TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-c122-7373-8902-b51f1fafef5f

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
24811 artifact.fetch complete 1 / 3 3 months ago
24812 tool.cast_disasm complete 1 / 3 3 months ago
102216 analysis.bundle complete 1 / 3 2 weeks ago
102217 capability.graph complete 1 / 3 2 weeks ago
102218 detector.run complete 1 / 3 2 weeks ago
102219 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
2
EXT*/BALANCE
1
Total opcodes
1068
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0086
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x61d027b3
00000019: GT
0000001a: PUSH2 0x0059
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x61d027b3
00000024: EQ
00000025: PUSH2 0x011d
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x645b53ed
0000002f: EQ
00000030: PUSH2 0x0145
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x9fef990e
0000003a: EQ
0000003b: PUSH2 0x0179
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xed22cf43
00000045: EQ
00000046: PUSH2 0x01a1
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0xf51f96dd
00000050: EQ
00000051: PUSH2 0x01c1
00000054: JUMPI
00000055: PUSH1 0x00
00000057: DUP1
00000058: REVERT
00000059: JUMPDEST
0000005a: DUP1
0000005b: PUSH4 0x07546172
00000060: EQ
00000061: PUSH2 0x008b
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0x3ccfd60b
0000006b: EQ
0000006c: PUSH2 0x00d0
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0x3e0e828b
00000076: EQ
00000077: PUSH2 0x00e7
0000007a: JUMPI
0000007b: DUP1
0000007c: PUSH4 0x53d190cf
00000081: EQ
00000082: PUSH2 0x010a
00000085: JUMPI
00000086: JUMPDEST
00000087: PUSH1 0x00
00000089: DUP1
0000008a: REVERT
0000008b: JUMPDEST
0000008c: CALLVALUE
0000008d: DUP1
0000008e: ISZERO
0000008f: PUSH2 0x0097
00000092: JUMPI
00000093: PUSH1 0x00
00000095: DUP1
00000096: REVERT
00000097: JUMPDEST
00000098: POP
00000099: PUSH2 0x00b3
0000009c: PUSH20 0x7a97f91fa492dc693c141a040ecc605f518ca11c
000000b1: DUP2
000000b2: JUMP
000000b3: JUMPDEST
000000b4: PUSH1 0x40
000000b6: MLOAD
000000b7: PUSH1 0x01
000000b9: PUSH1 0x01
000000bb: PUSH1 0xa0
000000bd: SHL
000000be: SUB
000000bf: SWAP1
000000c0: SWAP2
000000c1: AND
000000c2: DUP2
000000c3: MSTORE
000000c4: PUSH1 0x20
000000c6: ADD
000000c7: JUMPDEST
000000c8: PUSH1 0x40
000000ca: MLOAD
000000cb: DUP1
000000cc: SWAP2
000000cd: SUB
000000ce: SWAP1
000000cf: RETURN
000000d0: JUMPDEST
000000d1: CALLVALUE
000000d2: DUP1
000000d3: ISZERO
000000d4: PUSH2 0x00dc
000000d7: JUMPI
000000d8: PUSH1 0x00
000000da: DUP1
000000db: REVERT
000000dc: JUMPDEST
000000dd: POP
000000de: PUSH2 0x00e5
000000e1: PUSH2 0x01dd
000000e4: JUMP
000000e5: JUMPDEST
000000e6: STOP
000000e7: JUMPDEST
000000e8: CALLVALUE
000000e9: DUP1
000000ea: ISZERO
000000eb: PUSH2 0x00f3
000000ee: JUMPI
000000ef: PUSH1 0x00
000000f1: DUP1
000000f2: REVERT
000000f3: JUMPDEST
000000f4: POP
000000f5: PUSH2 0x00fc
000000f8: PUSH1 0x6f
000000fa: DUP2
000000fb: JUMP
000000fc: JUMPDEST
000000fd: PUSH1 0x40
000000ff: MLOAD
00000100: SWAP1
00000101: DUP2
00000102: MSTORE
00000103: PUSH1 0x20
00000105: ADD
00000106: PUSH2 0x00c7
00000109: JUMP
0000010a: JUMPDEST
0000010b: PUSH2 0x00e5
0000010e: PUSH2 0x0118
00000111: CALLDATASIZE
00000112: PUSH1 0x04
00000114: PUSH2 0x05c4
00000117: JUMP
00000118: JUMPDEST
00000119: PUSH2 0x02d2
0000011c: JUMP
0000011d: JUMPDEST
0000011e: CALLVALUE
0000011f: DUP1
00000120: ISZERO
00000121: PUSH2 0x0129
00000124: JUMPI
00000125: PUSH1 0x00
00000127: DUP1
00000128: REVERT
00000129: JUMPDEST
0000012a: POP
0000012b: PUSH2 0x00b3
0000012e: PUSH20 0xe7c08dba10ce07e1b70e87a355957cc8bfc95dbc
00000143: DUP2
00000144: JUMP
00000145: JUMPDEST
00000146: CALLVALUE
00000147: DUP1
00000148: ISZERO
00000149: PUSH2 0x0151
0000014c: JUMPI
0000014d: PUSH1 0x00
0000014f: DUP1
00000150: REVERT
00000151: JUMPDEST
00000152: POP
00000153: PUSH2 0x00fc
00000156: PUSH32 0xb64f7af11555eaec2c6bf7f0f4e28b3de11ea9f11d30cf08551c41c63eef9a59
00000177: DUP2
00000178: JUMP
00000179: JUMPDEST
0000017a: CALLVALUE
0000017b: DUP1
0000017c: ISZERO
0000017d: PUSH2 0x0185
00000180: JUMPI
00000181: PUSH1 0x00
00000183: DUP1
00000184: REVERT
00000185: JUMPDEST
00000186: POP
00000187: PUSH2 0x00b3
0000018a: PUSH20 0x39c1fb9a9b3b39f1953e7967156a8f11a831fd44
0000019f: DUP2
000001a0: JUMP
000001a1: JUMPDEST
000001a2: CALLVALUE
000001a3: DUP1
000001a4: ISZERO
000001a5: PUSH2 0x01ad
000001a8: JUMPI
000001a9: PUSH1 0x00
000001ab: DUP1
000001ac: REVERT
000001ad: JUMPDEST
000001ae: POP
000001af: PUSH2 0x00fc
000001b2: PUSH2 0x01bc
000001b5: CALLDATASIZE
000001b6: PUSH1 0x04
000001b8: PUSH2 0x0584
000001bb: JUMP
000001bc: JUMPDEST
000001bd: PUSH2 0x04be
000001c0: JUMP
000001c1: JUMPDEST
000001c2: CALLVALUE
000001c3: DUP1
000001c4: ISZERO
000001c5: PUSH2 0x01cd
000001c8: JUMPI
000001c9: PUSH1 0x00
000001cb: DUP1
000001cc: REVERT
000001cd: JUMPDEST
000001ce: POP
000001cf: PUSH2 0x00fc
000001d2: PUSH8 0x011c37937e080000
000001db: DUP2
000001dc: JUMP
000001dd: JUMPDEST
000001de: CALLER
000001df: PUSH20 0xe7c08dba10ce07e1b70e87a355957cc8bfc95dbc
000001f4: EQ
000001f5: PUSH2 0x0231
000001f8: JUMPI
000001f9: PUSH1 0x40
000001fb: MLOAD
000001fc: PUSH3 0x461bcd
00000200: PUSH1 0xe5
00000202: SHL
00000203: DUP2
00000204: MSTORE
00000205: PUSH1 0x20
00000207: PUSH1 0x04
00000209: DUP3
0000020a: ADD
0000020b: MSTORE
0000020c: PUSH1 0x09
0000020e: PUSH1 0x24
00000210: DUP3
00000211: ADD
00000212: MSTORE
00000213: PUSH9 0x2337b93134b23232b7
0000021d: PUSH1 0xb9
0000021f: SHL
00000220: PUSH1 0x44
00000222: DUP3
00000223: ADD
00000224: MSTORE
00000225: PUSH1 0x64
00000227: ADD
00000228: JUMPDEST
00000229: PUSH1 0x40
0000022b: MLOAD
0000022c: DUP1
0000022d: SWAP2
0000022e: SUB
0000022f: SWAP1
00000230: REVERT
00000231: JUMPDEST
00000232: PUSH1 0x40
00000234: MLOAD
00000235: PUSH1 0x00
00000237: SWAP1
00000238: PUSH20 0xe7c08dba10ce07e1b70e87a355957cc8bfc95dbc
0000024d: SWAP1
0000024e: SELFBALANCE
0000024f: SWAP1
00000250: DUP4
00000251: DUP2
00000252: DUP2
00000253: DUP2
00000254: DUP6
00000255: DUP8
00000256: GAS
00000257: CALL
00000258: SWAP3
00000259: POP
0000025a: POP
0000025b: POP
0000025c: RETURNDATASIZE
0000025d: DUP1
0000025e: PUSH1 0x00
00000260: DUP2
00000261: EQ
00000262: PUSH2 0x0287
00000265: JUMPI
00000266: PUSH1 0x40
00000268: MLOAD
00000269: SWAP2
0000026a: POP
0000026b: PUSH1 0x1f
0000026d: NOT
0000026e: PUSH1 0x3f
00000270: RETURNDATASIZE
00000271: ADD
00000272: AND
00000273: DUP3
00000274: ADD
00000275: PUSH1 0x40
00000277: MSTORE
00000278: RETURNDATASIZE
00000279: DUP3
0000027a: MSTORE
0000027b: RETURNDATASIZE
0000027c: PUSH1 0x00
0000027e: PUSH1 0x20
00000280: DUP5
00000281: ADD
00000282: RETURNDATACOPY
00000283: PUSH2 0x028c
00000286: JUMP
00000287: JUMPDEST
00000288: PUSH1 0x60
0000028a: SWAP2
0000028b: POP
0000028c: JUMPDEST
0000028d: POP
0000028e: POP
0000028f: SWAP1
00000290: POP
00000291: DUP1
00000292: PUSH2 0x02cf
00000295: JUMPI
00000296: PUSH1 0x40
00000298: MLOAD
00000299: PUSH3 0x461bcd
0000029d: PUSH1 0xe5
0000029f: SHL
000002a0: DUP2
000002a1: MSTORE
000002a2: PUSH1 0x20
000002a4: PUSH1 0x04
000002a6: DUP3
000002a7: ADD
000002a8: MSTORE
000002a9: PUSH1 0x0f
000002ab: PUSH1 0x24
000002ad: DUP3
000002ae: ADD
000002af: MSTORE
000002b0: PUSH15 0x15da5d1a191c985dc819985a5b1959
000002c0: PUSH1 0x8a
000002c2: SHL
000002c3: PUSH1 0x44
000002c5: DUP3
000002c6: ADD
000002c7: MSTORE
000002c8: PUSH1 0x64
000002ca: ADD
000002cb: PUSH2 0x0228
000002ce: JUMP
000002cf: JUMPDEST
000002d0: POP
000002d1: JUMP
000002d2: JUMPDEST
000002d3: PUSH32 0xb64f7af11555eaec2c6bf7f0f4e28b3de11ea9f11d30cf08551c41c63eef9a59
000002f4: PUSH2 0x02fd
000002f7: DUP6
000002f8: DUP6
000002f9: PUSH2 0x04d1
000002fc: JUMP
000002fd: JUMPDEST
000002fe: EQ
000002ff: PUSH2 0x0339
00000302: JUMPI
00000303: PUSH1 0x40
00000305: MLOAD
00000306: PUSH3 0x461bcd
0000030a: PUSH1 0xe5
0000030c: SHL
0000030d: DUP2
0000030e: MSTORE
0000030f: PUSH1 0x20
00000311: PUSH1 0x04
00000313: DUP3
00000314: ADD
00000315: MSTORE
00000316: PUSH1 0x0c
00000318: PUSH1 0x24
0000031a: DUP3
0000031b: ADD
0000031c: MSTORE
0000031d: PUSH12 0x496e76616c69642064617461
0000032a: PUSH1 0xa0
0000032c: SHL
0000032d: PUSH1 0x44
0000032f: DUP3
00000330: ADD
00000331: MSTORE
00000332: PUSH1 0x64
00000334: ADD
00000335: PUSH2 0x0228
00000338: JUMP
00000339: JUMPDEST
0000033a: PUSH2 0x034b
0000033d: PUSH8 0x011c37937e080000
00000346: DUP3
00000347: PUSH2 0x0691
0000034a: JUMP
0000034b: JUMPDEST
0000034c: CALLVALUE
0000034d: EQ
0000034e: PUSH2 0x038e
00000351: JUMPI
00000352: PUSH1 0x40
00000354: MLOAD
00000355: PUSH3 0x461bcd
00000359: PUSH1 0xe5
0000035b: SHL
0000035c: DUP2
0000035d: MSTORE
0000035e: PUSH1 0x20
00000360: PUSH1 0x04
00000362: DUP3
00000363: ADD
00000364: MSTORE
00000365: PUSH1 0x12
00000367: PUSH1 0x24
00000369: DUP3
0000036a: ADD
0000036b: MSTORE
0000036c: PUSH18 0x125b9d985b1a590811551208185b5bdd5b9d
0000037f: PUSH1 0x72
00000381: SHL
00000382: PUSH1 0x44
00000384: DUP3
00000385: ADD
00000386: MSTORE
00000387: PUSH1 0x64
00000389: ADD
0000038a: PUSH2 0x0228
0000038d: JUMP
0000038e: JUMPDEST
0000038f: PUSH1 0x00
00000391: JUMPDEST
00000392: DUP2
00000393: DUP2
00000394: LT
00000395: ISZERO
00000396: PUSH2 0x04b7
00000399: JUMPI
0000039a: PUSH1 0x00
0000039c: DUP4
0000039d: DUP4
0000039e: DUP4
0000039f: DUP2
000003a0: DUP2
000003a1: LT
000003a2: PUSH2 0x03bb
000003a5: JUMPI
000003a6: PUSH4 0x4e487b71
000003ab: PUSH1 0xe0
000003ad: SHL
000003ae: PUSH1 0x00
000003b0: MSTORE
000003b1: PUSH1 0x32
000003b3: PUSH1 0x04
000003b5: MSTORE
000003b6: PUSH1 0x24
000003b8: PUSH1 0x00
000003ba: REVERT
000003bb: JUMPDEST
000003bc: SWAP1
000003bd: POP
000003be: PUSH1 0x20
000003c0: MUL
000003c1: ADD
000003c2: CALLDATALOAD
000003c3: SWAP1
000003c4: POP
000003c5: PUSH20 0x39c1fb9a9b3b39f1953e7967156a8f11a831fd44
000003da: PUSH1 0x01
000003dc: PUSH1 0x01
000003de: PUSH1 0xa0
000003e0: SHL
000003e1: SUB
000003e2: AND
000003e3: PUSH4 0x42842e0e
000003e8: PUSH20 0x7a97f91fa492dc693c141a040ecc605f518ca11c
000003fd: DUP9
000003fe: DUP9
000003ff: DUP6
00000400: DUP2
00000401: DUP2
00000402: LT
00000403: PUSH2 0x041c
00000406: JUMPI
00000407: PUSH4 0x4e487b71
0000040c: PUSH1 0xe0
0000040e: SHL
0000040f: PUSH1 0x00
00000411: MSTORE
00000412: PUSH1 0x32
00000414: PUSH1 0x04
00000416: MSTORE
00000417: PUSH1 0x24
00000419: PUSH1 0x00
0000041b: REVERT
0000041c: JUMPDEST
0000041d: SWAP1
0000041e: POP
0000041f: PUSH1 0x20
00000421: MUL
00000422: ADD
00000423: PUSH1 0x20
00000425: DUP2
00000426: ADD
00000427: SWAP1
00000428: PUSH2 0x0431
0000042b: SWAP2
0000042c: SWAP1
0000042d: PUSH2 0x056a
00000430: JUMP
00000431: JUMPDEST
00000432: PUSH2 0x043c
00000435: DUP6
00000436: PUSH1 0x6f
00000438: PUSH2 0x0679
0000043b: JUMP
0000043c: JUMPDEST
0000043d: PUSH1 0x40
0000043f: MLOAD
00000440: PUSH1 0x01
00000442: PUSH1 0x01
00000444: PUSH1 0xe0
00000446: SHL
00000447: SUB
00000448: NOT
00000449: PUSH1 0xe0
0000044b: DUP7
0000044c: SWAP1
0000044d: SHL
0000044e: AND
0000044f: DUP2
00000450: MSTORE
00000451: PUSH1 0x01
00000453: PUSH1 0x01
00000455: PUSH1 0xa0
00000457: SHL
00000458: SUB
00000459: SWAP4
0000045a: DUP5
0000045b: AND
0000045c: PUSH1 0x04
0000045e: DUP3
0000045f: ADD
00000460: MSTORE
00000461: SWAP3
00000462: SWAP1
00000463: SWAP2
00000464: AND
00000465: PUSH1 0x24
00000467: DUP4
00000468: ADD
00000469: MSTORE
0000046a: PUSH1 0x44
0000046c: DUP3
0000046d: ADD
0000046e: MSTORE
0000046f: PUSH1 0x64
00000471: ADD
00000472: PUSH1 0x00
00000474: PUSH1 0x40
00000476: MLOAD
00000477: DUP1
00000478: DUP4
00000479: SUB
0000047a: DUP2
0000047b: PUSH1 0x00
0000047d: DUP8
0000047e: DUP1
0000047f: EXTCODESIZE
00000480: ISZERO
00000481: DUP1
00000482: ISZERO
00000483: PUSH2 0x048b
00000486: JUMPI
00000487: PUSH1 0x00
00000489: DUP1
0000048a: REVERT
0000048b: JUMPDEST
0000048c: POP
0000048d: GAS
0000048e: CALL
0000048f: ISZERO
00000490: DUP1
00000491: ISZERO
00000492: PUSH2 0x049f
00000495: JUMPI
00000496: RETURNDATASIZE
00000497: PUSH1 0x00
00000499: DUP1
0000049a: RETURNDATACOPY
0000049b: RETURNDATASIZE
0000049c: PUSH1 0x00
0000049e: REVERT
0000049f: JUMPDEST
000004a0: POP
000004a1: POP
000004a2: POP
000004a3: POP
000004a4: POP
000004a5: DUP1
000004a6: DUP1
000004a7: PUSH2 0x04af
000004aa: SWAP1
000004ab: PUSH2 0x06b0
000004ae: JUMP
000004af: JUMPDEST
000004b0: SWAP2
000004b1: POP
000004b2: POP
000004b3: PUSH2 0x0391
000004b6: JUMP
000004b7: JUMPDEST
000004b8: POP
000004b9: POP
000004ba: POP
000004bb: POP
000004bc: POP
000004bd: JUMP
000004be: JUMPDEST
000004bf: PUSH1 0x00
000004c1: PUSH2 0x04ca
000004c4: DUP4
000004c5: DUP4
000004c6: PUSH2 0x04d1
000004c9: JUMP
000004ca: JUMPDEST
000004cb: SWAP4
000004cc: SWAP3
000004cd: POP
000004ce: POP
000004cf: POP
000004d0: JUMP
000004d1: JUMPDEST
000004d2: PUSH1 0x00
000004d4: DUP3
000004d5: DUP3
000004d6: PUSH1 0x40
000004d8: MLOAD
000004d9: PUSH1 0x20
000004db: ADD
000004dc: PUSH2 0x04e6
000004df: SWAP3
000004e0: SWAP2
000004e1: SWAP1
000004e2: PUSH2 0x062d
000004e5: JUMP
000004e6: JUMPDEST
000004e7: PUSH1 0x40
000004e9: MLOAD
000004ea: PUSH1 0x20
000004ec: DUP2
000004ed: DUP4
000004ee: SUB
000004ef: SUB
000004f0: DUP2
000004f1: MSTORE
000004f2: SWAP1
000004f3: PUSH1 0x40
000004f5: MSTORE
000004f6: DUP1
000004f7: MLOAD
000004f8: SWAP1
000004f9: PUSH1 0x20
000004fb: ADD
000004fc: KECCAK256
000004fd: SWAP1
000004fe: POP
000004ff: SWAP3
00000500: SWAP2
00000501: POP
00000502: POP
00000503: JUMP
00000504: JUMPDEST
00000505: DUP1
00000506: CALLDATALOAD
00000507: PUSH1 0x01
00000509: PUSH1 0x01
0000050b: PUSH1 0xa0
0000050d: SHL
0000050e: SUB
0000050f: DUP2
00000510: AND
00000511: DUP2
00000512: EQ
00000513: PUSH2 0x051b
00000516: JUMPI
00000517: PUSH1 0x00
00000519: DUP1
0000051a: REVERT
0000051b: JUMPDEST
0000051c: SWAP2
0000051d: SWAP1
0000051e: POP
0000051f: JUMP
00000520: JUMPDEST
00000521: PUSH1 0x00
00000523: DUP1
00000524: DUP4
00000525: PUSH1 0x1f
00000527: DUP5
00000528: ADD
00000529: SLT
0000052a: PUSH2 0x0531
0000052d: JUMPI
0000052e: DUP2
0000052f: DUP3
00000530: REVERT
00000531: JUMPDEST
00000532: POP
00000533: DUP2
00000534: CALLDATALOAD
00000535: PUSH8 0xffffffffffffffff
0000053e: DUP2
0000053f: GT
00000540: ISZERO
00000541: PUSH2 0x0548
00000544: JUMPI
00000545: DUP2
00000546: DUP3
00000547: REVERT
00000548: JUMPDEST
00000549: PUSH1 0x20
0000054b: DUP4
0000054c: ADD
0000054d: SWAP2
0000054e: POP
0000054f: DUP4
00000550: PUSH1 0x20
00000552: DUP3
00000553: PUSH1 0x05
00000555: SHL
00000556: DUP6
00000557: ADD
00000558: ADD
00000559: GT
0000055a: ISZERO
0000055b: PUSH2 0x0563
0000055e: JUMPI
0000055f: PUSH1 0x00
00000561: DUP1
00000562: REVERT
00000563: JUMPDEST
00000564: SWAP3
00000565: POP
00000566: SWAP3
00000567: SWAP1
00000568: POP
00000569: JUMP
0000056a: JUMPDEST
0000056b: PUSH1 0x00
0000056d: PUSH1 0x20
0000056f: DUP3
00000570: DUP5
00000571: SUB
00000572: SLT
00000573: ISZERO
00000574: PUSH2 0x057b
00000577: JUMPI
00000578: DUP1
00000579: DUP2
0000057a: REVERT
0000057b: JUMPDEST
0000057c: PUSH2 0x04ca
0000057f: DUP3
00000580: PUSH2 0x0504
00000583: JUMP
00000584: JUMPDEST
00000585: PUSH1 0x00
00000587: DUP1
00000588: PUSH1 0x20
0000058a: DUP4
0000058b: DUP6
0000058c: SUB
0000058d: SLT
0000058e: ISZERO
0000058f: PUSH2 0x0596
00000592: JUMPI
00000593: DUP1
00000594: DUP2
00000595: REVERT
00000596: JUMPDEST
00000597: DUP3
00000598: CALLDATALOAD
00000599: PUSH8 0xffffffffffffffff
000005a2: DUP2
000005a3: GT
000005a4: ISZERO
000005a5: PUSH2 0x05ac
000005a8: JUMPI
000005a9: DUP2
000005aa: DUP3
000005ab: REVERT
000005ac: JUMPDEST
000005ad: PUSH2 0x05b8
000005b0: DUP6
000005b1: DUP3
000005b2: DUP7
000005b3: ADD
000005b4: PUSH2 0x0520
000005b7: JUMP
000005b8: JUMPDEST
000005b9: SWAP1
000005ba: SWAP7
000005bb: SWAP1
000005bc: SWAP6
000005bd: POP
000005be: SWAP4
000005bf: POP
000005c0: POP
000005c1: POP
000005c2: POP
000005c3: JUMP
000005c4: JUMPDEST
000005c5: PUSH1 0x00
000005c7: DUP1
000005c8: PUSH1 0x00
000005ca: DUP1
000005cb: PUSH1 0x40
000005cd: DUP6
000005ce: DUP8
000005cf: SUB
000005d0: SLT
000005d1: ISZERO
000005d2: PUSH2 0x05d9
000005d5: JUMPI
000005d6: DUP2
000005d7: DUP3
000005d8: REVERT
000005d9: JUMPDEST
000005da: DUP5
000005db: CALLDATALOAD
000005dc: PUSH8 0xffffffffffffffff
000005e5: DUP1
000005e6: DUP3
000005e7: GT
000005e8: ISZERO
000005e9: PUSH2 0x05f0
000005ec: JUMPI
000005ed: DUP4
000005ee: DUP5
000005ef: REVERT
000005f0: JUMPDEST
000005f1: PUSH2 0x05fc
000005f4: DUP9
000005f5: DUP4
000005f6: DUP10
000005f7: ADD
000005f8: PUSH2 0x0520
000005fb: JUMP
000005fc: JUMPDEST
000005fd: SWAP1
000005fe: SWAP7
000005ff: POP
00000600: SWAP5
00000601: POP
00000602: PUSH1 0x20
00000604: DUP8
00000605: ADD
00000606: CALLDATALOAD
00000607: SWAP2
00000608: POP
00000609: DUP1
0000060a: DUP3
0000060b: GT
0000060c: ISZERO
0000060d: PUSH2 0x0614
00000610: JUMPI
00000611: DUP4
00000612: DUP5
00000613: REVERT
00000614: JUMPDEST
00000615: POP
00000616: PUSH2 0x0621
00000619: DUP8
0000061a: DUP3
0000061b: DUP9
0000061c: ADD
0000061d: PUSH2 0x0520
00000620: JUMP
00000621: JUMPDEST
00000622: SWAP6
00000623: SWAP9
00000624: SWAP5
00000625: SWAP8
00000626: POP
00000627: SWAP6
00000628: POP
00000629: POP
0000062a: POP
0000062b: POP
0000062c: JUMP
0000062d: JUMPDEST
0000062e: PUSH1 0x20
00000630: DUP1
00000631: DUP3
00000632: MSTORE
00000633: DUP2
00000634: DUP2
00000635: ADD
00000636: DUP4
00000637: SWAP1
00000638: MSTORE
00000639: PUSH1 0x00
0000063b: SWAP1
0000063c: DUP5
0000063d: PUSH1 0x40
0000063f: DUP5
00000640: ADD
00000641: DUP4
00000642: JUMPDEST
00000643: DUP7
00000644: DUP2
00000645: LT
00000646: ISZERO
00000647: PUSH2 0x066e
0000064a: JUMPI
0000064b: PUSH1 0x01
0000064d: PUSH1 0x01
0000064f: PUSH1 0xa0
00000651: SHL
00000652: SUB
00000653: PUSH2 0x065b
00000656: DUP5
00000657: PUSH2 0x0504
0000065a: JUMP
0000065b: JUMPDEST
0000065c: AND
0000065d: DUP3
0000065e: MSTORE
0000065f: SWAP2
00000660: DUP4
00000661: ADD
00000662: SWAP2
00000663: SWAP1
00000664: DUP4
00000665: ADD
00000666: SWAP1
00000667: PUSH1 0x01
00000669: ADD
0000066a: PUSH2 0x0642
0000066d: JUMP
0000066e: JUMPDEST
0000066f: POP
00000670: SWAP7
00000671: SWAP6
00000672: POP
00000673: POP
00000674: POP
00000675: POP
00000676: POP
00000677: POP
00000678: JUMP
00000679: JUMPDEST
0000067a: PUSH1 0x00
0000067c: DUP3
0000067d: NOT
0000067e: DUP3
0000067f: GT
00000680: ISZERO
00000681: PUSH2 0x068c
00000684: JUMPI
00000685: PUSH2 0x068c
00000688: PUSH2 0x06cb
0000068b: JUMP
0000068c: JUMPDEST
0000068d: POP
0000068e: ADD
0000068f: SWAP1
00000690: JUMP
00000691: JUMPDEST
00000692: PUSH1 0x00
00000694: DUP2
00000695: PUSH1 0x00
00000697: NOT
00000698: DIV
00000699: DUP4
0000069a: GT
0000069b: DUP3
0000069c: ISZERO
0000069d: ISZERO
0000069e: AND
0000069f: ISZERO
000006a0: PUSH2 0x06ab
000006a3: JUMPI
000006a4: PUSH2 0x06ab
000006a7: PUSH2 0x06cb
000006aa: JUMP
000006ab: JUMPDEST
000006ac: POP
000006ad: MUL
000006ae: SWAP1
000006af: JUMP
000006b0: JUMPDEST
000006b1: PUSH1 0x00
000006b3: PUSH1 0x00
000006b5: NOT
000006b6: DUP3
000006b7: EQ
000006b8: ISZERO
000006b9: PUSH2 0x06c4
000006bc: JUMPI
000006bd: PUSH2 0x06c4
000006c0: PUSH2 0x06cb
000006c3: JUMP
000006c4: JUMPDEST
000006c5: POP
000006c6: PUSH1 0x01
000006c8: ADD
000006c9: SWAP1
000006ca: JUMP
000006cb: JUMPDEST
000006cc: PUSH4 0x4e487b71
000006d1: PUSH1 0xe0
000006d3: SHL
000006d4: PUSH1 0x00
000006d6: MSTORE
000006d7: PUSH1 0x11
000006d9: PUSH1 0x04
000006db: MSTORE
000006dc: PUSH1 0x24
000006de: PUSH1 0x00
000006e0: REVERT
000006e1: INVALID
000006e2: LOG2
000006e3: PUSH5 0x6970667358
000006e9: UNKNOWN(0x22)
000006ea: SLT
000006eb: KECCAK256
000006ec: UNKNOWN(0xEA)
000006ed: GAS
000006ee: UNKNOWN(0xA6)
000006ef: SWAP12
000006f0: RETURNDATACOPY
000006f1: MCOPY
000006f2: UNKNOWN(0xDA)
000006f3: UNKNOWN(0xAD)
000006f4: UNKNOWN(0x4F)
000006f5: ISZERO
000006f6: UNKNOWN(0xD7)
000006f7: PUSH12 0x475bb2b70dec1d131646ef29
00000704: UNKNOWN(0xF8)
00000705: UNKNOWN(0xD4)
00000706: UNKNOWN(0xBF)
00000707: PUSH32

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
medium other detector Untrusted CALL target/value reachable 45 no no
view
trace_id: 0xad50aa1da04015282fc8d1fdcdb323c794966af5deb2d3248a9ba1a267ebb259
call_targets: 0xa9a773f61e4b8e14d24ee6aef56f8258be09558e
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xad50aa1da04015282fc8d1fdcdb323c794966af5deb2d3248a9ba1a267ebb259",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xa9a773f61e4b8e14d24ee6aef56f8258be09558e"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x61d027b3",
            "selector": "0x61d027b3",
            "calldata_variants": [
                "0x61d027b3",
                "0x61d027b30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x645b53ed",
            "selector": "0x645b53ed",
            "calldata_variants": [
                "0x645b53ed",
                "0x645b53ed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9fef990e",
            "selector": "0x9fef990e",
            "calldata_variants": [
                "0x9fef990e",
                "0x9fef990e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xed22cf43",
            "selector": "0xed22cf43",
            "calldata_variants": [
                "0xed22cf43",
                "0xed22cf430000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf51f96dd",
            "selector": "0xf51f96dd",
            "calldata_variants": [
                "0xf51f96dd",
                "0xf51f96dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x07546172",
            "selector": "0x07546172",
            "calldata_variants": [
                "0x07546172",
                "0x075461720000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ccfd60b",
            "selector": "0x3ccfd60b",
            "calldata_variants": [
                "0x3ccfd60b",
                "0x3ccfd60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3e0e828b",
            "selector": "0x3e0e828b",
            "calldata_variants": [
                "0x3e0e828b",
                "0x3e0e828b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 599,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1166,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [
        {
            "pc": 500,
            "type": "msg_sender_eq_const",
            "value": 1.3230709572855989e+48
        },
        {
            "pc": 478,
            "type": "msg_sender_eq_const",
            "value": "0xe7c08dba10ce07e1b70e87a355957cc8bfc95dbc"
        }
    ],
    "untrusted_call_count": 2
}
medium other detector ETH value transfer possible 40 no no
view
trace_id: 0xad50aa1da04015282fc8d1fdcdb323c794966af5deb2d3248a9ba1a267ebb259
call_targets: 0xa9a773f61e4b8e14d24ee6aef56f8258be09558e
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xad50aa1da04015282fc8d1fdcdb323c794966af5deb2d3248a9ba1a267ebb259",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xa9a773f61e4b8e14d24ee6aef56f8258be09558e"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x61d027b3",
            "selector": "0x61d027b3",
            "calldata_variants": [
                "0x61d027b3",
                "0x61d027b30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x645b53ed",
            "selector": "0x645b53ed",
            "calldata_variants": [
                "0x645b53ed",
                "0x645b53ed0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9fef990e",
            "selector": "0x9fef990e",
            "calldata_variants": [
                "0x9fef990e",
                "0x9fef990e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xed22cf43",
            "selector": "0xed22cf43",
            "calldata_variants": [
                "0xed22cf43",
                "0xed22cf430000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf51f96dd",
            "selector": "0xf51f96dd",
            "calldata_variants": [
                "0xf51f96dd",
                "0xf51f96dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x07546172",
            "selector": "0x07546172",
            "calldata_variants": [
                "0x07546172",
                "0x075461720000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ccfd60b",
            "selector": "0x3ccfd60b",
            "calldata_variants": [
                "0x3ccfd60b",
                "0x3ccfd60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3e0e828b",
            "selector": "0x3e0e828b",
            "calldata_variants": [
                "0x3e0e828b",
                "0x3e0e828b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 599,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1166,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": [
        {
            "pc": 500,
            "type": "msg_sender_eq_const",
            "value": 1.3230709572855989e+48
        },
        {
            "pc": 478,
            "type": "msg_sender_eq_const",
            "value": "0xe7c08dba10ce07e1b70e87a355957cc8bfc95dbc"
        }
    ]
}