TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-bc81-70a2-8362-4210b1c5389a

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
24083 artifact.fetch complete 1 / 3 3 months ago
24084 tool.cast_disasm complete 1 / 3 3 months ago
67342 analysis.bundle complete 1 / 3 1 week ago
67343 capability.graph complete 1 / 3 1 week ago
67344 detector.run complete 1 / 3 1 week ago
67345 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
0
Total opcodes
1126
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x00dd
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x7b103999
00000019: GT
0000001a: PUSH2 0x007f
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x9a202d47
00000024: GT
00000025: PUSH2 0x0059
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x9a202d47
0000002f: EQ
00000030: PUSH2 0x02b2
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xb02c43d0
0000003a: EQ
0000003b: PUSH2 0x02c7
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf851a440
00000045: EQ
00000046: PUSH2 0x0331
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0xfd840de2
00000050: EQ
00000051: PUSH2 0x0346
00000054: JUMPI
00000055: PUSH2 0x00dd
00000058: JUMP
00000059: JUMPDEST
0000005a: DUP1
0000005b: PUSH4 0x7b103999
00000060: EQ
00000061: PUSH2 0x0255
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0x8456cb59
0000006b: EQ
0000006c: PUSH2 0x026a
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0x8f283970
00000076: EQ
00000077: PUSH2 0x027f
0000007a: JUMPI
0000007b: PUSH2 0x00dd
0000007e: JUMP
0000007f: JUMPDEST
00000080: DUP1
00000081: PUSH4 0x4555d5c9
00000086: GT
00000087: PUSH2 0x00bb
0000008a: JUMPI
0000008b: DUP1
0000008c: PUSH4 0x4555d5c9
00000091: EQ
00000092: PUSH2 0x0192
00000095: JUMPI
00000096: DUP1
00000097: PUSH4 0x5c60da1b
0000009c: EQ
0000009d: PUSH2 0x01a7
000000a0: JUMPI
000000a1: DUP1
000000a2: PUSH4 0x5c975abb
000000a7: EQ
000000a8: PUSH2 0x01d8
000000ab: JUMPI
000000ac: DUP1
000000ad: PUSH4 0x5cc07076
000000b2: EQ
000000b3: PUSH2 0x0201
000000b6: JUMPI
000000b7: PUSH2 0x00dd
000000ba: JUMP
000000bb: JUMPDEST
000000bc: DUP1
000000bd: PUSH4 0x1a5da6c8
000000c2: EQ
000000c3: PUSH2 0x0121
000000c6: JUMPI
000000c7: DUP1
000000c8: PUSH4 0x2dfdf0b5
000000cd: EQ
000000ce: PUSH2 0x0156
000000d1: JUMPI
000000d2: DUP1
000000d3: PUSH4 0x3f4ba83a
000000d8: EQ
000000d9: PUSH2 0x017d
000000dc: JUMPI
000000dd: JUMPDEST
000000de: PUSH1 0x00
000000e0: PUSH2 0x00e7
000000e3: PUSH2 0x0379
000000e6: JUMP
000000e7: JUMPDEST
000000e8: SWAP1
000000e9: POP
000000ea: PUSH1 0x01
000000ec: PUSH1 0x01
000000ee: PUSH1 0xa0
000000f0: SHL
000000f1: SUB
000000f2: DUP2
000000f3: AND
000000f4: PUSH2 0x00fc
000000f7: JUMPI
000000f8: PUSH1 0x00
000000fa: DUP1
000000fb: REVERT
000000fc: JUMPDEST
000000fd: PUSH1 0x40
000000ff: MLOAD
00000100: CALLDATASIZE
00000101: PUSH1 0x00
00000103: DUP3
00000104: CALLDATACOPY
00000105: PUSH1 0x00
00000107: DUP1
00000108: CALLDATASIZE
00000109: DUP4
0000010a: DUP6
0000010b: GAS
0000010c: DELEGATECALL
0000010d: RETURNDATASIZE
0000010e: DUP1
0000010f: PUSH1 0x00
00000111: DUP5
00000112: RETURNDATACOPY
00000113: DUP2
00000114: DUP1
00000115: ISZERO
00000116: PUSH2 0x011d
00000119: JUMPI
0000011a: DUP2
0000011b: DUP5
0000011c: RETURN
0000011d: JUMPDEST
0000011e: DUP2
0000011f: DUP5
00000120: REVERT
00000121: JUMPDEST
00000122: CALLVALUE
00000123: DUP1
00000124: ISZERO
00000125: PUSH2 0x012d
00000128: JUMPI
00000129: PUSH1 0x00
0000012b: DUP1
0000012c: REVERT
0000012d: JUMPDEST
0000012e: POP
0000012f: PUSH2 0x0154
00000132: PUSH1 0x04
00000134: DUP1
00000135: CALLDATASIZE
00000136: SUB
00000137: PUSH1 0x20
00000139: DUP2
0000013a: LT
0000013b: ISZERO
0000013c: PUSH2 0x0144
0000013f: JUMPI
00000140: PUSH1 0x00
00000142: DUP1
00000143: REVERT
00000144: JUMPDEST
00000145: POP
00000146: CALLDATALOAD
00000147: PUSH1 0x01
00000149: PUSH1 0x01
0000014b: PUSH1 0xa0
0000014d: SHL
0000014e: SUB
0000014f: AND
00000150: PUSH2 0x0388
00000153: JUMP
00000154: JUMPDEST
00000155: STOP
00000156: JUMPDEST
00000157: CALLVALUE
00000158: DUP1
00000159: ISZERO
0000015a: PUSH2 0x0162
0000015d: JUMPI
0000015e: PUSH1 0x00
00000160: DUP1
00000161: REVERT
00000162: JUMPDEST
00000163: POP
00000164: PUSH2 0x016b
00000167: PUSH2 0x03c1
0000016a: JUMP
0000016b: JUMPDEST
0000016c: PUSH1 0x40
0000016e: DUP1
0000016f: MLOAD
00000170: SWAP2
00000171: DUP3
00000172: MSTORE
00000173: MLOAD
00000174: SWAP1
00000175: DUP2
00000176: SWAP1
00000177: SUB
00000178: PUSH1 0x20
0000017a: ADD
0000017b: SWAP1
0000017c: RETURN
0000017d: JUMPDEST
0000017e: CALLVALUE
0000017f: DUP1
00000180: ISZERO
00000181: PUSH2 0x0189
00000184: JUMPI
00000185: PUSH1 0x00
00000187: DUP1
00000188: REVERT
00000189: JUMPDEST
0000018a: POP
0000018b: PUSH2 0x0154
0000018e: PUSH2 0x03c7
00000191: JUMP
00000192: JUMPDEST
00000193: CALLVALUE
00000194: DUP1
00000195: ISZERO
00000196: PUSH2 0x019e
00000199: JUMPI
0000019a: PUSH1 0x00
0000019c: DUP1
0000019d: REVERT
0000019e: JUMPDEST
0000019f: POP
000001a0: PUSH2 0x016b
000001a3: PUSH2 0x042c
000001a6: JUMP
000001a7: JUMPDEST
000001a8: CALLVALUE
000001a9: DUP1
000001aa: ISZERO
000001ab: PUSH2 0x01b3
000001ae: JUMPI
000001af: PUSH1 0x00
000001b1: DUP1
000001b2: REVERT
000001b3: JUMPDEST
000001b4: POP
000001b5: PUSH2 0x01bc
000001b8: PUSH2 0x0379
000001bb: JUMP
000001bc: JUMPDEST
000001bd: PUSH1 0x40
000001bf: DUP1
000001c0: MLOAD
000001c1: PUSH1 0x01
000001c3: PUSH1 0x01
000001c5: PUSH1 0xa0
000001c7: SHL
000001c8: SUB
000001c9: SWAP1
000001ca: SWAP3
000001cb: AND
000001cc: DUP3
000001cd: MSTORE
000001ce: MLOAD
000001cf: SWAP1
000001d0: DUP2
000001d1: SWAP1
000001d2: SUB
000001d3: PUSH1 0x20
000001d5: ADD
000001d6: SWAP1
000001d7: RETURN
000001d8: JUMPDEST
000001d9: CALLVALUE
000001da: DUP1
000001db: ISZERO
000001dc: PUSH2 0x01e4
000001df: JUMPI
000001e0: PUSH1 0x00
000001e2: DUP1
000001e3: REVERT
000001e4: JUMPDEST
000001e5: POP
000001e6: PUSH2 0x01ed
000001e9: PUSH2 0x0431
000001ec: JUMP
000001ed: JUMPDEST
000001ee: PUSH1 0x40
000001f0: DUP1
000001f1: MLOAD
000001f2: SWAP2
000001f3: ISZERO
000001f4: ISZERO
000001f5: DUP3
000001f6: MSTORE
000001f7: MLOAD
000001f8: SWAP1
000001f9: DUP2
000001fa: SWAP1
000001fb: SUB
000001fc: PUSH1 0x20
000001fe: ADD
000001ff: SWAP1
00000200: RETURN
00000201: JUMPDEST
00000202: CALLVALUE
00000203: DUP1
00000204: ISZERO
00000205: PUSH2 0x020d
00000208: JUMPI
00000209: PUSH1 0x00
0000020b: DUP1
0000020c: REVERT
0000020d: JUMPDEST
0000020e: POP
0000020f: PUSH2 0x022b
00000212: PUSH1 0x04
00000214: DUP1
00000215: CALLDATASIZE
00000216: SUB
00000217: PUSH1 0x20
00000219: DUP2
0000021a: LT
0000021b: ISZERO
0000021c: PUSH2 0x0224
0000021f: JUMPI
00000220: PUSH1 0x00
00000222: DUP1
00000223: REVERT
00000224: JUMPDEST
00000225: POP
00000226: CALLDATALOAD
00000227: PUSH2 0x0441
0000022a: JUMP
0000022b: JUMPDEST
0000022c: PUSH1 0x40
0000022e: DUP1
0000022f: MLOAD
00000230: PUSH1 0x01
00000232: PUSH1 0x01
00000234: PUSH1 0xa0
00000236: SHL
00000237: SUB
00000238: SWAP5
00000239: DUP6
0000023a: AND
0000023b: DUP2
0000023c: MSTORE
0000023d: SWAP3
0000023e: SWAP1
0000023f: SWAP4
00000240: AND
00000241: PUSH1 0x20
00000243: DUP4
00000244: ADD
00000245: MSTORE
00000246: DUP2
00000247: DUP4
00000248: ADD
00000249: MSTORE
0000024a: SWAP1
0000024b: MLOAD
0000024c: SWAP1
0000024d: DUP2
0000024e: SWAP1
0000024f: SUB
00000250: PUSH1 0x60
00000252: ADD
00000253: SWAP1
00000254: RETURN
00000255: JUMPDEST
00000256: CALLVALUE
00000257: DUP1
00000258: ISZERO
00000259: PUSH2 0x0261
0000025c: JUMPI
0000025d: PUSH1 0x00
0000025f: DUP1
00000260: REVERT
00000261: JUMPDEST
00000262: POP
00000263: PUSH2 0x01bc
00000266: PUSH2 0x046f
00000269: JUMP
0000026a: JUMPDEST
0000026b: CALLVALUE
0000026c: DUP1
0000026d: ISZERO
0000026e: PUSH2 0x0276
00000271: JUMPI
00000272: PUSH1 0x00
00000274: DUP1
00000275: REVERT
00000276: JUMPDEST
00000277: POP
00000278: PUSH2 0x0154
0000027b: PUSH2 0x047e
0000027e: JUMP
0000027f: JUMPDEST
00000280: CALLVALUE
00000281: DUP1
00000282: ISZERO
00000283: PUSH2 0x028b
00000286: JUMPI
00000287: PUSH1 0x00
00000289: DUP1
0000028a: REVERT
0000028b: JUMPDEST
0000028c: POP
0000028d: PUSH2 0x0154
00000290: PUSH1 0x04
00000292: DUP1
00000293: CALLDATASIZE
00000294: SUB
00000295: PUSH1 0x20
00000297: DUP2
00000298: LT
00000299: ISZERO
0000029a: PUSH2 0x02a2
0000029d: JUMPI
0000029e: PUSH1 0x00
000002a0: DUP1
000002a1: REVERT
000002a2: JUMPDEST
000002a3: POP
000002a4: CALLDATALOAD
000002a5: PUSH1 0x01
000002a7: PUSH1 0x01
000002a9: PUSH1 0xa0
000002ab: SHL
000002ac: SUB
000002ad: AND
000002ae: PUSH2 0x04ea
000002b1: JUMP
000002b2: JUMPDEST
000002b3: CALLVALUE
000002b4: DUP1
000002b5: ISZERO
000002b6: PUSH2 0x02be
000002b9: JUMPI
000002ba: PUSH1 0x00
000002bc: DUP1
000002bd: REVERT
000002be: JUMPDEST
000002bf: POP
000002c0: PUSH2 0x0154
000002c3: PUSH2 0x056f
000002c6: JUMP
000002c7: JUMPDEST
000002c8: CALLVALUE
000002c9: DUP1
000002ca: ISZERO
000002cb: PUSH2 0x02d3
000002ce: JUMPI
000002cf: PUSH1 0x00
000002d1: DUP1
000002d2: REVERT
000002d3: JUMPDEST
000002d4: POP
000002d5: PUSH2 0x02f1
000002d8: PUSH1 0x04
000002da: DUP1
000002db: CALLDATASIZE
000002dc: SUB
000002dd: PUSH1 0x20
000002df: DUP2
000002e0: LT
000002e1: ISZERO
000002e2: PUSH2 0x02ea
000002e5: JUMPI
000002e6: PUSH1 0x00
000002e8: DUP1
000002e9: REVERT
000002ea: JUMPDEST
000002eb: POP
000002ec: CALLDATALOAD
000002ed: PUSH2 0x05ce
000002f0: JUMP
000002f1: JUMPDEST
000002f2: PUSH1 0x40
000002f4: DUP1
000002f5: MLOAD
000002f6: PUSH1 0x01
000002f8: PUSH1 0x01
000002fa: PUSH1 0xa0
000002fc: SHL
000002fd: SUB
000002fe: SWAP7
000002ff: DUP8
00000300: AND
00000301: DUP2
00000302: MSTORE
00000303: SWAP5
00000304: DUP7
00000305: AND
00000306: PUSH1 0x20
00000308: DUP7
00000309: ADD
0000030a: MSTORE
0000030b: SWAP3
0000030c: SWAP1
0000030d: SWAP5
0000030e: AND
0000030f: DUP4
00000310: DUP4
00000311: ADD
00000312: MSTORE
00000313: PUSH4 0xffffffff
00000318: AND
00000319: PUSH1 0x60
0000031b: DUP4
0000031c: ADD
0000031d: MSTORE
0000031e: PUSH1 0x80
00000320: DUP3
00000321: ADD
00000322: SWAP3
00000323: SWAP1
00000324: SWAP3
00000325: MSTORE
00000326: SWAP1
00000327: MLOAD
00000328: SWAP1
00000329: DUP2
0000032a: SWAP1
0000032b: SUB
0000032c: PUSH1 0xa0
0000032e: ADD
0000032f: SWAP1
00000330: RETURN
00000331: JUMPDEST
00000332: CALLVALUE
00000333: DUP1
00000334: ISZERO
00000335: PUSH2 0x033d
00000338: JUMPI
00000339: PUSH1 0x00
0000033b: DUP1
0000033c: REVERT
0000033d: JUMPDEST
0000033e: POP
0000033f: PUSH2 0x01bc
00000342: PUSH2 0x0623
00000345: JUMP
00000346: JUMPDEST
00000347: CALLVALUE
00000348: DUP1
00000349: ISZERO
0000034a: PUSH2 0x0352
0000034d: JUMPI
0000034e: PUSH1 0x00
00000350: DUP1
00000351: REVERT
00000352: JUMPDEST
00000353: POP
00000354: PUSH2 0x0154
00000357: PUSH1 0x04
00000359: DUP1
0000035a: CALLDATASIZE
0000035b: SUB
0000035c: PUSH1 0x20
0000035e: DUP2
0000035f: LT
00000360: ISZERO
00000361: PUSH2 0x0369
00000364: JUMPI
00000365: PUSH1 0x00
00000367: DUP1
00000368: REVERT
00000369: JUMPDEST
0000036a: POP
0000036b: CALLDATALOAD
0000036c: PUSH1 0x01
0000036e: PUSH1 0x01
00000370: PUSH1 0xa0
00000372: SHL
00000373: SUB
00000374: AND
00000375: PUSH2 0x0632
00000378: JUMP
00000379: JUMPDEST
0000037a: PUSH1 0x01
0000037c: SLOAD
0000037d: PUSH1 0x01
0000037f: PUSH1 0x01
00000381: PUSH1 0xa0
00000383: SHL
00000384: SUB
00000385: AND
00000386: SWAP1
00000387: JUMP
00000388: JUMPDEST
00000389: PUSH1 0x00
0000038b: SLOAD
0000038c: PUSH1 0x01
0000038e: PUSH1 0x01
00000390: PUSH1 0xa0
00000392: SHL
00000393: SUB
00000394: AND
00000395: CALLER
00000396: EQ
00000397: PUSH2 0x039f
0000039a: JUMPI
0000039b: PUSH1 0x00
0000039d: DUP1
0000039e: REVERT
0000039f: JUMPDEST
000003a0: PUSH1 0x02
000003a2: DUP1
000003a3: SLOAD
000003a4: PUSH1 0x01
000003a6: PUSH1 0x01
000003a8: PUSH1 0xa0
000003aa: SHL
000003ab: SUB
000003ac: NOT
000003ad: AND
000003ae: PUSH1 0x01
000003b0: PUSH1 0x01
000003b2: PUSH1 0xa0
000003b4: SHL
000003b5: SUB
000003b6: SWAP3
000003b7: SWAP1
000003b8: SWAP3
000003b9: AND
000003ba: SWAP2
000003bb: SWAP1
000003bc: SWAP2
000003bd: OR
000003be: SWAP1
000003bf: SSTORE
000003c0: JUMP
000003c1: JUMPDEST
000003c2: PUSH1 0x03
000003c4: SLOAD
000003c5: DUP2
000003c6: JUMP
000003c7: JUMPDEST
000003c8: PUSH1 0x00
000003ca: SLOAD
000003cb: PUSH1 0x01
000003cd: PUSH1 0x01
000003cf: PUSH1 0xa0
000003d1: SHL
000003d2: SUB
000003d3: AND
000003d4: CALLER
000003d5: EQ
000003d6: PUSH2 0x03de
000003d9: JUMPI
000003da: PUSH1 0x00
000003dc: DUP1
000003dd: REVERT
000003de: JUMPDEST
000003df: PUSH1 0x01
000003e1: SLOAD
000003e2: PUSH1 0x01
000003e4: PUSH1 0xa0
000003e6: SHL
000003e7: SWAP1
000003e8: DIV
000003e9: PUSH1 0xff
000003eb: AND
000003ec: PUSH2 0x03f4
000003ef: JUMPI
000003f0: PUSH1 0x00
000003f2: DUP1
000003f3: REVERT
000003f4: JUMPDEST
000003f5: PUSH1 0x01
000003f7: DUP1
000003f8: SLOAD
000003f9: PUSH1 0xff
000003fb: PUSH1 0xa0
000003fd: SHL
000003fe: NOT
000003ff: AND
00000400: SWAP1
00000401: SSTORE
00000402: PUSH1 0x40
00000404: MLOAD
00000405: PUSH32 0xa45f47fdea8a1efdd9029a5691c7f759c32b7c698632b563573e155625d16933
00000426: SWAP1
00000427: PUSH1 0x00
00000429: SWAP1
0000042a: LOG1
0000042b: JUMP
0000042c: JUMPDEST
0000042d: PUSH1 0x02
0000042f: SWAP1
00000430: JUMP
00000431: JUMPDEST
00000432: PUSH1 0x01
00000434: SLOAD
00000435: PUSH1 0x01
00000437: PUSH1 0xa0
00000439: SHL
0000043a: SWAP1
0000043b: DIV
0000043c: PUSH1 0xff
0000043e: AND
0000043f: DUP2
00000440: JUMP
00000441: JUMPDEST
00000442: PUSH1 0x05
00000444: PUSH1 0x20
00000446: MSTORE
00000447: PUSH1 0x00
00000449: SWAP1
0000044a: DUP2
0000044b: MSTORE
0000044c: PUSH1 0x40
0000044e: SWAP1
0000044f: KECCAK256
00000450: DUP1
00000451: SLOAD
00000452: PUSH1 0x01
00000454: DUP3
00000455: ADD
00000456: SLOAD
00000457: PUSH1 0x02
00000459: SWAP1
0000045a: SWAP3
0000045b: ADD
0000045c: SLOAD
0000045d: PUSH1 0x01
0000045f: PUSH1 0x01
00000461: PUSH1 0xa0
00000463: SHL
00000464: SUB
00000465: SWAP2
00000466: DUP3
00000467: AND
00000468: SWAP3
00000469: SWAP1
0000046a: SWAP2
0000046b: AND
0000046c: SWAP1
0000046d: DUP4
0000046e: JUMP
0000046f: JUMPDEST
00000470: PUSH1 0x02
00000472: SLOAD
00000473: PUSH1 0x01
00000475: PUSH1 0x01
00000477: PUSH1 0xa0
00000479: SHL
0000047a: SUB
0000047b: AND
0000047c: DUP2
0000047d: JUMP
0000047e: JUMPDEST
0000047f: PUSH1 0x00
00000481: SLOAD
00000482: PUSH1 0x01
00000484: PUSH1 0x01
00000486: PUSH1 0xa0
00000488: SHL
00000489: SUB
0000048a: AND
0000048b: CALLER
0000048c: EQ
0000048d: PUSH2 0x0495
00000490: JUMPI
00000491: PUSH1 0x00
00000493: DUP1
00000494: REVERT
00000495: JUMPDEST
00000496: PUSH1 0x01
00000498: SLOAD
00000499: PUSH1 0x01
0000049b: PUSH1 0xa0
0000049d: SHL
0000049e: SWAP1
0000049f: DIV
000004a0: PUSH1 0xff
000004a2: AND
000004a3: ISZERO
000004a4: PUSH2 0x04ac
000004a7: JUMPI
000004a8: PUSH1 0x00
000004aa: DUP1
000004ab: REVERT
000004ac: JUMPDEST
000004ad: PUSH1 0x01
000004af: DUP1
000004b0: SLOAD
000004b1: PUSH1 0xff
000004b3: PUSH1 0xa0
000004b5: SHL
000004b6: NOT
000004b7: AND
000004b8: PUSH1 0x01
000004ba: PUSH1 0xa0
000004bc: SHL
000004bd: OR
000004be: SWAP1
000004bf: SSTORE
000004c0: PUSH1 0x40
000004c2: MLOAD
000004c3: PUSH32 0x9e87fac88ff661f02d44f95383c817fece4bce600a3dab7a54406878b965e752
000004e4: SWAP1
000004e5: PUSH1 0x00
000004e7: SWAP1
000004e8: LOG1
000004e9: JUMP
000004ea: JUMPDEST
000004eb: PUSH1 0x00
000004ed: SLOAD
000004ee: PUSH1 0x01
000004f0: PUSH1 0x01
000004f2: PUSH1 0xa0
000004f4: SHL
000004f5: SUB
000004f6: AND
000004f7: CALLER
000004f8: EQ
000004f9: PUSH2 0x0501
000004fc: JUMPI
000004fd: PUSH1 0x00
000004ff: DUP1
00000500: REVERT
00000501: JUMPDEST
00000502: PUSH1 0x01
00000504: PUSH1 0x01
00000506: PUSH1 0xa0
00000508: SHL
00000509: SUB
0000050a: DUP2
0000050b: AND
0000050c: PUSH2 0x0514
0000050f: JUMPI
00000510: PUSH1 0x00
00000512: DUP1
00000513: REVERT
00000514: JUMPDEST
00000515: PUSH1 0x00
00000517: DUP1
00000518: SLOAD
00000519: PUSH1 0x40
0000051b: MLOAD
0000051c: PUSH1 0x01
0000051e: PUSH1 0x01
00000520: PUSH1 0xa0
00000522: SHL
00000523: SUB
00000524: DUP1
00000525: DUP6
00000526: AND
00000527: SWAP4
00000528: SWAP3
00000529: AND
0000052a: SWAP2
0000052b: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
0000054c: SWAP2
0000054d: LOG3
0000054e: PUSH1 0x00
00000550: DUP1
00000551: SLOAD
00000552: PUSH1 0x01
00000554: PUSH1 0x01
00000556: PUSH1 0xa0
00000558: SHL
00000559: SUB
0000055a: NOT
0000055b: AND
0000055c: PUSH1 0x01
0000055e: PUSH1 0x01
00000560: PUSH1 0xa0
00000562: SHL
00000563: SUB
00000564: SWAP3
00000565: SWAP1
00000566: SWAP3
00000567: AND
00000568: SWAP2
00000569: SWAP1
0000056a: SWAP2
0000056b: OR
0000056c: SWAP1
0000056d: SSTORE
0000056e: JUMP
0000056f: JUMPDEST
00000570: PUSH1 0x00
00000572: SLOAD
00000573: PUSH1 0x01
00000575: PUSH1 0x01
00000577: PUSH1 0xa0
00000579: SHL
0000057a: SUB
0000057b: AND
0000057c: CALLER
0000057d: EQ
0000057e: PUSH2 0x0586
00000581: JUMPI
00000582: PUSH1 0x00
00000584: DUP1
00000585: REVERT
00000586: JUMPDEST
00000587: PUSH1 0x00
00000589: DUP1
0000058a: SLOAD
0000058b: PUSH1 0x40
0000058d: MLOAD
0000058e: PUSH1 0x01
00000590: PUSH1 0x01
00000592: PUSH1 0xa0
00000594: SHL
00000595: SUB
00000596: SWAP1
00000597: SWAP2
00000598: AND
00000599: SWAP2
0000059a: PUSH32 0xa3b62bc36326052d97ea62d63c3d60308ed4c3ea8ac079dd8499f1e9c4f80c0f
000005bb: SWAP2
000005bc: LOG2
000005bd: PUSH1 0x00
000005bf: DUP1
000005c0: SLOAD
000005c1: PUSH1 0x01
000005c3: PUSH1 0x01
000005c5: PUSH1 0xa0
000005c7: SHL
000005c8: SUB
000005c9: NOT
000005ca: AND
000005cb: SWAP1
000005cc: SSTORE
000005cd: JUMP
000005ce: JUMPDEST
000005cf: PUSH1 0x04
000005d1: DUP2
000005d2: DUP2
000005d3: SLOAD
000005d4: DUP2
000005d5: LT
000005d6: PUSH2 0x05db
000005d9: JUMPI
000005da: INVALID
000005db: JUMPDEST
000005dc: PUSH1 0x00
000005de: SWAP2
000005df: DUP3
000005e0: MSTORE
000005e1: PUSH1 0x20
000005e3: SWAP1
000005e4: SWAP2
000005e5: KECCAK256
000005e6: PUSH1 0x04
000005e8: SWAP1
000005e9: SWAP2
000005ea: MUL
000005eb: ADD
000005ec: DUP1
000005ed: SLOAD
000005ee: PUSH1 0x01
000005f0: DUP3
000005f1: ADD
000005f2: SLOAD
000005f3: PUSH1 0x02
000005f5: DUP4
000005f6: ADD
000005f7: SLOAD
000005f8: PUSH1 0x03
000005fa: SWAP1
000005fb: SWAP4
000005fc: ADD
000005fd: SLOAD
000005fe: PUSH1 0x01
00000600: PUSH1 0x01
00000602: PUSH1 0xa0
00000604: SHL
00000605: SUB
00000606: SWAP3
00000607: DUP4
00000608: AND
00000609: SWAP5
0000060a: POP
0000060b: SWAP1
0000060c: DUP3
0000060d: AND
0000060e: SWAP3
0000060f: SWAP2
00000610: DUP3
00000611: AND
00000612: SWAP2
00000613: PUSH1 0x01
00000615: PUSH1 0xa0
00000617: SHL
00000618: SWAP1
00000619: DIV
0000061a: PUSH4 0xffffffff
0000061f: AND
00000620: SWAP1
00000621: DUP6
00000622: JUMP
00000623: JUMPDEST
00000624: PUSH1 0x00
00000626: SLOAD
00000627: PUSH1 0x01
00000629: PUSH1 0x01
0000062b: PUSH1 0xa0
0000062d: SHL
0000062e: SUB
0000062f: AND
00000630: DUP2
00000631: JUMP
00000632: JUMPDEST
00000633: PUSH1 0x00
00000635: SLOAD
00000636: PUSH1 0x01
00000638: PUSH1 0x01
0000063a: PUSH1 0xa0
0000063c: SHL
0000063d: SUB
0000063e: AND
0000063f: CALLER
00000640: EQ
00000641: PUSH2 0x0649
00000644: JUMPI
00000645: PUSH1 0x00
00000647: DUP1
00000648: REVERT
00000649: JUMPDEST
0000064a: PUSH1 0x01
0000064c: PUSH1 0x01
0000064e: PUSH1 0xa0
00000650: SHL
00000651: SUB
00000652: DUP2
00000653: AND
00000654: PUSH2 0x065c
00000657: JUMPI
00000658: PUSH1 0x00
0000065a: DUP1
0000065b: REVERT
0000065c: JUMPDEST
0000065d: PUSH1 0x01
0000065f: DUP1
00000660: SLOAD
00000661: PUSH1 0x01
00000663: PUSH1 0x01
00000665: PUSH1 0xa0
00000667: SHL
00000668: SUB
00000669: NOT
0000066a: AND
0000066b: PUSH1 0x01
0000066d: PUSH1 0x01
0000066f: PUSH1 0xa0
00000671: SHL
00000672: SUB
00000673: DUP4
00000674: DUP2
00000675: AND
00000676: SWAP2
00000677: DUP3
00000678: OR
00000679: SWAP3
0000067a: DUP4
0000067b: SWAP1
0000067c: SSTORE
0000067d: PUSH1 0x40
0000067f: MLOAD
00000680: SWAP3
00000681: AND
00000682: SWAP2
00000683: PUSH32 0xd32d24edea94f55e932d9a008afc425a8561462d1b1f57bc6e508e9a6b9509e1
000006a4: SWAP1
000006a5: PUSH1 0x00
000006a7: SWAP1
000006a8: LOG3
000006a9: POP
000006aa: JUMP
000006ab: INVALID
000006ac: LOG2
000006ad: PUSH6 0x627a7a723158
000006b4: KECCAK256
000006b5: UNKNOWN(0x24)
000006b6: DUP10
000006b7: UNKNOWN(0xCC)
000006b8: DUP8
000006b9: UNKNOWN(0xC9)
000006ba: SELFBALANCE
000006bb: JUMP
000006bc: UNKNOWN(0xBC)
000006bd: LOG4
000006be: UNKNOWN(0xCB)
000006bf: CODESIZE
000006c0: UNKNOWN(0x2B)
000006c1: BYTE
000006c2: LOG4
000006c3: SWAP10
000006c4: UNKNOWN(0xA9)
000006c5: PUSH10 0xd11bc469ee7a3912746a
000006d0: EQ
000006d1: UNKNOWN(0xC5)
000006d2: UNKNOWN(0xC7)
000006d3: DUP7
000006d4: UNKNOWN(0x2A)
000006d5: PUSH5 0x736f6c6343
000006db: STOP
000006dc: SDIV
000006dd: GT
000006de: STOP
000006df: ORIGIN

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0x2036524535b05ff94d35cdaf323e270466a650e53b4410f83b86d04467207f17
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 168,
    "trace_id": "0x2036524535b05ff94d35cdaf323e270466a650e53b4410f83b86d04467207f17",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x9a202d47",
            "selector": "0x9a202d47",
            "calldata_variants": [
                "0x9a202d47",
                "0x9a202d470000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb02c43d0",
            "selector": "0xb02c43d0",
            "calldata_variants": [
                "0xb02c43d0",
                "0xb02c43d00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xfd840de2",
            "selector": "0xfd840de2",
            "calldata_variants": [
                "0xfd840de2",
                "0xfd840de20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7b103999",
            "selector": "0x7b103999",
            "calldata_variants": [
                "0x7b103999",
                "0x7b1039990000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8456cb59",
            "selector": "0x8456cb59",
            "calldata_variants": [
                "0x8456cb59",
                "0x8456cb590000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4555d5c9",
            "selector": "0x4555d5c9",
            "calldata_variants": [
                "0x4555d5c9",
                "0x4555d5c90000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 268,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 1759,
            "type": "tx_origin_used"
        }
    ],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}
high auth detector Authorization based on tx.origin 70 no
view
validation_json
{
    "reason": "missing sink mapping",
    "status": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x9a202d47",
            "selector": "0x9a202d47",
            "calldata_variants": [
                "0x9a202d47",
                "0x9a202d470000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb02c43d0",
            "selector": "0xb02c43d0",
            "calldata_variants": [
                "0xb02c43d0",
                "0xb02c43d00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xfd840de2",
            "selector": "0xfd840de2",
            "calldata_variants": [
                "0xfd840de2",
                "0xfd840de20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7b103999",
            "selector": "0x7b103999",
            "calldata_variants": [
                "0x7b103999",
                "0x7b1039990000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8456cb59",
            "selector": "0x8456cb59",
            "calldata_variants": [
                "0x8456cb59",
                "0x8456cb590000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4555d5c9",
            "selector": "0x4555d5c9",
            "calldata_variants": [
                "0x4555d5c9",
                "0x4555d5c90000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "guards_detected": [
        {
            "pc": 1759,
            "type": "tx_origin_used"
        }
    ]
}