019b477e-b32f-72a3-82b1-40d81ec1f348
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 22501 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 22502 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 65822 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 65823 | capability.graph | complete | 1 / 3 | 1 week ago |
| 65824 | detector.run | complete | 1 / 3 | 1 week ago |
| 65825 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: ISZERO 00000007: PUSH2 0x004a 0000000a: JUMPI 0000000b: PUSH1 0x00 0000000d: CALLDATALOAD 0000000e: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 0000002c: SWAP1 0000002d: DIV 0000002e: PUSH4 0xffffffff 00000033: AND 00000034: DUP1 00000035: PUSH4 0x2e1a7d4d 0000003a: EQ 0000003b: PUSH2 0x0579 0000003e: JUMPI 0000003f: DUP1 00000040: PUSH4 0xcb3b3ab3 00000045: EQ 00000046: PUSH2 0x059c 00000049: JUMPI 0000004a: JUMPDEST 0000004b: PUSH1 0x00 0000004d: DUP1 0000004e: PUSH1 0x00 00000050: DUP1 00000051: PUSH1 0x00 00000053: DUP1 00000054: PUSH1 0x00 00000056: DUP1 00000057: PUSH1 0x00 00000059: DUP1 0000005a: CALLVALUE 0000005b: PUSH1 0x00 0000005d: CALLDATASIZE 0000005e: SWAP1 0000005f: POP 00000060: GT 00000061: ISZERO 00000062: PUSH2 0x056d 00000065: JUMPI 00000066: CALLVALUE 00000067: CALLDATALOAD 00000068: SWAP10 00000069: POP 0000006a: CALLVALUE 0000006b: DUP11 0000006c: PUSH32 0x0100000000000000000000000000000000000000000000000000000000000000 0000008d: SWAP1 0000008e: DIV 0000008f: EQ 00000090: ISZERO 00000091: PUSH2 0x0425 00000094: JUMPI 00000095: PUSH2 0x0100 00000098: DUP11 00000099: PUSH1 0x01 0000009b: SWAP1 0000009c: DIV 0000009d: MUL 0000009e: PUSH1 0x01 000000a0: MUL 000000a1: SWAP10 000000a2: POP 000000a3: DUP10 000000a4: SWAP9 000000a5: POP 000000a6: PUSH2 0x0100 000000a9: DUP11 000000aa: PUSH1 0x01 000000ac: SWAP1 000000ad: DIV 000000ae: MUL 000000af: PUSH1 0x01 000000b1: MUL 000000b2: SWAP10 000000b3: POP 000000b4: PUSH1 0x01 000000b6: SLOAD 000000b7: SWAP1 000000b8: POP 000000b9: PUSH1 0x01 000000bb: PUSH32 0x0100000000000000000000000000000000000000000000000000000000000000 000000dc: MUL 000000dd: DUP10 000000de: PUSH31 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 000000fe: NOT 000000ff: AND 00000100: EQ 00000101: DUP1 00000102: ISZERO 00000103: PUSH2 0x010b 00000106: JUMPI 00000107: POP 00000108: DUP8 00000109: GASPRICE 0000010a: GT 0000010b: JUMPDEST 0000010c: ISZERO 0000010d: PUSH2 0x0139 00000110: JUMPI 00000111: DUP10 00000112: PUSH31 0x01000000000000000000000000000000000000000000000000000000000000 00000132: SWAP1 00000133: DIV 00000134: SWAP7 00000135: POP 00000136: CALLVALUE 00000137: DUP8 00000138: SSTORE 00000139: JUMPDEST 0000013a: PUSH3 0x010000 0000013e: DUP11 0000013f: PUSH1 0x01 00000141: SWAP1 00000142: DIV 00000143: MUL 00000144: PUSH1 0x01 00000146: MUL 00000147: SWAP10 00000148: POP 00000149: DUP10 0000014a: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 00000168: SWAP1 00000169: DIV 0000016a: SWAP6 0000016b: POP 0000016c: PUSH5 0x0100000000 00000172: DUP11 00000173: PUSH1 0x01 00000175: SWAP1 00000176: DIV 00000177: MUL 00000178: PUSH1 0x01 0000017a: MUL 0000017b: SWAP10 0000017c: POP 0000017d: PUSH1 0x00 0000017f: PUSH1 0x01 00000181: MUL 00000182: PUSH1 0x01 00000184: DUP8 00000185: SUB 00000186: BLOCKHASH 00000187: PUSH1 0x00 00000189: NOT 0000018a: AND 0000018b: EQ 0000018c: ISZERO 0000018d: ISZERO 0000018e: PUSH2 0x0420 00000191: JUMPI 00000192: DUP10 00000193: PUSH30 0x010000000000000000000000000000000000000000000000000000000000 000001b2: SWAP1 000001b3: DIV 000001b4: SWAP5 000001b5: POP 000001b6: JUMPDEST 000001b7: CALLVALUE 000001b8: DUP6 000001b9: GT 000001ba: ISZERO 000001bb: PUSH2 0x041f 000001be: JUMPI 000001bf: PUSH4 0x01000000 000001c4: DUP11 000001c5: PUSH1 0x01 000001c7: SWAP1 000001c8: DIV 000001c9: MUL 000001ca: PUSH1 0x01 000001cc: MUL 000001cd: SWAP10 000001ce: POP 000001cf: PUSH20 0x06012c8cf97bead5deae237070f9587f8e7a266d 000001e4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001f9: AND 000001fa: PUSH4 0x88c2a0bf 000001ff: DUP7 00000200: PUSH1 0x40 00000202: MLOAD 00000203: DUP3 00000204: PUSH4 0xffffffff 00000209: AND 0000020a: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 00000228: MUL 00000229: DUP2 0000022a: MSTORE 0000022b: PUSH1 0x04 0000022d: ADD 0000022e: DUP1 0000022f: DUP3 00000230: DUP2 00000231: MSTORE 00000232: PUSH1 0x20 00000234: ADD 00000235: SWAP2 00000236: POP 00000237: POP 00000238: PUSH1 0x00 0000023a: PUSH1 0x40 0000023c: MLOAD 0000023d: DUP1 0000023e: DUP4 0000023f: SUB 00000240: DUP2 00000241: PUSH1 0x00 00000243: DUP8 00000244: PUSH2 0x646e 00000247: GAS 00000248: SUB 00000249: CALL 0000024a: SWAP3 0000024b: POP 0000024c: POP 0000024d: POP 0000024e: DUP1 0000024f: ISZERO 00000250: PUSH2 0x029d 00000253: JUMPI 00000254: POP 00000255: PUSH1 0x01 00000257: PUSH32 0x0100000000000000000000000000000000000000000000000000000000000000 00000278: MUL 00000279: DUP10 0000027a: PUSH31 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 0000029a: NOT 0000029b: AND 0000029c: EQ 0000029d: JUMPDEST 0000029e: ISZERO 0000029f: PUSH2 0x03bb 000002a2: JUMPI 000002a3: DUP10 000002a4: PUSH30 0x010000000000000000000000000000000000000000000000000000000000 000002c3: SWAP1 000002c4: DIV 000002c5: SWAP7 000002c6: POP 000002c7: PUSH1 0x06 000002c9: DUP8 000002ca: ADD 000002cb: SWAP3 000002cc: POP 000002cd: JUMPDEST 000002ce: DUP3 000002cf: DUP8 000002d0: LT 000002d1: ISZERO 000002d2: PUSH2 0x03ba 000002d5: JUMPI 000002d6: PUSH2 0xffff 000002d9: DUP8 000002da: GT 000002db: ISZERO 000002dc: PUSH2 0x0310 000002df: JUMPI 000002e0: PUSH26 0xd99400000000a8f806c754549943b6550a2594c9a12683000000 000002fb: DUP8 000002fc: ADD 000002fd: CALLVALUE 000002fe: MSTORE 000002ff: CALLVALUE 00000300: CALLVALUE 00000301: CALLVALUE 00000302: CALLVALUE 00000303: CALLVALUE 00000304: PUSH1 0x1a 00000306: PUSH1 0x06 00000308: KECCAK256 00000309: GAS 0000030a: CALL 0000030b: POP 0000030c: PUSH2 0x03ad 0000030f: JUMP 00000310: JUMPDEST 00000311: PUSH1 0xff 00000313: DUP8 00000314: GT 00000315: ISZERO 00000316: PUSH2 0x0349 00000319: JUMPI 0000031a: PUSH25 0xd89400000000a8f806c754549943b6550a2594c9a126820000 00000334: DUP8 00000335: ADD 00000336: CALLVALUE 00000337: MSTORE 00000338: CALLVALUE 00000339: CALLVALUE 0000033a: CALLVALUE 0000033b: CALLVALUE 0000033c: CALLVALUE 0000033d: PUSH1 0x19 0000033f: PUSH1 0x07 00000341: KECCAK256 00000342: GAS 00000343: CALL 00000344: POP 00000345: PUSH2 0x03ac 00000348: JUMP 00000349: JUMPDEST 0000034a: PUSH1 0x7f 0000034c: DUP8 0000034d: GT 0000034e: ISZERO 0000034f: PUSH2 0x0381 00000352: JUMPI 00000353: PUSH24 0xd79400000000a8f806c754549943b6550a2594c9a1268100 0000036c: DUP8 0000036d: ADD 0000036e: CALLVALUE 0000036f: MSTORE 00000370: CALLVALUE 00000371: CALLVALUE 00000372: CALLVALUE 00000373: CALLVALUE 00000374: CALLVALUE 00000375: PUSH1 0x18 00000377: PUSH1 0x08 00000379: KECCAK256 0000037a: GAS 0000037b: CALL 0000037c: POP 0000037d: PUSH2 0x03ab 00000380: JUMP 00000381: JUMPDEST 00000382: PUSH23 0xd69400000000a8f806c754549943b6550a2594c9a12600 0000039a: DUP8 0000039b: ADD 0000039c: CALLVALUE 0000039d: MSTORE 0000039e: CALLVALUE 0000039f: CALLVALUE 000003a0: CALLVALUE 000003a1: CALLVALUE 000003a2: CALLVALUE 000003a3: PUSH1 0x17 000003a5: PUSH1 0x09 000003a7: KECCAK256 000003a8: GAS 000003a9: CALL 000003aa: POP 000003ab: JUMPDEST 000003ac: JUMPDEST 000003ad: JUMPDEST 000003ae: DUP7 000003af: DUP1 000003b0: PUSH1 0x01 000003b2: ADD 000003b3: SWAP8 000003b4: POP 000003b5: POP 000003b6: PUSH2 0x02cd 000003b9: JUMP 000003ba: JUMPDEST 000003bb: JUMPDEST 000003bc: PUSH4 0x01000000 000003c1: DUP11 000003c2: PUSH1 0x01 000003c4: SWAP1 000003c5: DIV 000003c6: MUL 000003c7: PUSH1 0x01 000003c9: MUL 000003ca: SWAP10 000003cb: POP 000003cc: DUP4 000003cd: DUP1 000003ce: PUSH1 0x01 000003d0: ADD 000003d1: SWAP5 000003d2: POP 000003d3: POP 000003d4: PUSH1 0x04 000003d6: DUP5 000003d7: EQ 000003d8: ISZERO 000003d9: PUSH2 0x03e6 000003dc: JUMPI 000003dd: PUSH1 0x20 000003df: CALLDATALOAD 000003e0: SWAP10 000003e1: POP 000003e2: PUSH2 0x03f6 000003e5: JUMP 000003e6: JUMPDEST 000003e7: PUSH1 0x09 000003e9: DUP5 000003ea: EQ 000003eb: ISZERO 000003ec: PUSH2 0x03f5 000003ef: JUMPI 000003f0: PUSH1 0x3e 000003f2: CALLDATALOAD 000003f3: SWAP10 000003f4: POP 000003f5: JUMPDEST 000003f6: JUMPDEST 000003f7: DUP10 000003f8: PUSH30 0x010000000000000000000000000000000000000000000000000000000000 00000417: SWAP1 00000418: DIV 00000419: SWAP5 0000041a: POP 0000041b: PUSH2 0x01b6 0000041e: JUMP 0000041f: JUMPDEST 00000420: JUMPDEST 00000421: PUSH2 0x056c 00000424: JUMP 00000425: JUMPDEST 00000426: PUSH1 0x01 00000428: PUSH32 0x0100000000000000000000000000000000000000000000000000000000000000 00000449: MUL 0000044a: DUP11 0000044b: PUSH31 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 0000046b: NOT 0000046c: AND 0000046d: EQ 0000046e: ISZERO 0000046f: PUSH2 0x04d3 00000472: JUMPI 00000473: PUSH2 0x0100 00000476: DUP11 00000477: PUSH1 0x01 00000479: SWAP1 0000047a: DIV 0000047b: MUL 0000047c: PUSH1 0x01 0000047e: MUL 0000047f: SWAP10 00000480: POP 00000481: DUP10 00000482: PUSH30 0x010000000000000000000000000000000000000000000000000000000000 000004a1: SWAP1 000004a2: DIV 000004a3: SWAP2 000004a4: POP 000004a5: PUSH1 0x64 000004a7: DUP3 000004a8: ADD 000004a9: SWAP1 000004aa: POP 000004ab: PUSH1 0x01 000004ad: DUP3 000004ae: GT 000004af: ISZERO 000004b0: PUSH2 0x04ce 000004b3: JUMPI 000004b4: JUMPDEST 000004b5: DUP1 000004b6: DUP3 000004b7: LT 000004b8: ISZERO 000004b9: PUSH2 0x04cd 000004bc: JUMPI 000004bd: PUSH1 0x01 000004bf: DUP3 000004c0: SSTORE 000004c1: DUP2 000004c2: DUP1 000004c3: PUSH1 0x01 000004c5: ADD 000004c6: SWAP3 000004c7: POP 000004c8: POP 000004c9: PUSH2 0x04b4 000004cc: JUMP 000004cd: JUMPDEST 000004ce: JUMPDEST 000004cf: PUSH2 0x056b 000004d2: JUMP 000004d3: JUMPDEST 000004d4: PUSH1 0x02 000004d6: PUSH32 0x0100000000000000000000000000000000000000000000000000000000000000 000004f7: MUL 000004f8: DUP11 000004f9: PUSH31 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 00000519: NOT 0000051a: AND 0000051b: EQ 0000051c: ISZERO 0000051d: PUSH2 0x056a 00000520: JUMPI 00000521: PUSH14 0x3318585733ff600052601b6005f3 00000530: PUSH1 0x64 00000532: MSTORE 00000533: ADDRESS 00000534: PUSH1 0x56 00000536: MSTORE 00000537: PUSH1 0x7a 00000539: PUSH1 0x60 0000053b: MSTORE8 0000053c: PUSH1 0x73 0000053e: PUSH1 0x61 00000540: MSTORE8 00000541: PUSH1 0x00 00000543: JUMPDEST 00000544: PUSH1 0x3c 00000546: DUP2 00000547: LT 00000548: ISZERO 00000549: PUSH2 0x055f 0000054c: JUMPI 0000054d: PUSH1 0x24 0000054f: PUSH1 0x60 00000551: PUSH1 0x00 00000553: CREATE 00000554: POP 00000555: PUSH1 0x01 00000557: DUP2 00000558: ADD 00000559: SWAP1 0000055a: POP 0000055b: PUSH2 0x0543 0000055e: JUMP 0000055f: JUMPDEST 00000560: POP 00000561: PUSH1 0x00 00000563: SLOAD 00000564: PUSH1 0x3c 00000566: ADD 00000567: PUSH1 0x00 00000569: SSTORE 0000056a: JUMPDEST 0000056b: JUMPDEST 0000056c: JUMPDEST 0000056d: JUMPDEST 0000056e: POP 0000056f: POP 00000570: POP 00000571: POP 00000572: POP 00000573: POP 00000574: POP 00000575: POP 00000576: POP 00000577: POP 00000578: STOP 00000579: JUMPDEST 0000057a: CALLVALUE 0000057b: ISZERO 0000057c: PUSH2 0x0584 0000057f: JUMPI 00000580: PUSH1 0x00 00000582: DUP1 00000583: REVERT 00000584: JUMPDEST 00000585: PUSH2 0x059a 00000588: PUSH1 0x04 0000058a: DUP1 0000058b: DUP1 0000058c: CALLDATALOAD 0000058d: SWAP1 0000058e: PUSH1 0x20 00000590: ADD 00000591: SWAP1 00000592: SWAP2 00000593: SWAP1 00000594: POP 00000595: POP 00000596: PUSH2 0x05bf 00000599: JUMP 0000059a: JUMPDEST 0000059b: STOP 0000059c: JUMPDEST 0000059d: CALLVALUE 0000059e: ISZERO 0000059f: PUSH2 0x05a7 000005a2: JUMPI 000005a3: PUSH1 0x00 000005a5: DUP1 000005a6: REVERT 000005a7: JUMPDEST 000005a8: PUSH2 0x05bd 000005ab: PUSH1 0x04 000005ad: DUP1 000005ae: DUP1 000005af: CALLDATALOAD 000005b0: SWAP1 000005b1: PUSH1 0x20 000005b3: ADD 000005b4: SWAP1 000005b5: SWAP2 000005b6: SWAP1 000005b7: POP 000005b8: POP 000005b9: PUSH2 0x061c 000005bc: JUMP 000005bd: JUMPDEST 000005be: STOP 000005bf: JUMPDEST 000005c0: PUSH2 0x05c7 000005c3: PUSH2 0x0633 000005c6: JUMP 000005c7: JUMPDEST 000005c8: PUSH2 0x05cf 000005cb: PUSH2 0x0655 000005ce: JUMP 000005cf: JUMPDEST 000005d0: PUSH1 0x00 000005d2: DUP2 000005d3: GT 000005d4: ISZERO 000005d5: PUSH2 0x0619 000005d8: JUMPI 000005d9: ORIGIN 000005da: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000005ef: AND 000005f0: PUSH2 0x08fc 000005f3: DUP3 000005f4: SWAP1 000005f5: DUP2 000005f6: ISZERO 000005f7: MUL 000005f8: SWAP1 000005f9: PUSH1 0x40 000005fb: MLOAD 000005fc: PUSH1 0x00 000005fe: PUSH1 0x40 00000600: MLOAD 00000601: DUP1 00000602: DUP4 00000603: SUB 00000604: DUP2 00000605: DUP6 00000606: DUP9 00000607: DUP9 00000608: CALL 00000609: SWAP4 0000060a: POP 0000060b: POP 0000060c: POP 0000060d: POP 0000060e: ISZERO 0000060f: ISZERO 00000610: PUSH2 0x0618 00000613: JUMPI 00000614: PUSH1 0x00 00000616: DUP1 00000617: REVERT 00000618: JUMPDEST 00000619: JUMPDEST 0000061a: POP 0000061b: JUMP 0000061c: JUMPDEST 0000061d: PUSH2 0x0624 00000620: PUSH2 0x0633 00000623: JUMP 00000624: JUMPDEST 00000625: PUSH2 0x062c 00000628: PUSH2 0x0655 0000062b: JUMP 0000062c: JUMPDEST 0000062d: DUP1 0000062e: PUSH1 0x01 00000630: SSTORE 00000631: POP 00000632: JUMP 00000633: JUMPDEST 00000634: PUSH20 0x06aba80df0bb055e707a2c0337910c1438dc9d17 00000649: ORIGIN 0000064a: EQ 0000064b: PUSH2 0x0653 0000064e: JUMPI 0000064f: PUSH1 0x00 00000651: DUP1 00000652: REVERT 00000653: JUMPDEST 00000654: JUMP 00000655: JUMPDEST 00000656: PUSH4 0x01312d00 0000065b: GASLIMIT 0000065c: LT 0000065d: PUSH2 0x0665 00000660: JUMPI 00000661: PUSH1 0x00 00000663: DUP1 00000664: REVERT 00000665: JUMPDEST 00000666: JUMP 00000667: STOP 00000668: LOG1 00000669: PUSH6 0x627a7a723058 00000670: KECCAK256 00000671: OR 00000672: SGT 00000673: UNKNOWN(0xE1) 00000674: JUMPDEST 00000675: BLOCKHASH 00000676: UNKNOWN(0xDD) 00000677: DUP3 00000678: MSTORE 00000679: UNKNOWN(0xCC) 0000067a: UNKNOWN(0x28) 0000067b: MULMOD 0000067c: PC 0000067d: CHAINID 0000067e: BASEFEE 0000067f: MCOPY 00000680: CODESIZE 00000681: UNKNOWN(0xD3) 00000682: PUSH25
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | auth | detector | Authorization based on tx.origin | 70 | no | — |
viewvalidation_json{
"reason": "missing sink mapping",
"status": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2e1a7d4d",
"selector": "0x2e1a7d4d",
"calldata_variants": [
"0x2e1a7d4d",
"0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcb3b3ab3",
"selector": "0xcb3b3ab3",
"calldata_variants": [
"0xcb3b3ab3",
"0xcb3b3ab30000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [
{
"pc": 1610,
"type": "tx_origin_used"
},
{
"pc": 1497,
"type": "tx_origin_used"
},
{
"pc": 1609,
"type": "tx_origin_used"
}
]
}
|
| medium | other | detector | Untrusted CALL target/value reachable | 45 | no | no |
viewtrace_id: 0x0c0c0bd0189f6f3f684349db1a3d426ff804093482179900b65faa8f6d61d064
call_targets:
0x00000000a8f806c754549943b6550a2594c9a126
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x0c0c0bd0189f6f3f684349db1a3d426ff804093482179900b65faa8f6d61d064",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x00000000a8f806c754549943b6550a2594c9a126"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2e1a7d4d",
"selector": "0x2e1a7d4d",
"calldata_variants": [
"0x2e1a7d4d",
"0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcb3b3ab3",
"selector": "0xcb3b3ab3",
"calldata_variants": [
"0xcb3b3ab3",
"0xcb3b3ab30000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 585,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 778,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 835,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 6,
"guards_detected": [
{
"pc": 1610,
"type": "tx_origin_used"
},
{
"pc": 1497,
"type": "tx_origin_used"
},
{
"pc": 1609,
"type": "tx_origin_used"
}
],
"untrusted_call_count": 6
}
|
| medium | other | detector | ETH value transfer possible | 40 | no | no |
viewtrace_id: 0x0c0c0bd0189f6f3f684349db1a3d426ff804093482179900b65faa8f6d61d064
call_targets:
0x00000000a8f806c754549943b6550a2594c9a126
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x0c0c0bd0189f6f3f684349db1a3d426ff804093482179900b65faa8f6d61d064",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x00000000a8f806c754549943b6550a2594c9a126"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2e1a7d4d",
"selector": "0x2e1a7d4d",
"calldata_variants": [
"0x2e1a7d4d",
"0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcb3b3ab3",
"selector": "0xcb3b3ab3",
"calldata_variants": [
"0xcb3b3ab3",
"0xcb3b3ab30000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 585,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 778,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 835,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 6,
"guards_detected": [
{
"pc": 1610,
"type": "tx_origin_used"
},
{
"pc": 1497,
"type": "tx_origin_used"
},
{
"pc": 1609,
"type": "tx_origin_used"
}
]
}
|
| medium | other | detector | CREATE/CREATE2 reachable | 45 | no | no |
viewtrace_id: 0xc969ef77e163bb8ded17ada2d468289ebf50efe81c385a4cba1388fcdffd6c36
validation_json{
"sink": "CREATE",
"errors": 0,
"status": "unknown",
"attempts": 6,
"trace_id": "0xc969ef77e163bb8ded17ada2d468289ebf50efe81c385a4cba1388fcdffd6c36",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2e1a7d4d",
"selector": "0x2e1a7d4d",
"calldata_variants": [
"0x2e1a7d4d",
"0x2e1a7d4d0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xcb3b3ab3",
"selector": "0xcb3b3ab3",
"calldata_variants": [
"0xcb3b3ab3",
"0xcb3b3ab30000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"create_count": 1,
"create2_count": 0
}
|