019b477e-bf9e-730b-ab22-efeb428df6e5
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 24561 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 24562 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 102188 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 102189 | capability.graph | complete | 1 / 3 | 1 week ago |
| 102190 | detector.run | complete | 1 / 3 | 1 week ago |
| 102191 | validation.fork | complete | 1 / 3 | 1 week ago |
| 113876 | report.consolidate | complete | 1 / 6 | 1 week ago |
No slither job recorded yet.
OpenAI Codex v0.118.0 (research preview) -------- workdir: /tmp/codex-ujti7c0a model: gpt-5.4 provider: openai approval: never sandbox: read-only reasoning effort: high reasoning summaries: none session id: 019d5ca1-95d4-7003-87a2-7f5b6c5dd4cb -------- user You are a security auditor. Audit this Solidity codebase for exploitable vulnerabilities. Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, oracle manipulation, accounting/invariant breaks, external call patterns, unchecked return values, and dangerous delegatecall. Scope rules: - You MUST fully read `AUDIT_BUNDLE.txt` before concluding. It contains the complete contents of all first-party Solidity sources in this workspace. - Treat `lib/` and `@openzeppelin/` as third-party dependencies; skip them unless there is a concrete misuse angle in first-party code. - If there are only dependency files and no first-party sources, set no_findings=true and explain in summary. Output MUST be valid JSON matching the provided schema. - If you find nothing meaningful: set no_findings=true and findings=[]. - Otherwise: set no_findings=false and include findings with severity/category/title and file/line locations when possible. Output constraints (IMPORTANT): - severity MUST be exactly one of: info, low, medium, high, critical (lowercase). - category MUST be exactly one of: access_control, reentrancy, math, oracle, upgradeability, auth, other. Keep summary short and concrete. warning: Codex could not find system bubblewrap on PATH. Please install bubblewrap with your package manager. Codex will use the vendored bubblewrap in the meantime. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM. ERROR: You've hit your usage limit. Visit https://chatgpt.com/codex/settings/usage to purchase more credits or try again at Apr 8th, 2026 9:11 AM.
{
"codex": {
"ran_at": "2026-04-05T07:53:08.411242+00:00",
"returncode": 1
},
"project": {
"mode": "source",
"file_count": 1,
"import_count": 0,
"first_party_contracts_count": 1
},
"summary": null,
"no_findings": null,
"schema_version": 1
}
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x0055 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH1 0xe0 00000012: SHR 00000013: DUP1 00000014: PUSH4 0x439370b1 00000019: EQ 0000001a: PUSH2 0x005a 0000001d: JUMPI 0000001e: DUP1 0000001f: PUSH4 0x4cdc9c63 00000024: EQ 00000025: PUSH2 0x0064 00000028: JUMPI 00000029: DUP1 0000002a: PUSH4 0x7961bc28 0000002f: EQ 00000030: PUSH2 0x008f 00000033: JUMPI 00000034: DUP1 00000035: PUSH4 0x7c4e9aac 0000003a: EQ 0000003b: PUSH2 0x00e0 0000003e: JUMPI 0000003f: DUP1 00000040: PUSH4 0xbd37f9c6 00000045: EQ 00000046: PUSH2 0x00f7 00000049: JUMPI 0000004a: DUP1 0000004b: PUSH4 0xfc7e286d 00000050: EQ 00000051: PUSH2 0x0132 00000054: JUMPI 00000055: JUMPDEST 00000056: PUSH1 0x00 00000058: DUP1 00000059: REVERT 0000005a: JUMPDEST 0000005b: PUSH2 0x0062 0000005e: PUSH2 0x0197 00000061: JUMP 00000062: JUMPDEST 00000063: STOP 00000064: JUMPDEST 00000065: CALLVALUE 00000066: DUP1 00000067: ISZERO 00000068: PUSH2 0x0070 0000006b: JUMPI 0000006c: PUSH1 0x00 0000006e: DUP1 0000006f: REVERT 00000070: JUMPDEST 00000071: POP 00000072: PUSH2 0x0079 00000075: PUSH2 0x029c 00000078: JUMP 00000079: JUMPDEST 0000007a: PUSH1 0x40 0000007c: MLOAD 0000007d: DUP1 0000007e: DUP3 0000007f: DUP2 00000080: MSTORE 00000081: PUSH1 0x20 00000083: ADD 00000084: SWAP2 00000085: POP 00000086: POP 00000087: PUSH1 0x40 00000089: MLOAD 0000008a: DUP1 0000008b: SWAP2 0000008c: SUB 0000008d: SWAP1 0000008e: RETURN 0000008f: JUMPDEST 00000090: CALLVALUE 00000091: DUP1 00000092: ISZERO 00000093: PUSH2 0x009b 00000096: JUMPI 00000097: PUSH1 0x00 00000099: DUP1 0000009a: REVERT 0000009b: JUMPDEST 0000009c: POP 0000009d: PUSH2 0x00de 000000a0: PUSH1 0x04 000000a2: DUP1 000000a3: CALLDATASIZE 000000a4: SUB 000000a5: PUSH1 0x20 000000a7: DUP2 000000a8: LT 000000a9: ISZERO 000000aa: PUSH2 0x00b2 000000ad: JUMPI 000000ae: PUSH1 0x00 000000b0: DUP1 000000b1: REVERT 000000b2: JUMPDEST 000000b3: DUP2 000000b4: ADD 000000b5: SWAP1 000000b6: DUP1 000000b7: DUP1 000000b8: CALLDATALOAD 000000b9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000ce: AND 000000cf: SWAP1 000000d0: PUSH1 0x20 000000d2: ADD 000000d3: SWAP1 000000d4: SWAP3 000000d5: SWAP2 000000d6: SWAP1 000000d7: POP 000000d8: POP 000000d9: POP 000000da: PUSH2 0x02a2 000000dd: JUMP 000000de: JUMPDEST 000000df: STOP 000000e0: JUMPDEST 000000e1: CALLVALUE 000000e2: DUP1 000000e3: ISZERO 000000e4: PUSH2 0x00ec 000000e7: JUMPI 000000e8: PUSH1 0x00 000000ea: DUP1 000000eb: REVERT 000000ec: JUMPDEST 000000ed: POP 000000ee: PUSH2 0x00f5 000000f1: PUSH2 0x0340 000000f4: JUMP 000000f5: JUMPDEST 000000f6: STOP 000000f7: JUMPDEST 000000f8: CALLVALUE 000000f9: DUP1 000000fa: ISZERO 000000fb: PUSH2 0x0103 000000fe: JUMPI 000000ff: PUSH1 0x00 00000101: DUP1 00000102: REVERT 00000103: JUMPDEST 00000104: POP 00000105: PUSH2 0x0130 00000108: PUSH1 0x04 0000010a: DUP1 0000010b: CALLDATASIZE 0000010c: SUB 0000010d: PUSH1 0x20 0000010f: DUP2 00000110: LT 00000111: ISZERO 00000112: PUSH2 0x011a 00000115: JUMPI 00000116: PUSH1 0x00 00000118: DUP1 00000119: REVERT 0000011a: JUMPDEST 0000011b: DUP2 0000011c: ADD 0000011d: SWAP1 0000011e: DUP1 0000011f: DUP1 00000120: CALLDATALOAD 00000121: SWAP1 00000122: PUSH1 0x20 00000124: ADD 00000125: SWAP1 00000126: SWAP3 00000127: SWAP2 00000128: SWAP1 00000129: POP 0000012a: POP 0000012b: POP 0000012c: PUSH2 0x03c3 0000012f: JUMP 00000130: JUMPDEST 00000131: STOP 00000132: JUMPDEST 00000133: CALLVALUE 00000134: DUP1 00000135: ISZERO 00000136: PUSH2 0x013e 00000139: JUMPI 0000013a: PUSH1 0x00 0000013c: DUP1 0000013d: REVERT 0000013e: JUMPDEST 0000013f: POP 00000140: PUSH2 0x0181 00000143: PUSH1 0x04 00000145: DUP1 00000146: CALLDATASIZE 00000147: SUB 00000148: PUSH1 0x20 0000014a: DUP2 0000014b: LT 0000014c: ISZERO 0000014d: PUSH2 0x0155 00000150: JUMPI 00000151: PUSH1 0x00 00000153: DUP1 00000154: REVERT 00000155: JUMPDEST 00000156: DUP2 00000157: ADD 00000158: SWAP1 00000159: DUP1 0000015a: DUP1 0000015b: CALLDATALOAD 0000015c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000171: AND 00000172: SWAP1 00000173: PUSH1 0x20 00000175: ADD 00000176: SWAP1 00000177: SWAP3 00000178: SWAP2 00000179: SWAP1 0000017a: POP 0000017b: POP 0000017c: POP 0000017d: PUSH2 0x0483 00000180: JUMP 00000181: JUMPDEST 00000182: PUSH1 0x40 00000184: MLOAD 00000185: DUP1 00000186: DUP3 00000187: DUP2 00000188: MSTORE 00000189: PUSH1 0x20 0000018b: ADD 0000018c: SWAP2 0000018d: POP 0000018e: POP 0000018f: PUSH1 0x40 00000191: MLOAD 00000192: DUP1 00000193: SWAP2 00000194: SUB 00000195: SWAP1 00000196: RETURN 00000197: JUMPDEST 00000198: PUSH1 0x01 0000019a: ISZERO 0000019b: ISZERO 0000019c: PUSH1 0x01 0000019e: PUSH1 0x14 000001a0: SWAP1 000001a1: SLOAD 000001a2: SWAP1 000001a3: PUSH2 0x0100 000001a6: EXP 000001a7: SWAP1 000001a8: DIV 000001a9: PUSH1 0xff 000001ab: AND 000001ac: ISZERO 000001ad: ISZERO 000001ae: EQ 000001af: PUSH2 0x01b7 000001b2: JUMPI 000001b3: PUSH1 0x00 000001b5: DUP1 000001b6: REVERT 000001b7: JUMPDEST 000001b8: PUSH1 0x00 000001ba: CALLVALUE 000001bb: SWAP1 000001bc: POP 000001bd: PUSH1 0x00 000001bf: PUSH1 0x64 000001c1: DUP3 000001c2: DUP2 000001c3: PUSH2 0x01c8 000001c6: JUMPI 000001c7: INVALID 000001c8: JUMPDEST 000001c9: DIV 000001ca: SWAP1 000001cb: POP 000001cc: DUP1 000001cd: DUP3 000001ce: SUB 000001cf: SWAP2 000001d0: POP 000001d1: PUSH1 0x01 000001d3: PUSH1 0x00 000001d5: SWAP1 000001d6: SLOAD 000001d7: SWAP1 000001d8: PUSH2 0x0100 000001db: EXP 000001dc: SWAP1 000001dd: DIV 000001de: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001f3: AND 000001f4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000209: AND 0000020a: PUSH2 0x08fc 0000020d: DUP3 0000020e: SWAP1 0000020f: DUP2 00000210: ISZERO 00000211: MUL 00000212: SWAP1 00000213: PUSH1 0x40 00000215: MLOAD 00000216: PUSH1 0x00 00000218: PUSH1 0x40 0000021a: MLOAD 0000021b: DUP1 0000021c: DUP4 0000021d: SUB 0000021e: DUP2 0000021f: DUP6 00000220: DUP9 00000221: DUP9 00000222: CALL 00000223: SWAP4 00000224: POP 00000225: POP 00000226: POP 00000227: POP 00000228: ISZERO 00000229: DUP1 0000022a: ISZERO 0000022b: PUSH2 0x0238 0000022e: JUMPI 0000022f: RETURNDATASIZE 00000230: PUSH1 0x00 00000232: DUP1 00000233: RETURNDATACOPY 00000234: RETURNDATASIZE 00000235: PUSH1 0x00 00000237: REVERT 00000238: JUMPDEST 00000239: POP 0000023a: DUP2 0000023b: PUSH1 0x00 0000023d: DUP1 0000023e: CALLER 0000023f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000254: AND 00000255: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000026a: AND 0000026b: DUP2 0000026c: MSTORE 0000026d: PUSH1 0x20 0000026f: ADD 00000270: SWAP1 00000271: DUP2 00000272: MSTORE 00000273: PUSH1 0x20 00000275: ADD 00000276: PUSH1 0x00 00000278: KECCAK256 00000279: PUSH1 0x00 0000027b: DUP3 0000027c: DUP3 0000027d: SLOAD 0000027e: ADD 0000027f: SWAP3 00000280: POP 00000281: POP 00000282: DUP2 00000283: SWAP1 00000284: SSTORE 00000285: POP 00000286: PUSH1 0x03 00000288: SLOAD 00000289: SELFBALANCE 0000028a: GT 0000028b: ISZERO 0000028c: PUSH2 0x0298 0000028f: JUMPI 00000290: PUSH2 0x0297 00000293: PUSH2 0x049b 00000296: JUMP 00000297: JUMPDEST 00000298: JUMPDEST 00000299: POP 0000029a: POP 0000029b: JUMP 0000029c: JUMPDEST 0000029d: PUSH1 0x04 0000029f: SLOAD 000002a0: DUP2 000002a1: JUMP 000002a2: JUMPDEST 000002a3: PUSH1 0x01 000002a5: PUSH1 0x00 000002a7: SWAP1 000002a8: SLOAD 000002a9: SWAP1 000002aa: PUSH2 0x0100 000002ad: EXP 000002ae: SWAP1 000002af: DIV 000002b0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000002c5: AND 000002c6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000002db: AND 000002dc: CALLER 000002dd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000002f2: AND 000002f3: EQ 000002f4: PUSH2 0x02fc 000002f7: JUMPI 000002f8: PUSH1 0x00 000002fa: DUP1 000002fb: REVERT 000002fc: JUMPDEST 000002fd: DUP1 000002fe: PUSH1 0x05 00000300: PUSH1 0x00 00000302: PUSH2 0x0100 00000305: EXP 00000306: DUP2 00000307: SLOAD 00000308: DUP2 00000309: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000031e: MUL 0000031f: NOT 00000320: AND 00000321: SWAP1 00000322: DUP4 00000323: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000338: AND 00000339: MUL 0000033a: OR 0000033b: SWAP1 0000033c: SSTORE 0000033d: POP 0000033e: POP 0000033f: JUMP 00000340: JUMPDEST 00000341: PUSH1 0x01 00000343: ISZERO 00000344: ISZERO 00000345: PUSH1 0x01 00000347: PUSH1 0x14 00000349: SWAP1 0000034a: SLOAD 0000034b: SWAP1 0000034c: PUSH2 0x0100 0000034f: EXP 00000350: SWAP1 00000351: DIV 00000352: PUSH1 0xff 00000354: AND 00000355: ISZERO 00000356: ISZERO 00000357: EQ 00000358: DUP1 00000359: ISZERO 0000035a: PUSH2 0x03b0 0000035d: JUMPI 0000035e: POP 0000035f: PUSH1 0x05 00000361: PUSH1 0x00 00000363: SWAP1 00000364: SLOAD 00000365: SWAP1 00000366: PUSH2 0x0100 00000369: EXP 0000036a: SWAP1 0000036b: DIV 0000036c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000381: AND 00000382: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000397: AND 00000398: CALLER 00000399: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003ae: AND 000003af: EQ 000003b0: JUMPDEST 000003b1: PUSH2 0x03b9 000003b4: JUMPI 000003b5: PUSH1 0x00 000003b7: DUP1 000003b8: REVERT 000003b9: JUMPDEST 000003ba: PUSH2 0x03c1 000003bd: PUSH2 0x049b 000003c0: JUMP 000003c1: JUMPDEST 000003c2: JUMP 000003c3: JUMPDEST 000003c4: PUSH1 0x01 000003c6: PUSH1 0x00 000003c8: SWAP1 000003c9: SLOAD 000003ca: SWAP1 000003cb: PUSH2 0x0100 000003ce: EXP 000003cf: SWAP1 000003d0: DIV 000003d1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003e6: AND 000003e7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003fc: AND 000003fd: CALLER 000003fe: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000413: AND 00000414: EQ 00000415: DUP1 00000416: ISZERO 00000417: PUSH2 0x0429 0000041a: JUMPI 0000041b: POP 0000041c: PUSH10 0x010f0cf064dd59200000 00000427: DUP2 00000428: LT 00000429: JUMPDEST 0000042a: DUP1 0000042b: ISZERO 0000042c: PUSH2 0x043d 0000042f: JUMPI 00000430: POP 00000431: PUSH9 0x056bc75e2d63100000 0000043b: DUP2 0000043c: GT 0000043d: JUMPDEST 0000043e: PUSH2 0x0446 00000441: JUMPI 00000442: PUSH1 0x00 00000444: DUP1 00000445: REVERT 00000446: JUMPDEST 00000447: PUSH1 0x00 00000449: PUSH1 0x03 0000044b: SLOAD 0000044c: EQ 0000044d: PUSH2 0x045f 00000450: JUMPI 00000451: PUSH1 0x03 00000453: SLOAD 00000454: DUP2 00000455: LT 00000456: PUSH2 0x045e 00000459: JUMPI 0000045a: PUSH1 0x00 0000045c: DUP1 0000045d: REVERT 0000045e: JUMPDEST 0000045f: JUMPDEST 00000460: PUSH1 0x01 00000462: DUP1 00000463: PUSH1 0x14 00000465: PUSH2 0x0100 00000468: EXP 00000469: DUP2 0000046a: SLOAD 0000046b: DUP2 0000046c: PUSH1 0xff 0000046e: MUL 0000046f: NOT 00000470: AND 00000471: SWAP1 00000472: DUP4 00000473: ISZERO 00000474: ISZERO 00000475: MUL 00000476: OR 00000477: SWAP1 00000478: SSTORE 00000479: POP 0000047a: DUP1 0000047b: PUSH1 0x03 0000047d: DUP2 0000047e: SWAP1 0000047f: SSTORE 00000480: POP 00000481: POP 00000482: JUMP 00000483: JUMPDEST 00000484: PUSH1 0x00 00000486: PUSH1 0x20 00000488: MSTORE 00000489: DUP1 0000048a: PUSH1 0x00 0000048c: MSTORE 0000048d: PUSH1 0x40 0000048f: PUSH1 0x00 00000491: KECCAK256 00000492: PUSH1 0x00 00000494: SWAP2 00000495: POP 00000496: SWAP1 00000497: POP 00000498: SLOAD 00000499: DUP2 0000049a: JUMP 0000049b: JUMPDEST 0000049c: NUMBER 0000049d: PUSH1 0x04 0000049f: DUP2 000004a0: SWAP1 000004a1: SSTORE 000004a2: POP 000004a3: PUSH1 0x00 000004a5: PUSH20 0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2 000004ba: SWAP1 000004bb: POP 000004bc: PUSH1 0x00 000004be: PUSH20 0xed7c1848fa90e6cda4faac7f61752857461af284 000004d3: SWAP1 000004d4: POP 000004d5: PUSH1 0x00 000004d7: PUSH20 0x93bf14c7cf7250b09d78d4eadfd79fca01bad9f8 000004ec: SWAP1 000004ed: POP 000004ee: PUSH1 0x00 000004f0: PUSH20 0x5c69bee701ef814a2b6a3edd4b1652cb9cc5aa6f 00000505: SWAP1 00000506: POP 00000507: PUSH1 0x00 00000509: DUP2 0000050a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000051f: AND 00000520: PUSH4 0xe6a43905 00000525: DUP6 00000526: DUP8 00000527: PUSH1 0x40 00000529: MLOAD 0000052a: DUP4 0000052b: PUSH4 0xffffffff 00000530: AND 00000531: PUSH1 0xe0 00000533: SHL 00000534: DUP2 00000535: MSTORE 00000536: PUSH1 0x04 00000538: ADD 00000539: DUP1 0000053a: DUP4 0000053b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000550: AND 00000551: DUP2 00000552: MSTORE 00000553: PUSH1 0x20 00000555: ADD 00000556: DUP3 00000557: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000056c: AND 0000056d: DUP2 0000056e: MSTORE 0000056f: PUSH1 0x20 00000571: ADD 00000572: SWAP3 00000573: POP 00000574: POP 00000575: POP 00000576: PUSH1 0x20 00000578: PUSH1 0x40 0000057a: MLOAD 0000057b: DUP1 0000057c: DUP4 0000057d: SUB 0000057e: DUP2 0000057f: DUP7 00000580: DUP1 00000581: EXTCODESIZE 00000582: ISZERO 00000583: DUP1 00000584: ISZERO 00000585: PUSH2 0x058d 00000588: JUMPI 00000589: PUSH1 0x00 0000058b: DUP1 0000058c: REVERT 0000058d: JUMPDEST 0000058e: POP 0000058f: GAS 00000590: STATICCALL 00000591: ISZERO 00000592: DUP1 00000593: ISZERO 00000594: PUSH2 0x05a1 00000597: JUMPI 00000598: RETURNDATASIZE 00000599: PUSH1 0x00 0000059b: DUP1 0000059c: RETURNDATACOPY 0000059d: RETURNDATASIZE 0000059e: PUSH1 0x00 000005a0: REVERT 000005a1: JUMPDEST 000005a2: POP 000005a3: POP 000005a4: POP 000005a5: POP 000005a6: PUSH1 0x40 000005a8: MLOAD 000005a9: RETURNDATASIZE 000005aa: PUSH1 0x20 000005ac: DUP2 000005ad: LT 000005ae: ISZERO 000005af: PUSH2 0x05b7 000005b2: JUMPI 000005b3: PUSH1 0x00 000005b5: DUP1 000005b6: REVERT 000005b7: JUMPDEST 000005b8: DUP2 000005b9: ADD 000005ba: SWAP1 000005bb: DUP1 000005bc: DUP1 000005bd: MLOAD 000005be: SWAP1 000005bf: PUSH1 0x20 000005c1: ADD 000005c2: SWAP1 000005c3: SWAP3 000005c4: SWAP2 000005c5: SWAP1 000005c6: POP 000005c7: POP 000005c8: POP 000005c9: SWAP1 000005ca: POP 000005cb: PUSH1 0x00 000005cd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000005e2: AND 000005e3: DUP2 000005e4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000005f9: AND 000005fa: EQ 000005fb: ISZERO 000005fc: PUSH2 0x06c4 000005ff: JUMPI 00000600: DUP2 00000601: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000616: AND 00000617: PUSH4 0xc9c65396 0000061c: DUP6 0000061d: DUP8 0000061e: PUSH1 0x40 00000620: MLOAD 00000621: DUP4 00000622: PUSH4 0xffffffff 00000627: AND 00000628: PUSH1 0xe0 0000062a: SHL 0000062b: DUP2 0000062c: MSTORE 0000062d: PUSH1 0x04 0000062f: ADD 00000630: DUP1 00000631: DUP4 00000632: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000647: AND 00000648: DUP2 00000649: MSTORE 0000064a: PUSH1 0x20 0000064c: ADD 0000064d: DUP3 0000064e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000663: AND 00000664: DUP2 00000665: MSTORE 00000666: PUSH1 0x20 00000668: ADD 00000669: SWAP3 0000066a: POP 0000066b: POP 0000066c: POP 0000066d: PUSH1 0x20 0000066f: PUSH1 0x40 00000671: MLOAD 00000672: DUP1 00000673: DUP4 00000674: SUB 00000675: DUP2 00000676: PUSH1 0x00 00000678: DUP8 00000679: DUP1 0000067a: EXTCODESIZE 0000067b: ISZERO 0000067c: DUP1 0000067d: ISZERO 0000067e: PUSH2 0x0686 00000681: JUMPI 00000682: PUSH1 0x00 00000684: DUP1 00000685: REVERT 00000686: JUMPDEST 00000687: POP 00000688: GAS 00000689: CALL 0000068a: ISZERO 0000068b: DUP1 0000068c: ISZERO 0000068d: PUSH2 0x069a 00000690: JUMPI 00000691: RETURNDATASIZE 00000692: PUSH1 0x00 00000694: DUP1 00000695: RETURNDATACOPY 00000696: RETURNDATASIZE 00000697: PUSH1 0x00 00000699: REVERT 0000069a: JUMPDEST 0000069b: POP 0000069c: POP 0000069d: POP 0000069e: POP 0000069f: PUSH1 0x40 000006a1: MLOAD 000006a2: RETURNDATASIZE 000006a3: PUSH1 0x20 000006a5: DUP2 000006a6: LT 000006a7: ISZERO 000006a8: PUSH2 0x06b0 000006ab: JUMPI 000006ac: PUSH1 0x00 000006ae: DUP1 000006af: REVERT 000006b0: JUMPDEST 000006b1: DUP2 000006b2: ADD 000006b3: SWAP1 000006b4: DUP1 000006b5: DUP1 000006b6: MLOAD 000006b7: SWAP1 000006b8: PUSH1 0x20 000006ba: ADD 000006bb: SWAP1 000006bc: SWAP3 000006bd: SWAP2 000006be: SWAP1 000006bf: POP 000006c0: POP 000006c1: POP 000006c2: SWAP1 000006c3: POP 000006c4: JUMPDEST 000006c5: PUSH1 0x00 000006c7: SELFBALANCE 000006c8: SWAP1 000006c9: POP 000006ca: DUP6 000006cb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000006e0: AND 000006e1: PUSH4 0xd0e30db0 000006e6: DUP3 000006e7: PUSH1 0x40 000006e9: MLOAD 000006ea: DUP3 000006eb: PUSH4 0xffffffff 000006f0: AND 000006f1: PUSH1 0xe0 000006f3: SHL 000006f4: DUP2 000006f5: MSTORE 000006f6: PUSH1 0x04 000006f8: ADD 000006f9: PUSH1 0x00 000006fb: PUSH1 0x40 000006fd: MLOAD 000006fe: DUP1 000006ff: DUP4 00000700: SUB 00000701: DUP2 00000702: DUP6 00000703: DUP9 00000704: DUP1 00000705: EXTCODESIZE 00000706: ISZERO 00000707: DUP1 00000708: ISZERO 00000709: PUSH2 0x0711 0000070c: JUMPI 0000070d: PUSH1 0x00 0000070f: DUP1 00000710: REVERT 00000711: JUMPDEST 00000712: POP 00000713: GAS 00000714: CALL 00000715: ISZERO 00000716: DUP1 00000717: ISZERO 00000718: PUSH2 0x0725 0000071b: JUMPI 0000071c: RETURNDATASIZE 0000071d: PUSH1 0x00 0000071f: DUP1 00000720: RETURNDATACOPY 00000721: RETURNDATASIZE 00000722: PUSH1 0x00 00000724: REVERT 00000725: JUMPDEST 00000726: POP 00000727: POP 00000728: POP 00000729: POP 0000072a: POP 0000072b: DUP5 0000072c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000741: AND 00000742: PUSH4 0xa9059cbb 00000747: DUP4 00000748: PUSH10 0xd3c21bcecceda1000000 00000753: PUSH1 0x40 00000755: MLOAD 00000756: DUP4 00000757: PUSH4 0xffffffff 0000075c: AND 0000075d: PUSH1 0xe0 0000075f: SHL 00000760: DUP2 00000761: MSTORE 00000762: PUSH1 0x04 00000764: ADD 00000765: DUP1 00000766: DUP4 00000767: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000077c: AND 0000077d: DUP2 0000077e: MSTORE 0000077f: PUSH1 0x20 00000781: ADD 00000782: DUP3 00000783: DUP2 00000784: MSTORE 00000785: PUSH1 0x20 00000787: ADD 00000788: SWAP3 00000789: POP 0000078a: POP 0000078b: POP 0000078c: PUSH1 0x20 0000078e: PUSH1 0x40 00000790: MLOAD 00000791: DUP1 00000792: DUP4 00000793: SUB 00000794: DUP2 00000795: PUSH1 0x00 00000797: DUP8 00000798: DUP1 00000799: EXTCODESIZE 0000079a: ISZERO 0000079b: DUP1 0000079c: ISZERO 0000079d: PUSH2 0x07a5 000007a0: JUMPI 000007a1: PUSH1 0x00 000007a3: DUP1 000007a4: REVERT 000007a5: JUMPDEST 000007a6: POP 000007a7: GAS 000007a8: CALL 000007a9: ISZERO 000007aa: DUP1 000007ab: ISZERO 000007ac: PUSH2 0x07b9 000007af: JUMPI 000007b0: RETURNDATASIZE 000007b1: PUSH1 0x00 000007b3: DUP1 000007b4: RETURNDATACOPY 000007b5: RETURNDATASIZE 000007b6: PUSH1 0x00 000007b8: REVERT 000007b9: JUMPDEST 000007ba: POP 000007bb: POP 000007bc: POP 000007bd: POP 000007be: PUSH1 0x40 000007c0: MLOAD 000007c1: RETURNDATASIZE 000007c2: PUSH1 0x20 000007c4: DUP2 000007c5: LT 000007c6: ISZERO 000007c7: PUSH2 0x07cf 000007ca: JUMPI 000007cb: PUSH1 0x00 000007cd: DUP1 000007ce: REVERT 000007cf: JUMPDEST 000007d0: DUP2 000007d1: ADD 000007d2: SWAP1 000007d3: DUP1 000007d4: DUP1 000007d5: MLOAD 000007d6: SWAP1 000007d7: PUSH1 0x20 000007d9: ADD 000007da: SWAP1 000007db: SWAP3 000007dc: SWAP2 000007dd: SWAP1 000007de: POP 000007df: POP 000007e0: POP 000007e1: POP 000007e2: DUP6 000007e3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000007f8: AND 000007f9: PUSH4 0xa9059cbb 000007fe: DUP4 000007ff: DUP4 00000800: PUSH1 0x40 00000802: MLOAD 00000803: DUP4 00000804: PUSH4 0xffffffff 00000809: AND 0000080a: PUSH1 0xe0 0000080c: SHL 0000080d: DUP2 0000080e: MSTORE 0000080f: PUSH1 0x04 00000811: ADD 00000812: DUP1 00000813: DUP4 00000814: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000829: AND 0000082a: DUP2 0000082b: MSTORE 0000082c: PUSH1 0x20 0000082e: ADD 0000082f: DUP3 00000830: DUP2 00000831: MSTORE 00000832: PUSH1 0x20 00000834: ADD 00000835: SWAP3 00000836: POP 00000837: POP 00000838: POP 00000839: PUSH1 0x20 0000083b: PUSH1 0x40 0000083d: MLOAD 0000083e: DUP1 0000083f: DUP4 00000840: SUB 00000841: DUP2 00000842: PUSH1 0x00 00000844: DUP8 00000845: DUP1 00000846: EXTCODESIZE 00000847: ISZERO 00000848: DUP1 00000849: ISZERO 0000084a: PUSH2 0x0852 0000084d: JUMPI 0000084e: PUSH1 0x00 00000850: DUP1 00000851: REVERT 00000852: JUMPDEST 00000853: POP 00000854: GAS 00000855: CALL 00000856: ISZERO 00000857: DUP1 00000858: ISZERO 00000859: PUSH2 0x0866 0000085c: JUMPI 0000085d: RETURNDATASIZE 0000085e: PUSH1 0x00 00000860: DUP1 00000861: RETURNDATACOPY 00000862: RETURNDATASIZE 00000863: PUSH1 0x00 00000865: REVERT 00000866: JUMPDEST 00000867: POP 00000868: POP 00000869: POP 0000086a: POP 0000086b: PUSH1 0x40 0000086d: MLOAD 0000086e: RETURNDATASIZE 0000086f: PUSH1 0x20 00000871: DUP2 00000872: LT 00000873: ISZERO 00000874: PUSH2 0x087c 00000877: JUMPI 00000878: PUSH1 0x00 0000087a: DUP1 0000087b: REVERT 0000087c: JUMPDEST 0000087d: DUP2 0000087e: ADD 0000087f: SWAP1 00000880: DUP1 00000881: DUP1 00000882: MLOAD 00000883: SWAP1 00000884: PUSH1 0x20 00000886: ADD 00000887: SWAP1 00000888: SWAP3 00000889: SWAP2 0000088a: SWAP1 0000088b: POP 0000088c: POP 0000088d: POP 0000088e: POP 0000088f: DUP2 00000890: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000008a5: AND 000008a6: PUSH4 0x6a627842 000008ab: DUP6 000008ac: PUSH1 0x40 000008ae: MLOAD 000008af: DUP3 000008b0: PUSH4 0xffffffff 000008b5: AND 000008b6: PUSH1 0xe0 000008b8: SHL 000008b9: DUP2 000008ba: MSTORE 000008bb: PUSH1 0x04 000008bd: ADD 000008be: DUP1 000008bf: DUP3 000008c0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000008d5: AND 000008d6: DUP2 000008d7: MSTORE 000008d8: PUSH1 0x20 000008da: ADD 000008db: SWAP2 000008dc: POP 000008dd: POP 000008de: PUSH1 0x20 000008e0: PUSH1 0x40 000008e2: MLOAD 000008e3: DUP1 000008e4: DUP4 000008e5: SUB 000008e6: DUP2 000008e7: PUSH1 0x00 000008e9: DUP8 000008ea: DUP1 000008eb: EXTCODESIZE 000008ec: ISZERO 000008ed: DUP1 000008ee: ISZERO 000008ef: PUSH2 0x08f7 000008f2: JUMPI 000008f3: PUSH1 0x00 000008f5: DUP1 000008f6: REVERT 000008f7: JUMPDEST 000008f8: POP 000008f9: GAS 000008fa: CALL 000008fb: ISZERO 000008fc: DUP1 000008fd: ISZERO 000008fe: PUSH2 0x090b 00000901: JUMPI 00000902: RETURNDATASIZE 00000903: PUSH1 0x00 00000905: DUP1 00000906: RETURNDATACOPY 00000907: RETURNDATASIZE 00000908: PUSH1 0x00 0000090a: REVERT 0000090b: JUMPDEST 0000090c: POP 0000090d: POP 0000090e: POP 0000090f: POP 00000910: PUSH1 0x40 00000912: MLOAD 00000913: RETURNDATASIZE 00000914: PUSH1 0x20 00000916: DUP2 00000917: LT 00000918: ISZERO 00000919: PUSH2 0x0921 0000091c: JUMPI 0000091d: PUSH1 0x00 0000091f: DUP1 00000920: REVERT 00000921: JUMPDEST 00000922: DUP2 00000923: ADD 00000924: SWAP1 00000925: DUP1 00000926: DUP1 00000927: MLOAD 00000928: SWAP1 00000929: PUSH1 0x20 0000092b: ADD 0000092c: SWAP1 0000092d: SWAP3 0000092e: SWAP2 0000092f: SWAP1 00000930: POP 00000931: POP 00000932: POP 00000933: POP 00000934: DUP4 00000935: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000094a: AND 0000094b: PUSH4 0x9a48b7ba 00000950: DUP3 00000951: DUP5 00000952: NUMBER 00000953: PUSH1 0x40 00000955: MLOAD 00000956: DUP5 00000957: PUSH4 0xffffffff 0000095c: AND 0000095d: PUSH1 0xe0 0000095f: SHL 00000960: DUP2 00000961: MSTORE 00000962: PUSH1 0x04 00000964: ADD 00000965: DUP1 00000966: DUP5 00000967: DUP2 00000968: MSTORE 00000969: PUSH1 0x20 0000096b: ADD 0000096c: DUP4 0000096d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000982: AND 00000983: DUP2 00000984: MSTORE 00000985: PUSH1 0x20 00000987: ADD 00000988: DUP3 00000989: DUP2 0000098a: MSTORE 0000098b: PUSH1 0x20 0000098d: ADD 0000098e: SWAP4 0000098f: POP 00000990: POP 00000991: POP 00000992: POP 00000993: PUSH1 0x00 00000995: PUSH1 0x40 00000997: MLOAD 00000998: DUP1 00000999: DUP4 0000099a: SUB 0000099b: DUP2 0000099c: PUSH1 0x00 0000099e: DUP8 0000099f: DUP1 000009a0: EXTCODESIZE 000009a1: ISZERO 000009a2: DUP1 000009a3: ISZERO 000009a4: PUSH2 0x09ac 000009a7: JUMPI 000009a8: PUSH1 0x00 000009aa: DUP1 000009ab: REVERT 000009ac: JUMPDEST 000009ad: POP 000009ae: GAS 000009af: CALL 000009b0: ISZERO 000009b1: DUP1 000009b2: ISZERO 000009b3: PUSH2 0x09c0 000009b6: JUMPI 000009b7: RETURNDATASIZE 000009b8: PUSH1 0x00 000009ba: DUP1 000009bb: RETURNDATACOPY 000009bc: RETURNDATASIZE 000009bd: PUSH1 0x00 000009bf: REVERT 000009c0: JUMPDEST 000009c1: POP 000009c2: POP 000009c3: POP 000009c4: POP 000009c5: PUSH1 0x02 000009c7: PUSH1 0x00 000009c9: PUSH2 0x0100 000009cc: EXP 000009cd: DUP2 000009ce: SLOAD 000009cf: SWAP1 000009d0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000009e5: MUL 000009e6: NOT 000009e7: AND 000009e8: SWAP1 000009e9: SSTORE 000009ea: PUSH1 0x01 000009ec: PUSH1 0x14 000009ee: PUSH2 0x0100 000009f1: EXP 000009f2: DUP2 000009f3: SLOAD 000009f4: SWAP1 000009f5: PUSH1 0xff 000009f7: MUL 000009f8: NOT 000009f9: AND 000009fa: SWAP1 000009fb: SSTORE 000009fc: PUSH1 0x01 000009fe: PUSH1 0x00 00000a00: PUSH2 0x0100 00000a03: EXP 00000a04: DUP2 00000a05: SLOAD 00000a06: SWAP1 00000a07: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000a1c: MUL 00000a1d: NOT 00000a1e: AND 00000a1f: SWAP1 00000a20: SSTORE 00000a21: PUSH1 0x03 00000a23: PUSH1 0x00 00000a25: SWAP1 00000a26: SSTORE 00000a27: PUSH1 0x05 00000a29: PUSH1 0x00 00000a2b: PUSH2 0x0100 00000a2e: EXP 00000a2f: DUP2 00000a30: SLOAD 00000a31: SWAP1 00000a32: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000a47: MUL 00000a48: NOT 00000a49: AND 00000a4a: SWAP1 00000a4b: SSTORE 00000a4c: POP 00000a4d: POP 00000a4e: POP 00000a4f: POP 00000a50: POP 00000a51: POP 00000a52: JUMP 00000a53: INVALID 00000a54: LOG2 00000a55: PUSH5 0x6970667358 00000a5b: UNKNOWN(0x22) 00000a5c: SLT 00000a5d: KECCAK256 00000a5e: UNKNOWN(0xAB) 00000a5f: DIFFICULTY 00000a60: ADD 00000a61: SSTORE 00000a62: RETURNDATASIZE 00000a63: MSTORE8 00000a64: SWAP3 00000a65: SSTORE 00000a66: DUP9 00000a67: PUSH4 0x623635e7 00000a6c: COINBASE 00000a6d: PUSH5 0x3a1a776456 00000a73: PUSH30
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| medium | other | detector | Untrusted CALL target/value reachable | 45 | yes | yes |
viewtrace_id: 0x6fe8bff3f0055913c635fde9d2b34ec06380ed87b2e498d5f1b12e6c3982e70e
call_targets:
0x31a188024fcd6e462abf157f879fb7da37d6ab2f, 0x5c8403a2617aca5c86946e32e14148776e37f72a
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x6fe8bff3f0055913c635fde9d2b34ec06380ed87b2e498d5f1b12e6c3982e70e",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x31a188024fcd6e462abf157f879fb7da37d6ab2f",
"0x5c8403a2617aca5c86946e32e14148776e37f72a"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x439370b1",
"selector": "0x439370b1",
"calldata_variants": [
"0x439370b1",
"0x439370b10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4cdc9c63",
"selector": "0x4cdc9c63",
"calldata_variants": [
"0x4cdc9c63",
"0x4cdc9c630000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x7961bc28",
"selector": "0x7961bc28",
"calldata_variants": [
"0x7961bc28",
"0x7961bc280000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x7c4e9aac",
"selector": "0x7c4e9aac",
"calldata_variants": [
"0x7c4e9aac",
"0x7c4e9aac0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xbd37f9c6",
"selector": "0xbd37f9c6",
"calldata_variants": [
"0xbd37f9c6",
"0xbd37f9c60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfc7e286d",
"selector": "0xfc7e286d",
"calldata_variants": [
"0xfc7e286d",
"0xfc7e286d0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 546,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1673,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1812,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 7,
"guards_detected": [
{
"pc": 732,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 920,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1021,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
],
"untrusted_call_count": 7
}
|
| medium | other | detector | ETH value transfer possible | 40 | yes | yes |
viewtrace_id: 0x6fe8bff3f0055913c635fde9d2b34ec06380ed87b2e498d5f1b12e6c3982e70e
call_targets:
0x31a188024fcd6e462abf157f879fb7da37d6ab2f, 0x5c8403a2617aca5c86946e32e14148776e37f72a
target_varies:
yes
classification:
target_varies
validation_json{
"sink": "CALL",
"errors": 0,
"status": "confirmed",
"attempts": 1,
"trace_id": "0x6fe8bff3f0055913c635fde9d2b34ec06380ed87b2e498d5f1b12e6c3982e70e",
"confirmed": true,
"trace_mode": "callTracer",
"call_targets": [
"0x31a188024fcd6e462abf157f879fb7da37d6ab2f",
"0x5c8403a2617aca5c86946e32e14148776e37f72a"
],
"matched_probe": null,
"target_varies": true,
"classification": "target_varies"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x439370b1",
"selector": "0x439370b1",
"calldata_variants": [
"0x439370b1",
"0x439370b10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4cdc9c63",
"selector": "0x4cdc9c63",
"calldata_variants": [
"0x4cdc9c63",
"0x4cdc9c630000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x7961bc28",
"selector": "0x7961bc28",
"calldata_variants": [
"0x7961bc28",
"0x7961bc280000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x7c4e9aac",
"selector": "0x7c4e9aac",
"calldata_variants": [
"0x7c4e9aac",
"0x7c4e9aac0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xbd37f9c6",
"selector": "0xbd37f9c6",
"calldata_variants": [
"0xbd37f9c6",
"0xbd37f9c60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfc7e286d",
"selector": "0xfc7e286d",
"calldata_variants": [
"0xfc7e286d",
"0xfc7e286d0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 546,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1673,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 1812,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 7,
"guards_detected": [
{
"pc": 732,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 920,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1021,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
]
}
|