019b477e-ab34-729f-aa36-83ffe5e66640
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 20973 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 20974 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 64494 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 64495 | capability.graph | complete | 1 / 3 | 1 week ago |
| 64496 | detector.run | complete | 1 / 3 | 1 week ago |
| 64497 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x003b 0000000a: JUMPI 0000000b: PUSH4 0xffffffff 00000010: PUSH1 0xe0 00000012: PUSH1 0x02 00000014: EXP 00000015: PUSH1 0x00 00000017: CALLDATALOAD 00000018: DIV 00000019: AND 0000001a: PUSH4 0x0d172a01 0000001f: DUP2 00000020: EQ 00000021: PUSH2 0x0089 00000024: JUMPI 00000025: DUP1 00000026: PUSH4 0x8da5cb5b 0000002b: EQ 0000002c: PUSH2 0x00b3 0000002f: JUMPI 00000030: DUP1 00000031: PUSH4 0x94081e21 00000036: EQ 00000037: PUSH2 0x00e2 0000003a: JUMPI 0000003b: JUMPDEST 0000003c: JUMPDEST 0000003d: PUSH1 0x00 0000003f: CALLVALUE 00000040: GT 00000041: PUSH2 0x0049 00000044: JUMPI 00000045: PUSH1 0x00 00000047: DUP1 00000048: REVERT 00000049: JUMPDEST 0000004a: CALLER 0000004b: PUSH1 0x01 0000004d: PUSH1 0xa0 0000004f: PUSH1 0x02 00000051: EXP 00000052: SUB 00000053: AND 00000054: PUSH32 0xa58b71ad2e6ce803dd1eec62e2f3717a164a8912ee33eb51a57a234ba56b5535 00000075: CALLVALUE 00000076: PUSH1 0x40 00000078: MLOAD 00000079: SWAP1 0000007a: DUP2 0000007b: MSTORE 0000007c: PUSH1 0x20 0000007e: ADD 0000007f: PUSH1 0x40 00000081: MLOAD 00000082: DUP1 00000083: SWAP2 00000084: SUB 00000085: SWAP1 00000086: LOG2 00000087: JUMPDEST 00000088: STOP 00000089: JUMPDEST 0000008a: CALLVALUE 0000008b: ISZERO 0000008c: PUSH2 0x0094 0000008f: JUMPI 00000090: PUSH1 0x00 00000092: DUP1 00000093: REVERT 00000094: JUMPDEST 00000095: PUSH2 0x0087 00000098: PUSH1 0x01 0000009a: PUSH1 0xa0 0000009c: PUSH1 0x02 0000009e: EXP 0000009f: SUB 000000a0: PUSH1 0x04 000000a2: CALLDATALOAD 000000a3: DUP2 000000a4: AND 000000a5: SWAP1 000000a6: PUSH1 0x24 000000a8: CALLDATALOAD 000000a9: AND 000000aa: PUSH1 0x44 000000ac: CALLDATALOAD 000000ad: PUSH2 0x0106 000000b0: JUMP 000000b1: JUMPDEST 000000b2: STOP 000000b3: JUMPDEST 000000b4: CALLVALUE 000000b5: ISZERO 000000b6: PUSH2 0x00be 000000b9: JUMPI 000000ba: PUSH1 0x00 000000bc: DUP1 000000bd: REVERT 000000be: JUMPDEST 000000bf: PUSH2 0x00c6 000000c2: PUSH2 0x0268 000000c5: JUMP 000000c6: JUMPDEST 000000c7: PUSH1 0x40 000000c9: MLOAD 000000ca: PUSH1 0x01 000000cc: PUSH1 0xa0 000000ce: PUSH1 0x02 000000d0: EXP 000000d1: SUB 000000d2: SWAP1 000000d3: SWAP2 000000d4: AND 000000d5: DUP2 000000d6: MSTORE 000000d7: PUSH1 0x20 000000d9: ADD 000000da: PUSH1 0x40 000000dc: MLOAD 000000dd: DUP1 000000de: SWAP2 000000df: SUB 000000e0: SWAP1 000000e1: RETURN 000000e2: JUMPDEST 000000e3: CALLVALUE 000000e4: ISZERO 000000e5: PUSH2 0x00ed 000000e8: JUMPI 000000e9: PUSH1 0x00 000000eb: DUP1 000000ec: REVERT 000000ed: JUMPDEST 000000ee: PUSH2 0x0087 000000f1: PUSH1 0x01 000000f3: PUSH1 0xa0 000000f5: PUSH1 0x02 000000f7: EXP 000000f8: SUB 000000f9: PUSH1 0x04 000000fb: CALLDATALOAD 000000fc: AND 000000fd: PUSH1 0x24 000000ff: CALLDATALOAD 00000100: PUSH2 0x0277 00000103: JUMP 00000104: JUMPDEST 00000105: STOP 00000106: JUMPDEST 00000107: PUSH1 0x00 00000109: DUP1 0000010a: SLOAD 0000010b: CALLER 0000010c: PUSH1 0x01 0000010e: PUSH1 0xa0 00000110: PUSH1 0x02 00000112: EXP 00000113: SUB 00000114: SWAP1 00000115: DUP2 00000116: AND 00000117: SWAP2 00000118: AND 00000119: EQ 0000011a: PUSH2 0x0122 0000011d: JUMPI 0000011e: PUSH1 0x00 00000120: DUP1 00000121: REVERT 00000122: JUMPDEST 00000123: PUSH1 0x01 00000125: PUSH1 0xa0 00000127: PUSH1 0x02 00000129: EXP 0000012a: SUB 0000012b: DUP5 0000012c: AND 0000012d: ISZERO 0000012e: ISZERO 0000012f: PUSH2 0x0134 00000132: JUMPI 00000133: INVALID 00000134: JUMPDEST 00000135: PUSH1 0x01 00000137: PUSH1 0xa0 00000139: PUSH1 0x02 0000013b: EXP 0000013c: SUB 0000013d: DUP4 0000013e: AND 0000013f: ISZERO 00000140: ISZERO 00000141: PUSH2 0x0146 00000144: JUMPI 00000145: INVALID 00000146: JUMPDEST 00000147: DUP4 00000148: PUSH1 0x01 0000014a: PUSH1 0xa0 0000014c: PUSH1 0x02 0000014e: EXP 0000014f: SUB 00000150: AND 00000151: PUSH4 0x70a08231 00000156: ADDRESS 00000157: PUSH1 0x00 00000159: PUSH1 0x40 0000015b: MLOAD 0000015c: PUSH1 0x20 0000015e: ADD 0000015f: MSTORE 00000160: PUSH1 0x40 00000162: MLOAD 00000163: PUSH1 0xe0 00000165: PUSH1 0x02 00000167: EXP 00000168: PUSH4 0xffffffff 0000016d: DUP5 0000016e: AND 0000016f: MUL 00000170: DUP2 00000171: MSTORE 00000172: PUSH1 0x01 00000174: PUSH1 0xa0 00000176: PUSH1 0x02 00000178: EXP 00000179: SUB 0000017a: SWAP1 0000017b: SWAP2 0000017c: AND 0000017d: PUSH1 0x04 0000017f: DUP3 00000180: ADD 00000181: MSTORE 00000182: PUSH1 0x24 00000184: ADD 00000185: PUSH1 0x20 00000187: PUSH1 0x40 00000189: MLOAD 0000018a: DUP1 0000018b: DUP4 0000018c: SUB 0000018d: DUP2 0000018e: PUSH1 0x00 00000190: DUP8 00000191: DUP1 00000192: EXTCODESIZE 00000193: ISZERO 00000194: ISZERO 00000195: PUSH2 0x019d 00000198: JUMPI 00000199: PUSH1 0x00 0000019b: DUP1 0000019c: REVERT 0000019d: JUMPDEST 0000019e: PUSH2 0x02c6 000001a1: GAS 000001a2: SUB 000001a3: CALL 000001a4: ISZERO 000001a5: ISZERO 000001a6: PUSH2 0x01ae 000001a9: JUMPI 000001aa: PUSH1 0x00 000001ac: DUP1 000001ad: REVERT 000001ae: JUMPDEST 000001af: POP 000001b0: POP 000001b1: POP 000001b2: PUSH1 0x40 000001b4: MLOAD 000001b5: DUP1 000001b6: MLOAD 000001b7: SWAP2 000001b8: POP 000001b9: POP 000001ba: PUSH1 0x00 000001bc: DUP2 000001bd: GT 000001be: DUP1 000001bf: ISZERO 000001c0: PUSH2 0x01c9 000001c3: JUMPI 000001c4: POP 000001c5: PUSH1 0x00 000001c7: DUP3 000001c8: GT 000001c9: JUMPDEST 000001ca: DUP1 000001cb: ISZERO 000001cc: PUSH2 0x01d5 000001cf: JUMPI 000001d0: POP 000001d1: DUP2 000001d2: DUP2 000001d3: LT 000001d4: ISZERO 000001d5: JUMPDEST 000001d6: ISZERO 000001d7: ISZERO 000001d8: PUSH2 0x01e0 000001db: JUMPI 000001dc: PUSH1 0x00 000001de: DUP1 000001df: REVERT 000001e0: JUMPDEST 000001e1: DUP4 000001e2: PUSH1 0x01 000001e4: PUSH1 0xa0 000001e6: PUSH1 0x02 000001e8: EXP 000001e9: SUB 000001ea: AND 000001eb: PUSH4 0xa9059cbb 000001f0: DUP5 000001f1: DUP5 000001f2: PUSH1 0x00 000001f4: PUSH1 0x40 000001f6: MLOAD 000001f7: PUSH1 0x20 000001f9: ADD 000001fa: MSTORE 000001fb: PUSH1 0x40 000001fd: MLOAD 000001fe: PUSH1 0xe0 00000200: PUSH1 0x02 00000202: EXP 00000203: PUSH4 0xffffffff 00000208: DUP6 00000209: AND 0000020a: MUL 0000020b: DUP2 0000020c: MSTORE 0000020d: PUSH1 0x01 0000020f: PUSH1 0xa0 00000211: PUSH1 0x02 00000213: EXP 00000214: SUB 00000215: SWAP1 00000216: SWAP3 00000217: AND 00000218: PUSH1 0x04 0000021a: DUP4 0000021b: ADD 0000021c: MSTORE 0000021d: PUSH1 0x24 0000021f: DUP3 00000220: ADD 00000221: MSTORE 00000222: PUSH1 0x44 00000224: ADD 00000225: PUSH1 0x20 00000227: PUSH1 0x40 00000229: MLOAD 0000022a: DUP1 0000022b: DUP4 0000022c: SUB 0000022d: DUP2 0000022e: PUSH1 0x00 00000230: DUP8 00000231: DUP1 00000232: EXTCODESIZE 00000233: ISZERO 00000234: ISZERO 00000235: PUSH2 0x023d 00000238: JUMPI 00000239: PUSH1 0x00 0000023b: DUP1 0000023c: REVERT 0000023d: JUMPDEST 0000023e: PUSH2 0x02c6 00000241: GAS 00000242: SUB 00000243: CALL 00000244: ISZERO 00000245: ISZERO 00000246: PUSH2 0x024e 00000249: JUMPI 0000024a: PUSH1 0x00 0000024c: DUP1 0000024d: REVERT 0000024e: JUMPDEST 0000024f: POP 00000250: POP 00000251: POP 00000252: PUSH1 0x40 00000254: MLOAD 00000255: DUP1 00000256: MLOAD 00000257: SWAP1 00000258: POP 00000259: ISZERO 0000025a: ISZERO 0000025b: PUSH2 0x0260 0000025e: JUMPI 0000025f: INVALID 00000260: JUMPDEST 00000261: JUMPDEST 00000262: JUMPDEST 00000263: POP 00000264: POP 00000265: POP 00000266: POP 00000267: JUMP 00000268: JUMPDEST 00000269: PUSH1 0x00 0000026b: SLOAD 0000026c: PUSH1 0x01 0000026e: PUSH1 0xa0 00000270: PUSH1 0x02 00000272: EXP 00000273: SUB 00000274: AND 00000275: DUP2 00000276: JUMP 00000277: JUMPDEST 00000278: PUSH1 0x00 0000027a: SLOAD 0000027b: CALLER 0000027c: PUSH1 0x01 0000027e: PUSH1 0xa0 00000280: PUSH1 0x02 00000282: EXP 00000283: SUB 00000284: SWAP1 00000285: DUP2 00000286: AND 00000287: SWAP2 00000288: AND 00000289: EQ 0000028a: PUSH2 0x0292 0000028d: JUMPI 0000028e: PUSH1 0x00 00000290: DUP1 00000291: REVERT 00000292: JUMPDEST 00000293: PUSH1 0x01 00000295: PUSH1 0xa0 00000297: PUSH1 0x02 00000299: EXP 0000029a: SUB 0000029b: DUP3 0000029c: AND 0000029d: ISZERO 0000029e: ISZERO 0000029f: PUSH2 0x02a7 000002a2: JUMPI 000002a3: PUSH1 0x00 000002a5: DUP1 000002a6: REVERT 000002a7: JUMPDEST 000002a8: PUSH1 0x00 000002aa: ADDRESS 000002ab: PUSH1 0x01 000002ad: PUSH1 0xa0 000002af: PUSH1 0x02 000002b1: EXP 000002b2: SUB 000002b3: AND 000002b4: BALANCE 000002b5: GT 000002b6: DUP1 000002b7: ISZERO 000002b8: PUSH2 0x02c1 000002bb: JUMPI 000002bc: POP 000002bd: PUSH1 0x00 000002bf: DUP2 000002c0: GT 000002c1: JUMPDEST 000002c2: DUP1 000002c3: ISZERO 000002c4: PUSH2 0x02d7 000002c7: JUMPI 000002c8: POP 000002c9: DUP1 000002ca: ADDRESS 000002cb: PUSH1 0x01 000002cd: PUSH1 0xa0 000002cf: PUSH1 0x02 000002d1: EXP 000002d2: SUB 000002d3: AND 000002d4: BALANCE 000002d5: LT 000002d6: ISZERO 000002d7: JUMPDEST 000002d8: ISZERO 000002d9: ISZERO 000002da: PUSH2 0x02e2 000002dd: JUMPI 000002de: PUSH1 0x00 000002e0: DUP1 000002e1: REVERT 000002e2: JUMPDEST 000002e3: DUP2 000002e4: PUSH1 0x01 000002e6: PUSH1 0xa0 000002e8: PUSH1 0x02 000002ea: EXP 000002eb: SUB 000002ec: AND 000002ed: DUP2 000002ee: PUSH1 0x40 000002f0: MLOAD 000002f1: PUSH1 0x00 000002f3: PUSH1 0x40 000002f5: MLOAD 000002f6: DUP1 000002f7: DUP4 000002f8: SUB 000002f9: DUP2 000002fa: DUP6 000002fb: DUP8 000002fc: PUSH2 0x8796 000002ff: GAS 00000300: SUB 00000301: CALL 00000302: SWAP3 00000303: POP 00000304: POP 00000305: POP 00000306: ISZERO 00000307: ISZERO 00000308: PUSH2 0x030d 0000030b: JUMPI 0000030c: INVALID 0000030d: JUMPDEST 0000030e: JUMPDEST 0000030f: JUMPDEST 00000310: POP 00000311: POP 00000312: JUMP 00000313: STOP 00000314: LOG1 00000315: PUSH6 0x627a7a723058 0000031c: KECCAK256 0000031d: SWAP13 0000031e: SELFBALANCE 0000031f: UNKNOWN(0xED) 00000320: MCOPY 00000321: UNKNOWN(0xDC) 00000322: DUP8 00000323: UNKNOWN(0xAC) 00000324: UNKNOWN(0xD6) 00000325: SHR 00000326: TLOAD 00000327: NOT 00000328: DELEGATECALL 00000329: UNKNOWN(0xB0) 0000032a: SWAP9 0000032b: SWAP4 0000032c: GASLIMIT 0000032d: UNKNOWN(0xEB) 0000032e: UNKNOWN(0xFC) 0000032f: UNKNOWN(0xC5) 00000330: UNKNOWN(0xBB) 00000331: UNKNOWN(0xD8) 00000332: SELFBALANCE 00000333: UNKNOWN(0xB1) 00000334: PUSH2 0xabfc 00000337: PUSH25
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0xcf302e7ddbbe276b7e50f26efc9a892e8280244578eff2245745aa8287a2a796
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "unknown",
"attempts": 36,
"trace_id": "0xcf302e7ddbbe276b7e50f26efc9a892e8280244578eff2245745aa8287a2a796",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0d172a01",
"selector": "0x0d172a01",
"calldata_variants": [
"0x0d172a01",
"0x0d172a010000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x94081e21",
"selector": "0x94081e21",
"calldata_variants": [
"0x94081e21",
"0x94081e210000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 808,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 1,
"untrusted_delegatecall_count": 1
}
|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x837cf0aebe93ffb32493f04306ec82c244490e198b95eb232360fb8ddceec2bb
call_targets:
0xd5d870b874af1c837c43a01a989d71c5500f9692
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x837cf0aebe93ffb32493f04306ec82c244490e198b95eb232360fb8ddceec2bb",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xd5d870b874af1c837c43a01a989d71c5500f9692"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0d172a01",
"selector": "0x0d172a01",
"calldata_variants": [
"0x0d172a01",
"0x0d172a010000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x94081e21",
"selector": "0x94081e21",
"calldata_variants": [
"0x94081e21",
"0x94081e210000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 419,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 579,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 769,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 3,
"guards_detected": [],
"untrusted_call_count": 3
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x837cf0aebe93ffb32493f04306ec82c244490e198b95eb232360fb8ddceec2bb
call_targets:
0xd5d870b874af1c837c43a01a989d71c5500f9692
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x837cf0aebe93ffb32493f04306ec82c244490e198b95eb232360fb8ddceec2bb",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xd5d870b874af1c837c43a01a989d71c5500f9692"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0d172a01",
"selector": "0x0d172a01",
"calldata_variants": [
"0x0d172a01",
"0x0d172a010000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x94081e21",
"selector": "0x94081e21",
"calldata_variants": [
"0x94081e21",
"0x94081e210000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 419,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 579,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 769,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 3,
"guards_detected": []
}
|