TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-ab5c-73c3-9bed-30e6c17b6c99

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
21005 artifact.fetch complete 1 / 3 3 months ago
21006 tool.cast_disasm complete 1 / 3 3 months ago
64558 analysis.bundle complete 1 / 3 2 weeks ago
64559 capability.graph complete 1 / 3 2 weeks ago
64560 detector.run complete 1 / 3 2 weeks ago
64561 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
2
Total opcodes
937
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0078
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002e: SWAP1
0000002f: DIV
00000030: PUSH4 0xffffffff
00000035: AND
00000036: DUP1
00000037: PUSH4 0x3a98ef39
0000003c: EQ
0000003d: PUSH2 0x007a
00000040: JUMPI
00000041: DUP1
00000042: PUSH4 0x4e71d92d
00000047: EQ
00000048: PUSH2 0x00a3
0000004b: JUMPI
0000004c: DUP1
0000004d: PUSH4 0x63037b0c
00000052: EQ
00000053: PUSH2 0x00b8
00000056: JUMPI
00000057: DUP1
00000058: PUSH4 0x9852595c
0000005d: EQ
0000005e: PUSH2 0x011b
00000061: JUMPI
00000062: DUP1
00000063: PUSH4 0xce7c2ac2
00000068: EQ
00000069: PUSH2 0x0168
0000006c: JUMPI
0000006d: DUP1
0000006e: PUSH4 0xe33b7de3
00000073: EQ
00000074: PUSH2 0x01b5
00000077: JUMPI
00000078: JUMPDEST
00000079: STOP
0000007a: JUMPDEST
0000007b: CALLVALUE
0000007c: ISZERO
0000007d: PUSH2 0x0085
00000080: JUMPI
00000081: PUSH1 0x00
00000083: DUP1
00000084: REVERT
00000085: JUMPDEST
00000086: PUSH2 0x008d
00000089: PUSH2 0x01de
0000008c: JUMP
0000008d: JUMPDEST
0000008e: PUSH1 0x40
00000090: MLOAD
00000091: DUP1
00000092: DUP3
00000093: DUP2
00000094: MSTORE
00000095: PUSH1 0x20
00000097: ADD
00000098: SWAP2
00000099: POP
0000009a: POP
0000009b: PUSH1 0x40
0000009d: MLOAD
0000009e: DUP1
0000009f: SWAP2
000000a0: SUB
000000a1: SWAP1
000000a2: RETURN
000000a3: JUMPDEST
000000a4: CALLVALUE
000000a5: ISZERO
000000a6: PUSH2 0x00ae
000000a9: JUMPI
000000aa: PUSH1 0x00
000000ac: DUP1
000000ad: REVERT
000000ae: JUMPDEST
000000af: PUSH2 0x00b6
000000b2: PUSH2 0x01e4
000000b5: JUMP
000000b6: JUMPDEST
000000b7: STOP
000000b8: JUMPDEST
000000b9: CALLVALUE
000000ba: ISZERO
000000bb: PUSH2 0x00c3
000000be: JUMPI
000000bf: PUSH1 0x00
000000c1: DUP1
000000c2: REVERT
000000c3: JUMPDEST
000000c4: PUSH2 0x00d9
000000c7: PUSH1 0x04
000000c9: DUP1
000000ca: DUP1
000000cb: CALLDATALOAD
000000cc: SWAP1
000000cd: PUSH1 0x20
000000cf: ADD
000000d0: SWAP1
000000d1: SWAP2
000000d2: SWAP1
000000d3: POP
000000d4: POP
000000d5: PUSH2 0x044c
000000d8: JUMP
000000d9: JUMPDEST
000000da: PUSH1 0x40
000000dc: MLOAD
000000dd: DUP1
000000de: DUP3
000000df: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000f4: AND
000000f5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000010a: AND
0000010b: DUP2
0000010c: MSTORE
0000010d: PUSH1 0x20
0000010f: ADD
00000110: SWAP2
00000111: POP
00000112: POP
00000113: PUSH1 0x40
00000115: MLOAD
00000116: DUP1
00000117: SWAP2
00000118: SUB
00000119: SWAP1
0000011a: RETURN
0000011b: JUMPDEST
0000011c: CALLVALUE
0000011d: ISZERO
0000011e: PUSH2 0x0126
00000121: JUMPI
00000122: PUSH1 0x00
00000124: DUP1
00000125: REVERT
00000126: JUMPDEST
00000127: PUSH2 0x0152
0000012a: PUSH1 0x04
0000012c: DUP1
0000012d: DUP1
0000012e: CALLDATALOAD
0000012f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000144: AND
00000145: SWAP1
00000146: PUSH1 0x20
00000148: ADD
00000149: SWAP1
0000014a: SWAP2
0000014b: SWAP1
0000014c: POP
0000014d: POP
0000014e: PUSH2 0x048b
00000151: JUMP
00000152: JUMPDEST
00000153: PUSH1 0x40
00000155: MLOAD
00000156: DUP1
00000157: DUP3
00000158: DUP2
00000159: MSTORE
0000015a: PUSH1 0x20
0000015c: ADD
0000015d: SWAP2
0000015e: POP
0000015f: POP
00000160: PUSH1 0x40
00000162: MLOAD
00000163: DUP1
00000164: SWAP2
00000165: SUB
00000166: SWAP1
00000167: RETURN
00000168: JUMPDEST
00000169: CALLVALUE
0000016a: ISZERO
0000016b: PUSH2 0x0173
0000016e: JUMPI
0000016f: PUSH1 0x00
00000171: DUP1
00000172: REVERT
00000173: JUMPDEST
00000174: PUSH2 0x019f
00000177: PUSH1 0x04
00000179: DUP1
0000017a: DUP1
0000017b: CALLDATALOAD
0000017c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000191: AND
00000192: SWAP1
00000193: PUSH1 0x20
00000195: ADD
00000196: SWAP1
00000197: SWAP2
00000198: SWAP1
00000199: POP
0000019a: POP
0000019b: PUSH2 0x04a3
0000019e: JUMP
0000019f: JUMPDEST
000001a0: PUSH1 0x40
000001a2: MLOAD
000001a3: DUP1
000001a4: DUP3
000001a5: DUP2
000001a6: MSTORE
000001a7: PUSH1 0x20
000001a9: ADD
000001aa: SWAP2
000001ab: POP
000001ac: POP
000001ad: PUSH1 0x40
000001af: MLOAD
000001b0: DUP1
000001b1: SWAP2
000001b2: SUB
000001b3: SWAP1
000001b4: RETURN
000001b5: JUMPDEST
000001b6: CALLVALUE
000001b7: ISZERO
000001b8: PUSH2 0x01c0
000001bb: JUMPI
000001bc: PUSH1 0x00
000001be: DUP1
000001bf: REVERT
000001c0: JUMPDEST
000001c1: PUSH2 0x01c8
000001c4: PUSH2 0x04bb
000001c7: JUMP
000001c8: JUMPDEST
000001c9: PUSH1 0x40
000001cb: MLOAD
000001cc: DUP1
000001cd: DUP3
000001ce: DUP2
000001cf: MSTORE
000001d0: PUSH1 0x20
000001d2: ADD
000001d3: SWAP2
000001d4: POP
000001d5: POP
000001d6: PUSH1 0x40
000001d8: MLOAD
000001d9: DUP1
000001da: SWAP2
000001db: SUB
000001dc: SWAP1
000001dd: RETURN
000001de: JUMPDEST
000001df: PUSH1 0x00
000001e1: SLOAD
000001e2: DUP2
000001e3: JUMP
000001e4: JUMPDEST
000001e5: PUSH1 0x00
000001e7: DUP1
000001e8: PUSH1 0x00
000001ea: CALLER
000001eb: SWAP3
000001ec: POP
000001ed: PUSH1 0x00
000001ef: PUSH1 0x02
000001f1: PUSH1 0x00
000001f3: DUP6
000001f4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000209: AND
0000020a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000021f: AND
00000220: DUP2
00000221: MSTORE
00000222: PUSH1 0x20
00000224: ADD
00000225: SWAP1
00000226: DUP2
00000227: MSTORE
00000228: PUSH1 0x20
0000022a: ADD
0000022b: PUSH1 0x00
0000022d: KECCAK256
0000022e: SLOAD
0000022f: GT
00000230: ISZERO
00000231: ISZERO
00000232: PUSH2 0x023a
00000235: JUMPI
00000236: PUSH1 0x00
00000238: DUP1
00000239: REVERT
0000023a: JUMPDEST
0000023b: PUSH2 0x0266
0000023e: PUSH1 0x01
00000240: SLOAD
00000241: ADDRESS
00000242: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000257: AND
00000258: BALANCE
00000259: PUSH2 0x04c1
0000025c: SWAP1
0000025d: SWAP2
0000025e: SWAP1
0000025f: PUSH4 0xffffffff
00000264: AND
00000265: JUMP
00000266: JUMPDEST
00000267: SWAP2
00000268: POP
00000269: PUSH2 0x031f
0000026c: PUSH1 0x03
0000026e: PUSH1 0x00
00000270: DUP6
00000271: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000286: AND
00000287: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000029c: AND
0000029d: DUP2
0000029e: MSTORE
0000029f: PUSH1 0x20
000002a1: ADD
000002a2: SWAP1
000002a3: DUP2
000002a4: MSTORE
000002a5: PUSH1 0x20
000002a7: ADD
000002a8: PUSH1 0x00
000002aa: KECCAK256
000002ab: SLOAD
000002ac: PUSH2 0x0311
000002af: PUSH1 0x00
000002b1: SLOAD
000002b2: PUSH2 0x0303
000002b5: PUSH1 0x02
000002b7: PUSH1 0x00
000002b9: DUP10
000002ba: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002cf: AND
000002d0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002e5: AND
000002e6: DUP2
000002e7: MSTORE
000002e8: PUSH1 0x20
000002ea: ADD
000002eb: SWAP1
000002ec: DUP2
000002ed: MSTORE
000002ee: PUSH1 0x20
000002f0: ADD
000002f1: PUSH1 0x00
000002f3: KECCAK256
000002f4: SLOAD
000002f5: DUP8
000002f6: PUSH2 0x04df
000002f9: SWAP1
000002fa: SWAP2
000002fb: SWAP1
000002fc: PUSH4 0xffffffff
00000301: AND
00000302: JUMP
00000303: JUMPDEST
00000304: PUSH2 0x051a
00000307: SWAP1
00000308: SWAP2
00000309: SWAP1
0000030a: PUSH4 0xffffffff
0000030f: AND
00000310: JUMP
00000311: JUMPDEST
00000312: PUSH2 0x0535
00000315: SWAP1
00000316: SWAP2
00000317: SWAP1
00000318: PUSH4 0xffffffff
0000031d: AND
0000031e: JUMP
0000031f: JUMPDEST
00000320: SWAP1
00000321: POP
00000322: PUSH1 0x00
00000324: DUP2
00000325: EQ
00000326: ISZERO
00000327: ISZERO
00000328: ISZERO
00000329: PUSH2 0x0331
0000032c: JUMPI
0000032d: PUSH1 0x00
0000032f: DUP1
00000330: REVERT
00000331: JUMPDEST
00000332: DUP1
00000333: ADDRESS
00000334: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000349: AND
0000034a: BALANCE
0000034b: LT
0000034c: ISZERO
0000034d: ISZERO
0000034e: ISZERO
0000034f: PUSH2 0x0357
00000352: JUMPI
00000353: PUSH1 0x00
00000355: DUP1
00000356: REVERT
00000357: JUMPDEST
00000358: PUSH2 0x03a9
0000035b: DUP2
0000035c: PUSH1 0x03
0000035e: PUSH1 0x00
00000360: DUP7
00000361: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000376: AND
00000377: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000038c: AND
0000038d: DUP2
0000038e: MSTORE
0000038f: PUSH1 0x20
00000391: ADD
00000392: SWAP1
00000393: DUP2
00000394: MSTORE
00000395: PUSH1 0x20
00000397: ADD
00000398: PUSH1 0x00
0000039a: KECCAK256
0000039b: SLOAD
0000039c: PUSH2 0x04c1
0000039f: SWAP1
000003a0: SWAP2
000003a1: SWAP1
000003a2: PUSH4 0xffffffff
000003a7: AND
000003a8: JUMP
000003a9: JUMPDEST
000003aa: PUSH1 0x03
000003ac: PUSH1 0x00
000003ae: DUP6
000003af: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003c4: AND
000003c5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003da: AND
000003db: DUP2
000003dc: MSTORE
000003dd: PUSH1 0x20
000003df: ADD
000003e0: SWAP1
000003e1: DUP2
000003e2: MSTORE
000003e3: PUSH1 0x20
000003e5: ADD
000003e6: PUSH1 0x00
000003e8: KECCAK256
000003e9: DUP2
000003ea: SWAP1
000003eb: SSTORE
000003ec: POP
000003ed: PUSH2 0x0401
000003f0: DUP2
000003f1: PUSH1 0x01
000003f3: SLOAD
000003f4: PUSH2 0x04c1
000003f7: SWAP1
000003f8: SWAP2
000003f9: SWAP1
000003fa: PUSH4 0xffffffff
000003ff: AND
00000400: JUMP
00000401: JUMPDEST
00000402: PUSH1 0x01
00000404: DUP2
00000405: SWAP1
00000406: SSTORE
00000407: POP
00000408: DUP3
00000409: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000041e: AND
0000041f: PUSH2 0x08fc
00000422: DUP3
00000423: SWAP1
00000424: DUP2
00000425: ISZERO
00000426: MUL
00000427: SWAP1
00000428: PUSH1 0x40
0000042a: MLOAD
0000042b: PUSH1 0x00
0000042d: PUSH1 0x40
0000042f: MLOAD
00000430: DUP1
00000431: DUP4
00000432: SUB
00000433: DUP2
00000434: DUP6
00000435: DUP9
00000436: DUP9
00000437: CALL
00000438: SWAP4
00000439: POP
0000043a: POP
0000043b: POP
0000043c: POP
0000043d: ISZERO
0000043e: ISZERO
0000043f: PUSH2 0x0447
00000442: JUMPI
00000443: PUSH1 0x00
00000445: DUP1
00000446: REVERT
00000447: JUMPDEST
00000448: POP
00000449: POP
0000044a: POP
0000044b: JUMP
0000044c: JUMPDEST
0000044d: PUSH1 0x04
0000044f: DUP2
00000450: DUP2
00000451: SLOAD
00000452: DUP2
00000453: LT
00000454: ISZERO
00000455: ISZERO
00000456: PUSH2 0x045b
00000459: JUMPI
0000045a: INVALID
0000045b: JUMPDEST
0000045c: SWAP1
0000045d: PUSH1 0x00
0000045f: MSTORE
00000460: PUSH1 0x20
00000462: PUSH1 0x00
00000464: KECCAK256
00000465: SWAP1
00000466: ADD
00000467: PUSH1 0x00
00000469: SWAP2
0000046a: POP
0000046b: SLOAD
0000046c: SWAP1
0000046d: PUSH2 0x0100
00000470: EXP
00000471: SWAP1
00000472: DIV
00000473: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000488: AND
00000489: DUP2
0000048a: JUMP
0000048b: JUMPDEST
0000048c: PUSH1 0x03
0000048e: PUSH1 0x20
00000490: MSTORE
00000491: DUP1
00000492: PUSH1 0x00
00000494: MSTORE
00000495: PUSH1 0x40
00000497: PUSH1 0x00
00000499: KECCAK256
0000049a: PUSH1 0x00
0000049c: SWAP2
0000049d: POP
0000049e: SWAP1
0000049f: POP
000004a0: SLOAD
000004a1: DUP2
000004a2: JUMP
000004a3: JUMPDEST
000004a4: PUSH1 0x02
000004a6: PUSH1 0x20
000004a8: MSTORE
000004a9: DUP1
000004aa: PUSH1 0x00
000004ac: MSTORE
000004ad: PUSH1 0x40
000004af: PUSH1 0x00
000004b1: KECCAK256
000004b2: PUSH1 0x00
000004b4: SWAP2
000004b5: POP
000004b6: SWAP1
000004b7: POP
000004b8: SLOAD
000004b9: DUP2
000004ba: JUMP
000004bb: JUMPDEST
000004bc: PUSH1 0x01
000004be: SLOAD
000004bf: DUP2
000004c0: JUMP
000004c1: JUMPDEST
000004c2: PUSH1 0x00
000004c4: DUP1
000004c5: DUP3
000004c6: DUP5
000004c7: ADD
000004c8: SWAP1
000004c9: POP
000004ca: DUP4
000004cb: DUP2
000004cc: LT
000004cd: ISZERO
000004ce: ISZERO
000004cf: ISZERO
000004d0: PUSH2 0x04d5
000004d3: JUMPI
000004d4: INVALID
000004d5: JUMPDEST
000004d6: DUP1
000004d7: SWAP2
000004d8: POP
000004d9: POP
000004da: SWAP3
000004db: SWAP2
000004dc: POP
000004dd: POP
000004de: JUMP
000004df: JUMPDEST
000004e0: PUSH1 0x00
000004e2: DUP1
000004e3: PUSH1 0x00
000004e5: DUP5
000004e6: EQ
000004e7: ISZERO
000004e8: PUSH2 0x04f4
000004eb: JUMPI
000004ec: PUSH1 0x00
000004ee: SWAP2
000004ef: POP
000004f0: PUSH2 0x0513
000004f3: JUMP
000004f4: JUMPDEST
000004f5: DUP3
000004f6: DUP5
000004f7: MUL
000004f8: SWAP1
000004f9: POP
000004fa: DUP3
000004fb: DUP5
000004fc: DUP3
000004fd: DUP2
000004fe: ISZERO
000004ff: ISZERO
00000500: PUSH2 0x0505
00000503: JUMPI
00000504: INVALID
00000505: JUMPDEST
00000506: DIV
00000507: EQ
00000508: ISZERO
00000509: ISZERO
0000050a: PUSH2 0x050f
0000050d: JUMPI
0000050e: INVALID
0000050f: JUMPDEST
00000510: DUP1
00000511: SWAP2
00000512: POP
00000513: JUMPDEST
00000514: POP
00000515: SWAP3
00000516: SWAP2
00000517: POP
00000518: POP
00000519: JUMP
0000051a: JUMPDEST
0000051b: PUSH1 0x00
0000051d: DUP1
0000051e: DUP3
0000051f: DUP5
00000520: DUP2
00000521: ISZERO
00000522: ISZERO
00000523: PUSH2 0x0528
00000526: JUMPI
00000527: INVALID
00000528: JUMPDEST
00000529: DIV
0000052a: SWAP1
0000052b: POP
0000052c: DUP1
0000052d: SWAP2
0000052e: POP
0000052f: POP
00000530: SWAP3
00000531: SWAP2
00000532: POP
00000533: POP
00000534: JUMP
00000535: JUMPDEST
00000536: PUSH1 0x00
00000538: DUP3
00000539: DUP3
0000053a: GT
0000053b: ISZERO
0000053c: ISZERO
0000053d: ISZERO
0000053e: PUSH2 0x0543
00000541: JUMPI
00000542: INVALID
00000543: JUMPDEST
00000544: DUP2
00000545: DUP4
00000546: SUB
00000547: SWAP1
00000548: POP
00000549: SWAP3
0000054a: SWAP2
0000054b: POP
0000054c: POP
0000054d: JUMP
0000054e: JUMPDEST
0000054f: PUSH1 0x00
00000551: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000566: AND
00000567: DUP3
00000568: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000057d: AND
0000057e: EQ
0000057f: ISZERO
00000580: ISZERO
00000581: ISZERO
00000582: PUSH2 0x058a
00000585: JUMPI
00000586: PUSH1 0x00
00000588: DUP1
00000589: REVERT
0000058a: JUMPDEST
0000058b: PUSH1 0x00
0000058d: DUP2
0000058e: GT
0000058f: ISZERO
00000590: ISZERO
00000591: PUSH2 0x0599
00000594: JUMPI
00000595: PUSH1 0x00
00000597: DUP1
00000598: REVERT
00000599: JUMPDEST
0000059a: PUSH1 0x00
0000059c: PUSH1 0x02
0000059e: PUSH1 0x00
000005a0: DUP5
000005a1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005b6: AND
000005b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005cc: AND
000005cd: DUP2
000005ce: MSTORE
000005cf: PUSH1 0x20
000005d1: ADD
000005d2: SWAP1
000005d3: DUP2
000005d4: MSTORE
000005d5: PUSH1 0x20
000005d7: ADD
000005d8: PUSH1 0x00
000005da: KECCAK256
000005db: SLOAD
000005dc: EQ
000005dd: ISZERO
000005de: ISZERO
000005df: PUSH2 0x05e7
000005e2: JUMPI
000005e3: PUSH1 0x00
000005e5: DUP1
000005e6: REVERT
000005e7: JUMPDEST
000005e8: PUSH1 0x04
000005ea: DUP1
000005eb: SLOAD
000005ec: DUP1
000005ed: PUSH1 0x01
000005ef: ADD
000005f0: DUP3
000005f1: DUP2
000005f2: PUSH2 0x05fb
000005f5: SWAP2
000005f6: SWAP1
000005f7: PUSH2 0x06ad
000005fa: JUMP
000005fb: JUMPDEST
000005fc: SWAP2
000005fd: PUSH1 0x00
000005ff: MSTORE
00000600: PUSH1 0x20
00000602: PUSH1 0x00
00000604: KECCAK256
00000605: SWAP1
00000606: ADD
00000607: PUSH1 0x00
00000609: DUP5
0000060a: SWAP1
0000060b: SWAP2
0000060c: SWAP1
0000060d: SWAP2
0000060e: PUSH2 0x0100
00000611: EXP
00000612: DUP2
00000613: SLOAD
00000614: DUP2
00000615: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000062a: MUL
0000062b: NOT
0000062c: AND
0000062d: SWAP1
0000062e: DUP4
0000062f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000644: AND
00000645: MUL
00000646: OR
00000647: SWAP1
00000648: SSTORE
00000649: POP
0000064a: POP
0000064b: DUP1
0000064c: PUSH1 0x02
0000064e: PUSH1 0x00
00000650: DUP5
00000651: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000666: AND
00000667: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000067c: AND
0000067d: DUP2
0000067e: MSTORE
0000067f: PUSH1 0x20
00000681: ADD
00000682: SWAP1
00000683: DUP2
00000684: MSTORE
00000685: PUSH1 0x20
00000687: ADD
00000688: PUSH1 0x00
0000068a: KECCAK256
0000068b: DUP2
0000068c: SWAP1
0000068d: SSTORE
0000068e: POP
0000068f: PUSH2 0x06a3
00000692: DUP2
00000693: PUSH1 0x00
00000695: SLOAD
00000696: PUSH2 0x04c1
00000699: SWAP1
0000069a: SWAP2
0000069b: SWAP1
0000069c: PUSH4 0xffffffff
000006a1: AND
000006a2: JUMP
000006a3: JUMPDEST
000006a4: PUSH1 0x00
000006a6: DUP2
000006a7: SWAP1
000006a8: SSTORE
000006a9: POP
000006aa: POP
000006ab: POP
000006ac: JUMP
000006ad: JUMPDEST
000006ae: DUP2
000006af: SLOAD
000006b0: DUP2
000006b1: DUP4
000006b2: SSTORE
000006b3: DUP2
000006b4: DUP2
000006b5: ISZERO
000006b6: GT
000006b7: PUSH2 0x06d4
000006ba: JUMPI
000006bb: DUP2
000006bc: DUP4
000006bd: PUSH1 0x00
000006bf: MSTORE
000006c0: PUSH1 0x20
000006c2: PUSH1 0x00
000006c4: KECCAK256
000006c5: SWAP2
000006c6: DUP3
000006c7: ADD
000006c8: SWAP2
000006c9: ADD
000006ca: PUSH2 0x06d3
000006cd: SWAP2
000006ce: SWAP1
000006cf: PUSH2 0x06d9
000006d2: JUMP
000006d3: JUMPDEST
000006d4: JUMPDEST
000006d5: POP
000006d6: POP
000006d7: POP
000006d8: JUMP
000006d9: JUMPDEST
000006da: PUSH2 0x06fb
000006dd: SWAP2
000006de: SWAP1
000006df: JUMPDEST
000006e0: DUP1
000006e1: DUP3
000006e2: GT
000006e3: ISZERO
000006e4: PUSH2 0x06f7
000006e7: JUMPI
000006e8: PUSH1 0x00
000006ea: DUP2
000006eb: PUSH1 0x00
000006ed: SWAP1
000006ee: SSTORE
000006ef: POP
000006f0: PUSH1 0x01
000006f2: ADD
000006f3: PUSH2 0x06df
000006f6: JUMP
000006f7: JUMPDEST
000006f8: POP
000006f9: SWAP1
000006fa: JUMP
000006fb: JUMPDEST
000006fc: SWAP1
000006fd: JUMP
000006fe: STOP
000006ff: LOG1
00000700: PUSH6 0x627a7a723058
00000707: KECCAK256
00000708: UNKNOWN(0xE5)
00000709: PUSH28 0x776e3fb2bb7fd7c95d22fd36390945048a805809481b62c8e374a1dc
00000726: UNKNOWN(0xB7)
00000727: PUSH12

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xc3c06d2118ee3683db5de2fb49dbecae358fe565a819bcf6792c06244761f16a
call_targets: 0x388a037ab169b128e70cf67e1228ecd03f0400f2
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xc3c06d2118ee3683db5de2fb49dbecae358fe565a819bcf6792c06244761f16a",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x388a037ab169b128e70cf67e1228ecd03f0400f2"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3a98ef39",
            "selector": "0x3a98ef39",
            "calldata_variants": [
                "0x3a98ef39",
                "0x3a98ef390000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4e71d92d",
            "selector": "0x4e71d92d",
            "calldata_variants": [
                "0x4e71d92d",
                "0x4e71d92d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x63037b0c",
            "selector": "0x63037b0c",
            "calldata_variants": [
                "0x63037b0c",
                "0x63037b0c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9852595c",
            "selector": "0x9852595c",
            "calldata_variants": [
                "0x9852595c",
                "0x9852595c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xce7c2ac2",
            "selector": "0xce7c2ac2",
            "calldata_variants": [
                "0xce7c2ac2",
                "0xce7c2ac20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe33b7de3",
            "selector": "0xe33b7de3",
            "calldata_variants": [
                "0xe33b7de3",
                "0xe33b7de30000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1079,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [],
    "untrusted_call_count": 1
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xc3c06d2118ee3683db5de2fb49dbecae358fe565a819bcf6792c06244761f16a
call_targets: 0x388a037ab169b128e70cf67e1228ecd03f0400f2
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xc3c06d2118ee3683db5de2fb49dbecae358fe565a819bcf6792c06244761f16a",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x388a037ab169b128e70cf67e1228ecd03f0400f2"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3a98ef39",
            "selector": "0x3a98ef39",
            "calldata_variants": [
                "0x3a98ef39",
                "0x3a98ef390000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4e71d92d",
            "selector": "0x4e71d92d",
            "calldata_variants": [
                "0x4e71d92d",
                "0x4e71d92d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x63037b0c",
            "selector": "0x63037b0c",
            "calldata_variants": [
                "0x63037b0c",
                "0x63037b0c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9852595c",
            "selector": "0x9852595c",
            "calldata_variants": [
                "0x9852595c",
                "0x9852595c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xce7c2ac2",
            "selector": "0xce7c2ac2",
            "calldata_variants": [
                "0xce7c2ac2",
                "0xce7c2ac20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe33b7de3",
            "selector": "0xe33b7de3",
            "calldata_variants": [
                "0xe33b7de3",
                "0xe33b7de30000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1079,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": []
}