019b477e-b055-700e-acfc-0ec67e4eeb1f
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 21955 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 21956 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 89221 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 89222 | capability.graph | complete | 1 / 3 | 1 week ago |
| 89223 | detector.run | complete | 1 / 3 | 1 week ago |
| 89224 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x006c 0000000c: JUMPI 0000000d: PUSH4 0xffffffff 00000012: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 00000030: PUSH1 0x00 00000032: CALLDATALOAD 00000033: DIV 00000034: AND 00000035: PUSH4 0x0839e0fb 0000003a: DUP2 0000003b: EQ 0000003c: PUSH2 0x0071 0000003f: JUMPI 00000040: DUP1 00000041: PUSH4 0x4e71d92d 00000046: EQ 00000047: PUSH2 0x009a 0000004a: JUMPI 0000004b: DUP1 0000004c: PUSH4 0x7ac09ec4 00000051: EQ 00000052: PUSH2 0x00af 00000055: JUMPI 00000056: DUP1 00000057: PUSH4 0x8da5cb5b 0000005c: EQ 0000005d: PUSH2 0x00ef 00000060: JUMPI 00000061: DUP1 00000062: PUSH4 0xf340fa01 00000067: EQ 00000068: PUSH2 0x012d 0000006b: JUMPI 0000006c: JUMPDEST 0000006d: PUSH1 0x00 0000006f: DUP1 00000070: REVERT 00000071: JUMPDEST 00000072: CALLVALUE 00000073: DUP1 00000074: ISZERO 00000075: PUSH2 0x007d 00000078: JUMPI 00000079: PUSH1 0x00 0000007b: DUP1 0000007c: REVERT 0000007d: JUMPDEST 0000007e: POP 0000007f: PUSH2 0x0086 00000082: PUSH2 0x014e 00000085: JUMP 00000086: JUMPDEST 00000087: PUSH1 0x40 00000089: DUP1 0000008a: MLOAD 0000008b: SWAP2 0000008c: ISZERO 0000008d: ISZERO 0000008e: DUP3 0000008f: MSTORE 00000090: MLOAD 00000091: SWAP1 00000092: DUP2 00000093: SWAP1 00000094: SUB 00000095: PUSH1 0x20 00000097: ADD 00000098: SWAP1 00000099: RETURN 0000009a: JUMPDEST 0000009b: CALLVALUE 0000009c: DUP1 0000009d: ISZERO 0000009e: PUSH2 0x00a6 000000a1: JUMPI 000000a2: PUSH1 0x00 000000a4: DUP1 000000a5: REVERT 000000a6: JUMPDEST 000000a7: POP 000000a8: PUSH2 0x0086 000000ab: PUSH2 0x0153 000000ae: JUMP 000000af: JUMPDEST 000000b0: CALLVALUE 000000b1: DUP1 000000b2: ISZERO 000000b3: PUSH2 0x00bb 000000b6: JUMPI 000000b7: PUSH1 0x00 000000b9: DUP1 000000ba: REVERT 000000bb: JUMPDEST 000000bc: POP 000000bd: PUSH2 0x00dd 000000c0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000d5: PUSH1 0x04 000000d7: CALLDATALOAD 000000d8: AND 000000d9: PUSH2 0x0217 000000dc: JUMP 000000dd: JUMPDEST 000000de: PUSH1 0x40 000000e0: DUP1 000000e1: MLOAD 000000e2: SWAP2 000000e3: DUP3 000000e4: MSTORE 000000e5: MLOAD 000000e6: SWAP1 000000e7: DUP2 000000e8: SWAP1 000000e9: SUB 000000ea: PUSH1 0x20 000000ec: ADD 000000ed: SWAP1 000000ee: RETURN 000000ef: JUMPDEST 000000f0: CALLVALUE 000000f1: DUP1 000000f2: ISZERO 000000f3: PUSH2 0x00fb 000000f6: JUMPI 000000f7: PUSH1 0x00 000000f9: DUP1 000000fa: REVERT 000000fb: JUMPDEST 000000fc: POP 000000fd: PUSH2 0x0104 00000100: PUSH2 0x0229 00000103: JUMP 00000104: JUMPDEST 00000105: PUSH1 0x40 00000107: DUP1 00000108: MLOAD 00000109: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000011e: SWAP1 0000011f: SWAP3 00000120: AND 00000121: DUP3 00000122: MSTORE 00000123: MLOAD 00000124: SWAP1 00000125: DUP2 00000126: SWAP1 00000127: SUB 00000128: PUSH1 0x20 0000012a: ADD 0000012b: SWAP1 0000012c: RETURN 0000012d: JUMPDEST 0000012e: PUSH2 0x0086 00000131: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000146: PUSH1 0x04 00000148: CALLDATALOAD 00000149: AND 0000014a: PUSH2 0x0245 0000014d: JUMP 0000014e: JUMPDEST 0000014f: PUSH1 0x00 00000151: SWAP1 00000152: JUMP 00000153: JUMPDEST 00000154: PUSH1 0x01 00000156: SLOAD 00000157: PUSH1 0x00 00000159: SWAP1 0000015a: DUP2 0000015b: SWAP1 0000015c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000171: AND 00000172: CALLER 00000173: EQ 00000174: PUSH2 0x01de 00000177: JUMPI 00000178: PUSH1 0x40 0000017a: DUP1 0000017b: MLOAD 0000017c: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 0000019d: DUP2 0000019e: MSTORE 0000019f: PUSH1 0x20 000001a1: PUSH1 0x04 000001a3: DUP3 000001a4: ADD 000001a5: MSTORE 000001a6: PUSH1 0x10 000001a8: PUSH1 0x24 000001aa: DUP3 000001ab: ADD 000001ac: MSTORE 000001ad: PUSH32 0x206f6e6c79206f776e65722063616c6c00000000000000000000000000000000 000001ce: PUSH1 0x44 000001d0: DUP3 000001d1: ADD 000001d2: MSTORE 000001d3: SWAP1 000001d4: MLOAD 000001d5: SWAP1 000001d6: DUP2 000001d7: SWAP1 000001d8: SUB 000001d9: PUSH1 0x64 000001db: ADD 000001dc: SWAP1 000001dd: REVERT 000001de: JUMPDEST 000001df: POP 000001e0: PUSH1 0x40 000001e2: MLOAD 000001e3: CALLER 000001e4: SWAP1 000001e5: DUP2 000001e6: SWAP1 000001e7: ADDRESS 000001e8: BALANCE 000001e9: DUP1 000001ea: ISZERO 000001eb: PUSH2 0x08fc 000001ee: MUL 000001ef: SWAP2 000001f0: PUSH1 0x00 000001f2: DUP2 000001f3: DUP2 000001f4: DUP2 000001f5: DUP6 000001f6: DUP9 000001f7: DUP9 000001f8: CALL 000001f9: SWAP4 000001fa: POP 000001fb: POP 000001fc: POP 000001fd: POP 000001fe: ISZERO 000001ff: DUP1 00000200: ISZERO 00000201: PUSH2 0x020e 00000204: JUMPI 00000205: RETURNDATASIZE 00000206: PUSH1 0x00 00000208: DUP1 00000209: RETURNDATACOPY 0000020a: RETURNDATASIZE 0000020b: PUSH1 0x00 0000020d: REVERT 0000020e: JUMPDEST 0000020f: POP 00000210: PUSH1 0x01 00000212: SWAP2 00000213: POP 00000214: POP 00000215: SWAP1 00000216: JUMP 00000217: JUMPDEST 00000218: PUSH1 0x00 0000021a: PUSH1 0x20 0000021c: DUP2 0000021d: SWAP1 0000021e: MSTORE 0000021f: SWAP1 00000220: DUP2 00000221: MSTORE 00000222: PUSH1 0x40 00000224: SWAP1 00000225: KECCAK256 00000226: SLOAD 00000227: DUP2 00000228: JUMP 00000229: JUMPDEST 0000022a: PUSH1 0x01 0000022c: SLOAD 0000022d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000242: AND 00000243: DUP2 00000244: JUMP 00000245: JUMPDEST 00000246: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000025b: AND 0000025c: PUSH1 0x00 0000025e: SWAP1 0000025f: DUP2 00000260: MSTORE 00000261: PUSH1 0x20 00000263: DUP2 00000264: SWAP1 00000265: MSTORE 00000266: PUSH1 0x40 00000268: SWAP1 00000269: KECCAK256 0000026a: DUP1 0000026b: SLOAD 0000026c: CALLVALUE 0000026d: ADD 0000026e: SWAP1 0000026f: SSTORE 00000270: PUSH1 0x01 00000272: SWAP1 00000273: JUMP 00000274: STOP 00000275: LOG1 00000276: PUSH6 0x627a7a723058 0000027d: KECCAK256 0000027e: SELFBALANCE 0000027f: RETURN 00000280: UNKNOWN(0xDE) 00000281: UNKNOWN(0x28) 00000282: MLOAD 00000283: DELEGATECALL 00000284: DUP11 00000285: DUP3 00000286: DELEGATECALL 00000287: UNKNOWN(0x29) 00000288: UNKNOWN(0xB8) 00000289: POP 0000028a: UNKNOWN(0xCF) 0000028b: PUSH2 0x541c 0000028e: PUSH3 0x398de2 00000292: BYTE 00000293: DUP4 00000294: SWAP10 00000295: PUSH19
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0x3fdb44182e1973b77ad7090096383147fa3dea9dcca3f5434b4d17649a28d537
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "unknown",
"attempts": 60,
"trace_id": "0x3fdb44182e1973b77ad7090096383147fa3dea9dcca3f5434b4d17649a28d537",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0839e0fb",
"selector": "0x0839e0fb",
"calldata_variants": [
"0x0839e0fb",
"0x0839e0fb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4e71d92d",
"selector": "0x4e71d92d",
"calldata_variants": [
"0x4e71d92d",
"0x4e71d92d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x7ac09ec4",
"selector": "0x7ac09ec4",
"calldata_variants": [
"0x7ac09ec4",
"0x7ac09ec40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf340fa01",
"selector": "0xf340fa01",
"calldata_variants": [
"0xf340fa01",
"0xf340fa010000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 643,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 646,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xbf1006f85cc41d7737e8e6c221b638d682dbe963be5fda3f49e50465c118f210
call_targets:
0x09124d06f8fcd728ff11013034091f8b6baff930
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xbf1006f85cc41d7737e8e6c221b638d682dbe963be5fda3f49e50465c118f210",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x09124d06f8fcd728ff11013034091f8b6baff930"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0839e0fb",
"selector": "0x0839e0fb",
"calldata_variants": [
"0x0839e0fb",
"0x0839e0fb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4e71d92d",
"selector": "0x4e71d92d",
"calldata_variants": [
"0x4e71d92d",
"0x4e71d92d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x7ac09ec4",
"selector": "0x7ac09ec4",
"calldata_variants": [
"0x7ac09ec4",
"0x7ac09ec40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf340fa01",
"selector": "0xf340fa01",
"calldata_variants": [
"0xf340fa01",
"0xf340fa010000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 504,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xbf1006f85cc41d7737e8e6c221b638d682dbe963be5fda3f49e50465c118f210
call_targets:
0x09124d06f8fcd728ff11013034091f8b6baff930
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xbf1006f85cc41d7737e8e6c221b638d682dbe963be5fda3f49e50465c118f210",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x09124d06f8fcd728ff11013034091f8b6baff930"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0839e0fb",
"selector": "0x0839e0fb",
"calldata_variants": [
"0x0839e0fb",
"0x0839e0fb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4e71d92d",
"selector": "0x4e71d92d",
"calldata_variants": [
"0x4e71d92d",
"0x4e71d92d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x7ac09ec4",
"selector": "0x7ac09ec4",
"calldata_variants": [
"0x7ac09ec4",
"0x7ac09ec40000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf340fa01",
"selector": "0xf340fa01",
"calldata_variants": [
"0xf340fa01",
"0xf340fa010000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 504,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|