Analysis Run

019b477e-a9ec-7058-b504-23a67c02c1c2

complete

Chain ID

1

Address

0x13d671fb0981da44b7812ca58ee2a2bd14a910de

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
20727	artifact.fetch	complete	1 / 3	3 months ago
20728	tool.cast_disasm	complete	1 / 3	3 months ago
64526	analysis.bundle	complete	1 / 3	1 week ago
64527	capability.graph	complete	1 / 3	1 week ago
64528	detector.run	complete	1 / 3	1 week ago
64529	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

1

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

5

EXT*/BALANCE

3

Total opcodes

1362

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00bf
0000000a: JUMPI
0000000b: PUSH4 0xffffffff
00000010: PUSH1 0xe0
00000012: PUSH1 0x02
00000014: EXP
00000015: PUSH1 0x00
00000017: CALLDATALOAD
00000018: DIV
00000019: AND
0000001a: PUSH4 0x01cb3b20
0000001f: DUP2
00000020: EQ
00000021: PUSH2 0x0258
00000024: JUMPI
00000025: DUP1
00000026: PUSH4 0x38981b75
0000002b: EQ
0000002c: PUSH2 0x026a
0000002f: JUMPI
00000030: DUP1
00000031: PUSH4 0x38af3eed
00000036: EQ
00000037: PUSH2 0x028c
0000003a: JUMPI
0000003b: DUP1
0000003c: PUSH4 0x4188d8a5
00000041: EQ
00000042: PUSH2 0x02b8
00000045: JUMPI
00000046: DUP1
00000047: PUSH4 0x41ba2b9a
0000004c: EQ
0000004d: PUSH2 0x02da
00000050: JUMPI
00000051: DUP1
00000052: PUSH4 0x444a77e0
00000057: EQ
00000058: PUSH2 0x02fc
0000005b: JUMPI
0000005c: DUP1
0000005d: PUSH4 0x4dfc384d
00000062: EQ
00000063: PUSH2 0x031e
00000066: JUMPI
00000067: DUP1
00000068: PUSH4 0x6e66f6e9
0000006d: EQ
0000006e: PUSH2 0x0340
00000071: JUMPI
00000072: DUP1
00000073: PUSH4 0x70a08231
00000078: EQ
00000079: PUSH2 0x036c
0000007c: JUMPI
0000007d: DUP1
0000007e: PUSH4 0x72729ff2
00000083: EQ
00000084: PUSH2 0x039a
00000087: JUMPI
00000088: DUP1
00000089: PUSH4 0x8da5cb5b
0000008e: EQ
0000008f: PUSH2 0x03bc
00000092: JUMPI
00000093: DUP1
00000094: PUSH4 0xe6323d33
00000099: EQ
0000009a: PUSH2 0x03e8
0000009d: JUMPI
0000009e: DUP1
0000009f: PUSH4 0xf0f24ecb
000000a4: EQ
000000a5: PUSH2 0x040a
000000a8: JUMPI
000000a9: DUP1
000000aa: PUSH4 0xf9d32918
000000af: EQ
000000b0: PUSH2 0x042c
000000b3: JUMPI
000000b4: DUP1
000000b5: PUSH4 0xfd6b7ef8
000000ba: EQ
000000bb: PUSH2 0x044e
000000be: JUMPI
000000bf: JUMPDEST
000000c0: PUSH2 0x0256
000000c3: JUMPDEST
000000c4: PUSH1 0x00
000000c6: PUSH1 0x00
000000c8: PUSH1 0x00
000000ca: PUSH1 0x12
000000cc: PUSH1 0x01
000000ce: SWAP1
000000cf: SLOAD
000000d0: SWAP1
000000d1: PUSH2 0x0100
000000d4: EXP
000000d5: SWAP1
000000d6: DIV
000000d7: PUSH1 0xff
000000d9: AND
000000da: DUP1
000000db: PUSH2 0x00e5
000000de: JUMPI
000000df: POP
000000e0: PUSH1 0x05
000000e2: SLOAD
000000e3: TIMESTAMP
000000e4: GT
000000e5: JUMPDEST
000000e6: ISZERO
000000e7: PUSH2 0x00f0
000000ea: JUMPI
000000eb: PUSH1 0x00
000000ed: PUSH1 0x00
000000ef: REVERT
000000f0: JUMPDEST
000000f1: CALLVALUE
000000f2: SWAP3
000000f3: POP
000000f4: ADDRESS
000000f5: PUSH1 0x01
000000f7: PUSH1 0xa0
000000f9: PUSH1 0x02
000000fb: EXP
000000fc: SUB
000000fd: AND
000000fe: PUSH4 0xf0f24ecb
00000103: PUSH1 0x00
00000105: PUSH1 0x40
00000107: MLOAD
00000108: PUSH1 0x20
0000010a: ADD
0000010b: MSTORE
0000010c: PUSH1 0x40
0000010e: MLOAD
0000010f: DUP2
00000110: PUSH4 0xffffffff
00000115: AND
00000116: PUSH1 0xe0
00000118: PUSH1 0x02
0000011a: EXP
0000011b: MUL
0000011c: DUP2
0000011d: MSTORE
0000011e: PUSH1 0x04
00000120: ADD
00000121: DUP1
00000122: SWAP1
00000123: POP
00000124: PUSH1 0x20
00000126: PUSH1 0x40
00000128: MLOAD
00000129: DUP1
0000012a: DUP4
0000012b: SUB
0000012c: DUP2
0000012d: PUSH1 0x00
0000012f: DUP8
00000130: DUP1
00000131: EXTCODESIZE
00000132: ISZERO
00000133: ISZERO
00000134: PUSH2 0x0139
00000137: JUMPI
00000138: INVALID
00000139: JUMPDEST
0000013a: PUSH2 0x02c6
0000013d: GAS
0000013e: SUB
0000013f: CALL
00000140: ISZERO
00000141: ISZERO
00000142: PUSH2 0x0147
00000145: JUMPI
00000146: INVALID
00000147: JUMPDEST
00000148: POP
00000149: POP
0000014a: PUSH1 0x40
0000014c: MLOAD
0000014d: MLOAD
0000014e: SWAP3
0000014f: POP
00000150: PUSH8 0x0de0b6b3a7640000
00000159: SWAP1
0000015a: POP
0000015b: DUP4
0000015c: DUP4
0000015d: MUL
0000015e: JUMPDEST
0000015f: PUSH1 0x01
00000161: PUSH1 0xa0
00000163: PUSH1 0x02
00000165: EXP
00000166: SUB
00000167: CALLER
00000168: DUP2
00000169: AND
0000016a: PUSH1 0x00
0000016c: DUP2
0000016d: DUP2
0000016e: MSTORE
0000016f: PUSH1 0x11
00000171: PUSH1 0x20
00000173: MSTORE
00000174: PUSH1 0x40
00000176: DUP1
00000177: DUP3
00000178: KECCAK256
00000179: DUP1
0000017a: SLOAD
0000017b: DUP11
0000017c: ADD
0000017d: SWAP1
0000017e: SSTORE
0000017f: PUSH1 0x0d
00000181: DUP1
00000182: SLOAD
00000183: SWAP7
00000184: SWAP1
00000185: SWAP6
00000186: DIV
00000187: SWAP6
00000188: DUP7
00000189: ADD
0000018a: SWAP1
0000018b: SWAP5
0000018c: SSTORE
0000018d: PUSH1 0x0e
0000018f: DUP1
00000190: SLOAD
00000191: DUP10
00000192: ADD
00000193: SWAP1
00000194: SSTORE
00000195: PUSH1 0x0f
00000197: SLOAD
00000198: DUP5
00000199: MLOAD
0000019a: PUSH32 0xa9059cbb00000000000000000000000000000000000000000000000000000000
000001bb: DUP2
000001bc: MSTORE
000001bd: PUSH1 0x04
000001bf: DUP2
000001c0: ADD
000001c1: SWAP4
000001c2: SWAP1
000001c3: SWAP4
000001c4: MSTORE
000001c5: PUSH1 0x24
000001c7: DUP4
000001c8: ADD
000001c9: DUP7
000001ca: SWAP1
000001cb: MSTORE
000001cc: SWAP4
000001cd: MLOAD
000001ce: SWAP5
000001cf: SWAP6
000001d0: POP
000001d1: SWAP3
000001d2: SWAP1
000001d3: SWAP2
000001d4: AND
000001d5: SWAP3
000001d6: PUSH4 0xa9059cbb
000001db: SWAP3
000001dc: PUSH1 0x44
000001de: DUP1
000001df: DUP5
000001e0: ADD
000001e1: SWAP4
000001e2: SWAP2
000001e3: SWAP3
000001e4: SWAP2
000001e5: DUP3
000001e6: SWAP1
000001e7: SUB
000001e8: ADD
000001e9: DUP2
000001ea: DUP4
000001eb: DUP8
000001ec: DUP1
000001ed: EXTCODESIZE
000001ee: ISZERO
000001ef: ISZERO
000001f0: PUSH2 0x01f5
000001f3: JUMPI
000001f4: INVALID
000001f5: JUMPDEST
000001f6: PUSH2 0x02c6
000001f9: GAS
000001fa: SUB
000001fb: CALL
000001fc: ISZERO
000001fd: ISZERO
000001fe: PUSH2 0x0203
00000201: JUMPI
00000202: INVALID
00000203: JUMPDEST
00000204: POP
00000205: POP
00000206: PUSH1 0x40
00000208: DUP1
00000209: MLOAD
0000020a: PUSH1 0x01
0000020c: PUSH1 0xa0
0000020e: PUSH1 0x02
00000210: EXP
00000211: SUB
00000212: CALLER
00000213: AND
00000214: DUP2
00000215: MSTORE
00000216: PUSH1 0x20
00000218: DUP2
00000219: ADD
0000021a: DUP7
0000021b: SWAP1
0000021c: MSTORE
0000021d: PUSH1 0x01
0000021f: DUP2
00000220: DUP4
00000221: ADD
00000222: MSTORE
00000223: SWAP1
00000224: MLOAD
00000225: PUSH32 0xe842aea7a5f1b01049d752008c53c52890b1a6daf660cf39e8eec506112bbdf6
00000246: SWAP3
00000247: POP
00000248: SWAP1
00000249: DUP2
0000024a: SWAP1
0000024b: SUB
0000024c: PUSH1 0x60
0000024e: ADD
0000024f: SWAP1
00000250: LOG1
00000251: JUMPDEST
00000252: POP
00000253: POP
00000254: POP
00000255: JUMP
00000256: JUMPDEST
00000257: STOP
00000258: JUMPDEST
00000259: CALLVALUE
0000025a: ISZERO
0000025b: PUSH2 0x0260
0000025e: JUMPI
0000025f: INVALID
00000260: JUMPDEST
00000261: PUSH2 0x0256
00000264: PUSH2 0x0460
00000267: JUMP
00000268: JUMPDEST
00000269: STOP
0000026a: JUMPDEST
0000026b: CALLVALUE
0000026c: ISZERO
0000026d: PUSH2 0x0272
00000270: JUMPI
00000271: INVALID
00000272: JUMPDEST
00000273: PUSH2 0x027a
00000276: PUSH2 0x04e1
00000279: JUMP
0000027a: JUMPDEST
0000027b: PUSH1 0x40
0000027d: DUP1
0000027e: MLOAD
0000027f: SWAP2
00000280: DUP3
00000281: MSTORE
00000282: MLOAD
00000283: SWAP1
00000284: DUP2
00000285: SWAP1
00000286: SUB
00000287: PUSH1 0x20
00000289: ADD
0000028a: SWAP1
0000028b: RETURN
0000028c: JUMPDEST
0000028d: CALLVALUE
0000028e: ISZERO
0000028f: PUSH2 0x0294
00000292: JUMPI
00000293: INVALID
00000294: JUMPDEST
00000295: PUSH2 0x029c
00000298: PUSH2 0x04e7
0000029b: JUMP
0000029c: JUMPDEST
0000029d: PUSH1 0x40
0000029f: DUP1
000002a0: MLOAD
000002a1: PUSH1 0x01
000002a3: PUSH1 0xa0
000002a5: PUSH1 0x02
000002a7: EXP
000002a8: SUB
000002a9: SWAP1
000002aa: SWAP3
000002ab: AND
000002ac: DUP3
000002ad: MSTORE
000002ae: MLOAD
000002af: SWAP1
000002b0: DUP2
000002b1: SWAP1
000002b2: SUB
000002b3: PUSH1 0x20
000002b5: ADD
000002b6: SWAP1
000002b7: RETURN
000002b8: JUMPDEST
000002b9: CALLVALUE
000002ba: ISZERO
000002bb: PUSH2 0x02c0
000002be: JUMPI
000002bf: INVALID
000002c0: JUMPDEST
000002c1: PUSH2 0x027a
000002c4: PUSH2 0x04f6
000002c7: JUMP
000002c8: JUMPDEST
000002c9: PUSH1 0x40
000002cb: DUP1
000002cc: MLOAD
000002cd: SWAP2
000002ce: DUP3
000002cf: MSTORE
000002d0: MLOAD
000002d1: SWAP1
000002d2: DUP2
000002d3: SWAP1
000002d4: SUB
000002d5: PUSH1 0x20
000002d7: ADD
000002d8: SWAP1
000002d9: RETURN
000002da: JUMPDEST
000002db: CALLVALUE
000002dc: ISZERO
000002dd: PUSH2 0x02e2
000002e0: JUMPI
000002e1: INVALID
000002e2: JUMPDEST
000002e3: PUSH2 0x027a
000002e6: PUSH2 0x04fc
000002e9: JUMP
000002ea: JUMPDEST
000002eb: PUSH1 0x40
000002ed: DUP1
000002ee: MLOAD
000002ef: SWAP2
000002f0: DUP3
000002f1: MSTORE
000002f2: MLOAD
000002f3: SWAP1
000002f4: DUP2
000002f5: SWAP1
000002f6: SUB
000002f7: PUSH1 0x20
000002f9: ADD
000002fa: SWAP1
000002fb: RETURN
000002fc: JUMPDEST
000002fd: CALLVALUE
000002fe: ISZERO
000002ff: PUSH2 0x0304
00000302: JUMPI
00000303: INVALID
00000304: JUMPDEST
00000305: PUSH2 0x027a
00000308: PUSH2 0x0502
0000030b: JUMP
0000030c: JUMPDEST
0000030d: PUSH1 0x40
0000030f: DUP1
00000310: MLOAD
00000311: SWAP2
00000312: DUP3
00000313: MSTORE
00000314: MLOAD
00000315: SWAP1
00000316: DUP2
00000317: SWAP1
00000318: SUB
00000319: PUSH1 0x20
0000031b: ADD
0000031c: SWAP1
0000031d: RETURN
0000031e: JUMPDEST
0000031f: CALLVALUE
00000320: ISZERO
00000321: PUSH2 0x0326
00000324: JUMPI
00000325: INVALID
00000326: JUMPDEST
00000327: PUSH2 0x027a
0000032a: PUSH2 0x0508
0000032d: JUMP
0000032e: JUMPDEST
0000032f: PUSH1 0x40
00000331: DUP1
00000332: MLOAD
00000333: SWAP2
00000334: DUP3
00000335: MSTORE
00000336: MLOAD
00000337: SWAP1
00000338: DUP2
00000339: SWAP1
0000033a: SUB
0000033b: PUSH1 0x20
0000033d: ADD
0000033e: SWAP1
0000033f: RETURN
00000340: JUMPDEST
00000341: CALLVALUE
00000342: ISZERO
00000343: PUSH2 0x0348
00000346: JUMPI
00000347: INVALID
00000348: JUMPDEST
00000349: PUSH2 0x029c
0000034c: PUSH2 0x050e
0000034f: JUMP
00000350: JUMPDEST
00000351: PUSH1 0x40
00000353: DUP1
00000354: MLOAD
00000355: PUSH1 0x01
00000357: PUSH1 0xa0
00000359: PUSH1 0x02
0000035b: EXP
0000035c: SUB
0000035d: SWAP1
0000035e: SWAP3
0000035f: AND
00000360: DUP3
00000361: MSTORE
00000362: MLOAD
00000363: SWAP1
00000364: DUP2
00000365: SWAP1
00000366: SUB
00000367: PUSH1 0x20
00000369: ADD
0000036a: SWAP1
0000036b: RETURN
0000036c: JUMPDEST
0000036d: CALLVALUE
0000036e: ISZERO
0000036f: PUSH2 0x0374
00000372: JUMPI
00000373: INVALID
00000374: JUMPDEST
00000375: PUSH2 0x027a
00000378: PUSH1 0x01
0000037a: PUSH1 0xa0
0000037c: PUSH1 0x02
0000037e: EXP
0000037f: SUB
00000380: PUSH1 0x04
00000382: CALLDATALOAD
00000383: AND
00000384: PUSH2 0x051d
00000387: JUMP
00000388: JUMPDEST
00000389: PUSH1 0x40
0000038b: DUP1
0000038c: MLOAD
0000038d: SWAP2
0000038e: DUP3
0000038f: MSTORE
00000390: MLOAD
00000391: SWAP1
00000392: DUP2
00000393: SWAP1
00000394: SUB
00000395: PUSH1 0x20
00000397: ADD
00000398: SWAP1
00000399: RETURN
0000039a: JUMPDEST
0000039b: CALLVALUE
0000039c: ISZERO
0000039d: PUSH2 0x03a2
000003a0: JUMPI
000003a1: INVALID
000003a2: JUMPDEST
000003a3: PUSH2 0x027a
000003a6: PUSH2 0x052f
000003a9: JUMP
000003aa: JUMPDEST
000003ab: PUSH1 0x40
000003ad: DUP1
000003ae: MLOAD
000003af: SWAP2
000003b0: DUP3
000003b1: MSTORE
000003b2: MLOAD
000003b3: SWAP1
000003b4: DUP2
000003b5: SWAP1
000003b6: SUB
000003b7: PUSH1 0x20
000003b9: ADD
000003ba: SWAP1
000003bb: RETURN
000003bc: JUMPDEST
000003bd: CALLVALUE
000003be: ISZERO
000003bf: PUSH2 0x03c4
000003c2: JUMPI
000003c3: INVALID
000003c4: JUMPDEST
000003c5: PUSH2 0x029c
000003c8: PUSH2 0x0535
000003cb: JUMP
000003cc: JUMPDEST
000003cd: PUSH1 0x40
000003cf: DUP1
000003d0: MLOAD
000003d1: PUSH1 0x01
000003d3: PUSH1 0xa0
000003d5: PUSH1 0x02
000003d7: EXP
000003d8: SUB
000003d9: SWAP1
000003da: SWAP3
000003db: AND
000003dc: DUP3
000003dd: MSTORE
000003de: MLOAD
000003df: SWAP1
000003e0: DUP2
000003e1: SWAP1
000003e2: SUB
000003e3: PUSH1 0x20
000003e5: ADD
000003e6: SWAP1
000003e7: RETURN
000003e8: JUMPDEST
000003e9: CALLVALUE
000003ea: ISZERO
000003eb: PUSH2 0x03f0
000003ee: JUMPI
000003ef: INVALID
000003f0: JUMPDEST
000003f1: PUSH2 0x027a
000003f4: PUSH2 0x0544
000003f7: JUMP
000003f8: JUMPDEST
000003f9: PUSH1 0x40
000003fb: DUP1
000003fc: MLOAD
000003fd: SWAP2
000003fe: DUP3
000003ff: MSTORE
00000400: MLOAD
00000401: SWAP1
00000402: DUP2
00000403: SWAP1
00000404: SUB
00000405: PUSH1 0x20
00000407: ADD
00000408: SWAP1
00000409: RETURN
0000040a: JUMPDEST
0000040b: CALLVALUE
0000040c: ISZERO
0000040d: PUSH2 0x0412
00000410: JUMPI
00000411: INVALID
00000412: JUMPDEST
00000413: PUSH2 0x027a
00000416: PUSH2 0x054a
00000419: JUMP
0000041a: JUMPDEST
0000041b: PUSH1 0x40
0000041d: DUP1
0000041e: MLOAD
0000041f: SWAP2
00000420: DUP3
00000421: MSTORE
00000422: MLOAD
00000423: SWAP1
00000424: DUP2
00000425: SWAP1
00000426: SUB
00000427: PUSH1 0x20
00000429: ADD
0000042a: SWAP1
0000042b: RETURN
0000042c: JUMPDEST
0000042d: CALLVALUE
0000042e: ISZERO
0000042f: PUSH2 0x0434
00000432: JUMPI
00000433: INVALID
00000434: JUMPDEST
00000435: PUSH2 0x027a
00000438: PUSH2 0x05e6
0000043b: JUMP
0000043c: JUMPDEST
0000043d: PUSH1 0x40
0000043f: DUP1
00000440: MLOAD
00000441: SWAP2
00000442: DUP3
00000443: MSTORE
00000444: MLOAD
00000445: SWAP1
00000446: DUP2
00000447: SWAP1
00000448: SUB
00000449: PUSH1 0x20
0000044b: ADD
0000044c: SWAP1
0000044d: RETURN
0000044e: JUMPDEST
0000044f: CALLVALUE
00000450: ISZERO
00000451: PUSH2 0x0456
00000454: JUMPI
00000455: INVALID
00000456: JUMPDEST
00000457: PUSH2 0x0256
0000045a: PUSH2 0x05ec
0000045d: JUMP
0000045e: JUMPDEST
0000045f: STOP
00000460: JUMPDEST
00000461: PUSH1 0x05
00000463: SLOAD
00000464: TIMESTAMP
00000465: LT
00000466: PUSH2 0x04dd
00000469: JUMPI
0000046a: PUSH1 0x0b
0000046c: SLOAD
0000046d: PUSH1 0x0d
0000046f: SLOAD
00000470: LT
00000471: PUSH2 0x04cd
00000474: JUMPI
00000475: PUSH1 0x12
00000477: DUP1
00000478: SLOAD
00000479: PUSH1 0xff
0000047b: NOT
0000047c: AND
0000047d: PUSH1 0x01
0000047f: OR
00000480: SWAP1
00000481: SSTORE
00000482: PUSH1 0x10
00000484: SLOAD
00000485: PUSH1 0x0e
00000487: SLOAD
00000488: PUSH1 0x40
0000048a: DUP1
0000048b: MLOAD
0000048c: PUSH1 0x01
0000048e: PUSH1 0xa0
00000490: PUSH1 0x02
00000492: EXP
00000493: SUB
00000494: SWAP1
00000495: SWAP4
00000496: AND
00000497: DUP4
00000498: MSTORE
00000499: PUSH1 0x20
0000049b: DUP4
0000049c: ADD
0000049d: SWAP2
0000049e: SWAP1
0000049f: SWAP2
000004a0: MSTORE
000004a1: DUP1
000004a2: MLOAD
000004a3: PUSH32 0xec3f991caf7857d61663fd1bba1739e04abd4781238508cde554bb849d790c85
000004c4: SWAP3
000004c5: DUP2
000004c6: SWAP1
000004c7: SUB
000004c8: SWAP1
000004c9: SWAP2
000004ca: ADD
000004cb: SWAP1
000004cc: LOG1
000004cd: JUMPDEST
000004ce: PUSH1 0x12
000004d0: DUP1
000004d1: SLOAD
000004d2: PUSH2 0xff00
000004d5: NOT
000004d6: AND
000004d7: PUSH2 0x0100
000004da: OR
000004db: SWAP1
000004dc: SSTORE
000004dd: JUMPDEST
000004de: JUMPDEST
000004df: JUMPDEST
000004e0: JUMP
000004e1: JUMPDEST
000004e2: PUSH1 0x0a
000004e4: SLOAD
000004e5: DUP2
000004e6: JUMP
000004e7: JUMPDEST
000004e8: PUSH1 0x10
000004ea: SLOAD
000004eb: PUSH1 0x01
000004ed: PUSH1 0xa0
000004ef: PUSH1 0x02
000004f1: EXP
000004f2: SUB
000004f3: AND
000004f4: DUP2
000004f5: JUMP
000004f6: JUMPDEST
000004f7: PUSH1 0x09
000004f9: SLOAD
000004fa: DUP2
000004fb: JUMP
000004fc: JUMPDEST
000004fd: PUSH1 0x0c
000004ff: SLOAD
00000500: DUP2
00000501: JUMP
00000502: JUMPDEST
00000503: PUSH1 0x08
00000505: SLOAD
00000506: DUP2
00000507: JUMP
00000508: JUMPDEST
00000509: PUSH1 0x07
0000050b: SLOAD
0000050c: DUP2
0000050d: JUMP
0000050e: JUMPDEST
0000050f: PUSH1 0x0f
00000511: SLOAD
00000512: PUSH1 0x01
00000514: PUSH1 0xa0
00000516: PUSH1 0x02
00000518: EXP
00000519: SUB
0000051a: AND
0000051b: DUP2
0000051c: JUMP
0000051d: JUMPDEST
0000051e: PUSH1 0x11
00000520: PUSH1 0x20
00000522: MSTORE
00000523: PUSH1 0x00
00000525: SWAP1
00000526: DUP2
00000527: MSTORE
00000528: PUSH1 0x40
0000052a: SWAP1
0000052b: KECCAK256
0000052c: SLOAD
0000052d: DUP2
0000052e: JUMP
0000052f: JUMPDEST
00000530: PUSH1 0x0e
00000532: SLOAD
00000533: DUP2
00000534: JUMP
00000535: JUMPDEST
00000536: PUSH1 0x00
00000538: SLOAD
00000539: PUSH1 0x01
0000053b: PUSH1 0xa0
0000053d: PUSH1 0x02
0000053f: EXP
00000540: SUB
00000541: AND
00000542: DUP2
00000543: JUMP
00000544: JUMPDEST
00000545: PUSH1 0x0b
00000547: SLOAD
00000548: DUP2
00000549: JUMP
0000054a: JUMPDEST
0000054b: PUSH1 0x00
0000054d: PUSH1 0x01
0000054f: SLOAD
00000550: TIMESTAMP
00000551: LT
00000552: ISZERO
00000553: PUSH2 0x055c
00000556: JUMPI
00000557: PUSH1 0x00
00000559: PUSH1 0x00
0000055b: REVERT
0000055c: JUMPDEST
0000055d: PUSH1 0x01
0000055f: SLOAD
00000560: TIMESTAMP
00000561: LT
00000562: ISZERO
00000563: DUP1
00000564: ISZERO
00000565: PUSH2 0x056f
00000568: JUMPI
00000569: POP
0000056a: PUSH1 0x02
0000056c: SLOAD
0000056d: TIMESTAMP
0000056e: LT
0000056f: JUMPDEST
00000570: ISZERO
00000571: PUSH2 0x058e
00000574: JUMPI
00000575: PUSH1 0x0c
00000577: SLOAD
00000578: PUSH1 0x0d
0000057a: SLOAD
0000057b: LT
0000057c: PUSH2 0x0585
0000057f: JUMPI
00000580: PUSH1 0x00
00000582: PUSH1 0x00
00000584: REVERT
00000585: JUMPDEST
00000586: POP
00000587: PUSH1 0x07
00000589: SLOAD
0000058a: PUSH2 0x05de
0000058d: JUMP
0000058e: JUMPDEST
0000058f: PUSH1 0x02
00000591: SLOAD
00000592: TIMESTAMP
00000593: LT
00000594: ISZERO
00000595: DUP1
00000596: ISZERO
00000597: PUSH2 0x05a1
0000059a: JUMPI
0000059b: POP
0000059c: PUSH1 0x03
0000059e: SLOAD
0000059f: TIMESTAMP
000005a0: LT
000005a1: JUMPDEST
000005a2: ISZERO
000005a3: PUSH2 0x05af
000005a6: JUMPI
000005a7: POP
000005a8: PUSH1 0x08
000005aa: SLOAD
000005ab: PUSH2 0x05de
000005ae: JUMP
000005af: JUMPDEST
000005b0: PUSH1 0x03
000005b2: SLOAD
000005b3: TIMESTAMP
000005b4: LT
000005b5: ISZERO
000005b6: DUP1
000005b7: ISZERO
000005b8: PUSH2 0x05c2
000005bb: JUMPI
000005bc: POP
000005bd: PUSH1 0x04
000005bf: SLOAD
000005c0: TIMESTAMP
000005c1: LT
000005c2: JUMPDEST
000005c3: ISZERO
000005c4: PUSH2 0x05d0
000005c7: JUMPI
000005c8: POP
000005c9: PUSH1 0x09
000005cb: SLOAD
000005cc: PUSH2 0x05de
000005cf: JUMP
000005d0: JUMPDEST
000005d1: PUSH1 0x04
000005d3: SLOAD
000005d4: TIMESTAMP
000005d5: LT
000005d6: PUSH2 0x05de
000005d9: JUMPI
000005da: POP
000005db: PUSH1 0x0a
000005dd: SLOAD
000005de: JUMPDEST
000005df: JUMPDEST
000005e0: JUMPDEST
000005e1: JUMPDEST
000005e2: JUMPDEST
000005e3: JUMPDEST
000005e4: SWAP1
000005e5: JUMP
000005e6: JUMPDEST
000005e7: PUSH1 0x0d
000005e9: SLOAD
000005ea: DUP2
000005eb: JUMP
000005ec: JUMPDEST
000005ed: PUSH1 0x05
000005ef: SLOAD
000005f0: PUSH1 0x00
000005f2: SWAP1
000005f3: TIMESTAMP
000005f4: LT
000005f5: PUSH2 0x07c5
000005f8: JUMPI
000005f9: ADDRESS
000005fa: PUSH1 0x01
000005fc: PUSH1 0xa0
000005fe: PUSH1 0x02
00000600: EXP
00000601: SUB
00000602: AND
00000603: PUSH4 0x01cb3b20
00000608: PUSH1 0x40
0000060a: MLOAD
0000060b: DUP2
0000060c: PUSH4 0xffffffff
00000611: AND
00000612: PUSH1 0xe0
00000614: PUSH1 0x02
00000616: EXP
00000617: MUL
00000618: DUP2
00000619: MSTORE
0000061a: PUSH1 0x04
0000061c: ADD
0000061d: DUP1
0000061e: SWAP1
0000061f: POP
00000620: PUSH1 0x00
00000622: PUSH1 0x40
00000624: MLOAD
00000625: DUP1
00000626: DUP4
00000627: SUB
00000628: DUP2
00000629: PUSH1 0x00
0000062b: DUP8
0000062c: DUP1
0000062d: EXTCODESIZE
0000062e: ISZERO
0000062f: ISZERO
00000630: PUSH2 0x0635
00000633: JUMPI
00000634: INVALID
00000635: JUMPDEST
00000636: PUSH2 0x02c6
00000639: GAS
0000063a: SUB
0000063b: CALL
0000063c: ISZERO
0000063d: ISZERO
0000063e: PUSH2 0x0643
00000641: JUMPI
00000642: INVALID
00000643: JUMPDEST
00000644: POP
00000645: POP
00000646: PUSH1 0x12
00000648: SLOAD
00000649: PUSH1 0xff
0000064b: AND
0000064c: ISZERO
0000064d: ISZERO
0000064e: SWAP1
0000064f: POP
00000650: PUSH2 0x070e
00000653: JUMPI
00000654: POP
00000655: PUSH1 0x01
00000657: PUSH1 0xa0
00000659: PUSH1 0x02
0000065b: EXP
0000065c: SUB
0000065d: CALLER
0000065e: AND
0000065f: PUSH1 0x00
00000661: SWAP1
00000662: DUP2
00000663: MSTORE
00000664: PUSH1 0x11
00000666: PUSH1 0x20
00000668: MSTORE
00000669: PUSH1 0x40
0000066b: DUP2
0000066c: KECCAK256
0000066d: DUP1
0000066e: SLOAD
0000066f: SWAP1
00000670: DUP3
00000671: SWAP1
00000672: SSTORE
00000673: SWAP1
00000674: DUP2
00000675: GT
00000676: ISZERO
00000677: PUSH2 0x070e
0000067a: JUMPI
0000067b: PUSH1 0x40
0000067d: MLOAD
0000067e: PUSH1 0x01
00000680: PUSH1 0xa0
00000682: PUSH1 0x02
00000684: EXP
00000685: SUB
00000686: CALLER
00000687: AND
00000688: SWAP1
00000689: DUP3
0000068a: ISZERO
0000068b: PUSH2 0x08fc
0000068e: MUL
0000068f: SWAP1
00000690: DUP4
00000691: SWAP1
00000692: PUSH1 0x00
00000694: DUP2
00000695: DUP2
00000696: DUP2
00000697: DUP6
00000698: DUP9
00000699: DUP9
0000069a: CALL
0000069b: SWAP4
0000069c: POP
0000069d: POP
0000069e: POP
0000069f: POP
000006a0: ISZERO
000006a1: PUSH2 0x06f2
000006a4: JUMPI
000006a5: PUSH1 0x40
000006a7: DUP1
000006a8: MLOAD
000006a9: PUSH1 0x01
000006ab: PUSH1 0xa0
000006ad: PUSH1 0x02
000006af: EXP
000006b0: SUB
000006b1: CALLER
000006b2: AND
000006b3: DUP2
000006b4: MSTORE
000006b5: PUSH1 0x20
000006b7: DUP2
000006b8: ADD
000006b9: DUP4
000006ba: SWAP1
000006bb: MSTORE
000006bc: PUSH1 0x00
000006be: DUP2
000006bf: DUP4
000006c0: ADD
000006c1: MSTORE
000006c2: SWAP1
000006c3: MLOAD
000006c4: PUSH32 0xe842aea7a5f1b01049d752008c53c52890b1a6daf660cf39e8eec506112bbdf6
000006e5: SWAP2
000006e6: DUP2
000006e7: SWAP1
000006e8: SUB
000006e9: PUSH1 0x60
000006eb: ADD
000006ec: SWAP1
000006ed: LOG1
000006ee: PUSH2 0x070e
000006f1: JUMP
000006f2: JUMPDEST
000006f3: PUSH1 0x01
000006f5: PUSH1 0xa0
000006f7: PUSH1 0x02
000006f9: EXP
000006fa: SUB
000006fb: CALLER
000006fc: AND
000006fd: PUSH1 0x00
000006ff: SWAP1
00000700: DUP2
00000701: MSTORE
00000702: PUSH1 0x11
00000704: PUSH1 0x20
00000706: MSTORE
00000707: PUSH1 0x40
00000709: SWAP1
0000070a: KECCAK256
0000070b: DUP2
0000070c: SWAP1
0000070d: SSTORE
0000070e: JUMPDEST
0000070f: JUMPDEST
00000710: JUMPDEST
00000711: PUSH1 0x12
00000713: SLOAD
00000714: PUSH1 0xff
00000716: AND
00000717: DUP1
00000718: ISZERO
00000719: PUSH2 0x0730
0000071c: JUMPI
0000071d: POP
0000071e: PUSH1 0x00
00000720: SLOAD
00000721: CALLER
00000722: PUSH1 0x01
00000724: PUSH1 0xa0
00000726: PUSH1 0x02
00000728: EXP
00000729: SUB
0000072a: SWAP1
0000072b: DUP2
0000072c: AND
0000072d: SWAP2
0000072e: AND
0000072f: EQ
00000730: JUMPDEST
00000731: ISZERO
00000732: PUSH2 0x07c5
00000735: JUMPI
00000736: PUSH1 0x10
00000738: SLOAD
00000739: PUSH1 0x0e
0000073b: SLOAD
0000073c: PUSH1 0x40
0000073e: MLOAD
0000073f: PUSH1 0x01
00000741: PUSH1 0xa0
00000743: PUSH1 0x02
00000745: EXP
00000746: SUB
00000747: SWAP1
00000748: SWAP3
00000749: AND
0000074a: SWAP2
0000074b: DUP2
0000074c: ISZERO
0000074d: PUSH2 0x08fc
00000750: MUL
00000751: SWAP2
00000752: SWAP1
00000753: PUSH1 0x00
00000755: DUP2
00000756: DUP2
00000757: DUP2
00000758: DUP6
00000759: DUP9
0000075a: DUP9
0000075b: CALL
0000075c: SWAP4
0000075d: POP
0000075e: POP
0000075f: POP
00000760: POP
00000761: ISZERO
00000762: PUSH2 0x07ba
00000765: JUMPI
00000766: PUSH1 0x10
00000768: SLOAD
00000769: PUSH1 0x0e
0000076b: SLOAD
0000076c: PUSH1 0x40
0000076e: DUP1
0000076f: MLOAD
00000770: PUSH1 0x01
00000772: PUSH1 0xa0
00000774: PUSH1 0x02
00000776: EXP
00000777: SUB
00000778: SWAP1
00000779: SWAP4
0000077a: AND
0000077b: DUP4
0000077c: MSTORE
0000077d: PUSH1 0x20
0000077f: DUP4
00000780: ADD
00000781: SWAP2
00000782: SWAP1
00000783: SWAP2
00000784: MSTORE
00000785: PUSH1 0x00
00000787: DUP3
00000788: DUP3
00000789: ADD
0000078a: MSTORE
0000078b: MLOAD
0000078c: PUSH32 0xe842aea7a5f1b01049d752008c53c52890b1a6daf660cf39e8eec506112bbdf6
000007ad: SWAP2
000007ae: DUP2
000007af: SWAP1
000007b0: SUB
000007b1: PUSH1 0x60
000007b3: ADD
000007b4: SWAP1
000007b5: LOG1
000007b6: PUSH2 0x07c5
000007b9: JUMP
000007ba: JUMPDEST
000007bb: PUSH1 0x12
000007bd: DUP1
000007be: SLOAD
000007bf: PUSH1 0xff
000007c1: NOT
000007c2: AND
000007c3: SWAP1
000007c4: SSTORE
000007c5: JUMPDEST
000007c6: JUMPDEST
000007c7: JUMPDEST
000007c8: JUMPDEST
000007c9: JUMPDEST
000007ca: POP
000007cb: JUMP
000007cc: STOP
000007cd: LOG1
000007ce: PUSH6 0x627a7a723058
000007d5: KECCAK256
000007d6: ADD
000007d7: UNKNOWN(0xAB)
000007d8: REVERT
000007d9: CALLER
000007da: UNKNOWN(0xDC)
000007db: DUP16
000007dc: UNKNOWN(0x4E)
000007dd: EQ
000007de: UNKNOWN(0x0F)
000007df: MSIZE
000007e0: UNKNOWN(0x0C)
000007e1: CALLVALUE
000007e2: SWAP12
000007e3: PUSH3 0x4108fc
000007e7: DELEGATECALL
000007e8: UNKNOWN(0xD1)
000007e9: BLOBHASH
000007ea: SWAP13
000007eb: UNKNOWN(0xE6)
000007ec: DUP5
000007ed: DUP16
000007ee: PUSH7 0x1b1b06502129c5
000007f6: STOP
000007f7: UNKNOWN(0x29)

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0x519b32d86374c2dcbad8b0720c1ce6fb977faa3e1aeccd95a70023b80b78c01b validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "unknown", "attempts": 180, "trace_id": "0x519b32d86374c2dcbad8b0720c1ce6fb977faa3e1aeccd95a70023b80b78c01b", "confirmed": false, "trace_mode": "callTracer", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x01cb3b20", "selector": "0x01cb3b20", "calldata_variants": [ "0x01cb3b20", "0x01cb3b200000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38981b75", "selector": "0x38981b75", "calldata_variants": [ "0x38981b75", "0x38981b750000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38af3eed", "selector": "0x38af3eed", "calldata_variants": [ "0x38af3eed", "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4188d8a5", "selector": "0x4188d8a5", "calldata_variants": [ "0x4188d8a5", "0x4188d8a50000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x41ba2b9a", "selector": "0x41ba2b9a", "calldata_variants": [ "0x41ba2b9a", "0x41ba2b9a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x444a77e0", "selector": "0x444a77e0", "calldata_variants": [ "0x444a77e0", "0x444a77e00000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4dfc384d", "selector": "0x4dfc384d", "calldata_variants": [ "0x4dfc384d", "0x4dfc384d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x6e66f6e9", "selector": "0x6e66f6e9", "calldata_variants": [ "0x6e66f6e9", "0x6e66f6e90000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 2023, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 1, "untrusted_delegatecall_count": 1 }
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0xa2543bd83494ca155f1493766fba14d62e234f078f7f5d56960bf054fa9435e3 call_targets: 0x13d671fb0981da44b7812ca58ee2a2bd14a910de target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xa2543bd83494ca155f1493766fba14d62e234f078f7f5d56960bf054fa9435e3", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x13d671fb0981da44b7812ca58ee2a2bd14a910de" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x01cb3b20", "selector": "0x01cb3b20", "calldata_variants": [ "0x01cb3b20", "0x01cb3b200000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38981b75", "selector": "0x38981b75", "calldata_variants": [ "0x38981b75", "0x38981b750000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38af3eed", "selector": "0x38af3eed", "calldata_variants": [ "0x38af3eed", "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4188d8a5", "selector": "0x4188d8a5", "calldata_variants": [ "0x4188d8a5", "0x4188d8a50000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x41ba2b9a", "selector": "0x41ba2b9a", "calldata_variants": [ "0x41ba2b9a", "0x41ba2b9a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x444a77e0", "selector": "0x444a77e0", "calldata_variants": [ "0x444a77e0", "0x444a77e00000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4dfc384d", "selector": "0x4dfc384d", "calldata_variants": [ "0x4dfc384d", "0x4dfc384d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x6e66f6e9", "selector": "0x6e66f6e9", "calldata_variants": [ "0x6e66f6e9", "0x6e66f6e90000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 319, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 507, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1595, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 5, "guards_detected": [], "untrusted_call_count": 5 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0xa2543bd83494ca155f1493766fba14d62e234f078f7f5d56960bf054fa9435e3 call_targets: 0x13d671fb0981da44b7812ca58ee2a2bd14a910de target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xa2543bd83494ca155f1493766fba14d62e234f078f7f5d56960bf054fa9435e3", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x13d671fb0981da44b7812ca58ee2a2bd14a910de" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x01cb3b20", "selector": "0x01cb3b20", "calldata_variants": [ "0x01cb3b20", "0x01cb3b200000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38981b75", "selector": "0x38981b75", "calldata_variants": [ "0x38981b75", "0x38981b750000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38af3eed", "selector": "0x38af3eed", "calldata_variants": [ "0x38af3eed", "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4188d8a5", "selector": "0x4188d8a5", "calldata_variants": [ "0x4188d8a5", "0x4188d8a50000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x41ba2b9a", "selector": "0x41ba2b9a", "calldata_variants": [ "0x41ba2b9a", "0x41ba2b9a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x444a77e0", "selector": "0x444a77e0", "calldata_variants": [ "0x444a77e0", "0x444a77e00000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4dfc384d", "selector": "0x4dfc384d", "calldata_variants": [ "0x4dfc384d", "0x4dfc384d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x6e66f6e9", "selector": "0x6e66f6e9", "calldata_variants": [ "0x6e66f6e9", "0x6e66f6e90000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 319, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 507, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1595, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 5, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

critical

upgradeability

detector

Untrusted DELEGATECALL target reachable

70

no

view

trace_id: 0x519b32d86374c2dcbad8b0720c1ce6fb977faa3e1aeccd95a70023b80b78c01b

validation_json

{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 180,
    "trace_id": "0x519b32d86374c2dcbad8b0720c1ce6fb977faa3e1aeccd95a70023b80b78c01b",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x01cb3b20",
            "selector": "0x01cb3b20",
            "calldata_variants": [
                "0x01cb3b20",
                "0x01cb3b200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38981b75",
            "selector": "0x38981b75",
            "calldata_variants": [
                "0x38981b75",
                "0x38981b750000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38af3eed",
            "selector": "0x38af3eed",
            "calldata_variants": [
                "0x38af3eed",
                "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4188d8a5",
            "selector": "0x4188d8a5",
            "calldata_variants": [
                "0x4188d8a5",
                "0x4188d8a50000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41ba2b9a",
            "selector": "0x41ba2b9a",
            "calldata_variants": [
                "0x41ba2b9a",
                "0x41ba2b9a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x444a77e0",
            "selector": "0x444a77e0",
            "calldata_variants": [
                "0x444a77e0",
                "0x444a77e00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4dfc384d",
            "selector": "0x4dfc384d",
            "calldata_variants": [
                "0x4dfc384d",
                "0x4dfc384d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6e66f6e9",
            "selector": "0x6e66f6e9",
            "calldata_variants": [
                "0x6e66f6e9",
                "0x6e66f6e90000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 2023,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0xa2543bd83494ca155f1493766fba14d62e234f078f7f5d56960bf054fa9435e3

call_targets: 0x13d671fb0981da44b7812ca58ee2a2bd14a910de

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xa2543bd83494ca155f1493766fba14d62e234f078f7f5d56960bf054fa9435e3",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x13d671fb0981da44b7812ca58ee2a2bd14a910de"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x01cb3b20",
            "selector": "0x01cb3b20",
            "calldata_variants": [
                "0x01cb3b20",
                "0x01cb3b200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38981b75",
            "selector": "0x38981b75",
            "calldata_variants": [
                "0x38981b75",
                "0x38981b750000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38af3eed",
            "selector": "0x38af3eed",
            "calldata_variants": [
                "0x38af3eed",
                "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4188d8a5",
            "selector": "0x4188d8a5",
            "calldata_variants": [
                "0x4188d8a5",
                "0x4188d8a50000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41ba2b9a",
            "selector": "0x41ba2b9a",
            "calldata_variants": [
                "0x41ba2b9a",
                "0x41ba2b9a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x444a77e0",
            "selector": "0x444a77e0",
            "calldata_variants": [
                "0x444a77e0",
                "0x444a77e00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4dfc384d",
            "selector": "0x4dfc384d",
            "calldata_variants": [
                "0x4dfc384d",
                "0x4dfc384d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6e66f6e9",
            "selector": "0x6e66f6e9",
            "calldata_variants": [
                "0x6e66f6e9",
                "0x6e66f6e90000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 319,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 507,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1595,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 5,
    "guards_detected": [],
    "untrusted_call_count": 5
}

high

other

detector

ETH value transfer possible

55

no

view

trace_id: 0xa2543bd83494ca155f1493766fba14d62e234f078f7f5d56960bf054fa9435e3

call_targets: 0x13d671fb0981da44b7812ca58ee2a2bd14a910de

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xa2543bd83494ca155f1493766fba14d62e234f078f7f5d56960bf054fa9435e3",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x13d671fb0981da44b7812ca58ee2a2bd14a910de"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x01cb3b20",
            "selector": "0x01cb3b20",
            "calldata_variants": [
                "0x01cb3b20",
                "0x01cb3b200000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38981b75",
            "selector": "0x38981b75",
            "calldata_variants": [
                "0x38981b75",
                "0x38981b750000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38af3eed",
            "selector": "0x38af3eed",
            "calldata_variants": [
                "0x38af3eed",
                "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4188d8a5",
            "selector": "0x4188d8a5",
            "calldata_variants": [
                "0x4188d8a5",
                "0x4188d8a50000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41ba2b9a",
            "selector": "0x41ba2b9a",
            "calldata_variants": [
                "0x41ba2b9a",
                "0x41ba2b9a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x444a77e0",
            "selector": "0x444a77e0",
            "calldata_variants": [
                "0x444a77e0",
                "0x444a77e00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4dfc384d",
            "selector": "0x4dfc384d",
            "calldata_variants": [
                "0x4dfc384d",
                "0x4dfc384d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6e66f6e9",
            "selector": "0x6e66f6e9",
            "calldata_variants": [
                "0x6e66f6e9",
                "0x6e66f6e90000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 319,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 507,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1595,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 5,
    "guards_detected": []
}