Analysis Run

019b477e-b24c-7276-b3ad-1849bd6ffc3f

complete

Chain ID

1

Address

0xb70abc4ea1bf2ba0b878dbaaae3e179806ab2dba

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
22315	artifact.fetch	complete	1 / 3	3 months ago
22316	tool.cast_disasm	complete	1 / 3	3 months ago
65894	analysis.bundle	complete	1 / 3	2 weeks ago
65895	capability.graph	complete	1 / 3	2 weeks ago
65896	detector.run	complete	1 / 3	2 weeks ago
65897	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

1

EXT*/BALANCE

5

Total opcodes

1253

Flags

heavy_ext_balance_usage

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x00e5
0000000c: JUMPI
0000000d: PUSH4 0xffffffff
00000012: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
00000030: PUSH1 0x00
00000032: CALLDATALOAD
00000033: DIV
00000034: AND
00000035: PUSH4 0x0d826264
0000003a: DUP2
0000003b: EQ
0000003c: PUSH2 0x01ad
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x473897d1
00000046: EQ
00000047: PUSH2 0x01d4
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x4cfd5a82
00000051: EQ
00000052: PUSH2 0x01f5
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x710908c9
0000005c: EQ
0000005d: PUSH2 0x020a
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x8292afd9
00000067: EQ
00000068: PUSH2 0x021f
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x8da5cb5b
00000072: EQ
00000073: PUSH2 0x025c
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xa006e0e5
0000007d: EQ
0000007e: PUSH2 0x0271
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xa17dd26c
00000088: EQ
00000089: PUSH2 0x0286
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xb1401858
00000093: EQ
00000094: PUSH2 0x029c
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0xbe9a6555
0000009e: EQ
0000009f: PUSH2 0x02b1
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xd07547b6
000000a9: EQ
000000aa: PUSH2 0x02c6
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0xdb478d08
000000b4: EQ
000000b5: PUSH2 0x02e7
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0xefbe1c1c
000000bf: EQ
000000c0: PUSH2 0x02fc
000000c3: JUMPI
000000c4: DUP1
000000c5: PUSH4 0xf2fde38b
000000ca: EQ
000000cb: PUSH2 0x0311
000000ce: JUMPI
000000cf: DUP1
000000d0: PUSH4 0xf7c618c1
000000d5: EQ
000000d6: PUSH2 0x0332
000000d9: JUMPI
000000da: DUP1
000000db: PUSH4 0xfd6b7ef8
000000e0: EQ
000000e1: PUSH2 0x0347
000000e4: JUMPI
000000e5: JUMPDEST
000000e6: PUSH1 0x00
000000e8: DUP1
000000e9: PUSH1 0x00
000000eb: DUP1
000000ec: PUSH1 0x05
000000ee: SLOAD
000000ef: ADDRESS
000000f0: PUSH1 0x01
000000f2: PUSH1 0xa0
000000f4: PUSH1 0x02
000000f6: EXP
000000f7: SUB
000000f8: AND
000000f9: BALANCE
000000fa: GT
000000fb: ISZERO
000000fc: DUP1
000000fd: ISZERO
000000fe: PUSH2 0x0109
00000101: JUMPI
00000102: POP
00000103: PUSH1 0x02
00000105: SLOAD
00000106: TIMESTAMP
00000107: GT
00000108: ISZERO
00000109: JUMPDEST
0000010a: ISZERO
0000010b: ISZERO
0000010c: PUSH2 0x0114
0000010f: JUMPI
00000110: PUSH1 0x00
00000112: DUP1
00000113: REVERT
00000114: JUMPDEST
00000115: CALLVALUE
00000116: ISZERO
00000117: ISZERO
00000118: PUSH2 0x0120
0000011b: JUMPI
0000011c: PUSH1 0x00
0000011e: DUP1
0000011f: REVERT
00000120: JUMPDEST
00000121: PUSH1 0x03
00000123: SLOAD
00000124: ADDRESS
00000125: BALANCE
00000126: SWAP5
00000127: POP
00000128: CALLER
00000129: SWAP4
0000012a: POP
0000012b: CALLVALUE
0000012c: SWAP3
0000012d: POP
0000012e: DUP5
0000012f: GT
00000130: PUSH2 0x013a
00000133: JUMPI
00000134: POP
00000135: PUSH2 0x07d0
00000138: DUP2
00000139: MUL
0000013a: JUMPDEST
0000013b: PUSH1 0x04
0000013d: SLOAD
0000013e: DUP5
0000013f: GT
00000140: ISZERO
00000141: DUP1
00000142: ISZERO
00000143: PUSH2 0x014d
00000146: JUMPI
00000147: POP
00000148: PUSH1 0x03
0000014a: SLOAD
0000014b: DUP5
0000014c: GT
0000014d: JUMPDEST
0000014e: ISZERO
0000014f: PUSH2 0x0159
00000152: JUMPI
00000153: POP
00000154: PUSH2 0x05dc
00000157: DUP2
00000158: MUL
00000159: JUMPDEST
0000015a: PUSH1 0x05
0000015c: SLOAD
0000015d: DUP5
0000015e: GT
0000015f: ISZERO
00000160: DUP1
00000161: ISZERO
00000162: PUSH2 0x016c
00000165: JUMPI
00000166: POP
00000167: PUSH1 0x04
00000169: SLOAD
0000016a: DUP5
0000016b: GT
0000016c: JUMPDEST
0000016d: ISZERO
0000016e: PUSH2 0x0178
00000171: JUMPI
00000172: POP
00000173: PUSH2 0x03e8
00000176: DUP2
00000177: MUL
00000178: JUMPDEST
00000179: PUSH1 0x01
0000017b: PUSH1 0xa0
0000017d: PUSH1 0x02
0000017f: EXP
00000180: SUB
00000181: SWAP1
00000182: SWAP3
00000183: AND
00000184: PUSH1 0x00
00000186: SWAP1
00000187: DUP2
00000188: MSTORE
00000189: PUSH1 0x0a
0000018b: PUSH1 0x20
0000018d: SWAP1
0000018e: DUP2
0000018f: MSTORE
00000190: PUSH1 0x40
00000192: DUP1
00000193: DUP4
00000194: KECCAK256
00000195: DUP1
00000196: SLOAD
00000197: CALLVALUE
00000198: ADD
00000199: SWAP1
0000019a: SSTORE
0000019b: PUSH1 0x0b
0000019d: SWAP1
0000019e: SWAP2
0000019f: MSTORE
000001a0: SWAP1
000001a1: KECCAK256
000001a2: DUP1
000001a3: SLOAD
000001a4: SWAP1
000001a5: SWAP3
000001a6: ADD
000001a7: SWAP1
000001a8: SWAP2
000001a9: SSTORE
000001aa: POP
000001ab: POP
000001ac: STOP
000001ad: JUMPDEST
000001ae: CALLVALUE
000001af: DUP1
000001b0: ISZERO
000001b1: PUSH2 0x01b9
000001b4: JUMPI
000001b5: PUSH1 0x00
000001b7: DUP1
000001b8: REVERT
000001b9: JUMPDEST
000001ba: POP
000001bb: PUSH2 0x01c2
000001be: PUSH2 0x035c
000001c1: JUMP
000001c2: JUMPDEST
000001c3: PUSH1 0x40
000001c5: DUP1
000001c6: MLOAD
000001c7: SWAP2
000001c8: DUP3
000001c9: MSTORE
000001ca: MLOAD
000001cb: SWAP1
000001cc: DUP2
000001cd: SWAP1
000001ce: SUB
000001cf: PUSH1 0x20
000001d1: ADD
000001d2: SWAP1
000001d3: RETURN
000001d4: JUMPDEST
000001d5: CALLVALUE
000001d6: DUP1
000001d7: ISZERO
000001d8: PUSH2 0x01e0
000001db: JUMPI
000001dc: PUSH1 0x00
000001de: DUP1
000001df: REVERT
000001e0: JUMPDEST
000001e1: POP
000001e2: PUSH2 0x01c2
000001e5: PUSH1 0x01
000001e7: PUSH1 0xa0
000001e9: PUSH1 0x02
000001eb: EXP
000001ec: SUB
000001ed: PUSH1 0x04
000001ef: CALLDATALOAD
000001f0: AND
000001f1: PUSH2 0x0362
000001f4: JUMP
000001f5: JUMPDEST
000001f6: CALLVALUE
000001f7: DUP1
000001f8: ISZERO
000001f9: PUSH2 0x0201
000001fc: JUMPI
000001fd: PUSH1 0x00
000001ff: DUP1
00000200: REVERT
00000201: JUMPDEST
00000202: POP
00000203: PUSH2 0x01c2
00000206: PUSH2 0x0374
00000209: JUMP
0000020a: JUMPDEST
0000020b: CALLVALUE
0000020c: DUP1
0000020d: ISZERO
0000020e: PUSH2 0x0216
00000211: JUMPI
00000212: PUSH1 0x00
00000214: DUP1
00000215: REVERT
00000216: JUMPDEST
00000217: POP
00000218: PUSH2 0x01c2
0000021b: PUSH2 0x037a
0000021e: JUMP
0000021f: JUMPDEST
00000220: CALLVALUE
00000221: DUP1
00000222: ISZERO
00000223: PUSH2 0x022b
00000226: JUMPI
00000227: PUSH1 0x00
00000229: DUP1
0000022a: REVERT
0000022b: JUMPDEST
0000022c: POP
0000022d: PUSH2 0x0240
00000230: PUSH1 0x01
00000232: PUSH1 0xa0
00000234: PUSH1 0x02
00000236: EXP
00000237: SUB
00000238: PUSH1 0x04
0000023a: CALLDATALOAD
0000023b: AND
0000023c: PUSH2 0x0380
0000023f: JUMP
00000240: JUMPDEST
00000241: PUSH1 0x40
00000243: DUP1
00000244: MLOAD
00000245: PUSH1 0x01
00000247: PUSH1 0xa0
00000249: PUSH1 0x02
0000024b: EXP
0000024c: SUB
0000024d: SWAP1
0000024e: SWAP3
0000024f: AND
00000250: DUP3
00000251: MSTORE
00000252: MLOAD
00000253: SWAP1
00000254: DUP2
00000255: SWAP1
00000256: SUB
00000257: PUSH1 0x20
00000259: ADD
0000025a: SWAP1
0000025b: RETURN
0000025c: JUMPDEST
0000025d: CALLVALUE
0000025e: DUP1
0000025f: ISZERO
00000260: PUSH2 0x0268
00000263: JUMPI
00000264: PUSH1 0x00
00000266: DUP1
00000267: REVERT
00000268: JUMPDEST
00000269: POP
0000026a: PUSH2 0x0240
0000026d: PUSH2 0x039b
00000270: JUMP
00000271: JUMPDEST
00000272: CALLVALUE
00000273: DUP1
00000274: ISZERO
00000275: PUSH2 0x027d
00000278: JUMPI
00000279: PUSH1 0x00
0000027b: DUP1
0000027c: REVERT
0000027d: JUMPDEST
0000027e: POP
0000027f: PUSH2 0x01c2
00000282: PUSH2 0x03aa
00000285: JUMP
00000286: JUMPDEST
00000287: PUSH2 0x029a
0000028a: PUSH1 0x01
0000028c: PUSH1 0xa0
0000028e: PUSH1 0x02
00000290: EXP
00000291: SUB
00000292: PUSH1 0x04
00000294: CALLDATALOAD
00000295: AND
00000296: PUSH2 0x03b0
00000299: JUMP
0000029a: JUMPDEST
0000029b: STOP
0000029c: JUMPDEST
0000029d: CALLVALUE
0000029e: DUP1
0000029f: ISZERO
000002a0: PUSH2 0x02a8
000002a3: JUMPI
000002a4: PUSH1 0x00
000002a6: DUP1
000002a7: REVERT
000002a8: JUMPDEST
000002a9: POP
000002aa: PUSH2 0x01c2
000002ad: PUSH2 0x05ee
000002b0: JUMP
000002b1: JUMPDEST
000002b2: CALLVALUE
000002b3: DUP1
000002b4: ISZERO
000002b5: PUSH2 0x02bd
000002b8: JUMPI
000002b9: PUSH1 0x00
000002bb: DUP1
000002bc: REVERT
000002bd: JUMPDEST
000002be: POP
000002bf: PUSH2 0x01c2
000002c2: PUSH2 0x05f4
000002c5: JUMP
000002c6: JUMPDEST
000002c7: CALLVALUE
000002c8: DUP1
000002c9: ISZERO
000002ca: PUSH2 0x02d2
000002cd: JUMPI
000002ce: PUSH1 0x00
000002d0: DUP1
000002d1: REVERT
000002d2: JUMPDEST
000002d3: POP
000002d4: PUSH2 0x01c2
000002d7: PUSH1 0x01
000002d9: PUSH1 0xa0
000002db: PUSH1 0x02
000002dd: EXP
000002de: SUB
000002df: PUSH1 0x04
000002e1: CALLDATALOAD
000002e2: AND
000002e3: PUSH2 0x05fa
000002e6: JUMP
000002e7: JUMPDEST
000002e8: CALLVALUE
000002e9: DUP1
000002ea: ISZERO
000002eb: PUSH2 0x02f3
000002ee: JUMPI
000002ef: PUSH1 0x00
000002f1: DUP1
000002f2: REVERT
000002f3: JUMPDEST
000002f4: POP
000002f5: PUSH2 0x01c2
000002f8: PUSH2 0x060c
000002fb: JUMP
000002fc: JUMPDEST
000002fd: CALLVALUE
000002fe: DUP1
000002ff: ISZERO
00000300: PUSH2 0x0308
00000303: JUMPI
00000304: PUSH1 0x00
00000306: DUP1
00000307: REVERT
00000308: JUMPDEST
00000309: POP
0000030a: PUSH2 0x01c2
0000030d: PUSH2 0x0612
00000310: JUMP
00000311: JUMPDEST
00000312: CALLVALUE
00000313: DUP1
00000314: ISZERO
00000315: PUSH2 0x031d
00000318: JUMPI
00000319: PUSH1 0x00
0000031b: DUP1
0000031c: REVERT
0000031d: JUMPDEST
0000031e: POP
0000031f: PUSH2 0x029a
00000322: PUSH1 0x01
00000324: PUSH1 0xa0
00000326: PUSH1 0x02
00000328: EXP
00000329: SUB
0000032a: PUSH1 0x04
0000032c: CALLDATALOAD
0000032d: AND
0000032e: PUSH2 0x0618
00000331: JUMP
00000332: JUMPDEST
00000333: CALLVALUE
00000334: DUP1
00000335: ISZERO
00000336: PUSH2 0x033e
00000339: JUMPI
0000033a: PUSH1 0x00
0000033c: DUP1
0000033d: REVERT
0000033e: JUMPDEST
0000033f: POP
00000340: PUSH2 0x0240
00000343: PUSH2 0x068a
00000346: JUMP
00000347: JUMPDEST
00000348: CALLVALUE
00000349: DUP1
0000034a: ISZERO
0000034b: PUSH2 0x0353
0000034e: JUMPI
0000034f: PUSH1 0x00
00000351: DUP1
00000352: REVERT
00000353: JUMPDEST
00000354: POP
00000355: PUSH2 0x029a
00000358: PUSH2 0x0699
0000035b: JUMP
0000035c: JUMPDEST
0000035d: PUSH1 0x05
0000035f: SLOAD
00000360: DUP2
00000361: JUMP
00000362: JUMPDEST
00000363: PUSH1 0x0b
00000365: PUSH1 0x20
00000367: MSTORE
00000368: PUSH1 0x00
0000036a: SWAP1
0000036b: DUP2
0000036c: MSTORE
0000036d: PUSH1 0x40
0000036f: SWAP1
00000370: KECCAK256
00000371: SLOAD
00000372: DUP2
00000373: JUMP
00000374: JUMPDEST
00000375: PUSH1 0x03
00000377: SLOAD
00000378: DUP2
00000379: JUMP
0000037a: JUMPDEST
0000037b: PUSH1 0x08
0000037d: SLOAD
0000037e: DUP2
0000037f: JUMP
00000380: JUMPDEST
00000381: PUSH1 0x09
00000383: PUSH1 0x20
00000385: MSTORE
00000386: PUSH1 0x00
00000388: SWAP1
00000389: DUP2
0000038a: MSTORE
0000038b: PUSH1 0x40
0000038d: SWAP1
0000038e: KECCAK256
0000038f: SLOAD
00000390: PUSH1 0x01
00000392: PUSH1 0xa0
00000394: PUSH1 0x02
00000396: EXP
00000397: SUB
00000398: AND
00000399: DUP2
0000039a: JUMP
0000039b: JUMPDEST
0000039c: PUSH1 0x00
0000039e: SLOAD
0000039f: PUSH1 0x01
000003a1: PUSH1 0xa0
000003a3: PUSH1 0x02
000003a5: EXP
000003a6: SUB
000003a7: AND
000003a8: DUP2
000003a9: JUMP
000003aa: JUMPDEST
000003ab: PUSH1 0x04
000003ad: SLOAD
000003ae: DUP2
000003af: JUMP
000003b0: JUMPDEST
000003b1: PUSH1 0x00
000003b3: DUP1
000003b4: PUSH1 0x00
000003b6: DUP1
000003b7: PUSH1 0x00
000003b9: DUP1
000003ba: PUSH1 0x00
000003bc: DUP1
000003bd: PUSH1 0x00
000003bf: DUP1
000003c0: PUSH1 0x05
000003c2: SLOAD
000003c3: ADDRESS
000003c4: PUSH1 0x01
000003c6: PUSH1 0xa0
000003c8: PUSH1 0x02
000003ca: EXP
000003cb: SUB
000003cc: AND
000003cd: BALANCE
000003ce: GT
000003cf: ISZERO
000003d0: DUP1
000003d1: ISZERO
000003d2: PUSH2 0x03dd
000003d5: JUMPI
000003d6: POP
000003d7: PUSH1 0x02
000003d9: SLOAD
000003da: TIMESTAMP
000003db: GT
000003dc: ISZERO
000003dd: JUMPDEST
000003de: ISZERO
000003df: ISZERO
000003e0: PUSH2 0x03e8
000003e3: JUMPI
000003e4: PUSH1 0x00
000003e6: DUP1
000003e7: REVERT
000003e8: JUMPDEST
000003e9: CALLER
000003ea: PUSH1 0x01
000003ec: PUSH1 0xa0
000003ee: PUSH1 0x02
000003f0: EXP
000003f1: SUB
000003f2: DUP13
000003f3: AND
000003f4: EQ
000003f5: ISZERO
000003f6: PUSH2 0x03fe
000003f9: JUMPI
000003fa: PUSH1 0x00
000003fc: DUP1
000003fd: REVERT
000003fe: JUMPDEST
000003ff: CALLVALUE
00000400: ISZERO
00000401: ISZERO
00000402: PUSH2 0x040a
00000405: JUMPI
00000406: PUSH1 0x00
00000408: DUP1
00000409: REVERT
0000040a: JUMPDEST
0000040b: ADDRESS
0000040c: PUSH1 0x01
0000040e: PUSH1 0xa0
00000410: PUSH1 0x02
00000412: EXP
00000413: SUB
00000414: AND
00000415: BALANCE
00000416: SWAP10
00000417: POP
00000418: CALLER
00000419: SWAP9
0000041a: POP
0000041b: CALLVALUE
0000041c: SWAP8
0000041d: POP
0000041e: DUP11
0000041f: PUSH1 0x09
00000421: PUSH1 0x00
00000423: DUP12
00000424: PUSH1 0x01
00000426: PUSH1 0xa0
00000428: PUSH1 0x02
0000042a: EXP
0000042b: SUB
0000042c: AND
0000042d: PUSH1 0x01
0000042f: PUSH1 0xa0
00000431: PUSH1 0x02
00000433: EXP
00000434: SUB
00000435: AND
00000436: DUP2
00000437: MSTORE
00000438: PUSH1 0x20
0000043a: ADD
0000043b: SWAP1
0000043c: DUP2
0000043d: MSTORE
0000043e: PUSH1 0x20
00000440: ADD
00000441: PUSH1 0x00
00000443: KECCAK256
00000444: PUSH1 0x00
00000446: PUSH2 0x0100
00000449: EXP
0000044a: DUP2
0000044b: SLOAD
0000044c: DUP2
0000044d: PUSH1 0x01
0000044f: PUSH1 0xa0
00000451: PUSH1 0x02
00000453: EXP
00000454: SUB
00000455: MUL
00000456: NOT
00000457: AND
00000458: SWAP1
00000459: DUP4
0000045a: PUSH1 0x01
0000045c: PUSH1 0xa0
0000045e: PUSH1 0x02
00000460: EXP
00000461: SUB
00000462: AND
00000463: MUL
00000464: OR
00000465: SWAP1
00000466: SSTORE
00000467: POP
00000468: DUP11
00000469: SWAP6
0000046a: POP
0000046b: PUSH1 0x09
0000046d: PUSH1 0x00
0000046f: DUP8
00000470: PUSH1 0x01
00000472: PUSH1 0xa0
00000474: PUSH1 0x02
00000476: EXP
00000477: SUB
00000478: AND
00000479: PUSH1 0x01
0000047b: PUSH1 0xa0
0000047d: PUSH1 0x02
0000047f: EXP
00000480: SUB
00000481: AND
00000482: DUP2
00000483: MSTORE
00000484: PUSH1 0x20
00000486: ADD
00000487: SWAP1
00000488: DUP2
00000489: MSTORE
0000048a: PUSH1 0x20
0000048c: ADD
0000048d: PUSH1 0x00
0000048f: KECCAK256
00000490: PUSH1 0x00
00000492: SWAP1
00000493: SLOAD
00000494: SWAP1
00000495: PUSH2 0x0100
00000498: EXP
00000499: SWAP1
0000049a: DIV
0000049b: PUSH1 0x01
0000049d: PUSH1 0xa0
0000049f: PUSH1 0x02
000004a1: EXP
000004a2: SUB
000004a3: AND
000004a4: SWAP5
000004a5: POP
000004a6: PUSH1 0x09
000004a8: PUSH1 0x00
000004aa: DUP7
000004ab: PUSH1 0x01
000004ad: PUSH1 0xa0
000004af: PUSH1 0x02
000004b1: EXP
000004b2: SUB
000004b3: AND
000004b4: PUSH1 0x01
000004b6: PUSH1 0xa0
000004b8: PUSH1 0x02
000004ba: EXP
000004bb: SUB
000004bc: AND
000004bd: DUP2
000004be: MSTORE
000004bf: PUSH1 0x20
000004c1: ADD
000004c2: SWAP1
000004c3: DUP2
000004c4: MSTORE
000004c5: PUSH1 0x20
000004c7: ADD
000004c8: PUSH1 0x00
000004ca: KECCAK256
000004cb: PUSH1 0x00
000004cd: SWAP1
000004ce: SLOAD
000004cf: SWAP1
000004d0: PUSH2 0x0100
000004d3: EXP
000004d4: SWAP1
000004d5: DIV
000004d6: PUSH1 0x01
000004d8: PUSH1 0xa0
000004da: PUSH1 0x02
000004dc: EXP
000004dd: SUB
000004de: AND
000004df: SWAP4
000004e0: POP
000004e1: PUSH1 0x03
000004e3: SLOAD
000004e4: DUP11
000004e5: GT
000004e6: ISZERO
000004e7: ISZERO
000004e8: PUSH2 0x04f3
000004eb: JUMPI
000004ec: DUP8
000004ed: PUSH2 0x07d0
000004f0: MUL
000004f1: SWAP7
000004f2: POP
000004f3: JUMPDEST
000004f4: PUSH1 0x04
000004f6: SLOAD
000004f7: DUP11
000004f8: GT
000004f9: ISZERO
000004fa: DUP1
000004fb: ISZERO
000004fc: PUSH2 0x0506
000004ff: JUMPI
00000500: POP
00000501: PUSH1 0x03
00000503: SLOAD
00000504: DUP11
00000505: GT
00000506: JUMPDEST
00000507: ISZERO
00000508: PUSH2 0x0513
0000050b: JUMPI
0000050c: DUP8
0000050d: PUSH2 0x05dc
00000510: MUL
00000511: SWAP7
00000512: POP
00000513: JUMPDEST
00000514: PUSH1 0x05
00000516: SLOAD
00000517: DUP11
00000518: GT
00000519: ISZERO
0000051a: DUP1
0000051b: ISZERO
0000051c: PUSH2 0x0526
0000051f: JUMPI
00000520: POP
00000521: PUSH1 0x04
00000523: SLOAD
00000524: DUP11
00000525: GT
00000526: JUMPDEST
00000527: ISZERO
00000528: PUSH2 0x0533
0000052b: JUMPI
0000052c: DUP8
0000052d: PUSH2 0x03e8
00000530: MUL
00000531: SWAP7
00000532: POP
00000533: JUMPDEST
00000534: PUSH1 0x01
00000536: PUSH1 0xa0
00000538: PUSH1 0x02
0000053a: EXP
0000053b: SUB
0000053c: DUP10
0000053d: DUP2
0000053e: AND
0000053f: PUSH1 0x00
00000541: SWAP1
00000542: DUP2
00000543: MSTORE
00000544: PUSH1 0x0a
00000546: PUSH1 0x20
00000548: SWAP1
00000549: DUP2
0000054a: MSTORE
0000054b: PUSH1 0x40
0000054d: DUP1
0000054e: DUP4
0000054f: KECCAK256
00000550: DUP1
00000551: SLOAD
00000552: DUP14
00000553: ADD
00000554: SWAP1
00000555: SSTORE
00000556: PUSH1 0x0b
00000558: SWAP1
00000559: SWAP2
0000055a: MSTORE
0000055b: DUP1
0000055c: DUP3
0000055d: KECCAK256
0000055e: DUP1
0000055f: SLOAD
00000560: DUP12
00000561: ADD
00000562: SWAP1
00000563: SSTORE
00000564: DUP9
00000565: DUP4
00000566: AND
00000567: DUP3
00000568: MSTORE
00000569: SWAP1
0000056a: KECCAK256
0000056b: DUP1
0000056c: SLOAD
0000056d: PUSH1 0x05
0000056f: PUSH1 0x64
00000571: DUP12
00000572: DIV
00000573: MUL
00000574: SWAP1
00000575: DUP2
00000576: ADD
00000577: SWAP1
00000578: SWAP2
00000579: SSTORE
0000057a: SWAP4
0000057b: POP
0000057c: DUP6
0000057d: AND
0000057e: ISZERO
0000057f: PUSH2 0x05ac
00000582: JUMPI
00000583: PUSH1 0x01
00000585: PUSH1 0xa0
00000587: PUSH1 0x02
00000589: EXP
0000058a: SUB
0000058b: DUP6
0000058c: AND
0000058d: PUSH1 0x00
0000058f: SWAP1
00000590: DUP2
00000591: MSTORE
00000592: PUSH1 0x0b
00000594: PUSH1 0x20
00000596: MSTORE
00000597: PUSH1 0x40
00000599: SWAP1
0000059a: KECCAK256
0000059b: DUP1
0000059c: SLOAD
0000059d: PUSH1 0x03
0000059f: PUSH1 0x64
000005a1: DUP11
000005a2: DIV
000005a3: MUL
000005a4: SWAP1
000005a5: DUP2
000005a6: ADD
000005a7: SWAP1
000005a8: SWAP2
000005a9: SSTORE
000005aa: SWAP2
000005ab: POP
000005ac: JUMPDEST
000005ad: PUSH1 0x01
000005af: PUSH1 0xa0
000005b1: PUSH1 0x02
000005b3: EXP
000005b4: SUB
000005b5: DUP5
000005b6: AND
000005b7: ISZERO
000005b8: PUSH2 0x05e1
000005bb: JUMPI
000005bc: POP
000005bd: PUSH1 0x01
000005bf: PUSH1 0xa0
000005c1: PUSH1 0x02
000005c3: EXP
000005c4: SUB
000005c5: DUP4
000005c6: AND
000005c7: PUSH1 0x00
000005c9: SWAP1
000005ca: DUP2
000005cb: MSTORE
000005cc: PUSH1 0x0b
000005ce: PUSH1 0x20
000005d0: MSTORE
000005d1: PUSH1 0x40
000005d3: SWAP1
000005d4: KECCAK256
000005d5: DUP1
000005d6: SLOAD
000005d7: PUSH1 0x64
000005d9: DUP9
000005da: DIV
000005db: SWAP1
000005dc: DUP2
000005dd: ADD
000005de: SWAP1
000005df: SWAP2
000005e0: SSTORE
000005e1: JUMPDEST
000005e2: POP
000005e3: POP
000005e4: POP
000005e5: POP
000005e6: POP
000005e7: POP
000005e8: POP
000005e9: POP
000005ea: POP
000005eb: POP
000005ec: POP
000005ed: JUMP
000005ee: JUMPDEST
000005ef: PUSH1 0x06
000005f1: SLOAD
000005f2: DUP2
000005f3: JUMP
000005f4: JUMPDEST
000005f5: PUSH1 0x01
000005f7: SLOAD
000005f8: DUP2
000005f9: JUMP
000005fa: JUMPDEST
000005fb: PUSH1 0x0a
000005fd: PUSH1 0x20
000005ff: MSTORE
00000600: PUSH1 0x00
00000602: SWAP1
00000603: DUP2
00000604: MSTORE
00000605: PUSH1 0x40
00000607: SWAP1
00000608: KECCAK256
00000609: SLOAD
0000060a: DUP2
0000060b: JUMP
0000060c: JUMPDEST
0000060d: PUSH1 0x07
0000060f: SLOAD
00000610: DUP2
00000611: JUMP
00000612: JUMPDEST
00000613: PUSH1 0x02
00000615: SLOAD
00000616: DUP2
00000617: JUMP
00000618: JUMPDEST
00000619: PUSH1 0x00
0000061b: SLOAD
0000061c: PUSH1 0x01
0000061e: PUSH1 0xa0
00000620: PUSH1 0x02
00000622: EXP
00000623: SUB
00000624: AND
00000625: CALLER
00000626: EQ
00000627: PUSH2 0x062f
0000062a: JUMPI
0000062b: PUSH1 0x00
0000062d: DUP1
0000062e: REVERT
0000062f: JUMPDEST
00000630: PUSH1 0x00
00000632: DUP1
00000633: SLOAD
00000634: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000649: NOT
0000064a: AND
0000064b: PUSH1 0x01
0000064d: PUSH1 0xa0
0000064f: PUSH1 0x02
00000651: EXP
00000652: SUB
00000653: DUP4
00000654: DUP2
00000655: AND
00000656: SWAP2
00000657: DUP3
00000658: OR
00000659: DUP1
0000065a: DUP5
0000065b: SSTORE
0000065c: PUSH1 0x40
0000065e: MLOAD
0000065f: SWAP3
00000660: SWAP4
00000661: SWAP2
00000662: AND
00000663: SWAP2
00000664: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
00000685: SWAP2
00000686: SWAP1
00000687: LOG3
00000688: POP
00000689: JUMP
0000068a: JUMPDEST
0000068b: PUSH1 0x0c
0000068d: SLOAD
0000068e: PUSH1 0x01
00000690: PUSH1 0xa0
00000692: PUSH1 0x02
00000694: EXP
00000695: SUB
00000696: AND
00000697: DUP2
00000698: JUMP
00000699: JUMPDEST
0000069a: PUSH1 0x00
0000069c: DUP1
0000069d: SLOAD
0000069e: PUSH1 0x01
000006a0: PUSH1 0xa0
000006a2: PUSH1 0x02
000006a4: EXP
000006a5: SUB
000006a6: AND
000006a7: CALLER
000006a8: EQ
000006a9: PUSH2 0x06b1
000006ac: JUMPI
000006ad: PUSH1 0x00
000006af: DUP1
000006b0: REVERT
000006b1: JUMPDEST
000006b2: POP
000006b3: PUSH1 0x00
000006b5: DUP1
000006b6: SLOAD
000006b7: PUSH1 0x40
000006b9: MLOAD
000006ba: ADDRESS
000006bb: BALANCE
000006bc: SWAP3
000006bd: PUSH1 0x01
000006bf: PUSH1 0xa0
000006c1: PUSH1 0x02
000006c3: EXP
000006c4: SUB
000006c5: SWAP1
000006c6: SWAP3
000006c7: AND
000006c8: SWAP2
000006c9: PUSH2 0x08fc
000006cc: DUP5
000006cd: ISZERO
000006ce: MUL
000006cf: SWAP2
000006d0: DUP5
000006d1: SWAP2
000006d2: DUP2
000006d3: DUP2
000006d4: DUP2
000006d5: DUP6
000006d6: DUP9
000006d7: DUP9
000006d8: CALL
000006d9: SWAP4
000006da: POP
000006db: POP
000006dc: POP
000006dd: POP
000006de: ISZERO
000006df: DUP1
000006e0: ISZERO
000006e1: PUSH2 0x06ee
000006e4: JUMPI
000006e5: RETURNDATASIZE
000006e6: PUSH1 0x00
000006e8: DUP1
000006e9: RETURNDATACOPY
000006ea: RETURNDATASIZE
000006eb: PUSH1 0x00
000006ed: REVERT
000006ee: JUMPDEST
000006ef: POP
000006f0: POP
000006f1: JUMP
000006f2: JUMPDEST
000006f3: DUP2
000006f4: DUP2
000006f5: ADD
000006f6: DUP3
000006f7: DUP2
000006f8: LT
000006f9: ISZERO
000006fa: PUSH2 0x0702
000006fd: JUMPI
000006fe: PUSH1 0x00
00000700: DUP1
00000701: REVERT
00000702: JUMPDEST
00000703: SWAP3
00000704: SWAP2
00000705: POP
00000706: POP
00000707: JUMP
00000708: STOP
00000709: LOG1
0000070a: PUSH6 0x627a7a723058
00000711: KECCAK256
00000712: ADDRESS
00000713: UNKNOWN(0xED)
00000714: RETURNDATACOPY
00000715: SLT
00000716: UNKNOWN(0x25)
00000717: LT
00000718: UNKNOWN(0xAB)
00000719: JUMPDEST
0000071a: DUP11
0000071b: SUB
0000071c: BYTE
0000071d: SDIV
0000071e: UNKNOWN(0xB7)
0000071f: PUSH18 0x82564d0e9c40f6c34ab67811792113dbf46a
00000732: STOP
00000733: UNKNOWN(0x29)

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x409cb2dd14747f532cfb01f26b6afb2cc0fbd30f6dd6d85b0c6ca8cf5513e546 call_targets: 0xb70abc4ea1bf2ba0b878dbaaae3e179806ab2dba target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x409cb2dd14747f532cfb01f26b6afb2cc0fbd30f6dd6d85b0c6ca8cf5513e546", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xb70abc4ea1bf2ba0b878dbaaae3e179806ab2dba" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x0d826264", "selector": "0x0d826264", "calldata_variants": [ "0x0d826264", "0x0d8262640000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x473897d1", "selector": "0x473897d1", "calldata_variants": [ "0x473897d1", "0x473897d10000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4cfd5a82", "selector": "0x4cfd5a82", "calldata_variants": [ "0x4cfd5a82", "0x4cfd5a820000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x710908c9", "selector": "0x710908c9", "calldata_variants": [ "0x710908c9", "0x710908c90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8292afd9", "selector": "0x8292afd9", "calldata_variants": [ "0x8292afd9", "0x8292afd90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa006e0e5", "selector": "0xa006e0e5", "calldata_variants": [ "0xa006e0e5", "0xa006e0e50000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa17dd26c", "selector": "0xa17dd26c", "calldata_variants": [ "0xa17dd26c", "0xa17dd26c0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1752, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 1, "guards_detected": [], "untrusted_call_count": 1 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x409cb2dd14747f532cfb01f26b6afb2cc0fbd30f6dd6d85b0c6ca8cf5513e546 call_targets: 0xb70abc4ea1bf2ba0b878dbaaae3e179806ab2dba target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x409cb2dd14747f532cfb01f26b6afb2cc0fbd30f6dd6d85b0c6ca8cf5513e546", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xb70abc4ea1bf2ba0b878dbaaae3e179806ab2dba" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x0d826264", "selector": "0x0d826264", "calldata_variants": [ "0x0d826264", "0x0d8262640000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x473897d1", "selector": "0x473897d1", "calldata_variants": [ "0x473897d1", "0x473897d10000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4cfd5a82", "selector": "0x4cfd5a82", "calldata_variants": [ "0x4cfd5a82", "0x4cfd5a820000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x710908c9", "selector": "0x710908c9", "calldata_variants": [ "0x710908c9", "0x710908c90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8292afd9", "selector": "0x8292afd9", "calldata_variants": [ "0x8292afd9", "0x8292afd90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa006e0e5", "selector": "0xa006e0e5", "calldata_variants": [ "0xa006e0e5", "0xa006e0e50000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xa17dd26c", "selector": "0xa17dd26c", "calldata_variants": [ "0xa17dd26c", "0xa17dd26c0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1752, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 1, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x409cb2dd14747f532cfb01f26b6afb2cc0fbd30f6dd6d85b0c6ca8cf5513e546

call_targets: 0xb70abc4ea1bf2ba0b878dbaaae3e179806ab2dba

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x409cb2dd14747f532cfb01f26b6afb2cc0fbd30f6dd6d85b0c6ca8cf5513e546",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xb70abc4ea1bf2ba0b878dbaaae3e179806ab2dba"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x0d826264",
            "selector": "0x0d826264",
            "calldata_variants": [
                "0x0d826264",
                "0x0d8262640000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x473897d1",
            "selector": "0x473897d1",
            "calldata_variants": [
                "0x473897d1",
                "0x473897d10000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4cfd5a82",
            "selector": "0x4cfd5a82",
            "calldata_variants": [
                "0x4cfd5a82",
                "0x4cfd5a820000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x710908c9",
            "selector": "0x710908c9",
            "calldata_variants": [
                "0x710908c9",
                "0x710908c90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8292afd9",
            "selector": "0x8292afd9",
            "calldata_variants": [
                "0x8292afd9",
                "0x8292afd90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa006e0e5",
            "selector": "0xa006e0e5",
            "calldata_variants": [
                "0xa006e0e5",
                "0xa006e0e50000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa17dd26c",
            "selector": "0xa17dd26c",
            "calldata_variants": [
                "0xa17dd26c",
                "0xa17dd26c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1752,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [],
    "untrusted_call_count": 1
}