Analysis Run

019b477e-b6a6-708c-bcbb-71c1561d3735

complete

Chain ID

1

Address

0xfce18b7ead7a1c68c3e04de2ab4bf52e964a45ad

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Verified

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
23147	artifact.fetch	complete	1 / 3	3 months ago
23148	tool.cast_disasm	complete	1 / 3	3 months ago
89889	analysis.bundle	complete	1 / 3	1 week ago
89890	capability.graph	complete	1 / 3	1 week ago
89891	detector.run	complete	1 / 3	1 week ago
89892	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

4

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

3

EXT*/BALANCE

3

Total opcodes

1471

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x00cf
0000000c: JUMPI
0000000d: PUSH4 0xffffffff
00000012: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
00000030: PUSH1 0x00
00000032: CALLDATALOAD
00000033: DIV
00000034: AND
00000035: PUSH4 0x2039d9fd
0000003a: DUP2
0000003b: EQ
0000003c: PUSH2 0x00d1
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x22d40b13
00000046: EQ
00000047: PUSH2 0x0109
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x41228803
00000051: EQ
00000052: PUSH2 0x013a
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x4e7343ea
0000005c: EQ
0000005d: PUSH2 0x0163
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x648a0c91
00000067: EQ
00000068: PUSH2 0x0192
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x69820a80
00000072: EQ
00000073: PUSH2 0x01b3
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0x70a08231
0000007d: EQ
0000007e: PUSH2 0x01da
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0x98ea5fca
00000088: EQ
00000089: PUSH2 0x01fb
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xbc517131
00000093: EQ
00000094: PUSH2 0x0203
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0xc0668179
0000009e: EQ
0000009f: PUSH2 0x0218
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xd767ee4d
000000a9: EQ
000000aa: PUSH2 0x022d
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0xe7663079
000000b4: EQ
000000b5: PUSH2 0x0245
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0xf3fef3a3
000000bf: EQ
000000c0: PUSH2 0x025a
000000c3: JUMPI
000000c4: DUP1
000000c5: PUSH4 0xf6b1b18b
000000ca: EQ
000000cb: PUSH2 0x027e
000000ce: JUMPI
000000cf: JUMPDEST
000000d0: STOP
000000d1: JUMPDEST
000000d2: CALLVALUE
000000d3: DUP1
000000d4: ISZERO
000000d5: PUSH2 0x00dd
000000d8: JUMPI
000000d9: PUSH1 0x00
000000db: DUP1
000000dc: REVERT
000000dd: JUMPDEST
000000de: POP
000000df: PUSH2 0x00f5
000000e2: PUSH1 0x01
000000e4: PUSH1 0xa0
000000e6: PUSH1 0x02
000000e8: EXP
000000e9: SUB
000000ea: PUSH1 0x04
000000ec: CALLDATALOAD
000000ed: AND
000000ee: PUSH1 0x24
000000f0: CALLDATALOAD
000000f1: PUSH2 0x029f
000000f4: JUMP
000000f5: JUMPDEST
000000f6: PUSH1 0x40
000000f8: DUP1
000000f9: MLOAD
000000fa: SWAP2
000000fb: ISZERO
000000fc: ISZERO
000000fd: DUP3
000000fe: MSTORE
000000ff: MLOAD
00000100: SWAP1
00000101: DUP2
00000102: SWAP1
00000103: SUB
00000104: PUSH1 0x20
00000106: ADD
00000107: SWAP1
00000108: RETURN
00000109: JUMPDEST
0000010a: CALLVALUE
0000010b: DUP1
0000010c: ISZERO
0000010d: PUSH2 0x0115
00000110: JUMPI
00000111: PUSH1 0x00
00000113: DUP1
00000114: REVERT
00000115: JUMPDEST
00000116: POP
00000117: PUSH2 0x011e
0000011a: PUSH2 0x049d
0000011d: JUMP
0000011e: JUMPDEST
0000011f: PUSH1 0x40
00000121: DUP1
00000122: MLOAD
00000123: PUSH1 0x01
00000125: PUSH1 0xa0
00000127: PUSH1 0x02
00000129: EXP
0000012a: SUB
0000012b: SWAP1
0000012c: SWAP3
0000012d: AND
0000012e: DUP3
0000012f: MSTORE
00000130: MLOAD
00000131: SWAP1
00000132: DUP2
00000133: SWAP1
00000134: SUB
00000135: PUSH1 0x20
00000137: ADD
00000138: SWAP1
00000139: RETURN
0000013a: JUMPDEST
0000013b: CALLVALUE
0000013c: DUP1
0000013d: ISZERO
0000013e: PUSH2 0x0146
00000141: JUMPI
00000142: PUSH1 0x00
00000144: DUP1
00000145: REVERT
00000146: JUMPDEST
00000147: POP
00000148: PUSH2 0x00f5
0000014b: PUSH1 0x01
0000014d: PUSH1 0xa0
0000014f: PUSH1 0x02
00000151: EXP
00000152: SUB
00000153: PUSH1 0x04
00000155: CALLDATALOAD
00000156: AND
00000157: PUSH1 0x24
00000159: CALLDATALOAD
0000015a: PUSH1 0x44
0000015c: CALLDATALOAD
0000015d: ISZERO
0000015e: ISZERO
0000015f: PUSH2 0x04ac
00000162: JUMP
00000163: JUMPDEST
00000164: CALLVALUE
00000165: DUP1
00000166: ISZERO
00000167: PUSH2 0x016f
0000016a: JUMPI
0000016b: PUSH1 0x00
0000016d: DUP1
0000016e: REVERT
0000016f: JUMPDEST
00000170: POP
00000171: PUSH2 0x00f5
00000174: PUSH1 0x01
00000176: PUSH1 0xa0
00000178: PUSH1 0x02
0000017a: EXP
0000017b: SUB
0000017c: PUSH1 0x04
0000017e: CALLDATALOAD
0000017f: DUP2
00000180: AND
00000181: SWAP1
00000182: PUSH1 0x24
00000184: CALLDATALOAD
00000185: SWAP1
00000186: PUSH1 0x44
00000188: CALLDATALOAD
00000189: SWAP1
0000018a: PUSH1 0x64
0000018c: CALLDATALOAD
0000018d: AND
0000018e: PUSH2 0x04ac
00000191: JUMP
00000192: JUMPDEST
00000193: CALLVALUE
00000194: DUP1
00000195: ISZERO
00000196: PUSH2 0x019e
00000199: JUMPI
0000019a: PUSH1 0x00
0000019c: DUP1
0000019d: REVERT
0000019e: JUMPDEST
0000019f: POP
000001a0: PUSH2 0x00f5
000001a3: PUSH1 0x01
000001a5: PUSH1 0xa0
000001a7: PUSH1 0x02
000001a9: EXP
000001aa: SUB
000001ab: PUSH1 0x04
000001ad: CALLDATALOAD
000001ae: AND
000001af: PUSH2 0x04c6
000001b2: JUMP
000001b3: JUMPDEST
000001b4: CALLVALUE
000001b5: DUP1
000001b6: ISZERO
000001b7: PUSH2 0x01bf
000001ba: JUMPI
000001bb: PUSH1 0x00
000001bd: DUP1
000001be: REVERT
000001bf: JUMPDEST
000001c0: POP
000001c1: PUSH2 0x01c8
000001c4: PUSH2 0x0574
000001c7: JUMP
000001c8: JUMPDEST
000001c9: PUSH1 0x40
000001cb: DUP1
000001cc: MLOAD
000001cd: SWAP2
000001ce: DUP3
000001cf: MSTORE
000001d0: MLOAD
000001d1: SWAP1
000001d2: DUP2
000001d3: SWAP1
000001d4: SUB
000001d5: PUSH1 0x20
000001d7: ADD
000001d8: SWAP1
000001d9: RETURN
000001da: JUMPDEST
000001db: CALLVALUE
000001dc: DUP1
000001dd: ISZERO
000001de: PUSH2 0x01e6
000001e1: JUMPI
000001e2: PUSH1 0x00
000001e4: DUP1
000001e5: REVERT
000001e6: JUMPDEST
000001e7: POP
000001e8: PUSH2 0x01c8
000001eb: PUSH1 0x01
000001ed: PUSH1 0xa0
000001ef: PUSH1 0x02
000001f1: EXP
000001f2: SUB
000001f3: PUSH1 0x04
000001f5: CALLDATALOAD
000001f6: AND
000001f7: PUSH2 0x057a
000001fa: JUMP
000001fb: JUMPDEST
000001fc: PUSH2 0x00cf
000001ff: PUSH2 0x0628
00000202: JUMP
00000203: JUMPDEST
00000204: CALLVALUE
00000205: DUP1
00000206: ISZERO
00000207: PUSH2 0x020f
0000020a: JUMPI
0000020b: PUSH1 0x00
0000020d: DUP1
0000020e: REVERT
0000020f: JUMPDEST
00000210: POP
00000211: PUSH2 0x01c8
00000214: PUSH2 0x077f
00000217: JUMP
00000218: JUMPDEST
00000219: CALLVALUE
0000021a: DUP1
0000021b: ISZERO
0000021c: PUSH2 0x0224
0000021f: JUMPI
00000220: PUSH1 0x00
00000222: DUP1
00000223: REVERT
00000224: JUMPDEST
00000225: POP
00000226: PUSH2 0x011e
00000229: PUSH2 0x0784
0000022c: JUMP
0000022d: JUMPDEST
0000022e: CALLVALUE
0000022f: DUP1
00000230: ISZERO
00000231: PUSH2 0x0239
00000234: JUMPI
00000235: PUSH1 0x00
00000237: DUP1
00000238: REVERT
00000239: JUMPDEST
0000023a: POP
0000023b: PUSH2 0x00f5
0000023e: PUSH1 0x04
00000240: CALLDATALOAD
00000241: PUSH2 0x0793
00000244: JUMP
00000245: JUMPDEST
00000246: CALLVALUE
00000247: DUP1
00000248: ISZERO
00000249: PUSH2 0x0251
0000024c: JUMPI
0000024d: PUSH1 0x00
0000024f: DUP1
00000250: REVERT
00000251: JUMPDEST
00000252: POP
00000253: PUSH2 0x011e
00000256: PUSH2 0x0951
00000259: JUMP
0000025a: JUMPDEST
0000025b: CALLVALUE
0000025c: DUP1
0000025d: ISZERO
0000025e: PUSH2 0x0266
00000261: JUMPI
00000262: PUSH1 0x00
00000264: DUP1
00000265: REVERT
00000266: JUMPDEST
00000267: POP
00000268: PUSH2 0x00f5
0000026b: PUSH1 0x01
0000026d: PUSH1 0xa0
0000026f: PUSH1 0x02
00000271: EXP
00000272: SUB
00000273: PUSH1 0x04
00000275: CALLDATALOAD
00000276: AND
00000277: PUSH1 0x24
00000279: CALLDATALOAD
0000027a: PUSH2 0x0960
0000027d: JUMP
0000027e: JUMPDEST
0000027f: CALLVALUE
00000280: DUP1
00000281: ISZERO
00000282: PUSH2 0x028a
00000285: JUMPI
00000286: PUSH1 0x00
00000288: DUP1
00000289: REVERT
0000028a: JUMPDEST
0000028b: POP
0000028c: PUSH2 0x01c8
0000028f: PUSH1 0x01
00000291: PUSH1 0xa0
00000293: PUSH1 0x02
00000295: EXP
00000296: SUB
00000297: PUSH1 0x04
00000299: CALLDATALOAD
0000029a: AND
0000029b: PUSH2 0x09f0
0000029e: JUMP
0000029f: JUMPDEST
000002a0: PUSH1 0x00
000002a2: PUSH1 0x01
000002a4: PUSH1 0xa0
000002a6: PUSH1 0x02
000002a8: EXP
000002a9: SUB
000002aa: DUP4
000002ab: AND
000002ac: ISZERO
000002ad: ISZERO
000002ae: PUSH2 0x0343
000002b1: JUMPI
000002b2: PUSH2 0x033c
000002b5: PUSH1 0x80
000002b7: PUSH1 0x40
000002b9: MLOAD
000002ba: SWAP1
000002bb: DUP2
000002bc: ADD
000002bd: PUSH1 0x40
000002bf: MSTORE
000002c0: DUP1
000002c1: PUSH1 0x41
000002c3: DUP2
000002c4: MSTORE
000002c5: PUSH1 0x20
000002c7: ADD
000002c8: PUSH32 0x43616e6e6f74206465706f73697420657468657220766961206465706f736974
000002e9: DUP2
000002ea: MSTORE
000002eb: PUSH1 0x20
000002ed: ADD
000002ee: PUSH32 0x45524332302c2057616c6c65742e6465706f7369744552433230546f6b656e28
0000030f: DUP2
00000310: MSTORE
00000311: PUSH1 0x20
00000313: ADD
00000314: PUSH32 0x2900000000000000000000000000000000000000000000000000000000000000
00000335: DUP2
00000336: MSTORE
00000337: POP
00000338: PUSH2 0x0a02
0000033b: JUMP
0000033c: JUMPDEST
0000033d: SWAP1
0000033e: POP
0000033f: PUSH2 0x0497
00000342: JUMP
00000343: JUMPDEST
00000344: PUSH1 0x03
00000346: SLOAD
00000347: PUSH1 0x40
00000349: DUP1
0000034a: MLOAD
0000034b: PUSH1 0x01
0000034d: PUSH1 0xa0
0000034f: PUSH1 0x02
00000351: EXP
00000352: SUB
00000353: DUP7
00000354: DUP2
00000355: AND
00000356: PUSH1 0x24
00000358: DUP4
00000359: ADD
0000035a: MSTORE
0000035b: PUSH1 0x44
0000035d: DUP1
0000035e: DUP4
0000035f: ADD
00000360: DUP8
00000361: SWAP1
00000362: MSTORE
00000363: DUP4
00000364: MLOAD
00000365: DUP1
00000366: DUP5
00000367: SUB
00000368: SWAP1
00000369: SWAP2
0000036a: ADD
0000036b: DUP2
0000036c: MSTORE
0000036d: PUSH1 0x64
0000036f: SWAP1
00000370: SWAP3
00000371: ADD
00000372: DUP4
00000373: MSTORE
00000374: PUSH1 0x20
00000376: DUP3
00000377: ADD
00000378: DUP1
00000379: MLOAD
0000037a: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
00000397: AND
00000398: PUSH32 0x47e7ef2400000000000000000000000000000000000000000000000000000000
000003b9: OR
000003ba: DUP2
000003bb: MSTORE
000003bc: SWAP3
000003bd: MLOAD
000003be: DUP3
000003bf: MLOAD
000003c0: SWAP2
000003c1: SWAP1
000003c2: SWAP5
000003c3: AND
000003c4: SWAP4
000003c5: SWAP2
000003c6: SWAP3
000003c7: DUP3
000003c8: SWAP2
000003c9: DUP1
000003ca: DUP4
000003cb: DUP4
000003cc: PUSH1 0x00
000003ce: JUMPDEST
000003cf: DUP4
000003d0: DUP2
000003d1: LT
000003d2: ISZERO
000003d3: PUSH2 0x03e6
000003d6: JUMPI
000003d7: DUP2
000003d8: DUP2
000003d9: ADD
000003da: MLOAD
000003db: DUP4
000003dc: DUP3
000003dd: ADD
000003de: MSTORE
000003df: PUSH1 0x20
000003e1: ADD
000003e2: PUSH2 0x03ce
000003e5: JUMP
000003e6: JUMPDEST
000003e7: POP
000003e8: POP
000003e9: POP
000003ea: POP
000003eb: SWAP1
000003ec: POP
000003ed: SWAP1
000003ee: DUP2
000003ef: ADD
000003f0: SWAP1
000003f1: PUSH1 0x1f
000003f3: AND
000003f4: DUP1
000003f5: ISZERO
000003f6: PUSH2 0x0413
000003f9: JUMPI
000003fa: DUP1
000003fb: DUP3
000003fc: SUB
000003fd: DUP1
000003fe: MLOAD
000003ff: PUSH1 0x01
00000401: DUP4
00000402: PUSH1 0x20
00000404: SUB
00000405: PUSH2 0x0100
00000408: EXP
00000409: SUB
0000040a: NOT
0000040b: AND
0000040c: DUP2
0000040d: MSTORE
0000040e: PUSH1 0x20
00000410: ADD
00000411: SWAP2
00000412: POP
00000413: JUMPDEST
00000414: POP
00000415: SWAP2
00000416: POP
00000417: POP
00000418: PUSH1 0x00
0000041a: PUSH1 0x40
0000041c: MLOAD
0000041d: DUP1
0000041e: DUP4
0000041f: SUB
00000420: DUP2
00000421: DUP6
00000422: GAS
00000423: DELEGATECALL
00000424: SWAP2
00000425: POP
00000426: POP
00000427: ISZERO
00000428: ISZERO
00000429: PUSH2 0x0493
0000042c: JUMPI
0000042d: PUSH1 0x40
0000042f: DUP1
00000430: MLOAD
00000431: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000452: DUP2
00000453: MSTORE
00000454: PUSH1 0x20
00000456: PUSH1 0x04
00000458: DUP3
00000459: ADD
0000045a: MSTORE
0000045b: PUSH1 0x1a
0000045d: PUSH1 0x24
0000045f: DUP3
00000460: ADD
00000461: MSTORE
00000462: PUSH32 0x6465706f7369744552433230546f6b656e2829206661696c6564000000000000
00000483: PUSH1 0x44
00000485: DUP3
00000486: ADD
00000487: MSTORE
00000488: SWAP1
00000489: MLOAD
0000048a: SWAP1
0000048b: DUP2
0000048c: SWAP1
0000048d: SUB
0000048e: PUSH1 0x64
00000490: ADD
00000491: SWAP1
00000492: REVERT
00000493: JUMPDEST
00000494: POP
00000495: PUSH1 0x01
00000497: JUMPDEST
00000498: SWAP3
00000499: SWAP2
0000049a: POP
0000049b: POP
0000049c: JUMP
0000049d: JUMPDEST
0000049e: PUSH1 0x03
000004a0: SLOAD
000004a1: PUSH1 0x01
000004a3: PUSH1 0xa0
000004a5: PUSH1 0x02
000004a7: EXP
000004a8: SUB
000004a9: AND
000004aa: DUP2
000004ab: JUMP
000004ac: JUMPDEST
000004ad: PUSH1 0x00
000004af: CALLDATASIZE
000004b0: PUSH1 0x00
000004b2: PUSH1 0x40
000004b4: CALLDATACOPY
000004b5: PUSH1 0x20
000004b7: PUSH1 0x00
000004b9: CALLDATASIZE
000004ba: PUSH1 0x40
000004bc: PUSH1 0x03
000004be: SLOAD
000004bf: GAS
000004c0: DELEGATECALL
000004c1: PUSH1 0x20
000004c3: PUSH1 0x00
000004c5: RETURN
000004c6: JUMPDEST
000004c7: PUSH1 0x00
000004c9: DUP1
000004ca: SLOAD
000004cb: PUSH1 0x01
000004cd: PUSH1 0xa0
000004cf: PUSH1 0x02
000004d1: EXP
000004d2: SUB
000004d3: AND
000004d4: CALLER
000004d5: EQ
000004d6: PUSH2 0x0545
000004d9: JUMPI
000004da: PUSH2 0x053e
000004dd: PUSH1 0x60
000004df: PUSH1 0x40
000004e1: MLOAD
000004e2: SWAP1
000004e3: DUP2
000004e4: ADD
000004e5: PUSH1 0x40
000004e7: MSTORE
000004e8: DUP1
000004e9: PUSH1 0x2d
000004eb: DUP2
000004ec: MSTORE
000004ed: PUSH1 0x20
000004ef: ADD
000004f0: PUSH32 0x6d73672e73656e64657220213d206f776e65725f2c2057616c6c65742e757064
00000511: DUP2
00000512: MSTORE
00000513: PUSH1 0x20
00000515: ADD
00000516: PUSH32 0x61746545786368616e6765282900000000000000000000000000000000000000
00000537: DUP2
00000538: MSTORE
00000539: POP
0000053a: PUSH2 0x0a02
0000053d: JUMP
0000053e: JUMPDEST
0000053f: SWAP1
00000540: POP
00000541: PUSH2 0x056f
00000544: JUMP
00000545: JUMPDEST
00000546: POP
00000547: PUSH1 0x01
00000549: DUP1
0000054a: SLOAD
0000054b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000560: NOT
00000561: AND
00000562: PUSH1 0x01
00000564: PUSH1 0xa0
00000566: PUSH1 0x02
00000568: EXP
00000569: SUB
0000056a: DUP4
0000056b: AND
0000056c: OR
0000056d: DUP2
0000056e: SSTORE
0000056f: JUMPDEST
00000570: SWAP2
00000571: SWAP1
00000572: POP
00000573: JUMP
00000574: JUMPDEST
00000575: PUSH1 0x04
00000577: SLOAD
00000578: DUP2
00000579: JUMP
0000057a: JUMPDEST
0000057b: PUSH1 0x00
0000057d: PUSH1 0x01
0000057f: PUSH1 0xa0
00000581: PUSH1 0x02
00000583: EXP
00000584: SUB
00000585: DUP3
00000586: AND
00000587: ISZERO
00000588: ISZERO
00000589: PUSH2 0x0594
0000058c: JUMPI
0000058d: POP
0000058e: ADDRESS
0000058f: BALANCE
00000590: PUSH2 0x056f
00000593: JUMP
00000594: JUMPDEST
00000595: PUSH1 0x40
00000597: DUP1
00000598: MLOAD
00000599: PUSH32 0x70a0823100000000000000000000000000000000000000000000000000000000
000005ba: DUP2
000005bb: MSTORE
000005bc: ADDRESS
000005bd: PUSH1 0x04
000005bf: DUP3
000005c0: ADD
000005c1: MSTORE
000005c2: SWAP1
000005c3: MLOAD
000005c4: PUSH1 0x01
000005c6: PUSH1 0xa0
000005c8: PUSH1 0x02
000005ca: EXP
000005cb: SUB
000005cc: DUP5
000005cd: AND
000005ce: SWAP2
000005cf: PUSH4 0x70a08231
000005d4: SWAP2
000005d5: PUSH1 0x24
000005d7: DUP1
000005d8: DUP4
000005d9: ADD
000005da: SWAP3
000005db: PUSH1 0x20
000005dd: SWAP3
000005de: SWAP2
000005df: SWAP1
000005e0: DUP3
000005e1: SWAP1
000005e2: SUB
000005e3: ADD
000005e4: DUP2
000005e5: PUSH1 0x00
000005e7: DUP8
000005e8: DUP1
000005e9: EXTCODESIZE
000005ea: ISZERO
000005eb: DUP1
000005ec: ISZERO
000005ed: PUSH2 0x05f5
000005f0: JUMPI
000005f1: PUSH1 0x00
000005f3: DUP1
000005f4: REVERT
000005f5: JUMPDEST
000005f6: POP
000005f7: GAS
000005f8: CALL
000005f9: ISZERO
000005fa: DUP1
000005fb: ISZERO
000005fc: PUSH2 0x0609
000005ff: JUMPI
00000600: RETURNDATASIZE
00000601: PUSH1 0x00
00000603: DUP1
00000604: RETURNDATACOPY
00000605: RETURNDATASIZE
00000606: PUSH1 0x00
00000608: REVERT
00000609: JUMPDEST
0000060a: POP
0000060b: POP
0000060c: POP
0000060d: POP
0000060e: PUSH1 0x40
00000610: MLOAD
00000611: RETURNDATASIZE
00000612: PUSH1 0x20
00000614: DUP2
00000615: LT
00000616: ISZERO
00000617: PUSH2 0x061f
0000061a: JUMPI
0000061b: PUSH1 0x00
0000061d: DUP1
0000061e: REVERT
0000061f: JUMPDEST
00000620: POP
00000621: MLOAD
00000622: SWAP1
00000623: POP
00000624: PUSH2 0x056f
00000627: JUMP
00000628: JUMPDEST
00000629: PUSH1 0x03
0000062b: SLOAD
0000062c: PUSH1 0x40
0000062e: DUP1
0000062f: MLOAD
00000630: PUSH1 0x00
00000632: PUSH1 0x24
00000634: DUP3
00000635: ADD
00000636: DUP2
00000637: SWAP1
00000638: MSTORE
00000639: CALLVALUE
0000063a: PUSH1 0x44
0000063c: DUP1
0000063d: DUP5
0000063e: ADD
0000063f: SWAP2
00000640: SWAP1
00000641: SWAP2
00000642: MSTORE
00000643: DUP4
00000644: MLOAD
00000645: DUP1
00000646: DUP5
00000647: SUB
00000648: SWAP1
00000649: SWAP2
0000064a: ADD
0000064b: DUP2
0000064c: MSTORE
0000064d: PUSH1 0x64
0000064f: SWAP1
00000650: SWAP3
00000651: ADD
00000652: DUP4
00000653: MSTORE
00000654: PUSH1 0x20
00000656: DUP3
00000657: ADD
00000658: DUP1
00000659: MLOAD
0000065a: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
00000677: AND
00000678: PUSH32 0x47e7ef2400000000000000000000000000000000000000000000000000000000
00000699: OR
0000069a: DUP2
0000069b: MSTORE
0000069c: SWAP3
0000069d: MLOAD
0000069e: DUP3
0000069f: MLOAD
000006a0: PUSH1 0x01
000006a2: PUSH1 0xa0
000006a4: PUSH1 0x02
000006a6: EXP
000006a7: SUB
000006a8: SWAP1
000006a9: SWAP6
000006aa: AND
000006ab: SWAP5
000006ac: SWAP3
000006ad: SWAP4
000006ae: SWAP1
000006af: SWAP3
000006b0: DUP4
000006b1: SWAP3
000006b2: DUP2
000006b3: SWAP1
000006b4: DUP5
000006b5: SWAP1
000006b6: DUP5
000006b7: SWAP1
000006b8: JUMPDEST
000006b9: DUP4
000006ba: DUP2
000006bb: LT
000006bc: ISZERO
000006bd: PUSH2 0x06d0
000006c0: JUMPI
000006c1: DUP2
000006c2: DUP2
000006c3: ADD
000006c4: MLOAD
000006c5: DUP4
000006c6: DUP3
000006c7: ADD
000006c8: MSTORE
000006c9: PUSH1 0x20
000006cb: ADD
000006cc: PUSH2 0x06b8
000006cf: JUMP
000006d0: JUMPDEST
000006d1: POP
000006d2: POP
000006d3: POP
000006d4: POP
000006d5: SWAP1
000006d6: POP
000006d7: SWAP1
000006d8: DUP2
000006d9: ADD
000006da: SWAP1
000006db: PUSH1 0x1f
000006dd: AND
000006de: DUP1
000006df: ISZERO
000006e0: PUSH2 0x06fd
000006e3: JUMPI
000006e4: DUP1
000006e5: DUP3
000006e6: SUB
000006e7: DUP1
000006e8: MLOAD
000006e9: PUSH1 0x01
000006eb: DUP4
000006ec: PUSH1 0x20
000006ee: SUB
000006ef: PUSH2 0x0100
000006f2: EXP
000006f3: SUB
000006f4: NOT
000006f5: AND
000006f6: DUP2
000006f7: MSTORE
000006f8: PUSH1 0x20
000006fa: ADD
000006fb: SWAP2
000006fc: POP
000006fd: JUMPDEST
000006fe: POP
000006ff: SWAP2
00000700: POP
00000701: POP
00000702: PUSH1 0x00
00000704: PUSH1 0x40
00000706: MLOAD
00000707: DUP1
00000708: DUP4
00000709: SUB
0000070a: DUP2
0000070b: DUP6
0000070c: GAS
0000070d: DELEGATECALL
0000070e: SWAP2
0000070f: POP
00000710: POP
00000711: ISZERO
00000712: ISZERO
00000713: PUSH2 0x077d
00000716: JUMPI
00000717: PUSH1 0x40
00000719: DUP1
0000071a: MLOAD
0000071b: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000073c: DUP2
0000073d: MSTORE
0000073e: PUSH1 0x20
00000740: PUSH1 0x04
00000742: DUP3
00000743: ADD
00000744: MSTORE
00000745: PUSH1 0x15
00000747: PUSH1 0x24
00000749: DUP3
0000074a: ADD
0000074b: MSTORE
0000074c: PUSH32 0x6465706f73697445746865722829206661696c65640000000000000000000000
0000076d: PUSH1 0x44
0000076f: DUP3
00000770: ADD
00000771: MSTORE
00000772: SWAP1
00000773: MLOAD
00000774: SWAP1
00000775: DUP2
00000776: SWAP1
00000777: SUB
00000778: PUSH1 0x64
0000077a: ADD
0000077b: SWAP1
0000077c: REVERT
0000077d: JUMPDEST
0000077e: JUMP
0000077f: JUMPDEST
00000780: PUSH1 0x03
00000782: SWAP1
00000783: JUMP
00000784: JUMPDEST
00000785: PUSH1 0x01
00000787: SLOAD
00000788: PUSH1 0x01
0000078a: PUSH1 0xa0
0000078c: PUSH1 0x02
0000078e: EXP
0000078f: SUB
00000790: AND
00000791: DUP2
00000792: JUMP
00000793: JUMPDEST
00000794: PUSH1 0x00
00000796: DUP1
00000797: SLOAD
00000798: DUP2
00000799: SWAP1
0000079a: PUSH1 0x01
0000079c: PUSH1 0xa0
0000079e: PUSH1 0x02
000007a0: EXP
000007a1: SUB
000007a2: AND
000007a3: CALLER
000007a4: EQ
000007a5: PUSH2 0x0814
000007a8: JUMPI
000007a9: PUSH2 0x080d
000007ac: PUSH1 0x60
000007ae: PUSH1 0x40
000007b0: MLOAD
000007b1: SWAP1
000007b2: DUP2
000007b3: ADD
000007b4: PUSH1 0x40
000007b6: MSTORE
000007b7: DUP1
000007b8: PUSH1 0x2a
000007ba: DUP2
000007bb: MSTORE
000007bc: PUSH1 0x20
000007be: ADD
000007bf: PUSH32 0x6d73672e73656e64657220213d206f776e65725f2c2057616c6c65742e757064
000007e0: DUP2
000007e1: MSTORE
000007e2: PUSH1 0x20
000007e4: ADD
000007e5: PUSH32 0x6174654c6f676963282900000000000000000000000000000000000000000000
00000806: DUP2
00000807: MSTORE
00000808: POP
00000809: PUSH2 0x0a02
0000080c: JUMP
0000080d: JUMPDEST
0000080e: SWAP2
0000080f: POP
00000810: PUSH2 0x094b
00000813: JUMP
00000814: JUMPDEST
00000815: PUSH1 0x05
00000817: SLOAD
00000818: PUSH1 0x40
0000081a: DUP1
0000081b: MLOAD
0000081c: PUSH32 0xd526d33200000000000000000000000000000000000000000000000000000000
0000083d: DUP2
0000083e: MSTORE
0000083f: PUSH1 0x04
00000841: DUP2
00000842: ADD
00000843: DUP7
00000844: SWAP1
00000845: MSTORE
00000846: SWAP1
00000847: MLOAD
00000848: PUSH1 0x01
0000084a: PUSH1 0xa0
0000084c: PUSH1 0x02
0000084e: EXP
0000084f: SUB
00000850: SWAP1
00000851: SWAP3
00000852: AND
00000853: SWAP2
00000854: PUSH4 0xd526d332
00000859: SWAP2
0000085a: PUSH1 0x24
0000085c: DUP1
0000085d: DUP3
0000085e: ADD
0000085f: SWAP3
00000860: PUSH1 0x20
00000862: SWAP3
00000863: SWAP1
00000864: SWAP2
00000865: SWAP1
00000866: DUP3
00000867: SWAP1
00000868: SUB
00000869: ADD
0000086a: DUP2
0000086b: PUSH1 0x00
0000086d: DUP8
0000086e: DUP1
0000086f: EXTCODESIZE
00000870: ISZERO
00000871: DUP1
00000872: ISZERO
00000873: PUSH2 0x087b
00000876: JUMPI
00000877: PUSH1 0x00
00000879: DUP1
0000087a: REVERT
0000087b: JUMPDEST
0000087c: POP
0000087d: GAS
0000087e: CALL
0000087f: ISZERO
00000880: DUP1
00000881: ISZERO
00000882: PUSH2 0x088f
00000885: JUMPI
00000886: RETURNDATASIZE
00000887: PUSH1 0x00
00000889: DUP1
0000088a: RETURNDATACOPY
0000088b: RETURNDATASIZE
0000088c: PUSH1 0x00
0000088e: REVERT
0000088f: JUMPDEST
00000890: POP
00000891: POP
00000892: POP
00000893: POP
00000894: PUSH1 0x40
00000896: MLOAD
00000897: RETURNDATASIZE
00000898: PUSH1 0x20
0000089a: DUP2
0000089b: LT
0000089c: ISZERO
0000089d: PUSH2 0x08a5
000008a0: JUMPI
000008a1: PUSH1 0x00
000008a3: DUP1
000008a4: REVERT
000008a5: JUMPDEST
000008a6: POP
000008a7: MLOAD
000008a8: SWAP1
000008a9: POP
000008aa: PUSH1 0x01
000008ac: PUSH1 0xa0
000008ae: PUSH1 0x02
000008b0: EXP
000008b1: SUB
000008b2: DUP2
000008b3: AND
000008b4: ISZERO
000008b5: ISZERO
000008b6: PUSH2 0x091e
000008b9: JUMPI
000008ba: PUSH2 0x080d
000008bd: PUSH1 0x60
000008bf: PUSH1 0x40
000008c1: MLOAD
000008c2: SWAP1
000008c3: DUP2
000008c4: ADD
000008c5: PUSH1 0x40
000008c7: MSTORE
000008c8: DUP1
000008c9: PUSH1 0x25
000008cb: DUP2
000008cc: MSTORE
000008cd: PUSH1 0x20
000008cf: ADD
000008d0: PUSH32 0x496e76616c69642076657273696f6e2c2057616c6c65742e7570646174654c6f
000008f1: DUP2
000008f2: MSTORE
000008f3: PUSH1 0x20
000008f5: ADD
000008f6: PUSH32 0x6769632829000000000000000000000000000000000000000000000000000000
00000917: DUP2
00000918: MSTORE
00000919: POP
0000091a: PUSH2 0x0a02
0000091d: JUMP
0000091e: JUMPDEST
0000091f: PUSH1 0x03
00000921: DUP1
00000922: SLOAD
00000923: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000938: NOT
00000939: AND
0000093a: PUSH1 0x01
0000093c: PUSH1 0xa0
0000093e: PUSH1 0x02
00000940: EXP
00000941: SUB
00000942: DUP4
00000943: AND
00000944: OR
00000945: SWAP1
00000946: SSTORE
00000947: PUSH1 0x01
00000949: SWAP2
0000094a: POP
0000094b: JUMPDEST
0000094c: POP
0000094d: SWAP2
0000094e: SWAP1
0000094f: POP
00000950: JUMP
00000951: JUMPDEST
00000952: PUSH1 0x00
00000954: SLOAD
00000955: PUSH1 0x01
00000957: PUSH1 0xa0
00000959: PUSH1 0x02
0000095b: EXP
0000095c: SUB
0000095d: AND
0000095e: DUP2
0000095f: JUMP
00000960: JUMPDEST
00000961: PUSH1 0x00
00000963: DUP1
00000964: SLOAD
00000965: PUSH1 0x01
00000967: PUSH1 0xa0
00000969: PUSH1 0x02
0000096b: EXP
0000096c: SUB
0000096d: AND
0000096e: CALLER
0000096f: EQ
00000970: PUSH2 0x09d8
00000973: JUMPI
00000974: PUSH2 0x033c
00000977: PUSH1 0x60
00000979: PUSH1 0x40
0000097b: MLOAD
0000097c: SWAP1
0000097d: DUP2
0000097e: ADD
0000097f: PUSH1 0x40
00000981: MSTORE
00000982: DUP1
00000983: PUSH1 0x26
00000985: DUP2
00000986: MSTORE
00000987: PUSH1 0x20
00000989: ADD
0000098a: PUSH32 0x6d73672e73656e64657220213d206f776e65722c2057616c6c65742e77697468
000009ab: DUP2
000009ac: MSTORE
000009ad: PUSH1 0x20
000009af: ADD
000009b0: PUSH32 0x6472617728290000000000000000000000000000000000000000000000000000
000009d1: DUP2
000009d2: MSTORE
000009d3: POP
000009d4: PUSH2 0x0a02
000009d7: JUMP
000009d8: JUMPDEST
000009d9: CALLDATASIZE
000009da: PUSH1 0x00
000009dc: PUSH1 0x40
000009de: CALLDATACOPY
000009df: PUSH1 0x20
000009e1: PUSH1 0x00
000009e3: CALLDATASIZE
000009e4: PUSH1 0x40
000009e6: PUSH1 0x03
000009e8: SLOAD
000009e9: GAS
000009ea: DELEGATECALL
000009eb: PUSH1 0x20
000009ed: PUSH1 0x00
000009ef: RETURN
000009f0: JUMPDEST
000009f1: PUSH1 0x02
000009f3: PUSH1 0x20
000009f5: MSTORE
000009f6: PUSH1 0x00
000009f8: SWAP1
000009f9: DUP2
000009fa: MSTORE
000009fb: PUSH1 0x40
000009fd: SWAP1
000009fe: KECCAK256
000009ff: SLOAD
00000a00: DUP2
00000a01: JUMP
00000a02: JUMPDEST
00000a03: PUSH1 0x00
00000a05: PUSH32 0x551303dd5f39cbfe6daba6b3e27754b8a7d72f519756a2cde2b92c2bbde159a7
00000a26: DUP3
00000a27: PUSH1 0x40
00000a29: MLOAD
00000a2a: DUP1
00000a2b: DUP1
00000a2c: PUSH1 0x20
00000a2e: ADD
00000a2f: DUP3
00000a30: DUP2
00000a31: SUB
00000a32: DUP3
00000a33: MSTORE
00000a34: DUP4
00000a35: DUP2
00000a36: DUP2
00000a37: MLOAD
00000a38: DUP2
00000a39: MSTORE
00000a3a: PUSH1 0x20
00000a3c: ADD
00000a3d: SWAP2
00000a3e: POP
00000a3f: DUP1
00000a40: MLOAD
00000a41: SWAP1
00000a42: PUSH1 0x20
00000a44: ADD
00000a45: SWAP1
00000a46: DUP1
00000a47: DUP4
00000a48: DUP4
00000a49: PUSH1 0x00
00000a4b: JUMPDEST
00000a4c: DUP4
00000a4d: DUP2
00000a4e: LT
00000a4f: ISZERO
00000a50: PUSH2 0x0a63
00000a53: JUMPI
00000a54: DUP2
00000a55: DUP2
00000a56: ADD
00000a57: MLOAD
00000a58: DUP4
00000a59: DUP3
00000a5a: ADD
00000a5b: MSTORE
00000a5c: PUSH1 0x20
00000a5e: ADD
00000a5f: PUSH2 0x0a4b
00000a62: JUMP
00000a63: JUMPDEST
00000a64: POP
00000a65: POP
00000a66: POP
00000a67: POP
00000a68: SWAP1
00000a69: POP
00000a6a: SWAP1
00000a6b: DUP2
00000a6c: ADD
00000a6d: SWAP1
00000a6e: PUSH1 0x1f
00000a70: AND
00000a71: DUP1
00000a72: ISZERO
00000a73: PUSH2 0x0a90
00000a76: JUMPI
00000a77: DUP1
00000a78: DUP3
00000a79: SUB
00000a7a: DUP1
00000a7b: MLOAD
00000a7c: PUSH1 0x01
00000a7e: DUP4
00000a7f: PUSH1 0x20
00000a81: SUB
00000a82: PUSH2 0x0100
00000a85: EXP
00000a86: SUB
00000a87: NOT
00000a88: AND
00000a89: DUP2
00000a8a: MSTORE
00000a8b: PUSH1 0x20
00000a8d: ADD
00000a8e: SWAP2
00000a8f: POP
00000a90: JUMPDEST
00000a91: POP
00000a92: SWAP3
00000a93: POP
00000a94: POP
00000a95: POP
00000a96: PUSH1 0x40
00000a98: MLOAD
00000a99: DUP1
00000a9a: SWAP2
00000a9b: SUB
00000a9c: SWAP1
00000a9d: LOG1
00000a9e: POP
00000a9f: PUSH1 0x00
00000aa1: SWAP2
00000aa2: SWAP1
00000aa3: POP
00000aa4: JUMP
00000aa5: STOP
00000aa6: LOG1
00000aa7: PUSH6 0x627a7a723058
00000aae: KECCAK256
00000aaf: UNKNOWN(0x4D)
00000ab0: UNKNOWN(0xDB)
00000ab1: XOR
00000ab2: TLOAD
00000ab3: UNKNOWN(0xD9)
00000ab4: DUP15
00000ab5: INVALID
00000ab6: SWAP4
00000ab7: UNKNOWN(0x0C)
00000ab8: STATICCALL
00000ab9: DUP14
00000aba: UNKNOWN(0xE5)
00000abb: UNKNOWN(0xCA)
00000abc: UNKNOWN(0xBB)
00000abd: GASLIMIT
00000abe: PUSH14 0xb5fab579527b769a5d5660a922e1
00000acd: CALLVALUE
00000ace: UNKNOWN(0xD2)
00000acf: STOP
00000ad0: UNKNOWN(0x29)

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0x511a140b7916d7839a664ddec36e08a209e411d2cd38e7f0205def98c9af8fd7 call_targets: 0x3b238ecb51b0929a6300e0450a684e7358b97c05 target_varies: no classification: constant_target validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "sink_reached", "attempts": 3, "trace_id": "0x511a140b7916d7839a664ddec36e08a209e411d2cd38e7f0205def98c9af8fd7", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x3b238ecb51b0929a6300e0450a684e7358b97c05" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x2039d9fd", "selector": "0x2039d9fd", "calldata_variants": [ "0x2039d9fd", "0x2039d9fd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x22d40b13", "selector": "0x22d40b13", "calldata_variants": [ "0x22d40b13", "0x22d40b130000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x41228803", "selector": "0x41228803", "calldata_variants": [ "0x41228803", "0x412288030000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4e7343ea", "selector": "0x4e7343ea", "calldata_variants": [ "0x4e7343ea", "0x4e7343ea0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x648a0c91", "selector": "0x648a0c91", "calldata_variants": [ "0x648a0c91", "0x648a0c910000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x69820a80", "selector": "0x69820a80", "calldata_variants": [ "0x69820a80", "0x69820a800000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x70a08231", "selector": "0x70a08231", "calldata_variants": [ "0x70a08231", "0x70a082310000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x98ea5fca", "selector": "0x98ea5fca", "calldata_variants": [ "0x98ea5fca", "0x98ea5fca0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1059, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1805, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 4, "untrusted_delegatecall_count": 2 }
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0xdd374db107868d387c9ffd3bcc3b39b0a7847a7298aa52b27e7bac31b5c24986 call_targets: 0xfce18b7ead7a1c68c3e04de2ab4bf52e964a45ad target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xdd374db107868d387c9ffd3bcc3b39b0a7847a7298aa52b27e7bac31b5c24986", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xfce18b7ead7a1c68c3e04de2ab4bf52e964a45ad" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x2039d9fd", "selector": "0x2039d9fd", "calldata_variants": [ "0x2039d9fd", "0x2039d9fd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x22d40b13", "selector": "0x22d40b13", "calldata_variants": [ "0x22d40b13", "0x22d40b130000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x41228803", "selector": "0x41228803", "calldata_variants": [ "0x41228803", "0x412288030000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4e7343ea", "selector": "0x4e7343ea", "calldata_variants": [ "0x4e7343ea", "0x4e7343ea0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x648a0c91", "selector": "0x648a0c91", "calldata_variants": [ "0x648a0c91", "0x648a0c910000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x69820a80", "selector": "0x69820a80", "calldata_variants": [ "0x69820a80", "0x69820a800000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x70a08231", "selector": "0x70a08231", "calldata_variants": [ "0x70a08231", "0x70a082310000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x98ea5fca", "selector": "0x98ea5fca", "calldata_variants": [ "0x98ea5fca", "0x98ea5fca0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1528, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 2174, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 2, "guards_detected": [], "untrusted_call_count": 2 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0xdd374db107868d387c9ffd3bcc3b39b0a7847a7298aa52b27e7bac31b5c24986 call_targets: 0xfce18b7ead7a1c68c3e04de2ab4bf52e964a45ad target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xdd374db107868d387c9ffd3bcc3b39b0a7847a7298aa52b27e7bac31b5c24986", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xfce18b7ead7a1c68c3e04de2ab4bf52e964a45ad" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x2039d9fd", "selector": "0x2039d9fd", "calldata_variants": [ "0x2039d9fd", "0x2039d9fd0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x22d40b13", "selector": "0x22d40b13", "calldata_variants": [ "0x22d40b13", "0x22d40b130000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x41228803", "selector": "0x41228803", "calldata_variants": [ "0x41228803", "0x412288030000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4e7343ea", "selector": "0x4e7343ea", "calldata_variants": [ "0x4e7343ea", "0x4e7343ea0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x648a0c91", "selector": "0x648a0c91", "calldata_variants": [ "0x648a0c91", "0x648a0c910000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x69820a80", "selector": "0x69820a80", "calldata_variants": [ "0x69820a80", "0x69820a800000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x70a08231", "selector": "0x70a08231", "calldata_variants": [ "0x70a08231", "0x70a082310000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x98ea5fca", "selector": "0x98ea5fca", "calldata_variants": [ "0x98ea5fca", "0x98ea5fca0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1528, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 2174, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 2, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

critical

upgradeability

detector

Untrusted DELEGATECALL target reachable

70

no

view

trace_id: 0x511a140b7916d7839a664ddec36e08a209e411d2cd38e7f0205def98c9af8fd7

call_targets: 0x3b238ecb51b0929a6300e0450a684e7358b97c05

target_varies: no

classification: constant_target

validation_json

{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 3,
    "trace_id": "0x511a140b7916d7839a664ddec36e08a209e411d2cd38e7f0205def98c9af8fd7",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x3b238ecb51b0929a6300e0450a684e7358b97c05"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2039d9fd",
            "selector": "0x2039d9fd",
            "calldata_variants": [
                "0x2039d9fd",
                "0x2039d9fd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x22d40b13",
            "selector": "0x22d40b13",
            "calldata_variants": [
                "0x22d40b13",
                "0x22d40b130000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41228803",
            "selector": "0x41228803",
            "calldata_variants": [
                "0x41228803",
                "0x412288030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4e7343ea",
            "selector": "0x4e7343ea",
            "calldata_variants": [
                "0x4e7343ea",
                "0x4e7343ea0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x648a0c91",
            "selector": "0x648a0c91",
            "calldata_variants": [
                "0x648a0c91",
                "0x648a0c910000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x69820a80",
            "selector": "0x69820a80",
            "calldata_variants": [
                "0x69820a80",
                "0x69820a800000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x98ea5fca",
            "selector": "0x98ea5fca",
            "calldata_variants": [
                "0x98ea5fca",
                "0x98ea5fca0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1059,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1805,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 4,
    "untrusted_delegatecall_count": 2
}

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0xdd374db107868d387c9ffd3bcc3b39b0a7847a7298aa52b27e7bac31b5c24986

call_targets: 0xfce18b7ead7a1c68c3e04de2ab4bf52e964a45ad

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xdd374db107868d387c9ffd3bcc3b39b0a7847a7298aa52b27e7bac31b5c24986",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xfce18b7ead7a1c68c3e04de2ab4bf52e964a45ad"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2039d9fd",
            "selector": "0x2039d9fd",
            "calldata_variants": [
                "0x2039d9fd",
                "0x2039d9fd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x22d40b13",
            "selector": "0x22d40b13",
            "calldata_variants": [
                "0x22d40b13",
                "0x22d40b130000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41228803",
            "selector": "0x41228803",
            "calldata_variants": [
                "0x41228803",
                "0x412288030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4e7343ea",
            "selector": "0x4e7343ea",
            "calldata_variants": [
                "0x4e7343ea",
                "0x4e7343ea0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x648a0c91",
            "selector": "0x648a0c91",
            "calldata_variants": [
                "0x648a0c91",
                "0x648a0c910000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x69820a80",
            "selector": "0x69820a80",
            "calldata_variants": [
                "0x69820a80",
                "0x69820a800000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x98ea5fca",
            "selector": "0x98ea5fca",
            "calldata_variants": [
                "0x98ea5fca",
                "0x98ea5fca0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1528,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2174,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}

high

other

detector

ETH value transfer possible

55

no

view

trace_id: 0xdd374db107868d387c9ffd3bcc3b39b0a7847a7298aa52b27e7bac31b5c24986

call_targets: 0xfce18b7ead7a1c68c3e04de2ab4bf52e964a45ad

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xdd374db107868d387c9ffd3bcc3b39b0a7847a7298aa52b27e7bac31b5c24986",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xfce18b7ead7a1c68c3e04de2ab4bf52e964a45ad"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x2039d9fd",
            "selector": "0x2039d9fd",
            "calldata_variants": [
                "0x2039d9fd",
                "0x2039d9fd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x22d40b13",
            "selector": "0x22d40b13",
            "calldata_variants": [
                "0x22d40b13",
                "0x22d40b130000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x41228803",
            "selector": "0x41228803",
            "calldata_variants": [
                "0x41228803",
                "0x412288030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4e7343ea",
            "selector": "0x4e7343ea",
            "calldata_variants": [
                "0x4e7343ea",
                "0x4e7343ea0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x648a0c91",
            "selector": "0x648a0c91",
            "calldata_variants": [
                "0x648a0c91",
                "0x648a0c910000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x69820a80",
            "selector": "0x69820a80",
            "calldata_variants": [
                "0x69820a80",
                "0x69820a800000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x98ea5fca",
            "selector": "0x98ea5fca",
            "calldata_variants": [
                "0x98ea5fca",
                "0x98ea5fca0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 1528,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2174,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}