Analysis Run

019b477e-afc5-7278-8b4c-b354b6f79659

complete

Chain ID

1

Address

0x38da9416ee782cbba4113eb1379bc59478004a5a

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
21845	artifact.fetch	complete	1 / 3	3 months ago
21846	tool.cast_disasm	complete	1 / 3	3 months ago
64626	analysis.bundle	complete	1 / 3	2 weeks ago
64627	capability.graph	complete	1 / 3	2 weeks ago
64628	detector.run	complete	1 / 3	2 weeks ago
64629	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

2

EXT*/BALANCE

2

Total opcodes

722

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x006c
0000000c: JUMPI
0000000d: PUSH4 0xffffffff
00000012: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
00000030: PUSH1 0x00
00000032: CALLDATALOAD
00000033: DIV
00000034: AND
00000035: PUSH4 0x106e6290
0000003a: DUP2
0000003b: EQ
0000003c: PUSH2 0x00bc
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x1bc57b90
00000046: EQ
00000047: PUSH2 0x00e1
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x6932854f
00000051: EQ
00000052: PUSH2 0x010b
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0xd5995c4a
0000005c: EQ
0000005d: PUSH2 0x0121
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0xe8ffb32f
00000067: EQ
00000068: PUSH2 0x014c
0000006b: JUMPI
0000006c: JUMPDEST
0000006d: PUSH1 0x00
0000006f: CALLVALUE
00000070: GT
00000071: ISZERO
00000072: PUSH2 0x00ba
00000075: JUMPI
00000076: PUSH32 0xe1fffcc4923d04b559f4d29a8bfc6cda04eb5b0d3c460751c2402c5c5cc9109c
00000097: CALLER
00000098: CALLVALUE
00000099: PUSH1 0x40
0000009b: MLOAD
0000009c: PUSH1 0x01
0000009e: PUSH1 0xa0
000000a0: PUSH1 0x02
000000a2: EXP
000000a3: SUB
000000a4: SWAP1
000000a5: SWAP3
000000a6: AND
000000a7: DUP3
000000a8: MSTORE
000000a9: PUSH1 0x20
000000ab: DUP3
000000ac: ADD
000000ad: MSTORE
000000ae: PUSH1 0x40
000000b0: SWAP1
000000b1: DUP2
000000b2: ADD
000000b3: SWAP1
000000b4: MLOAD
000000b5: DUP1
000000b6: SWAP2
000000b7: SUB
000000b8: SWAP1
000000b9: LOG1
000000ba: JUMPDEST
000000bb: STOP
000000bc: JUMPDEST
000000bd: CALLVALUE
000000be: ISZERO
000000bf: PUSH2 0x00c7
000000c2: JUMPI
000000c3: PUSH1 0x00
000000c5: DUP1
000000c6: REVERT
000000c7: JUMPDEST
000000c8: PUSH2 0x00ba
000000cb: PUSH1 0x01
000000cd: PUSH1 0xa0
000000cf: PUSH1 0x02
000000d1: EXP
000000d2: SUB
000000d3: PUSH1 0x04
000000d5: CALLDATALOAD
000000d6: AND
000000d7: PUSH1 0x24
000000d9: CALLDATALOAD
000000da: PUSH1 0x44
000000dc: CALLDATALOAD
000000dd: PUSH2 0x0162
000000e0: JUMP
000000e1: JUMPDEST
000000e2: CALLVALUE
000000e3: ISZERO
000000e4: PUSH2 0x00ec
000000e7: JUMPI
000000e8: PUSH1 0x00
000000ea: DUP1
000000eb: REVERT
000000ec: JUMPDEST
000000ed: PUSH2 0x00f7
000000f0: PUSH1 0x04
000000f2: CALLDATALOAD
000000f3: PUSH2 0x0250
000000f6: JUMP
000000f7: JUMPDEST
000000f8: PUSH1 0x40
000000fa: MLOAD
000000fb: SWAP1
000000fc: ISZERO
000000fd: ISZERO
000000fe: DUP2
000000ff: MSTORE
00000100: PUSH1 0x20
00000102: ADD
00000103: PUSH1 0x40
00000105: MLOAD
00000106: DUP1
00000107: SWAP2
00000108: SUB
00000109: SWAP1
0000010a: RETURN
0000010b: JUMPDEST
0000010c: CALLVALUE
0000010d: ISZERO
0000010e: PUSH2 0x0116
00000111: JUMPI
00000112: PUSH1 0x00
00000114: DUP1
00000115: REVERT
00000116: JUMPDEST
00000117: PUSH2 0x00f7
0000011a: PUSH1 0x04
0000011c: CALLDATALOAD
0000011d: PUSH2 0x02de
00000120: JUMP
00000121: JUMPDEST
00000122: CALLVALUE
00000123: ISZERO
00000124: PUSH2 0x012c
00000127: JUMPI
00000128: PUSH1 0x00
0000012a: DUP1
0000012b: REVERT
0000012c: JUMPDEST
0000012d: PUSH2 0x00ba
00000130: PUSH1 0x01
00000132: PUSH1 0xa0
00000134: PUSH1 0x02
00000136: EXP
00000137: SUB
00000138: PUSH1 0x04
0000013a: CALLDATALOAD
0000013b: DUP2
0000013c: AND
0000013d: SWAP1
0000013e: PUSH1 0x24
00000140: CALLDATALOAD
00000141: AND
00000142: PUSH1 0x44
00000144: CALLDATALOAD
00000145: PUSH1 0x64
00000147: CALLDATALOAD
00000148: PUSH2 0x02f3
0000014b: JUMP
0000014c: JUMPDEST
0000014d: CALLVALUE
0000014e: ISZERO
0000014f: PUSH2 0x0157
00000152: JUMPI
00000153: PUSH1 0x00
00000155: DUP1
00000156: REVERT
00000157: JUMPDEST
00000158: PUSH2 0x00f7
0000015b: PUSH1 0x04
0000015d: CALLDATALOAD
0000015e: PUSH2 0x03f3
00000161: JUMP
00000162: JUMPDEST
00000163: PUSH1 0x00
00000165: SLOAD
00000166: CALLER
00000167: PUSH1 0x01
00000169: PUSH1 0xa0
0000016b: PUSH1 0x02
0000016d: EXP
0000016e: SUB
0000016f: SWAP1
00000170: DUP2
00000171: AND
00000172: SWAP2
00000173: AND
00000174: EQ
00000175: PUSH2 0x017d
00000178: JUMPI
00000179: PUSH1 0x00
0000017b: DUP1
0000017c: REVERT
0000017d: JUMPDEST
0000017e: PUSH1 0x00
00000180: DUP2
00000181: DUP2
00000182: MSTORE
00000183: PUSH1 0x01
00000185: PUSH1 0x20
00000187: MSTORE
00000188: PUSH1 0x40
0000018a: SWAP1
0000018b: KECCAK256
0000018c: SLOAD
0000018d: DUP2
0000018e: SWAP1
0000018f: PUSH1 0xff
00000191: AND
00000192: ISZERO
00000193: ISZERO
00000194: PUSH2 0x019c
00000197: JUMPI
00000198: PUSH1 0x00
0000019a: DUP1
0000019b: REVERT
0000019c: JUMPDEST
0000019d: PUSH1 0x01
0000019f: PUSH1 0xa0
000001a1: PUSH1 0x02
000001a3: EXP
000001a4: SUB
000001a5: DUP5
000001a6: AND
000001a7: ISZERO
000001a8: DUP1
000001a9: ISZERO
000001aa: SWAP1
000001ab: PUSH2 0x01b4
000001ae: JUMPI
000001af: POP
000001b0: PUSH1 0x00
000001b2: DUP4
000001b3: GT
000001b4: JUMPDEST
000001b5: DUP1
000001b6: ISZERO
000001b7: PUSH2 0x01ca
000001ba: JUMPI
000001bb: POP
000001bc: DUP3
000001bd: ADDRESS
000001be: PUSH1 0x01
000001c0: PUSH1 0xa0
000001c2: PUSH1 0x02
000001c4: EXP
000001c5: SUB
000001c6: AND
000001c7: BALANCE
000001c8: LT
000001c9: ISZERO
000001ca: JUMPDEST
000001cb: ISZERO
000001cc: ISZERO
000001cd: PUSH2 0x01d5
000001d0: JUMPI
000001d1: PUSH1 0x00
000001d3: DUP1
000001d4: REVERT
000001d5: JUMPDEST
000001d6: PUSH1 0x01
000001d8: PUSH1 0xa0
000001da: PUSH1 0x02
000001dc: EXP
000001dd: SUB
000001de: DUP5
000001df: AND
000001e0: DUP4
000001e1: ISZERO
000001e2: PUSH2 0x08fc
000001e5: MUL
000001e6: DUP5
000001e7: PUSH1 0x40
000001e9: MLOAD
000001ea: PUSH1 0x00
000001ec: PUSH1 0x40
000001ee: MLOAD
000001ef: DUP1
000001f0: DUP4
000001f1: SUB
000001f2: DUP2
000001f3: DUP6
000001f4: DUP9
000001f5: DUP9
000001f6: CALL
000001f7: SWAP4
000001f8: POP
000001f9: POP
000001fa: POP
000001fb: POP
000001fc: ISZERO
000001fd: ISZERO
000001fe: PUSH2 0x0206
00000201: JUMPI
00000202: PUSH1 0x00
00000204: DUP1
00000205: REVERT
00000206: JUMPDEST
00000207: PUSH32 0x884edad9ce6fa2440d8a54cc123490eb96d2768479d49ff9c7366125a9424364
00000228: DUP5
00000229: DUP5
0000022a: PUSH1 0x40
0000022c: MLOAD
0000022d: PUSH1 0x01
0000022f: PUSH1 0xa0
00000231: PUSH1 0x02
00000233: EXP
00000234: SUB
00000235: SWAP1
00000236: SWAP3
00000237: AND
00000238: DUP3
00000239: MSTORE
0000023a: PUSH1 0x20
0000023c: DUP3
0000023d: ADD
0000023e: MSTORE
0000023f: PUSH1 0x40
00000241: SWAP1
00000242: DUP2
00000243: ADD
00000244: SWAP1
00000245: MLOAD
00000246: DUP1
00000247: SWAP2
00000248: SUB
00000249: SWAP1
0000024a: LOG1
0000024b: POP
0000024c: POP
0000024d: POP
0000024e: POP
0000024f: JUMP
00000250: JUMPDEST
00000251: PUSH1 0x00
00000253: DUP1
00000254: SLOAD
00000255: CALLER
00000256: PUSH1 0x01
00000258: PUSH1 0xa0
0000025a: PUSH1 0x02
0000025c: EXP
0000025d: SUB
0000025e: SWAP1
0000025f: DUP2
00000260: AND
00000261: SWAP2
00000262: AND
00000263: EQ
00000264: PUSH2 0x026c
00000267: JUMPI
00000268: PUSH1 0x00
0000026a: DUP1
0000026b: REVERT
0000026c: JUMPDEST
0000026d: PUSH32 0xf7e63a19403de365ec1053b51e34449db449bfbad2b139b8f8ed7cd546b42687
0000028e: DUP3
0000028f: PUSH1 0x40
00000291: MLOAD
00000292: SWAP1
00000293: DUP2
00000294: MSTORE
00000295: PUSH1 0x20
00000297: ADD
00000298: PUSH1 0x40
0000029a: MLOAD
0000029b: DUP1
0000029c: SWAP2
0000029d: SUB
0000029e: SWAP1
0000029f: LOG1
000002a0: PUSH1 0x00
000002a2: DUP3
000002a3: DUP2
000002a4: MSTORE
000002a5: PUSH1 0x01
000002a7: PUSH1 0x20
000002a9: MSTORE
000002aa: PUSH1 0x40
000002ac: SWAP1
000002ad: KECCAK256
000002ae: SLOAD
000002af: PUSH1 0xff
000002b1: AND
000002b2: ISZERO
000002b3: PUSH2 0x02d5
000002b6: JUMPI
000002b7: POP
000002b8: PUSH1 0x00
000002ba: DUP2
000002bb: DUP2
000002bc: MSTORE
000002bd: PUSH1 0x01
000002bf: PUSH1 0x20
000002c1: DUP2
000002c2: SWAP1
000002c3: MSTORE
000002c4: PUSH1 0x40
000002c6: SWAP1
000002c7: SWAP2
000002c8: KECCAK256
000002c9: DUP1
000002ca: SLOAD
000002cb: PUSH1 0xff
000002cd: NOT
000002ce: AND
000002cf: SWAP1
000002d0: SSTORE
000002d1: PUSH2 0x02d9
000002d4: JUMP
000002d5: JUMPDEST
000002d6: POP
000002d7: PUSH1 0x00
000002d9: JUMPDEST
000002da: SWAP2
000002db: SWAP1
000002dc: POP
000002dd: JUMP
000002de: JUMPDEST
000002df: PUSH1 0x00
000002e1: SWAP1
000002e2: DUP2
000002e3: MSTORE
000002e4: PUSH1 0x01
000002e6: PUSH1 0x20
000002e8: MSTORE
000002e9: PUSH1 0x40
000002eb: SWAP1
000002ec: KECCAK256
000002ed: SLOAD
000002ee: PUSH1 0xff
000002f0: AND
000002f1: SWAP1
000002f2: JUMP
000002f3: JUMPDEST
000002f4: PUSH1 0x00
000002f6: SLOAD
000002f7: CALLER
000002f8: PUSH1 0x01
000002fa: PUSH1 0xa0
000002fc: PUSH1 0x02
000002fe: EXP
000002ff: SUB
00000300: SWAP1
00000301: DUP2
00000302: AND
00000303: SWAP2
00000304: AND
00000305: EQ
00000306: PUSH2 0x030e
00000309: JUMPI
0000030a: PUSH1 0x00
0000030c: DUP1
0000030d: REVERT
0000030e: JUMPDEST
0000030f: PUSH1 0x00
00000311: DUP2
00000312: DUP2
00000313: MSTORE
00000314: PUSH1 0x01
00000316: PUSH1 0x20
00000318: MSTORE
00000319: PUSH1 0x40
0000031b: SWAP1
0000031c: KECCAK256
0000031d: SLOAD
0000031e: DUP2
0000031f: SWAP1
00000320: PUSH1 0xff
00000322: AND
00000323: ISZERO
00000324: ISZERO
00000325: PUSH2 0x032d
00000328: JUMPI
00000329: PUSH1 0x00
0000032b: DUP1
0000032c: REVERT
0000032d: JUMPDEST
0000032e: PUSH1 0x01
00000330: PUSH1 0xa0
00000332: PUSH1 0x02
00000334: EXP
00000335: SUB
00000336: DUP5
00000337: AND
00000338: ISZERO
00000339: DUP1
0000033a: ISZERO
0000033b: SWAP1
0000033c: PUSH2 0x0345
0000033f: JUMPI
00000340: POP
00000341: PUSH1 0x00
00000343: DUP4
00000344: GT
00000345: JUMPDEST
00000346: ISZERO
00000347: ISZERO
00000348: PUSH2 0x0350
0000034b: JUMPI
0000034c: PUSH1 0x00
0000034e: DUP1
0000034f: REVERT
00000350: JUMPDEST
00000351: DUP5
00000352: PUSH1 0x01
00000354: PUSH1 0xa0
00000356: PUSH1 0x02
00000358: EXP
00000359: SUB
0000035a: AND
0000035b: PUSH4 0xa9059cbb
00000360: DUP6
00000361: DUP6
00000362: PUSH1 0x00
00000364: PUSH1 0x40
00000366: MLOAD
00000367: PUSH1 0x20
00000369: ADD
0000036a: MSTORE
0000036b: PUSH1 0x40
0000036d: MLOAD
0000036e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000038c: PUSH4 0xffffffff
00000391: DUP6
00000392: AND
00000393: MUL
00000394: DUP2
00000395: MSTORE
00000396: PUSH1 0x01
00000398: PUSH1 0xa0
0000039a: PUSH1 0x02
0000039c: EXP
0000039d: SUB
0000039e: SWAP1
0000039f: SWAP3
000003a0: AND
000003a1: PUSH1 0x04
000003a3: DUP4
000003a4: ADD
000003a5: MSTORE
000003a6: PUSH1 0x24
000003a8: DUP3
000003a9: ADD
000003aa: MSTORE
000003ab: PUSH1 0x44
000003ad: ADD
000003ae: PUSH1 0x20
000003b0: PUSH1 0x40
000003b2: MLOAD
000003b3: DUP1
000003b4: DUP4
000003b5: SUB
000003b6: DUP2
000003b7: PUSH1 0x00
000003b9: DUP8
000003ba: DUP1
000003bb: EXTCODESIZE
000003bc: ISZERO
000003bd: ISZERO
000003be: PUSH2 0x03c6
000003c1: JUMPI
000003c2: PUSH1 0x00
000003c4: DUP1
000003c5: REVERT
000003c6: JUMPDEST
000003c7: PUSH2 0x02c6
000003ca: GAS
000003cb: SUB
000003cc: CALL
000003cd: ISZERO
000003ce: ISZERO
000003cf: PUSH2 0x03d7
000003d2: JUMPI
000003d3: PUSH1 0x00
000003d5: DUP1
000003d6: REVERT
000003d7: JUMPDEST
000003d8: POP
000003d9: POP
000003da: POP
000003db: PUSH1 0x40
000003dd: MLOAD
000003de: DUP1
000003df: MLOAD
000003e0: SWAP1
000003e1: POP
000003e2: ISZERO
000003e3: ISZERO
000003e4: PUSH2 0x03ec
000003e7: JUMPI
000003e8: PUSH1 0x00
000003ea: DUP1
000003eb: REVERT
000003ec: JUMPDEST
000003ed: POP
000003ee: POP
000003ef: POP
000003f0: POP
000003f1: POP
000003f2: JUMP
000003f3: JUMPDEST
000003f4: PUSH1 0x00
000003f6: DUP1
000003f7: SLOAD
000003f8: CALLER
000003f9: PUSH1 0x01
000003fb: PUSH1 0xa0
000003fd: PUSH1 0x02
000003ff: EXP
00000400: SUB
00000401: SWAP1
00000402: DUP2
00000403: AND
00000404: SWAP2
00000405: AND
00000406: EQ
00000407: PUSH2 0x040f
0000040a: JUMPI
0000040b: PUSH1 0x00
0000040d: DUP1
0000040e: REVERT
0000040f: JUMPDEST
00000410: PUSH1 0x00
00000412: DUP3
00000413: DUP2
00000414: MSTORE
00000415: PUSH1 0x01
00000417: PUSH1 0x20
00000419: MSTORE
0000041a: PUSH1 0x40
0000041c: SWAP1
0000041d: KECCAK256
0000041e: SLOAD
0000041f: PUSH1 0xff
00000421: AND
00000422: ISZERO
00000423: PUSH2 0x042e
00000426: JUMPI
00000427: POP
00000428: PUSH1 0x00
0000042a: PUSH2 0x02d9
0000042d: JUMP
0000042e: JUMPDEST
0000042f: PUSH1 0x00
00000431: DUP3
00000432: DUP2
00000433: MSTORE
00000434: PUSH1 0x01
00000436: PUSH1 0x20
00000438: DUP2
00000439: SWAP1
0000043a: MSTORE
0000043b: PUSH1 0x40
0000043d: SWAP2
0000043e: DUP3
0000043f: SWAP1
00000440: KECCAK256
00000441: DUP1
00000442: SLOAD
00000443: PUSH1 0xff
00000445: NOT
00000446: AND
00000447: SWAP1
00000448: SWAP2
00000449: OR
0000044a: SWAP1
0000044b: SSTORE
0000044c: PUSH32 0x19d544d2bbf9f77ed0ab86140926d49d992616ab5fc07309b84eb6f1d3576d7e
0000046d: SWAP1
0000046e: DUP4
0000046f: SWAP1
00000470: MLOAD
00000471: SWAP1
00000472: DUP2
00000473: MSTORE
00000474: PUSH1 0x20
00000476: ADD
00000477: PUSH1 0x40
00000479: MLOAD
0000047a: DUP1
0000047b: SWAP2
0000047c: SUB
0000047d: SWAP1
0000047e: LOG1
0000047f: POP
00000480: PUSH1 0x01
00000482: SWAP2
00000483: SWAP1
00000484: POP
00000485: JUMP
00000486: STOP
00000487: LOG1
00000488: PUSH6 0x627a7a723058
0000048f: KECCAK256
00000490: LOG4
00000491: GASPRICE
00000492: DUP13
00000493: CODESIZE
00000494: ADD
00000495: GT
00000496: UNKNOWN(0x2E)
00000497: UNKNOWN(0xC6)
00000498: GAS
00000499: PUSH30

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x5c74ab8581a9d6e88090803c02d484a667e4da9d5c796de68b28dfc936d6c095 call_targets: 0x38da9416ee782cbba4113eb1379bc59478004a5a target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x5c74ab8581a9d6e88090803c02d484a667e4da9d5c796de68b28dfc936d6c095", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x38da9416ee782cbba4113eb1379bc59478004a5a" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x106e6290", "selector": "0x106e6290", "calldata_variants": [ "0x106e6290", "0x106e62900000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1bc57b90", "selector": "0x1bc57b90", "calldata_variants": [ "0x1bc57b90", "0x1bc57b900000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x6932854f", "selector": "0x6932854f", "calldata_variants": [ "0x6932854f", "0x6932854f0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd5995c4a", "selector": "0xd5995c4a", "calldata_variants": [ "0xd5995c4a", "0xd5995c4a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xe8ffb32f", "selector": "0xe8ffb32f", "calldata_variants": [ "0xe8ffb32f", "0xe8ffb32f0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 502, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 972, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 2, "guards_detected": [], "untrusted_call_count": 2 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x5c74ab8581a9d6e88090803c02d484a667e4da9d5c796de68b28dfc936d6c095 call_targets: 0x38da9416ee782cbba4113eb1379bc59478004a5a target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x5c74ab8581a9d6e88090803c02d484a667e4da9d5c796de68b28dfc936d6c095", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x38da9416ee782cbba4113eb1379bc59478004a5a" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x106e6290", "selector": "0x106e6290", "calldata_variants": [ "0x106e6290", "0x106e62900000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1bc57b90", "selector": "0x1bc57b90", "calldata_variants": [ "0x1bc57b90", "0x1bc57b900000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x6932854f", "selector": "0x6932854f", "calldata_variants": [ "0x6932854f", "0x6932854f0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd5995c4a", "selector": "0xd5995c4a", "calldata_variants": [ "0xd5995c4a", "0xd5995c4a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xe8ffb32f", "selector": "0xe8ffb32f", "calldata_variants": [ "0xe8ffb32f", "0xe8ffb32f0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 502, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 972, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 2, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x5c74ab8581a9d6e88090803c02d484a667e4da9d5c796de68b28dfc936d6c095

call_targets: 0x38da9416ee782cbba4113eb1379bc59478004a5a

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x5c74ab8581a9d6e88090803c02d484a667e4da9d5c796de68b28dfc936d6c095",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x38da9416ee782cbba4113eb1379bc59478004a5a"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x106e6290",
            "selector": "0x106e6290",
            "calldata_variants": [
                "0x106e6290",
                "0x106e62900000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1bc57b90",
            "selector": "0x1bc57b90",
            "calldata_variants": [
                "0x1bc57b90",
                "0x1bc57b900000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6932854f",
            "selector": "0x6932854f",
            "calldata_variants": [
                "0x6932854f",
                "0x6932854f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd5995c4a",
            "selector": "0xd5995c4a",
            "calldata_variants": [
                "0xd5995c4a",
                "0xd5995c4a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe8ffb32f",
            "selector": "0xe8ffb32f",
            "calldata_variants": [
                "0xe8ffb32f",
                "0xe8ffb32f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 502,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 972,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}