Analysis Run

019b477e-b323-728b-b524-0a73b51c6ad7

complete

Chain ID

1

Address

0x954bb0bbd60d3377b6ef6f8ab5c377dea47dcbb9

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
22491	artifact.fetch	complete	1 / 3	4 months ago
22492	tool.cast_disasm	complete	1 / 3	4 months ago
65518	analysis.bundle	complete	1 / 3	2 weeks ago
65519	capability.graph	complete	1 / 3	2 weeks ago
65520	detector.run	complete	1 / 3	2 weeks ago
65521	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

2

EXT*/BALANCE

2

Total opcodes

1427

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x00ba
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
0000002e: SWAP1
0000002f: DIV
00000030: PUSH4 0xffffffff
00000035: AND
00000036: DUP1
00000037: PUSH4 0x38af3eed
0000003c: EQ
0000003d: PUSH2 0x00bf
00000040: JUMPI
00000041: DUP1
00000042: PUSH4 0x43d726d6
00000047: EQ
00000048: PUSH2 0x0116
0000004b: JUMPI
0000004c: DUP1
0000004d: PUSH4 0x51cff8d9
00000052: EQ
00000053: PUSH2 0x012d
00000056: JUMPI
00000057: DUP1
00000058: PUSH4 0x685ca194
0000005d: EQ
0000005e: PUSH2 0x0170
00000061: JUMPI
00000062: DUP1
00000063: PUSH4 0x715018a6
00000068: EQ
00000069: PUSH2 0x01cb
0000006c: JUMPI
0000006d: DUP1
0000006e: PUSH4 0x8c52dc41
00000073: EQ
00000074: PUSH2 0x01e2
00000077: JUMPI
00000078: DUP1
00000079: PUSH4 0x8da5cb5b
0000007e: EQ
0000007f: PUSH2 0x01f9
00000082: JUMPI
00000083: DUP1
00000084: PUSH4 0x9af6549a
00000089: EQ
0000008a: PUSH2 0x0250
0000008d: JUMPI
0000008e: DUP1
0000008f: PUSH4 0xc19d93fb
00000094: EQ
00000095: PUSH2 0x0267
00000098: JUMPI
00000099: DUP1
0000009a: PUSH4 0xe3a9db1a
0000009f: EQ
000000a0: PUSH2 0x02a0
000000a3: JUMPI
000000a4: DUP1
000000a5: PUSH4 0xf2fde38b
000000aa: EQ
000000ab: PUSH2 0x02f7
000000ae: JUMPI
000000af: DUP1
000000b0: PUSH4 0xf340fa01
000000b5: EQ
000000b6: PUSH2 0x033a
000000b9: JUMPI
000000ba: JUMPDEST
000000bb: PUSH1 0x00
000000bd: DUP1
000000be: REVERT
000000bf: JUMPDEST
000000c0: CALLVALUE
000000c1: DUP1
000000c2: ISZERO
000000c3: PUSH2 0x00cb
000000c6: JUMPI
000000c7: PUSH1 0x00
000000c9: DUP1
000000ca: REVERT
000000cb: JUMPDEST
000000cc: POP
000000cd: PUSH2 0x00d4
000000d0: PUSH2 0x0370
000000d3: JUMP
000000d4: JUMPDEST
000000d5: PUSH1 0x40
000000d7: MLOAD
000000d8: DUP1
000000d9: DUP3
000000da: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000ef: AND
000000f0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000105: AND
00000106: DUP2
00000107: MSTORE
00000108: PUSH1 0x20
0000010a: ADD
0000010b: SWAP2
0000010c: POP
0000010d: POP
0000010e: PUSH1 0x40
00000110: MLOAD
00000111: DUP1
00000112: SWAP2
00000113: SUB
00000114: SWAP1
00000115: RETURN
00000116: JUMPDEST
00000117: CALLVALUE
00000118: DUP1
00000119: ISZERO
0000011a: PUSH2 0x0122
0000011d: JUMPI
0000011e: PUSH1 0x00
00000120: DUP1
00000121: REVERT
00000122: JUMPDEST
00000123: POP
00000124: PUSH2 0x012b
00000127: PUSH2 0x0396
0000012a: JUMP
0000012b: JUMPDEST
0000012c: STOP
0000012d: JUMPDEST
0000012e: CALLVALUE
0000012f: DUP1
00000130: ISZERO
00000131: PUSH2 0x0139
00000134: JUMPI
00000135: PUSH1 0x00
00000137: DUP1
00000138: REVERT
00000139: JUMPDEST
0000013a: POP
0000013b: PUSH2 0x016e
0000013e: PUSH1 0x04
00000140: DUP1
00000141: CALLDATASIZE
00000142: SUB
00000143: DUP2
00000144: ADD
00000145: SWAP1
00000146: DUP1
00000147: DUP1
00000148: CALLDATALOAD
00000149: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000015e: AND
0000015f: SWAP1
00000160: PUSH1 0x20
00000162: ADD
00000163: SWAP1
00000164: SWAP3
00000165: SWAP2
00000166: SWAP1
00000167: POP
00000168: POP
00000169: POP
0000016a: PUSH2 0x0476
0000016d: JUMP
0000016e: JUMPDEST
0000016f: STOP
00000170: JUMPDEST
00000171: CALLVALUE
00000172: DUP1
00000173: ISZERO
00000174: PUSH2 0x017c
00000177: JUMPI
00000178: PUSH1 0x00
0000017a: DUP1
0000017b: REVERT
0000017c: JUMPDEST
0000017d: POP
0000017e: PUSH2 0x01b1
00000181: PUSH1 0x04
00000183: DUP1
00000184: CALLDATASIZE
00000185: SUB
00000186: DUP2
00000187: ADD
00000188: SWAP1
00000189: DUP1
0000018a: DUP1
0000018b: CALLDATALOAD
0000018c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001a1: AND
000001a2: SWAP1
000001a3: PUSH1 0x20
000001a5: ADD
000001a6: SWAP1
000001a7: SWAP3
000001a8: SWAP2
000001a9: SWAP1
000001aa: POP
000001ab: POP
000001ac: POP
000001ad: PUSH2 0x0496
000001b0: JUMP
000001b1: JUMPDEST
000001b2: PUSH1 0x40
000001b4: MLOAD
000001b5: DUP1
000001b6: DUP3
000001b7: ISZERO
000001b8: ISZERO
000001b9: ISZERO
000001ba: ISZERO
000001bb: DUP2
000001bc: MSTORE
000001bd: PUSH1 0x20
000001bf: ADD
000001c0: SWAP2
000001c1: POP
000001c2: POP
000001c3: PUSH1 0x40
000001c5: MLOAD
000001c6: DUP1
000001c7: SWAP2
000001c8: SUB
000001c9: SWAP1
000001ca: RETURN
000001cb: JUMPDEST
000001cc: CALLVALUE
000001cd: DUP1
000001ce: ISZERO
000001cf: PUSH2 0x01d7
000001d2: JUMPI
000001d3: PUSH1 0x00
000001d5: DUP1
000001d6: REVERT
000001d7: JUMPDEST
000001d8: POP
000001d9: PUSH2 0x01e0
000001dc: PUSH2 0x04c8
000001df: JUMP
000001e0: JUMPDEST
000001e1: STOP
000001e2: JUMPDEST
000001e3: CALLVALUE
000001e4: DUP1
000001e5: ISZERO
000001e6: PUSH2 0x01ee
000001e9: JUMPI
000001ea: PUSH1 0x00
000001ec: DUP1
000001ed: REVERT
000001ee: JUMPDEST
000001ef: POP
000001f0: PUSH2 0x01f7
000001f3: PUSH2 0x05ca
000001f6: JUMP
000001f7: JUMPDEST
000001f8: STOP
000001f9: JUMPDEST
000001fa: CALLVALUE
000001fb: DUP1
000001fc: ISZERO
000001fd: PUSH2 0x0205
00000200: JUMPI
00000201: PUSH1 0x00
00000203: DUP1
00000204: REVERT
00000205: JUMPDEST
00000206: POP
00000207: PUSH2 0x020e
0000020a: PUSH2 0x06ab
0000020d: JUMP
0000020e: JUMPDEST
0000020f: PUSH1 0x40
00000211: MLOAD
00000212: DUP1
00000213: DUP3
00000214: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000229: AND
0000022a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000023f: AND
00000240: DUP2
00000241: MSTORE
00000242: PUSH1 0x20
00000244: ADD
00000245: SWAP2
00000246: POP
00000247: POP
00000248: PUSH1 0x40
0000024a: MLOAD
0000024b: DUP1
0000024c: SWAP2
0000024d: SUB
0000024e: SWAP1
0000024f: RETURN
00000250: JUMPDEST
00000251: CALLVALUE
00000252: DUP1
00000253: ISZERO
00000254: PUSH2 0x025c
00000257: JUMPI
00000258: PUSH1 0x00
0000025a: DUP1
0000025b: REVERT
0000025c: JUMPDEST
0000025d: POP
0000025e: PUSH2 0x0265
00000261: PUSH2 0x06d0
00000264: JUMP
00000265: JUMPDEST
00000266: STOP
00000267: JUMPDEST
00000268: CALLVALUE
00000269: DUP1
0000026a: ISZERO
0000026b: PUSH2 0x0273
0000026e: JUMPI
0000026f: PUSH1 0x00
00000271: DUP1
00000272: REVERT
00000273: JUMPDEST
00000274: POP
00000275: PUSH2 0x027c
00000278: PUSH2 0x0785
0000027b: JUMP
0000027c: JUMPDEST
0000027d: PUSH1 0x40
0000027f: MLOAD
00000280: DUP1
00000281: DUP3
00000282: PUSH1 0x02
00000284: DUP2
00000285: GT
00000286: ISZERO
00000287: PUSH2 0x028c
0000028a: JUMPI
0000028b: INVALID
0000028c: JUMPDEST
0000028d: PUSH1 0xff
0000028f: AND
00000290: DUP2
00000291: MSTORE
00000292: PUSH1 0x20
00000294: ADD
00000295: SWAP2
00000296: POP
00000297: POP
00000298: PUSH1 0x40
0000029a: MLOAD
0000029b: DUP1
0000029c: SWAP2
0000029d: SUB
0000029e: SWAP1
0000029f: RETURN
000002a0: JUMPDEST
000002a1: CALLVALUE
000002a2: DUP1
000002a3: ISZERO
000002a4: PUSH2 0x02ac
000002a7: JUMPI
000002a8: PUSH1 0x00
000002aa: DUP1
000002ab: REVERT
000002ac: JUMPDEST
000002ad: POP
000002ae: PUSH2 0x02e1
000002b1: PUSH1 0x04
000002b3: DUP1
000002b4: CALLDATASIZE
000002b5: SUB
000002b6: DUP2
000002b7: ADD
000002b8: SWAP1
000002b9: DUP1
000002ba: DUP1
000002bb: CALLDATALOAD
000002bc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002d1: AND
000002d2: SWAP1
000002d3: PUSH1 0x20
000002d5: ADD
000002d6: SWAP1
000002d7: SWAP3
000002d8: SWAP2
000002d9: SWAP1
000002da: POP
000002db: POP
000002dc: POP
000002dd: PUSH2 0x0798
000002e0: JUMP
000002e1: JUMPDEST
000002e2: PUSH1 0x40
000002e4: MLOAD
000002e5: DUP1
000002e6: DUP3
000002e7: DUP2
000002e8: MSTORE
000002e9: PUSH1 0x20
000002eb: ADD
000002ec: SWAP2
000002ed: POP
000002ee: POP
000002ef: PUSH1 0x40
000002f1: MLOAD
000002f2: DUP1
000002f3: SWAP2
000002f4: SUB
000002f5: SWAP1
000002f6: RETURN
000002f7: JUMPDEST
000002f8: CALLVALUE
000002f9: DUP1
000002fa: ISZERO
000002fb: PUSH2 0x0303
000002fe: JUMPI
000002ff: PUSH1 0x00
00000301: DUP1
00000302: REVERT
00000303: JUMPDEST
00000304: POP
00000305: PUSH2 0x0338
00000308: PUSH1 0x04
0000030a: DUP1
0000030b: CALLDATASIZE
0000030c: SUB
0000030d: DUP2
0000030e: ADD
0000030f: SWAP1
00000310: DUP1
00000311: DUP1
00000312: CALLDATALOAD
00000313: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000328: AND
00000329: SWAP1
0000032a: PUSH1 0x20
0000032c: ADD
0000032d: SWAP1
0000032e: SWAP3
0000032f: SWAP2
00000330: SWAP1
00000331: POP
00000332: POP
00000333: POP
00000334: PUSH2 0x07e1
00000337: JUMP
00000338: JUMPDEST
00000339: STOP
0000033a: JUMPDEST
0000033b: PUSH2 0x036e
0000033e: PUSH1 0x04
00000340: DUP1
00000341: CALLDATASIZE
00000342: SUB
00000343: DUP2
00000344: ADD
00000345: SWAP1
00000346: DUP1
00000347: DUP1
00000348: CALLDATALOAD
00000349: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000035e: AND
0000035f: SWAP1
00000360: PUSH1 0x20
00000362: ADD
00000363: SWAP1
00000364: SWAP3
00000365: SWAP2
00000366: SWAP1
00000367: POP
00000368: POP
00000369: POP
0000036a: PUSH2 0x0848
0000036d: JUMP
0000036e: JUMPDEST
0000036f: STOP
00000370: JUMPDEST
00000371: PUSH1 0x02
00000373: PUSH1 0x01
00000375: SWAP1
00000376: SLOAD
00000377: SWAP1
00000378: PUSH2 0x0100
0000037b: EXP
0000037c: SWAP1
0000037d: DIV
0000037e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000393: AND
00000394: DUP2
00000395: JUMP
00000396: JUMPDEST
00000397: PUSH1 0x00
00000399: DUP1
0000039a: SWAP1
0000039b: SLOAD
0000039c: SWAP1
0000039d: PUSH2 0x0100
000003a0: EXP
000003a1: SWAP1
000003a2: DIV
000003a3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003b8: AND
000003b9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003ce: AND
000003cf: CALLER
000003d0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003e5: AND
000003e6: EQ
000003e7: ISZERO
000003e8: ISZERO
000003e9: PUSH2 0x03f1
000003ec: JUMPI
000003ed: PUSH1 0x00
000003ef: DUP1
000003f0: REVERT
000003f1: JUMPDEST
000003f2: PUSH1 0x00
000003f4: PUSH1 0x02
000003f6: DUP2
000003f7: GT
000003f8: ISZERO
000003f9: PUSH2 0x03fe
000003fc: JUMPI
000003fd: INVALID
000003fe: JUMPDEST
000003ff: PUSH1 0x02
00000401: PUSH1 0x00
00000403: SWAP1
00000404: SLOAD
00000405: SWAP1
00000406: PUSH2 0x0100
00000409: EXP
0000040a: SWAP1
0000040b: DIV
0000040c: PUSH1 0xff
0000040e: AND
0000040f: PUSH1 0x02
00000411: DUP2
00000412: GT
00000413: ISZERO
00000414: PUSH2 0x0419
00000417: JUMPI
00000418: INVALID
00000419: JUMPDEST
0000041a: EQ
0000041b: ISZERO
0000041c: ISZERO
0000041d: PUSH2 0x0425
00000420: JUMPI
00000421: PUSH1 0x00
00000423: DUP1
00000424: REVERT
00000425: JUMPDEST
00000426: PUSH1 0x02
00000428: DUP1
00000429: PUSH1 0x00
0000042b: PUSH2 0x0100
0000042e: EXP
0000042f: DUP2
00000430: SLOAD
00000431: DUP2
00000432: PUSH1 0xff
00000434: MUL
00000435: NOT
00000436: AND
00000437: SWAP1
00000438: DUP4
00000439: PUSH1 0x02
0000043b: DUP2
0000043c: GT
0000043d: ISZERO
0000043e: PUSH2 0x0443
00000441: JUMPI
00000442: INVALID
00000443: JUMPDEST
00000444: MUL
00000445: OR
00000446: SWAP1
00000447: SSTORE
00000448: POP
00000449: PUSH32 0x1cdde67b72a90f19919ac732a437ac2f7a10fc128d28c2a6e525d89ce5cd9d3a
0000046a: PUSH1 0x40
0000046c: MLOAD
0000046d: PUSH1 0x40
0000046f: MLOAD
00000470: DUP1
00000471: SWAP2
00000472: SUB
00000473: SWAP1
00000474: LOG1
00000475: JUMP
00000476: JUMPDEST
00000477: PUSH2 0x047f
0000047a: DUP2
0000047b: PUSH2 0x0496
0000047e: JUMP
0000047f: JUMPDEST
00000480: ISZERO
00000481: ISZERO
00000482: PUSH2 0x048a
00000485: JUMPI
00000486: PUSH1 0x00
00000488: DUP1
00000489: REVERT
0000048a: JUMPDEST
0000048b: PUSH2 0x0493
0000048e: DUP2
0000048f: PUSH2 0x0888
00000492: JUMP
00000493: JUMPDEST
00000494: POP
00000495: JUMP
00000496: JUMPDEST
00000497: PUSH1 0x00
00000499: PUSH1 0x01
0000049b: PUSH1 0x02
0000049d: DUP2
0000049e: GT
0000049f: ISZERO
000004a0: PUSH2 0x04a5
000004a3: JUMPI
000004a4: INVALID
000004a5: JUMPDEST
000004a6: PUSH1 0x02
000004a8: PUSH1 0x00
000004aa: SWAP1
000004ab: SLOAD
000004ac: SWAP1
000004ad: PUSH2 0x0100
000004b0: EXP
000004b1: SWAP1
000004b2: DIV
000004b3: PUSH1 0xff
000004b5: AND
000004b6: PUSH1 0x02
000004b8: DUP2
000004b9: GT
000004ba: ISZERO
000004bb: PUSH2 0x04c0
000004be: JUMPI
000004bf: INVALID
000004c0: JUMPDEST
000004c1: EQ
000004c2: SWAP1
000004c3: POP
000004c4: SWAP2
000004c5: SWAP1
000004c6: POP
000004c7: JUMP
000004c8: JUMPDEST
000004c9: PUSH1 0x00
000004cb: DUP1
000004cc: SWAP1
000004cd: SLOAD
000004ce: SWAP1
000004cf: PUSH2 0x0100
000004d2: EXP
000004d3: SWAP1
000004d4: DIV
000004d5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004ea: AND
000004eb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000500: AND
00000501: CALLER
00000502: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000517: AND
00000518: EQ
00000519: ISZERO
0000051a: ISZERO
0000051b: PUSH2 0x0523
0000051e: JUMPI
0000051f: PUSH1 0x00
00000521: DUP1
00000522: REVERT
00000523: JUMPDEST
00000524: PUSH1 0x00
00000526: DUP1
00000527: SWAP1
00000528: SLOAD
00000529: SWAP1
0000052a: PUSH2 0x0100
0000052d: EXP
0000052e: SWAP1
0000052f: DIV
00000530: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000545: AND
00000546: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000055b: AND
0000055c: PUSH32 0xf8df31144d9c2f0f6b59d69b8b98abd5459d07f2742c4df920b25aae33c64820
0000057d: PUSH1 0x40
0000057f: MLOAD
00000580: PUSH1 0x40
00000582: MLOAD
00000583: DUP1
00000584: SWAP2
00000585: SUB
00000586: SWAP1
00000587: LOG2
00000588: PUSH1 0x00
0000058a: DUP1
0000058b: PUSH1 0x00
0000058d: PUSH2 0x0100
00000590: EXP
00000591: DUP2
00000592: SLOAD
00000593: DUP2
00000594: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005a9: MUL
000005aa: NOT
000005ab: AND
000005ac: SWAP1
000005ad: DUP4
000005ae: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005c3: AND
000005c4: MUL
000005c5: OR
000005c6: SWAP1
000005c7: SSTORE
000005c8: POP
000005c9: JUMP
000005ca: JUMPDEST
000005cb: PUSH1 0x00
000005cd: DUP1
000005ce: SWAP1
000005cf: SLOAD
000005d0: SWAP1
000005d1: PUSH2 0x0100
000005d4: EXP
000005d5: SWAP1
000005d6: DIV
000005d7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005ec: AND
000005ed: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000602: AND
00000603: CALLER
00000604: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000619: AND
0000061a: EQ
0000061b: ISZERO
0000061c: ISZERO
0000061d: PUSH2 0x0625
00000620: JUMPI
00000621: PUSH1 0x00
00000623: DUP1
00000624: REVERT
00000625: JUMPDEST
00000626: PUSH1 0x00
00000628: PUSH1 0x02
0000062a: DUP2
0000062b: GT
0000062c: ISZERO
0000062d: PUSH2 0x0632
00000630: JUMPI
00000631: INVALID
00000632: JUMPDEST
00000633: PUSH1 0x02
00000635: PUSH1 0x00
00000637: SWAP1
00000638: SLOAD
00000639: SWAP1
0000063a: PUSH2 0x0100
0000063d: EXP
0000063e: SWAP1
0000063f: DIV
00000640: PUSH1 0xff
00000642: AND
00000643: PUSH1 0x02
00000645: DUP2
00000646: GT
00000647: ISZERO
00000648: PUSH2 0x064d
0000064b: JUMPI
0000064c: INVALID
0000064d: JUMPDEST
0000064e: EQ
0000064f: ISZERO
00000650: ISZERO
00000651: PUSH2 0x0659
00000654: JUMPI
00000655: PUSH1 0x00
00000657: DUP1
00000658: REVERT
00000659: JUMPDEST
0000065a: PUSH1 0x01
0000065c: PUSH1 0x02
0000065e: PUSH1 0x00
00000660: PUSH2 0x0100
00000663: EXP
00000664: DUP2
00000665: SLOAD
00000666: DUP2
00000667: PUSH1 0xff
00000669: MUL
0000066a: NOT
0000066b: AND
0000066c: SWAP1
0000066d: DUP4
0000066e: PUSH1 0x02
00000670: DUP2
00000671: GT
00000672: ISZERO
00000673: PUSH2 0x0678
00000676: JUMPI
00000677: INVALID
00000678: JUMPDEST
00000679: MUL
0000067a: OR
0000067b: SWAP1
0000067c: SSTORE
0000067d: POP
0000067e: PUSH32 0x599d8e5a83cffb867d051598c4d70e805d59802d8081c1c7d6dffc5b6aca2b89
0000069f: PUSH1 0x40
000006a1: MLOAD
000006a2: PUSH1 0x40
000006a4: MLOAD
000006a5: DUP1
000006a6: SWAP2
000006a7: SUB
000006a8: SWAP1
000006a9: LOG1
000006aa: JUMP
000006ab: JUMPDEST
000006ac: PUSH1 0x00
000006ae: DUP1
000006af: SWAP1
000006b0: SLOAD
000006b1: SWAP1
000006b2: PUSH2 0x0100
000006b5: EXP
000006b6: SWAP1
000006b7: DIV
000006b8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006cd: AND
000006ce: DUP2
000006cf: JUMP
000006d0: JUMPDEST
000006d1: PUSH1 0x02
000006d3: DUP1
000006d4: DUP2
000006d5: GT
000006d6: ISZERO
000006d7: PUSH2 0x06dc
000006da: JUMPI
000006db: INVALID
000006dc: JUMPDEST
000006dd: PUSH1 0x02
000006df: PUSH1 0x00
000006e1: SWAP1
000006e2: SLOAD
000006e3: SWAP1
000006e4: PUSH2 0x0100
000006e7: EXP
000006e8: SWAP1
000006e9: DIV
000006ea: PUSH1 0xff
000006ec: AND
000006ed: PUSH1 0x02
000006ef: DUP2
000006f0: GT
000006f1: ISZERO
000006f2: PUSH2 0x06f7
000006f5: JUMPI
000006f6: INVALID
000006f7: JUMPDEST
000006f8: EQ
000006f9: ISZERO
000006fa: ISZERO
000006fb: PUSH2 0x0703
000006fe: JUMPI
000006ff: PUSH1 0x00
00000701: DUP1
00000702: REVERT
00000703: JUMPDEST
00000704: PUSH1 0x02
00000706: PUSH1 0x01
00000708: SWAP1
00000709: SLOAD
0000070a: SWAP1
0000070b: PUSH2 0x0100
0000070e: EXP
0000070f: SWAP1
00000710: DIV
00000711: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000726: AND
00000727: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000073c: AND
0000073d: PUSH2 0x08fc
00000740: ADDRESS
00000741: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000756: AND
00000757: BALANCE
00000758: SWAP1
00000759: DUP2
0000075a: ISZERO
0000075b: MUL
0000075c: SWAP1
0000075d: PUSH1 0x40
0000075f: MLOAD
00000760: PUSH1 0x00
00000762: PUSH1 0x40
00000764: MLOAD
00000765: DUP1
00000766: DUP4
00000767: SUB
00000768: DUP2
00000769: DUP6
0000076a: DUP9
0000076b: DUP9
0000076c: CALL
0000076d: SWAP4
0000076e: POP
0000076f: POP
00000770: POP
00000771: POP
00000772: ISZERO
00000773: DUP1
00000774: ISZERO
00000775: PUSH2 0x0782
00000778: JUMPI
00000779: RETURNDATASIZE
0000077a: PUSH1 0x00
0000077c: DUP1
0000077d: RETURNDATACOPY
0000077e: RETURNDATASIZE
0000077f: PUSH1 0x00
00000781: REVERT
00000782: JUMPDEST
00000783: POP
00000784: JUMP
00000785: JUMPDEST
00000786: PUSH1 0x02
00000788: PUSH1 0x00
0000078a: SWAP1
0000078b: SLOAD
0000078c: SWAP1
0000078d: PUSH2 0x0100
00000790: EXP
00000791: SWAP1
00000792: DIV
00000793: PUSH1 0xff
00000795: AND
00000796: DUP2
00000797: JUMP
00000798: JUMPDEST
00000799: PUSH1 0x00
0000079b: PUSH1 0x01
0000079d: PUSH1 0x00
0000079f: DUP4
000007a0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007b5: AND
000007b6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007cb: AND
000007cc: DUP2
000007cd: MSTORE
000007ce: PUSH1 0x20
000007d0: ADD
000007d1: SWAP1
000007d2: DUP2
000007d3: MSTORE
000007d4: PUSH1 0x20
000007d6: ADD
000007d7: PUSH1 0x00
000007d9: KECCAK256
000007da: SLOAD
000007db: SWAP1
000007dc: POP
000007dd: SWAP2
000007de: SWAP1
000007df: POP
000007e0: JUMP
000007e1: JUMPDEST
000007e2: PUSH1 0x00
000007e4: DUP1
000007e5: SWAP1
000007e6: SLOAD
000007e7: SWAP1
000007e8: PUSH2 0x0100
000007eb: EXP
000007ec: SWAP1
000007ed: DIV
000007ee: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000803: AND
00000804: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000819: AND
0000081a: CALLER
0000081b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000830: AND
00000831: EQ
00000832: ISZERO
00000833: ISZERO
00000834: PUSH2 0x083c
00000837: JUMPI
00000838: PUSH1 0x00
0000083a: DUP1
0000083b: REVERT
0000083c: JUMPDEST
0000083d: PUSH2 0x0845
00000840: DUP2
00000841: PUSH2 0x0a28
00000844: JUMP
00000845: JUMPDEST
00000846: POP
00000847: JUMP
00000848: JUMPDEST
00000849: PUSH1 0x00
0000084b: PUSH1 0x02
0000084d: DUP2
0000084e: GT
0000084f: ISZERO
00000850: PUSH2 0x0855
00000853: JUMPI
00000854: INVALID
00000855: JUMPDEST
00000856: PUSH1 0x02
00000858: PUSH1 0x00
0000085a: SWAP1
0000085b: SLOAD
0000085c: SWAP1
0000085d: PUSH2 0x0100
00000860: EXP
00000861: SWAP1
00000862: DIV
00000863: PUSH1 0xff
00000865: AND
00000866: PUSH1 0x02
00000868: DUP2
00000869: GT
0000086a: ISZERO
0000086b: PUSH2 0x0870
0000086e: JUMPI
0000086f: INVALID
00000870: JUMPDEST
00000871: EQ
00000872: ISZERO
00000873: ISZERO
00000874: PUSH2 0x087c
00000877: JUMPI
00000878: PUSH1 0x00
0000087a: DUP1
0000087b: REVERT
0000087c: JUMPDEST
0000087d: PUSH2 0x0885
00000880: DUP2
00000881: PUSH2 0x0b22
00000884: JUMP
00000885: JUMPDEST
00000886: POP
00000887: JUMP
00000888: JUMPDEST
00000889: PUSH1 0x00
0000088b: DUP1
0000088c: PUSH1 0x00
0000088e: SWAP1
0000088f: SLOAD
00000890: SWAP1
00000891: PUSH2 0x0100
00000894: EXP
00000895: SWAP1
00000896: DIV
00000897: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008ac: AND
000008ad: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008c2: AND
000008c3: CALLER
000008c4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008d9: AND
000008da: EQ
000008db: ISZERO
000008dc: ISZERO
000008dd: PUSH2 0x08e5
000008e0: JUMPI
000008e1: PUSH1 0x00
000008e3: DUP1
000008e4: REVERT
000008e5: JUMPDEST
000008e6: PUSH1 0x01
000008e8: PUSH1 0x00
000008ea: DUP4
000008eb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000900: AND
00000901: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000916: AND
00000917: DUP2
00000918: MSTORE
00000919: PUSH1 0x20
0000091b: ADD
0000091c: SWAP1
0000091d: DUP2
0000091e: MSTORE
0000091f: PUSH1 0x20
00000921: ADD
00000922: PUSH1 0x00
00000924: KECCAK256
00000925: SLOAD
00000926: SWAP1
00000927: POP
00000928: DUP1
00000929: ADDRESS
0000092a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000093f: AND
00000940: BALANCE
00000941: LT
00000942: ISZERO
00000943: ISZERO
00000944: ISZERO
00000945: PUSH2 0x094a
00000948: JUMPI
00000949: INVALID
0000094a: JUMPDEST
0000094b: PUSH1 0x00
0000094d: PUSH1 0x01
0000094f: PUSH1 0x00
00000951: DUP5
00000952: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000967: AND
00000968: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000097d: AND
0000097e: DUP2
0000097f: MSTORE
00000980: PUSH1 0x20
00000982: ADD
00000983: SWAP1
00000984: DUP2
00000985: MSTORE
00000986: PUSH1 0x20
00000988: ADD
00000989: PUSH1 0x00
0000098b: KECCAK256
0000098c: DUP2
0000098d: SWAP1
0000098e: SSTORE
0000098f: POP
00000990: DUP2
00000991: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009a6: AND
000009a7: PUSH2 0x08fc
000009aa: DUP3
000009ab: SWAP1
000009ac: DUP2
000009ad: ISZERO
000009ae: MUL
000009af: SWAP1
000009b0: PUSH1 0x40
000009b2: MLOAD
000009b3: PUSH1 0x00
000009b5: PUSH1 0x40
000009b7: MLOAD
000009b8: DUP1
000009b9: DUP4
000009ba: SUB
000009bb: DUP2
000009bc: DUP6
000009bd: DUP9
000009be: DUP9
000009bf: CALL
000009c0: SWAP4
000009c1: POP
000009c2: POP
000009c3: POP
000009c4: POP
000009c5: ISZERO
000009c6: DUP1
000009c7: ISZERO
000009c8: PUSH2 0x09d5
000009cb: JUMPI
000009cc: RETURNDATASIZE
000009cd: PUSH1 0x00
000009cf: DUP1
000009d0: RETURNDATACOPY
000009d1: RETURNDATASIZE
000009d2: PUSH1 0x00
000009d4: REVERT
000009d5: JUMPDEST
000009d6: POP
000009d7: DUP2
000009d8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009ed: AND
000009ee: PUSH32 0x7084f5476618d8e60b11ef0d7d3f06914655adb8793e28ff7f018d4c76d505d5
00000a0f: DUP3
00000a10: PUSH1 0x40
00000a12: MLOAD
00000a13: DUP1
00000a14: DUP3
00000a15: DUP2
00000a16: MSTORE
00000a17: PUSH1 0x20
00000a19: ADD
00000a1a: SWAP2
00000a1b: POP
00000a1c: POP
00000a1d: PUSH1 0x40
00000a1f: MLOAD
00000a20: DUP1
00000a21: SWAP2
00000a22: SUB
00000a23: SWAP1
00000a24: LOG2
00000a25: POP
00000a26: POP
00000a27: JUMP
00000a28: JUMPDEST
00000a29: PUSH1 0x00
00000a2b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a40: AND
00000a41: DUP2
00000a42: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a57: AND
00000a58: EQ
00000a59: ISZERO
00000a5a: ISZERO
00000a5b: ISZERO
00000a5c: PUSH2 0x0a64
00000a5f: JUMPI
00000a60: PUSH1 0x00
00000a62: DUP1
00000a63: REVERT
00000a64: JUMPDEST
00000a65: DUP1
00000a66: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a7b: AND
00000a7c: PUSH1 0x00
00000a7e: DUP1
00000a7f: SWAP1
00000a80: SLOAD
00000a81: SWAP1
00000a82: PUSH2 0x0100
00000a85: EXP
00000a86: SWAP1
00000a87: DIV
00000a88: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000a9d: AND
00000a9e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000ab3: AND
00000ab4: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
00000ad5: PUSH1 0x40
00000ad7: MLOAD
00000ad8: PUSH1 0x40
00000ada: MLOAD
00000adb: DUP1
00000adc: SWAP2
00000add: SUB
00000ade: SWAP1
00000adf: LOG3
00000ae0: DUP1
00000ae1: PUSH1 0x00
00000ae3: DUP1
00000ae4: PUSH2 0x0100
00000ae7: EXP
00000ae8: DUP2
00000ae9: SLOAD
00000aea: DUP2
00000aeb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000b00: MUL
00000b01: NOT
00000b02: AND
00000b03: SWAP1
00000b04: DUP4
00000b05: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000b1a: AND
00000b1b: MUL
00000b1c: OR
00000b1d: SWAP1
00000b1e: SSTORE
00000b1f: POP
00000b20: POP
00000b21: JUMP
00000b22: JUMPDEST
00000b23: PUSH1 0x00
00000b25: DUP1
00000b26: PUSH1 0x00
00000b28: SWAP1
00000b29: SLOAD
00000b2a: SWAP1
00000b2b: PUSH2 0x0100
00000b2e: EXP
00000b2f: SWAP1
00000b30: DIV
00000b31: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000b46: AND
00000b47: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000b5c: AND
00000b5d: CALLER
00000b5e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000b73: AND
00000b74: EQ
00000b75: ISZERO
00000b76: ISZERO
00000b77: PUSH2 0x0b7f
00000b7a: JUMPI
00000b7b: PUSH1 0x00
00000b7d: DUP1
00000b7e: REVERT
00000b7f: JUMPDEST
00000b80: CALLVALUE
00000b81: SWAP1
00000b82: POP
00000b83: PUSH2 0x0bd4
00000b86: DUP2
00000b87: PUSH1 0x01
00000b89: PUSH1 0x00
00000b8b: DUP6
00000b8c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000ba1: AND
00000ba2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000bb7: AND
00000bb8: DUP2
00000bb9: MSTORE
00000bba: PUSH1 0x20
00000bbc: ADD
00000bbd: SWAP1
00000bbe: DUP2
00000bbf: MSTORE
00000bc0: PUSH1 0x20
00000bc2: ADD
00000bc3: PUSH1 0x00
00000bc5: KECCAK256
00000bc6: SLOAD
00000bc7: PUSH2 0x0c69
00000bca: SWAP1
00000bcb: SWAP2
00000bcc: SWAP1
00000bcd: PUSH4 0xffffffff
00000bd2: AND
00000bd3: JUMP
00000bd4: JUMPDEST
00000bd5: PUSH1 0x01
00000bd7: PUSH1 0x00
00000bd9: DUP5
00000bda: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000bef: AND
00000bf0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000c05: AND
00000c06: DUP2
00000c07: MSTORE
00000c08: PUSH1 0x20
00000c0a: ADD
00000c0b: SWAP1
00000c0c: DUP2
00000c0d: MSTORE
00000c0e: PUSH1 0x20
00000c10: ADD
00000c11: PUSH1 0x00
00000c13: KECCAK256
00000c14: DUP2
00000c15: SWAP1
00000c16: SSTORE
00000c17: POP
00000c18: DUP2
00000c19: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000c2e: AND
00000c2f: PUSH32 0x2da466a7b24304f47e87fa2e1e5a81b9831ce54fec19055ce277ca2f39ba42c4
00000c50: DUP3
00000c51: PUSH1 0x40
00000c53: MLOAD
00000c54: DUP1
00000c55: DUP3
00000c56: DUP2
00000c57: MSTORE
00000c58: PUSH1 0x20
00000c5a: ADD
00000c5b: SWAP2
00000c5c: POP
00000c5d: POP
00000c5e: PUSH1 0x40
00000c60: MLOAD
00000c61: DUP1
00000c62: SWAP2
00000c63: SUB
00000c64: SWAP1
00000c65: LOG2
00000c66: POP
00000c67: POP
00000c68: JUMP
00000c69: JUMPDEST
00000c6a: PUSH1 0x00
00000c6c: DUP2
00000c6d: DUP4
00000c6e: ADD
00000c6f: SWAP1
00000c70: POP
00000c71: DUP3
00000c72: DUP2
00000c73: LT
00000c74: ISZERO
00000c75: ISZERO
00000c76: ISZERO
00000c77: PUSH2 0x0c7c
00000c7a: JUMPI
00000c7b: INVALID
00000c7c: JUMPDEST
00000c7d: DUP1
00000c7e: SWAP1
00000c7f: POP
00000c80: SWAP3
00000c81: SWAP2
00000c82: POP
00000c83: POP
00000c84: JUMP
00000c85: STOP
00000c86: LOG1
00000c87: PUSH6 0x627a7a723058
00000c8e: KECCAK256
00000c8f: ADDMOD
00000c90: DUP6
00000c91: DUP7
00000c92: SWAP7
00000c93: UNKNOWN(0xAE)
00000c94: PUSH1 0xf3
00000c96: UNKNOWN(0x29)
00000c97: LOG1
00000c98: RETURN
00000c99: UNKNOWN(0xAD)
00000c9a: GT
00000c9b: UNKNOWN(0xB3)
00000c9c: SLOAD
00000c9d: SWAP1
00000c9e: SMOD
00000c9f: UNKNOWN(0x2F)
00000ca0: GASLIMIT
00000ca1: SWAP16
00000ca2: LOG2
00000ca3: UNKNOWN(0xBC)
00000ca4: SWAP16
00000ca5: PUSH4 0x4b25a2c8
00000caa: PUSH27

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
medium	other	detector	Untrusted CALL target/value reachable	45	no	no	view trace_id: 0x97f2fc54eb75b58cf98abce8f458a17aad0369933ceda940e70bdfe2b9e5a73b call_targets: 0x954bb0bbd60d3377b6ef6f8ab5c377dea47dcbb9 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x97f2fc54eb75b58cf98abce8f458a17aad0369933ceda940e70bdfe2b9e5a73b", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x954bb0bbd60d3377b6ef6f8ab5c377dea47dcbb9" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0xffffffff", "selector": "0xffffffff", "calldata_variants": [ "0xffffffff", "0xffffffff0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38af3eed", "selector": "0x38af3eed", "calldata_variants": [ "0x38af3eed", "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x43d726d6", "selector": "0x43d726d6", "calldata_variants": [ "0x43d726d6", "0x43d726d60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x51cff8d9", "selector": "0x51cff8d9", "calldata_variants": [ "0x51cff8d9", "0x51cff8d90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x685ca194", "selector": "0x685ca194", "calldata_variants": [ "0x685ca194", "0x685ca1940000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8c52dc41", "selector": "0x8c52dc41", "calldata_variants": [ "0x8c52dc41", "0x8c52dc410000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1900, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 2495, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 2, "guards_detected": [ { "pc": 975, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1281, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1539, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2074, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2243, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2909, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" } ], "untrusted_call_count": 2 }
medium	other	detector	ETH value transfer possible	40	no	no	view trace_id: 0x97f2fc54eb75b58cf98abce8f458a17aad0369933ceda940e70bdfe2b9e5a73b call_targets: 0x954bb0bbd60d3377b6ef6f8ab5c377dea47dcbb9 target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x97f2fc54eb75b58cf98abce8f458a17aad0369933ceda940e70bdfe2b9e5a73b", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x954bb0bbd60d3377b6ef6f8ab5c377dea47dcbb9" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0xffffffff", "selector": "0xffffffff", "calldata_variants": [ "0xffffffff", "0xffffffff0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x38af3eed", "selector": "0x38af3eed", "calldata_variants": [ "0x38af3eed", "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x43d726d6", "selector": "0x43d726d6", "calldata_variants": [ "0x43d726d6", "0x43d726d60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x51cff8d9", "selector": "0x51cff8d9", "calldata_variants": [ "0x51cff8d9", "0x51cff8d90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x685ca194", "selector": "0x685ca194", "calldata_variants": [ "0x685ca194", "0x685ca1940000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8c52dc41", "selector": "0x8c52dc41", "calldata_variants": [ "0x8c52dc41", "0x8c52dc410000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1900, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 2495, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 2, "guards_detected": [ { "pc": 975, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1281, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 1539, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2074, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2243, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" }, { "pc": 2909, "type": "msg_sender_eq_const", "value": "0xffffffffffffffffffffffffffffffffffffffff" } ] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

medium

other

detector

Untrusted CALL target/value reachable

45

no

view

trace_id: 0x97f2fc54eb75b58cf98abce8f458a17aad0369933ceda940e70bdfe2b9e5a73b

call_targets: 0x954bb0bbd60d3377b6ef6f8ab5c377dea47dcbb9

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x97f2fc54eb75b58cf98abce8f458a17aad0369933ceda940e70bdfe2b9e5a73b",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x954bb0bbd60d3377b6ef6f8ab5c377dea47dcbb9"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xffffffff",
            "selector": "0xffffffff",
            "calldata_variants": [
                "0xffffffff",
                "0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x38af3eed",
            "selector": "0x38af3eed",
            "calldata_variants": [
                "0x38af3eed",
                "0x38af3eed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x43d726d6",
            "selector": "0x43d726d6",
            "calldata_variants": [
                "0x43d726d6",
                "0x43d726d60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x51cff8d9",
            "selector": "0x51cff8d9",
            "calldata_variants": [
                "0x51cff8d9",
                "0x51cff8d90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x685ca194",
            "selector": "0x685ca194",
            "calldata_variants": [
                "0x685ca194",
                "0x685ca1940000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x715018a6",
            "selector": "0x715018a6",
            "calldata_variants": [
                "0x715018a6",
                "0x715018a60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8c52dc41",
            "selector": "0x8c52dc41",
            "calldata_variants": [
                "0x8c52dc41",
                "0x8c52dc410000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1900,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2495,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [
        {
            "pc": 975,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1281,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1539,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 2074,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 2243,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 2909,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 2
}