TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-bd90-72d7-ad1a-483299508152

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
24253 artifact.fetch complete 1 / 3 3 months ago
24254 tool.cast_disasm complete 1 / 3 3 months ago
68054 analysis.bundle complete 1 / 3 1 week ago
68055 capability.graph complete 1 / 3 1 week ago
68056 detector.run complete 1 / 3 1 week ago
68057 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
0
Total opcodes
892
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0086
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x9d84ae69
00000019: GT
0000001a: PUSH2 0x0059
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x9d84ae69
00000024: EQ
00000025: PUSH2 0x015a
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0xaaf10f42
0000002f: EQ
00000030: PUSH2 0x0184
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xbb15ac8e
0000003a: EQ
0000003b: PUSH2 0x0199
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xcaaee91c
00000045: EQ
00000046: PUSH2 0x01d7
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0xd784d426
00000050: EQ
00000051: PUSH2 0x020a
00000054: JUMPI
00000055: PUSH2 0x0086
00000058: JUMP
00000059: JUMPDEST
0000005a: DUP1
0000005b: PUSH4 0x1ab7710d
00000060: EQ
00000061: PUSH2 0x0090
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0x37a440e6
0000006b: EQ
0000006c: PUSH2 0x00c1
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0x5ced058e
00000076: EQ
00000077: PUSH2 0x00fd
0000007a: JUMPI
0000007b: DUP1
0000007c: PUSH4 0x82c947b7
00000081: EQ
00000082: PUSH2 0x0127
00000085: JUMPI
00000086: JUMPDEST
00000087: PUSH2 0x008e
0000008a: PUSH2 0x023d
0000008d: JUMP
0000008e: JUMPDEST
0000008f: STOP
00000090: JUMPDEST
00000091: CALLVALUE
00000092: DUP1
00000093: ISZERO
00000094: PUSH2 0x009c
00000097: JUMPI
00000098: PUSH1 0x00
0000009a: DUP1
0000009b: REVERT
0000009c: JUMPDEST
0000009d: POP
0000009e: PUSH2 0x00a5
000000a1: PUSH2 0x02ab
000000a4: JUMP
000000a5: JUMPDEST
000000a6: PUSH1 0x40
000000a8: DUP1
000000a9: MLOAD
000000aa: PUSH1 0x01
000000ac: PUSH1 0x01
000000ae: PUSH1 0xa0
000000b0: SHL
000000b1: SUB
000000b2: SWAP1
000000b3: SWAP3
000000b4: AND
000000b5: DUP3
000000b6: MSTORE
000000b7: MLOAD
000000b8: SWAP1
000000b9: DUP2
000000ba: SWAP1
000000bb: SUB
000000bc: PUSH1 0x20
000000be: ADD
000000bf: SWAP1
000000c0: RETURN
000000c1: JUMPDEST
000000c2: CALLVALUE
000000c3: DUP1
000000c4: ISZERO
000000c5: PUSH2 0x00cd
000000c8: JUMPI
000000c9: PUSH1 0x00
000000cb: DUP1
000000cc: REVERT
000000cd: JUMPDEST
000000ce: POP
000000cf: PUSH2 0x00eb
000000d2: PUSH1 0x04
000000d4: DUP1
000000d5: CALLDATASIZE
000000d6: SUB
000000d7: PUSH1 0x20
000000d9: DUP2
000000da: LT
000000db: ISZERO
000000dc: PUSH2 0x00e4
000000df: JUMPI
000000e0: PUSH1 0x00
000000e2: DUP1
000000e3: REVERT
000000e4: JUMPDEST
000000e5: POP
000000e6: CALLDATALOAD
000000e7: PUSH2 0x02ee
000000ea: JUMP
000000eb: JUMPDEST
000000ec: PUSH1 0x40
000000ee: DUP1
000000ef: MLOAD
000000f0: SWAP2
000000f1: DUP3
000000f2: MSTORE
000000f3: MLOAD
000000f4: SWAP1
000000f5: DUP2
000000f6: SWAP1
000000f7: SUB
000000f8: PUSH1 0x20
000000fa: ADD
000000fb: SWAP1
000000fc: RETURN
000000fd: JUMPDEST
000000fe: CALLVALUE
000000ff: DUP1
00000100: ISZERO
00000101: PUSH2 0x0109
00000104: JUMPI
00000105: PUSH1 0x00
00000107: DUP1
00000108: REVERT
00000109: JUMPDEST
0000010a: POP
0000010b: PUSH2 0x00a5
0000010e: PUSH1 0x04
00000110: DUP1
00000111: CALLDATASIZE
00000112: SUB
00000113: PUSH1 0x20
00000115: DUP2
00000116: LT
00000117: ISZERO
00000118: PUSH2 0x0120
0000011b: JUMPI
0000011c: PUSH1 0x00
0000011e: DUP1
0000011f: REVERT
00000120: JUMPDEST
00000121: POP
00000122: CALLDATALOAD
00000123: PUSH2 0x02f2
00000126: JUMP
00000127: JUMPDEST
00000128: CALLVALUE
00000129: DUP1
0000012a: ISZERO
0000012b: PUSH2 0x0133
0000012e: JUMPI
0000012f: PUSH1 0x00
00000131: DUP1
00000132: REVERT
00000133: JUMPDEST
00000134: POP
00000135: PUSH2 0x00eb
00000138: PUSH1 0x04
0000013a: DUP1
0000013b: CALLDATASIZE
0000013c: SUB
0000013d: PUSH1 0x20
0000013f: DUP2
00000140: LT
00000141: ISZERO
00000142: PUSH2 0x014a
00000145: JUMPI
00000146: PUSH1 0x00
00000148: DUP1
00000149: REVERT
0000014a: JUMPDEST
0000014b: POP
0000014c: CALLDATALOAD
0000014d: PUSH1 0x01
0000014f: PUSH1 0x01
00000151: PUSH1 0xa0
00000153: SHL
00000154: SUB
00000155: AND
00000156: PUSH2 0x02f5
00000159: JUMP
0000015a: JUMPDEST
0000015b: CALLVALUE
0000015c: DUP1
0000015d: ISZERO
0000015e: PUSH2 0x0166
00000161: JUMPI
00000162: PUSH1 0x00
00000164: DUP1
00000165: REVERT
00000166: JUMPDEST
00000167: POP
00000168: PUSH2 0x00a5
0000016b: PUSH1 0x04
0000016d: DUP1
0000016e: CALLDATASIZE
0000016f: SUB
00000170: PUSH1 0x20
00000172: DUP2
00000173: LT
00000174: ISZERO
00000175: PUSH2 0x017d
00000178: JUMPI
00000179: PUSH1 0x00
0000017b: DUP1
0000017c: REVERT
0000017d: JUMPDEST
0000017e: POP
0000017f: CALLDATALOAD
00000180: PUSH2 0x0301
00000183: JUMP
00000184: JUMPDEST
00000185: CALLVALUE
00000186: DUP1
00000187: ISZERO
00000188: PUSH2 0x0190
0000018b: JUMPI
0000018c: PUSH1 0x00
0000018e: DUP1
0000018f: REVERT
00000190: JUMPDEST
00000191: POP
00000192: PUSH2 0x00a5
00000195: PUSH2 0x031a
00000198: JUMP
00000199: JUMPDEST
0000019a: CALLVALUE
0000019b: DUP1
0000019c: ISZERO
0000019d: PUSH2 0x01a5
000001a0: JUMPI
000001a1: PUSH1 0x00
000001a3: DUP1
000001a4: REVERT
000001a5: JUMPDEST
000001a6: POP
000001a7: PUSH2 0x01c3
000001aa: PUSH1 0x04
000001ac: DUP1
000001ad: CALLDATASIZE
000001ae: SUB
000001af: PUSH1 0x20
000001b1: DUP2
000001b2: LT
000001b3: ISZERO
000001b4: PUSH2 0x01bc
000001b7: JUMPI
000001b8: PUSH1 0x00
000001ba: DUP1
000001bb: REVERT
000001bc: JUMPDEST
000001bd: POP
000001be: CALLDATALOAD
000001bf: PUSH2 0x0361
000001c2: JUMP
000001c3: JUMPDEST
000001c4: PUSH1 0x40
000001c6: DUP1
000001c7: MLOAD
000001c8: SWAP2
000001c9: ISZERO
000001ca: ISZERO
000001cb: DUP3
000001cc: MSTORE
000001cd: MLOAD
000001ce: SWAP1
000001cf: DUP2
000001d0: SWAP1
000001d1: SUB
000001d2: PUSH1 0x20
000001d4: ADD
000001d5: SWAP1
000001d6: RETURN
000001d7: JUMPDEST
000001d8: CALLVALUE
000001d9: DUP1
000001da: ISZERO
000001db: PUSH2 0x01e3
000001de: JUMPI
000001df: PUSH1 0x00
000001e1: DUP1
000001e2: REVERT
000001e3: JUMPDEST
000001e4: POP
000001e5: PUSH2 0x008e
000001e8: PUSH1 0x04
000001ea: DUP1
000001eb: CALLDATASIZE
000001ec: SUB
000001ed: PUSH1 0x20
000001ef: DUP2
000001f0: LT
000001f1: ISZERO
000001f2: PUSH2 0x01fa
000001f5: JUMPI
000001f6: PUSH1 0x00
000001f8: DUP1
000001f9: REVERT
000001fa: JUMPDEST
000001fb: POP
000001fc: CALLDATALOAD
000001fd: PUSH1 0x01
000001ff: PUSH1 0x01
00000201: PUSH1 0xa0
00000203: SHL
00000204: SUB
00000205: AND
00000206: PUSH2 0x0375
00000209: JUMP
0000020a: JUMPDEST
0000020b: CALLVALUE
0000020c: DUP1
0000020d: ISZERO
0000020e: PUSH2 0x0216
00000211: JUMPI
00000212: PUSH1 0x00
00000214: DUP1
00000215: REVERT
00000216: JUMPDEST
00000217: POP
00000218: PUSH2 0x008e
0000021b: PUSH1 0x04
0000021d: DUP1
0000021e: CALLDATASIZE
0000021f: SUB
00000220: PUSH1 0x20
00000222: DUP2
00000223: LT
00000224: ISZERO
00000225: PUSH2 0x022d
00000228: JUMPI
00000229: PUSH1 0x00
0000022b: DUP1
0000022c: REVERT
0000022d: JUMPDEST
0000022e: POP
0000022f: CALLDATALOAD
00000230: PUSH1 0x01
00000232: PUSH1 0x01
00000234: PUSH1 0xa0
00000236: SHL
00000237: SUB
00000238: AND
00000239: PUSH2 0x0440
0000023c: JUMP
0000023d: JUMPDEST
0000023e: PUSH1 0x00
00000240: PUSH2 0x0284
00000243: PUSH1 0x40
00000245: MLOAD
00000246: PUSH1 0x20
00000248: ADD
00000249: DUP1
0000024a: DUP1
0000024b: PUSH19 0x12535413115351539510551253d397d4d313d5
0000025f: PUSH1 0x6a
00000261: SHL
00000262: DUP2
00000263: MSTORE
00000264: POP
00000265: PUSH1 0x13
00000267: ADD
00000268: SWAP1
00000269: POP
0000026a: PUSH1 0x40
0000026c: MLOAD
0000026d: PUSH1 0x20
0000026f: DUP2
00000270: DUP4
00000271: SUB
00000272: SUB
00000273: DUP2
00000274: MSTORE
00000275: SWAP1
00000276: PUSH1 0x40
00000278: MSTORE
00000279: DUP1
0000027a: MLOAD
0000027b: SWAP1
0000027c: PUSH1 0x20
0000027e: ADD
0000027f: KECCAK256
00000280: PUSH2 0x0301
00000283: JUMP
00000284: JUMPDEST
00000285: SWAP1
00000286: POP
00000287: PUSH1 0x40
00000289: MLOAD
0000028a: CALLDATASIZE
0000028b: PUSH1 0x00
0000028d: DUP3
0000028e: CALLDATACOPY
0000028f: PUSH1 0x00
00000291: DUP1
00000292: CALLDATASIZE
00000293: DUP4
00000294: DUP6
00000295: GAS
00000296: DELEGATECALL
00000297: RETURNDATASIZE
00000298: DUP1
00000299: PUSH1 0x00
0000029b: DUP5
0000029c: RETURNDATACOPY
0000029d: DUP2
0000029e: DUP1
0000029f: ISZERO
000002a0: PUSH2 0x02a7
000002a3: JUMPI
000002a4: DUP2
000002a5: DUP5
000002a6: RETURN
000002a7: JUMPDEST
000002a8: DUP2
000002a9: DUP5
000002aa: REVERT
000002ab: JUMPDEST
000002ac: PUSH1 0x00
000002ae: PUSH2 0x02e9
000002b1: PUSH1 0x40
000002b3: MLOAD
000002b4: PUSH1 0x20
000002b6: ADD
000002b7: DUP1
000002b8: DUP1
000002b9: PUSH10 0x13d5d3915497d4d313d5
000002c4: PUSH1 0xb2
000002c6: SHL
000002c7: DUP2
000002c8: MSTORE
000002c9: POP
000002ca: PUSH1 0x0a
000002cc: ADD
000002cd: SWAP1
000002ce: POP
000002cf: PUSH1 0x40
000002d1: MLOAD
000002d2: PUSH1 0x20
000002d4: DUP2
000002d5: DUP4
000002d6: SUB
000002d7: SUB
000002d8: DUP2
000002d9: MSTORE
000002da: SWAP1
000002db: PUSH1 0x40
000002dd: MSTORE
000002de: DUP1
000002df: MLOAD
000002e0: SWAP1
000002e1: PUSH1 0x20
000002e3: ADD
000002e4: KECCAK256
000002e5: PUSH2 0x0301
000002e8: JUMP
000002e9: JUMPDEST
000002ea: SWAP1
000002eb: POP
000002ec: SWAP1
000002ed: JUMP
000002ee: JUMPDEST
000002ef: SLOAD
000002f0: SWAP1
000002f1: JUMP
000002f2: JUMPDEST
000002f3: SWAP1
000002f4: JUMP
000002f5: JUMPDEST
000002f6: PUSH1 0x01
000002f8: PUSH1 0x01
000002fa: PUSH1 0xa0
000002fc: SHL
000002fd: SUB
000002fe: AND
000002ff: SWAP1
00000300: JUMP
00000301: JUMPDEST
00000302: PUSH1 0x00
00000304: PUSH2 0x0314
00000307: PUSH2 0x030f
0000030a: DUP4
0000030b: PUSH2 0x02ee
0000030e: JUMP
0000030f: JUMPDEST
00000310: PUSH2 0x02f2
00000313: JUMP
00000314: JUMPDEST
00000315: SWAP3
00000316: SWAP2
00000317: POP
00000318: POP
00000319: JUMP
0000031a: JUMPDEST
0000031b: PUSH1 0x00
0000031d: PUSH2 0x02e9
00000320: PUSH1 0x40
00000322: MLOAD
00000323: PUSH1 0x20
00000325: ADD
00000326: DUP1
00000327: DUP1
00000328: PUSH19 0x12535413115351539510551253d397d4d313d5
0000033c: PUSH1 0x6a
0000033e: SHL
0000033f: DUP2
00000340: MSTORE
00000341: POP
00000342: PUSH1 0x13
00000344: ADD
00000345: SWAP1
00000346: POP
00000347: PUSH1 0x40
00000349: MLOAD
0000034a: PUSH1 0x20
0000034c: DUP2
0000034d: DUP4
0000034e: SUB
0000034f: SUB
00000350: DUP2
00000351: MSTORE
00000352: SWAP1
00000353: PUSH1 0x40
00000355: MSTORE
00000356: DUP1
00000357: MLOAD
00000358: SWAP1
00000359: PUSH1 0x20
0000035b: ADD
0000035c: KECCAK256
0000035d: PUSH2 0x0301
00000360: JUMP
00000361: JUMPDEST
00000362: PUSH1 0x00
00000364: PUSH1 0x01
00000366: PUSH2 0x036e
00000369: DUP4
0000036a: PUSH2 0x02ee
0000036d: JUMP
0000036e: JUMPDEST
0000036f: EQ
00000370: SWAP3
00000371: SWAP2
00000372: POP
00000373: POP
00000374: JUMP
00000375: JUMPDEST
00000376: PUSH2 0x03b1
00000379: PUSH1 0x40
0000037b: MLOAD
0000037c: PUSH1 0x20
0000037e: ADD
0000037f: DUP1
00000380: DUP1
00000381: PUSH10 0x13d5d3915497d4d313d5
0000038c: PUSH1 0xb2
0000038e: SHL
0000038f: DUP2
00000390: MSTORE
00000391: POP
00000392: PUSH1 0x0a
00000394: ADD
00000395: SWAP1
00000396: POP
00000397: PUSH1 0x40
00000399: MLOAD
0000039a: PUSH1 0x20
0000039c: DUP2
0000039d: DUP4
0000039e: SUB
0000039f: SUB
000003a0: DUP2
000003a1: MSTORE
000003a2: SWAP1
000003a3: PUSH1 0x40
000003a5: MSTORE
000003a6: DUP1
000003a7: MLOAD
000003a8: SWAP1
000003a9: PUSH1 0x20
000003ab: ADD
000003ac: KECCAK256
000003ad: PUSH2 0x0301
000003b0: JUMP
000003b1: JUMPDEST
000003b2: PUSH1 0x01
000003b4: PUSH1 0x01
000003b6: PUSH1 0xa0
000003b8: SHL
000003b9: SUB
000003ba: AND
000003bb: CALLER
000003bc: PUSH1 0x01
000003be: PUSH1 0x01
000003c0: PUSH1 0xa0
000003c2: SHL
000003c3: SUB
000003c4: AND
000003c5: EQ
000003c6: PUSH2 0x0400
000003c9: JUMPI
000003ca: PUSH1 0x40
000003cc: MLOAD
000003cd: PUSH3 0x461bcd
000003d1: PUSH1 0xe5
000003d3: SHL
000003d4: DUP2
000003d5: MSTORE
000003d6: PUSH1 0x04
000003d8: ADD
000003d9: DUP1
000003da: DUP1
000003db: PUSH1 0x20
000003dd: ADD
000003de: DUP3
000003df: DUP2
000003e0: SUB
000003e1: DUP3
000003e2: MSTORE
000003e3: PUSH1 0x2b
000003e5: DUP2
000003e6: MSTORE
000003e7: PUSH1 0x20
000003e9: ADD
000003ea: DUP1
000003eb: PUSH2 0x0528
000003ee: PUSH1 0x2b
000003f0: SWAP2
000003f1: CODECOPY
000003f2: PUSH1 0x40
000003f4: ADD
000003f5: SWAP2
000003f6: POP
000003f7: POP
000003f8: PUSH1 0x40
000003fa: MLOAD
000003fb: DUP1
000003fc: SWAP2
000003fd: SUB
000003fe: SWAP1
000003ff: REVERT
00000400: JUMPDEST
00000401: PUSH2 0x043d
00000404: PUSH1 0x40
00000406: MLOAD
00000407: PUSH1 0x20
00000409: ADD
0000040a: DUP1
0000040b: DUP1
0000040c: PUSH10 0x13d5d3915497d4d313d5
00000417: PUSH1 0xb2
00000419: SHL
0000041a: DUP2
0000041b: MSTORE
0000041c: POP
0000041d: PUSH1 0x0a
0000041f: ADD
00000420: SWAP1
00000421: POP
00000422: PUSH1 0x40
00000424: MLOAD
00000425: PUSH1 0x20
00000427: DUP2
00000428: DUP4
00000429: SUB
0000042a: SUB
0000042b: DUP2
0000042c: MSTORE
0000042d: SWAP1
0000042e: PUSH1 0x40
00000430: MSTORE
00000431: DUP1
00000432: MLOAD
00000433: SWAP1
00000434: PUSH1 0x20
00000436: ADD
00000437: KECCAK256
00000438: DUP3
00000439: PUSH2 0x050d
0000043c: JUMP
0000043d: JUMPDEST
0000043e: POP
0000043f: JUMP
00000440: JUMPDEST
00000441: PUSH2 0x047c
00000444: PUSH1 0x40
00000446: MLOAD
00000447: PUSH1 0x20
00000449: ADD
0000044a: DUP1
0000044b: DUP1
0000044c: PUSH10 0x13d5d3915497d4d313d5
00000457: PUSH1 0xb2
00000459: SHL
0000045a: DUP2
0000045b: MSTORE
0000045c: POP
0000045d: PUSH1 0x0a
0000045f: ADD
00000460: SWAP1
00000461: POP
00000462: PUSH1 0x40
00000464: MLOAD
00000465: PUSH1 0x20
00000467: DUP2
00000468: DUP4
00000469: SUB
0000046a: SUB
0000046b: DUP2
0000046c: MSTORE
0000046d: SWAP1
0000046e: PUSH1 0x40
00000470: MSTORE
00000471: DUP1
00000472: MLOAD
00000473: SWAP1
00000474: PUSH1 0x20
00000476: ADD
00000477: KECCAK256
00000478: PUSH2 0x0301
0000047b: JUMP
0000047c: JUMPDEST
0000047d: PUSH1 0x01
0000047f: PUSH1 0x01
00000481: PUSH1 0xa0
00000483: SHL
00000484: SUB
00000485: AND
00000486: CALLER
00000487: PUSH1 0x01
00000489: PUSH1 0x01
0000048b: PUSH1 0xa0
0000048d: SHL
0000048e: SUB
0000048f: AND
00000490: EQ
00000491: PUSH2 0x04cb
00000494: JUMPI
00000495: PUSH1 0x40
00000497: MLOAD
00000498: PUSH3 0x461bcd
0000049c: PUSH1 0xe5
0000049e: SHL
0000049f: DUP2
000004a0: MSTORE
000004a1: PUSH1 0x04
000004a3: ADD
000004a4: DUP1
000004a5: DUP1
000004a6: PUSH1 0x20
000004a8: ADD
000004a9: DUP3
000004aa: DUP2
000004ab: SUB
000004ac: DUP3
000004ad: MSTORE
000004ae: PUSH1 0x2b
000004b0: DUP2
000004b1: MSTORE
000004b2: PUSH1 0x20
000004b4: ADD
000004b5: DUP1
000004b6: PUSH2 0x0528
000004b9: PUSH1 0x2b
000004bb: SWAP2
000004bc: CODECOPY
000004bd: PUSH1 0x40
000004bf: ADD
000004c0: SWAP2
000004c1: POP
000004c2: POP
000004c3: PUSH1 0x40
000004c5: MLOAD
000004c6: DUP1
000004c7: SWAP2
000004c8: SUB
000004c9: SWAP1
000004ca: REVERT
000004cb: JUMPDEST
000004cc: PUSH2 0x043d
000004cf: PUSH1 0x40
000004d1: MLOAD
000004d2: PUSH1 0x20
000004d4: ADD
000004d5: DUP1
000004d6: DUP1
000004d7: PUSH19 0x12535413115351539510551253d397d4d313d5
000004eb: PUSH1 0x6a
000004ed: SHL
000004ee: DUP2
000004ef: MSTORE
000004f0: POP
000004f1: PUSH1 0x13
000004f3: ADD
000004f4: SWAP1
000004f5: POP
000004f6: PUSH1 0x40
000004f8: MLOAD
000004f9: PUSH1 0x20
000004fb: DUP2
000004fc: DUP4
000004fd: SUB
000004fe: SUB
000004ff: DUP2
00000500: MSTORE
00000501: SWAP1
00000502: PUSH1 0x40
00000504: MSTORE
00000505: DUP1
00000506: MLOAD
00000507: SWAP1
00000508: PUSH1 0x20
0000050a: ADD
0000050b: KECCAK256
0000050c: DUP3
0000050d: JUMPDEST
0000050e: PUSH2 0x051f
00000511: DUP3
00000512: PUSH2 0x051a
00000515: DUP4
00000516: PUSH2 0x02f5
00000519: JUMP
0000051a: JUMPDEST
0000051b: PUSH2 0x0523
0000051e: JUMP
0000051f: JUMPDEST
00000520: POP
00000521: POP
00000522: JUMP
00000523: JUMPDEST
00000524: SWAP1
00000525: SSTORE
00000526: JUMP
00000527: INVALID
00000528: POP
00000529: POP
0000052a: PUSH19 0x6f78792e6f6e6c7950726f78794f776e65723a
0000053e: KECCAK256
0000053f: PUSH14 0x73672073656e646572206e6f7420
0000054e: PUSH16 0x776e6572a26469706673582212201304
0000055f: PC
00000560: STOP
00000561: RETURN
00000562: LOG0
00000563: UNKNOWN(0xF8)
00000564: UNKNOWN(0xB4)
00000565: BASEFEE
00000566: CHAINID
00000567: UNKNOWN(0xCC)
00000568: UNKNOWN(0xDC)
00000569: UNKNOWN(0xE4)
0000056a: UNKNOWN(0xBE)
0000056b: PUSH31

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0x7c7505b2bfe72ca18d6fe14e6d01bcad831116e99b1862101e052b364d238e98
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 108,
    "trace_id": "0x7c7505b2bfe72ca18d6fe14e6d01bcad831116e99b1862101e052b364d238e98",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x9d84ae69",
            "selector": "0x9d84ae69",
            "calldata_variants": [
                "0x9d84ae69",
                "0x9d84ae690000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xaaf10f42",
            "selector": "0xaaf10f42",
            "calldata_variants": [
                "0xaaf10f42",
                "0xaaf10f420000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xbb15ac8e",
            "selector": "0xbb15ac8e",
            "calldata_variants": [
                "0xbb15ac8e",
                "0xbb15ac8e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xcaaee91c",
            "selector": "0xcaaee91c",
            "calldata_variants": [
                "0xcaaee91c",
                "0xcaaee91c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd784d426",
            "selector": "0xd784d426",
            "calldata_variants": [
                "0xd784d426",
                "0xd784d4260000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1ab7710d",
            "selector": "0x1ab7710d",
            "calldata_variants": [
                "0x1ab7710d",
                "0x1ab7710d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x37a440e6",
            "selector": "0x37a440e6",
            "calldata_variants": [
                "0x37a440e6",
                "0x37a440e60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5ced058e",
            "selector": "0x5ced058e",
            "calldata_variants": [
                "0x5ced058e",
                "0x5ced058e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 662,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}