TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-b0df-713c-a3b9-078d03d7abc8

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
22051 artifact.fetch complete 1 / 3 3 months ago
22052 tool.cast_disasm complete 1 / 3 3 months ago
89049 analysis.bundle complete 1 / 3 2 weeks ago
89050 capability.graph complete 1 / 3 2 weeks ago
89051 detector.run complete 1 / 3 2 weeks ago
89052 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
1
CALL-family (heavy)
5
EXT*/BALANCE
3
Total opcodes
1082
Flags
create_opcodes_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0048
0000000c: JUMPI
0000000d: PUSH4 0xffffffff
00000012: PUSH1 0xe0
00000014: PUSH1 0x02
00000016: EXP
00000017: PUSH1 0x00
00000019: CALLDATALOAD
0000001a: DIV
0000001b: AND
0000001c: PUSH4 0x01e33667
00000021: DUP2
00000022: EQ
00000023: PUSH2 0x004a
00000026: JUMPI
00000027: DUP1
00000028: PUSH4 0x247956f1
0000002d: EQ
0000002e: PUSH2 0x0074
00000031: JUMPI
00000032: DUP1
00000033: PUSH4 0x48de0cdc
00000038: EQ
00000039: PUSH2 0x0102
0000003c: JUMPI
0000003d: DUP1
0000003e: PUSH4 0x522f6815
00000043: EQ
00000044: PUSH2 0x01c9
00000047: JUMPI
00000048: JUMPDEST
00000049: STOP
0000004a: JUMPDEST
0000004b: CALLVALUE
0000004c: DUP1
0000004d: ISZERO
0000004e: PUSH2 0x0056
00000051: JUMPI
00000052: PUSH1 0x00
00000054: DUP1
00000055: REVERT
00000056: JUMPDEST
00000057: POP
00000058: PUSH2 0x0048
0000005b: PUSH1 0x01
0000005d: PUSH1 0xa0
0000005f: PUSH1 0x02
00000061: EXP
00000062: SUB
00000063: PUSH1 0x04
00000065: CALLDATALOAD
00000066: DUP2
00000067: AND
00000068: SWAP1
00000069: PUSH1 0x24
0000006b: CALLDATALOAD
0000006c: AND
0000006d: PUSH1 0x44
0000006f: CALLDATALOAD
00000070: PUSH2 0x01ed
00000073: JUMP
00000074: JUMPDEST
00000075: CALLVALUE
00000076: DUP1
00000077: ISZERO
00000078: PUSH2 0x0080
0000007b: JUMPI
0000007c: PUSH1 0x00
0000007e: DUP1
0000007f: REVERT
00000080: JUMPDEST
00000081: POP
00000082: PUSH1 0x40
00000084: DUP1
00000085: MLOAD
00000086: PUSH1 0x20
00000088: PUSH1 0x04
0000008a: DUP1
0000008b: CALLDATALOAD
0000008c: DUP1
0000008d: DUP3
0000008e: ADD
0000008f: CALLDATALOAD
00000090: DUP4
00000091: DUP2
00000092: MUL
00000093: DUP1
00000094: DUP7
00000095: ADD
00000096: DUP6
00000097: ADD
00000098: SWAP1
00000099: SWAP7
0000009a: MSTORE
0000009b: DUP1
0000009c: DUP6
0000009d: MSTORE
0000009e: PUSH2 0x0048
000000a1: SWAP6
000000a2: CALLDATASIZE
000000a3: SWAP6
000000a4: SWAP4
000000a5: SWAP5
000000a6: PUSH1 0x24
000000a8: SWAP5
000000a9: SWAP4
000000aa: DUP6
000000ab: ADD
000000ac: SWAP3
000000ad: SWAP2
000000ae: DUP3
000000af: SWAP2
000000b0: DUP6
000000b1: ADD
000000b2: SWAP1
000000b3: DUP5
000000b4: SWAP1
000000b5: DUP1
000000b6: DUP3
000000b7: DUP5
000000b8: CALLDATACOPY
000000b9: POP
000000ba: POP
000000bb: PUSH1 0x40
000000bd: DUP1
000000be: MLOAD
000000bf: DUP8
000000c0: CALLDATALOAD
000000c1: DUP10
000000c2: ADD
000000c3: DUP1
000000c4: CALLDATALOAD
000000c5: PUSH1 0x20
000000c7: DUP2
000000c8: DUP2
000000c9: MUL
000000ca: DUP5
000000cb: DUP2
000000cc: ADD
000000cd: DUP3
000000ce: ADD
000000cf: SWAP1
000000d0: SWAP6
000000d1: MSTORE
000000d2: DUP2
000000d3: DUP5
000000d4: MSTORE
000000d5: SWAP9
000000d6: SWAP12
000000d7: SWAP11
000000d8: SWAP10
000000d9: DUP10
000000da: ADD
000000db: SWAP9
000000dc: SWAP3
000000dd: SWAP8
000000de: POP
000000df: SWAP1
000000e0: DUP3
000000e1: ADD
000000e2: SWAP6
000000e3: POP
000000e4: SWAP4
000000e5: POP
000000e6: DUP4
000000e7: SWAP3
000000e8: POP
000000e9: DUP6
000000ea: ADD
000000eb: SWAP1
000000ec: DUP5
000000ed: SWAP1
000000ee: DUP1
000000ef: DUP3
000000f0: DUP5
000000f1: CALLDATACOPY
000000f2: POP
000000f3: SWAP5
000000f4: SWAP8
000000f5: POP
000000f6: PUSH2 0x0298
000000f9: SWAP7
000000fa: POP
000000fb: POP
000000fc: POP
000000fd: POP
000000fe: POP
000000ff: POP
00000100: POP
00000101: JUMP
00000102: JUMPDEST
00000103: CALLVALUE
00000104: DUP1
00000105: ISZERO
00000106: PUSH2 0x010e
00000109: JUMPI
0000010a: PUSH1 0x00
0000010c: DUP1
0000010d: REVERT
0000010e: JUMPDEST
0000010f: POP
00000110: PUSH1 0x40
00000112: DUP1
00000113: MLOAD
00000114: PUSH1 0x20
00000116: PUSH1 0x04
00000118: DUP1
00000119: CALLDATALOAD
0000011a: DUP1
0000011b: DUP3
0000011c: ADD
0000011d: CALLDATALOAD
0000011e: DUP4
0000011f: DUP2
00000120: MUL
00000121: DUP1
00000122: DUP7
00000123: ADD
00000124: DUP6
00000125: ADD
00000126: SWAP1
00000127: SWAP7
00000128: MSTORE
00000129: DUP1
0000012a: DUP6
0000012b: MSTORE
0000012c: PUSH2 0x0048
0000012f: SWAP6
00000130: CALLDATASIZE
00000131: SWAP6
00000132: SWAP4
00000133: SWAP5
00000134: PUSH1 0x24
00000136: SWAP5
00000137: SWAP4
00000138: DUP6
00000139: ADD
0000013a: SWAP3
0000013b: SWAP2
0000013c: DUP3
0000013d: SWAP2
0000013e: DUP6
0000013f: ADD
00000140: SWAP1
00000141: DUP5
00000142: SWAP1
00000143: DUP1
00000144: DUP3
00000145: DUP5
00000146: CALLDATACOPY
00000147: POP
00000148: POP
00000149: PUSH1 0x40
0000014b: DUP1
0000014c: MLOAD
0000014d: DUP8
0000014e: CALLDATALOAD
0000014f: DUP10
00000150: ADD
00000151: DUP1
00000152: CALLDATALOAD
00000153: PUSH1 0x20
00000155: DUP2
00000156: DUP2
00000157: MUL
00000158: DUP5
00000159: DUP2
0000015a: ADD
0000015b: DUP3
0000015c: ADD
0000015d: SWAP1
0000015e: SWAP6
0000015f: MSTORE
00000160: DUP2
00000161: DUP5
00000162: MSTORE
00000163: SWAP9
00000164: SWAP12
00000165: SWAP11
00000166: SWAP10
00000167: DUP10
00000168: ADD
00000169: SWAP9
0000016a: SWAP3
0000016b: SWAP8
0000016c: POP
0000016d: SWAP1
0000016e: DUP3
0000016f: ADD
00000170: SWAP6
00000171: POP
00000172: SWAP4
00000173: POP
00000174: DUP4
00000175: SWAP3
00000176: POP
00000177: DUP6
00000178: ADD
00000179: SWAP1
0000017a: DUP5
0000017b: SWAP1
0000017c: DUP1
0000017d: DUP3
0000017e: DUP5
0000017f: CALLDATACOPY
00000180: POP
00000181: POP
00000182: PUSH1 0x40
00000184: DUP1
00000185: MLOAD
00000186: DUP8
00000187: CALLDATALOAD
00000188: DUP10
00000189: ADD
0000018a: DUP1
0000018b: CALLDATALOAD
0000018c: PUSH1 0x20
0000018e: DUP2
0000018f: DUP2
00000190: MUL
00000191: DUP5
00000192: DUP2
00000193: ADD
00000194: DUP3
00000195: ADD
00000196: SWAP1
00000197: SWAP6
00000198: MSTORE
00000199: DUP2
0000019a: DUP5
0000019b: MSTORE
0000019c: SWAP9
0000019d: SWAP12
0000019e: SWAP11
0000019f: SWAP10
000001a0: DUP10
000001a1: ADD
000001a2: SWAP9
000001a3: SWAP3
000001a4: SWAP8
000001a5: POP
000001a6: SWAP1
000001a7: DUP3
000001a8: ADD
000001a9: SWAP6
000001aa: POP
000001ab: SWAP4
000001ac: POP
000001ad: DUP4
000001ae: SWAP3
000001af: POP
000001b0: DUP6
000001b1: ADD
000001b2: SWAP1
000001b3: DUP5
000001b4: SWAP1
000001b5: DUP1
000001b6: DUP3
000001b7: DUP5
000001b8: CALLDATACOPY
000001b9: POP
000001ba: SWAP5
000001bb: SWAP8
000001bc: POP
000001bd: PUSH2 0x033d
000001c0: SWAP7
000001c1: POP
000001c2: POP
000001c3: POP
000001c4: POP
000001c5: POP
000001c6: POP
000001c7: POP
000001c8: JUMP
000001c9: JUMPDEST
000001ca: CALLVALUE
000001cb: DUP1
000001cc: ISZERO
000001cd: PUSH2 0x01d5
000001d0: JUMPI
000001d1: PUSH1 0x00
000001d3: DUP1
000001d4: REVERT
000001d5: JUMPDEST
000001d6: POP
000001d7: PUSH2 0x0048
000001da: PUSH1 0x01
000001dc: PUSH1 0xa0
000001de: PUSH1 0x02
000001e0: EXP
000001e1: SUB
000001e2: PUSH1 0x04
000001e4: CALLDATALOAD
000001e5: AND
000001e6: PUSH1 0x24
000001e8: CALLDATALOAD
000001e9: PUSH2 0x04f4
000001ec: JUMP
000001ed: JUMPDEST
000001ee: PUSH1 0x00
000001f0: SLOAD
000001f1: PUSH1 0x01
000001f3: PUSH1 0xa0
000001f5: PUSH1 0x02
000001f7: EXP
000001f8: SUB
000001f9: AND
000001fa: CALLER
000001fb: EQ
000001fc: PUSH2 0x0204
000001ff: JUMPI
00000200: PUSH1 0x00
00000202: DUP1
00000203: REVERT
00000204: JUMPDEST
00000205: DUP3
00000206: PUSH1 0x01
00000208: PUSH1 0xa0
0000020a: PUSH1 0x02
0000020c: EXP
0000020d: SUB
0000020e: AND
0000020f: PUSH4 0xa9059cbb
00000214: DUP4
00000215: DUP4
00000216: PUSH1 0x40
00000218: MLOAD
00000219: DUP4
0000021a: PUSH4 0xffffffff
0000021f: AND
00000220: PUSH1 0xe0
00000222: PUSH1 0x02
00000224: EXP
00000225: MUL
00000226: DUP2
00000227: MSTORE
00000228: PUSH1 0x04
0000022a: ADD
0000022b: DUP1
0000022c: DUP4
0000022d: PUSH1 0x01
0000022f: PUSH1 0xa0
00000231: PUSH1 0x02
00000233: EXP
00000234: SUB
00000235: AND
00000236: PUSH1 0x01
00000238: PUSH1 0xa0
0000023a: PUSH1 0x02
0000023c: EXP
0000023d: SUB
0000023e: AND
0000023f: DUP2
00000240: MSTORE
00000241: PUSH1 0x20
00000243: ADD
00000244: DUP3
00000245: DUP2
00000246: MSTORE
00000247: PUSH1 0x20
00000249: ADD
0000024a: SWAP3
0000024b: POP
0000024c: POP
0000024d: POP
0000024e: PUSH1 0x20
00000250: PUSH1 0x40
00000252: MLOAD
00000253: DUP1
00000254: DUP4
00000255: SUB
00000256: DUP2
00000257: PUSH1 0x00
00000259: DUP8
0000025a: DUP1
0000025b: EXTCODESIZE
0000025c: ISZERO
0000025d: DUP1
0000025e: ISZERO
0000025f: PUSH2 0x0267
00000262: JUMPI
00000263: PUSH1 0x00
00000265: DUP1
00000266: REVERT
00000267: JUMPDEST
00000268: POP
00000269: GAS
0000026a: CALL
0000026b: ISZERO
0000026c: DUP1
0000026d: ISZERO
0000026e: PUSH2 0x027b
00000271: JUMPI
00000272: RETURNDATASIZE
00000273: PUSH1 0x00
00000275: DUP1
00000276: RETURNDATACOPY
00000277: RETURNDATASIZE
00000278: PUSH1 0x00
0000027a: REVERT
0000027b: JUMPDEST
0000027c: POP
0000027d: POP
0000027e: POP
0000027f: POP
00000280: PUSH1 0x40
00000282: MLOAD
00000283: RETURNDATASIZE
00000284: PUSH1 0x20
00000286: DUP2
00000287: LT
00000288: ISZERO
00000289: PUSH2 0x0291
0000028c: JUMPI
0000028d: PUSH1 0x00
0000028f: DUP1
00000290: REVERT
00000291: JUMPDEST
00000292: POP
00000293: POP
00000294: POP
00000295: POP
00000296: POP
00000297: JUMP
00000298: JUMPDEST
00000299: PUSH1 0x00
0000029b: DUP1
0000029c: SLOAD
0000029d: PUSH1 0x01
0000029f: PUSH1 0xa0
000002a1: PUSH1 0x02
000002a3: EXP
000002a4: SUB
000002a5: AND
000002a6: CALLER
000002a7: EQ
000002a8: PUSH2 0x02b0
000002ab: JUMPI
000002ac: PUSH1 0x00
000002ae: DUP1
000002af: REVERT
000002b0: JUMPDEST
000002b1: DUP2
000002b2: MLOAD
000002b3: DUP4
000002b4: MLOAD
000002b5: EQ
000002b6: PUSH2 0x02be
000002b9: JUMPI
000002ba: PUSH1 0x00
000002bc: DUP1
000002bd: REVERT
000002be: JUMPDEST
000002bf: POP
000002c0: PUSH1 0x00
000002c2: JUMPDEST
000002c3: DUP3
000002c4: MLOAD
000002c5: DUP2
000002c6: LT
000002c7: ISZERO
000002c8: PUSH2 0x0338
000002cb: JUMPI
000002cc: DUP3
000002cd: DUP2
000002ce: DUP2
000002cf: MLOAD
000002d0: DUP2
000002d1: LT
000002d2: ISZERO
000002d3: ISZERO
000002d4: PUSH2 0x02d9
000002d7: JUMPI
000002d8: INVALID
000002d9: JUMPDEST
000002da: SWAP1
000002db: PUSH1 0x20
000002dd: ADD
000002de: SWAP1
000002df: PUSH1 0x20
000002e1: MUL
000002e2: ADD
000002e3: MLOAD
000002e4: PUSH1 0x01
000002e6: PUSH1 0xa0
000002e8: PUSH1 0x02
000002ea: EXP
000002eb: SUB
000002ec: AND
000002ed: PUSH2 0x08fc
000002f0: DUP4
000002f1: DUP4
000002f2: DUP2
000002f3: MLOAD
000002f4: DUP2
000002f5: LT
000002f6: ISZERO
000002f7: ISZERO
000002f8: PUSH2 0x02fd
000002fb: JUMPI
000002fc: INVALID
000002fd: JUMPDEST
000002fe: PUSH1 0x20
00000300: SWAP1
00000301: DUP2
00000302: MUL
00000303: SWAP1
00000304: SWAP2
00000305: ADD
00000306: ADD
00000307: MLOAD
00000308: PUSH1 0x40
0000030a: MLOAD
0000030b: DUP2
0000030c: ISZERO
0000030d: SWAP1
0000030e: SWAP3
0000030f: MUL
00000310: SWAP2
00000311: PUSH1 0x00
00000313: DUP2
00000314: DUP2
00000315: DUP2
00000316: DUP6
00000317: DUP9
00000318: DUP9
00000319: CALL
0000031a: SWAP4
0000031b: POP
0000031c: POP
0000031d: POP
0000031e: POP
0000031f: ISZERO
00000320: DUP1
00000321: ISZERO
00000322: PUSH2 0x032f
00000325: JUMPI
00000326: RETURNDATASIZE
00000327: PUSH1 0x00
00000329: DUP1
0000032a: RETURNDATACOPY
0000032b: RETURNDATASIZE
0000032c: PUSH1 0x00
0000032e: REVERT
0000032f: JUMPDEST
00000330: POP
00000331: PUSH1 0x01
00000333: ADD
00000334: PUSH2 0x02c2
00000337: JUMP
00000338: JUMPDEST
00000339: POP
0000033a: POP
0000033b: POP
0000033c: JUMP
0000033d: JUMPDEST
0000033e: PUSH1 0x00
00000340: DUP1
00000341: SLOAD
00000342: PUSH1 0x01
00000344: PUSH1 0xa0
00000346: PUSH1 0x02
00000348: EXP
00000349: SUB
0000034a: AND
0000034b: CALLER
0000034c: EQ
0000034d: PUSH2 0x0355
00000350: JUMPI
00000351: PUSH1 0x00
00000353: DUP1
00000354: REVERT
00000355: JUMPDEST
00000356: DUP3
00000357: MLOAD
00000358: DUP5
00000359: MLOAD
0000035a: EQ
0000035b: PUSH2 0x0363
0000035e: JUMPI
0000035f: PUSH1 0x00
00000361: DUP1
00000362: REVERT
00000363: JUMPDEST
00000364: DUP2
00000365: MLOAD
00000366: DUP4
00000367: MLOAD
00000368: EQ
00000369: PUSH2 0x0371
0000036c: JUMPI
0000036d: PUSH1 0x00
0000036f: DUP1
00000370: REVERT
00000371: JUMPDEST
00000372: POP
00000373: PUSH1 0x00
00000375: JUMPDEST
00000376: DUP3
00000377: MLOAD
00000378: DUP2
00000379: LT
0000037a: ISZERO
0000037b: PUSH2 0x04ee
0000037e: JUMPI
0000037f: DUP4
00000380: DUP2
00000381: DUP2
00000382: MLOAD
00000383: DUP2
00000384: LT
00000385: ISZERO
00000386: ISZERO
00000387: PUSH2 0x038c
0000038a: JUMPI
0000038b: INVALID
0000038c: JUMPDEST
0000038d: SWAP1
0000038e: PUSH1 0x20
00000390: ADD
00000391: SWAP1
00000392: PUSH1 0x20
00000394: MUL
00000395: ADD
00000396: MLOAD
00000397: PUSH1 0x01
00000399: PUSH1 0xa0
0000039b: PUSH1 0x02
0000039d: EXP
0000039e: SUB
0000039f: AND
000003a0: PUSH1 0x00
000003a2: EQ
000003a3: ISZERO
000003a4: PUSH2 0x0411
000003a7: JUMPI
000003a8: DUP3
000003a9: DUP2
000003aa: DUP2
000003ab: MLOAD
000003ac: DUP2
000003ad: LT
000003ae: ISZERO
000003af: ISZERO
000003b0: PUSH2 0x03b5
000003b3: JUMPI
000003b4: INVALID
000003b5: JUMPDEST
000003b6: SWAP1
000003b7: PUSH1 0x20
000003b9: ADD
000003ba: SWAP1
000003bb: PUSH1 0x20
000003bd: MUL
000003be: ADD
000003bf: MLOAD
000003c0: PUSH1 0x01
000003c2: PUSH1 0xa0
000003c4: PUSH1 0x02
000003c6: EXP
000003c7: SUB
000003c8: AND
000003c9: PUSH2 0x08fc
000003cc: DUP4
000003cd: DUP4
000003ce: DUP2
000003cf: MLOAD
000003d0: DUP2
000003d1: LT
000003d2: ISZERO
000003d3: ISZERO
000003d4: PUSH2 0x03d9
000003d7: JUMPI
000003d8: INVALID
000003d9: JUMPDEST
000003da: PUSH1 0x20
000003dc: SWAP1
000003dd: DUP2
000003de: MUL
000003df: SWAP1
000003e0: SWAP2
000003e1: ADD
000003e2: ADD
000003e3: MLOAD
000003e4: PUSH1 0x40
000003e6: MLOAD
000003e7: DUP2
000003e8: ISZERO
000003e9: SWAP1
000003ea: SWAP3
000003eb: MUL
000003ec: SWAP2
000003ed: PUSH1 0x00
000003ef: DUP2
000003f0: DUP2
000003f1: DUP2
000003f2: DUP6
000003f3: DUP9
000003f4: DUP9
000003f5: CALL
000003f6: SWAP4
000003f7: POP
000003f8: POP
000003f9: POP
000003fa: POP
000003fb: ISZERO
000003fc: DUP1
000003fd: ISZERO
000003fe: PUSH2 0x040b
00000401: JUMPI
00000402: RETURNDATASIZE
00000403: PUSH1 0x00
00000405: DUP1
00000406: RETURNDATACOPY
00000407: RETURNDATASIZE
00000408: PUSH1 0x00
0000040a: REVERT
0000040b: JUMPDEST
0000040c: POP
0000040d: PUSH2 0x04e6
00000410: JUMP
00000411: JUMPDEST
00000412: DUP4
00000413: DUP2
00000414: DUP2
00000415: MLOAD
00000416: DUP2
00000417: LT
00000418: ISZERO
00000419: ISZERO
0000041a: PUSH2 0x041f
0000041d: JUMPI
0000041e: INVALID
0000041f: JUMPDEST
00000420: SWAP1
00000421: PUSH1 0x20
00000423: ADD
00000424: SWAP1
00000425: PUSH1 0x20
00000427: MUL
00000428: ADD
00000429: MLOAD
0000042a: PUSH1 0x01
0000042c: PUSH1 0xa0
0000042e: PUSH1 0x02
00000430: EXP
00000431: SUB
00000432: AND
00000433: PUSH4 0xa9059cbb
00000438: DUP5
00000439: DUP4
0000043a: DUP2
0000043b: MLOAD
0000043c: DUP2
0000043d: LT
0000043e: ISZERO
0000043f: ISZERO
00000440: PUSH2 0x0445
00000443: JUMPI
00000444: INVALID
00000445: JUMPDEST
00000446: SWAP1
00000447: PUSH1 0x20
00000449: ADD
0000044a: SWAP1
0000044b: PUSH1 0x20
0000044d: MUL
0000044e: ADD
0000044f: MLOAD
00000450: DUP5
00000451: DUP5
00000452: DUP2
00000453: MLOAD
00000454: DUP2
00000455: LT
00000456: ISZERO
00000457: ISZERO
00000458: PUSH2 0x045d
0000045b: JUMPI
0000045c: INVALID
0000045d: JUMPDEST
0000045e: SWAP1
0000045f: PUSH1 0x20
00000461: ADD
00000462: SWAP1
00000463: PUSH1 0x20
00000465: MUL
00000466: ADD
00000467: MLOAD
00000468: PUSH1 0x40
0000046a: MLOAD
0000046b: DUP4
0000046c: PUSH4 0xffffffff
00000471: AND
00000472: PUSH1 0xe0
00000474: PUSH1 0x02
00000476: EXP
00000477: MUL
00000478: DUP2
00000479: MSTORE
0000047a: PUSH1 0x04
0000047c: ADD
0000047d: DUP1
0000047e: DUP4
0000047f: PUSH1 0x01
00000481: PUSH1 0xa0
00000483: PUSH1 0x02
00000485: EXP
00000486: SUB
00000487: AND
00000488: PUSH1 0x01
0000048a: PUSH1 0xa0
0000048c: PUSH1 0x02
0000048e: EXP
0000048f: SUB
00000490: AND
00000491: DUP2
00000492: MSTORE
00000493: PUSH1 0x20
00000495: ADD
00000496: DUP3
00000497: DUP2
00000498: MSTORE
00000499: PUSH1 0x20
0000049b: ADD
0000049c: SWAP3
0000049d: POP
0000049e: POP
0000049f: POP
000004a0: PUSH1 0x20
000004a2: PUSH1 0x40
000004a4: MLOAD
000004a5: DUP1
000004a6: DUP4
000004a7: SUB
000004a8: DUP2
000004a9: PUSH1 0x00
000004ab: DUP8
000004ac: DUP1
000004ad: EXTCODESIZE
000004ae: ISZERO
000004af: DUP1
000004b0: ISZERO
000004b1: PUSH2 0x04b9
000004b4: JUMPI
000004b5: PUSH1 0x00
000004b7: DUP1
000004b8: REVERT
000004b9: JUMPDEST
000004ba: POP
000004bb: GAS
000004bc: CALL
000004bd: ISZERO
000004be: DUP1
000004bf: ISZERO
000004c0: PUSH2 0x04cd
000004c3: JUMPI
000004c4: RETURNDATASIZE
000004c5: PUSH1 0x00
000004c7: DUP1
000004c8: RETURNDATACOPY
000004c9: RETURNDATASIZE
000004ca: PUSH1 0x00
000004cc: REVERT
000004cd: JUMPDEST
000004ce: POP
000004cf: POP
000004d0: POP
000004d1: POP
000004d2: PUSH1 0x40
000004d4: MLOAD
000004d5: RETURNDATASIZE
000004d6: PUSH1 0x20
000004d8: DUP2
000004d9: LT
000004da: ISZERO
000004db: PUSH2 0x04e3
000004de: JUMPI
000004df: PUSH1 0x00
000004e1: DUP1
000004e2: REVERT
000004e3: JUMPDEST
000004e4: POP
000004e5: POP
000004e6: JUMPDEST
000004e7: PUSH1 0x01
000004e9: ADD
000004ea: PUSH2 0x0375
000004ed: JUMP
000004ee: JUMPDEST
000004ef: POP
000004f0: POP
000004f1: POP
000004f2: POP
000004f3: JUMP
000004f4: JUMPDEST
000004f5: PUSH1 0x00
000004f7: SLOAD
000004f8: PUSH1 0x01
000004fa: PUSH1 0xa0
000004fc: PUSH1 0x02
000004fe: EXP
000004ff: SUB
00000500: AND
00000501: CALLER
00000502: EQ
00000503: PUSH2 0x050b
00000506: JUMPI
00000507: PUSH1 0x00
00000509: DUP1
0000050a: REVERT
0000050b: JUMPDEST
0000050c: PUSH1 0x40
0000050e: MLOAD
0000050f: PUSH1 0x01
00000511: PUSH1 0xa0
00000513: PUSH1 0x02
00000515: EXP
00000516: SUB
00000517: DUP4
00000518: AND
00000519: SWAP1
0000051a: DUP3
0000051b: ISZERO
0000051c: PUSH2 0x08fc
0000051f: MUL
00000520: SWAP1
00000521: DUP4
00000522: SWAP1
00000523: PUSH1 0x00
00000525: DUP2
00000526: DUP2
00000527: DUP2
00000528: DUP6
00000529: DUP9
0000052a: DUP9
0000052b: CALL
0000052c: SWAP4
0000052d: POP
0000052e: POP
0000052f: POP
00000530: POP
00000531: ISZERO
00000532: DUP1
00000533: ISZERO
00000534: PUSH2 0x0338
00000537: JUMPI
00000538: RETURNDATASIZE
00000539: PUSH1 0x00
0000053b: DUP1
0000053c: RETURNDATACOPY
0000053d: RETURNDATASIZE
0000053e: PUSH1 0x00
00000540: REVERT
00000541: STOP
00000542: LOG1
00000543: PUSH6 0x627a7a723058
0000054a: KECCAK256
0000054b: SHL
0000054c: SAR
0000054d: GAS
0000054e: CREATE2
0000054f: PUSH16 0x8d4895d2ebb7fcd5be193ee8241a19a2
00000560: DUP1
00000561: GAS
00000562: SDIV
00000563: UNKNOWN(0xC5)
00000564: EXTCODECOPY
00000565: UNKNOWN(0xC8)
00000566: ISZERO
00000567: UNKNOWN(0xB1)
00000568: UNKNOWN(0xBB)
00000569: TLOAD
0000056a: UNKNOWN(0xB1)
0000056b: STOP
0000056c: UNKNOWN(0x29)

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x599b321721dbb571c6754c9dd2648485ac6060b7493c2ea0cb0129d0f83cbf5a
call_targets: 0x299c3b9c0a2af3ff807f65a9a331b0e29a0a88cd
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x599b321721dbb571c6754c9dd2648485ac6060b7493c2ea0cb0129d0f83cbf5a",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x299c3b9c0a2af3ff807f65a9a331b0e29a0a88cd"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x01e33667",
            "selector": "0x01e33667",
            "calldata_variants": [
                "0x01e33667",
                "0x01e336670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x247956f1",
            "selector": "0x247956f1",
            "calldata_variants": [
                "0x247956f1",
                "0x247956f10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x48de0cdc",
            "selector": "0x48de0cdc",
            "calldata_variants": [
                "0x48de0cdc",
                "0x48de0cdc0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x522f6815",
            "selector": "0x522f6815",
            "calldata_variants": [
                "0x522f6815",
                "0x522f68150000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 618,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 793,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1013,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 5,
    "guards_detected": [],
    "untrusted_call_count": 5
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x599b321721dbb571c6754c9dd2648485ac6060b7493c2ea0cb0129d0f83cbf5a
call_targets: 0x299c3b9c0a2af3ff807f65a9a331b0e29a0a88cd
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x599b321721dbb571c6754c9dd2648485ac6060b7493c2ea0cb0129d0f83cbf5a",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x299c3b9c0a2af3ff807f65a9a331b0e29a0a88cd"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x01e33667",
            "selector": "0x01e33667",
            "calldata_variants": [
                "0x01e33667",
                "0x01e336670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x247956f1",
            "selector": "0x247956f1",
            "calldata_variants": [
                "0x247956f1",
                "0x247956f10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x48de0cdc",
            "selector": "0x48de0cdc",
            "calldata_variants": [
                "0x48de0cdc",
                "0x48de0cdc0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x522f6815",
            "selector": "0x522f6815",
            "calldata_variants": [
                "0x522f6815",
                "0x522f68150000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 618,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 793,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1013,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 5,
    "guards_detected": []
}
medium other detector CREATE/CREATE2 reachable 45 no no
view
trace_id: 0x12374f67e6fffa97a983763522c3db5622e7e8c695227ec153f9dc34c282b3a9
validation_json
{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 8,
    "trace_id": "0x12374f67e6fffa97a983763522c3db5622e7e8c695227ec153f9dc34c282b3a9",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x01e33667",
            "selector": "0x01e33667",
            "calldata_variants": [
                "0x01e33667",
                "0x01e336670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x247956f1",
            "selector": "0x247956f1",
            "calldata_variants": [
                "0x247956f1",
                "0x247956f10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x48de0cdc",
            "selector": "0x48de0cdc",
            "calldata_variants": [
                "0x48de0cdc",
                "0x48de0cdc0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x522f6815",
            "selector": "0x522f6815",
            "calldata_variants": [
                "0x522f6815",
                "0x522f68150000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "create_count": 0,
    "create2_count": 1
}