019b477e-c1d1-71c9-b4c3-5feb0bc09b22
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 24927 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 24928 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 102664 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 102665 | capability.graph | complete | 1 / 3 | 1 week ago |
| 102666 | detector.run | complete | 1 / 3 | 1 week ago |
| 102667 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x003f 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH1 0xe0 00000012: SHR 00000013: DUP1 00000014: PUSH4 0x025313a2 00000019: EQ 0000001a: PUSH2 0x0091 0000001d: JUMPI 0000001e: DUP1 0000001f: PUSH4 0x3659cfe6 00000024: EQ 00000025: PUSH2 0x00cb 00000028: JUMPI 00000029: DUP1 0000002a: PUSH4 0x5c60da1b 0000002f: EQ 00000030: PUSH2 0x00ed 00000033: JUMPI 00000034: DUP1 00000035: PUSH4 0xf1739cae 0000003a: EQ 0000003b: PUSH2 0x010f 0000003e: JUMPI 0000003f: JUMPDEST 00000040: PUSH1 0x00 00000042: PUSH2 0x0057 00000045: PUSH1 0x00 00000047: DUP1 00000048: MLOAD 00000049: PUSH1 0x20 0000004b: PUSH2 0x02f0 0000004e: DUP4 0000004f: CODECOPY 00000050: DUP2 00000051: MLOAD 00000052: SWAP2 00000053: MSTORE 00000054: SLOAD 00000055: SWAP1 00000056: JUMP 00000057: JUMPDEST 00000058: SWAP1 00000059: POP 0000005a: PUSH1 0x01 0000005c: PUSH1 0x01 0000005e: PUSH1 0xa0 00000060: SHL 00000061: SUB 00000062: DUP2 00000063: AND 00000064: PUSH2 0x006c 00000067: JUMPI 00000068: PUSH1 0x00 0000006a: DUP1 0000006b: REVERT 0000006c: JUMPDEST 0000006d: PUSH1 0x40 0000006f: MLOAD 00000070: CALLDATASIZE 00000071: PUSH1 0x00 00000073: DUP3 00000074: CALLDATACOPY 00000075: PUSH1 0x00 00000077: DUP1 00000078: CALLDATASIZE 00000079: DUP4 0000007a: DUP6 0000007b: GAS 0000007c: DELEGATECALL 0000007d: RETURNDATASIZE 0000007e: DUP1 0000007f: PUSH1 0x00 00000081: DUP5 00000082: RETURNDATACOPY 00000083: DUP2 00000084: DUP1 00000085: ISZERO 00000086: PUSH2 0x008d 00000089: JUMPI 0000008a: DUP2 0000008b: DUP5 0000008c: RETURN 0000008d: JUMPDEST 0000008e: DUP2 0000008f: DUP5 00000090: REVERT 00000091: JUMPDEST 00000092: CALLVALUE 00000093: DUP1 00000094: ISZERO 00000095: PUSH2 0x009d 00000098: JUMPI 00000099: PUSH1 0x00 0000009b: DUP1 0000009c: REVERT 0000009d: JUMPDEST 0000009e: POP 0000009f: PUSH1 0x00 000000a1: DUP1 000000a2: MLOAD 000000a3: PUSH1 0x20 000000a5: PUSH2 0x02d0 000000a8: DUP4 000000a9: CODECOPY 000000aa: DUP2 000000ab: MLOAD 000000ac: SWAP2 000000ad: MSTORE 000000ae: SLOAD 000000af: JUMPDEST 000000b0: PUSH1 0x40 000000b2: MLOAD 000000b3: PUSH1 0x01 000000b5: PUSH1 0x01 000000b7: PUSH1 0xa0 000000b9: SHL 000000ba: SUB 000000bb: SWAP1 000000bc: SWAP2 000000bd: AND 000000be: DUP2 000000bf: MSTORE 000000c0: PUSH1 0x20 000000c2: ADD 000000c3: PUSH1 0x40 000000c5: MLOAD 000000c6: DUP1 000000c7: SWAP2 000000c8: SUB 000000c9: SWAP1 000000ca: RETURN 000000cb: JUMPDEST 000000cc: CALLVALUE 000000cd: DUP1 000000ce: ISZERO 000000cf: PUSH2 0x00d7 000000d2: JUMPI 000000d3: PUSH1 0x00 000000d5: DUP1 000000d6: REVERT 000000d7: JUMPDEST 000000d8: POP 000000d9: PUSH2 0x00eb 000000dc: PUSH2 0x00e6 000000df: CALLDATASIZE 000000e0: PUSH1 0x04 000000e2: PUSH2 0x02a1 000000e5: JUMP 000000e6: JUMPDEST 000000e7: PUSH2 0x012f 000000ea: JUMP 000000eb: JUMPDEST 000000ec: STOP 000000ed: JUMPDEST 000000ee: CALLVALUE 000000ef: DUP1 000000f0: ISZERO 000000f1: PUSH2 0x00f9 000000f4: JUMPI 000000f5: PUSH1 0x00 000000f7: DUP1 000000f8: REVERT 000000f9: JUMPDEST 000000fa: POP 000000fb: PUSH1 0x00 000000fd: DUP1 000000fe: MLOAD 000000ff: PUSH1 0x20 00000101: PUSH2 0x02f0 00000104: DUP4 00000105: CODECOPY 00000106: DUP2 00000107: MLOAD 00000108: SWAP2 00000109: MSTORE 0000010a: SLOAD 0000010b: PUSH2 0x00af 0000010e: JUMP 0000010f: JUMPDEST 00000110: CALLVALUE 00000111: DUP1 00000112: ISZERO 00000113: PUSH2 0x011b 00000116: JUMPI 00000117: PUSH1 0x00 00000119: DUP1 0000011a: REVERT 0000011b: JUMPDEST 0000011c: POP 0000011d: PUSH2 0x00eb 00000120: PUSH2 0x012a 00000123: CALLDATASIZE 00000124: PUSH1 0x04 00000126: PUSH2 0x02a1 00000129: JUMP 0000012a: JUMPDEST 0000012b: PUSH2 0x0168 0000012e: JUMP 0000012f: JUMPDEST 00000130: PUSH1 0x00 00000132: DUP1 00000133: MLOAD 00000134: PUSH1 0x20 00000136: PUSH2 0x02d0 00000139: DUP4 0000013a: CODECOPY 0000013b: DUP2 0000013c: MLOAD 0000013d: SWAP2 0000013e: MSTORE 0000013f: SLOAD 00000140: PUSH1 0x01 00000142: PUSH1 0x01 00000144: PUSH1 0xa0 00000146: SHL 00000147: SUB 00000148: AND 00000149: CALLER 0000014a: PUSH1 0x01 0000014c: PUSH1 0x01 0000014e: PUSH1 0xa0 00000150: SHL 00000151: SUB 00000152: AND 00000153: EQ 00000154: PUSH2 0x015c 00000157: JUMPI 00000158: PUSH1 0x00 0000015a: DUP1 0000015b: REVERT 0000015c: JUMPDEST 0000015d: PUSH2 0x0165 00000160: DUP2 00000161: PUSH2 0x021a 00000164: JUMP 00000165: JUMPDEST 00000166: POP 00000167: JUMP 00000168: JUMPDEST 00000169: PUSH1 0x00 0000016b: DUP1 0000016c: MLOAD 0000016d: PUSH1 0x20 0000016f: PUSH2 0x02d0 00000172: DUP4 00000173: CODECOPY 00000174: DUP2 00000175: MLOAD 00000176: SWAP2 00000177: MSTORE 00000178: SLOAD 00000179: PUSH1 0x01 0000017b: PUSH1 0x01 0000017d: PUSH1 0xa0 0000017f: SHL 00000180: SUB 00000181: AND 00000182: CALLER 00000183: PUSH1 0x01 00000185: PUSH1 0x01 00000187: PUSH1 0xa0 00000189: SHL 0000018a: SUB 0000018b: AND 0000018c: EQ 0000018d: PUSH2 0x0195 00000190: JUMPI 00000191: PUSH1 0x00 00000193: DUP1 00000194: REVERT 00000195: JUMPDEST 00000196: PUSH1 0x01 00000198: PUSH1 0x01 0000019a: PUSH1 0xa0 0000019c: SHL 0000019d: SUB 0000019e: DUP2 0000019f: AND 000001a0: PUSH2 0x01a8 000001a3: JUMPI 000001a4: PUSH1 0x00 000001a6: DUP1 000001a7: REVERT 000001a8: JUMPDEST 000001a9: PUSH2 0x01be 000001ac: DUP2 000001ad: PUSH1 0x00 000001af: DUP1 000001b0: MLOAD 000001b1: PUSH1 0x20 000001b3: PUSH2 0x02d0 000001b6: DUP4 000001b7: CODECOPY 000001b8: DUP2 000001b9: MLOAD 000001ba: SWAP2 000001bb: MSTORE 000001bc: SSTORE 000001bd: JUMP 000001be: JUMPDEST 000001bf: PUSH32 0x5a3e66efaa1e445ebd894728a69d6959842ea1e97bd79b892797106e270efcd9 000001e0: PUSH2 0x01f5 000001e3: PUSH1 0x00 000001e5: DUP1 000001e6: MLOAD 000001e7: PUSH1 0x20 000001e9: PUSH2 0x02d0 000001ec: DUP4 000001ed: CODECOPY 000001ee: DUP2 000001ef: MLOAD 000001f0: SWAP2 000001f1: MSTORE 000001f2: SLOAD 000001f3: SWAP1 000001f4: JUMP 000001f5: JUMPDEST 000001f6: PUSH1 0x40 000001f8: DUP1 000001f9: MLOAD 000001fa: PUSH1 0x01 000001fc: PUSH1 0x01 000001fe: PUSH1 0xa0 00000200: SHL 00000201: SUB 00000202: SWAP3 00000203: DUP4 00000204: AND 00000205: DUP2 00000206: MSTORE 00000207: SWAP2 00000208: DUP5 00000209: AND 0000020a: PUSH1 0x20 0000020c: DUP4 0000020d: ADD 0000020e: MSTORE 0000020f: ADD 00000210: PUSH1 0x40 00000212: MLOAD 00000213: DUP1 00000214: SWAP2 00000215: SUB 00000216: SWAP1 00000217: LOG1 00000218: POP 00000219: JUMP 0000021a: JUMPDEST 0000021b: PUSH1 0x00 0000021d: PUSH2 0x0232 00000220: PUSH1 0x00 00000222: DUP1 00000223: MLOAD 00000224: PUSH1 0x20 00000226: PUSH2 0x02f0 00000229: DUP4 0000022a: CODECOPY 0000022b: DUP2 0000022c: MLOAD 0000022d: SWAP2 0000022e: MSTORE 0000022f: SLOAD 00000230: SWAP1 00000231: JUMP 00000232: JUMPDEST 00000233: SWAP1 00000234: POP 00000235: DUP2 00000236: PUSH1 0x01 00000238: PUSH1 0x01 0000023a: PUSH1 0xa0 0000023c: SHL 0000023d: SUB 0000023e: AND 0000023f: DUP2 00000240: PUSH1 0x01 00000242: PUSH1 0x01 00000244: PUSH1 0xa0 00000246: SHL 00000247: SUB 00000248: AND 00000249: EQ 0000024a: ISZERO 0000024b: PUSH2 0x0253 0000024e: JUMPI 0000024f: PUSH1 0x00 00000251: DUP1 00000252: REVERT 00000253: JUMPDEST 00000254: PUSH2 0x0269 00000257: DUP3 00000258: PUSH1 0x00 0000025a: DUP1 0000025b: MLOAD 0000025c: PUSH1 0x20 0000025e: PUSH2 0x02f0 00000261: DUP4 00000262: CODECOPY 00000263: DUP2 00000264: MLOAD 00000265: SWAP2 00000266: MSTORE 00000267: SSTORE 00000268: JUMP 00000269: JUMPDEST 0000026a: PUSH1 0x40 0000026c: MLOAD 0000026d: PUSH1 0x01 0000026f: PUSH1 0x01 00000271: PUSH1 0xa0 00000273: SHL 00000274: SUB 00000275: DUP4 00000276: AND 00000277: SWAP1 00000278: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b 00000299: SWAP1 0000029a: PUSH1 0x00 0000029c: SWAP1 0000029d: LOG2 0000029e: POP 0000029f: POP 000002a0: JUMP 000002a1: JUMPDEST 000002a2: PUSH1 0x00 000002a4: PUSH1 0x20 000002a6: DUP3 000002a7: DUP5 000002a8: SUB 000002a9: SLT 000002aa: ISZERO 000002ab: PUSH2 0x02b2 000002ae: JUMPI 000002af: DUP1 000002b0: DUP2 000002b1: REVERT 000002b2: JUMPDEST 000002b3: DUP2 000002b4: CALLDATALOAD 000002b5: PUSH1 0x01 000002b7: PUSH1 0x01 000002b9: PUSH1 0xa0 000002bb: SHL 000002bc: SUB 000002bd: DUP2 000002be: AND 000002bf: DUP2 000002c0: EQ 000002c1: PUSH2 0x02c8 000002c4: JUMPI 000002c5: DUP2 000002c6: DUP3 000002c7: REVERT 000002c8: JUMPDEST 000002c9: SWAP4 000002ca: SWAP3 000002cb: POP 000002cc: POP 000002cd: POP 000002ce: JUMP 000002cf: INVALID 000002d0: DUP2 000002d1: DUP4 000002d2: JUMPI 000002d3: UNKNOWN(0x25) 000002d4: DUP3 000002d5: DUP12 000002d6: CODESIZE 000002d7: UNKNOWN(0xAD) 000002d8: UNKNOWN(0xC3) 000002d9: UNKNOWN(0xEC) 000002da: DIFFICULTY 000002db: UNKNOWN(0x4C) 000002dc: JUMPI 000002dd: UNKNOWN(0xE4) 000002de: PUSH20 0x9a3dbb8f6c811b0e30ed0fd7af300fd2a8d9b552 000002f3: PUSH23 0x818c04b253761a44ce8fdb05c84792b93f45b730ef7f7a 0000030b: UNKNOWN(0xDC) 0000030c: UNKNOWN(0xB2) 0000030d: UNKNOWN(0xD9) 0000030e: LOG4 0000030f: LT 00000310: LOG2 00000311: PUSH5 0x6970667358 00000317: UNKNOWN(0x22) 00000318: SLT 00000319: KECCAK256 0000031a: UNKNOWN(0x27) 0000031b: BLOBBASEFEE 0000031c: SSTORE 0000031d: ADD 0000031e: UNKNOWN(0xAE) 0000031f: SHR 00000320: UNKNOWN(0x0C) 00000321: MCOPY 00000322: UNKNOWN(0xBB) 00000323: UNKNOWN(0xD9) 00000324: RETURNDATACOPY 00000325: UNKNOWN(0xD9) 00000326: UNKNOWN(0xCB) 00000327: UNKNOWN(0x2A) 00000328: CALLCODE 00000329: AND 0000032a: RETURNDATASIZE 0000032b: BLOBHASH 0000032c: CREATE2 0000032d: UNKNOWN(0xE5) 0000032e: UNKNOWN(0xC8) 0000032f: UNKNOWN(0xC3) 00000330: UNKNOWN(0x2E) 00000331: UNKNOWN(0xE5) 00000332: SHL 00000333: DUP4 00000334: UNKNOWN(0xF8) 00000335: SWAP16 00000336: DUP6 00000337: GASLIMIT 00000338: PUSH1 0x6c 0000033a: PUSH5 0x736f6c6343 00000340: STOP 00000341: ADDMOD 00000342: DIV 00000343: STOP 00000344: CALLER
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0xee4d7d45e33c4a69c33732d3c26db5aa021a68a2e6ce566f1e71da64dccf4810
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "unknown",
"attempts": 48,
"trace_id": "0xee4d7d45e33c4a69c33732d3c26db5aa021a68a2e6ce566f1e71da64dccf4810",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x025313a2",
"selector": "0x025313a2",
"calldata_variants": [
"0x025313a2",
"0x025313a20000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3659cfe6",
"selector": "0x3659cfe6",
"calldata_variants": [
"0x3659cfe6",
"0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf1739cae",
"selector": "0xf1739cae",
"calldata_variants": [
"0xf1739cae",
"0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 124,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 1,
"untrusted_delegatecall_count": 1
}
|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x7733929ffed9d7bf65d3eb01a9aff4caf51e32fb86454bb9a1cb56e5a0cfe519
call_targets:
0x1337def1df05794b92f009e8b4ec1e87d85f1318
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x7733929ffed9d7bf65d3eb01a9aff4caf51e32fb86454bb9a1cb56e5a0cfe519",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x1337def1df05794b92f009e8b4ec1e87d85f1318"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x025313a2",
"selector": "0x025313a2",
"calldata_variants": [
"0x025313a2",
"0x025313a20000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3659cfe6",
"selector": "0x3659cfe6",
"calldata_variants": [
"0x3659cfe6",
"0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf1739cae",
"selector": "0xf1739cae",
"calldata_variants": [
"0xf1739cae",
"0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 808,
"opcode": "CALLCODE",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x7733929ffed9d7bf65d3eb01a9aff4caf51e32fb86454bb9a1cb56e5a0cfe519
call_targets:
0x1337def1df05794b92f009e8b4ec1e87d85f1318
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x7733929ffed9d7bf65d3eb01a9aff4caf51e32fb86454bb9a1cb56e5a0cfe519",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x1337def1df05794b92f009e8b4ec1e87d85f1318"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x025313a2",
"selector": "0x025313a2",
"calldata_variants": [
"0x025313a2",
"0x025313a20000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3659cfe6",
"selector": "0x3659cfe6",
"calldata_variants": [
"0x3659cfe6",
"0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf1739cae",
"selector": "0xf1739cae",
"calldata_variants": [
"0xf1739cae",
"0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 808,
"opcode": "CALLCODE",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|
| medium | other | detector | CREATE/CREATE2 reachable | 45 | no | no |
viewtrace_id: 0x75b17556806c6dda5e95e39cee5b0fd23c360ceb174eb28e7bc6a4143b300efd
validation_json{
"sink": "CREATE",
"errors": 0,
"status": "unknown",
"attempts": 8,
"trace_id": "0x75b17556806c6dda5e95e39cee5b0fd23c360ceb174eb28e7bc6a4143b300efd",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x025313a2",
"selector": "0x025313a2",
"calldata_variants": [
"0x025313a2",
"0x025313a20000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3659cfe6",
"selector": "0x3659cfe6",
"calldata_variants": [
"0x3659cfe6",
"0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf1739cae",
"selector": "0xf1739cae",
"calldata_variants": [
"0xf1739cae",
"0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"create_count": 0,
"create2_count": 1
}
|