TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-c0c9-70d0-8045-019de126367a

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
24749 artifact.fetch complete 1 / 3 3 months ago
24750 tool.cast_disasm complete 1 / 3 3 months ago
102336 analysis.bundle complete 1 / 3 1 week ago
102337 capability.graph complete 1 / 3 1 week ago
102338 detector.run complete 1 / 3 1 week ago
102339 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
2
Total opcodes
795
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x005e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x5c60da1b
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x5c60da1b
00000024: EQ
00000025: PUSH2 0x0142
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8f283970
0000002f: EQ
00000030: PUSH2 0x0180
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf851a440
0000003a: EQ
0000003b: PUSH2 0x01c0
0000003e: JUMPI
0000003f: PUSH2 0x006d
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x3659cfe6
0000004a: EQ
0000004b: PUSH2 0x0075
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x4f1ef286
00000055: EQ
00000056: PUSH2 0x00b5
00000059: JUMPI
0000005a: PUSH2 0x006d
0000005d: JUMP
0000005e: JUMPDEST
0000005f: CALLDATASIZE
00000060: PUSH2 0x006d
00000063: JUMPI
00000064: PUSH2 0x006b
00000067: PUSH2 0x01d5
0000006a: JUMP
0000006b: JUMPDEST
0000006c: STOP
0000006d: JUMPDEST
0000006e: PUSH2 0x006b
00000071: PUSH2 0x01d5
00000074: JUMP
00000075: JUMPDEST
00000076: CALLVALUE
00000077: DUP1
00000078: ISZERO
00000079: PUSH2 0x0081
0000007c: JUMPI
0000007d: PUSH1 0x00
0000007f: DUP1
00000080: REVERT
00000081: JUMPDEST
00000082: POP
00000083: PUSH2 0x006b
00000086: PUSH1 0x04
00000088: DUP1
00000089: CALLDATASIZE
0000008a: SUB
0000008b: PUSH1 0x20
0000008d: DUP2
0000008e: LT
0000008f: ISZERO
00000090: PUSH2 0x0098
00000093: JUMPI
00000094: PUSH1 0x00
00000096: DUP1
00000097: REVERT
00000098: JUMPDEST
00000099: POP
0000009a: CALLDATALOAD
0000009b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000b0: AND
000000b1: PUSH2 0x01ef
000000b4: JUMP
000000b5: JUMPDEST
000000b6: PUSH2 0x006b
000000b9: PUSH1 0x04
000000bb: DUP1
000000bc: CALLDATASIZE
000000bd: SUB
000000be: PUSH1 0x40
000000c0: DUP2
000000c1: LT
000000c2: ISZERO
000000c3: PUSH2 0x00cb
000000c6: JUMPI
000000c7: PUSH1 0x00
000000c9: DUP1
000000ca: REVERT
000000cb: JUMPDEST
000000cc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000e1: DUP3
000000e2: CALLDATALOAD
000000e3: AND
000000e4: SWAP2
000000e5: SWAP1
000000e6: DUP2
000000e7: ADD
000000e8: SWAP1
000000e9: PUSH1 0x40
000000eb: DUP2
000000ec: ADD
000000ed: PUSH1 0x20
000000ef: DUP3
000000f0: ADD
000000f1: CALLDATALOAD
000000f2: PUSH5 0x0100000000
000000f8: DUP2
000000f9: GT
000000fa: ISZERO
000000fb: PUSH2 0x0103
000000fe: JUMPI
000000ff: PUSH1 0x00
00000101: DUP1
00000102: REVERT
00000103: JUMPDEST
00000104: DUP3
00000105: ADD
00000106: DUP4
00000107: PUSH1 0x20
00000109: DUP3
0000010a: ADD
0000010b: GT
0000010c: ISZERO
0000010d: PUSH2 0x0115
00000110: JUMPI
00000111: PUSH1 0x00
00000113: DUP1
00000114: REVERT
00000115: JUMPDEST
00000116: DUP1
00000117: CALLDATALOAD
00000118: SWAP1
00000119: PUSH1 0x20
0000011b: ADD
0000011c: SWAP2
0000011d: DUP5
0000011e: PUSH1 0x01
00000120: DUP4
00000121: MUL
00000122: DUP5
00000123: ADD
00000124: GT
00000125: PUSH5 0x0100000000
0000012b: DUP4
0000012c: GT
0000012d: OR
0000012e: ISZERO
0000012f: PUSH2 0x0137
00000132: JUMPI
00000133: PUSH1 0x00
00000135: DUP1
00000136: REVERT
00000137: JUMPDEST
00000138: POP
00000139: SWAP1
0000013a: SWAP3
0000013b: POP
0000013c: SWAP1
0000013d: POP
0000013e: PUSH2 0x0243
00000141: JUMP
00000142: JUMPDEST
00000143: CALLVALUE
00000144: DUP1
00000145: ISZERO
00000146: PUSH2 0x014e
00000149: JUMPI
0000014a: PUSH1 0x00
0000014c: DUP1
0000014d: REVERT
0000014e: JUMPDEST
0000014f: POP
00000150: PUSH2 0x0157
00000153: PUSH2 0x0317
00000156: JUMP
00000157: JUMPDEST
00000158: PUSH1 0x40
0000015a: DUP1
0000015b: MLOAD
0000015c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000171: SWAP1
00000172: SWAP3
00000173: AND
00000174: DUP3
00000175: MSTORE
00000176: MLOAD
00000177: SWAP1
00000178: DUP2
00000179: SWAP1
0000017a: SUB
0000017b: PUSH1 0x20
0000017d: ADD
0000017e: SWAP1
0000017f: RETURN
00000180: JUMPDEST
00000181: CALLVALUE
00000182: DUP1
00000183: ISZERO
00000184: PUSH2 0x018c
00000187: JUMPI
00000188: PUSH1 0x00
0000018a: DUP1
0000018b: REVERT
0000018c: JUMPDEST
0000018d: POP
0000018e: PUSH2 0x006b
00000191: PUSH1 0x04
00000193: DUP1
00000194: CALLDATASIZE
00000195: SUB
00000196: PUSH1 0x20
00000198: DUP2
00000199: LT
0000019a: ISZERO
0000019b: PUSH2 0x01a3
0000019e: JUMPI
0000019f: PUSH1 0x00
000001a1: DUP1
000001a2: REVERT
000001a3: JUMPDEST
000001a4: POP
000001a5: CALLDATALOAD
000001a6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001bb: AND
000001bc: PUSH2 0x036e
000001bf: JUMP
000001c0: JUMPDEST
000001c1: CALLVALUE
000001c2: DUP1
000001c3: ISZERO
000001c4: PUSH2 0x01cc
000001c7: JUMPI
000001c8: PUSH1 0x00
000001ca: DUP1
000001cb: REVERT
000001cc: JUMPDEST
000001cd: POP
000001ce: PUSH2 0x0157
000001d1: PUSH2 0x0476
000001d4: JUMP
000001d5: JUMPDEST
000001d6: PUSH2 0x01dd
000001d9: PUSH2 0x04f7
000001dc: JUMP
000001dd: JUMPDEST
000001de: PUSH2 0x01ed
000001e1: PUSH2 0x01e8
000001e4: PUSH2 0x058b
000001e7: JUMP
000001e8: JUMPDEST
000001e9: PUSH2 0x05b0
000001ec: JUMP
000001ed: JUMPDEST
000001ee: JUMP
000001ef: JUMPDEST
000001f0: PUSH2 0x01f7
000001f3: PUSH2 0x05d4
000001f6: JUMP
000001f7: JUMPDEST
000001f8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000020d: AND
0000020e: CALLER
0000020f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000224: AND
00000225: EQ
00000226: ISZERO
00000227: PUSH2 0x0238
0000022a: JUMPI
0000022b: PUSH2 0x0233
0000022e: DUP2
0000022f: PUSH2 0x05f9
00000232: JUMP
00000233: JUMPDEST
00000234: PUSH2 0x0240
00000237: JUMP
00000238: JUMPDEST
00000239: PUSH2 0x0240
0000023c: PUSH2 0x01d5
0000023f: JUMP
00000240: JUMPDEST
00000241: POP
00000242: JUMP
00000243: JUMPDEST
00000244: PUSH2 0x024b
00000247: PUSH2 0x05d4
0000024a: JUMP
0000024b: JUMPDEST
0000024c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000261: AND
00000262: CALLER
00000263: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000278: AND
00000279: EQ
0000027a: ISZERO
0000027b: PUSH2 0x030a
0000027e: JUMPI
0000027f: PUSH2 0x0287
00000282: DUP4
00000283: PUSH2 0x05f9
00000286: JUMP
00000287: JUMPDEST
00000288: PUSH1 0x00
0000028a: DUP4
0000028b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002a0: AND
000002a1: DUP4
000002a2: DUP4
000002a3: PUSH1 0x40
000002a5: MLOAD
000002a6: DUP1
000002a7: DUP4
000002a8: DUP4
000002a9: DUP1
000002aa: DUP3
000002ab: DUP5
000002ac: CALLDATACOPY
000002ad: PUSH1 0x40
000002af: MLOAD
000002b0: SWAP3
000002b1: ADD
000002b2: SWAP5
000002b3: POP
000002b4: PUSH1 0x00
000002b6: SWAP4
000002b7: POP
000002b8: SWAP1
000002b9: SWAP2
000002ba: POP
000002bb: POP
000002bc: DUP1
000002bd: DUP4
000002be: SUB
000002bf: DUP2
000002c0: DUP6
000002c1: GAS
000002c2: DELEGATECALL
000002c3: SWAP2
000002c4: POP
000002c5: POP
000002c6: RETURNDATASIZE
000002c7: DUP1
000002c8: PUSH1 0x00
000002ca: DUP2
000002cb: EQ
000002cc: PUSH2 0x02f1
000002cf: JUMPI
000002d0: PUSH1 0x40
000002d2: MLOAD
000002d3: SWAP2
000002d4: POP
000002d5: PUSH1 0x1f
000002d7: NOT
000002d8: PUSH1 0x3f
000002da: RETURNDATASIZE
000002db: ADD
000002dc: AND
000002dd: DUP3
000002de: ADD
000002df: PUSH1 0x40
000002e1: MSTORE
000002e2: RETURNDATASIZE
000002e3: DUP3
000002e4: MSTORE
000002e5: RETURNDATASIZE
000002e6: PUSH1 0x00
000002e8: PUSH1 0x20
000002ea: DUP5
000002eb: ADD
000002ec: RETURNDATACOPY
000002ed: PUSH2 0x02f6
000002f0: JUMP
000002f1: JUMPDEST
000002f2: PUSH1 0x60
000002f4: SWAP2
000002f5: POP
000002f6: JUMPDEST
000002f7: POP
000002f8: POP
000002f9: SWAP1
000002fa: POP
000002fb: DUP1
000002fc: PUSH2 0x0304
000002ff: JUMPI
00000300: PUSH1 0x00
00000302: DUP1
00000303: REVERT
00000304: JUMPDEST
00000305: POP
00000306: PUSH2 0x0312
00000309: JUMP
0000030a: JUMPDEST
0000030b: PUSH2 0x0312
0000030e: PUSH2 0x01d5
00000311: JUMP
00000312: JUMPDEST
00000313: POP
00000314: POP
00000315: POP
00000316: JUMP
00000317: JUMPDEST
00000318: PUSH1 0x00
0000031a: PUSH2 0x0321
0000031d: PUSH2 0x05d4
00000320: JUMP
00000321: JUMPDEST
00000322: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000337: AND
00000338: CALLER
00000339: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000034e: AND
0000034f: EQ
00000350: ISZERO
00000351: PUSH2 0x0363
00000354: JUMPI
00000355: PUSH2 0x035c
00000358: PUSH2 0x058b
0000035b: JUMP
0000035c: JUMPDEST
0000035d: SWAP1
0000035e: POP
0000035f: PUSH2 0x036b
00000362: JUMP
00000363: JUMPDEST
00000364: PUSH2 0x036b
00000367: PUSH2 0x01d5
0000036a: JUMP
0000036b: JUMPDEST
0000036c: SWAP1
0000036d: JUMP
0000036e: JUMPDEST
0000036f: PUSH2 0x0376
00000372: PUSH2 0x05d4
00000375: JUMP
00000376: JUMPDEST
00000377: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000038c: AND
0000038d: CALLER
0000038e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003a3: AND
000003a4: EQ
000003a5: ISZERO
000003a6: PUSH2 0x0238
000003a9: JUMPI
000003aa: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003bf: DUP2
000003c0: AND
000003c1: PUSH2 0x0415
000003c4: JUMPI
000003c5: PUSH1 0x40
000003c7: MLOAD
000003c8: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000003e9: DUP2
000003ea: MSTORE
000003eb: PUSH1 0x04
000003ed: ADD
000003ee: DUP1
000003ef: DUP1
000003f0: PUSH1 0x20
000003f2: ADD
000003f3: DUP3
000003f4: DUP2
000003f5: SUB
000003f6: DUP3
000003f7: MSTORE
000003f8: PUSH1 0x3a
000003fa: DUP2
000003fb: MSTORE
000003fc: PUSH1 0x20
000003fe: ADD
000003ff: DUP1
00000400: PUSH2 0x06ed
00000403: PUSH1 0x3a
00000405: SWAP2
00000406: CODECOPY
00000407: PUSH1 0x40
00000409: ADD
0000040a: SWAP2
0000040b: POP
0000040c: POP
0000040d: PUSH1 0x40
0000040f: MLOAD
00000410: DUP1
00000411: SWAP2
00000412: SUB
00000413: SWAP1
00000414: REVERT
00000415: JUMPDEST
00000416: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
00000437: PUSH2 0x043e
0000043a: PUSH2 0x05d4
0000043d: JUMP
0000043e: JUMPDEST
0000043f: PUSH1 0x40
00000441: DUP1
00000442: MLOAD
00000443: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000458: SWAP3
00000459: DUP4
0000045a: AND
0000045b: DUP2
0000045c: MSTORE
0000045d: SWAP2
0000045e: DUP5
0000045f: AND
00000460: PUSH1 0x20
00000462: DUP4
00000463: ADD
00000464: MSTORE
00000465: DUP1
00000466: MLOAD
00000467: SWAP2
00000468: DUP3
00000469: SWAP1
0000046a: SUB
0000046b: ADD
0000046c: SWAP1
0000046d: LOG1
0000046e: PUSH2 0x0233
00000471: DUP2
00000472: PUSH2 0x0646
00000475: JUMP
00000476: JUMPDEST
00000477: PUSH1 0x00
00000479: PUSH2 0x0480
0000047c: PUSH2 0x05d4
0000047f: JUMP
00000480: JUMPDEST
00000481: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000496: AND
00000497: CALLER
00000498: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004ad: AND
000004ae: EQ
000004af: ISZERO
000004b0: PUSH2 0x0363
000004b3: JUMPI
000004b4: PUSH2 0x035c
000004b7: PUSH2 0x05d4
000004ba: JUMP
000004bb: JUMPDEST
000004bc: PUSH1 0x00
000004be: DUP2
000004bf: EXTCODEHASH
000004c0: PUSH32 0xc5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470
000004e1: DUP2
000004e2: DUP2
000004e3: EQ
000004e4: DUP1
000004e5: ISZERO
000004e6: SWAP1
000004e7: PUSH2 0x04ef
000004ea: JUMPI
000004eb: POP
000004ec: DUP2
000004ed: ISZERO
000004ee: ISZERO
000004ef: JUMPDEST
000004f0: SWAP5
000004f1: SWAP4
000004f2: POP
000004f3: POP
000004f4: POP
000004f5: POP
000004f6: JUMP
000004f7: JUMPDEST
000004f8: PUSH2 0x04ff
000004fb: PUSH2 0x05d4
000004fe: JUMP
000004ff: JUMPDEST
00000500: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000515: AND
00000516: CALLER
00000517: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000052c: AND
0000052d: EQ
0000052e: ISZERO
0000052f: PUSH2 0x0583
00000532: JUMPI
00000533: PUSH1 0x40
00000535: MLOAD
00000536: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000557: DUP2
00000558: MSTORE
00000559: PUSH1 0x04
0000055b: ADD
0000055c: DUP1
0000055d: DUP1
0000055e: PUSH1 0x20
00000560: ADD
00000561: DUP3
00000562: DUP2
00000563: SUB
00000564: DUP3
00000565: MSTORE
00000566: PUSH1 0x42
00000568: DUP2
00000569: MSTORE
0000056a: PUSH1 0x20
0000056c: ADD
0000056d: DUP1
0000056e: PUSH2 0x075d
00000571: PUSH1 0x42
00000573: SWAP2
00000574: CODECOPY
00000575: PUSH1 0x60
00000577: ADD
00000578: SWAP2
00000579: POP
0000057a: POP
0000057b: PUSH1 0x40
0000057d: MLOAD
0000057e: DUP1
0000057f: SWAP2
00000580: SUB
00000581: SWAP1
00000582: REVERT
00000583: JUMPDEST
00000584: PUSH2 0x01ed
00000587: PUSH2 0x01ed
0000058a: JUMP
0000058b: JUMPDEST
0000058c: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000005ad: SLOAD
000005ae: SWAP1
000005af: JUMP
000005b0: JUMPDEST
000005b1: CALLDATASIZE
000005b2: PUSH1 0x00
000005b4: DUP1
000005b5: CALLDATACOPY
000005b6: PUSH1 0x00
000005b8: DUP1
000005b9: CALLDATASIZE
000005ba: PUSH1 0x00
000005bc: DUP5
000005bd: GAS
000005be: DELEGATECALL
000005bf: RETURNDATASIZE
000005c0: PUSH1 0x00
000005c2: DUP1
000005c3: RETURNDATACOPY
000005c4: DUP1
000005c5: DUP1
000005c6: ISZERO
000005c7: PUSH2 0x05cf
000005ca: JUMPI
000005cb: RETURNDATASIZE
000005cc: PUSH1 0x00
000005ce: RETURN
000005cf: JUMPDEST
000005d0: RETURNDATASIZE
000005d1: PUSH1 0x00
000005d3: REVERT
000005d4: JUMPDEST
000005d5: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000005f6: SLOAD
000005f7: SWAP1
000005f8: JUMP
000005f9: JUMPDEST
000005fa: PUSH2 0x0602
000005fd: DUP2
000005fe: PUSH2 0x066a
00000601: JUMP
00000602: JUMPDEST
00000603: PUSH1 0x40
00000605: MLOAD
00000606: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000061b: DUP3
0000061c: AND
0000061d: SWAP1
0000061e: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
0000063f: SWAP1
00000640: PUSH1 0x00
00000642: SWAP1
00000643: LOG2
00000644: POP
00000645: JUMP
00000646: JUMPDEST
00000647: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000668: SSTORE
00000669: JUMP
0000066a: JUMPDEST
0000066b: PUSH2 0x0673
0000066e: DUP2
0000066f: PUSH2 0x04bb
00000672: JUMP
00000673: JUMPDEST
00000674: PUSH2 0x06c8
00000677: JUMPI
00000678: PUSH1 0x40
0000067a: MLOAD
0000067b: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000069c: DUP2
0000069d: MSTORE
0000069e: PUSH1 0x04
000006a0: ADD
000006a1: DUP1
000006a2: DUP1
000006a3: PUSH1 0x20
000006a5: ADD
000006a6: DUP3
000006a7: DUP2
000006a8: SUB
000006a9: DUP3
000006aa: MSTORE
000006ab: PUSH1 0x36
000006ad: DUP2
000006ae: MSTORE
000006af: PUSH1 0x20
000006b1: ADD
000006b2: DUP1
000006b3: PUSH2 0x0727
000006b6: PUSH1 0x36
000006b8: SWAP2
000006b9: CODECOPY
000006ba: PUSH1 0x40
000006bc: ADD
000006bd: SWAP2
000006be: POP
000006bf: POP
000006c0: PUSH1 0x40
000006c2: MLOAD
000006c3: DUP1
000006c4: SWAP2
000006c5: SUB
000006c6: SWAP1
000006c7: REVERT
000006c8: JUMPDEST
000006c9: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000006ea: SSTORE
000006eb: JUMP
000006ec: INVALID
000006ed: SLOAD
000006ee: PUSH19 0x616e73706172656e745570677261646561626c
00000702: PUSH6 0x50726f78793a
00000709: KECCAK256
0000070a: PUSH15 0x65772061646d696e20697320746865
0000071a: KECCAK256
0000071b: PUSH27 0x65726f20616464726573735570677261646561626c6550726f7879
00000737: GASPRICE
00000738: KECCAK256
00000739: PUSH15 0x657720696d706c656d656e74617469
00000749: PUSH16 0x6e206973206e6f74206120636f6e7472
0000075a: PUSH2 0x6374
0000075d: SLOAD
0000075e: PUSH19 0x616e73706172656e745570677261646561626c
00000772: PUSH6 0x50726f78793a
00000779: KECCAK256
0000077a: PUSH2 0x646d
0000077d: PUSH10 0x6e2063616e6e6f742066
00000788: PUSH2 0x6c6c
0000078b: PUSH3 0x61636b
0000078f: KECCAK256
00000790: PUSH21 0x6f2070726f787920746172676574a2646970667358
000007a6: UNKNOWN(0x22)
000007a7: SLT
000007a8: KECCAK256
000007a9: UNKNOWN(0xB1)
000007aa: COINBASE
000007ab: UNKNOWN(0xEF)
000007ac: PUSH19 0xde179b8b56cef31601d40ff2875391088197e7
000007c0: EXTCODECOPY
000007c1: UNKNOWN(0xAC)
000007c2: CODECOPY
000007c3: UNKNOWN(0xEB)
000007c4: LOG1
000007c5: UNKNOWN(0xDD)
000007c6: UNKNOWN(0xCD)
000007c7: UNKNOWN(0x0F)
000007c8: UNKNOWN(0xDD)
000007c9: PUSH5 0x736f6c6343
000007cf: STOP
000007d0: SMOD
000007d1: MOD
000007d2: STOP
000007d3: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0x021d7016de6e5b77f678c383fe64b86ef3ef679aeb18d9fda0b8d628b4724d14
call_targets: 0x31fe393815822edacbd81c2262467402199efd0d
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x021d7016de6e5b77f678c383fe64b86ef3ef679aeb18d9fda0b8d628b4724d14",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x31fe393815822edacbd81c2262467402199efd0d"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 706,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1470,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 526,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 610,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 824,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 909,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1175,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1302,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}