TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-b21a-7054-889a-3950d6b8d65d

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
22271 artifact.fetch complete 1 / 3 4 months ago
22272 tool.cast_disasm complete 1 / 3 4 months ago
66002 analysis.bundle complete 1 / 3 2 weeks ago
66003 capability.graph complete 1 / 3 2 weeks ago
66004 detector.run complete 1 / 3 2 weeks ago
66005 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
1
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
0
Total opcodes
351
Flags
selfdestruct_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0057
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002e: SWAP1
0000002f: DIV
00000030: PUSH4 0xffffffff
00000035: AND
00000036: DUP1
00000037: PUSH4 0x18160ddd
0000003c: EQ
0000003d: PUSH2 0x0068
00000040: JUMPI
00000041: DUP1
00000042: PUSH4 0xcd133c8f
00000047: EQ
00000048: PUSH2 0x0093
0000004b: JUMPI
0000004c: DUP1
0000004d: PUSH4 0xf3fef3a3
00000052: EQ
00000053: PUSH2 0x00b3
00000056: JUMPI
00000057: JUMPDEST
00000058: CALLVALUE
00000059: PUSH1 0x00
0000005b: DUP1
0000005c: DUP3
0000005d: DUP3
0000005e: SLOAD
0000005f: ADD
00000060: SWAP3
00000061: POP
00000062: POP
00000063: DUP2
00000064: SWAP1
00000065: SSTORE
00000066: POP
00000067: STOP
00000068: JUMPDEST
00000069: CALLVALUE
0000006a: DUP1
0000006b: ISZERO
0000006c: PUSH2 0x0074
0000006f: JUMPI
00000070: PUSH1 0x00
00000072: DUP1
00000073: REVERT
00000074: JUMPDEST
00000075: POP
00000076: PUSH2 0x007d
00000079: PUSH2 0x0100
0000007c: JUMP
0000007d: JUMPDEST
0000007e: PUSH1 0x40
00000080: MLOAD
00000081: DUP1
00000082: DUP3
00000083: DUP2
00000084: MSTORE
00000085: PUSH1 0x20
00000087: ADD
00000088: SWAP2
00000089: POP
0000008a: POP
0000008b: PUSH1 0x40
0000008d: MLOAD
0000008e: DUP1
0000008f: SWAP2
00000090: SUB
00000091: SWAP1
00000092: RETURN
00000093: JUMPDEST
00000094: PUSH2 0x00b1
00000097: PUSH1 0x04
00000099: DUP1
0000009a: CALLDATASIZE
0000009b: SUB
0000009c: DUP2
0000009d: ADD
0000009e: SWAP1
0000009f: DUP1
000000a0: DUP1
000000a1: CALLDATALOAD
000000a2: SWAP1
000000a3: PUSH1 0x20
000000a5: ADD
000000a6: SWAP1
000000a7: SWAP3
000000a8: SWAP2
000000a9: SWAP1
000000aa: POP
000000ab: POP
000000ac: POP
000000ad: PUSH2 0x0106
000000b0: JUMP
000000b1: JUMPDEST
000000b2: STOP
000000b3: JUMPDEST
000000b4: CALLVALUE
000000b5: DUP1
000000b6: ISZERO
000000b7: PUSH2 0x00bf
000000ba: JUMPI
000000bb: PUSH1 0x00
000000bd: DUP1
000000be: REVERT
000000bf: JUMPDEST
000000c0: POP
000000c1: PUSH2 0x00fe
000000c4: PUSH1 0x04
000000c6: DUP1
000000c7: CALLDATASIZE
000000c8: SUB
000000c9: DUP2
000000ca: ADD
000000cb: SWAP1
000000cc: DUP1
000000cd: DUP1
000000ce: CALLDATALOAD
000000cf: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000e4: AND
000000e5: SWAP1
000000e6: PUSH1 0x20
000000e8: ADD
000000e9: SWAP1
000000ea: SWAP3
000000eb: SWAP2
000000ec: SWAP1
000000ed: DUP1
000000ee: CALLDATALOAD
000000ef: SWAP1
000000f0: PUSH1 0x20
000000f2: ADD
000000f3: SWAP1
000000f4: SWAP3
000000f5: SWAP2
000000f6: SWAP1
000000f7: POP
000000f8: POP
000000f9: POP
000000fa: PUSH2 0x0118
000000fd: JUMP
000000fe: JUMPDEST
000000ff: STOP
00000100: JUMPDEST
00000101: PUSH1 0x00
00000103: SLOAD
00000104: DUP2
00000105: JUMP
00000106: JUMPDEST
00000107: CALLVALUE
00000108: PUSH1 0x00
0000010a: DUP1
0000010b: DUP3
0000010c: DUP3
0000010d: SLOAD
0000010e: ADD
0000010f: SWAP3
00000110: POP
00000111: POP
00000112: DUP2
00000113: SWAP1
00000114: SSTORE
00000115: POP
00000116: POP
00000117: JUMP
00000118: JUMPDEST
00000119: PUSH20 0xc9b2370554380982f2bb30bc8ae3780a2d216e90
0000012e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000143: AND
00000144: CALLER
00000145: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000015a: AND
0000015b: EQ
0000015c: DUP1
0000015d: PUSH2 0x01a5
00000160: JUMPI
00000161: POP
00000162: PUSH20 0xd1cd0b21ae458d39992efb110ff74dd839f91162
00000177: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000018c: AND
0000018d: CALLER
0000018e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001a3: AND
000001a4: EQ
000001a5: JUMPDEST
000001a6: ISZERO
000001a7: ISZERO
000001a8: PUSH2 0x0219
000001ab: JUMPI
000001ac: PUSH1 0x40
000001ae: MLOAD
000001af: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000001d0: DUP2
000001d1: MSTORE
000001d2: PUSH1 0x04
000001d4: ADD
000001d5: DUP1
000001d6: DUP1
000001d7: PUSH1 0x20
000001d9: ADD
000001da: DUP3
000001db: DUP2
000001dc: SUB
000001dd: DUP3
000001de: MSTORE
000001df: PUSH1 0x16
000001e1: DUP2
000001e2: MSTORE
000001e3: PUSH1 0x20
000001e5: ADD
000001e6: DUP1
000001e7: PUSH32 0x6f6e6c79207465616d206a7573742063616e2075736500000000000000000000
00000208: DUP2
00000209: MSTORE
0000020a: POP
0000020b: PUSH1 0x20
0000020d: ADD
0000020e: SWAP2
0000020f: POP
00000210: POP
00000211: PUSH1 0x40
00000213: MLOAD
00000214: DUP1
00000215: SWAP2
00000216: SUB
00000217: SWAP1
00000218: REVERT
00000219: JUMPDEST
0000021a: PUSH1 0x00
0000021c: DUP2
0000021d: GT
0000021e: ISZERO
0000021f: ISZERO
00000220: PUSH2 0x0291
00000223: JUMPI
00000224: PUSH1 0x40
00000226: MLOAD
00000227: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000248: DUP2
00000249: MSTORE
0000024a: PUSH1 0x04
0000024c: ADD
0000024d: DUP1
0000024e: DUP1
0000024f: PUSH1 0x20
00000251: ADD
00000252: DUP3
00000253: DUP2
00000254: SUB
00000255: DUP3
00000256: MSTORE
00000257: PUSH1 0x0f
00000259: DUP2
0000025a: MSTORE
0000025b: PUSH1 0x20
0000025d: ADD
0000025e: DUP1
0000025f: PUSH32 0x436f6d2062616c616e6365203d20300000000000000000000000000000000000
00000280: DUP2
00000281: MSTORE
00000282: POP
00000283: PUSH1 0x20
00000285: ADD
00000286: SWAP2
00000287: POP
00000288: POP
00000289: PUSH1 0x40
0000028b: MLOAD
0000028c: DUP1
0000028d: SWAP2
0000028e: SUB
0000028f: SWAP1
00000290: REVERT
00000291: JUMPDEST
00000292: DUP2
00000293: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002a8: AND
000002a9: PUSH2 0x08fc
000002ac: DUP3
000002ad: SWAP1
000002ae: DUP2
000002af: ISZERO
000002b0: MUL
000002b1: SWAP1
000002b2: PUSH1 0x40
000002b4: MLOAD
000002b5: PUSH1 0x00
000002b7: PUSH1 0x40
000002b9: MLOAD
000002ba: DUP1
000002bb: DUP4
000002bc: SUB
000002bd: DUP2
000002be: DUP6
000002bf: DUP9
000002c0: DUP9
000002c1: CALL
000002c2: SWAP4
000002c3: POP
000002c4: POP
000002c5: POP
000002c6: POP
000002c7: ISZERO
000002c8: DUP1
000002c9: ISZERO
000002ca: PUSH2 0x02d7
000002cd: JUMPI
000002ce: RETURNDATASIZE
000002cf: PUSH1 0x00
000002d1: DUP1
000002d2: RETURNDATACOPY
000002d3: RETURNDATASIZE
000002d4: PUSH1 0x00
000002d6: REVERT
000002d7: JUMPDEST
000002d8: POP
000002d9: DUP1
000002da: PUSH1 0x00
000002dc: DUP1
000002dd: DUP3
000002de: DUP3
000002df: SLOAD
000002e0: SUB
000002e1: SWAP3
000002e2: POP
000002e3: POP
000002e4: DUP2
000002e5: SWAP1
000002e6: SSTORE
000002e7: POP
000002e8: POP
000002e9: POP
000002ea: JUMP
000002eb: STOP
000002ec: LOG1
000002ed: PUSH6 0x627a7a723058
000002f4: KECCAK256
000002f5: DUP7
000002f6: SELFDESTRUCT
000002f7: BYTE
000002f8: PUSH29 0x2c674e5014b775002b10baecee7b0497b9c36f491c5624e25893d60d00
00000316: UNKNOWN(0x29)

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
medium other detector Untrusted CALL target/value reachable 45 no no
view
trace_id: 0xbab392c3ce9fb950a6bdb96de379deb2513176479adc446752632ea427332f03
call_targets: 0xe672e85bf28b6116a9030fa8394e1120a2073b2a
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xbab392c3ce9fb950a6bdb96de379deb2513176479adc446752632ea427332f03",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xe672e85bf28b6116a9030fa8394e1120a2073b2a"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xcd133c8f",
            "selector": "0xcd133c8f",
            "calldata_variants": [
                "0xcd133c8f",
                "0xcd133c8f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf3fef3a3",
            "selector": "0xf3fef3a3",
            "calldata_variants": [
                "0xf3fef3a3",
                "0xf3fef3a30000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 705,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [
        {
            "pc": 324,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 397,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 1
}
medium other detector ETH value transfer possible 40 no no
view
trace_id: 0xbab392c3ce9fb950a6bdb96de379deb2513176479adc446752632ea427332f03
call_targets: 0xe672e85bf28b6116a9030fa8394e1120a2073b2a
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xbab392c3ce9fb950a6bdb96de379deb2513176479adc446752632ea427332f03",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xe672e85bf28b6116a9030fa8394e1120a2073b2a"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xcd133c8f",
            "selector": "0xcd133c8f",
            "calldata_variants": [
                "0xcd133c8f",
                "0xcd133c8f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf3fef3a3",
            "selector": "0xf3fef3a3",
            "calldata_variants": [
                "0xf3fef3a3",
                "0xf3fef3a30000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 705,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": [
        {
            "pc": 324,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 397,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ]
}
medium other detector SELFDESTRUCT reachable 45 no no
view
trace_id: 0x7440d035ab48e67f421fd17287e52e382fd612f9f7b12079f1806e054c550a71
validation_json
{
    "sink": "SELFDESTRUCT",
    "errors": 0,
    "status": "unknown",
    "attempts": 8,
    "trace_id": "0x7440d035ab48e67f421fd17287e52e382fd612f9f7b12079f1806e054c550a71",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xcd133c8f",
            "selector": "0xcd133c8f",
            "calldata_variants": [
                "0xcd133c8f",
                "0xcd133c8f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf3fef3a3",
            "selector": "0xf3fef3a3",
            "calldata_variants": [
                "0xf3fef3a3",
                "0xf3fef3a30000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "guards_detected": [
        {
            "pc": 324,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 397,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "selfdestruct_count": 1
}