Analysis Run

019b477e-aebe-72ab-8e4a-34e8a0f4c0ef

complete

Chain ID

1

Address

0x69eb1037b2a3ead89ab7450d6f28828a8c913fdb

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
21645	artifact.fetch	complete	1 / 3	4 months ago
21646	tool.cast_disasm	complete	1 / 3	4 months ago
64954	analysis.bundle	complete	1 / 3	2 weeks ago
64955	capability.graph	complete	1 / 3	2 weeks ago
64956	detector.run	complete	1 / 3	2 weeks ago
64957	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

2

EXT*/BALANCE

1

Total opcodes

1115

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0099
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002e: SWAP1
0000002f: DIV
00000030: PUSH4 0xffffffff
00000035: AND
00000036: DUP1
00000037: PUSH4 0x43d726d6
0000003c: EQ
0000003d: PUSH2 0x009e
00000040: JUMPI
00000041: DUP1
00000042: PUSH4 0x521eb273
00000047: EQ
00000048: PUSH2 0x00b5
0000004b: JUMPI
0000004c: DUP1
0000004d: PUSH4 0x8c52dc41
00000052: EQ
00000053: PUSH2 0x010c
00000056: JUMPI
00000057: DUP1
00000058: PUSH4 0x8da5cb5b
0000005d: EQ
0000005e: PUSH2 0x0123
00000061: JUMPI
00000062: DUP1
00000063: PUSH4 0xc19d93fb
00000068: EQ
00000069: PUSH2 0x017a
0000006c: JUMPI
0000006d: DUP1
0000006e: PUSH4 0xcb13cddb
00000073: EQ
00000074: PUSH2 0x01b3
00000077: JUMPI
00000078: DUP1
00000079: PUSH4 0xf2fde38b
0000007e: EQ
0000007f: PUSH2 0x020a
00000082: JUMPI
00000083: DUP1
00000084: PUSH4 0xf340fa01
00000089: EQ
0000008a: PUSH2 0x024d
0000008d: JUMPI
0000008e: DUP1
0000008f: PUSH4 0xfa89401a
00000094: EQ
00000095: PUSH2 0x0283
00000098: JUMPI
00000099: JUMPDEST
0000009a: PUSH1 0x00
0000009c: DUP1
0000009d: REVERT
0000009e: JUMPDEST
0000009f: CALLVALUE
000000a0: DUP1
000000a1: ISZERO
000000a2: PUSH2 0x00aa
000000a5: JUMPI
000000a6: PUSH1 0x00
000000a8: DUP1
000000a9: REVERT
000000aa: JUMPDEST
000000ab: POP
000000ac: PUSH2 0x00b3
000000af: PUSH2 0x02c6
000000b2: JUMP
000000b3: JUMPDEST
000000b4: STOP
000000b5: JUMPDEST
000000b6: CALLVALUE
000000b7: DUP1
000000b8: ISZERO
000000b9: PUSH2 0x00c1
000000bc: JUMPI
000000bd: PUSH1 0x00
000000bf: DUP1
000000c0: REVERT
000000c1: JUMPDEST
000000c2: POP
000000c3: PUSH2 0x00ca
000000c6: PUSH2 0x02d0
000000c9: JUMP
000000ca: JUMPDEST
000000cb: PUSH1 0x40
000000cd: MLOAD
000000ce: DUP1
000000cf: DUP3
000000d0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000e5: AND
000000e6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000fb: AND
000000fc: DUP2
000000fd: MSTORE
000000fe: PUSH1 0x20
00000100: ADD
00000101: SWAP2
00000102: POP
00000103: POP
00000104: PUSH1 0x40
00000106: MLOAD
00000107: DUP1
00000108: SWAP2
00000109: SUB
0000010a: SWAP1
0000010b: RETURN
0000010c: JUMPDEST
0000010d: CALLVALUE
0000010e: DUP1
0000010f: ISZERO
00000110: PUSH2 0x0118
00000113: JUMPI
00000114: PUSH1 0x00
00000116: DUP1
00000117: REVERT
00000118: JUMPDEST
00000119: POP
0000011a: PUSH2 0x0121
0000011d: PUSH2 0x02f6
00000120: JUMP
00000121: JUMPDEST
00000122: STOP
00000123: JUMPDEST
00000124: CALLVALUE
00000125: DUP1
00000126: ISZERO
00000127: PUSH2 0x012f
0000012a: JUMPI
0000012b: PUSH1 0x00
0000012d: DUP1
0000012e: REVERT
0000012f: JUMPDEST
00000130: POP
00000131: PUSH2 0x0138
00000134: PUSH2 0x0300
00000137: JUMP
00000138: JUMPDEST
00000139: PUSH1 0x40
0000013b: MLOAD
0000013c: DUP1
0000013d: DUP3
0000013e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000153: AND
00000154: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000169: AND
0000016a: DUP2
0000016b: MSTORE
0000016c: PUSH1 0x20
0000016e: ADD
0000016f: SWAP2
00000170: POP
00000171: POP
00000172: PUSH1 0x40
00000174: MLOAD
00000175: DUP1
00000176: SWAP2
00000177: SUB
00000178: SWAP1
00000179: RETURN
0000017a: JUMPDEST
0000017b: CALLVALUE
0000017c: DUP1
0000017d: ISZERO
0000017e: PUSH2 0x0186
00000181: JUMPI
00000182: PUSH1 0x00
00000184: DUP1
00000185: REVERT
00000186: JUMPDEST
00000187: POP
00000188: PUSH2 0x018f
0000018b: PUSH2 0x0325
0000018e: JUMP
0000018f: JUMPDEST
00000190: PUSH1 0x40
00000192: MLOAD
00000193: DUP1
00000194: DUP3
00000195: PUSH1 0x02
00000197: DUP2
00000198: GT
00000199: ISZERO
0000019a: PUSH2 0x019f
0000019d: JUMPI
0000019e: INVALID
0000019f: JUMPDEST
000001a0: PUSH1 0xff
000001a2: AND
000001a3: DUP2
000001a4: MSTORE
000001a5: PUSH1 0x20
000001a7: ADD
000001a8: SWAP2
000001a9: POP
000001aa: POP
000001ab: PUSH1 0x40
000001ad: MLOAD
000001ae: DUP1
000001af: SWAP2
000001b0: SUB
000001b1: SWAP1
000001b2: RETURN
000001b3: JUMPDEST
000001b4: CALLVALUE
000001b5: DUP1
000001b6: ISZERO
000001b7: PUSH2 0x01bf
000001ba: JUMPI
000001bb: PUSH1 0x00
000001bd: DUP1
000001be: REVERT
000001bf: JUMPDEST
000001c0: POP
000001c1: PUSH2 0x01f4
000001c4: PUSH1 0x04
000001c6: DUP1
000001c7: CALLDATASIZE
000001c8: SUB
000001c9: DUP2
000001ca: ADD
000001cb: SWAP1
000001cc: DUP1
000001cd: DUP1
000001ce: CALLDATALOAD
000001cf: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001e4: AND
000001e5: SWAP1
000001e6: PUSH1 0x20
000001e8: ADD
000001e9: SWAP1
000001ea: SWAP3
000001eb: SWAP2
000001ec: SWAP1
000001ed: POP
000001ee: POP
000001ef: POP
000001f0: PUSH2 0x0338
000001f3: JUMP
000001f4: JUMPDEST
000001f5: PUSH1 0x40
000001f7: MLOAD
000001f8: DUP1
000001f9: DUP3
000001fa: DUP2
000001fb: MSTORE
000001fc: PUSH1 0x20
000001fe: ADD
000001ff: SWAP2
00000200: POP
00000201: POP
00000202: PUSH1 0x40
00000204: MLOAD
00000205: DUP1
00000206: SWAP2
00000207: SUB
00000208: SWAP1
00000209: RETURN
0000020a: JUMPDEST
0000020b: CALLVALUE
0000020c: DUP1
0000020d: ISZERO
0000020e: PUSH2 0x0216
00000211: JUMPI
00000212: PUSH1 0x00
00000214: DUP1
00000215: REVERT
00000216: JUMPDEST
00000217: POP
00000218: PUSH2 0x024b
0000021b: PUSH1 0x04
0000021d: DUP1
0000021e: CALLDATASIZE
0000021f: SUB
00000220: DUP2
00000221: ADD
00000222: SWAP1
00000223: DUP1
00000224: DUP1
00000225: CALLDATALOAD
00000226: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000023b: AND
0000023c: SWAP1
0000023d: PUSH1 0x20
0000023f: ADD
00000240: SWAP1
00000241: SWAP3
00000242: SWAP2
00000243: SWAP1
00000244: POP
00000245: POP
00000246: POP
00000247: PUSH2 0x0350
0000024a: JUMP
0000024b: JUMPDEST
0000024c: STOP
0000024d: JUMPDEST
0000024e: PUSH2 0x0281
00000251: PUSH1 0x04
00000253: DUP1
00000254: CALLDATASIZE
00000255: SUB
00000256: DUP2
00000257: ADD
00000258: SWAP1
00000259: DUP1
0000025a: DUP1
0000025b: CALLDATALOAD
0000025c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000271: AND
00000272: SWAP1
00000273: PUSH1 0x20
00000275: ADD
00000276: SWAP1
00000277: SWAP3
00000278: SWAP2
00000279: SWAP1
0000027a: POP
0000027b: POP
0000027c: POP
0000027d: PUSH2 0x04a5
00000280: JUMP
00000281: JUMPDEST
00000282: STOP
00000283: JUMPDEST
00000284: CALLVALUE
00000285: DUP1
00000286: ISZERO
00000287: PUSH2 0x028f
0000028a: JUMPI
0000028b: PUSH1 0x00
0000028d: DUP1
0000028e: REVERT
0000028f: JUMPDEST
00000290: POP
00000291: PUSH2 0x02c4
00000294: PUSH1 0x04
00000296: DUP1
00000297: CALLDATASIZE
00000298: SUB
00000299: DUP2
0000029a: ADD
0000029b: SWAP1
0000029c: DUP1
0000029d: DUP1
0000029e: CALLDATALOAD
0000029f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002b4: AND
000002b5: SWAP1
000002b6: PUSH1 0x20
000002b8: ADD
000002b9: SWAP1
000002ba: SWAP3
000002bb: SWAP2
000002bc: SWAP1
000002bd: POP
000002be: POP
000002bf: POP
000002c0: PUSH2 0x04b1
000002c3: JUMP
000002c4: JUMPDEST
000002c5: STOP
000002c6: JUMPDEST
000002c7: PUSH2 0x02ce
000002ca: PUSH2 0x04bd
000002cd: JUMP
000002ce: JUMPDEST
000002cf: JUMP
000002d0: JUMPDEST
000002d1: PUSH1 0x02
000002d3: PUSH1 0x00
000002d5: SWAP1
000002d6: SLOAD
000002d7: SWAP1
000002d8: PUSH2 0x0100
000002db: EXP
000002dc: SWAP1
000002dd: DIV
000002de: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002f3: AND
000002f4: DUP2
000002f5: JUMP
000002f6: JUMPDEST
000002f7: PUSH2 0x02fe
000002fa: PUSH2 0x061d
000002fd: JUMP
000002fe: JUMPDEST
000002ff: JUMP
00000300: JUMPDEST
00000301: PUSH1 0x00
00000303: DUP1
00000304: SWAP1
00000305: SLOAD
00000306: SWAP1
00000307: PUSH2 0x0100
0000030a: EXP
0000030b: SWAP1
0000030c: DIV
0000030d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000322: AND
00000323: DUP2
00000324: JUMP
00000325: JUMPDEST
00000326: PUSH1 0x02
00000328: PUSH1 0x14
0000032a: SWAP1
0000032b: SLOAD
0000032c: SWAP1
0000032d: PUSH2 0x0100
00000330: EXP
00000331: SWAP1
00000332: DIV
00000333: PUSH1 0xff
00000335: AND
00000336: DUP2
00000337: JUMP
00000338: JUMPDEST
00000339: PUSH1 0x01
0000033b: PUSH1 0x20
0000033d: MSTORE
0000033e: DUP1
0000033f: PUSH1 0x00
00000341: MSTORE
00000342: PUSH1 0x40
00000344: PUSH1 0x00
00000346: KECCAK256
00000347: PUSH1 0x00
00000349: SWAP2
0000034a: POP
0000034b: SWAP1
0000034c: POP
0000034d: SLOAD
0000034e: DUP2
0000034f: JUMP
00000350: JUMPDEST
00000351: PUSH1 0x00
00000353: DUP1
00000354: SWAP1
00000355: SLOAD
00000356: SWAP1
00000357: PUSH2 0x0100
0000035a: EXP
0000035b: SWAP1
0000035c: DIV
0000035d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000372: AND
00000373: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000388: AND
00000389: CALLER
0000038a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000039f: AND
000003a0: EQ
000003a1: ISZERO
000003a2: ISZERO
000003a3: PUSH2 0x03ab
000003a6: JUMPI
000003a7: PUSH1 0x00
000003a9: DUP1
000003aa: REVERT
000003ab: JUMPDEST
000003ac: PUSH1 0x00
000003ae: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003c3: AND
000003c4: DUP2
000003c5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003da: AND
000003db: EQ
000003dc: ISZERO
000003dd: ISZERO
000003de: ISZERO
000003df: PUSH2 0x03e7
000003e2: JUMPI
000003e3: PUSH1 0x00
000003e5: DUP1
000003e6: REVERT
000003e7: JUMPDEST
000003e8: DUP1
000003e9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003fe: AND
000003ff: PUSH1 0x00
00000401: DUP1
00000402: SWAP1
00000403: SLOAD
00000404: SWAP1
00000405: PUSH2 0x0100
00000408: EXP
00000409: SWAP1
0000040a: DIV
0000040b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000420: AND
00000421: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000436: AND
00000437: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
00000458: PUSH1 0x40
0000045a: MLOAD
0000045b: PUSH1 0x40
0000045d: MLOAD
0000045e: DUP1
0000045f: SWAP2
00000460: SUB
00000461: SWAP1
00000462: LOG3
00000463: DUP1
00000464: PUSH1 0x00
00000466: DUP1
00000467: PUSH2 0x0100
0000046a: EXP
0000046b: DUP2
0000046c: SLOAD
0000046d: DUP2
0000046e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000483: MUL
00000484: NOT
00000485: AND
00000486: SWAP1
00000487: DUP4
00000488: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000049d: AND
0000049e: MUL
0000049f: OR
000004a0: SWAP1
000004a1: SSTORE
000004a2: POP
000004a3: POP
000004a4: JUMP
000004a5: JUMPDEST
000004a6: PUSH2 0x04ae
000004a9: DUP2
000004aa: PUSH2 0x06fe
000004ad: JUMP
000004ae: JUMPDEST
000004af: POP
000004b0: JUMP
000004b1: JUMPDEST
000004b2: PUSH2 0x04ba
000004b5: DUP2
000004b6: PUSH2 0x0825
000004b9: JUMP
000004ba: JUMPDEST
000004bb: POP
000004bc: JUMP
000004bd: JUMPDEST
000004be: PUSH1 0x00
000004c0: DUP1
000004c1: SWAP1
000004c2: SLOAD
000004c3: SWAP1
000004c4: PUSH2 0x0100
000004c7: EXP
000004c8: SWAP1
000004c9: DIV
000004ca: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004df: AND
000004e0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004f5: AND
000004f6: CALLER
000004f7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000050c: AND
0000050d: EQ
0000050e: ISZERO
0000050f: ISZERO
00000510: PUSH2 0x0518
00000513: JUMPI
00000514: PUSH1 0x00
00000516: DUP1
00000517: REVERT
00000518: JUMPDEST
00000519: PUSH1 0x00
0000051b: PUSH1 0x02
0000051d: DUP2
0000051e: GT
0000051f: ISZERO
00000520: PUSH2 0x0525
00000523: JUMPI
00000524: INVALID
00000525: JUMPDEST
00000526: PUSH1 0x02
00000528: PUSH1 0x14
0000052a: SWAP1
0000052b: SLOAD
0000052c: SWAP1
0000052d: PUSH2 0x0100
00000530: EXP
00000531: SWAP1
00000532: DIV
00000533: PUSH1 0xff
00000535: AND
00000536: PUSH1 0x02
00000538: DUP2
00000539: GT
0000053a: ISZERO
0000053b: PUSH2 0x0540
0000053e: JUMPI
0000053f: INVALID
00000540: JUMPDEST
00000541: EQ
00000542: ISZERO
00000543: ISZERO
00000544: PUSH2 0x054c
00000547: JUMPI
00000548: PUSH1 0x00
0000054a: DUP1
0000054b: REVERT
0000054c: JUMPDEST
0000054d: PUSH1 0x02
0000054f: DUP1
00000550: PUSH1 0x14
00000552: PUSH2 0x0100
00000555: EXP
00000556: DUP2
00000557: SLOAD
00000558: DUP2
00000559: PUSH1 0xff
0000055b: MUL
0000055c: NOT
0000055d: AND
0000055e: SWAP1
0000055f: DUP4
00000560: PUSH1 0x02
00000562: DUP2
00000563: GT
00000564: ISZERO
00000565: PUSH2 0x056a
00000568: JUMPI
00000569: INVALID
0000056a: JUMPDEST
0000056b: MUL
0000056c: OR
0000056d: SWAP1
0000056e: SSTORE
0000056f: POP
00000570: PUSH32 0x1cdde67b72a90f19919ac732a437ac2f7a10fc128d28c2a6e525d89ce5cd9d3a
00000591: PUSH1 0x40
00000593: MLOAD
00000594: PUSH1 0x40
00000596: MLOAD
00000597: DUP1
00000598: SWAP2
00000599: SUB
0000059a: SWAP1
0000059b: LOG1
0000059c: PUSH1 0x02
0000059e: PUSH1 0x00
000005a0: SWAP1
000005a1: SLOAD
000005a2: SWAP1
000005a3: PUSH2 0x0100
000005a6: EXP
000005a7: SWAP1
000005a8: DIV
000005a9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005be: AND
000005bf: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005d4: AND
000005d5: PUSH2 0x08fc
000005d8: ADDRESS
000005d9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005ee: AND
000005ef: BALANCE
000005f0: SWAP1
000005f1: DUP2
000005f2: ISZERO
000005f3: MUL
000005f4: SWAP1
000005f5: PUSH1 0x40
000005f7: MLOAD
000005f8: PUSH1 0x00
000005fa: PUSH1 0x40
000005fc: MLOAD
000005fd: DUP1
000005fe: DUP4
000005ff: SUB
00000600: DUP2
00000601: DUP6
00000602: DUP9
00000603: DUP9
00000604: CALL
00000605: SWAP4
00000606: POP
00000607: POP
00000608: POP
00000609: POP
0000060a: ISZERO
0000060b: DUP1
0000060c: ISZERO
0000060d: PUSH2 0x061a
00000610: JUMPI
00000611: RETURNDATASIZE
00000612: PUSH1 0x00
00000614: DUP1
00000615: RETURNDATACOPY
00000616: RETURNDATASIZE
00000617: PUSH1 0x00
00000619: REVERT
0000061a: JUMPDEST
0000061b: POP
0000061c: JUMP
0000061d: JUMPDEST
0000061e: PUSH1 0x00
00000620: DUP1
00000621: SWAP1
00000622: SLOAD
00000623: SWAP1
00000624: PUSH2 0x0100
00000627: EXP
00000628: SWAP1
00000629: DIV
0000062a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000063f: AND
00000640: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000655: AND
00000656: CALLER
00000657: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000066c: AND
0000066d: EQ
0000066e: ISZERO
0000066f: ISZERO
00000670: PUSH2 0x0678
00000673: JUMPI
00000674: PUSH1 0x00
00000676: DUP1
00000677: REVERT
00000678: JUMPDEST
00000679: PUSH1 0x00
0000067b: PUSH1 0x02
0000067d: DUP2
0000067e: GT
0000067f: ISZERO
00000680: PUSH2 0x0685
00000683: JUMPI
00000684: INVALID
00000685: JUMPDEST
00000686: PUSH1 0x02
00000688: PUSH1 0x14
0000068a: SWAP1
0000068b: SLOAD
0000068c: SWAP1
0000068d: PUSH2 0x0100
00000690: EXP
00000691: SWAP1
00000692: DIV
00000693: PUSH1 0xff
00000695: AND
00000696: PUSH1 0x02
00000698: DUP2
00000699: GT
0000069a: ISZERO
0000069b: PUSH2 0x06a0
0000069e: JUMPI
0000069f: INVALID
000006a0: JUMPDEST
000006a1: EQ
000006a2: ISZERO
000006a3: ISZERO
000006a4: PUSH2 0x06ac
000006a7: JUMPI
000006a8: PUSH1 0x00
000006aa: DUP1
000006ab: REVERT
000006ac: JUMPDEST
000006ad: PUSH1 0x01
000006af: PUSH1 0x02
000006b1: PUSH1 0x14
000006b3: PUSH2 0x0100
000006b6: EXP
000006b7: DUP2
000006b8: SLOAD
000006b9: DUP2
000006ba: PUSH1 0xff
000006bc: MUL
000006bd: NOT
000006be: AND
000006bf: SWAP1
000006c0: DUP4
000006c1: PUSH1 0x02
000006c3: DUP2
000006c4: GT
000006c5: ISZERO
000006c6: PUSH2 0x06cb
000006c9: JUMPI
000006ca: INVALID
000006cb: JUMPDEST
000006cc: MUL
000006cd: OR
000006ce: SWAP1
000006cf: SSTORE
000006d0: POP
000006d1: PUSH32 0x599d8e5a83cffb867d051598c4d70e805d59802d8081c1c7d6dffc5b6aca2b89
000006f2: PUSH1 0x40
000006f4: MLOAD
000006f5: PUSH1 0x40
000006f7: MLOAD
000006f8: DUP1
000006f9: SWAP2
000006fa: SUB
000006fb: SWAP1
000006fc: LOG1
000006fd: JUMP
000006fe: JUMPDEST
000006ff: PUSH1 0x00
00000701: DUP1
00000702: SWAP1
00000703: SLOAD
00000704: SWAP1
00000705: PUSH2 0x0100
00000708: EXP
00000709: SWAP1
0000070a: DIV
0000070b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000720: AND
00000721: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000736: AND
00000737: CALLER
00000738: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000074d: AND
0000074e: EQ
0000074f: ISZERO
00000750: ISZERO
00000751: PUSH2 0x0759
00000754: JUMPI
00000755: PUSH1 0x00
00000757: DUP1
00000758: REVERT
00000759: JUMPDEST
0000075a: PUSH1 0x00
0000075c: PUSH1 0x02
0000075e: DUP2
0000075f: GT
00000760: ISZERO
00000761: PUSH2 0x0766
00000764: JUMPI
00000765: INVALID
00000766: JUMPDEST
00000767: PUSH1 0x02
00000769: PUSH1 0x14
0000076b: SWAP1
0000076c: SLOAD
0000076d: SWAP1
0000076e: PUSH2 0x0100
00000771: EXP
00000772: SWAP1
00000773: DIV
00000774: PUSH1 0xff
00000776: AND
00000777: PUSH1 0x02
00000779: DUP2
0000077a: GT
0000077b: ISZERO
0000077c: PUSH2 0x0781
0000077f: JUMPI
00000780: INVALID
00000781: JUMPDEST
00000782: EQ
00000783: ISZERO
00000784: ISZERO
00000785: PUSH2 0x078d
00000788: JUMPI
00000789: PUSH1 0x00
0000078b: DUP1
0000078c: REVERT
0000078d: JUMPDEST
0000078e: PUSH2 0x07df
00000791: CALLVALUE
00000792: PUSH1 0x01
00000794: PUSH1 0x00
00000796: DUP5
00000797: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007ac: AND
000007ad: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007c2: AND
000007c3: DUP2
000007c4: MSTORE
000007c5: PUSH1 0x20
000007c7: ADD
000007c8: SWAP1
000007c9: DUP2
000007ca: MSTORE
000007cb: PUSH1 0x20
000007cd: ADD
000007ce: PUSH1 0x00
000007d0: KECCAK256
000007d1: SLOAD
000007d2: PUSH2 0x097b
000007d5: SWAP1
000007d6: SWAP2
000007d7: SWAP1
000007d8: PUSH4 0xffffffff
000007dd: AND
000007de: JUMP
000007df: JUMPDEST
000007e0: PUSH1 0x01
000007e2: PUSH1 0x00
000007e4: DUP4
000007e5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007fa: AND
000007fb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000810: AND
00000811: DUP2
00000812: MSTORE
00000813: PUSH1 0x20
00000815: ADD
00000816: SWAP1
00000817: DUP2
00000818: MSTORE
00000819: PUSH1 0x20
0000081b: ADD
0000081c: PUSH1 0x00
0000081e: KECCAK256
0000081f: DUP2
00000820: SWAP1
00000821: SSTORE
00000822: POP
00000823: POP
00000824: JUMP
00000825: JUMPDEST
00000826: PUSH1 0x00
00000828: PUSH1 0x01
0000082a: PUSH1 0x02
0000082c: DUP2
0000082d: GT
0000082e: ISZERO
0000082f: PUSH2 0x0834
00000832: JUMPI
00000833: INVALID
00000834: JUMPDEST
00000835: PUSH1 0x02
00000837: PUSH1 0x14
00000839: SWAP1
0000083a: SLOAD
0000083b: SWAP1
0000083c: PUSH2 0x0100
0000083f: EXP
00000840: SWAP1
00000841: DIV
00000842: PUSH1 0xff
00000844: AND
00000845: PUSH1 0x02
00000847: DUP2
00000848: GT
00000849: ISZERO
0000084a: PUSH2 0x084f
0000084d: JUMPI
0000084e: INVALID
0000084f: JUMPDEST
00000850: EQ
00000851: ISZERO
00000852: ISZERO
00000853: PUSH2 0x085b
00000856: JUMPI
00000857: PUSH1 0x00
00000859: DUP1
0000085a: REVERT
0000085b: JUMPDEST
0000085c: PUSH1 0x01
0000085e: PUSH1 0x00
00000860: DUP4
00000861: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000876: AND
00000877: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000088c: AND
0000088d: DUP2
0000088e: MSTORE
0000088f: PUSH1 0x20
00000891: ADD
00000892: SWAP1
00000893: DUP2
00000894: MSTORE
00000895: PUSH1 0x20
00000897: ADD
00000898: PUSH1 0x00
0000089a: KECCAK256
0000089b: SLOAD
0000089c: SWAP1
0000089d: POP
0000089e: PUSH1 0x00
000008a0: PUSH1 0x01
000008a2: PUSH1 0x00
000008a4: DUP5
000008a5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008ba: AND
000008bb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008d0: AND
000008d1: DUP2
000008d2: MSTORE
000008d3: PUSH1 0x20
000008d5: ADD
000008d6: SWAP1
000008d7: DUP2
000008d8: MSTORE
000008d9: PUSH1 0x20
000008db: ADD
000008dc: PUSH1 0x00
000008de: KECCAK256
000008df: DUP2
000008e0: SWAP1
000008e1: SSTORE
000008e2: POP
000008e3: DUP2
000008e4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008f9: AND
000008fa: PUSH2 0x08fc
000008fd: DUP3
000008fe: SWAP1
000008ff: DUP2
00000900: ISZERO
00000901: MUL
00000902: SWAP1
00000903: PUSH1 0x40
00000905: MLOAD
00000906: PUSH1 0x00
00000908: PUSH1 0x40
0000090a: MLOAD
0000090b: DUP1
0000090c: DUP4
0000090d: SUB
0000090e: DUP2
0000090f: DUP6
00000910: DUP9
00000911: DUP9
00000912: CALL
00000913: SWAP4
00000914: POP
00000915: POP
00000916: POP
00000917: POP
00000918: ISZERO
00000919: DUP1
0000091a: ISZERO
0000091b: PUSH2 0x0928
0000091e: JUMPI
0000091f: RETURNDATASIZE
00000920: PUSH1 0x00
00000922: DUP1
00000923: RETURNDATACOPY
00000924: RETURNDATASIZE
00000925: PUSH1 0x00
00000927: REVERT
00000928: JUMPDEST
00000929: POP
0000092a: DUP2
0000092b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000940: AND
00000941: PUSH32 0xd7dee2702d63ad89917b6a4da9981c90c4d24f8c2bdfd64c604ecae57d8d0651
00000962: DUP3
00000963: PUSH1 0x40
00000965: MLOAD
00000966: DUP1
00000967: DUP3
00000968: DUP2
00000969: MSTORE
0000096a: PUSH1 0x20
0000096c: ADD
0000096d: SWAP2
0000096e: POP
0000096f: POP
00000970: PUSH1 0x40
00000972: MLOAD
00000973: DUP1
00000974: SWAP2
00000975: SUB
00000976: SWAP1
00000977: LOG2
00000978: POP
00000979: POP
0000097a: JUMP
0000097b: JUMPDEST
0000097c: PUSH1 0x00
0000097e: DUP1
0000097f: DUP3
00000980: DUP5
00000981: ADD
00000982: SWAP1
00000983: POP
00000984: DUP4
00000985: DUP2
00000986: LT
00000987: ISZERO
00000988: ISZERO
00000989: ISZERO
0000098a: PUSH2 0x098f
0000098d: JUMPI
0000098e: INVALID
0000098f: JUMPDEST
00000990: DUP1
00000991: SWAP2
00000992: POP
00000993: POP
00000994: SWAP3
00000995: SWAP2
00000996: POP
00000997: POP
00000998: JUMP
00000999: STOP
0000099a: LOG1
0000099b: PUSH6 0x627a7a723058
000009a2: KECCAK256
000009a3: UNKNOWN(0xB5)
000009a4: SDIV
000009a5: UNKNOWN(0xE6)
000009a6: UNKNOWN(0xAB)
000009a7: UNKNOWN(0x2F)
000009a8: UNKNOWN(0xEE)
000009a9: PUSH21 0x7d518fd4f635a0ab64f080132ae9af91a8d236df90
000009bf: UNKNOWN(0xDD)
000009c0: PUSH10

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
medium	other	detector	Untrusted CALL target/value reachable	45	no	no	view trace_id: 0x66a5f3a9b395c062f20d7f361cce810e6cb8ca8c9ec493d7e26119ce2f1f2136 call_targets: 0x69eb1037b2a3ead89ab7450d6f28828a8c913fdb target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x66a5f3a9b395c062f20d7f361cce810e6cb8ca8c9ec493d7e26119ce2f1f2136", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x69eb1037b2a3ead89ab7450d6f28828a8c913fdb" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0xffffffff", "selector": "0xffffffff", "calldata_variants": [ "0xffffffff", "0xffffffff0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x43d726d6", "selector": "0x43d726d6", "calldata_variants": [ "0x43d726d6", "0x43d726d60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x521eb273", "selector": "0x521eb273", "calldata_variants": [ "0x521eb273", "0x521eb2730000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8c52dc41", "selector": "0x8c52dc41", "calldata_variants": [ "0x8c52dc41", "0x8c52dc410000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xc19d93fb", "selector": "0xc19d93fb", "calldata_variants": [ "0xc19d93fb", "0xc19d93fb0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xcb13cddb", "selector": "0xcb13cddb", "calldata_variants": [ "0xcb13cddb", "0xcb13cddb0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf2fde38b", "selector": "0xf2fde38b", "calldata_variants": [ "0xf2fde38b", "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1540, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "constant", "target_expression_category": "computed" }, { "pc": 2322, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 2, "guards_detected": [ { "pc": 905, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1270, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1622, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1847, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" } ], "untrusted_call_count": 2 }
medium	other	detector	ETH value transfer possible	40	no	no	view trace_id: 0x66a5f3a9b395c062f20d7f361cce810e6cb8ca8c9ec493d7e26119ce2f1f2136 call_targets: 0x69eb1037b2a3ead89ab7450d6f28828a8c913fdb target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x66a5f3a9b395c062f20d7f361cce810e6cb8ca8c9ec493d7e26119ce2f1f2136", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x69eb1037b2a3ead89ab7450d6f28828a8c913fdb" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0xffffffff", "selector": "0xffffffff", "calldata_variants": [ "0xffffffff", "0xffffffff0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x43d726d6", "selector": "0x43d726d6", "calldata_variants": [ "0x43d726d6", "0x43d726d60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x521eb273", "selector": "0x521eb273", "calldata_variants": [ "0x521eb273", "0x521eb2730000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8c52dc41", "selector": "0x8c52dc41", "calldata_variants": [ "0x8c52dc41", "0x8c52dc410000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xc19d93fb", "selector": "0xc19d93fb", "calldata_variants": [ "0xc19d93fb", "0xc19d93fb0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xcb13cddb", "selector": "0xcb13cddb", "calldata_variants": [ "0xcb13cddb", "0xcb13cddb0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf2fde38b", "selector": "0xf2fde38b", "calldata_variants": [ "0xf2fde38b", "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1540, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "constant", "target_expression_category": "computed" }, { "pc": 2322, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 2, "guards_detected": [ { "pc": 905, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1270, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1622, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1847, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" } ] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

medium

other

detector

Untrusted CALL target/value reachable

45

no

view

trace_id: 0x66a5f3a9b395c062f20d7f361cce810e6cb8ca8c9ec493d7e26119ce2f1f2136

call_targets: 0x69eb1037b2a3ead89ab7450d6f28828a8c913fdb

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x66a5f3a9b395c062f20d7f361cce810e6cb8ca8c9ec493d7e26119ce2f1f2136",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x69eb1037b2a3ead89ab7450d6f28828a8c913fdb"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x43d726d6",
            "selector": "0x43d726d6",
            "calldata_variants": [
                "0x43d726d6",
                "0x43d726d60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x521eb273",
            "selector": "0x521eb273",
            "calldata_variants": [
                "0x521eb273",
                "0x521eb2730000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8c52dc41",
            "selector": "0x8c52dc41",
            "calldata_variants": [
                "0x8c52dc41",
                "0x8c52dc410000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc19d93fb",
            "selector": "0xc19d93fb",
            "calldata_variants": [
                "0xc19d93fb",
                "0xc19d93fb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xcb13cddb",
            "selector": "0xcb13cddb",
            "calldata_variants": [
                "0xcb13cddb",
                "0xcb13cddb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf2fde38b",
            "selector": "0xf2fde38b",
            "calldata_variants": [
                "0xf2fde38b",
                "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1540,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "constant",
            "target_expression_category": "computed"
        },
        {
            "pc": 2322,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [
        {
            "pc": 905,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1270,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1622,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1847,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 2
}