Analysis Run

019b477e-af8f-70c3-b304-6eada0a05c52

complete

Chain ID

1

Address

0x66bd1585b58c4c77a1060eed7d4578500b0bad4a

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Verified

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
21805	artifact.fetch	complete	1 / 3	4 months ago
21806	tool.cast_disasm	complete	1 / 3	4 months ago
64694	analysis.bundle	complete	1 / 3	2 weeks ago
64695	capability.graph	complete	1 / 3	2 weeks ago
64696	detector.run	complete	1 / 3	2 weeks ago
64697	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

3

EXT*/BALANCE

3

Total opcodes

1514

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x00ba
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002e: SWAP1
0000002f: DIV
00000030: PUSH4 0xffffffff
00000035: AND
00000036: DUP1
00000037: PUSH4 0x2c4e722e
0000003c: EQ
0000003d: PUSH2 0x011f
00000040: JUMPI
00000041: DUP1
00000042: PUSH4 0x3197cbb6
00000047: EQ
00000048: PUSH2 0x0148
0000004b: JUMPI
0000004c: DUP1
0000004d: PUSH4 0x66829b16
00000052: EQ
00000053: PUSH2 0x0171
00000056: JUMPI
00000057: DUP1
00000058: PUSH4 0x78e97925
0000005d: EQ
0000005e: PUSH2 0x01aa
00000061: JUMPI
00000062: DUP1
00000063: PUSH4 0x7943f2ec
00000068: EQ
00000069: PUSH2 0x01d3
0000006c: JUMPI
0000006d: DUP1
0000006e: PUSH4 0x801aba56
00000073: EQ
00000074: PUSH2 0x01f6
00000077: JUMPI
00000078: DUP1
00000079: PUSH4 0x8da5cb5b
0000007e: EQ
0000007f: PUSH2 0x020b
00000082: JUMPI
00000083: DUP1
00000084: PUSH4 0xa377104c
00000089: EQ
0000008a: PUSH2 0x0260
0000008d: JUMPI
0000008e: DUP1
0000008f: PUSH4 0xa93b5331
00000094: EQ
00000095: PUSH2 0x02a9
00000098: JUMPI
00000099: DUP1
0000009a: PUSH4 0xcf8d8ca0
0000009f: EQ
000000a0: PUSH2 0x02d2
000000a3: JUMPI
000000a4: DUP1
000000a5: PUSH4 0xf2fde38b
000000aa: EQ
000000ab: PUSH2 0x0360
000000ae: JUMPI
000000af: DUP1
000000b0: PUSH4 0xfc0c546a
000000b5: EQ
000000b6: PUSH2 0x0399
000000b9: JUMPI
000000ba: JUMPDEST
000000bb: PUSH1 0x00
000000bd: PUSH1 0x04
000000bf: SLOAD
000000c0: TIMESTAMP
000000c1: GT
000000c2: ISZERO
000000c3: ISZERO
000000c4: PUSH2 0x00cc
000000c7: JUMPI
000000c8: PUSH1 0x00
000000ca: DUP1
000000cb: REVERT
000000cc: JUMPDEST
000000cd: PUSH1 0x05
000000cf: SLOAD
000000d0: TIMESTAMP
000000d1: GT
000000d2: ISZERO
000000d3: ISZERO
000000d4: ISZERO
000000d5: PUSH2 0x00dd
000000d8: JUMPI
000000d9: PUSH1 0x00
000000db: DUP1
000000dc: REVERT
000000dd: JUMPDEST
000000de: PUSH2 0x00ea
000000e1: CALLER
000000e2: CALLVALUE
000000e3: PUSH1 0x06
000000e5: SLOAD
000000e6: PUSH2 0x03ee
000000e9: JUMP
000000ea: JUMPDEST
000000eb: PUSH2 0x00ff
000000ee: PUSH1 0x06
000000f0: SLOAD
000000f1: CALLVALUE
000000f2: PUSH2 0x05d2
000000f5: SWAP1
000000f6: SWAP2
000000f7: SWAP1
000000f8: PUSH4 0xffffffff
000000fd: AND
000000fe: JUMP
000000ff: JUMPDEST
00000100: SWAP1
00000101: POP
00000102: PUSH2 0x0116
00000105: DUP2
00000106: PUSH1 0x01
00000108: SLOAD
00000109: PUSH2 0x060d
0000010c: SWAP1
0000010d: SWAP2
0000010e: SWAP1
0000010f: PUSH4 0xffffffff
00000114: AND
00000115: JUMP
00000116: JUMPDEST
00000117: PUSH1 0x01
00000119: DUP2
0000011a: SWAP1
0000011b: SSTORE
0000011c: POP
0000011d: POP
0000011e: STOP
0000011f: JUMPDEST
00000120: CALLVALUE
00000121: ISZERO
00000122: PUSH2 0x012a
00000125: JUMPI
00000126: PUSH1 0x00
00000128: DUP1
00000129: REVERT
0000012a: JUMPDEST
0000012b: PUSH2 0x0132
0000012e: PUSH2 0x062b
00000131: JUMP
00000132: JUMPDEST
00000133: PUSH1 0x40
00000135: MLOAD
00000136: DUP1
00000137: DUP3
00000138: DUP2
00000139: MSTORE
0000013a: PUSH1 0x20
0000013c: ADD
0000013d: SWAP2
0000013e: POP
0000013f: POP
00000140: PUSH1 0x40
00000142: MLOAD
00000143: DUP1
00000144: SWAP2
00000145: SUB
00000146: SWAP1
00000147: RETURN
00000148: JUMPDEST
00000149: CALLVALUE
0000014a: ISZERO
0000014b: PUSH2 0x0153
0000014e: JUMPI
0000014f: PUSH1 0x00
00000151: DUP1
00000152: REVERT
00000153: JUMPDEST
00000154: PUSH2 0x015b
00000157: PUSH2 0x0631
0000015a: JUMP
0000015b: JUMPDEST
0000015c: PUSH1 0x40
0000015e: MLOAD
0000015f: DUP1
00000160: DUP3
00000161: DUP2
00000162: MSTORE
00000163: PUSH1 0x20
00000165: ADD
00000166: SWAP2
00000167: POP
00000168: POP
00000169: PUSH1 0x40
0000016b: MLOAD
0000016c: DUP1
0000016d: SWAP2
0000016e: SUB
0000016f: SWAP1
00000170: RETURN
00000171: JUMPDEST
00000172: CALLVALUE
00000173: ISZERO
00000174: PUSH2 0x017c
00000177: JUMPI
00000178: PUSH1 0x00
0000017a: DUP1
0000017b: REVERT
0000017c: JUMPDEST
0000017d: PUSH2 0x01a8
00000180: PUSH1 0x04
00000182: DUP1
00000183: DUP1
00000184: CALLDATALOAD
00000185: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000019a: AND
0000019b: SWAP1
0000019c: PUSH1 0x20
0000019e: ADD
0000019f: SWAP1
000001a0: SWAP2
000001a1: SWAP1
000001a2: POP
000001a3: POP
000001a4: PUSH2 0x0637
000001a7: JUMP
000001a8: JUMPDEST
000001a9: STOP
000001aa: JUMPDEST
000001ab: CALLVALUE
000001ac: ISZERO
000001ad: PUSH2 0x01b5
000001b0: JUMPI
000001b1: PUSH1 0x00
000001b3: DUP1
000001b4: REVERT
000001b5: JUMPDEST
000001b6: PUSH2 0x01bd
000001b9: PUSH2 0x06d6
000001bc: JUMP
000001bd: JUMPDEST
000001be: PUSH1 0x40
000001c0: MLOAD
000001c1: DUP1
000001c2: DUP3
000001c3: DUP2
000001c4: MSTORE
000001c5: PUSH1 0x20
000001c7: ADD
000001c8: SWAP2
000001c9: POP
000001ca: POP
000001cb: PUSH1 0x40
000001cd: MLOAD
000001ce: DUP1
000001cf: SWAP2
000001d0: SUB
000001d1: SWAP1
000001d2: RETURN
000001d3: JUMPDEST
000001d4: CALLVALUE
000001d5: ISZERO
000001d6: PUSH2 0x01de
000001d9: JUMPI
000001da: PUSH1 0x00
000001dc: DUP1
000001dd: REVERT
000001de: JUMPDEST
000001df: PUSH2 0x01f4
000001e2: PUSH1 0x04
000001e4: DUP1
000001e5: DUP1
000001e6: CALLDATALOAD
000001e7: SWAP1
000001e8: PUSH1 0x20
000001ea: ADD
000001eb: SWAP1
000001ec: SWAP2
000001ed: SWAP1
000001ee: POP
000001ef: POP
000001f0: PUSH2 0x06dc
000001f3: JUMP
000001f4: JUMPDEST
000001f5: STOP
000001f6: JUMPDEST
000001f7: CALLVALUE
000001f8: ISZERO
000001f9: PUSH2 0x0201
000001fc: JUMPI
000001fd: PUSH1 0x00
000001ff: DUP1
00000200: REVERT
00000201: JUMPDEST
00000202: PUSH2 0x0209
00000205: PUSH2 0x0746
00000208: JUMP
00000209: JUMPDEST
0000020a: STOP
0000020b: JUMPDEST
0000020c: CALLVALUE
0000020d: ISZERO
0000020e: PUSH2 0x0216
00000211: JUMPI
00000212: PUSH1 0x00
00000214: DUP1
00000215: REVERT
00000216: JUMPDEST
00000217: PUSH2 0x021e
0000021a: PUSH2 0x07fa
0000021d: JUMP
0000021e: JUMPDEST
0000021f: PUSH1 0x40
00000221: MLOAD
00000222: DUP1
00000223: DUP3
00000224: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000239: AND
0000023a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000024f: AND
00000250: DUP2
00000251: MSTORE
00000252: PUSH1 0x20
00000254: ADD
00000255: SWAP2
00000256: POP
00000257: POP
00000258: PUSH1 0x40
0000025a: MLOAD
0000025b: DUP1
0000025c: SWAP2
0000025d: SUB
0000025e: SWAP1
0000025f: RETURN
00000260: JUMPDEST
00000261: CALLVALUE
00000262: ISZERO
00000263: PUSH2 0x026b
00000266: JUMPI
00000267: PUSH1 0x00
00000269: DUP1
0000026a: REVERT
0000026b: JUMPDEST
0000026c: PUSH2 0x02a7
0000026f: PUSH1 0x04
00000271: DUP1
00000272: DUP1
00000273: CALLDATALOAD
00000274: SWAP1
00000275: PUSH1 0x20
00000277: ADD
00000278: SWAP1
00000279: DUP3
0000027a: ADD
0000027b: DUP1
0000027c: CALLDATALOAD
0000027d: SWAP1
0000027e: PUSH1 0x20
00000280: ADD
00000281: SWAP2
00000282: SWAP1
00000283: SWAP2
00000284: SWAP3
00000285: SWAP1
00000286: DUP1
00000287: CALLDATALOAD
00000288: SWAP1
00000289: PUSH1 0x20
0000028b: ADD
0000028c: SWAP1
0000028d: SWAP2
0000028e: SWAP1
0000028f: DUP1
00000290: CALLDATALOAD
00000291: SWAP1
00000292: PUSH1 0x20
00000294: ADD
00000295: SWAP1
00000296: SWAP2
00000297: SWAP1
00000298: DUP1
00000299: CALLDATALOAD
0000029a: SWAP1
0000029b: PUSH1 0x20
0000029d: ADD
0000029e: SWAP1
0000029f: SWAP2
000002a0: SWAP1
000002a1: POP
000002a2: POP
000002a3: PUSH2 0x081f
000002a6: JUMP
000002a7: JUMPDEST
000002a8: STOP
000002a9: JUMPDEST
000002aa: CALLVALUE
000002ab: ISZERO
000002ac: PUSH2 0x02b4
000002af: JUMPI
000002b0: PUSH1 0x00
000002b2: DUP1
000002b3: REVERT
000002b4: JUMPDEST
000002b5: PUSH2 0x02bc
000002b8: PUSH2 0x08a8
000002bb: JUMP
000002bc: JUMPDEST
000002bd: PUSH1 0x40
000002bf: MLOAD
000002c0: DUP1
000002c1: DUP3
000002c2: DUP2
000002c3: MSTORE
000002c4: PUSH1 0x20
000002c6: ADD
000002c7: SWAP2
000002c8: POP
000002c9: POP
000002ca: PUSH1 0x40
000002cc: MLOAD
000002cd: DUP1
000002ce: SWAP2
000002cf: SUB
000002d0: SWAP1
000002d1: RETURN
000002d2: JUMPDEST
000002d3: CALLVALUE
000002d4: ISZERO
000002d5: PUSH2 0x02dd
000002d8: JUMPI
000002d9: PUSH1 0x00
000002db: DUP1
000002dc: REVERT
000002dd: JUMPDEST
000002de: PUSH2 0x02e5
000002e1: PUSH2 0x08ae
000002e4: JUMP
000002e5: JUMPDEST
000002e6: PUSH1 0x40
000002e8: MLOAD
000002e9: DUP1
000002ea: DUP1
000002eb: PUSH1 0x20
000002ed: ADD
000002ee: DUP3
000002ef: DUP2
000002f0: SUB
000002f1: DUP3
000002f2: MSTORE
000002f3: DUP4
000002f4: DUP2
000002f5: DUP2
000002f6: MLOAD
000002f7: DUP2
000002f8: MSTORE
000002f9: PUSH1 0x20
000002fb: ADD
000002fc: SWAP2
000002fd: POP
000002fe: DUP1
000002ff: MLOAD
00000300: SWAP1
00000301: PUSH1 0x20
00000303: ADD
00000304: SWAP1
00000305: DUP1
00000306: DUP4
00000307: DUP4
00000308: PUSH1 0x00
0000030a: JUMPDEST
0000030b: DUP4
0000030c: DUP2
0000030d: LT
0000030e: ISZERO
0000030f: PUSH2 0x0325
00000312: JUMPI
00000313: DUP1
00000314: DUP3
00000315: ADD
00000316: MLOAD
00000317: DUP2
00000318: DUP5
00000319: ADD
0000031a: MSTORE
0000031b: PUSH1 0x20
0000031d: DUP2
0000031e: ADD
0000031f: SWAP1
00000320: POP
00000321: PUSH2 0x030a
00000324: JUMP
00000325: JUMPDEST
00000326: POP
00000327: POP
00000328: POP
00000329: POP
0000032a: SWAP1
0000032b: POP
0000032c: SWAP1
0000032d: DUP2
0000032e: ADD
0000032f: SWAP1
00000330: PUSH1 0x1f
00000332: AND
00000333: DUP1
00000334: ISZERO
00000335: PUSH2 0x0352
00000338: JUMPI
00000339: DUP1
0000033a: DUP3
0000033b: SUB
0000033c: DUP1
0000033d: MLOAD
0000033e: PUSH1 0x01
00000340: DUP4
00000341: PUSH1 0x20
00000343: SUB
00000344: PUSH2 0x0100
00000347: EXP
00000348: SUB
00000349: NOT
0000034a: AND
0000034b: DUP2
0000034c: MSTORE
0000034d: PUSH1 0x20
0000034f: ADD
00000350: SWAP2
00000351: POP
00000352: JUMPDEST
00000353: POP
00000354: SWAP3
00000355: POP
00000356: POP
00000357: POP
00000358: PUSH1 0x40
0000035a: MLOAD
0000035b: DUP1
0000035c: SWAP2
0000035d: SUB
0000035e: SWAP1
0000035f: RETURN
00000360: JUMPDEST
00000361: CALLVALUE
00000362: ISZERO
00000363: PUSH2 0x036b
00000366: JUMPI
00000367: PUSH1 0x00
00000369: DUP1
0000036a: REVERT
0000036b: JUMPDEST
0000036c: PUSH2 0x0397
0000036f: PUSH1 0x04
00000371: DUP1
00000372: DUP1
00000373: CALLDATALOAD
00000374: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000389: AND
0000038a: SWAP1
0000038b: PUSH1 0x20
0000038d: ADD
0000038e: SWAP1
0000038f: SWAP2
00000390: SWAP1
00000391: POP
00000392: POP
00000393: PUSH2 0x094c
00000396: JUMP
00000397: JUMPDEST
00000398: STOP
00000399: JUMPDEST
0000039a: CALLVALUE
0000039b: ISZERO
0000039c: PUSH2 0x03a4
0000039f: JUMPI
000003a0: PUSH1 0x00
000003a2: DUP1
000003a3: REVERT
000003a4: JUMPDEST
000003a5: PUSH2 0x03ac
000003a8: PUSH2 0x0aa1
000003ab: JUMP
000003ac: JUMPDEST
000003ad: PUSH1 0x40
000003af: MLOAD
000003b0: DUP1
000003b1: DUP3
000003b2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003c7: AND
000003c8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003dd: AND
000003de: DUP2
000003df: MSTORE
000003e0: PUSH1 0x20
000003e2: ADD
000003e3: SWAP2
000003e4: POP
000003e5: POP
000003e6: PUSH1 0x40
000003e8: MLOAD
000003e9: DUP1
000003ea: SWAP2
000003eb: SUB
000003ec: SWAP1
000003ed: RETURN
000003ee: JUMPDEST
000003ef: PUSH1 0x00
000003f1: PUSH2 0x0403
000003f4: DUP3
000003f5: DUP5
000003f6: PUSH2 0x05d2
000003f9: SWAP1
000003fa: SWAP2
000003fb: SWAP1
000003fc: PUSH4 0xffffffff
00000401: AND
00000402: JUMP
00000403: JUMPDEST
00000404: SWAP1
00000405: POP
00000406: PUSH1 0x02
00000408: PUSH1 0x00
0000040a: SWAP1
0000040b: SLOAD
0000040c: SWAP1
0000040d: PUSH2 0x0100
00000410: EXP
00000411: SWAP1
00000412: DIV
00000413: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000428: AND
00000429: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000043e: AND
0000043f: PUSH4 0x70a08231
00000444: ADDRESS
00000445: PUSH1 0x40
00000447: MLOAD
00000448: DUP3
00000449: PUSH4 0xffffffff
0000044e: AND
0000044f: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000046d: MUL
0000046e: DUP2
0000046f: MSTORE
00000470: PUSH1 0x04
00000472: ADD
00000473: DUP1
00000474: DUP3
00000475: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000048a: AND
0000048b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004a0: AND
000004a1: DUP2
000004a2: MSTORE
000004a3: PUSH1 0x20
000004a5: ADD
000004a6: SWAP2
000004a7: POP
000004a8: POP
000004a9: PUSH1 0x20
000004ab: PUSH1 0x40
000004ad: MLOAD
000004ae: DUP1
000004af: DUP4
000004b0: SUB
000004b1: DUP2
000004b2: PUSH1 0x00
000004b4: DUP8
000004b5: DUP1
000004b6: EXTCODESIZE
000004b7: ISZERO
000004b8: ISZERO
000004b9: PUSH2 0x04c1
000004bc: JUMPI
000004bd: PUSH1 0x00
000004bf: DUP1
000004c0: REVERT
000004c1: JUMPDEST
000004c2: GAS
000004c3: CALL
000004c4: ISZERO
000004c5: ISZERO
000004c6: PUSH2 0x04ce
000004c9: JUMPI
000004ca: PUSH1 0x00
000004cc: DUP1
000004cd: REVERT
000004ce: JUMPDEST
000004cf: POP
000004d0: POP
000004d1: POP
000004d2: PUSH1 0x40
000004d4: MLOAD
000004d5: DUP1
000004d6: MLOAD
000004d7: SWAP1
000004d8: POP
000004d9: DUP2
000004da: GT
000004db: ISZERO
000004dc: ISZERO
000004dd: ISZERO
000004de: PUSH2 0x04e6
000004e1: JUMPI
000004e2: PUSH1 0x00
000004e4: DUP1
000004e5: REVERT
000004e6: JUMPDEST
000004e7: PUSH1 0x02
000004e9: PUSH1 0x00
000004eb: SWAP1
000004ec: SLOAD
000004ed: SWAP1
000004ee: PUSH2 0x0100
000004f1: EXP
000004f2: SWAP1
000004f3: DIV
000004f4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000509: AND
0000050a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000051f: AND
00000520: PUSH4 0xa9059cbb
00000525: DUP6
00000526: DUP4
00000527: PUSH1 0x40
00000529: MLOAD
0000052a: DUP4
0000052b: PUSH4 0xffffffff
00000530: AND
00000531: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000054f: MUL
00000550: DUP2
00000551: MSTORE
00000552: PUSH1 0x04
00000554: ADD
00000555: DUP1
00000556: DUP4
00000557: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000056c: AND
0000056d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000582: AND
00000583: DUP2
00000584: MSTORE
00000585: PUSH1 0x20
00000587: ADD
00000588: DUP3
00000589: DUP2
0000058a: MSTORE
0000058b: PUSH1 0x20
0000058d: ADD
0000058e: SWAP3
0000058f: POP
00000590: POP
00000591: POP
00000592: PUSH1 0x20
00000594: PUSH1 0x40
00000596: MLOAD
00000597: DUP1
00000598: DUP4
00000599: SUB
0000059a: DUP2
0000059b: PUSH1 0x00
0000059d: DUP8
0000059e: DUP1
0000059f: EXTCODESIZE
000005a0: ISZERO
000005a1: ISZERO
000005a2: PUSH2 0x05aa
000005a5: JUMPI
000005a6: PUSH1 0x00
000005a8: DUP1
000005a9: REVERT
000005aa: JUMPDEST
000005ab: GAS
000005ac: CALL
000005ad: ISZERO
000005ae: ISZERO
000005af: PUSH2 0x05b7
000005b2: JUMPI
000005b3: PUSH1 0x00
000005b5: DUP1
000005b6: REVERT
000005b7: JUMPDEST
000005b8: POP
000005b9: POP
000005ba: POP
000005bb: PUSH1 0x40
000005bd: MLOAD
000005be: DUP1
000005bf: MLOAD
000005c0: SWAP1
000005c1: POP
000005c2: ISZERO
000005c3: ISZERO
000005c4: PUSH2 0x05cc
000005c7: JUMPI
000005c8: PUSH1 0x00
000005ca: DUP1
000005cb: REVERT
000005cc: JUMPDEST
000005cd: POP
000005ce: POP
000005cf: POP
000005d0: POP
000005d1: JUMP
000005d2: JUMPDEST
000005d3: PUSH1 0x00
000005d5: DUP1
000005d6: PUSH1 0x00
000005d8: DUP5
000005d9: EQ
000005da: ISZERO
000005db: PUSH2 0x05e7
000005de: JUMPI
000005df: PUSH1 0x00
000005e1: SWAP2
000005e2: POP
000005e3: PUSH2 0x0606
000005e6: JUMP
000005e7: JUMPDEST
000005e8: DUP3
000005e9: DUP5
000005ea: MUL
000005eb: SWAP1
000005ec: POP
000005ed: DUP3
000005ee: DUP5
000005ef: DUP3
000005f0: DUP2
000005f1: ISZERO
000005f2: ISZERO
000005f3: PUSH2 0x05f8
000005f6: JUMPI
000005f7: INVALID
000005f8: JUMPDEST
000005f9: DIV
000005fa: EQ
000005fb: ISZERO
000005fc: ISZERO
000005fd: PUSH2 0x0602
00000600: JUMPI
00000601: INVALID
00000602: JUMPDEST
00000603: DUP1
00000604: SWAP2
00000605: POP
00000606: JUMPDEST
00000607: POP
00000608: SWAP3
00000609: SWAP2
0000060a: POP
0000060b: POP
0000060c: JUMP
0000060d: JUMPDEST
0000060e: PUSH1 0x00
00000610: DUP1
00000611: DUP3
00000612: DUP5
00000613: ADD
00000614: SWAP1
00000615: POP
00000616: DUP4
00000617: DUP2
00000618: LT
00000619: ISZERO
0000061a: ISZERO
0000061b: ISZERO
0000061c: PUSH2 0x0621
0000061f: JUMPI
00000620: INVALID
00000621: JUMPDEST
00000622: DUP1
00000623: SWAP2
00000624: POP
00000625: POP
00000626: SWAP3
00000627: SWAP2
00000628: POP
00000629: POP
0000062a: JUMP
0000062b: JUMPDEST
0000062c: PUSH1 0x06
0000062e: SLOAD
0000062f: DUP2
00000630: JUMP
00000631: JUMPDEST
00000632: PUSH1 0x05
00000634: SLOAD
00000635: DUP2
00000636: JUMP
00000637: JUMPDEST
00000638: PUSH1 0x00
0000063a: DUP1
0000063b: SWAP1
0000063c: SLOAD
0000063d: SWAP1
0000063e: PUSH2 0x0100
00000641: EXP
00000642: SWAP1
00000643: DIV
00000644: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000659: AND
0000065a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000066f: AND
00000670: CALLER
00000671: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000686: AND
00000687: EQ
00000688: ISZERO
00000689: ISZERO
0000068a: PUSH2 0x0692
0000068d: JUMPI
0000068e: PUSH1 0x00
00000690: DUP1
00000691: REVERT
00000692: JUMPDEST
00000693: DUP1
00000694: PUSH1 0x02
00000696: PUSH1 0x00
00000698: PUSH2 0x0100
0000069b: EXP
0000069c: DUP2
0000069d: SLOAD
0000069e: DUP2
0000069f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006b4: MUL
000006b5: NOT
000006b6: AND
000006b7: SWAP1
000006b8: DUP4
000006b9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006ce: AND
000006cf: MUL
000006d0: OR
000006d1: SWAP1
000006d2: SSTORE
000006d3: POP
000006d4: POP
000006d5: JUMP
000006d6: JUMPDEST
000006d7: PUSH1 0x04
000006d9: SLOAD
000006da: DUP2
000006db: JUMP
000006dc: JUMPDEST
000006dd: PUSH1 0x00
000006df: DUP1
000006e0: SWAP1
000006e1: SLOAD
000006e2: SWAP1
000006e3: PUSH2 0x0100
000006e6: EXP
000006e7: SWAP1
000006e8: DIV
000006e9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006fe: AND
000006ff: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000714: AND
00000715: CALLER
00000716: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000072b: AND
0000072c: EQ
0000072d: ISZERO
0000072e: ISZERO
0000072f: PUSH2 0x0737
00000732: JUMPI
00000733: PUSH1 0x00
00000735: DUP1
00000736: REVERT
00000737: JUMPDEST
00000738: PUSH2 0x0743
0000073b: CALLER
0000073c: DUP3
0000073d: PUSH1 0x01
0000073f: PUSH2 0x03ee
00000742: JUMP
00000743: JUMPDEST
00000744: POP
00000745: JUMP
00000746: JUMPDEST
00000747: PUSH1 0x00
00000749: DUP1
0000074a: SWAP1
0000074b: SLOAD
0000074c: SWAP1
0000074d: PUSH2 0x0100
00000750: EXP
00000751: SWAP1
00000752: DIV
00000753: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000768: AND
00000769: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000077e: AND
0000077f: CALLER
00000780: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000795: AND
00000796: EQ
00000797: ISZERO
00000798: ISZERO
00000799: PUSH2 0x07a1
0000079c: JUMPI
0000079d: PUSH1 0x00
0000079f: DUP1
000007a0: REVERT
000007a1: JUMPDEST
000007a2: CALLER
000007a3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007b8: AND
000007b9: PUSH2 0x08fc
000007bc: ADDRESS
000007bd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007d2: AND
000007d3: BALANCE
000007d4: SWAP1
000007d5: DUP2
000007d6: ISZERO
000007d7: MUL
000007d8: SWAP1
000007d9: PUSH1 0x40
000007db: MLOAD
000007dc: PUSH1 0x00
000007de: PUSH1 0x40
000007e0: MLOAD
000007e1: DUP1
000007e2: DUP4
000007e3: SUB
000007e4: DUP2
000007e5: DUP6
000007e6: DUP9
000007e7: DUP9
000007e8: CALL
000007e9: SWAP4
000007ea: POP
000007eb: POP
000007ec: POP
000007ed: POP
000007ee: ISZERO
000007ef: ISZERO
000007f0: PUSH2 0x07f8
000007f3: JUMPI
000007f4: PUSH1 0x00
000007f6: DUP1
000007f7: REVERT
000007f8: JUMPDEST
000007f9: JUMP
000007fa: JUMPDEST
000007fb: PUSH1 0x00
000007fd: DUP1
000007fe: SWAP1
000007ff: SLOAD
00000800: SWAP1
00000801: PUSH2 0x0100
00000804: EXP
00000805: SWAP1
00000806: DIV
00000807: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000081c: AND
0000081d: DUP2
0000081e: JUMP
0000081f: JUMPDEST
00000820: PUSH1 0x00
00000822: DUP1
00000823: SWAP1
00000824: SLOAD
00000825: SWAP1
00000826: PUSH2 0x0100
00000829: EXP
0000082a: SWAP1
0000082b: DIV
0000082c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000841: AND
00000842: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000857: AND
00000858: CALLER
00000859: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000086e: AND
0000086f: EQ
00000870: ISZERO
00000871: ISZERO
00000872: PUSH2 0x087a
00000875: JUMPI
00000876: PUSH1 0x00
00000878: DUP1
00000879: REVERT
0000087a: JUMPDEST
0000087b: DUP5
0000087c: DUP5
0000087d: PUSH1 0x03
0000087f: SWAP2
00000880: SWAP1
00000881: PUSH2 0x088b
00000884: SWAP3
00000885: SWAP2
00000886: SWAP1
00000887: PUSH2 0x0ac7
0000088a: JUMP
0000088b: JUMPDEST
0000088c: POP
0000088d: DUP3
0000088e: PUSH1 0x04
00000890: DUP2
00000891: SWAP1
00000892: SSTORE
00000893: POP
00000894: DUP2
00000895: PUSH1 0x05
00000897: DUP2
00000898: SWAP1
00000899: SSTORE
0000089a: POP
0000089b: DUP1
0000089c: PUSH1 0x06
0000089e: DUP2
0000089f: SWAP1
000008a0: SSTORE
000008a1: POP
000008a2: POP
000008a3: POP
000008a4: POP
000008a5: POP
000008a6: POP
000008a7: JUMP
000008a8: JUMPDEST
000008a9: PUSH1 0x01
000008ab: SLOAD
000008ac: DUP2
000008ad: JUMP
000008ae: JUMPDEST
000008af: PUSH1 0x03
000008b1: DUP1
000008b2: SLOAD
000008b3: PUSH1 0x01
000008b5: DUP2
000008b6: PUSH1 0x01
000008b8: AND
000008b9: ISZERO
000008ba: PUSH2 0x0100
000008bd: MUL
000008be: SUB
000008bf: AND
000008c0: PUSH1 0x02
000008c2: SWAP1
000008c3: DIV
000008c4: DUP1
000008c5: PUSH1 0x1f
000008c7: ADD
000008c8: PUSH1 0x20
000008ca: DUP1
000008cb: SWAP2
000008cc: DIV
000008cd: MUL
000008ce: PUSH1 0x20
000008d0: ADD
000008d1: PUSH1 0x40
000008d3: MLOAD
000008d4: SWAP1
000008d5: DUP2
000008d6: ADD
000008d7: PUSH1 0x40
000008d9: MSTORE
000008da: DUP1
000008db: SWAP3
000008dc: SWAP2
000008dd: SWAP1
000008de: DUP2
000008df: DUP2
000008e0: MSTORE
000008e1: PUSH1 0x20
000008e3: ADD
000008e4: DUP3
000008e5: DUP1
000008e6: SLOAD
000008e7: PUSH1 0x01
000008e9: DUP2
000008ea: PUSH1 0x01
000008ec: AND
000008ed: ISZERO
000008ee: PUSH2 0x0100
000008f1: MUL
000008f2: SUB
000008f3: AND
000008f4: PUSH1 0x02
000008f6: SWAP1
000008f7: DIV
000008f8: DUP1
000008f9: ISZERO
000008fa: PUSH2 0x0944
000008fd: JUMPI
000008fe: DUP1
000008ff: PUSH1 0x1f
00000901: LT
00000902: PUSH2 0x0919
00000905: JUMPI
00000906: PUSH2 0x0100
00000909: DUP1
0000090a: DUP4
0000090b: SLOAD
0000090c: DIV
0000090d: MUL
0000090e: DUP4
0000090f: MSTORE
00000910: SWAP2
00000911: PUSH1 0x20
00000913: ADD
00000914: SWAP2
00000915: PUSH2 0x0944
00000918: JUMP
00000919: JUMPDEST
0000091a: DUP3
0000091b: ADD
0000091c: SWAP2
0000091d: SWAP1
0000091e: PUSH1 0x00
00000920: MSTORE
00000921: PUSH1 0x20
00000923: PUSH1 0x00
00000925: KECCAK256
00000926: SWAP1
00000927: JUMPDEST
00000928: DUP2
00000929: SLOAD
0000092a: DUP2
0000092b: MSTORE
0000092c: SWAP1
0000092d: PUSH1 0x01
0000092f: ADD
00000930: SWAP1
00000931: PUSH1 0x20
00000933: ADD
00000934: DUP1
00000935: DUP4
00000936: GT
00000937: PUSH2 0x0927
0000093a: JUMPI
0000093b: DUP3
0000093c: SWAP1
0000093d: SUB
0000093e: PUSH1 0x1f
00000940: AND
00000941: DUP3
00000942: ADD
00000943: SWAP2
00000944: JUMPDEST
00000945: POP
00000946: POP
00000947: POP
00000948: POP
00000949: POP
0000094a: DUP2
0000094b: JUMP
0000094c: JUMPDEST
0000094d: PUSH1 0x00
0000094f: DUP1
00000950: SWAP1
00000951: SLOAD
00000952: SWAP1
00000953: PUSH2 0x0100
00000956: EXP
00000957: SWAP1
00000958: DIV
00000959: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000096e: AND
0000096f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000984: AND
00000985: CALLER
00000986: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000099b: AND
0000099c: EQ
0000099d: ISZERO
0000099e: ISZERO
0000099f: PUSH2 0x09a7
000009a2: JUMPI
000009a3: PUSH1 0x00
000009a5: DUP1
000009a6: REVERT
000009a7: JUMPDEST
000009a8: PUSH1 0x00
000009aa: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009bf: AND
000009c0: DUP2
000009c1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009d6: AND
000009d7: EQ
000009d8: ISZERO
000009d9: ISZERO
000009da: ISZERO
000009db: PUSH2 0x09e3
000009de: JUMPI
000009df: PUSH1 0x00
000009e1: DUP1
000009e2: REVERT
000009e3: JUMPDEST
000009e4: DUP1
000009e5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009fa: AND
000009fb: PUSH1 0x00
000009fd: DUP1
000009fe: SWAP1
000009ff: SLOAD
00000a00: SWAP1
00000a01: PUSH2 0x0100
00000a04: EXP
00000a05: SWAP1
00000a06: DIV
00000a07: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a1c: AND
00000a1d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a32: AND
00000a33: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
00000a54: PUSH1 0x40
00000a56: MLOAD
00000a57: PUSH1 0x40
00000a59: MLOAD
00000a5a: DUP1
00000a5b: SWAP2
00000a5c: SUB
00000a5d: SWAP1
00000a5e: LOG3
00000a5f: DUP1
00000a60: PUSH1 0x00
00000a62: DUP1
00000a63: PUSH2 0x0100
00000a66: EXP
00000a67: DUP2
00000a68: SLOAD
00000a69: DUP2
00000a6a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a7f: MUL
00000a80: NOT
00000a81: AND
00000a82: SWAP1
00000a83: DUP4
00000a84: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a99: AND
00000a9a: MUL
00000a9b: OR
00000a9c: SWAP1
00000a9d: SSTORE
00000a9e: POP
00000a9f: POP
00000aa0: JUMP
00000aa1: JUMPDEST
00000aa2: PUSH1 0x02
00000aa4: PUSH1 0x00
00000aa6: SWAP1
00000aa7: SLOAD
00000aa8: SWAP1
00000aa9: PUSH2 0x0100
00000aac: EXP
00000aad: SWAP1
00000aae: DIV
00000aaf: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000ac4: AND
00000ac5: DUP2
00000ac6: JUMP
00000ac7: JUMPDEST
00000ac8: DUP3
00000ac9: DUP1
00000aca: SLOAD
00000acb: PUSH1 0x01
00000acd: DUP2
00000ace: PUSH1 0x01
00000ad0: AND
00000ad1: ISZERO
00000ad2: PUSH2 0x0100
00000ad5: MUL
00000ad6: SUB
00000ad7: AND
00000ad8: PUSH1 0x02
00000ada: SWAP1
00000adb: DIV
00000adc: SWAP1
00000add: PUSH1 0x00
00000adf: MSTORE
00000ae0: PUSH1 0x20
00000ae2: PUSH1 0x00
00000ae4: KECCAK256
00000ae5: SWAP1
00000ae6: PUSH1 0x1f
00000ae8: ADD
00000ae9: PUSH1 0x20
00000aeb: SWAP1
00000aec: DIV
00000aed: DUP2
00000aee: ADD
00000aef: SWAP3
00000af0: DUP3
00000af1: PUSH1 0x1f
00000af3: LT
00000af4: PUSH2 0x0b08
00000af7: JUMPI
00000af8: DUP1
00000af9: CALLDATALOAD
00000afa: PUSH1 0xff
00000afc: NOT
00000afd: AND
00000afe: DUP4
00000aff: DUP1
00000b00: ADD
00000b01: OR
00000b02: DUP6
00000b03: SSTORE
00000b04: PUSH2 0x0b36
00000b07: JUMP
00000b08: JUMPDEST
00000b09: DUP3
00000b0a: DUP1
00000b0b: ADD
00000b0c: PUSH1 0x01
00000b0e: ADD
00000b0f: DUP6
00000b10: SSTORE
00000b11: DUP3
00000b12: ISZERO
00000b13: PUSH2 0x0b36
00000b16: JUMPI
00000b17: SWAP2
00000b18: DUP3
00000b19: ADD
00000b1a: JUMPDEST
00000b1b: DUP3
00000b1c: DUP2
00000b1d: GT
00000b1e: ISZERO
00000b1f: PUSH2 0x0b35
00000b22: JUMPI
00000b23: DUP3
00000b24: CALLDATALOAD
00000b25: DUP3
00000b26: SSTORE
00000b27: SWAP2
00000b28: PUSH1 0x20
00000b2a: ADD
00000b2b: SWAP2
00000b2c: SWAP1
00000b2d: PUSH1 0x01
00000b2f: ADD
00000b30: SWAP1
00000b31: PUSH2 0x0b1a
00000b34: JUMP
00000b35: JUMPDEST
00000b36: JUMPDEST
00000b37: POP
00000b38: SWAP1
00000b39: POP
00000b3a: PUSH2 0x0b43
00000b3d: SWAP2
00000b3e: SWAP1
00000b3f: PUSH2 0x0b47
00000b42: JUMP
00000b43: JUMPDEST
00000b44: POP
00000b45: SWAP1
00000b46: JUMP
00000b47: JUMPDEST
00000b48: PUSH2 0x0b69
00000b4b: SWAP2
00000b4c: SWAP1
00000b4d: JUMPDEST
00000b4e: DUP1
00000b4f: DUP3
00000b50: GT
00000b51: ISZERO
00000b52: PUSH2 0x0b65
00000b55: JUMPI
00000b56: PUSH1 0x00
00000b58: DUP2
00000b59: PUSH1 0x00
00000b5b: SWAP1
00000b5c: SSTORE
00000b5d: POP
00000b5e: PUSH1 0x01
00000b60: ADD
00000b61: PUSH2 0x0b4d
00000b64: JUMP
00000b65: JUMPDEST
00000b66: POP
00000b67: SWAP1
00000b68: JUMP
00000b69: JUMPDEST
00000b6a: SWAP1
00000b6b: JUMP
00000b6c: STOP
00000b6d: LOG1
00000b6e: PUSH6 0x627a7a723058
00000b75: KECCAK256
00000b76: UNKNOWN(0xC2)
00000b77: UNKNOWN(0x4B)
00000b78: UNKNOWN(0xF7)
00000b79: MOD
00000b7a: DUP10
00000b7b: UNKNOWN(0xB7)
00000b7c: UNKNOWN(0xE7)
00000b7d: UNKNOWN(0xDF)
00000b7e: TIMESTAMP
00000b7f: UNKNOWN(0x22)
00000b80: UNKNOWN(0xE0)
00000b81: MSIZE
00000b82: SWAP16
00000b83: DUP15
00000b84: GASLIMIT
00000b85: CALLVALUE
00000b86: ADDMOD
00000b87: DUP9
00000b88: LOG4
00000b89: UNKNOWN(0x21)
00000b8a: SWAP14
00000b8b: DUP16
00000b8c: UNKNOWN(0xEC)
00000b8d: PUSH28

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
medium	other	detector	Untrusted CALL target/value reachable	45	no	no	view trace_id: 0x7a53f6f86215fb1fbed8c432820becd57f8d236c2f1230cd783235e9915d0d67 call_targets: 0x66bd1585b58c4c77a1060eed7d4578500b0bad4a target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x7a53f6f86215fb1fbed8c432820becd57f8d236c2f1230cd783235e9915d0d67", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x66bd1585b58c4c77a1060eed7d4578500b0bad4a" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0xffffffff", "selector": "0xffffffff", "calldata_variants": [ "0xffffffff", "0xffffffff0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x2c4e722e", "selector": "0x2c4e722e", "calldata_variants": [ "0x2c4e722e", "0x2c4e722e0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x3197cbb6", "selector": "0x3197cbb6", "calldata_variants": [ "0x3197cbb6", "0x3197cbb60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x66829b16", "selector": "0x66829b16", "calldata_variants": [ "0x66829b16", "0x66829b160000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x78e97925", "selector": "0x78e97925", "calldata_variants": [ "0x78e97925", "0x78e979250000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x7943f2ec", "selector": "0x7943f2ec", "calldata_variants": [ "0x7943f2ec", "0x7943f2ec0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x801aba56", "selector": "0x801aba56", "calldata_variants": [ "0x801aba56", "0x801aba560000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1219, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1452, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 2024, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 3, "guards_detected": [ { "pc": 1648, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1813, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1919, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2136, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2437, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" } ], "untrusted_call_count": 3 }
medium	other	detector	ETH value transfer possible	40	no	no	view trace_id: 0x7a53f6f86215fb1fbed8c432820becd57f8d236c2f1230cd783235e9915d0d67 call_targets: 0x66bd1585b58c4c77a1060eed7d4578500b0bad4a target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x7a53f6f86215fb1fbed8c432820becd57f8d236c2f1230cd783235e9915d0d67", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x66bd1585b58c4c77a1060eed7d4578500b0bad4a" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0xffffffff", "selector": "0xffffffff", "calldata_variants": [ "0xffffffff", "0xffffffff0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x2c4e722e", "selector": "0x2c4e722e", "calldata_variants": [ "0x2c4e722e", "0x2c4e722e0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x3197cbb6", "selector": "0x3197cbb6", "calldata_variants": [ "0x3197cbb6", "0x3197cbb60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x66829b16", "selector": "0x66829b16", "calldata_variants": [ "0x66829b16", "0x66829b160000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x78e97925", "selector": "0x78e97925", "calldata_variants": [ "0x78e97925", "0x78e979250000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x7943f2ec", "selector": "0x7943f2ec", "calldata_variants": [ "0x7943f2ec", "0x7943f2ec0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x801aba56", "selector": "0x801aba56", "calldata_variants": [ "0x801aba56", "0x801aba560000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1219, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1452, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 2024, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 3, "guards_detected": [ { "pc": 1648, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1813, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1919, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2136, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2437, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" } ] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

medium

other

detector

Untrusted CALL target/value reachable

45

no

view

trace_id: 0x7a53f6f86215fb1fbed8c432820becd57f8d236c2f1230cd783235e9915d0d67

call_targets: 0x66bd1585b58c4c77a1060eed7d4578500b0bad4a

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x7a53f6f86215fb1fbed8c432820becd57f8d236c2f1230cd783235e9915d0d67",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x66bd1585b58c4c77a1060eed7d4578500b0bad4a"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2c4e722e",
            "selector": "0x2c4e722e",
            "calldata_variants": [
                "0x2c4e722e",
                "0x2c4e722e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3197cbb6",
            "selector": "0x3197cbb6",
            "calldata_variants": [
                "0x3197cbb6",
                "0x3197cbb60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x66829b16",
            "selector": "0x66829b16",
            "calldata_variants": [
                "0x66829b16",
                "0x66829b160000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x78e97925",
            "selector": "0x78e97925",
            "calldata_variants": [
                "0x78e97925",
                "0x78e979250000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7943f2ec",
            "selector": "0x7943f2ec",
            "calldata_variants": [
                "0x7943f2ec",
                "0x7943f2ec0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x801aba56",
            "selector": "0x801aba56",
            "calldata_variants": [
                "0x801aba56",
                "0x801aba560000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1219,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1452,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2024,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [
        {
            "pc": 1648,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1813,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1919,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 2136,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 2437,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 3
}