TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-a9d7-71d2-a556-57803563fe67

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
20711 artifact.fetch complete 1 / 3 3 months ago
20712 tool.cast_disasm complete 1 / 3 3 months ago
64562 analysis.bundle complete 1 / 3 1 week ago
64563 capability.graph complete 1 / 3 1 week ago
64564 detector.run complete 1 / 3 1 week ago
64565 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
0
Total opcodes
114
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0xe0
00000007: PUSH1 0x02
00000009: EXP
0000000a: PUSH1 0x00
0000000c: CALLDATALOAD
0000000d: DIV
0000000e: PUSH4 0x6b8357ac
00000013: DUP2
00000014: EQ
00000015: PUSH1 0x1a
00000017: JUMPI
00000018: JUMPDEST
00000019: STOP
0000001a: JUMPDEST
0000001b: PUSH1 0xc8
0000001d: PUSH1 0x04
0000001f: CALLDATALOAD
00000020: PUSH1 0x24
00000022: CALLDATALOAD
00000023: PUSH1 0x00
00000025: DUP1
00000026: SLOAD
00000027: DUP2
00000028: SWAP1
00000029: CALLER
0000002a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000003f: SWAP1
00000040: DUP2
00000041: AND
00000042: SWAP2
00000043: AND
00000044: EQ
00000045: ISZERO
00000046: PUSH1 0xc1
00000048: JUMPI
00000049: POP
0000004a: DUP1
0000004b: SLOAD
0000004c: PUSH32 0xa9059cbb00000000000000000000000000000000000000000000000000000000
0000006d: PUSH1 0x60
0000006f: SWAP1
00000070: DUP2
00000071: MSTORE
00000072: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000087: SWAP2
00000088: DUP3
00000089: AND
0000008a: PUSH1 0x64
0000008c: MSTORE
0000008d: PUSH1 0x84
0000008f: DUP5
00000090: SWAP1
00000091: MSTORE
00000092: DUP5
00000093: SWAP2
00000094: DUP3
00000095: AND
00000096: SWAP1
00000097: PUSH4 0xa9059cbb
0000009c: SWAP1
0000009d: PUSH1 0xa4
0000009f: SWAP1
000000a0: PUSH1 0x20
000000a2: SWAP1
000000a3: PUSH1 0x44
000000a5: DUP2
000000a6: DUP9
000000a7: DUP8
000000a8: PUSH2 0x61da
000000ab: GAS
000000ac: SUB
000000ad: CALL
000000ae: ISZERO
000000af: PUSH1 0x02
000000b1: JUMPI
000000b2: POP
000000b3: POP
000000b4: PUSH1 0x40
000000b6: MLOAD
000000b7: MLOAD
000000b8: ISZERO
000000b9: SWAP1
000000ba: POP
000000bb: PUSH1 0xc1
000000bd: JUMPI
000000be: DUP3
000000bf: SWAP2
000000c0: POP
000000c1: JUMPDEST
000000c2: POP
000000c3: SWAP3
000000c4: SWAP2
000000c5: POP
000000c6: POP
000000c7: JUMP
000000c8: JUMPDEST
000000c9: PUSH1 0x40
000000cb: DUP1
000000cc: MLOAD
000000cd: SWAP2
000000ce: DUP3
000000cf: MSTORE
000000d0: MLOAD
000000d1: SWAP1
000000d2: DUP2
000000d3: SWAP1
000000d4: SUB
000000d5: PUSH1 0x20
000000d7: ADD
000000d8: SWAP1
000000d9: RETURN

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x8652a385a4b7d055d69a9e30281bca7a40ffb1b737805aca42fcd615ebb64af3
call_targets: 0x3fe0570f242047b90b751a93cfc68b98d9674329
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x8652a385a4b7d055d69a9e30281bca7a40ffb1b737805aca42fcd615ebb64af3",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x3fe0570f242047b90b751a93cfc68b98d9674329"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x6b8357ac",
            "selector": "0x6b8357ac",
            "calldata_variants": [
                "0x6b8357ac",
                "0x6b8357ac0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 173,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [],
    "untrusted_call_count": 1
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x8652a385a4b7d055d69a9e30281bca7a40ffb1b737805aca42fcd615ebb64af3
call_targets: 0x3fe0570f242047b90b751a93cfc68b98d9674329
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x8652a385a4b7d055d69a9e30281bca7a40ffb1b737805aca42fcd615ebb64af3",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x3fe0570f242047b90b751a93cfc68b98d9674329"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x6b8357ac",
            "selector": "0x6b8357ac",
            "calldata_variants": [
                "0x6b8357ac",
                "0x6b8357ac0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 173,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": []
}