Analysis Run

019b477e-ab40-72ce-97cd-8ca536b926f6

complete

Chain ID

1

Address

0xa950fbb5a56eda55c60de4aa99faf8504494283b

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
20983	artifact.fetch	complete	1 / 3	3 months ago
20984	tool.cast_disasm	complete	1 / 3	3 months ago
64062	analysis.bundle	complete	1 / 3	2 weeks ago
64063	capability.graph	complete	1 / 3	2 weeks ago
64064	detector.run	complete	1 / 3	2 weeks ago
64065	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

3

EXT*/BALANCE

5

Total opcodes

1228

Flags

heavy_ext_balance_usage

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00d8
0000000a: JUMPI
0000000b: PUSH4 0xffffffff
00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002e: PUSH1 0x00
00000030: CALLDATALOAD
00000031: DIV
00000032: AND
00000033: PUSH4 0x27e235e3
00000038: DUP2
00000039: EQ
0000003a: PUSH2 0x00e4
0000003d: JUMPI
0000003e: DUP1
0000003f: PUSH4 0x2c4e722e
00000044: EQ
00000045: PUSH2 0x0115
00000048: JUMPI
00000049: DUP1
0000004a: PUSH4 0x38af3eed
0000004f: EQ
00000050: PUSH2 0x013a
00000053: JUMPI
00000054: DUP1
00000055: PUSH4 0x590e1ae3
0000005a: EQ
0000005b: PUSH2 0x0169
0000005e: JUMPI
0000005f: DUP1
00000060: PUSH4 0x8da5cb5b
00000065: EQ
00000066: PUSH2 0x017e
00000069: JUMPI
0000006a: DUP1
0000006b: PUSH4 0xac53a033
00000070: EQ
00000071: PUSH2 0x01ad
00000074: JUMPI
00000075: DUP1
00000076: PUSH4 0xad816895
0000007b: EQ
0000007c: PUSH2 0x01dc
0000007f: JUMPI
00000080: DUP1
00000081: PUSH4 0xb071cbe6
00000086: EQ
00000087: PUSH2 0x0201
0000008a: JUMPI
0000008b: DUP1
0000008c: PUSH4 0xb4427263
00000091: EQ
00000092: PUSH2 0x00d8
00000095: JUMPI
00000096: DUP1
00000097: PUSH4 0xbe9a6555
0000009c: EQ
0000009d: PUSH2 0x0230
000000a0: JUMPI
000000a1: DUP1
000000a2: PUSH4 0xe373dc53
000000a7: EQ
000000a8: PUSH2 0x0255
000000ab: JUMPI
000000ac: DUP1
000000ad: PUSH4 0xef78d4fd
000000b2: EQ
000000b3: PUSH2 0x027a
000000b6: JUMPI
000000b7: DUP1
000000b8: PUSH4 0xf2fde38b
000000bd: EQ
000000be: PUSH2 0x029f
000000c1: JUMPI
000000c2: DUP1
000000c3: PUSH4 0xf89be593
000000c8: EQ
000000c9: PUSH2 0x02c0
000000cc: JUMPI
000000cd: DUP1
000000ce: PUSH4 0xfd6b7ef8
000000d3: EQ
000000d4: PUSH2 0x02e5
000000d7: JUMPI
000000d8: JUMPDEST
000000d9: JUMPDEST
000000da: PUSH2 0x00e1
000000dd: PUSH2 0x02fa
000000e0: JUMP
000000e1: JUMPDEST
000000e2: JUMPDEST
000000e3: STOP
000000e4: JUMPDEST
000000e5: CALLVALUE
000000e6: ISZERO
000000e7: PUSH2 0x00ef
000000ea: JUMPI
000000eb: PUSH1 0x00
000000ed: DUP1
000000ee: REVERT
000000ef: JUMPDEST
000000f0: PUSH2 0x0103
000000f3: PUSH1 0x01
000000f5: PUSH1 0xa0
000000f7: PUSH1 0x02
000000f9: EXP
000000fa: SUB
000000fb: PUSH1 0x04
000000fd: CALLDATALOAD
000000fe: AND
000000ff: PUSH2 0x04e2
00000102: JUMP
00000103: JUMPDEST
00000104: PUSH1 0x40
00000106: MLOAD
00000107: SWAP1
00000108: DUP2
00000109: MSTORE
0000010a: PUSH1 0x20
0000010c: ADD
0000010d: PUSH1 0x40
0000010f: MLOAD
00000110: DUP1
00000111: SWAP2
00000112: SUB
00000113: SWAP1
00000114: RETURN
00000115: JUMPDEST
00000116: CALLVALUE
00000117: ISZERO
00000118: PUSH2 0x0120
0000011b: JUMPI
0000011c: PUSH1 0x00
0000011e: DUP1
0000011f: REVERT
00000120: JUMPDEST
00000121: PUSH2 0x0103
00000124: PUSH2 0x04f4
00000127: JUMP
00000128: JUMPDEST
00000129: PUSH1 0x40
0000012b: MLOAD
0000012c: SWAP1
0000012d: DUP2
0000012e: MSTORE
0000012f: PUSH1 0x20
00000131: ADD
00000132: PUSH1 0x40
00000134: MLOAD
00000135: DUP1
00000136: SWAP2
00000137: SUB
00000138: SWAP1
00000139: RETURN
0000013a: JUMPDEST
0000013b: CALLVALUE
0000013c: ISZERO
0000013d: PUSH2 0x0145
00000140: JUMPI
00000141: PUSH1 0x00
00000143: DUP1
00000144: REVERT
00000145: JUMPDEST
00000146: PUSH2 0x014d
00000149: PUSH2 0x04fa
0000014c: JUMP
0000014d: JUMPDEST
0000014e: PUSH1 0x40
00000150: MLOAD
00000151: PUSH1 0x01
00000153: PUSH1 0xa0
00000155: PUSH1 0x02
00000157: EXP
00000158: SUB
00000159: SWAP1
0000015a: SWAP2
0000015b: AND
0000015c: DUP2
0000015d: MSTORE
0000015e: PUSH1 0x20
00000160: ADD
00000161: PUSH1 0x40
00000163: MLOAD
00000164: DUP1
00000165: SWAP2
00000166: SUB
00000167: SWAP1
00000168: RETURN
00000169: JUMPDEST
0000016a: CALLVALUE
0000016b: ISZERO
0000016c: PUSH2 0x0174
0000016f: JUMPI
00000170: PUSH1 0x00
00000172: DUP1
00000173: REVERT
00000174: JUMPDEST
00000175: PUSH2 0x00e1
00000178: PUSH2 0x0509
0000017b: JUMP
0000017c: JUMPDEST
0000017d: STOP
0000017e: JUMPDEST
0000017f: CALLVALUE
00000180: ISZERO
00000181: PUSH2 0x0189
00000184: JUMPI
00000185: PUSH1 0x00
00000187: DUP1
00000188: REVERT
00000189: JUMPDEST
0000018a: PUSH2 0x014d
0000018d: PUSH2 0x0588
00000190: JUMP
00000191: JUMPDEST
00000192: PUSH1 0x40
00000194: MLOAD
00000195: PUSH1 0x01
00000197: PUSH1 0xa0
00000199: PUSH1 0x02
0000019b: EXP
0000019c: SUB
0000019d: SWAP1
0000019e: SWAP2
0000019f: AND
000001a0: DUP2
000001a1: MSTORE
000001a2: PUSH1 0x20
000001a4: ADD
000001a5: PUSH1 0x40
000001a7: MLOAD
000001a8: DUP1
000001a9: SWAP2
000001aa: SUB
000001ab: SWAP1
000001ac: RETURN
000001ad: JUMPDEST
000001ae: CALLVALUE
000001af: ISZERO
000001b0: PUSH2 0x01b8
000001b3: JUMPI
000001b4: PUSH1 0x00
000001b6: DUP1
000001b7: REVERT
000001b8: JUMPDEST
000001b9: PUSH2 0x014d
000001bc: PUSH2 0x0597
000001bf: JUMP
000001c0: JUMPDEST
000001c1: PUSH1 0x40
000001c3: MLOAD
000001c4: PUSH1 0x01
000001c6: PUSH1 0xa0
000001c8: PUSH1 0x02
000001ca: EXP
000001cb: SUB
000001cc: SWAP1
000001cd: SWAP2
000001ce: AND
000001cf: DUP2
000001d0: MSTORE
000001d1: PUSH1 0x20
000001d3: ADD
000001d4: PUSH1 0x40
000001d6: MLOAD
000001d7: DUP1
000001d8: SWAP2
000001d9: SUB
000001da: SWAP1
000001db: RETURN
000001dc: JUMPDEST
000001dd: CALLVALUE
000001de: ISZERO
000001df: PUSH2 0x01e7
000001e2: JUMPI
000001e3: PUSH1 0x00
000001e5: DUP1
000001e6: REVERT
000001e7: JUMPDEST
000001e8: PUSH2 0x0103
000001eb: PUSH2 0x05a6
000001ee: JUMP
000001ef: JUMPDEST
000001f0: PUSH1 0x40
000001f2: MLOAD
000001f3: SWAP1
000001f4: DUP2
000001f5: MSTORE
000001f6: PUSH1 0x20
000001f8: ADD
000001f9: PUSH1 0x40
000001fb: MLOAD
000001fc: DUP1
000001fd: SWAP2
000001fe: SUB
000001ff: SWAP1
00000200: RETURN
00000201: JUMPDEST
00000202: CALLVALUE
00000203: ISZERO
00000204: PUSH2 0x020c
00000207: JUMPI
00000208: PUSH1 0x00
0000020a: DUP1
0000020b: REVERT
0000020c: JUMPDEST
0000020d: PUSH2 0x0103
00000210: PUSH2 0x05ac
00000213: JUMP
00000214: JUMPDEST
00000215: PUSH1 0x40
00000217: MLOAD
00000218: SWAP1
00000219: DUP2
0000021a: MSTORE
0000021b: PUSH1 0x20
0000021d: ADD
0000021e: PUSH1 0x40
00000220: MLOAD
00000221: DUP1
00000222: SWAP2
00000223: SUB
00000224: SWAP1
00000225: RETURN
00000226: JUMPDEST
00000227: PUSH2 0x00e1
0000022a: PUSH2 0x02fa
0000022d: JUMP
0000022e: JUMPDEST
0000022f: STOP
00000230: JUMPDEST
00000231: CALLVALUE
00000232: ISZERO
00000233: PUSH2 0x023b
00000236: JUMPI
00000237: PUSH1 0x00
00000239: DUP1
0000023a: REVERT
0000023b: JUMPDEST
0000023c: PUSH2 0x0103
0000023f: PUSH2 0x05b2
00000242: JUMP
00000243: JUMPDEST
00000244: PUSH1 0x40
00000246: MLOAD
00000247: SWAP1
00000248: DUP2
00000249: MSTORE
0000024a: PUSH1 0x20
0000024c: ADD
0000024d: PUSH1 0x40
0000024f: MLOAD
00000250: DUP1
00000251: SWAP2
00000252: SUB
00000253: SWAP1
00000254: RETURN
00000255: JUMPDEST
00000256: CALLVALUE
00000257: ISZERO
00000258: PUSH2 0x0260
0000025b: JUMPI
0000025c: PUSH1 0x00
0000025e: DUP1
0000025f: REVERT
00000260: JUMPDEST
00000261: PUSH2 0x0103
00000264: PUSH2 0x05b8
00000267: JUMP
00000268: JUMPDEST
00000269: PUSH1 0x40
0000026b: MLOAD
0000026c: SWAP1
0000026d: DUP2
0000026e: MSTORE
0000026f: PUSH1 0x20
00000271: ADD
00000272: PUSH1 0x40
00000274: MLOAD
00000275: DUP1
00000276: SWAP2
00000277: SUB
00000278: SWAP1
00000279: RETURN
0000027a: JUMPDEST
0000027b: CALLVALUE
0000027c: ISZERO
0000027d: PUSH2 0x0285
00000280: JUMPI
00000281: PUSH1 0x00
00000283: DUP1
00000284: REVERT
00000285: JUMPDEST
00000286: PUSH2 0x0103
00000289: PUSH2 0x05be
0000028c: JUMP
0000028d: JUMPDEST
0000028e: PUSH1 0x40
00000290: MLOAD
00000291: SWAP1
00000292: DUP2
00000293: MSTORE
00000294: PUSH1 0x20
00000296: ADD
00000297: PUSH1 0x40
00000299: MLOAD
0000029a: DUP1
0000029b: SWAP2
0000029c: SUB
0000029d: SWAP1
0000029e: RETURN
0000029f: JUMPDEST
000002a0: CALLVALUE
000002a1: ISZERO
000002a2: PUSH2 0x02aa
000002a5: JUMPI
000002a6: PUSH1 0x00
000002a8: DUP1
000002a9: REVERT
000002aa: JUMPDEST
000002ab: PUSH2 0x00e1
000002ae: PUSH1 0x01
000002b0: PUSH1 0xa0
000002b2: PUSH1 0x02
000002b4: EXP
000002b5: SUB
000002b6: PUSH1 0x04
000002b8: CALLDATALOAD
000002b9: AND
000002ba: PUSH2 0x05c4
000002bd: JUMP
000002be: JUMPDEST
000002bf: STOP
000002c0: JUMPDEST
000002c1: CALLVALUE
000002c2: ISZERO
000002c3: PUSH2 0x02cb
000002c6: JUMPI
000002c7: PUSH1 0x00
000002c9: DUP1
000002ca: REVERT
000002cb: JUMPDEST
000002cc: PUSH2 0x0103
000002cf: PUSH2 0x0621
000002d2: JUMP
000002d3: JUMPDEST
000002d4: PUSH1 0x40
000002d6: MLOAD
000002d7: SWAP1
000002d8: DUP2
000002d9: MSTORE
000002da: PUSH1 0x20
000002dc: ADD
000002dd: PUSH1 0x40
000002df: MLOAD
000002e0: DUP1
000002e1: SWAP2
000002e2: SUB
000002e3: SWAP1
000002e4: RETURN
000002e5: JUMPDEST
000002e6: CALLVALUE
000002e7: ISZERO
000002e8: PUSH2 0x02f0
000002eb: JUMPI
000002ec: PUSH1 0x00
000002ee: DUP1
000002ef: REVERT
000002f0: JUMPDEST
000002f1: PUSH2 0x00e1
000002f4: PUSH2 0x0627
000002f7: JUMP
000002f8: JUMPDEST
000002f9: STOP
000002fa: JUMPDEST
000002fb: PUSH1 0x00
000002fd: DUP1
000002fe: PUSH1 0x00
00000300: PUSH1 0x06
00000302: SLOAD
00000303: ADDRESS
00000304: PUSH1 0x01
00000306: PUSH1 0xa0
00000308: PUSH1 0x02
0000030a: EXP
0000030b: SUB
0000030c: AND
0000030d: BALANCE
0000030e: GT
0000030f: ISZERO
00000310: ISZERO
00000311: ISZERO
00000312: PUSH2 0x031a
00000315: JUMPI
00000316: PUSH1 0x00
00000318: DUP1
00000319: REVERT
0000031a: JUMPDEST
0000031b: PUSH1 0x03
0000031d: SLOAD
0000031e: TIMESTAMP
0000031f: GT
00000320: DUP1
00000321: ISZERO
00000322: PUSH2 0x0335
00000325: JUMPI
00000326: POP
00000327: PUSH1 0x05
00000329: SLOAD
0000032a: PUSH3 0x015180
0000032e: MUL
0000032f: PUSH1 0x03
00000331: SLOAD
00000332: ADD
00000333: TIMESTAMP
00000334: LT
00000335: JUMPDEST
00000336: ISZERO
00000337: ISZERO
00000338: PUSH2 0x0340
0000033b: JUMPI
0000033c: PUSH1 0x00
0000033e: DUP1
0000033f: REVERT
00000340: JUMPDEST
00000341: CALLVALUE
00000342: SWAP3
00000343: POP
00000344: PUSH1 0x00
00000346: SWAP2
00000347: POP
00000348: PUSH2 0x0374
0000034b: PUSH8 0x0de0b6b3a7640000
00000354: PUSH2 0x0368
00000357: DUP6
00000358: PUSH1 0x07
0000035a: SLOAD
0000035b: PUSH2 0x06ab
0000035e: SWAP1
0000035f: SWAP2
00000360: SWAP1
00000361: PUSH4 0xffffffff
00000366: AND
00000367: JUMP
00000368: JUMPDEST
00000369: SWAP1
0000036a: PUSH4 0xffffffff
0000036f: PUSH2 0x06da
00000372: AND
00000373: JUMP
00000374: JUMPDEST
00000375: SWAP1
00000376: POP
00000377: PUSH1 0x04
00000379: SLOAD
0000037a: PUSH3 0x015180
0000037e: MUL
0000037f: PUSH1 0x03
00000381: SLOAD
00000382: ADD
00000383: TIMESTAMP
00000384: LT
00000385: ISZERO
00000386: PUSH2 0x03c1
00000389: JUMPI
0000038a: PUSH1 0x09
0000038c: SLOAD
0000038d: DUP4
0000038e: LT
0000038f: ISZERO
00000390: PUSH2 0x0398
00000393: JUMPI
00000394: PUSH1 0x00
00000396: DUP1
00000397: REVERT
00000398: JUMPDEST
00000399: PUSH2 0x03ba
0000039c: PUSH1 0x32
0000039e: PUSH2 0x03ae
000003a1: DUP4
000003a2: PUSH1 0x64
000003a4: PUSH4 0xffffffff
000003a9: PUSH2 0x06da
000003ac: AND
000003ad: JUMP
000003ae: JUMPDEST
000003af: SWAP1
000003b0: PUSH4 0xffffffff
000003b5: PUSH2 0x06ab
000003b8: AND
000003b9: JUMP
000003ba: JUMPDEST
000003bb: SWAP2
000003bc: POP
000003bd: PUSH2 0x0410
000003c0: JUMP
000003c1: JUMPDEST
000003c2: PUSH1 0x04
000003c4: SLOAD
000003c5: PUSH3 0x015180
000003c9: MUL
000003ca: PUSH1 0x03
000003cc: SLOAD
000003cd: ADD
000003ce: TIMESTAMP
000003cf: GT
000003d0: DUP1
000003d1: ISZERO
000003d2: PUSH2 0x03e6
000003d5: JUMPI
000003d6: POP
000003d7: PUSH1 0x05
000003d9: SLOAD
000003da: PUSH3 0x015180
000003de: MUL
000003df: PUSH1 0x03
000003e1: SLOAD
000003e2: ADD
000003e3: TIMESTAMP
000003e4: GT
000003e5: ISZERO
000003e6: JUMPDEST
000003e7: ISZERO
000003e8: PUSH2 0x0410
000003eb: JUMPI
000003ec: PUSH2 0x040d
000003ef: PUSH1 0x28
000003f1: PUSH2 0x03ae
000003f4: DUP4
000003f5: PUSH1 0x64
000003f7: PUSH4 0xffffffff
000003fc: PUSH2 0x06da
000003ff: AND
00000400: JUMP
00000401: JUMPDEST
00000402: SWAP1
00000403: PUSH4 0xffffffff
00000408: PUSH2 0x06ab
0000040b: AND
0000040c: JUMP
0000040d: JUMPDEST
0000040e: SWAP2
0000040f: POP
00000410: JUMPDEST
00000411: JUMPDEST
00000412: PUSH1 0x02
00000414: SLOAD
00000415: SWAP1
00000416: DUP3
00000417: ADD
00000418: SWAP1
00000419: PUSH1 0x01
0000041b: PUSH1 0xa0
0000041d: PUSH1 0x02
0000041f: EXP
00000420: SUB
00000421: AND
00000422: PUSH4 0x40c10f19
00000427: CALLER
00000428: DUP4
00000429: PUSH1 0x40
0000042b: MLOAD
0000042c: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000044a: PUSH4 0xffffffff
0000044f: DUP6
00000450: AND
00000451: MUL
00000452: DUP2
00000453: MSTORE
00000454: PUSH1 0x01
00000456: PUSH1 0xa0
00000458: PUSH1 0x02
0000045a: EXP
0000045b: SUB
0000045c: SWAP1
0000045d: SWAP3
0000045e: AND
0000045f: PUSH1 0x04
00000461: DUP4
00000462: ADD
00000463: MSTORE
00000464: PUSH1 0x24
00000466: DUP3
00000467: ADD
00000468: MSTORE
00000469: PUSH1 0x44
0000046b: ADD
0000046c: PUSH1 0x00
0000046e: PUSH1 0x40
00000470: MLOAD
00000471: DUP1
00000472: DUP4
00000473: SUB
00000474: DUP2
00000475: PUSH1 0x00
00000477: DUP8
00000478: DUP1
00000479: EXTCODESIZE
0000047a: ISZERO
0000047b: ISZERO
0000047c: PUSH2 0x0484
0000047f: JUMPI
00000480: PUSH1 0x00
00000482: DUP1
00000483: REVERT
00000484: JUMPDEST
00000485: PUSH2 0x02c6
00000488: GAS
00000489: SUB
0000048a: CALL
0000048b: ISZERO
0000048c: ISZERO
0000048d: PUSH2 0x0495
00000490: JUMPI
00000491: PUSH1 0x00
00000493: DUP1
00000494: REVERT
00000495: JUMPDEST
00000496: POP
00000497: POP
00000498: POP
00000499: PUSH1 0x01
0000049b: PUSH1 0xa0
0000049d: PUSH1 0x02
0000049f: EXP
000004a0: SUB
000004a1: CALLER
000004a2: AND
000004a3: PUSH1 0x00
000004a5: SWAP1
000004a6: DUP2
000004a7: MSTORE
000004a8: PUSH1 0x0a
000004aa: PUSH1 0x20
000004ac: MSTORE
000004ad: PUSH1 0x40
000004af: SWAP1
000004b0: KECCAK256
000004b1: SLOAD
000004b2: PUSH2 0x04c1
000004b5: SWAP1
000004b6: CALLVALUE
000004b7: PUSH4 0xffffffff
000004bc: PUSH2 0x06f6
000004bf: AND
000004c0: JUMP
000004c1: JUMPDEST
000004c2: PUSH1 0x01
000004c4: PUSH1 0xa0
000004c6: PUSH1 0x02
000004c8: EXP
000004c9: SUB
000004ca: CALLER
000004cb: AND
000004cc: PUSH1 0x00
000004ce: SWAP1
000004cf: DUP2
000004d0: MSTORE
000004d1: PUSH1 0x0a
000004d3: PUSH1 0x20
000004d5: MSTORE
000004d6: PUSH1 0x40
000004d8: SWAP1
000004d9: KECCAK256
000004da: SSTORE
000004db: JUMPDEST
000004dc: JUMPDEST
000004dd: JUMPDEST
000004de: POP
000004df: POP
000004e0: POP
000004e1: JUMP
000004e2: JUMPDEST
000004e3: PUSH1 0x0a
000004e5: PUSH1 0x20
000004e7: MSTORE
000004e8: PUSH1 0x00
000004ea: SWAP1
000004eb: DUP2
000004ec: MSTORE
000004ed: PUSH1 0x40
000004ef: SWAP1
000004f0: KECCAK256
000004f1: SLOAD
000004f2: DUP2
000004f3: JUMP
000004f4: JUMPDEST
000004f5: PUSH1 0x07
000004f7: SLOAD
000004f8: DUP2
000004f9: JUMP
000004fa: JUMPDEST
000004fb: PUSH1 0x01
000004fd: SLOAD
000004fe: PUSH1 0x01
00000500: PUSH1 0xa0
00000502: PUSH1 0x02
00000504: EXP
00000505: SUB
00000506: AND
00000507: DUP2
00000508: JUMP
00000509: JUMPDEST
0000050a: PUSH1 0x00
0000050c: PUSH1 0x08
0000050e: SLOAD
0000050f: ADDRESS
00000510: PUSH1 0x01
00000512: PUSH1 0xa0
00000514: PUSH1 0x02
00000516: EXP
00000517: SUB
00000518: AND
00000519: BALANCE
0000051a: LT
0000051b: DUP1
0000051c: ISZERO
0000051d: PUSH2 0x0530
00000520: JUMPI
00000521: POP
00000522: PUSH1 0x05
00000524: SLOAD
00000525: PUSH3 0x015180
00000529: MUL
0000052a: PUSH1 0x03
0000052c: SLOAD
0000052d: ADD
0000052e: TIMESTAMP
0000052f: GT
00000530: JUMPDEST
00000531: ISZERO
00000532: ISZERO
00000533: PUSH2 0x053b
00000536: JUMPI
00000537: PUSH1 0x00
00000539: DUP1
0000053a: REVERT
0000053b: JUMPDEST
0000053c: POP
0000053d: PUSH1 0x01
0000053f: PUSH1 0xa0
00000541: PUSH1 0x02
00000543: EXP
00000544: SUB
00000545: CALLER
00000546: AND
00000547: PUSH1 0x00
00000549: DUP2
0000054a: DUP2
0000054b: MSTORE
0000054c: PUSH1 0x0a
0000054e: PUSH1 0x20
00000550: MSTORE
00000551: PUSH1 0x40
00000553: DUP1
00000554: DUP3
00000555: KECCAK256
00000556: DUP1
00000557: SLOAD
00000558: SWAP3
00000559: SWAP1
0000055a: SSTORE
0000055b: SWAP1
0000055c: SWAP2
0000055d: SWAP1
0000055e: DUP3
0000055f: ISZERO
00000560: PUSH2 0x08fc
00000563: MUL
00000564: SWAP1
00000565: DUP4
00000566: SWAP1
00000567: MLOAD
00000568: PUSH1 0x00
0000056a: PUSH1 0x40
0000056c: MLOAD
0000056d: DUP1
0000056e: DUP4
0000056f: SUB
00000570: DUP2
00000571: DUP6
00000572: DUP9
00000573: DUP9
00000574: CALL
00000575: SWAP4
00000576: POP
00000577: POP
00000578: POP
00000579: POP
0000057a: ISZERO
0000057b: ISZERO
0000057c: PUSH2 0x0584
0000057f: JUMPI
00000580: PUSH1 0x00
00000582: DUP1
00000583: REVERT
00000584: JUMPDEST
00000585: JUMPDEST
00000586: POP
00000587: JUMP
00000588: JUMPDEST
00000589: PUSH1 0x00
0000058b: SLOAD
0000058c: PUSH1 0x01
0000058e: PUSH1 0xa0
00000590: PUSH1 0x02
00000592: EXP
00000593: SUB
00000594: AND
00000595: DUP2
00000596: JUMP
00000597: JUMPDEST
00000598: PUSH1 0x02
0000059a: SLOAD
0000059b: PUSH1 0x01
0000059d: PUSH1 0xa0
0000059f: PUSH1 0x02
000005a1: EXP
000005a2: SUB
000005a3: AND
000005a4: DUP2
000005a5: JUMP
000005a6: JUMPDEST
000005a7: PUSH1 0x04
000005a9: SLOAD
000005aa: DUP2
000005ab: JUMP
000005ac: JUMPDEST
000005ad: PUSH1 0x06
000005af: SLOAD
000005b0: DUP2
000005b1: JUMP
000005b2: JUMPDEST
000005b3: PUSH1 0x03
000005b5: SLOAD
000005b6: DUP2
000005b7: JUMP
000005b8: JUMPDEST
000005b9: PUSH1 0x09
000005bb: SLOAD
000005bc: DUP2
000005bd: JUMP
000005be: JUMPDEST
000005bf: PUSH1 0x05
000005c1: SLOAD
000005c2: DUP2
000005c3: JUMP
000005c4: JUMPDEST
000005c5: PUSH1 0x00
000005c7: SLOAD
000005c8: CALLER
000005c9: PUSH1 0x01
000005cb: PUSH1 0xa0
000005cd: PUSH1 0x02
000005cf: EXP
000005d0: SUB
000005d1: SWAP1
000005d2: DUP2
000005d3: AND
000005d4: SWAP2
000005d5: AND
000005d6: EQ
000005d7: PUSH2 0x05df
000005da: JUMPI
000005db: PUSH1 0x00
000005dd: DUP1
000005de: REVERT
000005df: JUMPDEST
000005e0: PUSH1 0x01
000005e2: PUSH1 0xa0
000005e4: PUSH1 0x02
000005e6: EXP
000005e7: SUB
000005e8: DUP2
000005e9: AND
000005ea: ISZERO
000005eb: ISZERO
000005ec: PUSH2 0x05f4
000005ef: JUMPI
000005f0: PUSH1 0x00
000005f2: DUP1
000005f3: REVERT
000005f4: JUMPDEST
000005f5: PUSH1 0x00
000005f7: DUP1
000005f8: SLOAD
000005f9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000060e: NOT
0000060f: AND
00000610: PUSH1 0x01
00000612: PUSH1 0xa0
00000614: PUSH1 0x02
00000616: EXP
00000617: SUB
00000618: DUP4
00000619: AND
0000061a: OR
0000061b: SWAP1
0000061c: SSTORE
0000061d: JUMPDEST
0000061e: JUMPDEST
0000061f: POP
00000620: JUMP
00000621: JUMPDEST
00000622: PUSH1 0x08
00000624: SLOAD
00000625: DUP2
00000626: JUMP
00000627: JUMPDEST
00000628: PUSH1 0x00
0000062a: SLOAD
0000062b: CALLER
0000062c: PUSH1 0x01
0000062e: PUSH1 0xa0
00000630: PUSH1 0x02
00000632: EXP
00000633: SUB
00000634: SWAP1
00000635: DUP2
00000636: AND
00000637: SWAP2
00000638: AND
00000639: EQ
0000063a: PUSH2 0x0642
0000063d: JUMPI
0000063e: PUSH1 0x00
00000640: DUP1
00000641: REVERT
00000642: JUMPDEST
00000643: PUSH1 0x08
00000645: SLOAD
00000646: ADDRESS
00000647: PUSH1 0x01
00000649: PUSH1 0xa0
0000064b: PUSH1 0x02
0000064d: EXP
0000064e: SUB
0000064f: AND
00000650: BALANCE
00000651: GT
00000652: DUP1
00000653: ISZERO
00000654: PUSH2 0x0668
00000657: JUMPI
00000658: POP
00000659: PUSH1 0x05
0000065b: SLOAD
0000065c: PUSH3 0x015180
00000660: MUL
00000661: PUSH1 0x03
00000663: SLOAD
00000664: ADD
00000665: TIMESTAMP
00000666: LT
00000667: ISZERO
00000668: JUMPDEST
00000669: ISZERO
0000066a: PUSH2 0x06a6
0000066d: JUMPI
0000066e: PUSH1 0x01
00000670: SLOAD
00000671: PUSH1 0x01
00000673: PUSH1 0xa0
00000675: PUSH1 0x02
00000677: EXP
00000678: SUB
00000679: SWAP1
0000067a: DUP2
0000067b: AND
0000067c: SWAP1
0000067d: ADDRESS
0000067e: AND
0000067f: BALANCE
00000680: DUP1
00000681: ISZERO
00000682: PUSH2 0x08fc
00000685: MUL
00000686: SWAP1
00000687: PUSH1 0x40
00000689: MLOAD
0000068a: PUSH1 0x00
0000068c: PUSH1 0x40
0000068e: MLOAD
0000068f: DUP1
00000690: DUP4
00000691: SUB
00000692: DUP2
00000693: DUP6
00000694: DUP9
00000695: DUP9
00000696: CALL
00000697: SWAP4
00000698: POP
00000699: POP
0000069a: POP
0000069b: POP
0000069c: ISZERO
0000069d: ISZERO
0000069e: PUSH2 0x06a6
000006a1: JUMPI
000006a2: PUSH1 0x00
000006a4: DUP1
000006a5: REVERT
000006a6: JUMPDEST
000006a7: JUMPDEST
000006a8: JUMPDEST
000006a9: JUMPDEST
000006aa: JUMP
000006ab: JUMPDEST
000006ac: PUSH1 0x00
000006ae: DUP3
000006af: DUP3
000006b0: MUL
000006b1: DUP4
000006b2: ISZERO
000006b3: DUP1
000006b4: PUSH2 0x06c7
000006b7: JUMPI
000006b8: POP
000006b9: DUP3
000006ba: DUP5
000006bb: DUP3
000006bc: DUP2
000006bd: ISZERO
000006be: ISZERO
000006bf: PUSH2 0x06c4
000006c2: JUMPI
000006c3: INVALID
000006c4: JUMPDEST
000006c5: DIV
000006c6: EQ
000006c7: JUMPDEST
000006c8: ISZERO
000006c9: ISZERO
000006ca: PUSH2 0x06cf
000006cd: JUMPI
000006ce: INVALID
000006cf: JUMPDEST
000006d0: DUP1
000006d1: SWAP2
000006d2: POP
000006d3: JUMPDEST
000006d4: POP
000006d5: SWAP3
000006d6: SWAP2
000006d7: POP
000006d8: POP
000006d9: JUMP
000006da: JUMPDEST
000006db: PUSH1 0x00
000006dd: DUP1
000006de: DUP3
000006df: DUP5
000006e0: DUP2
000006e1: ISZERO
000006e2: ISZERO
000006e3: PUSH2 0x06e8
000006e6: JUMPI
000006e7: INVALID
000006e8: JUMPDEST
000006e9: DIV
000006ea: SWAP1
000006eb: POP
000006ec: DUP1
000006ed: SWAP2
000006ee: POP
000006ef: JUMPDEST
000006f0: POP
000006f1: SWAP3
000006f2: SWAP2
000006f3: POP
000006f4: POP
000006f5: JUMP
000006f6: JUMPDEST
000006f7: PUSH1 0x00
000006f9: DUP3
000006fa: DUP3
000006fb: ADD
000006fc: DUP4
000006fd: DUP2
000006fe: LT
000006ff: ISZERO
00000700: PUSH2 0x06cf
00000703: JUMPI
00000704: INVALID
00000705: JUMPDEST
00000706: DUP1
00000707: SWAP2
00000708: POP
00000709: JUMPDEST
0000070a: POP
0000070b: SWAP3
0000070c: SWAP2
0000070d: POP
0000070e: POP
0000070f: JUMP
00000710: STOP
00000711: LOG1
00000712: PUSH6 0x627a7a723058
00000719: KECCAK256
0000071a: STOP
0000071b: BASEFEE
0000071c: UNKNOWN(0xE0)
0000071d: DUP11
0000071e: SHL
0000071f: SWAP13
00000720: UNKNOWN(0xAE)
00000721: JUMP
00000722: MLOAD
00000723: UNKNOWN(0xE1)
00000724: UNKNOWN(0xD2)
00000725: JUMP
00000726: TLOAD
00000727: MOD
00000728: UNKNOWN(0xE1)
00000729: PUSH4 0xad079c39
0000072e: DUP12
0000072f: SWAP12
00000730: UNKNOWN(0xB7)
00000731: RETURN
00000732: MSTORE8
00000733: UNKNOWN(0xEB)
00000734: UNKNOWN(0xDB)
00000735: PUSH27

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0xc7c45a1698d43dae3ec26f18b5cbb71972baea950dbf8a2b06b65c700baf0a32 call_targets: 0xa950fbb5a56eda55c60de4aa99faf8504494283b target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xc7c45a1698d43dae3ec26f18b5cbb71972baea950dbf8a2b06b65c700baf0a32", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xa950fbb5a56eda55c60de4aa99faf8504494283b" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x27e235e3", "selector": "0x27e235e3", "calldata_variants": [ "0x27e235e3", "0x27e235e30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x2c4e722e", "selector": "0x2c4e722e", "calldata_variants": [ "0x2c4e722e", "0x2c4e722e0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38af3eed", "selector": "0x38af3eed", "calldata_variants": [ "0x38af3eed", "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x590e1ae3", "selector": "0x590e1ae3", "calldata_variants": [ "0x590e1ae3", "0x590e1ae30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xac53a033", "selector": "0xac53a033", "calldata_variants": [ "0xac53a033", "0xac53a0330000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xad816895", "selector": "0xad816895", "calldata_variants": [ "0xad816895", "0xad8168950000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xb071cbe6", "selector": "0xb071cbe6", "calldata_variants": [ "0xb071cbe6", "0xb071cbe60000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1162, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1396, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1686, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 3, "guards_detected": [], "untrusted_call_count": 3 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0xc7c45a1698d43dae3ec26f18b5cbb71972baea950dbf8a2b06b65c700baf0a32 call_targets: 0xa950fbb5a56eda55c60de4aa99faf8504494283b target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xc7c45a1698d43dae3ec26f18b5cbb71972baea950dbf8a2b06b65c700baf0a32", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xa950fbb5a56eda55c60de4aa99faf8504494283b" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x27e235e3", "selector": "0x27e235e3", "calldata_variants": [ "0x27e235e3", "0x27e235e30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x2c4e722e", "selector": "0x2c4e722e", "calldata_variants": [ "0x2c4e722e", "0x2c4e722e0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38af3eed", "selector": "0x38af3eed", "calldata_variants": [ "0x38af3eed", "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x590e1ae3", "selector": "0x590e1ae3", "calldata_variants": [ "0x590e1ae3", "0x590e1ae30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xac53a033", "selector": "0xac53a033", "calldata_variants": [ "0xac53a033", "0xac53a0330000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xad816895", "selector": "0xad816895", "calldata_variants": [ "0xad816895", "0xad8168950000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xb071cbe6", "selector": "0xb071cbe6", "calldata_variants": [ "0xb071cbe6", "0xb071cbe60000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1162, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1396, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1686, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 3, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0xc7c45a1698d43dae3ec26f18b5cbb71972baea950dbf8a2b06b65c700baf0a32

call_targets: 0xa950fbb5a56eda55c60de4aa99faf8504494283b

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xc7c45a1698d43dae3ec26f18b5cbb71972baea950dbf8a2b06b65c700baf0a32",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xa950fbb5a56eda55c60de4aa99faf8504494283b"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2c4e722e",
            "selector": "0x2c4e722e",
            "calldata_variants": [
                "0x2c4e722e",
                "0x2c4e722e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38af3eed",
            "selector": "0x38af3eed",
            "calldata_variants": [
                "0x38af3eed",
                "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x590e1ae3",
            "selector": "0x590e1ae3",
            "calldata_variants": [
                "0x590e1ae3",
                "0x590e1ae30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xac53a033",
            "selector": "0xac53a033",
            "calldata_variants": [
                "0xac53a033",
                "0xac53a0330000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xad816895",
            "selector": "0xad816895",
            "calldata_variants": [
                "0xad816895",
                "0xad8168950000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb071cbe6",
            "selector": "0xb071cbe6",
            "calldata_variants": [
                "0xb071cbe6",
                "0xb071cbe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1162,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1396,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1686,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 3
}