TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-c172-7149-a6a8-3d6cb6a55e77

complete
Chain ID
1
Address
0x8125afd067094cd573255f82795339b9fe2a40ab
Block Number
—
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
24861 artifact.fetch complete 1 / 3 3 months ago
24862 tool.cast_disasm complete 1 / 3 3 months ago
68666 analysis.bundle complete 1 / 3 1 week ago
68667 capability.graph complete 1 / 3 1 week ago
68668 detector.run complete 1 / 3 1 week ago
68669 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
2
CALL-family (heavy)
4
EXT*/BALANCE
2
Total opcodes
1238
Flags
create_opcodes_present
View cast disassembly output 
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0095
0000000c: JUMPI
0000000d: PUSH4 0xffffffff
00000012: PUSH1 0xe0
00000014: PUSH1 0x02
00000016: EXP
00000017: PUSH1 0x00
00000019: CALLDATALOAD
0000001a: DIV
0000001b: AND
0000001c: PUSH4 0x06fdde03
00000021: DUP2
00000022: EQ
00000023: PUSH2 0x009f
00000026: JUMPI
00000027: DUP1
00000028: PUSH4 0x095ea7b3
0000002d: EQ
0000002e: PUSH2 0x0129
00000031: JUMPI
00000032: DUP1
00000033: PUSH4 0x18160ddd
00000038: EQ
00000039: PUSH2 0x0161
0000003c: JUMPI
0000003d: DUP1
0000003e: PUSH4 0x23b872dd
00000043: EQ
00000044: PUSH2 0x0188
00000047: JUMPI
00000048: DUP1
00000049: PUSH4 0x313ce567
0000004e: EQ
0000004f: PUSH2 0x01b2
00000052: JUMPI
00000053: DUP1
00000054: PUSH4 0x70a08231
00000059: EQ
0000005a: PUSH2 0x01dd
0000005d: JUMPI
0000005e: DUP1
0000005f: PUSH4 0x95d89b41
00000064: EQ
00000065: PUSH2 0x01fe
00000068: JUMPI
00000069: DUP1
0000006a: PUSH4 0xa9059cbb
0000006f: EQ
00000070: PUSH2 0x0213
00000073: JUMPI
00000074: DUP1
00000075: PUSH4 0xd0e30db0
0000007a: EQ
0000007b: PUSH2 0x0095
0000007e: JUMPI
0000007f: DUP1
00000080: PUSH4 0xdd62ed3e
00000085: EQ
00000086: PUSH2 0x0237
00000089: JUMPI
0000008a: DUP1
0000008b: PUSH4 0xf3fef3a3
00000090: EQ
00000091: PUSH2 0x025e
00000094: JUMPI
00000095: JUMPDEST
00000096: PUSH2 0x009d
00000099: PUSH2 0x0282
0000009c: JUMP
0000009d: JUMPDEST
0000009e: STOP
0000009f: JUMPDEST
000000a0: CALLVALUE
000000a1: DUP1
000000a2: ISZERO
000000a3: PUSH2 0x00ab
000000a6: JUMPI
000000a7: PUSH1 0x00
000000a9: DUP1
000000aa: REVERT
000000ab: JUMPDEST
000000ac: POP
000000ad: PUSH2 0x00b4
000000b0: PUSH2 0x02f7
000000b3: JUMP
000000b4: JUMPDEST
000000b5: PUSH1 0x40
000000b7: DUP1
000000b8: MLOAD
000000b9: PUSH1 0x20
000000bb: DUP1
000000bc: DUP3
000000bd: MSTORE
000000be: DUP4
000000bf: MLOAD
000000c0: DUP2
000000c1: DUP4
000000c2: ADD
000000c3: MSTORE
000000c4: DUP4
000000c5: MLOAD
000000c6: SWAP2
000000c7: SWAP3
000000c8: DUP4
000000c9: SWAP3
000000ca: SWAP1
000000cb: DUP4
000000cc: ADD
000000cd: SWAP2
000000ce: DUP6
000000cf: ADD
000000d0: SWAP1
000000d1: DUP1
000000d2: DUP4
000000d3: DUP4
000000d4: PUSH1 0x00
000000d6: JUMPDEST
000000d7: DUP4
000000d8: DUP2
000000d9: LT
000000da: ISZERO
000000db: PUSH2 0x00ee
000000de: JUMPI
000000df: DUP2
000000e0: DUP2
000000e1: ADD
000000e2: MLOAD
000000e3: DUP4
000000e4: DUP3
000000e5: ADD
000000e6: MSTORE
000000e7: PUSH1 0x20
000000e9: ADD
000000ea: PUSH2 0x00d6
000000ed: JUMP
000000ee: JUMPDEST
000000ef: POP
000000f0: POP
000000f1: POP
000000f2: POP
000000f3: SWAP1
000000f4: POP
000000f5: SWAP1
000000f6: DUP2
000000f7: ADD
000000f8: SWAP1
000000f9: PUSH1 0x1f
000000fb: AND
000000fc: DUP1
000000fd: ISZERO
000000fe: PUSH2 0x011b
00000101: JUMPI
00000102: DUP1
00000103: DUP3
00000104: SUB
00000105: DUP1
00000106: MLOAD
00000107: PUSH1 0x01
00000109: DUP4
0000010a: PUSH1 0x20
0000010c: SUB
0000010d: PUSH2 0x0100
00000110: EXP
00000111: SUB
00000112: NOT
00000113: AND
00000114: DUP2
00000115: MSTORE
00000116: PUSH1 0x20
00000118: ADD
00000119: SWAP2
0000011a: POP
0000011b: JUMPDEST
0000011c: POP
0000011d: SWAP3
0000011e: POP
0000011f: POP
00000120: POP
00000121: PUSH1 0x40
00000123: MLOAD
00000124: DUP1
00000125: SWAP2
00000126: SUB
00000127: SWAP1
00000128: RETURN
00000129: JUMPDEST
0000012a: CALLVALUE
0000012b: DUP1
0000012c: ISZERO
0000012d: PUSH2 0x0135
00000130: JUMPI
00000131: PUSH1 0x00
00000133: DUP1
00000134: REVERT
00000135: JUMPDEST
00000136: POP
00000137: PUSH2 0x014d
0000013a: PUSH1 0x01
0000013c: PUSH1 0xa0
0000013e: PUSH1 0x02
00000140: EXP
00000141: SUB
00000142: PUSH1 0x04
00000144: CALLDATALOAD
00000145: AND
00000146: PUSH1 0x24
00000148: CALLDATALOAD
00000149: PUSH2 0x0385
0000014c: JUMP
0000014d: JUMPDEST
0000014e: PUSH1 0x40
00000150: DUP1
00000151: MLOAD
00000152: SWAP2
00000153: ISZERO
00000154: ISZERO
00000155: DUP3
00000156: MSTORE
00000157: MLOAD
00000158: SWAP1
00000159: DUP2
0000015a: SWAP1
0000015b: SUB
0000015c: PUSH1 0x20
0000015e: ADD
0000015f: SWAP1
00000160: RETURN
00000161: JUMPDEST
00000162: CALLVALUE
00000163: DUP1
00000164: ISZERO
00000165: PUSH2 0x016d
00000168: JUMPI
00000169: PUSH1 0x00
0000016b: DUP1
0000016c: REVERT
0000016d: JUMPDEST
0000016e: POP
0000016f: PUSH2 0x0176
00000172: PUSH2 0x03eb
00000175: JUMP
00000176: JUMPDEST
00000177: PUSH1 0x40
00000179: DUP1
0000017a: MLOAD
0000017b: SWAP2
0000017c: DUP3
0000017d: MSTORE
0000017e: MLOAD
0000017f: SWAP1
00000180: DUP2
00000181: SWAP1
00000182: SUB
00000183: PUSH1 0x20
00000185: ADD
00000186: SWAP1
00000187: RETURN
00000188: JUMPDEST
00000189: CALLVALUE
0000018a: DUP1
0000018b: ISZERO
0000018c: PUSH2 0x0194
0000018f: JUMPI
00000190: PUSH1 0x00
00000192: DUP1
00000193: REVERT
00000194: JUMPDEST
00000195: POP
00000196: PUSH2 0x014d
00000199: PUSH1 0x01
0000019b: PUSH1 0xa0
0000019d: PUSH1 0x02
0000019f: EXP
000001a0: SUB
000001a1: PUSH1 0x04
000001a3: CALLDATALOAD
000001a4: DUP2
000001a5: AND
000001a6: SWAP1
000001a7: PUSH1 0x24
000001a9: CALLDATALOAD
000001aa: AND
000001ab: PUSH1 0x44
000001ad: CALLDATALOAD
000001ae: PUSH2 0x03f0
000001b1: JUMP
000001b2: JUMPDEST
000001b3: CALLVALUE
000001b4: DUP1
000001b5: ISZERO
000001b6: PUSH2 0x01be
000001b9: JUMPI
000001ba: PUSH1 0x00
000001bc: DUP1
000001bd: REVERT
000001be: JUMPDEST
000001bf: POP
000001c0: PUSH2 0x01c7
000001c3: PUSH2 0x0512
000001c6: JUMP
000001c7: JUMPDEST
000001c8: PUSH1 0x40
000001ca: DUP1
000001cb: MLOAD
000001cc: PUSH1 0xff
000001ce: SWAP1
000001cf: SWAP3
000001d0: AND
000001d1: DUP3
000001d2: MSTORE
000001d3: MLOAD
000001d4: SWAP1
000001d5: DUP2
000001d6: SWAP1
000001d7: SUB
000001d8: PUSH1 0x20
000001da: ADD
000001db: SWAP1
000001dc: RETURN
000001dd: JUMPDEST
000001de: CALLVALUE
000001df: DUP1
000001e0: ISZERO
000001e1: PUSH2 0x01e9
000001e4: JUMPI
000001e5: PUSH1 0x00
000001e7: DUP1
000001e8: REVERT
000001e9: JUMPDEST
000001ea: POP
000001eb: PUSH2 0x0176
000001ee: PUSH1 0x01
000001f0: PUSH1 0xa0
000001f2: PUSH1 0x02
000001f4: EXP
000001f5: SUB
000001f6: PUSH1 0x04
000001f8: CALLDATALOAD
000001f9: AND
000001fa: PUSH2 0x051b
000001fd: JUMP
000001fe: JUMPDEST
000001ff: CALLVALUE
00000200: DUP1
00000201: ISZERO
00000202: PUSH2 0x020a
00000205: JUMPI
00000206: PUSH1 0x00
00000208: DUP1
00000209: REVERT
0000020a: JUMPDEST
0000020b: POP
0000020c: PUSH2 0x00b4
0000020f: PUSH2 0x052d
00000212: JUMP
00000213: JUMPDEST
00000214: CALLVALUE
00000215: DUP1
00000216: ISZERO
00000217: PUSH2 0x021f
0000021a: JUMPI
0000021b: PUSH1 0x00
0000021d: DUP1
0000021e: REVERT
0000021f: JUMPDEST
00000220: POP
00000221: PUSH2 0x014d
00000224: PUSH1 0x01
00000226: PUSH1 0xa0
00000228: PUSH1 0x02
0000022a: EXP
0000022b: SUB
0000022c: PUSH1 0x04
0000022e: CALLDATALOAD
0000022f: AND
00000230: PUSH1 0x24
00000232: CALLDATALOAD
00000233: PUSH2 0x0587
00000236: JUMP
00000237: JUMPDEST
00000238: CALLVALUE
00000239: DUP1
0000023a: ISZERO
0000023b: PUSH2 0x0243
0000023e: JUMPI
0000023f: PUSH1 0x00
00000241: DUP1
00000242: REVERT
00000243: JUMPDEST
00000244: POP
00000245: PUSH2 0x0176
00000248: PUSH1 0x01
0000024a: PUSH1 0xa0
0000024c: PUSH1 0x02
0000024e: EXP
0000024f: SUB
00000250: PUSH1 0x04
00000252: CALLDATALOAD
00000253: DUP2
00000254: AND
00000255: SWAP1
00000256: PUSH1 0x24
00000258: CALLDATALOAD
00000259: AND
0000025a: PUSH2 0x059b
0000025d: JUMP
0000025e: JUMPDEST
0000025f: CALLVALUE
00000260: DUP1
00000261: ISZERO
00000262: PUSH2 0x026a
00000265: JUMPI
00000266: PUSH1 0x00
00000268: DUP1
00000269: REVERT
0000026a: JUMPDEST
0000026b: POP
0000026c: PUSH2 0x009d
0000026f: PUSH1 0x01
00000271: PUSH1 0xa0
00000273: PUSH1 0x02
00000275: EXP
00000276: SUB
00000277: PUSH1 0x04
00000279: CALLDATALOAD
0000027a: AND
0000027b: PUSH1 0x24
0000027d: CALLDATALOAD
0000027e: PUSH2 0x05b8
00000281: JUMP
00000282: JUMPDEST
00000283: CALLER
00000284: PUSH1 0x00
00000286: DUP2
00000287: DUP2
00000288: MSTORE
00000289: PUSH1 0x03
0000028b: PUSH1 0x20
0000028d: SWAP1
0000028e: DUP2
0000028f: MSTORE
00000290: PUSH1 0x40
00000292: SWAP2
00000293: DUP3
00000294: SWAP1
00000295: KECCAK256
00000296: DUP1
00000297: SLOAD
00000298: CALLVALUE
00000299: SWAP1
0000029a: DUP2
0000029b: ADD
0000029c: SWAP1
0000029d: SWAP2
0000029e: SSTORE
0000029f: DUP3
000002a0: MLOAD
000002a1: SWAP1
000002a2: DUP2
000002a3: MSTORE
000002a4: SWAP2
000002a5: MLOAD
000002a6: PUSH32 0xe1fffcc4923d04b559f4d29a8bfc6cda04eb5b0d3c460751c2402c5c5cc9109c
000002c7: SWAP3
000002c8: DUP2
000002c9: SWAP1
000002ca: SUB
000002cb: SWAP1
000002cc: SWAP2
000002cd: ADD
000002ce: SWAP1
000002cf: LOG2
000002d0: PUSH1 0x40
000002d2: DUP1
000002d3: MLOAD
000002d4: CALLVALUE
000002d5: DUP2
000002d6: MSTORE
000002d7: SWAP1
000002d8: MLOAD
000002d9: CALLER
000002da: SWAP2
000002db: PUSH1 0x00
000002dd: SWAP2
000002de: PUSH1 0x00
000002e0: DUP1
000002e1: MLOAD
000002e2: PUSH1 0x20
000002e4: PUSH2 0x067f
000002e7: DUP4
000002e8: CODECOPY
000002e9: DUP2
000002ea: MLOAD
000002eb: SWAP2
000002ec: MSTORE
000002ed: SWAP2
000002ee: DUP2
000002ef: SWAP1
000002f0: SUB
000002f1: PUSH1 0x20
000002f3: ADD
000002f4: SWAP1
000002f5: LOG3
000002f6: JUMP
000002f7: JUMPDEST
000002f8: PUSH1 0x00
000002fa: DUP1
000002fb: SLOAD
000002fc: PUSH1 0x40
000002fe: DUP1
000002ff: MLOAD
00000300: PUSH1 0x20
00000302: PUSH1 0x02
00000304: PUSH1 0x01
00000306: DUP6
00000307: AND
00000308: ISZERO
00000309: PUSH2 0x0100
0000030c: MUL
0000030d: PUSH1 0x00
0000030f: NOT
00000310: ADD
00000311: SWAP1
00000312: SWAP5
00000313: AND
00000314: SWAP4
00000315: SWAP1
00000316: SWAP4
00000317: DIV
00000318: PUSH1 0x1f
0000031a: DUP2
0000031b: ADD
0000031c: DUP5
0000031d: SWAP1
0000031e: DIV
0000031f: DUP5
00000320: MUL
00000321: DUP3
00000322: ADD
00000323: DUP5
00000324: ADD
00000325: SWAP1
00000326: SWAP3
00000327: MSTORE
00000328: DUP2
00000329: DUP2
0000032a: MSTORE
0000032b: SWAP3
0000032c: SWAP2
0000032d: DUP4
0000032e: ADD
0000032f: DUP3
00000330: DUP3
00000331: DUP1
00000332: ISZERO
00000333: PUSH2 0x037d
00000336: JUMPI
00000337: DUP1
00000338: PUSH1 0x1f
0000033a: LT
0000033b: PUSH2 0x0352
0000033e: JUMPI
0000033f: PUSH2 0x0100
00000342: DUP1
00000343: DUP4
00000344: SLOAD
00000345: DIV
00000346: MUL
00000347: DUP4
00000348: MSTORE
00000349: SWAP2
0000034a: PUSH1 0x20
0000034c: ADD
0000034d: SWAP2
0000034e: PUSH2 0x037d
00000351: JUMP
00000352: JUMPDEST
00000353: DUP3
00000354: ADD
00000355: SWAP2
00000356: SWAP1
00000357: PUSH1 0x00
00000359: MSTORE
0000035a: PUSH1 0x20
0000035c: PUSH1 0x00
0000035e: KECCAK256
0000035f: SWAP1
00000360: JUMPDEST
00000361: DUP2
00000362: SLOAD
00000363: DUP2
00000364: MSTORE
00000365: SWAP1
00000366: PUSH1 0x01
00000368: ADD
00000369: SWAP1
0000036a: PUSH1 0x20
0000036c: ADD
0000036d: DUP1
0000036e: DUP4
0000036f: GT
00000370: PUSH2 0x0360
00000373: JUMPI
00000374: DUP3
00000375: SWAP1
00000376: SUB
00000377: PUSH1 0x1f
00000379: AND
0000037a: DUP3
0000037b: ADD
0000037c: SWAP2
0000037d: JUMPDEST
0000037e: POP
0000037f: POP
00000380: POP
00000381: POP
00000382: POP
00000383: DUP2
00000384: JUMP
00000385: JUMPDEST
00000386: CALLER
00000387: PUSH1 0x00
00000389: DUP2
0000038a: DUP2
0000038b: MSTORE
0000038c: PUSH1 0x04
0000038e: PUSH1 0x20
00000390: SWAP1
00000391: DUP2
00000392: MSTORE
00000393: PUSH1 0x40
00000395: DUP1
00000396: DUP4
00000397: KECCAK256
00000398: PUSH1 0x01
0000039a: PUSH1 0xa0
0000039c: PUSH1 0x02
0000039e: EXP
0000039f: SUB
000003a0: DUP8
000003a1: AND
000003a2: DUP1
000003a3: DUP6
000003a4: MSTORE
000003a5: SWAP1
000003a6: DUP4
000003a7: MSTORE
000003a8: DUP2
000003a9: DUP5
000003aa: KECCAK256
000003ab: DUP7
000003ac: SWAP1
000003ad: SSTORE
000003ae: DUP2
000003af: MLOAD
000003b0: DUP7
000003b1: DUP2
000003b2: MSTORE
000003b3: SWAP2
000003b4: MLOAD
000003b5: SWAP4
000003b6: SWAP5
000003b7: SWAP1
000003b8: SWAP4
000003b9: SWAP1
000003ba: SWAP3
000003bb: PUSH32 0x8c5be1e5ebec7d5bd14f71427d1e84f3dd0314c0f7b2291e5b200ac8c7c3b925
000003dc: SWAP3
000003dd: DUP3
000003de: SWAP1
000003df: SUB
000003e0: ADD
000003e1: SWAP1
000003e2: LOG3
000003e3: POP
000003e4: PUSH1 0x01
000003e6: SWAP3
000003e7: SWAP2
000003e8: POP
000003e9: POP
000003ea: JUMP
000003eb: JUMPDEST
000003ec: ADDRESS
000003ed: BALANCE
000003ee: SWAP1
000003ef: JUMP
000003f0: JUMPDEST
000003f1: PUSH1 0x01
000003f3: PUSH1 0xa0
000003f5: PUSH1 0x02
000003f7: EXP
000003f8: SUB
000003f9: DUP4
000003fa: AND
000003fb: PUSH1 0x00
000003fd: SWAP1
000003fe: DUP2
000003ff: MSTORE
00000400: PUSH1 0x03
00000402: PUSH1 0x20
00000404: MSTORE
00000405: PUSH1 0x40
00000407: DUP2
00000408: KECCAK256
00000409: SLOAD
0000040a: DUP3
0000040b: GT
0000040c: ISZERO
0000040d: PUSH2 0x0415
00000410: JUMPI
00000411: PUSH1 0x00
00000413: DUP1
00000414: REVERT
00000415: JUMPDEST
00000416: PUSH1 0x01
00000418: PUSH1 0xa0
0000041a: PUSH1 0x02
0000041c: EXP
0000041d: SUB
0000041e: DUP5
0000041f: AND
00000420: CALLER
00000421: EQ
00000422: DUP1
00000423: ISZERO
00000424: SWAP1
00000425: PUSH2 0x0453
00000428: JUMPI
00000429: POP
0000042a: PUSH1 0x01
0000042c: PUSH1 0xa0
0000042e: PUSH1 0x02
00000430: EXP
00000431: SUB
00000432: DUP5
00000433: AND
00000434: PUSH1 0x00
00000436: SWAP1
00000437: DUP2
00000438: MSTORE
00000439: PUSH1 0x04
0000043b: PUSH1 0x20
0000043d: SWAP1
0000043e: DUP2
0000043f: MSTORE
00000440: PUSH1 0x40
00000442: DUP1
00000443: DUP4
00000444: KECCAK256
00000445: CALLER
00000446: DUP5
00000447: MSTORE
00000448: SWAP1
00000449: SWAP2
0000044a: MSTORE
0000044b: SWAP1
0000044c: KECCAK256
0000044d: SLOAD
0000044e: PUSH1 0x00
00000450: NOT
00000451: EQ
00000452: ISZERO
00000453: JUMPDEST
00000454: ISZERO
00000455: PUSH2 0x04b3
00000458: JUMPI
00000459: PUSH1 0x01
0000045b: PUSH1 0xa0
0000045d: PUSH1 0x02
0000045f: EXP
00000460: SUB
00000461: DUP5
00000462: AND
00000463: PUSH1 0x00
00000465: SWAP1
00000466: DUP2
00000467: MSTORE
00000468: PUSH1 0x04
0000046a: PUSH1 0x20
0000046c: SWAP1
0000046d: DUP2
0000046e: MSTORE
0000046f: PUSH1 0x40
00000471: DUP1
00000472: DUP4
00000473: KECCAK256
00000474: CALLER
00000475: DUP5
00000476: MSTORE
00000477: SWAP1
00000478: SWAP2
00000479: MSTORE
0000047a: SWAP1
0000047b: KECCAK256
0000047c: SLOAD
0000047d: DUP3
0000047e: GT
0000047f: ISZERO
00000480: PUSH2 0x0488
00000483: JUMPI
00000484: PUSH1 0x00
00000486: DUP1
00000487: REVERT
00000488: JUMPDEST
00000489: PUSH1 0x01
0000048b: PUSH1 0xa0
0000048d: PUSH1 0x02
0000048f: EXP
00000490: SUB
00000491: DUP5
00000492: AND
00000493: PUSH1 0x00
00000495: SWAP1
00000496: DUP2
00000497: MSTORE
00000498: PUSH1 0x04
0000049a: PUSH1 0x20
0000049c: SWAP1
0000049d: DUP2
0000049e: MSTORE
0000049f: PUSH1 0x40
000004a1: DUP1
000004a2: DUP4
000004a3: KECCAK256
000004a4: CALLER
000004a5: DUP5
000004a6: MSTORE
000004a7: SWAP1
000004a8: SWAP2
000004a9: MSTORE
000004aa: SWAP1
000004ab: KECCAK256
000004ac: DUP1
000004ad: SLOAD
000004ae: DUP4
000004af: SWAP1
000004b0: SUB
000004b1: SWAP1
000004b2: SSTORE
000004b3: JUMPDEST
000004b4: PUSH1 0x01
000004b6: PUSH1 0xa0
000004b8: PUSH1 0x02
000004ba: EXP
000004bb: SUB
000004bc: DUP1
000004bd: DUP6
000004be: AND
000004bf: PUSH1 0x00
000004c1: DUP2
000004c2: DUP2
000004c3: MSTORE
000004c4: PUSH1 0x03
000004c6: PUSH1 0x20
000004c8: SWAP1
000004c9: DUP2
000004ca: MSTORE
000004cb: PUSH1 0x40
000004cd: DUP1
000004ce: DUP4
000004cf: KECCAK256
000004d0: DUP1
000004d1: SLOAD
000004d2: DUP9
000004d3: SWAP1
000004d4: SUB
000004d5: SWAP1
000004d6: SSTORE
000004d7: SWAP4
000004d8: DUP8
000004d9: AND
000004da: DUP1
000004db: DUP4
000004dc: MSTORE
000004dd: SWAP2
000004de: DUP5
000004df: SWAP1
000004e0: KECCAK256
000004e1: DUP1
000004e2: SLOAD
000004e3: DUP8
000004e4: ADD
000004e5: SWAP1
000004e6: SSTORE
000004e7: DUP4
000004e8: MLOAD
000004e9: DUP7
000004ea: DUP2
000004eb: MSTORE
000004ec: SWAP4
000004ed: MLOAD
000004ee: SWAP2
000004ef: SWAP4
000004f0: PUSH1 0x00
000004f2: DUP1
000004f3: MLOAD
000004f4: PUSH1 0x20
000004f6: PUSH2 0x067f
000004f9: DUP4
000004fa: CODECOPY
000004fb: DUP2
000004fc: MLOAD
000004fd: SWAP2
000004fe: MSTORE
000004ff: SWAP3
00000500: SWAP1
00000501: DUP2
00000502: SWAP1
00000503: SUB
00000504: SWAP1
00000505: SWAP2
00000506: ADD
00000507: SWAP1
00000508: LOG3
00000509: POP
0000050a: PUSH1 0x01
0000050c: SWAP4
0000050d: SWAP3
0000050e: POP
0000050f: POP
00000510: POP
00000511: JUMP
00000512: JUMPDEST
00000513: PUSH1 0x02
00000515: SLOAD
00000516: PUSH1 0xff
00000518: AND
00000519: DUP2
0000051a: JUMP
0000051b: JUMPDEST
0000051c: PUSH1 0x03
0000051e: PUSH1 0x20
00000520: MSTORE
00000521: PUSH1 0x00
00000523: SWAP1
00000524: DUP2
00000525: MSTORE
00000526: PUSH1 0x40
00000528: SWAP1
00000529: KECCAK256
0000052a: SLOAD
0000052b: DUP2
0000052c: JUMP
0000052d: JUMPDEST
0000052e: PUSH1 0x01
00000530: DUP1
00000531: SLOAD
00000532: PUSH1 0x40
00000534: DUP1
00000535: MLOAD
00000536: PUSH1 0x20
00000538: PUSH1 0x02
0000053a: DUP5
0000053b: DUP7
0000053c: AND
0000053d: ISZERO
0000053e: PUSH2 0x0100
00000541: MUL
00000542: PUSH1 0x00
00000544: NOT
00000545: ADD
00000546: SWAP1
00000547: SWAP5
00000548: AND
00000549: SWAP4
0000054a: SWAP1
0000054b: SWAP4
0000054c: DIV
0000054d: PUSH1 0x1f
0000054f: DUP2
00000550: ADD
00000551: DUP5
00000552: SWAP1
00000553: DIV
00000554: DUP5
00000555: MUL
00000556: DUP3
00000557: ADD
00000558: DUP5
00000559: ADD
0000055a: SWAP1
0000055b: SWAP3
0000055c: MSTORE
0000055d: DUP2
0000055e: DUP2
0000055f: MSTORE
00000560: SWAP3
00000561: SWAP2
00000562: DUP4
00000563: ADD
00000564: DUP3
00000565: DUP3
00000566: DUP1
00000567: ISZERO
00000568: PUSH2 0x037d
0000056b: JUMPI
0000056c: DUP1
0000056d: PUSH1 0x1f
0000056f: LT
00000570: PUSH2 0x0352
00000573: JUMPI
00000574: PUSH2 0x0100
00000577: DUP1
00000578: DUP4
00000579: SLOAD
0000057a: DIV
0000057b: MUL
0000057c: DUP4
0000057d: MSTORE
0000057e: SWAP2
0000057f: PUSH1 0x20
00000581: ADD
00000582: SWAP2
00000583: PUSH2 0x037d
00000586: JUMP
00000587: JUMPDEST
00000588: PUSH1 0x00
0000058a: PUSH2 0x0594
0000058d: CALLER
0000058e: DUP5
0000058f: DUP5
00000590: PUSH2 0x03f0
00000593: JUMP
00000594: JUMPDEST
00000595: SWAP4
00000596: SWAP3
00000597: POP
00000598: POP
00000599: POP
0000059a: JUMP
0000059b: JUMPDEST
0000059c: PUSH1 0x04
0000059e: PUSH1 0x20
000005a0: SWAP1
000005a1: DUP2
000005a2: MSTORE
000005a3: PUSH1 0x00
000005a5: SWAP3
000005a6: DUP4
000005a7: MSTORE
000005a8: PUSH1 0x40
000005aa: DUP1
000005ab: DUP5
000005ac: KECCAK256
000005ad: SWAP1
000005ae: SWAP2
000005af: MSTORE
000005b0: SWAP1
000005b1: DUP3
000005b2: MSTORE
000005b3: SWAP1
000005b4: KECCAK256
000005b5: SLOAD
000005b6: DUP2
000005b7: JUMP
000005b8: JUMPDEST
000005b9: CALLER
000005ba: PUSH1 0x00
000005bc: SWAP1
000005bd: DUP2
000005be: MSTORE
000005bf: PUSH1 0x03
000005c1: PUSH1 0x20
000005c3: MSTORE
000005c4: PUSH1 0x40
000005c6: SWAP1
000005c7: KECCAK256
000005c8: SLOAD
000005c9: DUP2
000005ca: GT
000005cb: ISZERO
000005cc: PUSH2 0x05d4
000005cf: JUMPI
000005d0: PUSH1 0x00
000005d2: DUP1
000005d3: REVERT
000005d4: JUMPDEST
000005d5: CALLER
000005d6: PUSH1 0x00
000005d8: SWAP1
000005d9: DUP2
000005da: MSTORE
000005db: PUSH1 0x03
000005dd: PUSH1 0x20
000005df: MSTORE
000005e0: PUSH1 0x40
000005e2: DUP1
000005e3: DUP3
000005e4: KECCAK256
000005e5: DUP1
000005e6: SLOAD
000005e7: DUP5
000005e8: SWAP1
000005e9: SUB
000005ea: SWAP1
000005eb: SSTORE
000005ec: MLOAD
000005ed: PUSH1 0x01
000005ef: PUSH1 0xa0
000005f1: PUSH1 0x02
000005f3: EXP
000005f4: SUB
000005f5: DUP5
000005f6: AND
000005f7: SWAP2
000005f8: DUP4
000005f9: ISZERO
000005fa: PUSH2 0x08fc
000005fd: MUL
000005fe: SWAP2
000005ff: DUP5
00000600: SWAP2
00000601: DUP2
00000602: DUP2
00000603: DUP2
00000604: DUP6
00000605: DUP9
00000606: DUP9
00000607: CALL
00000608: SWAP4
00000609: POP
0000060a: POP
0000060b: POP
0000060c: POP
0000060d: ISZERO
0000060e: DUP1
0000060f: ISZERO
00000610: PUSH2 0x061d
00000613: JUMPI
00000614: RETURNDATASIZE
00000615: PUSH1 0x00
00000617: DUP1
00000618: RETURNDATACOPY
00000619: RETURNDATASIZE
0000061a: PUSH1 0x00
0000061c: REVERT
0000061d: JUMPDEST
0000061e: POP
0000061f: PUSH1 0x40
00000621: DUP1
00000622: MLOAD
00000623: DUP3
00000624: DUP2
00000625: MSTORE
00000626: SWAP1
00000627: MLOAD
00000628: CALLER
00000629: SWAP2
0000062a: PUSH32 0x7fcf532c15f0a6db0bd6d0e038bea71d30d808c7d98cb3bf7268a95bf5081b65
0000064b: SWAP2
0000064c: SWAP1
0000064d: DUP2
0000064e: SWAP1
0000064f: SUB
00000650: PUSH1 0x20
00000652: ADD
00000653: SWAP1
00000654: LOG2
00000655: PUSH1 0x40
00000657: DUP1
00000658: MLOAD
00000659: DUP3
0000065a: DUP2
0000065b: MSTORE
0000065c: SWAP1
0000065d: MLOAD
0000065e: PUSH1 0x00
00000660: SWAP2
00000661: CALLER
00000662: SWAP2
00000663: PUSH1 0x00
00000665: DUP1
00000666: MLOAD
00000667: PUSH1 0x20
00000669: PUSH2 0x067f
0000066c: DUP4
0000066d: CODECOPY
0000066e: DUP2
0000066f: MLOAD
00000670: SWAP2
00000671: MSTORE
00000672: SWAP2
00000673: DUP2
00000674: SWAP1
00000675: SUB
00000676: PUSH1 0x20
00000678: ADD
00000679: SWAP1
0000067a: LOG3
0000067b: POP
0000067c: POP
0000067d: JUMP
0000067e: STOP
0000067f: UNKNOWN(0xDD)
00000680: CALLCODE
00000681: MSTORE
00000682: UNKNOWN(0xAD)
00000683: SHL
00000684: UNKNOWN(0xE2)
00000685: UNKNOWN(0xC8)
00000686: SWAP12
00000687: PUSH10 0xc2b068fc378daa952ba7
00000692: CALL
00000693: PUSH4 0xc4a11628
00000698: CREATE2
00000699: GAS
0000069a: UNKNOWN(0x4D)
0000069b: CREATE2
0000069c: UNKNOWN(0x23)
0000069d: UNKNOWN(0xB3)
0000069e: UNKNOWN(0xEF)
0000069f: LOG1
000006a0: PUSH6 0x627a7a723058
000006a7: KECCAK256
000006a8: UNKNOWN(0xCD)
000006a9: PUSH2 0x4afa
000006ac: PUSH10 0x6a3f9b67f5d8f18d3bdb
000006b7: BLOBBASEFEE
000006b8: UNKNOWN(0x1F)
000006b9: SELFBALANCE
000006ba: UNKNOWN(0xC1)
000006bb: RETURNDATACOPY
000006bc: GAS
000006bd: STATICCALL
000006be: SWAP3
000006bf: SWAP2
000006c0: XOR
000006c1: UNKNOWN(0xE6)
000006c2: SHR
000006c3: UNKNOWN(0xF9)
000006c4: EXTCODESIZE
000006c5: PUSH11

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x5c51bf7d6f4deb2bd2a885468dcc901341e8800dc8b7e6c85c321f776bc8231f
call_targets: 0x8125afd067094cd573255f82795339b9fe2a40ab
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x5c51bf7d6f4deb2bd2a885468dcc901341e8800dc8b7e6c85c321f776bc8231f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8125afd067094cd573255f82795339b9fe2a40ab"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x095ea7b3",
            "selector": "0x095ea7b3",
            "calldata_variants": [
                "0x095ea7b3",
                "0x095ea7b30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x95d89b41",
            "selector": "0x95d89b41",
            "calldata_variants": [
                "0x95d89b41",
                "0x95d89b410000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa9059cbb",
            "selector": "0xa9059cbb",
            "calldata_variants": [
                "0xa9059cbb",
                "0xa9059cbb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 1543,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1664,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1682,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 3
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x5c51bf7d6f4deb2bd2a885468dcc901341e8800dc8b7e6c85c321f776bc8231f
call_targets: 0x8125afd067094cd573255f82795339b9fe2a40ab
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x5c51bf7d6f4deb2bd2a885468dcc901341e8800dc8b7e6c85c321f776bc8231f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8125afd067094cd573255f82795339b9fe2a40ab"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x095ea7b3",
            "selector": "0x095ea7b3",
            "calldata_variants": [
                "0x095ea7b3",
                "0x095ea7b30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x95d89b41",
            "selector": "0x95d89b41",
            "calldata_variants": [
                "0x95d89b41",
                "0x95d89b410000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa9059cbb",
            "selector": "0xa9059cbb",
            "calldata_variants": [
                "0xa9059cbb",
                "0xa9059cbb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 1543,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1664,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1682,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 3,
    "guards_detected": []
}
medium other detector CREATE/CREATE2 reachable 45 no no
view
trace_id: 0x7f1322835b66d9382fef20f226a9afa02ac041d0ef389774489b05e10b149cb9
validation_json 
{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 22,
    "trace_id": "0x7f1322835b66d9382fef20f226a9afa02ac041d0ef389774489b05e10b149cb9",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x06fdde03",
            "selector": "0x06fdde03",
            "calldata_variants": [
                "0x06fdde03",
                "0x06fdde030000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x095ea7b3",
            "selector": "0x095ea7b3",
            "calldata_variants": [
                "0x095ea7b3",
                "0x095ea7b30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x18160ddd",
            "selector": "0x18160ddd",
            "calldata_variants": [
                "0x18160ddd",
                "0x18160ddd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x23b872dd",
            "selector": "0x23b872dd",
            "calldata_variants": [
                "0x23b872dd",
                "0x23b872dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x313ce567",
            "selector": "0x313ce567",
            "calldata_variants": [
                "0x313ce567",
                "0x313ce5670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x70a08231",
            "selector": "0x70a08231",
            "calldata_variants": [
                "0x70a08231",
                "0x70a082310000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x95d89b41",
            "selector": "0x95d89b41",
            "calldata_variants": [
                "0x95d89b41",
                "0x95d89b410000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa9059cbb",
            "selector": "0xa9059cbb",
            "calldata_variants": [
                "0xa9059cbb",
                "0xa9059cbb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "create_count": 0,
    "create2_count": 2
}