TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-a9e7-73b8-8805-e8c283d74629

complete
Chain ID
1
Address
0xd111bd7ad596ed9c78ad8fdecc6e23aca63b4383
Block Number
—
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
20723 artifact.fetch complete 1 / 3 3 months ago
20724 tool.cast_disasm complete 1 / 3 3 months ago
64546 analysis.bundle complete 1 / 3 1 week ago
64547 capability.graph complete 1 / 3 1 week ago
64548 detector.run complete 1 / 3 1 week ago
64549 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
2
EXT*/BALANCE
2
Total opcodes
1325
Flags
delegatecall_present
View cast disassembly output 
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00b7
0000000a: JUMPI
0000000b: PUSH4 0xffffffff
00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002e: PUSH1 0x00
00000030: CALLDATALOAD
00000031: DIV
00000032: AND
00000033: PUSH4 0x2288fad6
00000038: DUP2
00000039: EQ
0000003a: PUSH2 0x00cc
0000003d: JUMPI
0000003e: DUP1
0000003f: PUSH4 0x25bae118
00000044: EQ
00000045: PUSH2 0x0118
00000048: JUMPI
00000049: DUP1
0000004a: PUSH4 0x2e1a7d4d
0000004f: EQ
00000050: PUSH2 0x013d
00000053: JUMPI
00000054: DUP1
00000055: PUSH4 0x3f5174df
0000005a: EQ
0000005b: PUSH2 0x0155
0000005e: JUMPI
0000005f: DUP1
00000060: PUSH4 0x5aa3d2b0
00000065: EQ
00000066: PUSH2 0x017a
00000069: JUMPI
0000006a: DUP1
0000006b: PUSH4 0x66d38203
00000070: EQ
00000071: PUSH2 0x01ab
00000074: JUMPI
00000075: DUP1
00000076: PUSH4 0x8da5cb5b
0000007b: EQ
0000007c: PUSH2 0x01de
0000007f: JUMPI
00000080: DUP1
00000081: PUSH4 0xae4cc757
00000086: EQ
00000087: PUSH2 0x020d
0000008a: JUMPI
0000008b: DUP1
0000008c: PUSH4 0xd7a14a05
00000091: EQ
00000092: PUSH2 0x0234
00000095: JUMPI
00000096: DUP1
00000097: PUSH4 0xf0c71318
0000009c: EQ
0000009d: PUSH2 0x0259
000000a0: JUMPI
000000a1: DUP1
000000a2: PUSH4 0xf2fde38b
000000a7: EQ
000000a8: PUSH2 0x0288
000000ab: JUMPI
000000ac: DUP1
000000ad: PUSH4 0xf974a1a2
000000b2: EQ
000000b3: PUSH2 0x02a9
000000b6: JUMPI
000000b7: JUMPDEST
000000b8: PUSH2 0x00ca
000000bb: JUMPDEST
000000bc: PUSH2 0x00c6
000000bf: CALLER
000000c0: CALLVALUE
000000c1: TIMESTAMP
000000c2: PUSH2 0x0334
000000c5: JUMP
000000c6: JUMPDEST
000000c7: POP
000000c8: JUMPDEST
000000c9: JUMP
000000ca: JUMPDEST
000000cb: STOP
000000cc: JUMPDEST
000000cd: CALLVALUE
000000ce: ISZERO
000000cf: PUSH2 0x00d7
000000d2: JUMPI
000000d3: PUSH1 0x00
000000d5: DUP1
000000d6: REVERT
000000d7: JUMPDEST
000000d8: PUSH2 0x00e2
000000db: PUSH1 0x04
000000dd: CALLDATALOAD
000000de: PUSH2 0x0495
000000e1: JUMP
000000e2: JUMPDEST
000000e3: PUSH1 0x40
000000e5: MLOAD
000000e6: DUP1
000000e7: DUP5
000000e8: PUSH1 0x01
000000ea: PUSH1 0xa0
000000ec: PUSH1 0x02
000000ee: EXP
000000ef: SUB
000000f0: AND
000000f1: PUSH1 0x01
000000f3: PUSH1 0xa0
000000f5: PUSH1 0x02
000000f7: EXP
000000f8: SUB
000000f9: AND
000000fa: DUP2
000000fb: MSTORE
000000fc: PUSH1 0x20
000000fe: ADD
000000ff: DUP4
00000100: DUP2
00000101: MSTORE
00000102: PUSH1 0x20
00000104: ADD
00000105: DUP3
00000106: DUP2
00000107: MSTORE
00000108: PUSH1 0x20
0000010a: ADD
0000010b: SWAP4
0000010c: POP
0000010d: POP
0000010e: POP
0000010f: POP
00000110: PUSH1 0x40
00000112: MLOAD
00000113: DUP1
00000114: SWAP2
00000115: SUB
00000116: SWAP1
00000117: RETURN
00000118: JUMPDEST
00000119: CALLVALUE
0000011a: ISZERO
0000011b: PUSH2 0x0123
0000011e: JUMPI
0000011f: PUSH1 0x00
00000121: DUP1
00000122: REVERT
00000123: JUMPDEST
00000124: PUSH2 0x012b
00000127: PUSH2 0x04d2
0000012a: JUMP
0000012b: JUMPDEST
0000012c: PUSH1 0x40
0000012e: MLOAD
0000012f: SWAP1
00000130: DUP2
00000131: MSTORE
00000132: PUSH1 0x20
00000134: ADD
00000135: PUSH1 0x40
00000137: MLOAD
00000138: DUP1
00000139: SWAP2
0000013a: SUB
0000013b: SWAP1
0000013c: RETURN
0000013d: JUMPDEST
0000013e: CALLVALUE
0000013f: ISZERO
00000140: PUSH2 0x0148
00000143: JUMPI
00000144: PUSH1 0x00
00000146: DUP1
00000147: REVERT
00000148: JUMPDEST
00000149: PUSH2 0x00ca
0000014c: PUSH1 0x04
0000014e: CALLDATALOAD
0000014f: PUSH2 0x04d8
00000152: JUMP
00000153: JUMPDEST
00000154: STOP
00000155: JUMPDEST
00000156: CALLVALUE
00000157: ISZERO
00000158: PUSH2 0x0160
0000015b: JUMPI
0000015c: PUSH1 0x00
0000015e: DUP1
0000015f: REVERT
00000160: JUMPDEST
00000161: PUSH2 0x012b
00000164: PUSH2 0x052b
00000167: JUMP
00000168: JUMPDEST
00000169: PUSH1 0x40
0000016b: MLOAD
0000016c: SWAP1
0000016d: DUP2
0000016e: MSTORE
0000016f: PUSH1 0x20
00000171: ADD
00000172: PUSH1 0x40
00000174: MLOAD
00000175: DUP1
00000176: SWAP2
00000177: SUB
00000178: SWAP1
00000179: RETURN
0000017a: JUMPDEST
0000017b: CALLVALUE
0000017c: ISZERO
0000017d: PUSH2 0x0185
00000180: JUMPI
00000181: PUSH1 0x00
00000183: DUP1
00000184: REVERT
00000185: JUMPDEST
00000186: PUSH2 0x012b
00000189: PUSH1 0x01
0000018b: PUSH1 0xa0
0000018d: PUSH1 0x02
0000018f: EXP
00000190: SUB
00000191: PUSH1 0x04
00000193: CALLDATALOAD
00000194: AND
00000195: PUSH2 0x0532
00000198: JUMP
00000199: JUMPDEST
0000019a: PUSH1 0x40
0000019c: MLOAD
0000019d: SWAP1
0000019e: DUP2
0000019f: MSTORE
000001a0: PUSH1 0x20
000001a2: ADD
000001a3: PUSH1 0x40
000001a5: MLOAD
000001a6: DUP1
000001a7: SWAP2
000001a8: SUB
000001a9: SWAP1
000001aa: RETURN
000001ab: JUMPDEST
000001ac: CALLVALUE
000001ad: ISZERO
000001ae: PUSH2 0x01b6
000001b1: JUMPI
000001b2: PUSH1 0x00
000001b4: DUP1
000001b5: REVERT
000001b6: JUMPDEST
000001b7: PUSH2 0x01ca
000001ba: PUSH1 0x01
000001bc: PUSH1 0xa0
000001be: PUSH1 0x02
000001c0: EXP
000001c1: SUB
000001c2: PUSH1 0x04
000001c4: CALLDATALOAD
000001c5: AND
000001c6: PUSH2 0x05b4
000001c9: JUMP
000001ca: JUMPDEST
000001cb: PUSH1 0x40
000001cd: MLOAD
000001ce: SWAP1
000001cf: ISZERO
000001d0: ISZERO
000001d1: DUP2
000001d2: MSTORE
000001d3: PUSH1 0x20
000001d5: ADD
000001d6: PUSH1 0x40
000001d8: MLOAD
000001d9: DUP1
000001da: SWAP2
000001db: SUB
000001dc: SWAP1
000001dd: RETURN
000001de: JUMPDEST
000001df: CALLVALUE
000001e0: ISZERO
000001e1: PUSH2 0x01e9
000001e4: JUMPI
000001e5: PUSH1 0x00
000001e7: DUP1
000001e8: REVERT
000001e9: JUMPDEST
000001ea: PUSH2 0x01f1
000001ed: PUSH2 0x061c
000001f0: JUMP
000001f1: JUMPDEST
000001f2: PUSH1 0x40
000001f4: MLOAD
000001f5: PUSH1 0x01
000001f7: PUSH1 0xa0
000001f9: PUSH1 0x02
000001fb: EXP
000001fc: SUB
000001fd: SWAP1
000001fe: SWAP2
000001ff: AND
00000200: DUP2
00000201: MSTORE
00000202: PUSH1 0x20
00000204: ADD
00000205: PUSH1 0x40
00000207: MLOAD
00000208: DUP1
00000209: SWAP2
0000020a: SUB
0000020b: SWAP1
0000020c: RETURN
0000020d: JUMPDEST
0000020e: CALLVALUE
0000020f: ISZERO
00000210: PUSH2 0x0218
00000213: JUMPI
00000214: PUSH1 0x00
00000216: DUP1
00000217: REVERT
00000218: JUMPDEST
00000219: PUSH2 0x01ca
0000021c: PUSH2 0x062b
0000021f: JUMP
00000220: JUMPDEST
00000221: PUSH1 0x40
00000223: MLOAD
00000224: SWAP1
00000225: ISZERO
00000226: ISZERO
00000227: DUP2
00000228: MSTORE
00000229: PUSH1 0x20
0000022b: ADD
0000022c: PUSH1 0x40
0000022e: MLOAD
0000022f: DUP1
00000230: SWAP2
00000231: SUB
00000232: SWAP1
00000233: RETURN
00000234: JUMPDEST
00000235: CALLVALUE
00000236: ISZERO
00000237: PUSH2 0x023f
0000023a: JUMPI
0000023b: PUSH1 0x00
0000023d: DUP1
0000023e: REVERT
0000023f: JUMPDEST
00000240: PUSH2 0x012b
00000243: PUSH2 0x0650
00000246: JUMP
00000247: JUMPDEST
00000248: PUSH1 0x40
0000024a: MLOAD
0000024b: SWAP1
0000024c: DUP2
0000024d: MSTORE
0000024e: PUSH1 0x20
00000250: ADD
00000251: PUSH1 0x40
00000253: MLOAD
00000254: DUP1
00000255: SWAP2
00000256: SUB
00000257: SWAP1
00000258: RETURN
00000259: JUMPDEST
0000025a: CALLVALUE
0000025b: ISZERO
0000025c: PUSH2 0x0264
0000025f: JUMPI
00000260: PUSH1 0x00
00000262: DUP1
00000263: REVERT
00000264: JUMPDEST
00000265: PUSH2 0x01f1
00000268: PUSH2 0x0694
0000026b: JUMP
0000026c: JUMPDEST
0000026d: PUSH1 0x40
0000026f: MLOAD
00000270: PUSH1 0x01
00000272: PUSH1 0xa0
00000274: PUSH1 0x02
00000276: EXP
00000277: SUB
00000278: SWAP1
00000279: SWAP2
0000027a: AND
0000027b: DUP2
0000027c: MSTORE
0000027d: PUSH1 0x20
0000027f: ADD
00000280: PUSH1 0x40
00000282: MLOAD
00000283: DUP1
00000284: SWAP2
00000285: SUB
00000286: SWAP1
00000287: RETURN
00000288: JUMPDEST
00000289: CALLVALUE
0000028a: ISZERO
0000028b: PUSH2 0x0293
0000028e: JUMPI
0000028f: PUSH1 0x00
00000291: DUP1
00000292: REVERT
00000293: JUMPDEST
00000294: PUSH2 0x00ca
00000297: PUSH1 0x01
00000299: PUSH1 0xa0
0000029b: PUSH1 0x02
0000029d: EXP
0000029e: SUB
0000029f: PUSH1 0x04
000002a1: CALLDATALOAD
000002a2: AND
000002a3: PUSH2 0x06a3
000002a6: JUMP
000002a7: JUMPDEST
000002a8: STOP
000002a9: JUMPDEST
000002aa: CALLVALUE
000002ab: ISZERO
000002ac: PUSH2 0x02b4
000002af: JUMPI
000002b0: PUSH1 0x00
000002b2: DUP1
000002b3: REVERT
000002b4: JUMPDEST
000002b5: PUSH2 0x02bc
000002b8: PUSH2 0x06eb
000002bb: JUMP
000002bc: JUMPDEST
000002bd: PUSH1 0x40
000002bf: MLOAD
000002c0: PUSH1 0x20
000002c2: DUP1
000002c3: DUP3
000002c4: MSTORE
000002c5: DUP2
000002c6: SWAP1
000002c7: DUP2
000002c8: ADD
000002c9: DUP4
000002ca: DUP2
000002cb: DUP2
000002cc: MLOAD
000002cd: DUP2
000002ce: MSTORE
000002cf: PUSH1 0x20
000002d1: ADD
000002d2: SWAP2
000002d3: POP
000002d4: DUP1
000002d5: MLOAD
000002d6: SWAP1
000002d7: PUSH1 0x20
000002d9: ADD
000002da: SWAP1
000002db: DUP1
000002dc: DUP4
000002dd: DUP4
000002de: PUSH1 0x00
000002e0: JUMPDEST
000002e1: DUP4
000002e2: DUP2
000002e3: LT
000002e4: ISZERO
000002e5: PUSH2 0x02f9
000002e8: JUMPI
000002e9: DUP1
000002ea: DUP3
000002eb: ADD
000002ec: MLOAD
000002ed: DUP2
000002ee: DUP5
000002ef: ADD
000002f0: MSTORE
000002f1: JUMPDEST
000002f2: PUSH1 0x20
000002f4: ADD
000002f5: PUSH2 0x02e0
000002f8: JUMP
000002f9: JUMPDEST
000002fa: POP
000002fb: POP
000002fc: POP
000002fd: POP
000002fe: SWAP1
000002ff: POP
00000300: SWAP1
00000301: DUP2
00000302: ADD
00000303: SWAP1
00000304: PUSH1 0x1f
00000306: AND
00000307: DUP1
00000308: ISZERO
00000309: PUSH2 0x0326
0000030c: JUMPI
0000030d: DUP1
0000030e: DUP3
0000030f: SUB
00000310: DUP1
00000311: MLOAD
00000312: PUSH1 0x01
00000314: DUP4
00000315: PUSH1 0x20
00000317: SUB
00000318: PUSH2 0x0100
0000031b: EXP
0000031c: SUB
0000031d: NOT
0000031e: AND
0000031f: DUP2
00000320: MSTORE
00000321: PUSH1 0x20
00000323: ADD
00000324: SWAP2
00000325: POP
00000326: JUMPDEST
00000327: POP
00000328: SWAP3
00000329: POP
0000032a: POP
0000032b: POP
0000032c: PUSH1 0x40
0000032e: MLOAD
0000032f: DUP1
00000330: SWAP2
00000331: SUB
00000332: SWAP1
00000333: RETURN
00000334: JUMPDEST
00000335: PUSH1 0x03
00000337: SLOAD
00000338: PUSH1 0x00
0000033a: SWAP1
0000033b: PUSH1 0x01
0000033d: PUSH1 0xa0
0000033f: PUSH1 0x02
00000341: EXP
00000342: SUB
00000343: AND
00000344: ISZERO
00000345: DUP1
00000346: ISZERO
00000347: SWAP1
00000348: PUSH2 0x03cc
0000034b: JUMPI
0000034c: POP
0000034d: PUSH1 0x03
0000034f: SLOAD
00000350: PUSH1 0x00
00000352: SWAP1
00000353: PUSH1 0x01
00000355: PUSH1 0xa0
00000357: PUSH1 0x02
00000359: EXP
0000035a: SUB
0000035b: AND
0000035c: PUSH4 0x5bfdb8b2
00000361: DUP3
00000362: PUSH1 0x40
00000364: MLOAD
00000365: PUSH1 0x20
00000367: ADD
00000368: MSTORE
00000369: PUSH1 0x40
0000036b: MLOAD
0000036c: DUP2
0000036d: PUSH4 0xffffffff
00000372: AND
00000373: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
00000391: MUL
00000392: DUP2
00000393: MSTORE
00000394: PUSH1 0x04
00000396: ADD
00000397: PUSH1 0x20
00000399: PUSH1 0x40
0000039b: MLOAD
0000039c: DUP1
0000039d: DUP4
0000039e: SUB
0000039f: DUP2
000003a0: PUSH1 0x00
000003a2: DUP8
000003a3: DUP1
000003a4: EXTCODESIZE
000003a5: ISZERO
000003a6: ISZERO
000003a7: PUSH2 0x03af
000003aa: JUMPI
000003ab: PUSH1 0x00
000003ad: DUP1
000003ae: REVERT
000003af: JUMPDEST
000003b0: PUSH2 0x02c6
000003b3: GAS
000003b4: SUB
000003b5: CALL
000003b6: ISZERO
000003b7: ISZERO
000003b8: PUSH2 0x03c0
000003bb: JUMPI
000003bc: PUSH1 0x00
000003be: DUP1
000003bf: REVERT
000003c0: JUMPDEST
000003c1: POP
000003c2: POP
000003c3: POP
000003c4: PUSH1 0x40
000003c6: MLOAD
000003c7: DUP1
000003c8: MLOAD
000003c9: SWAP1
000003ca: POP
000003cb: GT
000003cc: JUMPDEST
000003cd: ISZERO
000003ce: PUSH2 0x03d6
000003d1: JUMPI
000003d2: PUSH1 0x00
000003d4: DUP1
000003d5: REVERT
000003d6: JUMPDEST
000003d7: PUSH1 0x00
000003d9: PUSH1 0x02
000003db: SLOAD
000003dc: GT
000003dd: ISZERO
000003de: PUSH2 0x03e6
000003e1: JUMPI
000003e2: PUSH1 0x00
000003e4: DUP1
000003e5: REVERT
000003e6: JUMPDEST
000003e7: DUP2
000003e8: ISZERO
000003e9: DUP1
000003ea: PUSH2 0x03f2
000003ed: JUMPI
000003ee: POP
000003ef: TIMESTAMP
000003f0: DUP3
000003f1: GT
000003f2: JUMPDEST
000003f3: ISZERO
000003f4: PUSH2 0x03fc
000003f7: JUMPI
000003f8: PUSH1 0x00
000003fa: DUP1
000003fb: REVERT
000003fc: JUMPDEST
000003fd: PUSH1 0x01
000003ff: DUP1
00000400: SLOAD
00000401: DUP1
00000402: DUP3
00000403: ADD
00000404: PUSH2 0x040d
00000407: DUP4
00000408: DUP3
00000409: PUSH2 0x0722
0000040c: JUMP
0000040d: JUMPDEST
0000040e: SWAP2
0000040f: PUSH1 0x00
00000411: MSTORE
00000412: PUSH1 0x20
00000414: PUSH1 0x00
00000416: KECCAK256
00000417: SWAP1
00000418: PUSH1 0x03
0000041a: MUL
0000041b: ADD
0000041c: PUSH1 0x00
0000041e: JUMPDEST
0000041f: PUSH1 0x60
00000421: PUSH1 0x40
00000423: MLOAD
00000424: SWAP1
00000425: DUP2
00000426: ADD
00000427: PUSH1 0x40
00000429: SWAP1
0000042a: DUP2
0000042b: MSTORE
0000042c: PUSH1 0x01
0000042e: PUSH1 0xa0
00000430: PUSH1 0x02
00000432: EXP
00000433: SUB
00000434: DUP10
00000435: AND
00000436: DUP3
00000437: MSTORE
00000438: PUSH1 0x20
0000043a: DUP3
0000043b: ADD
0000043c: DUP9
0000043d: SWAP1
0000043e: MSTORE
0000043f: DUP2
00000440: ADD
00000441: DUP7
00000442: SWAP1
00000443: MSTORE
00000444: SWAP2
00000445: SWAP1
00000446: POP
00000447: DUP2
00000448: MLOAD
00000449: DUP2
0000044a: SLOAD
0000044b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000460: NOT
00000461: AND
00000462: PUSH1 0x01
00000464: PUSH1 0xa0
00000466: PUSH1 0x02
00000468: EXP
00000469: SUB
0000046a: SWAP2
0000046b: SWAP1
0000046c: SWAP2
0000046d: AND
0000046e: OR
0000046f: DUP2
00000470: SSTORE
00000471: PUSH1 0x20
00000473: DUP3
00000474: ADD
00000475: MLOAD
00000476: DUP2
00000477: PUSH1 0x01
00000479: ADD
0000047a: SSTORE
0000047b: PUSH1 0x40
0000047d: DUP3
0000047e: ADD
0000047f: MLOAD
00000480: DUP2
00000481: PUSH1 0x02
00000483: ADD
00000484: SSTORE
00000485: POP
00000486: POP
00000487: POP
00000488: PUSH1 0x01
0000048a: SWAP1
0000048b: POP
0000048c: JUMPDEST
0000048d: JUMPDEST
0000048e: JUMPDEST
0000048f: SWAP4
00000490: SWAP3
00000491: POP
00000492: POP
00000493: POP
00000494: JUMP
00000495: JUMPDEST
00000496: PUSH1 0x01
00000498: DUP1
00000499: SLOAD
0000049a: DUP3
0000049b: SWAP1
0000049c: DUP2
0000049d: LT
0000049e: PUSH2 0x04a3
000004a1: JUMPI
000004a2: INVALID
000004a3: JUMPDEST
000004a4: SWAP1
000004a5: PUSH1 0x00
000004a7: MSTORE
000004a8: PUSH1 0x20
000004aa: PUSH1 0x00
000004ac: KECCAK256
000004ad: SWAP1
000004ae: PUSH1 0x03
000004b0: MUL
000004b1: ADD
000004b2: PUSH1 0x00
000004b4: JUMPDEST
000004b5: POP
000004b6: DUP1
000004b7: SLOAD
000004b8: PUSH1 0x01
000004ba: DUP3
000004bb: ADD
000004bc: SLOAD
000004bd: PUSH1 0x02
000004bf: SWAP1
000004c0: SWAP3
000004c1: ADD
000004c2: SLOAD
000004c3: PUSH1 0x01
000004c5: PUSH1 0xa0
000004c7: PUSH1 0x02
000004c9: EXP
000004ca: SUB
000004cb: SWAP1
000004cc: SWAP2
000004cd: AND
000004ce: SWAP3
000004cf: POP
000004d0: DUP4
000004d1: JUMP
000004d2: JUMPDEST
000004d3: PUSH1 0x02
000004d5: SLOAD
000004d6: DUP2
000004d7: JUMP
000004d8: JUMPDEST
000004d9: PUSH1 0x00
000004db: SLOAD
000004dc: CALLER
000004dd: PUSH1 0x01
000004df: PUSH1 0xa0
000004e1: PUSH1 0x02
000004e3: EXP
000004e4: SUB
000004e5: SWAP1
000004e6: DUP2
000004e7: AND
000004e8: SWAP2
000004e9: AND
000004ea: EQ
000004eb: PUSH2 0x04f3
000004ee: JUMPI
000004ef: PUSH1 0x00
000004f1: DUP1
000004f2: REVERT
000004f3: JUMPDEST
000004f4: PUSH1 0x00
000004f6: SLOAD
000004f7: PUSH1 0x01
000004f9: PUSH1 0xa0
000004fb: PUSH1 0x02
000004fd: EXP
000004fe: SUB
000004ff: AND
00000500: DUP2
00000501: ISZERO
00000502: PUSH2 0x08fc
00000505: MUL
00000506: DUP3
00000507: PUSH1 0x40
00000509: MLOAD
0000050a: PUSH1 0x00
0000050c: PUSH1 0x40
0000050e: MLOAD
0000050f: DUP1
00000510: DUP4
00000511: SUB
00000512: DUP2
00000513: DUP6
00000514: DUP9
00000515: DUP9
00000516: CALL
00000517: SWAP4
00000518: POP
00000519: POP
0000051a: POP
0000051b: POP
0000051c: ISZERO
0000051d: ISZERO
0000051e: PUSH2 0x00c6
00000521: JUMPI
00000522: PUSH1 0x00
00000524: DUP1
00000525: REVERT
00000526: JUMPDEST
00000527: JUMPDEST
00000528: JUMPDEST
00000529: POP
0000052a: JUMP
0000052b: JUMPDEST
0000052c: PUSH1 0x01
0000052e: SLOAD
0000052f: JUMPDEST
00000530: SWAP1
00000531: JUMP
00000532: JUMPDEST
00000533: PUSH1 0x00
00000535: DUP1
00000536: JUMPDEST
00000537: PUSH1 0x01
00000539: SLOAD
0000053a: DUP2
0000053b: LT
0000053c: ISZERO
0000053d: PUSH2 0x05ad
00000540: JUMPI
00000541: DUP3
00000542: PUSH1 0x01
00000544: PUSH1 0xa0
00000546: PUSH1 0x02
00000548: EXP
00000549: SUB
0000054a: AND
0000054b: PUSH1 0x01
0000054d: DUP3
0000054e: DUP2
0000054f: SLOAD
00000550: DUP2
00000551: LT
00000552: ISZERO
00000553: ISZERO
00000554: PUSH2 0x0559
00000557: JUMPI
00000558: INVALID
00000559: JUMPDEST
0000055a: SWAP1
0000055b: PUSH1 0x00
0000055d: MSTORE
0000055e: PUSH1 0x20
00000560: PUSH1 0x00
00000562: KECCAK256
00000563: SWAP1
00000564: PUSH1 0x03
00000566: MUL
00000567: ADD
00000568: PUSH1 0x00
0000056a: JUMPDEST
0000056b: POP
0000056c: SLOAD
0000056d: PUSH1 0x01
0000056f: PUSH1 0xa0
00000571: PUSH1 0x02
00000573: EXP
00000574: SUB
00000575: AND
00000576: EQ
00000577: ISZERO
00000578: PUSH2 0x05a4
0000057b: JUMPI
0000057c: PUSH1 0x01
0000057e: DUP1
0000057f: SLOAD
00000580: DUP3
00000581: SWAP1
00000582: DUP2
00000583: LT
00000584: PUSH2 0x0589
00000587: JUMPI
00000588: INVALID
00000589: JUMPDEST
0000058a: SWAP1
0000058b: PUSH1 0x00
0000058d: MSTORE
0000058e: PUSH1 0x20
00000590: PUSH1 0x00
00000592: KECCAK256
00000593: SWAP1
00000594: PUSH1 0x03
00000596: MUL
00000597: ADD
00000598: PUSH1 0x00
0000059a: JUMPDEST
0000059b: POP
0000059c: PUSH1 0x01
0000059e: ADD
0000059f: SLOAD
000005a0: DUP3
000005a1: ADD
000005a2: SWAP2
000005a3: POP
000005a4: JUMPDEST
000005a5: JUMPDEST
000005a6: PUSH1 0x01
000005a8: ADD
000005a9: PUSH2 0x0536
000005ac: JUMP
000005ad: JUMPDEST
000005ae: JUMPDEST
000005af: POP
000005b0: SWAP2
000005b1: SWAP1
000005b2: POP
000005b3: JUMP
000005b4: JUMPDEST
000005b5: PUSH1 0x00
000005b7: DUP1
000005b8: SLOAD
000005b9: CALLER
000005ba: PUSH1 0x01
000005bc: PUSH1 0xa0
000005be: PUSH1 0x02
000005c0: EXP
000005c1: SUB
000005c2: SWAP1
000005c3: DUP2
000005c4: AND
000005c5: SWAP2
000005c6: AND
000005c7: EQ
000005c8: PUSH2 0x05d0
000005cb: JUMPI
000005cc: PUSH1 0x00
000005ce: DUP1
000005cf: REVERT
000005d0: JUMPDEST
000005d1: PUSH1 0x03
000005d3: SLOAD
000005d4: PUSH1 0x01
000005d6: PUSH1 0xa0
000005d8: PUSH1 0x02
000005da: EXP
000005db: SUB
000005dc: AND
000005dd: ISZERO
000005de: ISZERO
000005df: PUSH2 0x0612
000005e2: JUMPI
000005e3: POP
000005e4: PUSH1 0x03
000005e6: DUP1
000005e7: SLOAD
000005e8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005fd: NOT
000005fe: AND
000005ff: PUSH1 0x01
00000601: PUSH1 0xa0
00000603: PUSH1 0x02
00000605: EXP
00000606: SUB
00000607: DUP4
00000608: AND
00000609: OR
0000060a: SWAP1
0000060b: SSTORE
0000060c: PUSH1 0x01
0000060e: PUSH2 0x0616
00000611: JUMP
00000612: JUMPDEST
00000613: POP
00000614: PUSH1 0x00
00000616: JUMPDEST
00000617: JUMPDEST
00000618: SWAP2
00000619: SWAP1
0000061a: POP
0000061b: JUMP
0000061c: JUMPDEST
0000061d: PUSH1 0x00
0000061f: SLOAD
00000620: PUSH1 0x01
00000622: PUSH1 0xa0
00000624: PUSH1 0x02
00000626: EXP
00000627: SUB
00000628: AND
00000629: DUP2
0000062a: JUMP
0000062b: JUMPDEST
0000062c: PUSH1 0x00
0000062e: DUP1
0000062f: SLOAD
00000630: CALLER
00000631: PUSH1 0x01
00000633: PUSH1 0xa0
00000635: PUSH1 0x02
00000637: EXP
00000638: SUB
00000639: SWAP1
0000063a: DUP2
0000063b: AND
0000063c: SWAP2
0000063d: AND
0000063e: EQ
0000063f: PUSH2 0x0647
00000642: JUMPI
00000643: PUSH1 0x00
00000645: DUP1
00000646: REVERT
00000647: JUMPDEST
00000648: TIMESTAMP
00000649: PUSH1 0x02
0000064b: SSTORE
0000064c: JUMPDEST
0000064d: JUMPDEST
0000064e: SWAP1
0000064f: JUMP
00000650: JUMPDEST
00000651: PUSH1 0x00
00000653: DUP1
00000654: JUMPDEST
00000655: PUSH1 0x01
00000657: SLOAD
00000658: DUP2
00000659: LT
0000065a: ISZERO
0000065b: PUSH2 0x068f
0000065e: JUMPI
0000065f: PUSH1 0x01
00000661: DUP1
00000662: SLOAD
00000663: DUP3
00000664: SWAP1
00000665: DUP2
00000666: LT
00000667: PUSH2 0x066c
0000066a: JUMPI
0000066b: INVALID
0000066c: JUMPDEST
0000066d: SWAP1
0000066e: PUSH1 0x00
00000670: MSTORE
00000671: PUSH1 0x20
00000673: PUSH1 0x00
00000675: KECCAK256
00000676: SWAP1
00000677: PUSH1 0x03
00000679: MUL
0000067a: ADD
0000067b: PUSH1 0x00
0000067d: JUMPDEST
0000067e: POP
0000067f: PUSH1 0x01
00000681: ADD
00000682: SLOAD
00000683: DUP3
00000684: ADD
00000685: SWAP2
00000686: POP
00000687: JUMPDEST
00000688: PUSH1 0x01
0000068a: ADD
0000068b: PUSH2 0x0654
0000068e: JUMP
0000068f: JUMPDEST
00000690: JUMPDEST
00000691: POP
00000692: SWAP1
00000693: JUMP
00000694: JUMPDEST
00000695: PUSH1 0x03
00000697: SLOAD
00000698: PUSH1 0x01
0000069a: PUSH1 0xa0
0000069c: PUSH1 0x02
0000069e: EXP
0000069f: SUB
000006a0: AND
000006a1: DUP2
000006a2: JUMP
000006a3: JUMPDEST
000006a4: PUSH1 0x00
000006a6: SLOAD
000006a7: CALLER
000006a8: PUSH1 0x01
000006aa: PUSH1 0xa0
000006ac: PUSH1 0x02
000006ae: EXP
000006af: SUB
000006b0: SWAP1
000006b1: DUP2
000006b2: AND
000006b3: SWAP2
000006b4: AND
000006b5: EQ
000006b6: PUSH2 0x06be
000006b9: JUMPI
000006ba: PUSH1 0x00
000006bc: DUP1
000006bd: REVERT
000006be: JUMPDEST
000006bf: PUSH1 0x00
000006c1: DUP1
000006c2: SLOAD
000006c3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006d8: NOT
000006d9: AND
000006da: PUSH1 0x01
000006dc: PUSH1 0xa0
000006de: PUSH1 0x02
000006e0: EXP
000006e1: SUB
000006e2: DUP4
000006e3: AND
000006e4: OR
000006e5: SWAP1
000006e6: SSTORE
000006e7: JUMPDEST
000006e8: JUMPDEST
000006e9: POP
000006ea: JUMP
000006eb: JUMPDEST
000006ec: PUSH1 0x40
000006ee: DUP1
000006ef: MLOAD
000006f0: SWAP1
000006f1: DUP2
000006f2: ADD
000006f3: PUSH1 0x40
000006f5: MSTORE
000006f6: PUSH1 0x03
000006f8: DUP2
000006f9: MSTORE
000006fa: PUSH32 0x4554480000000000000000000000000000000000000000000000000000000000
0000071b: PUSH1 0x20
0000071d: DUP3
0000071e: ADD
0000071f: MSTORE
00000720: DUP2
00000721: JUMP
00000722: JUMPDEST
00000723: DUP2
00000724: SLOAD
00000725: DUP2
00000726: DUP4
00000727: SSTORE
00000728: DUP2
00000729: DUP2
0000072a: ISZERO
0000072b: GT
0000072c: PUSH2 0x074e
0000072f: JUMPI
00000730: PUSH1 0x03
00000732: MUL
00000733: DUP2
00000734: PUSH1 0x03
00000736: MUL
00000737: DUP4
00000738: PUSH1 0x00
0000073a: MSTORE
0000073b: PUSH1 0x20
0000073d: PUSH1 0x00
0000073f: KECCAK256
00000740: SWAP2
00000741: DUP3
00000742: ADD
00000743: SWAP2
00000744: ADD
00000745: PUSH2 0x074e
00000748: SWAP2
00000749: SWAP1
0000074a: PUSH2 0x0754
0000074d: JUMP
0000074e: JUMPDEST
0000074f: JUMPDEST
00000750: POP
00000751: POP
00000752: POP
00000753: JUMP
00000754: JUMPDEST
00000755: PUSH2 0x052f
00000758: SWAP2
00000759: SWAP1
0000075a: JUMPDEST
0000075b: DUP1
0000075c: DUP3
0000075d: GT
0000075e: ISZERO
0000075f: PUSH2 0x068f
00000762: JUMPI
00000763: DUP1
00000764: SLOAD
00000765: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000077a: NOT
0000077b: AND
0000077c: DUP2
0000077d: SSTORE
0000077e: PUSH1 0x00
00000780: PUSH1 0x01
00000782: DUP3
00000783: ADD
00000784: DUP2
00000785: SWAP1
00000786: SSTORE
00000787: PUSH1 0x02
00000789: DUP3
0000078a: ADD
0000078b: SSTORE
0000078c: PUSH1 0x03
0000078e: ADD
0000078f: PUSH2 0x075a
00000792: JUMP
00000793: JUMPDEST
00000794: POP
00000795: SWAP1
00000796: JUMP
00000797: JUMPDEST
00000798: SWAP1
00000799: JUMP
0000079a: STOP
0000079b: LOG1
0000079c: PUSH6 0x627a7a723058
000007a3: KECCAK256
000007a4: SWAP6
000007a5: COINBASE
000007a6: UNKNOWN(0xBA)
000007a7: SWAP10
000007a8: UNKNOWN(0xCB)
000007a9: UNKNOWN(0xC4)
000007aa: UNKNOWN(0xD0)
000007ab: JUMP
000007ac: UNKNOWN(0xFC)
000007ad: MSTORE8
000007ae: LOG3
000007af: EXTCODECOPY
000007b0: DELEGATECALL
000007b1: UNKNOWN(0xB3)
000007b2: UNKNOWN(0xF9)
000007b3: GASLIMIT
000007b4: PUSH15 0x0177bee6f19bd725fa06727d185414
000007c4: STOP
000007c5: UNKNOWN(0x29)

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0xfddf27c9ac47c2d2a2557c2ee52fab478beeb5a60584fde0ca1a7a4ef6873a1c
validation_json 
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 144,
    "trace_id": "0xfddf27c9ac47c2d2a2557c2ee52fab478beeb5a60584fde0ca1a7a4ef6873a1c",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2288fad6",
            "selector": "0x2288fad6",
            "calldata_variants": [
                "0x2288fad6",
                "0x2288fad60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x25bae118",
            "selector": "0x25bae118",
            "calldata_variants": [
                "0x25bae118",
                "0x25bae1180000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2e1a7d4d",
            "selector": "0x2e1a7d4d",
            "calldata_variants": [
                "0x2e1a7d4d",
                "0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3f5174df",
            "selector": "0x3f5174df",
            "calldata_variants": [
                "0x3f5174df",
                "0x3f5174df0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5aa3d2b0",
            "selector": "0x5aa3d2b0",
            "calldata_variants": [
                "0x5aa3d2b0",
                "0x5aa3d2b00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x66d38203",
            "selector": "0x66d38203",
            "calldata_variants": [
                "0x66d38203",
                "0x66d382030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xae4cc757",
            "selector": "0xae4cc757",
            "calldata_variants": [
                "0xae4cc757",
                "0xae4cc7570000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 1968,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xbafef20a5d5b626c06fd3ac773ccd778b4322e79429bd0cf6483b86378401c0f
call_targets: 0xd111bd7ad596ed9c78ad8fdecc6e23aca63b4383
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xbafef20a5d5b626c06fd3ac773ccd778b4322e79429bd0cf6483b86378401c0f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xd111bd7ad596ed9c78ad8fdecc6e23aca63b4383"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2288fad6",
            "selector": "0x2288fad6",
            "calldata_variants": [
                "0x2288fad6",
                "0x2288fad60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x25bae118",
            "selector": "0x25bae118",
            "calldata_variants": [
                "0x25bae118",
                "0x25bae1180000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2e1a7d4d",
            "selector": "0x2e1a7d4d",
            "calldata_variants": [
                "0x2e1a7d4d",
                "0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3f5174df",
            "selector": "0x3f5174df",
            "calldata_variants": [
                "0x3f5174df",
                "0x3f5174df0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5aa3d2b0",
            "selector": "0x5aa3d2b0",
            "calldata_variants": [
                "0x5aa3d2b0",
                "0x5aa3d2b00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x66d38203",
            "selector": "0x66d38203",
            "calldata_variants": [
                "0x66d38203",
                "0x66d382030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xae4cc757",
            "selector": "0xae4cc757",
            "calldata_variants": [
                "0xae4cc757",
                "0xae4cc7570000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 949,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1302,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xbafef20a5d5b626c06fd3ac773ccd778b4322e79429bd0cf6483b86378401c0f
call_targets: 0xd111bd7ad596ed9c78ad8fdecc6e23aca63b4383
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xbafef20a5d5b626c06fd3ac773ccd778b4322e79429bd0cf6483b86378401c0f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xd111bd7ad596ed9c78ad8fdecc6e23aca63b4383"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2288fad6",
            "selector": "0x2288fad6",
            "calldata_variants": [
                "0x2288fad6",
                "0x2288fad60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x25bae118",
            "selector": "0x25bae118",
            "calldata_variants": [
                "0x25bae118",
                "0x25bae1180000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2e1a7d4d",
            "selector": "0x2e1a7d4d",
            "calldata_variants": [
                "0x2e1a7d4d",
                "0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3f5174df",
            "selector": "0x3f5174df",
            "calldata_variants": [
                "0x3f5174df",
                "0x3f5174df0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5aa3d2b0",
            "selector": "0x5aa3d2b0",
            "calldata_variants": [
                "0x5aa3d2b0",
                "0x5aa3d2b00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x66d38203",
            "selector": "0x66d38203",
            "calldata_variants": [
                "0x66d38203",
                "0x66d382030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xae4cc757",
            "selector": "0xae4cc757",
            "calldata_variants": [
                "0xae4cc757",
                "0xae4cc7570000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 949,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1302,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}