TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-b553-73c6-96c3-a742172a03d4

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
22905 artifact.fetch complete 1 / 3 3 months ago
22906 tool.cast_disasm complete 1 / 3 3 months ago
107457 analysis.bundle complete 1 / 3 1 week ago
107458 capability.graph complete 1 / 3 1 week ago
107459 detector.run complete 1 / 3 1 week ago
107460 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
5
EXT*/BALANCE
5
Total opcodes
1166
Flags
heavy_ext_balance_usage
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0055
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x13af4035
00000019: EQ
0000001a: PUSH2 0x027d
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x8da5cb5b
00000024: EQ
00000025: PUSH2 0x02ce
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8f59eda5
0000002f: EQ
00000030: PUSH2 0x0325
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xc57ac7b6
0000003a: EQ
0000003b: PUSH2 0x0376
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xc8daa402
00000045: EQ
00000046: PUSH2 0x03b1
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0xfb167003
00000050: EQ
00000051: PUSH2 0x0402
00000054: JUMPI
00000055: JUMPDEST
00000056: PUSH1 0x00
00000058: PUSH7 0x038d7ea4c68000
00000060: PUSH1 0x02
00000062: PUSH1 0x00
00000064: SWAP1
00000065: SLOAD
00000066: SWAP1
00000067: PUSH2 0x0100
0000006a: EXP
0000006b: SWAP1
0000006c: DIV
0000006d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000082: AND
00000083: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000098: AND
00000099: PUSH4 0x57de26a4
0000009e: PUSH1 0x40
000000a0: MLOAD
000000a1: DUP2
000000a2: PUSH4 0xffffffff
000000a7: AND
000000a8: PUSH1 0xe0
000000aa: SHL
000000ab: DUP2
000000ac: MSTORE
000000ad: PUSH1 0x04
000000af: ADD
000000b0: PUSH1 0x20
000000b2: PUSH1 0x40
000000b4: MLOAD
000000b5: DUP1
000000b6: DUP4
000000b7: SUB
000000b8: DUP2
000000b9: DUP7
000000ba: DUP1
000000bb: EXTCODESIZE
000000bc: ISZERO
000000bd: DUP1
000000be: ISZERO
000000bf: PUSH2 0x00c7
000000c2: JUMPI
000000c3: PUSH1 0x00
000000c5: DUP1
000000c6: REVERT
000000c7: JUMPDEST
000000c8: POP
000000c9: GAS
000000ca: STATICCALL
000000cb: ISZERO
000000cc: DUP1
000000cd: ISZERO
000000ce: PUSH2 0x00db
000000d1: JUMPI
000000d2: RETURNDATASIZE
000000d3: PUSH1 0x00
000000d5: DUP1
000000d6: RETURNDATACOPY
000000d7: RETURNDATASIZE
000000d8: PUSH1 0x00
000000da: REVERT
000000db: JUMPDEST
000000dc: POP
000000dd: POP
000000de: POP
000000df: POP
000000e0: PUSH1 0x40
000000e2: MLOAD
000000e3: RETURNDATASIZE
000000e4: PUSH1 0x20
000000e6: DUP2
000000e7: LT
000000e8: ISZERO
000000e9: PUSH2 0x00f1
000000ec: JUMPI
000000ed: PUSH1 0x00
000000ef: DUP1
000000f0: REVERT
000000f1: JUMPDEST
000000f2: DUP2
000000f3: ADD
000000f4: SWAP1
000000f5: DUP1
000000f6: DUP1
000000f7: MLOAD
000000f8: SWAP1
000000f9: PUSH1 0x20
000000fb: ADD
000000fc: SWAP1
000000fd: SWAP3
000000fe: SWAP2
000000ff: SWAP1
00000100: POP
00000101: POP
00000102: POP
00000103: PUSH1 0x00
00000105: SHR
00000106: DUP2
00000107: PUSH2 0x010c
0000010a: JUMPI
0000010b: INVALID
0000010c: JUMPDEST
0000010d: DIV
0000010e: SWAP1
0000010f: POP
00000110: PUSH1 0x00
00000112: PUSH1 0x01
00000114: SLOAD
00000115: DUP3
00000116: CALLVALUE
00000117: MUL
00000118: DUP2
00000119: PUSH2 0x011e
0000011c: JUMPI
0000011d: INVALID
0000011e: JUMPDEST
0000011f: DIV
00000120: SWAP1
00000121: POP
00000122: PUSH1 0x03
00000124: PUSH1 0x00
00000126: SWAP1
00000127: SLOAD
00000128: SWAP1
00000129: PUSH2 0x0100
0000012c: EXP
0000012d: SWAP1
0000012e: DIV
0000012f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000144: AND
00000145: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000015a: AND
0000015b: PUSH4 0xa9059cbb
00000160: CALLER
00000161: DUP4
00000162: PUSH1 0x40
00000164: MLOAD
00000165: DUP4
00000166: PUSH4 0xffffffff
0000016b: AND
0000016c: PUSH1 0xe0
0000016e: SHL
0000016f: DUP2
00000170: MSTORE
00000171: PUSH1 0x04
00000173: ADD
00000174: DUP1
00000175: DUP4
00000176: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000018b: AND
0000018c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001a1: AND
000001a2: DUP2
000001a3: MSTORE
000001a4: PUSH1 0x20
000001a6: ADD
000001a7: DUP3
000001a8: DUP2
000001a9: MSTORE
000001aa: PUSH1 0x20
000001ac: ADD
000001ad: SWAP3
000001ae: POP
000001af: POP
000001b0: POP
000001b1: PUSH1 0x20
000001b3: PUSH1 0x40
000001b5: MLOAD
000001b6: DUP1
000001b7: DUP4
000001b8: SUB
000001b9: DUP2
000001ba: PUSH1 0x00
000001bc: DUP8
000001bd: DUP1
000001be: EXTCODESIZE
000001bf: ISZERO
000001c0: DUP1
000001c1: ISZERO
000001c2: PUSH2 0x01ca
000001c5: JUMPI
000001c6: PUSH1 0x00
000001c8: DUP1
000001c9: REVERT
000001ca: JUMPDEST
000001cb: POP
000001cc: GAS
000001cd: CALL
000001ce: ISZERO
000001cf: DUP1
000001d0: ISZERO
000001d1: PUSH2 0x01de
000001d4: JUMPI
000001d5: RETURNDATASIZE
000001d6: PUSH1 0x00
000001d8: DUP1
000001d9: RETURNDATACOPY
000001da: RETURNDATASIZE
000001db: PUSH1 0x00
000001dd: REVERT
000001de: JUMPDEST
000001df: POP
000001e0: POP
000001e1: POP
000001e2: POP
000001e3: PUSH1 0x40
000001e5: MLOAD
000001e6: RETURNDATASIZE
000001e7: PUSH1 0x20
000001e9: DUP2
000001ea: LT
000001eb: ISZERO
000001ec: PUSH2 0x01f4
000001ef: JUMPI
000001f0: PUSH1 0x00
000001f2: DUP1
000001f3: REVERT
000001f4: JUMPDEST
000001f5: DUP2
000001f6: ADD
000001f7: SWAP1
000001f8: DUP1
000001f9: DUP1
000001fa: MLOAD
000001fb: SWAP1
000001fc: PUSH1 0x20
000001fe: ADD
000001ff: SWAP1
00000200: SWAP3
00000201: SWAP2
00000202: SWAP1
00000203: POP
00000204: POP
00000205: POP
00000206: POP
00000207: PUSH32 0x3a9a9f34f5831e9c8ecb66ab3aa308b2ff31eaca434615f6c9cadc656a9af71c
00000228: CALLER
00000229: CALLVALUE
0000022a: DUP4
0000022b: PUSH1 0x40
0000022d: MLOAD
0000022e: DUP1
0000022f: DUP5
00000230: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000245: AND
00000246: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000025b: AND
0000025c: DUP2
0000025d: MSTORE
0000025e: PUSH1 0x20
00000260: ADD
00000261: DUP4
00000262: DUP2
00000263: MSTORE
00000264: PUSH1 0x20
00000266: ADD
00000267: DUP3
00000268: DUP2
00000269: MSTORE
0000026a: PUSH1 0x20
0000026c: ADD
0000026d: SWAP4
0000026e: POP
0000026f: POP
00000270: POP
00000271: POP
00000272: PUSH1 0x40
00000274: MLOAD
00000275: DUP1
00000276: SWAP2
00000277: SUB
00000278: SWAP1
00000279: LOG1
0000027a: POP
0000027b: POP
0000027c: STOP
0000027d: JUMPDEST
0000027e: CALLVALUE
0000027f: DUP1
00000280: ISZERO
00000281: PUSH2 0x0289
00000284: JUMPI
00000285: PUSH1 0x00
00000287: DUP1
00000288: REVERT
00000289: JUMPDEST
0000028a: POP
0000028b: PUSH2 0x02cc
0000028e: PUSH1 0x04
00000290: DUP1
00000291: CALLDATASIZE
00000292: SUB
00000293: PUSH1 0x20
00000295: DUP2
00000296: LT
00000297: ISZERO
00000298: PUSH2 0x02a0
0000029b: JUMPI
0000029c: PUSH1 0x00
0000029e: DUP1
0000029f: REVERT
000002a0: JUMPDEST
000002a1: DUP2
000002a2: ADD
000002a3: SWAP1
000002a4: DUP1
000002a5: DUP1
000002a6: CALLDATALOAD
000002a7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002bc: AND
000002bd: SWAP1
000002be: PUSH1 0x20
000002c0: ADD
000002c1: SWAP1
000002c2: SWAP3
000002c3: SWAP2
000002c4: SWAP1
000002c5: POP
000002c6: POP
000002c7: POP
000002c8: PUSH2 0x042d
000002cb: JUMP
000002cc: JUMPDEST
000002cd: STOP
000002ce: JUMPDEST
000002cf: CALLVALUE
000002d0: DUP1
000002d1: ISZERO
000002d2: PUSH2 0x02da
000002d5: JUMPI
000002d6: PUSH1 0x00
000002d8: DUP1
000002d9: REVERT
000002da: JUMPDEST
000002db: POP
000002dc: PUSH2 0x02e3
000002df: PUSH2 0x0532
000002e2: JUMP
000002e3: JUMPDEST
000002e4: PUSH1 0x40
000002e6: MLOAD
000002e7: DUP1
000002e8: DUP3
000002e9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002fe: AND
000002ff: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000314: AND
00000315: DUP2
00000316: MSTORE
00000317: PUSH1 0x20
00000319: ADD
0000031a: SWAP2
0000031b: POP
0000031c: POP
0000031d: PUSH1 0x40
0000031f: MLOAD
00000320: DUP1
00000321: SWAP2
00000322: SUB
00000323: SWAP1
00000324: RETURN
00000325: JUMPDEST
00000326: CALLVALUE
00000327: DUP1
00000328: ISZERO
00000329: PUSH2 0x0331
0000032c: JUMPI
0000032d: PUSH1 0x00
0000032f: DUP1
00000330: REVERT
00000331: JUMPDEST
00000332: POP
00000333: PUSH2 0x0374
00000336: PUSH1 0x04
00000338: DUP1
00000339: CALLDATASIZE
0000033a: SUB
0000033b: PUSH1 0x20
0000033d: DUP2
0000033e: LT
0000033f: ISZERO
00000340: PUSH2 0x0348
00000343: JUMPI
00000344: PUSH1 0x00
00000346: DUP1
00000347: REVERT
00000348: JUMPDEST
00000349: DUP2
0000034a: ADD
0000034b: SWAP1
0000034c: DUP1
0000034d: DUP1
0000034e: CALLDATALOAD
0000034f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000364: AND
00000365: SWAP1
00000366: PUSH1 0x20
00000368: ADD
00000369: SWAP1
0000036a: SWAP3
0000036b: SWAP2
0000036c: SWAP1
0000036d: POP
0000036e: POP
0000036f: POP
00000370: PUSH2 0x0557
00000373: JUMP
00000374: JUMPDEST
00000375: STOP
00000376: JUMPDEST
00000377: CALLVALUE
00000378: DUP1
00000379: ISZERO
0000037a: PUSH2 0x0382
0000037d: JUMPI
0000037e: PUSH1 0x00
00000380: DUP1
00000381: REVERT
00000382: JUMPDEST
00000383: POP
00000384: PUSH2 0x03af
00000387: PUSH1 0x04
00000389: DUP1
0000038a: CALLDATASIZE
0000038b: SUB
0000038c: PUSH1 0x20
0000038e: DUP2
0000038f: LT
00000390: ISZERO
00000391: PUSH2 0x0399
00000394: JUMPI
00000395: PUSH1 0x00
00000397: DUP1
00000398: REVERT
00000399: JUMPDEST
0000039a: DUP2
0000039b: ADD
0000039c: SWAP1
0000039d: DUP1
0000039e: DUP1
0000039f: CALLDATALOAD
000003a0: SWAP1
000003a1: PUSH1 0x20
000003a3: ADD
000003a4: SWAP1
000003a5: SWAP3
000003a6: SWAP2
000003a7: SWAP1
000003a8: POP
000003a9: POP
000003aa: POP
000003ab: PUSH2 0x07e0
000003ae: JUMP
000003af: JUMPDEST
000003b0: STOP
000003b1: JUMPDEST
000003b2: CALLVALUE
000003b3: DUP1
000003b4: ISZERO
000003b5: PUSH2 0x03bd
000003b8: JUMPI
000003b9: PUSH1 0x00
000003bb: DUP1
000003bc: REVERT
000003bd: JUMPDEST
000003be: POP
000003bf: PUSH2 0x0400
000003c2: PUSH1 0x04
000003c4: DUP1
000003c5: CALLDATASIZE
000003c6: SUB
000003c7: PUSH1 0x20
000003c9: DUP2
000003ca: LT
000003cb: ISZERO
000003cc: PUSH2 0x03d4
000003cf: JUMPI
000003d0: PUSH1 0x00
000003d2: DUP1
000003d3: REVERT
000003d4: JUMPDEST
000003d5: DUP2
000003d6: ADD
000003d7: SWAP1
000003d8: DUP1
000003d9: DUP1
000003da: CALLDATALOAD
000003db: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003f0: AND
000003f1: SWAP1
000003f2: PUSH1 0x20
000003f4: ADD
000003f5: SWAP1
000003f6: SWAP3
000003f7: SWAP2
000003f8: SWAP1
000003f9: POP
000003fa: POP
000003fb: POP
000003fc: PUSH2 0x08b9
000003ff: JUMP
00000400: JUMPDEST
00000401: STOP
00000402: JUMPDEST
00000403: CALLVALUE
00000404: DUP1
00000405: ISZERO
00000406: PUSH2 0x040e
00000409: JUMPI
0000040a: PUSH1 0x00
0000040c: DUP1
0000040d: REVERT
0000040e: JUMPDEST
0000040f: POP
00000410: PUSH2 0x0417
00000413: PUSH2 0x09dc
00000416: JUMP
00000417: JUMPDEST
00000418: PUSH1 0x40
0000041a: MLOAD
0000041b: DUP1
0000041c: DUP3
0000041d: DUP2
0000041e: MSTORE
0000041f: PUSH1 0x20
00000421: ADD
00000422: SWAP2
00000423: POP
00000424: POP
00000425: PUSH1 0x40
00000427: MLOAD
00000428: DUP1
00000429: SWAP2
0000042a: SUB
0000042b: SWAP1
0000042c: RETURN
0000042d: JUMPDEST
0000042e: PUSH1 0x00
00000430: DUP1
00000431: SWAP1
00000432: SLOAD
00000433: SWAP1
00000434: PUSH2 0x0100
00000437: EXP
00000438: SWAP1
00000439: DIV
0000043a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000044f: AND
00000450: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000465: AND
00000466: CALLER
00000467: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000047c: AND
0000047d: EQ
0000047e: PUSH2 0x04ef
00000481: JUMPI
00000482: PUSH1 0x40
00000484: MLOAD
00000485: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000004a6: DUP2
000004a7: MSTORE
000004a8: PUSH1 0x04
000004aa: ADD
000004ab: DUP1
000004ac: DUP1
000004ad: PUSH1 0x20
000004af: ADD
000004b0: DUP3
000004b1: DUP2
000004b2: SUB
000004b3: DUP3
000004b4: MSTORE
000004b5: PUSH1 0x0d
000004b7: DUP2
000004b8: MSTORE
000004b9: PUSH1 0x20
000004bb: ADD
000004bc: DUP1
000004bd: PUSH32 0x6e6f207065726d697373696f6e00000000000000000000000000000000000000
000004de: DUP2
000004df: MSTORE
000004e0: POP
000004e1: PUSH1 0x20
000004e3: ADD
000004e4: SWAP2
000004e5: POP
000004e6: POP
000004e7: PUSH1 0x40
000004e9: MLOAD
000004ea: DUP1
000004eb: SWAP2
000004ec: SUB
000004ed: SWAP1
000004ee: REVERT
000004ef: JUMPDEST
000004f0: DUP1
000004f1: PUSH1 0x00
000004f3: DUP1
000004f4: PUSH2 0x0100
000004f7: EXP
000004f8: DUP2
000004f9: SLOAD
000004fa: DUP2
000004fb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000510: MUL
00000511: NOT
00000512: AND
00000513: SWAP1
00000514: DUP4
00000515: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000052a: AND
0000052b: MUL
0000052c: OR
0000052d: SWAP1
0000052e: SSTORE
0000052f: POP
00000530: POP
00000531: JUMP
00000532: JUMPDEST
00000533: PUSH1 0x00
00000535: DUP1
00000536: SWAP1
00000537: SLOAD
00000538: SWAP1
00000539: PUSH2 0x0100
0000053c: EXP
0000053d: SWAP1
0000053e: DIV
0000053f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000554: AND
00000555: DUP2
00000556: JUMP
00000557: JUMPDEST
00000558: PUSH1 0x00
0000055a: DUP1
0000055b: SWAP1
0000055c: SLOAD
0000055d: SWAP1
0000055e: PUSH2 0x0100
00000561: EXP
00000562: SWAP1
00000563: DIV
00000564: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000579: AND
0000057a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000058f: AND
00000590: CALLER
00000591: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005a6: AND
000005a7: EQ
000005a8: PUSH2 0x0619
000005ab: JUMPI
000005ac: PUSH1 0x40
000005ae: MLOAD
000005af: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000005d0: DUP2
000005d1: MSTORE
000005d2: PUSH1 0x04
000005d4: ADD
000005d5: DUP1
000005d6: DUP1
000005d7: PUSH1 0x20
000005d9: ADD
000005da: DUP3
000005db: DUP2
000005dc: SUB
000005dd: DUP3
000005de: MSTORE
000005df: PUSH1 0x0d
000005e1: DUP2
000005e2: MSTORE
000005e3: PUSH1 0x20
000005e5: ADD
000005e6: DUP1
000005e7: PUSH32 0x6e6f207065726d697373696f6e00000000000000000000000000000000000000
00000608: DUP2
00000609: MSTORE
0000060a: POP
0000060b: PUSH1 0x20
0000060d: ADD
0000060e: SWAP2
0000060f: POP
00000610: POP
00000611: PUSH1 0x40
00000613: MLOAD
00000614: DUP1
00000615: SWAP2
00000616: SUB
00000617: SWAP1
00000618: REVERT
00000619: JUMPDEST
0000061a: PUSH1 0x00
0000061c: PUSH1 0x03
0000061e: PUSH1 0x00
00000620: SWAP1
00000621: SLOAD
00000622: SWAP1
00000623: PUSH2 0x0100
00000626: EXP
00000627: SWAP1
00000628: DIV
00000629: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000063e: AND
0000063f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000654: AND
00000655: PUSH4 0x70a08231
0000065a: ADDRESS
0000065b: PUSH1 0x40
0000065d: MLOAD
0000065e: DUP3
0000065f: PUSH4 0xffffffff
00000664: AND
00000665: PUSH1 0xe0
00000667: SHL
00000668: DUP2
00000669: MSTORE
0000066a: PUSH1 0x04
0000066c: ADD
0000066d: DUP1
0000066e: DUP3
0000066f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000684: AND
00000685: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000069a: AND
0000069b: DUP2
0000069c: MSTORE
0000069d: PUSH1 0x20
0000069f: ADD
000006a0: SWAP2
000006a1: POP
000006a2: POP
000006a3: PUSH1 0x20
000006a5: PUSH1 0x40
000006a7: MLOAD
000006a8: DUP1
000006a9: DUP4
000006aa: SUB
000006ab: DUP2
000006ac: DUP7
000006ad: DUP1
000006ae: EXTCODESIZE
000006af: ISZERO
000006b0: DUP1
000006b1: ISZERO
000006b2: PUSH2 0x06ba
000006b5: JUMPI
000006b6: PUSH1 0x00
000006b8: DUP1
000006b9: REVERT
000006ba: JUMPDEST
000006bb: POP
000006bc: GAS
000006bd: STATICCALL
000006be: ISZERO
000006bf: DUP1
000006c0: ISZERO
000006c1: PUSH2 0x06ce
000006c4: JUMPI
000006c5: RETURNDATASIZE
000006c6: PUSH1 0x00
000006c8: DUP1
000006c9: RETURNDATACOPY
000006ca: RETURNDATASIZE
000006cb: PUSH1 0x00
000006cd: REVERT
000006ce: JUMPDEST
000006cf: POP
000006d0: POP
000006d1: POP
000006d2: POP
000006d3: PUSH1 0x40
000006d5: MLOAD
000006d6: RETURNDATASIZE
000006d7: PUSH1 0x20
000006d9: DUP2
000006da: LT
000006db: ISZERO
000006dc: PUSH2 0x06e4
000006df: JUMPI
000006e0: PUSH1 0x00
000006e2: DUP1
000006e3: REVERT
000006e4: JUMPDEST
000006e5: DUP2
000006e6: ADD
000006e7: SWAP1
000006e8: DUP1
000006e9: DUP1
000006ea: MLOAD
000006eb: SWAP1
000006ec: PUSH1 0x20
000006ee: ADD
000006ef: SWAP1
000006f0: SWAP3
000006f1: SWAP2
000006f2: SWAP1
000006f3: POP
000006f4: POP
000006f5: POP
000006f6: SWAP1
000006f7: POP
000006f8: PUSH1 0x03
000006fa: PUSH1 0x00
000006fc: SWAP1
000006fd: SLOAD
000006fe: SWAP1
000006ff: PUSH2 0x0100
00000702: EXP
00000703: SWAP1
00000704: DIV
00000705: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000071a: AND
0000071b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000730: AND
00000731: PUSH4 0xa9059cbb
00000736: DUP4
00000737: DUP4
00000738: PUSH1 0x40
0000073a: MLOAD
0000073b: DUP4
0000073c: PUSH4 0xffffffff
00000741: AND
00000742: PUSH1 0xe0
00000744: SHL
00000745: DUP2
00000746: MSTORE
00000747: PUSH1 0x04
00000749: ADD
0000074a: DUP1
0000074b: DUP4
0000074c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000761: AND
00000762: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000777: AND
00000778: DUP2
00000779: MSTORE
0000077a: PUSH1 0x20
0000077c: ADD
0000077d: DUP3
0000077e: DUP2
0000077f: MSTORE
00000780: PUSH1 0x20
00000782: ADD
00000783: SWAP3
00000784: POP
00000785: POP
00000786: POP
00000787: PUSH1 0x20
00000789: PUSH1 0x40
0000078b: MLOAD
0000078c: DUP1
0000078d: DUP4
0000078e: SUB
0000078f: DUP2
00000790: PUSH1 0x00
00000792: DUP8
00000793: DUP1
00000794: EXTCODESIZE
00000795: ISZERO
00000796: DUP1
00000797: ISZERO
00000798: PUSH2 0x07a0
0000079b: JUMPI
0000079c: PUSH1 0x00
0000079e: DUP1
0000079f: REVERT
000007a0: JUMPDEST
000007a1: POP
000007a2: GAS
000007a3: CALL
000007a4: ISZERO
000007a5: DUP1
000007a6: ISZERO
000007a7: PUSH2 0x07b4
000007aa: JUMPI
000007ab: RETURNDATASIZE
000007ac: PUSH1 0x00
000007ae: DUP1
000007af: RETURNDATACOPY
000007b0: RETURNDATASIZE
000007b1: PUSH1 0x00
000007b3: REVERT
000007b4: JUMPDEST
000007b5: POP
000007b6: POP
000007b7: POP
000007b8: POP
000007b9: PUSH1 0x40
000007bb: MLOAD
000007bc: RETURNDATASIZE
000007bd: PUSH1 0x20
000007bf: DUP2
000007c0: LT
000007c1: ISZERO
000007c2: PUSH2 0x07ca
000007c5: JUMPI
000007c6: PUSH1 0x00
000007c8: DUP1
000007c9: REVERT
000007ca: JUMPDEST
000007cb: DUP2
000007cc: ADD
000007cd: SWAP1
000007ce: DUP1
000007cf: DUP1
000007d0: MLOAD
000007d1: SWAP1
000007d2: PUSH1 0x20
000007d4: ADD
000007d5: SWAP1
000007d6: SWAP3
000007d7: SWAP2
000007d8: SWAP1
000007d9: POP
000007da: POP
000007db: POP
000007dc: POP
000007dd: POP
000007de: POP
000007df: JUMP
000007e0: JUMPDEST
000007e1: PUSH1 0x00
000007e3: DUP1
000007e4: SWAP1
000007e5: SLOAD
000007e6: SWAP1
000007e7: PUSH2 0x0100
000007ea: EXP
000007eb: SWAP1
000007ec: DIV
000007ed: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000802: AND
00000803: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000818: AND
00000819: CALLER
0000081a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000082f: AND
00000830: EQ
00000831: PUSH2 0x08a2
00000834: JUMPI
00000835: PUSH1 0x40
00000837: MLOAD
00000838: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000859: DUP2
0000085a: MSTORE
0000085b: PUSH1 0x04
0000085d: ADD
0000085e: DUP1
0000085f: DUP1
00000860: PUSH1 0x20
00000862: ADD
00000863: DUP3
00000864: DUP2
00000865: SUB
00000866: DUP3
00000867: MSTORE
00000868: PUSH1 0x0d
0000086a: DUP2
0000086b: MSTORE
0000086c: PUSH1 0x20
0000086e: ADD
0000086f: DUP1
00000870: PUSH32 0x6e6f207065726d697373696f6e00000000000000000000000000000000000000
00000891: DUP2
00000892: MSTORE
00000893: POP
00000894: PUSH1 0x20
00000896: ADD
00000897: SWAP2
00000898: POP
00000899: POP
0000089a: PUSH1 0x40
0000089c: MLOAD
0000089d: DUP1
0000089e: SWAP2
0000089f: SUB
000008a0: SWAP1
000008a1: REVERT
000008a2: JUMPDEST
000008a3: PUSH1 0x00
000008a5: DUP2
000008a6: GT
000008a7: PUSH2 0x08af
000008aa: JUMPI
000008ab: PUSH1 0x00
000008ad: DUP1
000008ae: REVERT
000008af: JUMPDEST
000008b0: DUP1
000008b1: PUSH1 0x01
000008b3: DUP2
000008b4: SWAP1
000008b5: SSTORE
000008b6: POP
000008b7: POP
000008b8: JUMP
000008b9: JUMPDEST
000008ba: PUSH1 0x00
000008bc: DUP1
000008bd: SWAP1
000008be: SLOAD
000008bf: SWAP1
000008c0: PUSH2 0x0100
000008c3: EXP
000008c4: SWAP1
000008c5: DIV
000008c6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008db: AND
000008dc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008f1: AND
000008f2: CALLER
000008f3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000908: AND
00000909: EQ
0000090a: PUSH2 0x097b
0000090d: JUMPI
0000090e: PUSH1 0x40
00000910: MLOAD
00000911: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000932: DUP2
00000933: MSTORE
00000934: PUSH1 0x04
00000936: ADD
00000937: DUP1
00000938: DUP1
00000939: PUSH1 0x20
0000093b: ADD
0000093c: DUP3
0000093d: DUP2
0000093e: SUB
0000093f: DUP3
00000940: MSTORE
00000941: PUSH1 0x0d
00000943: DUP2
00000944: MSTORE
00000945: PUSH1 0x20
00000947: ADD
00000948: DUP1
00000949: PUSH32 0x6e6f207065726d697373696f6e00000000000000000000000000000000000000
0000096a: DUP2
0000096b: MSTORE
0000096c: POP
0000096d: PUSH1 0x20
0000096f: ADD
00000970: SWAP2
00000971: POP
00000972: POP
00000973: PUSH1 0x40
00000975: MLOAD
00000976: DUP1
00000977: SWAP2
00000978: SUB
00000979: SWAP1
0000097a: REVERT
0000097b: JUMPDEST
0000097c: DUP1
0000097d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000992: AND
00000993: PUSH2 0x08fc
00000996: ADDRESS
00000997: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000009ac: AND
000009ad: BALANCE
000009ae: SWAP1
000009af: DUP2
000009b0: ISZERO
000009b1: MUL
000009b2: SWAP1
000009b3: PUSH1 0x40
000009b5: MLOAD
000009b6: PUSH1 0x00
000009b8: PUSH1 0x40
000009ba: MLOAD
000009bb: DUP1
000009bc: DUP4
000009bd: SUB
000009be: DUP2
000009bf: DUP6
000009c0: DUP9
000009c1: DUP9
000009c2: CALL
000009c3: SWAP4
000009c4: POP
000009c5: POP
000009c6: POP
000009c7: POP
000009c8: ISZERO
000009c9: DUP1
000009ca: ISZERO
000009cb: PUSH2 0x09d8
000009ce: JUMPI
000009cf: RETURNDATASIZE
000009d0: PUSH1 0x00
000009d2: DUP1
000009d3: RETURNDATACOPY
000009d4: RETURNDATASIZE
000009d5: PUSH1 0x00
000009d7: REVERT
000009d8: JUMPDEST
000009d9: POP
000009da: POP
000009db: JUMP
000009dc: JUMPDEST
000009dd: PUSH1 0x01
000009df: SLOAD
000009e0: DUP2
000009e1: JUMP
000009e2: INVALID
000009e3: LOG2
000009e4: PUSH6 0x627a7a723058
000009eb: KECCAK256
000009ec: UNKNOWN(0x2B)
000009ed: DUP16
000009ee: PUSH13 0x38bbbcb69043fe09748ccc2118
000009fc: SWAP16
000009fd: DUP15
000009fe: GAS
000009ff: DUP16
00000a00: UNKNOWN(0xBF)
00000a01: SLT
00000a02: UNKNOWN(0xB3)
00000a03: BLOCKHASH
00000a04: PUSH23

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
medium other detector Untrusted CALL target/value reachable 45 no no
view
trace_id: 0x98bf4d14ca83b303b71c5c9fc58dfffc6bab5a37b5338a038961621197fb5e3a
call_targets: 0xcc1320a48c76385e17e4e1c759ce8ea1d11687c2
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x98bf4d14ca83b303b71c5c9fc58dfffc6bab5a37b5338a038961621197fb5e3a",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xcc1320a48c76385e17e4e1c759ce8ea1d11687c2"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x13af4035",
            "selector": "0x13af4035",
            "calldata_variants": [
                "0x13af4035",
                "0x13af40350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f59eda5",
            "selector": "0x8f59eda5",
            "calldata_variants": [
                "0x8f59eda5",
                "0x8f59eda50000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc57ac7b6",
            "selector": "0xc57ac7b6",
            "calldata_variants": [
                "0xc57ac7b6",
                "0xc57ac7b60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc8daa402",
            "selector": "0xc8daa402",
            "calldata_variants": [
                "0xc8daa402",
                "0xc8daa4020000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xfb167003",
            "selector": "0xfb167003",
            "calldata_variants": [
                "0xfb167003",
                "0xfb1670030000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 461,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1955,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2498,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [
        {
            "pc": 1126,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1424,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 2073,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 2290,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 3
}
medium other detector ETH value transfer possible 40 no no
view
trace_id: 0x98bf4d14ca83b303b71c5c9fc58dfffc6bab5a37b5338a038961621197fb5e3a
call_targets: 0xcc1320a48c76385e17e4e1c759ce8ea1d11687c2
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x98bf4d14ca83b303b71c5c9fc58dfffc6bab5a37b5338a038961621197fb5e3a",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xcc1320a48c76385e17e4e1c759ce8ea1d11687c2"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x13af4035",
            "selector": "0x13af4035",
            "calldata_variants": [
                "0x13af4035",
                "0x13af40350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f59eda5",
            "selector": "0x8f59eda5",
            "calldata_variants": [
                "0x8f59eda5",
                "0x8f59eda50000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc57ac7b6",
            "selector": "0xc57ac7b6",
            "calldata_variants": [
                "0xc57ac7b6",
                "0xc57ac7b60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc8daa402",
            "selector": "0xc8daa402",
            "calldata_variants": [
                "0xc8daa402",
                "0xc8daa4020000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xfb167003",
            "selector": "0xfb167003",
            "calldata_variants": [
                "0xfb167003",
                "0xfb1670030000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 461,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1955,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2498,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 3,
    "guards_detected": [
        {
            "pc": 1126,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1424,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 2073,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 2290,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ]
}