPDEST
0000066e: JUMPDEST
0000066f: JUMPDEST
00000670: PUSH1 0x09
00000672: SLOAD
00000673: PUSH1 0xff
00000675: AND
00000676: DUP1
00000677: ISZERO
00000678: PUSH2 0x068f
0000067b: JUMPI
0000067c: POP
0000067d: PUSH1 0x00
0000067f: SLOAD
00000680: CALLER
00000681: PUSH1 0x01
00000683: PUSH1 0xa0
00000685: PUSH1 0x02
00000687: EXP
00000688: SUB
00000689: SWAP1
0000068a: DUP2
0000068b: AND
0000068c: SWAP2
0000068d: AND
0000068e: EQ
0000068f: JUMPDEST
00000690: ISZERO
00000691: PUSH2 0x0714
00000694: JUMPI
00000695: PUSH1 0x00
00000697: DUP1
00000698: SLOAD
00000699: PUSH1 0x03
0000069b: SLOAD
0000069c: PUSH1 0x40
0000069e: MLOAD
0000069f: PUSH1 0x01
000006a1: PUSH1 0xa0
000006a3: PUSH1 0x02
000006a5: EXP
000006a6: SUB
000006a7: SWAP1
000006a8: SWAP3
000006a9: AND
000006aa: SWAP3
000006ab: DUP2
000006ac: ISZERO
000006ad: PUSH2 0x08fc
000006b0: MUL
000006b1: SWAP3
000006b2: SWAP1
000006b3: DUP2
000006b4: DUP2
000006b5: DUP2
000006b6: DUP6
000006b7: DUP9
000006b8: DUP9
000006b9: CALL
000006ba: SWAP4
000006bb: POP
000006bc: POP
000006bd: POP
000006be: POP
000006bf: ISZERO
000006c0: PUSH2 0x0709
000006c3: JUMPI
000006c4: PUSH1 0x00
000006c6: DUP1
000006c7: SLOAD
000006c8: PUSH1 0x03
000006ca: SLOAD
000006cb: PUSH1 0x40
000006cd: DUP1
000006ce: MLOAD
000006cf: PUSH1 0x01
000006d1: PUSH1 0xa0
000006d3: PUSH1 0x02
000006d5: EXP
000006d6: SUB
000006d7: SWAP1
000006d8: SWAP4
000006d9: AND
000006da: DUP4
000006db: MSTORE
000006dc: PUSH1 0x20
000006de: DUP4
000006df: ADD
000006e0: SWAP2
000006e1: SWAP1
000006e2: SWAP2
000006e3: MSTORE
000006e4: DUP2
000006e5: DUP2
000006e6: ADD
000006e7: SWAP3
000006e8: SWAP1
000006e9: SWAP3
000006ea: MSTORE
000006eb: SWAP1
000006ec: MLOAD
000006ed: PUSH1 0x00
000006ef: DUP1
000006f0: MLOAD
000006f1: PUSH1 0x20
000006f3: PUSH2 0x071c
000006f6: DUP4
000006f7: CODECOPY
000006f8: DUP2
000006f9: MLOAD
000006fa: SWAP2
000006fb: MSTORE
000006fc: SWAP2
000006fd: DUP2
000006fe: SWAP1
000006ff: SUB
00000700: PUSH1 0x60
00000702: ADD
00000703: SWAP1
00000704: LOG1
00000705: PUSH2 0x0714
00000708: JUMP
00000709: JUMPDEST
0000070a: PUSH1 0x09
0000070c: DUP1
0000070d: SLOAD
0000070e: PUSH1 0xff
00000710: NOT
00000711: AND
00000712: SWAP1
00000713: SSTORE
00000714: JUMPDEST
00000715: JUMPDEST
00000716: JUMPDEST
00000717: JUMPDEST
00000718: JUMPDEST
00000719: POP
0000071a: JUMP
0000071b: STOP
0000071c: UNKNOWN(0xE8)
0000071d: TIMESTAMP
0000071e: UNKNOWN(0xAE)
0000071f: UNKNOWN(0xA7)
00000720: UNKNOWN(0xA5)
00000721: CALL
00000722: UNKNOWN(0xB0)
00000723: LT
00000724: BLOBHASH
00000725: UNKNOWN(0xD7)
00000726: MSTORE
00000727: STOP
00000728: DUP13
00000729: MSTORE8
0000072a: UNKNOWN(0xC5)
0000072b: UNKNOWN(0x28)
0000072c: SWAP1
0000072d: UNKNOWN(0xB1)
0000072e: UNKNOWN(0xA6)
0000072f: UNKNOWN(0xDA)
00000730: UNKNOWN(0xF6)
00000731: PUSH1 0xcf
00000733: CODECOPY
00000734: UNKNOWN(0xE8)
00000735: UNKNOWN(0xEE)
00000736: UNKNOWN(0xC5)
00000737: MOD
00000738: GT
00000739: UNKNOWN(0x2B)
0000073a: UNKNOWN(0xBD)
0000073b: UNKNOWN(0xF6)
0000073c: LOG1
0000073d: PUSH6 0x627a7a723058
00000744: KECCAK256
00000745: UNKNOWN(0xAF)
00000746: DUP6
00000747: DELEGATECALL
00000748: SIGNEXTEND
00000749: SWAP10
0000074a: UNKNOWN(0xB8)
0000074b: DUP6
0000074c: INVALID
0000074d: UNKNOWN(0x4C)
0000074e: MULMOD
0000074f: DUP5
00000750: UNKNOWN(0xEE)
00000751: UNKNOWN(0x28)
00000752: BALANCE
00000753: UNKNOWN(0x4F)
00000754: MOD
00000755: UNKNOWN(0xD7)
00000756: EXTCODEHASH
00000757: UNKNOWN(0xE5)
00000758: UNKNOWN(0xD2)
00000759: DUP14
0000075a: PUSH12 0xea4248ce1ba18943275a0029

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0x8dc872788c2d89b4dbff72dd34f995e7e2fb309f33668752d0a98d041be69673
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 120,
    "trace_id": "0x8dc872788c2d89b4dbff72dd34f995e7e2fb309f33668752d0a98d041be69673",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x01cb3b20",
            "selector": "0x01cb3b20",
            "calldata_variants": [
                "0x01cb3b20",
                "0x01cb3b200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x29dcb0cf",
            "selector": "0x29dcb0cf",
            "calldata_variants": [
                "0x29dcb0cf",
                "0x29dcb0cf0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38af3eed",
            "selector": "0x38af3eed",
            "calldata_variants": [
                "0x38af3eed",
                "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x411b007e",
            "selector": "0x411b007e",
            "calldata_variants": [
                "0x411b007e",
                "0x411b007e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6e66f6e9",
            "selector": "0x6e66f6e9",
            "calldata_variants": [
                "0x6e66f6e9",
                "0x6e66f6e90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7a3a0e84",
            "selector": "0x7a3a0e84",
            "calldata_variants": [
                "0x7a3a0e84",
                "0x7a3a0e840000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7b3e5e7b",
            "selector": "0x7b3e5e7b",
            "calldata_variants": [
                "0x7b3e5e7b",
                "0x7b3e5e7b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1863,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xd682d70dba0d62b4df0344af92300de213150c2555f434f5d7f0f089b943cbc3
call_targets: 0x885c7e1c8374811a7820c035b80ff1495e0dfef0
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xd682d70dba0d62b4df0344af92300de213150c2555f434f5d7f0f089b943cbc3",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x885c7e1c8374811a7820c035b80ff1495e0dfef0"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x01cb3b20",
            "selector": "0x01cb3b20",
            "calldata_variants": [
                "0x01cb3b20",
                "0x01cb3b200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x29dcb0cf",
            "selector": "0x29dcb0cf",
            "calldata_variants": [
                "0x29dcb0cf",
                "0x29dcb0cf0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38af3eed",
            "selector": "0x38af3eed",
            "calldata_variants": [
                "0x38af3eed",
                "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x411b007e",
            "selector": "0x411b007e",
            "calldata_variants": [
                "0x411b007e",
                "0x411b007e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6e66f6e9",
            "selector": "0x6e66f6e9",
            "calldata_variants": [
                "0x6e66f6e9",
                "0x6e66f6e90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7a3a0e84",
            "selector": "0x7a3a0e84",
            "calldata_variants": [
                "0x7a3a0e84",
                "0x7a3a0e840000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7b3e5e7b",
            "selector": "0x7b3e5e7b",
            "calldata_variants": [
                "0x7b3e5e7b",
                "0x7b3e5e7b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 396,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 536,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 676,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 7,
    "guards_detected": [],
    "untrusted_call_count": 7
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xd682d70dba0d62b4df0344af92300de213150c2555f434f5d7f0f089b943cbc3
call_targets: 0x885c7e1c8374811a7820c035b80ff1495e0dfef0
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xd682d70dba0d62b4df0344af92300de213150c2555f434f5d7f0f089b943cbc3",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x885c7e1c8374811a7820c035b80ff1495e0dfef0"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x01cb3b20",
            "selector": "0x01cb3b20",
            "calldata_variants": [
                "0x01cb3b20",
                "0x01cb3b200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x29dcb0cf",
            "selector": "0x29dcb0cf",
            "calldata_variants": [
                "0x29dcb0cf",
                "0x29dcb0cf0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38af3eed",
            "selector": "0x38af3eed",
            "calldata_variants": [
                "0x38af3eed",
                "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x411b007e",
            "selector": "0x411b007e",
            "calldata_variants": [
                "0x411b007e",
                "0x411b007e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6e66f6e9",
            "selector": "0x6e66f6e9",
            "calldata_variants": [
                "0x6e66f6e9",
                "0x6e66f6e90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7a3a0e84",
            "selector": "0x7a3a0e84",
            "calldata_variants": [
                "0x7a3a0e84",
                "0x7a3a0e840000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7b3e5e7b",
            "selector": "0x7b3e5e7b",
            "calldata_variants": [
                "0x7b3e5e7b",
                "0x7b3e5e7b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 396,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 536,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 676,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 7,
    "guards_detected": []
}