019b477e-bc3d-7022-aa62-b8bb49f2f3b4
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 24039 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 24040 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 67262 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 67263 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 67264 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 67265 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x003c 0000000c: JUMPI 0000000d: PUSH4 0xffffffff 00000012: PUSH1 0xe0 00000014: PUSH1 0x02 00000016: EXP 00000017: PUSH1 0x00 00000019: CALLDATALOAD 0000001a: DIV 0000001b: AND 0000001c: PUSH3 0x821de3 00000020: DUP2 00000021: EQ 00000022: PUSH2 0x00eb 00000025: JUMPI 00000026: DUP1 00000027: PUSH4 0x3ef13367 0000002c: EQ 0000002d: PUSH2 0x011a 00000030: JUMPI 00000031: DUP1 00000032: PUSH4 0x6b9f96ea 00000037: EQ 00000038: PUSH2 0x013b 0000003b: JUMPI 0000003c: JUMPDEST 0000003d: PUSH1 0x00 0000003f: DUP1 00000040: SLOAD 00000041: PUSH1 0x01 00000043: PUSH1 0xa0 00000045: PUSH1 0x02 00000047: EXP 00000048: SUB 00000049: AND 0000004a: SWAP1 0000004b: CALLVALUE 0000004c: SWAP1 0000004d: CALLDATASIZE 0000004e: PUSH1 0x40 00000050: MLOAD 00000051: DUP1 00000052: DUP4 00000053: DUP4 00000054: DUP1 00000055: DUP3 00000056: DUP5 00000057: CALLDATACOPY 00000058: DUP3 00000059: ADD 0000005a: SWAP2 0000005b: POP 0000005c: POP 0000005d: SWAP3 0000005e: POP 0000005f: POP 00000060: POP 00000061: PUSH1 0x00 00000063: PUSH1 0x40 00000065: MLOAD 00000066: DUP1 00000067: DUP4 00000068: SUB 00000069: DUP2 0000006a: DUP6 0000006b: DUP8 0000006c: PUSH2 0x8796 0000006f: GAS 00000070: SUB 00000071: CALL 00000072: SWAP3 00000073: POP 00000074: POP 00000075: POP 00000076: ISZERO 00000077: ISZERO 00000078: PUSH2 0x0080 0000007b: JUMPI 0000007c: PUSH1 0x00 0000007e: DUP1 0000007f: REVERT 00000080: JUMPDEST 00000081: PUSH32 0x69b31548dea9b3b707b4dff357d326e3e9348b24e7a6080a218a6edeeec48f9b 000000a2: CALLER 000000a3: CALLVALUE 000000a4: PUSH1 0x00 000000a6: CALLDATASIZE 000000a7: PUSH1 0x40 000000a9: MLOAD 000000aa: PUSH1 0x01 000000ac: PUSH1 0xa0 000000ae: PUSH1 0x02 000000b0: EXP 000000b1: SUB 000000b2: DUP6 000000b3: AND 000000b4: DUP2 000000b5: MSTORE 000000b6: PUSH1 0x20 000000b8: DUP2 000000b9: ADD 000000ba: DUP5 000000bb: SWAP1 000000bc: MSTORE 000000bd: PUSH1 0x60 000000bf: PUSH1 0x40 000000c1: DUP3 000000c2: ADD 000000c3: DUP2 000000c4: DUP2 000000c5: MSTORE 000000c6: SWAP1 000000c7: DUP3 000000c8: ADD 000000c9: DUP4 000000ca: SWAP1 000000cb: MSTORE 000000cc: PUSH1 0x80 000000ce: DUP3 000000cf: ADD 000000d0: DUP5 000000d1: DUP5 000000d2: DUP1 000000d3: DUP3 000000d4: DUP5 000000d5: CALLDATACOPY 000000d6: DUP3 000000d7: ADD 000000d8: SWAP2 000000d9: POP 000000da: POP 000000db: SWAP6 000000dc: POP 000000dd: POP 000000de: POP 000000df: POP 000000e0: POP 000000e1: POP 000000e2: PUSH1 0x40 000000e4: MLOAD 000000e5: DUP1 000000e6: SWAP2 000000e7: SUB 000000e8: SWAP1 000000e9: LOG1 000000ea: STOP 000000eb: JUMPDEST 000000ec: CALLVALUE 000000ed: ISZERO 000000ee: PUSH2 0x00f6 000000f1: JUMPI 000000f2: PUSH1 0x00 000000f4: DUP1 000000f5: REVERT 000000f6: JUMPDEST 000000f7: PUSH2 0x00fe 000000fa: PUSH2 0x014e 000000fd: JUMP 000000fe: JUMPDEST 000000ff: PUSH1 0x40 00000101: MLOAD 00000102: PUSH1 0x01 00000104: PUSH1 0xa0 00000106: PUSH1 0x02 00000108: EXP 00000109: SUB 0000010a: SWAP1 0000010b: SWAP2 0000010c: AND 0000010d: DUP2 0000010e: MSTORE 0000010f: PUSH1 0x20 00000111: ADD 00000112: PUSH1 0x40 00000114: MLOAD 00000115: DUP1 00000116: SWAP2 00000117: SUB 00000118: SWAP1 00000119: RETURN 0000011a: JUMPDEST 0000011b: CALLVALUE 0000011c: ISZERO 0000011d: PUSH2 0x0125 00000120: JUMPI 00000121: PUSH1 0x00 00000123: DUP1 00000124: REVERT 00000125: JUMPDEST 00000126: PUSH2 0x0139 00000129: PUSH1 0x01 0000012b: PUSH1 0xa0 0000012d: PUSH1 0x02 0000012f: EXP 00000130: SUB 00000131: PUSH1 0x04 00000133: CALLDATALOAD 00000134: AND 00000135: PUSH2 0x015d 00000138: JUMP 00000139: JUMPDEST 0000013a: STOP 0000013b: JUMPDEST 0000013c: CALLVALUE 0000013d: ISZERO 0000013e: PUSH2 0x0146 00000141: JUMPI 00000142: PUSH1 0x00 00000144: DUP1 00000145: REVERT 00000146: JUMPDEST 00000147: PUSH2 0x0139 0000014a: PUSH2 0x02d9 0000014d: JUMP 0000014e: JUMPDEST 0000014f: PUSH1 0x00 00000151: SLOAD 00000152: PUSH1 0x01 00000154: PUSH1 0xa0 00000156: PUSH1 0x02 00000158: EXP 00000159: SUB 0000015a: AND 0000015b: DUP2 0000015c: JUMP 0000015d: JUMPDEST 0000015e: PUSH1 0x00 00000160: DUP1 00000161: SLOAD 00000162: DUP2 00000163: SWAP1 00000164: DUP2 00000165: SWAP1 00000166: CALLER 00000167: PUSH1 0x01 00000169: PUSH1 0xa0 0000016b: PUSH1 0x02 0000016d: EXP 0000016e: SUB 0000016f: SWAP1 00000170: DUP2 00000171: AND 00000172: SWAP2 00000173: AND 00000174: EQ 00000175: PUSH2 0x017d 00000178: JUMPI 00000179: PUSH1 0x00 0000017b: DUP1 0000017c: REVERT 0000017d: JUMPDEST 0000017e: DUP4 0000017f: SWAP3 00000180: POP 00000181: ADDRESS 00000182: SWAP2 00000183: POP 00000184: DUP3 00000185: PUSH1 0x01 00000187: PUSH1 0xa0 00000189: PUSH1 0x02 0000018b: EXP 0000018c: SUB 0000018d: AND 0000018e: PUSH4 0x70a08231 00000193: DUP4 00000194: PUSH1 0x00 00000196: PUSH1 0x40 00000198: MLOAD 00000199: PUSH1 0x20 0000019b: ADD 0000019c: MSTORE 0000019d: PUSH1 0x40 0000019f: MLOAD 000001a0: PUSH1 0xe0 000001a2: PUSH1 0x02 000001a4: EXP 000001a5: PUSH4 0xffffffff 000001aa: DUP5 000001ab: AND 000001ac: MUL 000001ad: DUP2 000001ae: MSTORE 000001af: PUSH1 0x01 000001b1: PUSH1 0xa0 000001b3: PUSH1 0x02 000001b5: EXP 000001b6: SUB 000001b7: SWAP1 000001b8: SWAP2 000001b9: AND 000001ba: PUSH1 0x04 000001bc: DUP3 000001bd: ADD 000001be: MSTORE 000001bf: PUSH1 0x24 000001c1: ADD 000001c2: PUSH1 0x20 000001c4: PUSH1 0x40 000001c6: MLOAD 000001c7: DUP1 000001c8: DUP4 000001c9: SUB 000001ca: DUP2 000001cb: PUSH1 0x00 000001cd: DUP8 000001ce: DUP1 000001cf: EXTCODESIZE 000001d0: ISZERO 000001d1: ISZERO 000001d2: PUSH2 0x01da 000001d5: JUMPI 000001d6: PUSH1 0x00 000001d8: DUP1 000001d9: REVERT 000001da: JUMPDEST 000001db: PUSH2 0x02c6 000001de: GAS 000001df: SUB 000001e0: CALL 000001e1: ISZERO 000001e2: ISZERO 000001e3: PUSH2 0x01eb 000001e6: JUMPI 000001e7: PUSH1 0x00 000001e9: DUP1 000001ea: REVERT 000001eb: JUMPDEST 000001ec: POP 000001ed: POP 000001ee: POP 000001ef: PUSH1 0x40 000001f1: MLOAD 000001f2: DUP1 000001f3: MLOAD 000001f4: SWAP2 000001f5: POP 000001f6: POP 000001f7: DUP1 000001f8: ISZERO 000001f9: ISZERO 000001fa: PUSH2 0x0202 000001fd: JUMPI 000001fe: PUSH2 0x02d3 00000201: JUMP 00000202: JUMPDEST 00000203: PUSH1 0x00 00000205: DUP1 00000206: SLOAD 00000207: PUSH1 0x01 00000209: PUSH1 0xa0 0000020b: PUSH1 0x02 0000020d: EXP 0000020e: SUB 0000020f: DUP1 00000210: DUP7 00000211: AND 00000212: SWAP3 00000213: PUSH4 0xa9059cbb 00000218: SWAP3 00000219: SWAP1 0000021a: SWAP2 0000021b: AND 0000021c: SWAP1 0000021d: DUP5 0000021e: SWAP1 0000021f: PUSH1 0x40 00000221: MLOAD 00000222: PUSH1 0x20 00000224: ADD 00000225: MSTORE 00000226: PUSH1 0x40 00000228: MLOAD 00000229: PUSH1 0xe0 0000022b: PUSH1 0x02 0000022d: EXP 0000022e: PUSH4 0xffffffff 00000233: DUP6 00000234: AND 00000235: MUL 00000236: DUP2 00000237: MSTORE 00000238: PUSH1 0x01 0000023a: PUSH1 0xa0 0000023c: PUSH1 0x02 0000023e: EXP 0000023f: SUB 00000240: SWAP1 00000241: SWAP3 00000242: AND 00000243: PUSH1 0x04 00000245: DUP4 00000246: ADD 00000247: MSTORE 00000248: PUSH1 0x24 0000024a: DUP3 0000024b: ADD 0000024c: MSTORE 0000024d: PUSH1 0x44 0000024f: ADD 00000250: PUSH1 0x20 00000252: PUSH1 0x40 00000254: MLOAD 00000255: DUP1 00000256: DUP4 00000257: SUB 00000258: DUP2 00000259: PUSH1 0x00 0000025b: DUP8 0000025c: DUP1 0000025d: EXTCODESIZE 0000025e: ISZERO 0000025f: ISZERO 00000260: PUSH2 0x0268 00000263: JUMPI 00000264: PUSH1 0x00 00000266: DUP1 00000267: REVERT 00000268: JUMPDEST 00000269: PUSH2 0x02c6 0000026c: GAS 0000026d: SUB 0000026e: CALL 0000026f: ISZERO 00000270: ISZERO 00000271: PUSH2 0x0279 00000274: JUMPI 00000275: PUSH1 0x00 00000277: DUP1 00000278: REVERT 00000279: JUMPDEST 0000027a: POP 0000027b: POP 0000027c: POP 0000027d: PUSH1 0x40 0000027f: MLOAD 00000280: DUP1 00000281: MLOAD 00000282: SWAP1 00000283: POP 00000284: ISZERO 00000285: ISZERO 00000286: PUSH2 0x028e 00000289: JUMPI 0000028a: PUSH1 0x00 0000028c: DUP1 0000028d: REVERT 0000028e: JUMPDEST 0000028f: PUSH32 0x9401e4e79c19cbe2bd774cb70a94ba660e6718be1bac1298ab3b07f454a60821 000002b0: DUP5 000002b1: DUP3 000002b2: PUSH1 0x40 000002b4: MLOAD 000002b5: PUSH1 0x01 000002b7: PUSH1 0xa0 000002b9: PUSH1 0x02 000002bb: EXP 000002bc: SUB 000002bd: SWAP1 000002be: SWAP3 000002bf: AND 000002c0: DUP3 000002c1: MSTORE 000002c2: PUSH1 0x20 000002c4: DUP3 000002c5: ADD 000002c6: MSTORE 000002c7: PUSH1 0x40 000002c9: SWAP1 000002ca: DUP2 000002cb: ADD 000002cc: SWAP1 000002cd: MLOAD 000002ce: DUP1 000002cf: SWAP2 000002d0: SUB 000002d1: SWAP1 000002d2: LOG1 000002d3: JUMPDEST 000002d4: POP 000002d5: POP 000002d6: POP 000002d7: POP 000002d8: JUMP 000002d9: JUMPDEST 000002da: PUSH1 0x00 000002dc: SLOAD 000002dd: PUSH1 0x01 000002df: PUSH1 0xa0 000002e1: PUSH1 0x02 000002e3: EXP 000002e4: SUB 000002e5: SWAP1 000002e6: DUP2 000002e7: AND 000002e8: SWAP1 000002e9: ADDRESS 000002ea: AND 000002eb: BALANCE 000002ec: PUSH1 0x40 000002ee: MLOAD 000002ef: PUSH1 0x00 000002f1: PUSH1 0x40 000002f3: MLOAD 000002f4: DUP1 000002f5: DUP4 000002f6: SUB 000002f7: DUP2 000002f8: DUP6 000002f9: DUP8 000002fa: PUSH2 0x8796 000002fd: GAS 000002fe: SUB 000002ff: CALL 00000300: SWAP3 00000301: POP 00000302: POP 00000303: POP 00000304: ISZERO 00000305: ISZERO 00000306: PUSH2 0x030e 00000309: JUMPI 0000030a: PUSH1 0x00 0000030c: DUP1 0000030d: REVERT 0000030e: JUMPDEST 0000030f: JUMP 00000310: STOP 00000311: LOG1 00000312: PUSH6 0x627a7a723058 00000319: KECCAK256 0000031a: UNKNOWN(0xA6) 0000031b: UNKNOWN(0xB6) 0000031c: GT 0000031d: PUSH25 0xcc9f27c0f16522b572583d67a89a7cea9f0d74293c1771a826 00000337: UNKNOWN(0x0C) 00000338: CODESIZE 00000339: PUSH6
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x53b5024ba149c9fcf64b5e779b45877ab23c495a75e97aee775a69cdbc712897
call_targets:
0x6f7ebbcc7cfaceee118c6eae4b0b7bd0ab876ee1
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x53b5024ba149c9fcf64b5e779b45877ab23c495a75e97aee775a69cdbc712897",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x6f7ebbcc7cfaceee118c6eae4b0b7bd0ab876ee1"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x3ef13367",
"selector": "0x3ef13367",
"calldata_variants": [
"0x3ef13367",
"0x3ef133670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6b9f96ea",
"selector": "0x6b9f96ea",
"calldata_variants": [
"0x6b9f96ea",
"0x6b9f96ea0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 113,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 480,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 622,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 4,
"guards_detected": [],
"untrusted_call_count": 4
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x53b5024ba149c9fcf64b5e779b45877ab23c495a75e97aee775a69cdbc712897
call_targets:
0x6f7ebbcc7cfaceee118c6eae4b0b7bd0ab876ee1
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x53b5024ba149c9fcf64b5e779b45877ab23c495a75e97aee775a69cdbc712897",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x6f7ebbcc7cfaceee118c6eae4b0b7bd0ab876ee1"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x3ef13367",
"selector": "0x3ef13367",
"calldata_variants": [
"0x3ef13367",
"0x3ef133670000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6b9f96ea",
"selector": "0x6b9f96ea",
"calldata_variants": [
"0x6b9f96ea",
"0x6b9f96ea0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 113,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 480,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 622,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 4,
"guards_detected": []
}
|