TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-c210-73d5-897a-ecd76db8fdf5

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
24969 artifact.fetch complete 1 / 3 3 months ago
24970 tool.cast_disasm complete 1 / 3 3 months ago
68554 analysis.bundle complete 1 / 3 2 weeks ago
68555 capability.graph complete 1 / 3 2 weeks ago
68556 detector.run complete 1 / 3 2 weeks ago
68557 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
0
Total opcodes
1349
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0059
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x19165587
00000019: EQ
0000001a: PUSH2 0x00c1
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x3a98ef39
00000024: EQ
00000025: PUSH2 0x0112
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8b83209b
0000002f: EQ
00000030: PUSH2 0x013d
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x9852595c
0000003a: EQ
0000003b: PUSH2 0x01a2
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xce7c2ac2
00000045: EQ
00000046: PUSH2 0x0207
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0xe33b7de3
00000050: EQ
00000051: PUSH2 0x026c
00000054: JUMPI
00000055: PUSH2 0x00bc
00000058: JUMP
00000059: JUMPDEST
0000005a: CALLDATASIZE
0000005b: PUSH2 0x00bc
0000005e: JUMPI
0000005f: PUSH32 0x6ef95f06320e7a25a04a175ca677b7052bdd97131872c2192525a629f51be770
00000080: PUSH2 0x0087
00000083: PUSH2 0x0297
00000086: JUMP
00000087: JUMPDEST
00000088: CALLVALUE
00000089: PUSH1 0x40
0000008b: MLOAD
0000008c: DUP1
0000008d: DUP4
0000008e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000a3: AND
000000a4: DUP2
000000a5: MSTORE
000000a6: PUSH1 0x20
000000a8: ADD
000000a9: DUP3
000000aa: DUP2
000000ab: MSTORE
000000ac: PUSH1 0x20
000000ae: ADD
000000af: SWAP3
000000b0: POP
000000b1: POP
000000b2: POP
000000b3: PUSH1 0x40
000000b5: MLOAD
000000b6: DUP1
000000b7: SWAP2
000000b8: SUB
000000b9: SWAP1
000000ba: LOG1
000000bb: STOP
000000bc: JUMPDEST
000000bd: PUSH1 0x00
000000bf: DUP1
000000c0: REVERT
000000c1: JUMPDEST
000000c2: CALLVALUE
000000c3: DUP1
000000c4: ISZERO
000000c5: PUSH2 0x00cd
000000c8: JUMPI
000000c9: PUSH1 0x00
000000cb: DUP1
000000cc: REVERT
000000cd: JUMPDEST
000000ce: POP
000000cf: PUSH2 0x0110
000000d2: PUSH1 0x04
000000d4: DUP1
000000d5: CALLDATASIZE
000000d6: SUB
000000d7: PUSH1 0x20
000000d9: DUP2
000000da: LT
000000db: ISZERO
000000dc: PUSH2 0x00e4
000000df: JUMPI
000000e0: PUSH1 0x00
000000e2: DUP1
000000e3: REVERT
000000e4: JUMPDEST
000000e5: DUP2
000000e6: ADD
000000e7: SWAP1
000000e8: DUP1
000000e9: DUP1
000000ea: CALLDATALOAD
000000eb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000100: AND
00000101: SWAP1
00000102: PUSH1 0x20
00000104: ADD
00000105: SWAP1
00000106: SWAP3
00000107: SWAP2
00000108: SWAP1
00000109: POP
0000010a: POP
0000010b: POP
0000010c: PUSH2 0x029f
0000010f: JUMP
00000110: JUMPDEST
00000111: STOP
00000112: JUMPDEST
00000113: CALLVALUE
00000114: DUP1
00000115: ISZERO
00000116: PUSH2 0x011e
00000119: JUMPI
0000011a: PUSH1 0x00
0000011c: DUP1
0000011d: REVERT
0000011e: JUMPDEST
0000011f: POP
00000120: PUSH2 0x0127
00000123: PUSH2 0x05b6
00000126: JUMP
00000127: JUMPDEST
00000128: PUSH1 0x40
0000012a: MLOAD
0000012b: DUP1
0000012c: DUP3
0000012d: DUP2
0000012e: MSTORE
0000012f: PUSH1 0x20
00000131: ADD
00000132: SWAP2
00000133: POP
00000134: POP
00000135: PUSH1 0x40
00000137: MLOAD
00000138: DUP1
00000139: SWAP2
0000013a: SUB
0000013b: SWAP1
0000013c: RETURN
0000013d: JUMPDEST
0000013e: CALLVALUE
0000013f: DUP1
00000140: ISZERO
00000141: PUSH2 0x0149
00000144: JUMPI
00000145: PUSH1 0x00
00000147: DUP1
00000148: REVERT
00000149: JUMPDEST
0000014a: POP
0000014b: PUSH2 0x0176
0000014e: PUSH1 0x04
00000150: DUP1
00000151: CALLDATASIZE
00000152: SUB
00000153: PUSH1 0x20
00000155: DUP2
00000156: LT
00000157: ISZERO
00000158: PUSH2 0x0160
0000015b: JUMPI
0000015c: PUSH1 0x00
0000015e: DUP1
0000015f: REVERT
00000160: JUMPDEST
00000161: DUP2
00000162: ADD
00000163: SWAP1
00000164: DUP1
00000165: DUP1
00000166: CALLDATALOAD
00000167: SWAP1
00000168: PUSH1 0x20
0000016a: ADD
0000016b: SWAP1
0000016c: SWAP3
0000016d: SWAP2
0000016e: SWAP1
0000016f: POP
00000170: POP
00000171: POP
00000172: PUSH2 0x05bf
00000175: JUMP
00000176: JUMPDEST
00000177: PUSH1 0x40
00000179: MLOAD
0000017a: DUP1
0000017b: DUP3
0000017c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000191: AND
00000192: DUP2
00000193: MSTORE
00000194: PUSH1 0x20
00000196: ADD
00000197: SWAP2
00000198: POP
00000199: POP
0000019a: PUSH1 0x40
0000019c: MLOAD
0000019d: DUP1
0000019e: SWAP2
0000019f: SUB
000001a0: SWAP1
000001a1: RETURN
000001a2: JUMPDEST
000001a3: CALLVALUE
000001a4: DUP1
000001a5: ISZERO
000001a6: PUSH2 0x01ae
000001a9: JUMPI
000001aa: PUSH1 0x00
000001ac: DUP1
000001ad: REVERT
000001ae: JUMPDEST
000001af: POP
000001b0: PUSH2 0x01f1
000001b3: PUSH1 0x04
000001b5: DUP1
000001b6: CALLDATASIZE
000001b7: SUB
000001b8: PUSH1 0x20
000001ba: DUP2
000001bb: LT
000001bc: ISZERO
000001bd: PUSH2 0x01c5
000001c0: JUMPI
000001c1: PUSH1 0x00
000001c3: DUP1
000001c4: REVERT
000001c5: JUMPDEST
000001c6: DUP2
000001c7: ADD
000001c8: SWAP1
000001c9: DUP1
000001ca: DUP1
000001cb: CALLDATALOAD
000001cc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001e1: AND
000001e2: SWAP1
000001e3: PUSH1 0x20
000001e5: ADD
000001e6: SWAP1
000001e7: SWAP3
000001e8: SWAP2
000001e9: SWAP1
000001ea: POP
000001eb: POP
000001ec: POP
000001ed: PUSH2 0x0600
000001f0: JUMP
000001f1: JUMPDEST
000001f2: PUSH1 0x40
000001f4: MLOAD
000001f5: DUP1
000001f6: DUP3
000001f7: DUP2
000001f8: MSTORE
000001f9: PUSH1 0x20
000001fb: ADD
000001fc: SWAP2
000001fd: POP
000001fe: POP
000001ff: PUSH1 0x40
00000201: MLOAD
00000202: DUP1
00000203: SWAP2
00000204: SUB
00000205: SWAP1
00000206: RETURN
00000207: JUMPDEST
00000208: CALLVALUE
00000209: DUP1
0000020a: ISZERO
0000020b: PUSH2 0x0213
0000020e: JUMPI
0000020f: PUSH1 0x00
00000211: DUP1
00000212: REVERT
00000213: JUMPDEST
00000214: POP
00000215: PUSH2 0x0256
00000218: PUSH1 0x04
0000021a: DUP1
0000021b: CALLDATASIZE
0000021c: SUB
0000021d: PUSH1 0x20
0000021f: DUP2
00000220: LT
00000221: ISZERO
00000222: PUSH2 0x022a
00000225: JUMPI
00000226: PUSH1 0x00
00000228: DUP1
00000229: REVERT
0000022a: JUMPDEST
0000022b: DUP2
0000022c: ADD
0000022d: SWAP1
0000022e: DUP1
0000022f: DUP1
00000230: CALLDATALOAD
00000231: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000246: AND
00000247: SWAP1
00000248: PUSH1 0x20
0000024a: ADD
0000024b: SWAP1
0000024c: SWAP3
0000024d: SWAP2
0000024e: SWAP1
0000024f: POP
00000250: POP
00000251: POP
00000252: PUSH2 0x0649
00000255: JUMP
00000256: JUMPDEST
00000257: PUSH1 0x40
00000259: MLOAD
0000025a: DUP1
0000025b: DUP3
0000025c: DUP2
0000025d: MSTORE
0000025e: PUSH1 0x20
00000260: ADD
00000261: SWAP2
00000262: POP
00000263: POP
00000264: PUSH1 0x40
00000266: MLOAD
00000267: DUP1
00000268: SWAP2
00000269: SUB
0000026a: SWAP1
0000026b: RETURN
0000026c: JUMPDEST
0000026d: CALLVALUE
0000026e: DUP1
0000026f: ISZERO
00000270: PUSH2 0x0278
00000273: JUMPI
00000274: PUSH1 0x00
00000276: DUP1
00000277: REVERT
00000278: JUMPDEST
00000279: POP
0000027a: PUSH2 0x0281
0000027d: PUSH2 0x0692
00000280: JUMP
00000281: JUMPDEST
00000282: PUSH1 0x40
00000284: MLOAD
00000285: DUP1
00000286: DUP3
00000287: DUP2
00000288: MSTORE
00000289: PUSH1 0x20
0000028b: ADD
0000028c: SWAP2
0000028d: POP
0000028e: POP
0000028f: PUSH1 0x40
00000291: MLOAD
00000292: DUP1
00000293: SWAP2
00000294: SUB
00000295: SWAP1
00000296: RETURN
00000297: JUMPDEST
00000298: PUSH1 0x00
0000029a: CALLER
0000029b: SWAP1
0000029c: POP
0000029d: SWAP1
0000029e: JUMP
0000029f: JUMPDEST
000002a0: PUSH1 0x00
000002a2: PUSH1 0x02
000002a4: PUSH1 0x00
000002a6: DUP4
000002a7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002bc: AND
000002bd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002d2: AND
000002d3: DUP2
000002d4: MSTORE
000002d5: PUSH1 0x20
000002d7: ADD
000002d8: SWAP1
000002d9: DUP2
000002da: MSTORE
000002db: PUSH1 0x20
000002dd: ADD
000002de: PUSH1 0x00
000002e0: KECCAK256
000002e1: SLOAD
000002e2: GT
000002e3: PUSH2 0x0337
000002e6: JUMPI
000002e7: PUSH1 0x40
000002e9: MLOAD
000002ea: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000030b: DUP2
0000030c: MSTORE
0000030d: PUSH1 0x04
0000030f: ADD
00000310: DUP1
00000311: DUP1
00000312: PUSH1 0x20
00000314: ADD
00000315: DUP3
00000316: DUP2
00000317: SUB
00000318: DUP3
00000319: MSTORE
0000031a: PUSH1 0x26
0000031c: DUP2
0000031d: MSTORE
0000031e: PUSH1 0x20
00000320: ADD
00000321: DUP1
00000322: PUSH2 0x09c5
00000325: PUSH1 0x26
00000327: SWAP2
00000328: CODECOPY
00000329: PUSH1 0x40
0000032b: ADD
0000032c: SWAP2
0000032d: POP
0000032e: POP
0000032f: PUSH1 0x40
00000331: MLOAD
00000332: DUP1
00000333: SWAP2
00000334: SUB
00000335: SWAP1
00000336: REVERT
00000337: JUMPDEST
00000338: PUSH1 0x00
0000033a: PUSH2 0x034e
0000033d: PUSH1 0x01
0000033f: SLOAD
00000340: SELFBALANCE
00000341: PUSH2 0x069c
00000344: SWAP1
00000345: SWAP2
00000346: SWAP1
00000347: PUSH4 0xffffffff
0000034c: AND
0000034d: JUMP
0000034e: JUMPDEST
0000034f: SWAP1
00000350: POP
00000351: PUSH1 0x00
00000353: PUSH2 0x0409
00000356: PUSH1 0x03
00000358: PUSH1 0x00
0000035a: DUP6
0000035b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000370: AND
00000371: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000386: AND
00000387: DUP2
00000388: MSTORE
00000389: PUSH1 0x20
0000038b: ADD
0000038c: SWAP1
0000038d: DUP2
0000038e: MSTORE
0000038f: PUSH1 0x20
00000391: ADD
00000392: PUSH1 0x00
00000394: KECCAK256
00000395: SLOAD
00000396: PUSH2 0x03fb
00000399: PUSH1 0x00
0000039b: SLOAD
0000039c: PUSH2 0x03ed
0000039f: PUSH1 0x02
000003a1: PUSH1 0x00
000003a3: DUP10
000003a4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003b9: AND
000003ba: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003cf: AND
000003d0: DUP2
000003d1: MSTORE
000003d2: PUSH1 0x20
000003d4: ADD
000003d5: SWAP1
000003d6: DUP2
000003d7: MSTORE
000003d8: PUSH1 0x20
000003da: ADD
000003db: PUSH1 0x00
000003dd: KECCAK256
000003de: SLOAD
000003df: DUP8
000003e0: PUSH2 0x0724
000003e3: SWAP1
000003e4: SWAP2
000003e5: SWAP1
000003e6: PUSH4 0xffffffff
000003eb: AND
000003ec: JUMP
000003ed: JUMPDEST
000003ee: PUSH2 0x07aa
000003f1: SWAP1
000003f2: SWAP2
000003f3: SWAP1
000003f4: PUSH4 0xffffffff
000003f9: AND
000003fa: JUMP
000003fb: JUMPDEST
000003fc: PUSH2 0x07f4
000003ff: SWAP1
00000400: SWAP2
00000401: SWAP1
00000402: PUSH4 0xffffffff
00000407: AND
00000408: JUMP
00000409: JUMPDEST
0000040a: SWAP1
0000040b: POP
0000040c: PUSH1 0x00
0000040e: DUP2
0000040f: EQ
00000410: ISZERO
00000411: PUSH2 0x0465
00000414: JUMPI
00000415: PUSH1 0x40
00000417: MLOAD
00000418: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000439: DUP2
0000043a: MSTORE
0000043b: PUSH1 0x04
0000043d: ADD
0000043e: DUP1
0000043f: DUP1
00000440: PUSH1 0x20
00000442: ADD
00000443: DUP3
00000444: DUP2
00000445: SUB
00000446: DUP3
00000447: MSTORE
00000448: PUSH1 0x2b
0000044a: DUP2
0000044b: MSTORE
0000044c: PUSH1 0x20
0000044e: ADD
0000044f: DUP1
00000450: PUSH2 0x09eb
00000453: PUSH1 0x2b
00000455: SWAP2
00000456: CODECOPY
00000457: PUSH1 0x40
00000459: ADD
0000045a: SWAP2
0000045b: POP
0000045c: POP
0000045d: PUSH1 0x40
0000045f: MLOAD
00000460: DUP1
00000461: SWAP2
00000462: SUB
00000463: SWAP1
00000464: REVERT
00000465: JUMPDEST
00000466: PUSH2 0x04b7
00000469: DUP2
0000046a: PUSH1 0x03
0000046c: PUSH1 0x00
0000046e: DUP7
0000046f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000484: AND
00000485: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000049a: AND
0000049b: DUP2
0000049c: MSTORE
0000049d: PUSH1 0x20
0000049f: ADD
000004a0: SWAP1
000004a1: DUP2
000004a2: MSTORE
000004a3: PUSH1 0x20
000004a5: ADD
000004a6: PUSH1 0x00
000004a8: KECCAK256
000004a9: SLOAD
000004aa: PUSH2 0x069c
000004ad: SWAP1
000004ae: SWAP2
000004af: SWAP1
000004b0: PUSH4 0xffffffff
000004b5: AND
000004b6: JUMP
000004b7: JUMPDEST
000004b8: PUSH1 0x03
000004ba: PUSH1 0x00
000004bc: DUP6
000004bd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004d2: AND
000004d3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004e8: AND
000004e9: DUP2
000004ea: MSTORE
000004eb: PUSH1 0x20
000004ed: ADD
000004ee: SWAP1
000004ef: DUP2
000004f0: MSTORE
000004f1: PUSH1 0x20
000004f3: ADD
000004f4: PUSH1 0x00
000004f6: KECCAK256
000004f7: DUP2
000004f8: SWAP1
000004f9: SSTORE
000004fa: POP
000004fb: PUSH2 0x050f
000004fe: DUP2
000004ff: PUSH1 0x01
00000501: SLOAD
00000502: PUSH2 0x069c
00000505: SWAP1
00000506: SWAP2
00000507: SWAP1
00000508: PUSH4 0xffffffff
0000050d: AND
0000050e: JUMP
0000050f: JUMPDEST
00000510: PUSH1 0x01
00000512: DUP2
00000513: SWAP1
00000514: SSTORE
00000515: POP
00000516: DUP3
00000517: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000052c: AND
0000052d: PUSH2 0x08fc
00000530: DUP3
00000531: SWAP1
00000532: DUP2
00000533: ISZERO
00000534: MUL
00000535: SWAP1
00000536: PUSH1 0x40
00000538: MLOAD
00000539: PUSH1 0x00
0000053b: PUSH1 0x40
0000053d: MLOAD
0000053e: DUP1
0000053f: DUP4
00000540: SUB
00000541: DUP2
00000542: DUP6
00000543: DUP9
00000544: DUP9
00000545: CALL
00000546: SWAP4
00000547: POP
00000548: POP
00000549: POP
0000054a: POP
0000054b: ISZERO
0000054c: DUP1
0000054d: ISZERO
0000054e: PUSH2 0x055b
00000551: JUMPI
00000552: RETURNDATASIZE
00000553: PUSH1 0x00
00000555: DUP1
00000556: RETURNDATACOPY
00000557: RETURNDATASIZE
00000558: PUSH1 0x00
0000055a: REVERT
0000055b: JUMPDEST
0000055c: POP
0000055d: PUSH32 0xdf20fd1e76bc69d672e4814fafb2c449bba3a5369d8359adf9e05e6fde87b056
0000057e: DUP4
0000057f: DUP3
00000580: PUSH1 0x40
00000582: MLOAD
00000583: DUP1
00000584: DUP4
00000585: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000059a: AND
0000059b: DUP2
0000059c: MSTORE
0000059d: PUSH1 0x20
0000059f: ADD
000005a0: DUP3
000005a1: DUP2
000005a2: MSTORE
000005a3: PUSH1 0x20
000005a5: ADD
000005a6: SWAP3
000005a7: POP
000005a8: POP
000005a9: POP
000005aa: PUSH1 0x40
000005ac: MLOAD
000005ad: DUP1
000005ae: SWAP2
000005af: SUB
000005b0: SWAP1
000005b1: LOG1
000005b2: POP
000005b3: POP
000005b4: POP
000005b5: JUMP
000005b6: JUMPDEST
000005b7: PUSH1 0x00
000005b9: DUP1
000005ba: SLOAD
000005bb: SWAP1
000005bc: POP
000005bd: SWAP1
000005be: JUMP
000005bf: JUMPDEST
000005c0: PUSH1 0x00
000005c2: PUSH1 0x04
000005c4: DUP3
000005c5: DUP2
000005c6: SLOAD
000005c7: DUP2
000005c8: LT
000005c9: PUSH2 0x05ce
000005cc: JUMPI
000005cd: INVALID
000005ce: JUMPDEST
000005cf: SWAP1
000005d0: PUSH1 0x00
000005d2: MSTORE
000005d3: PUSH1 0x20
000005d5: PUSH1 0x00
000005d7: KECCAK256
000005d8: ADD
000005d9: PUSH1 0x00
000005db: SWAP1
000005dc: SLOAD
000005dd: SWAP1
000005de: PUSH2 0x0100
000005e1: EXP
000005e2: SWAP1
000005e3: DIV
000005e4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005f9: AND
000005fa: SWAP1
000005fb: POP
000005fc: SWAP2
000005fd: SWAP1
000005fe: POP
000005ff: JUMP
00000600: JUMPDEST
00000601: PUSH1 0x00
00000603: PUSH1 0x03
00000605: PUSH1 0x00
00000607: DUP4
00000608: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000061d: AND
0000061e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000633: AND
00000634: DUP2
00000635: MSTORE
00000636: PUSH1 0x20
00000638: ADD
00000639: SWAP1
0000063a: DUP2
0000063b: MSTORE
0000063c: PUSH1 0x20
0000063e: ADD
0000063f: PUSH1 0x00
00000641: KECCAK256
00000642: SLOAD
00000643: SWAP1
00000644: POP
00000645: SWAP2
00000646: SWAP1
00000647: POP
00000648: JUMP
00000649: JUMPDEST
0000064a: PUSH1 0x00
0000064c: PUSH1 0x02
0000064e: PUSH1 0x00
00000650: DUP4
00000651: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000666: AND
00000667: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000067c: AND
0000067d: DUP2
0000067e: MSTORE
0000067f: PUSH1 0x20
00000681: ADD
00000682: SWAP1
00000683: DUP2
00000684: MSTORE
00000685: PUSH1 0x20
00000687: ADD
00000688: PUSH1 0x00
0000068a: KECCAK256
0000068b: SLOAD
0000068c: SWAP1
0000068d: POP
0000068e: SWAP2
0000068f: SWAP1
00000690: POP
00000691: JUMP
00000692: JUMPDEST
00000693: PUSH1 0x00
00000695: PUSH1 0x01
00000697: SLOAD
00000698: SWAP1
00000699: POP
0000069a: SWAP1
0000069b: JUMP
0000069c: JUMPDEST
0000069d: PUSH1 0x00
0000069f: DUP1
000006a0: DUP3
000006a1: DUP5
000006a2: ADD
000006a3: SWAP1
000006a4: POP
000006a5: DUP4
000006a6: DUP2
000006a7: LT
000006a8: ISZERO
000006a9: PUSH2 0x071a
000006ac: JUMPI
000006ad: PUSH1 0x40
000006af: MLOAD
000006b0: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000006d1: DUP2
000006d2: MSTORE
000006d3: PUSH1 0x04
000006d5: ADD
000006d6: DUP1
000006d7: DUP1
000006d8: PUSH1 0x20
000006da: ADD
000006db: DUP3
000006dc: DUP2
000006dd: SUB
000006de: DUP3
000006df: MSTORE
000006e0: PUSH1 0x1b
000006e2: DUP2
000006e3: MSTORE
000006e4: PUSH1 0x20
000006e6: ADD
000006e7: DUP1
000006e8: PUSH32 0x536166654d6174683a206164646974696f6e206f766572666c6f770000000000
00000709: DUP2
0000070a: MSTORE
0000070b: POP
0000070c: PUSH1 0x20
0000070e: ADD
0000070f: SWAP2
00000710: POP
00000711: POP
00000712: PUSH1 0x40
00000714: MLOAD
00000715: DUP1
00000716: SWAP2
00000717: SUB
00000718: SWAP1
00000719: REVERT
0000071a: JUMPDEST
0000071b: DUP1
0000071c: SWAP2
0000071d: POP
0000071e: POP
0000071f: SWAP3
00000720: SWAP2
00000721: POP
00000722: POP
00000723: JUMP
00000724: JUMPDEST
00000725: PUSH1 0x00
00000727: DUP1
00000728: DUP4
00000729: EQ
0000072a: ISZERO
0000072b: PUSH2 0x0737
0000072e: JUMPI
0000072f: PUSH1 0x00
00000731: SWAP1
00000732: POP
00000733: PUSH2 0x07a4
00000736: JUMP
00000737: JUMPDEST
00000738: PUSH1 0x00
0000073a: DUP3
0000073b: DUP5
0000073c: MUL
0000073d: SWAP1
0000073e: POP
0000073f: DUP3
00000740: DUP5
00000741: DUP3
00000742: DUP2
00000743: PUSH2 0x0748
00000746: JUMPI
00000747: INVALID
00000748: JUMPDEST
00000749: DIV
0000074a: EQ
0000074b: PUSH2 0x079f
0000074e: JUMPI
0000074f: PUSH1 0x40
00000751: MLOAD
00000752: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000773: DUP2
00000774: MSTORE
00000775: PUSH1 0x04
00000777: ADD
00000778: DUP1
00000779: DUP1
0000077a: PUSH1 0x20
0000077c: ADD
0000077d: DUP3
0000077e: DUP2
0000077f: SUB
00000780: DUP3
00000781: MSTORE
00000782: PUSH1 0x21
00000784: DUP2
00000785: MSTORE
00000786: PUSH1 0x20
00000788: ADD
00000789: DUP1
0000078a: PUSH2 0x0a16
0000078d: PUSH1 0x21
0000078f: SWAP2
00000790: CODECOPY
00000791: PUSH1 0x40
00000793: ADD
00000794: SWAP2
00000795: POP
00000796: POP
00000797: PUSH1 0x40
00000799: MLOAD
0000079a: DUP1
0000079b: SWAP2
0000079c: SUB
0000079d: SWAP1
0000079e: REVERT
0000079f: JUMPDEST
000007a0: DUP1
000007a1: SWAP2
000007a2: POP
000007a3: POP
000007a4: JUMPDEST
000007a5: SWAP3
000007a6: SWAP2
000007a7: POP
000007a8: POP
000007a9: JUMP
000007aa: JUMPDEST
000007ab: PUSH1 0x00
000007ad: PUSH2 0x07ec
000007b0: DUP4
000007b1: DUP4
000007b2: PUSH1 0x40
000007b4: MLOAD
000007b5: DUP1
000007b6: PUSH1 0x40
000007b8: ADD
000007b9: PUSH1 0x40
000007bb: MSTORE
000007bc: DUP1
000007bd: PUSH1 0x1a
000007bf: DUP2
000007c0: MSTORE
000007c1: PUSH1 0x20
000007c3: ADD
000007c4: PUSH32 0x536166654d6174683a206469766973696f6e206279207a65726f000000000000
000007e5: DUP2
000007e6: MSTORE
000007e7: POP
000007e8: PUSH2 0x083e
000007eb: JUMP
000007ec: JUMPDEST
000007ed: SWAP1
000007ee: POP
000007ef: SWAP3
000007f0: SWAP2
000007f1: POP
000007f2: POP
000007f3: JUMP
000007f4: JUMPDEST
000007f5: PUSH1 0x00
000007f7: PUSH2 0x0836
000007fa: DUP4
000007fb: DUP4
000007fc: PUSH1 0x40
000007fe: MLOAD
000007ff: DUP1
00000800: PUSH1 0x40
00000802: ADD
00000803: PUSH1 0x40
00000805: MSTORE
00000806: DUP1
00000807: PUSH1 0x1e
00000809: DUP2
0000080a: MSTORE
0000080b: PUSH1 0x20
0000080d: ADD
0000080e: PUSH32 0x536166654d6174683a207375627472616374696f6e206f766572666c6f770000
0000082f: DUP2
00000830: MSTORE
00000831: POP
00000832: PUSH2 0x0904
00000835: JUMP
00000836: JUMPDEST
00000837: SWAP1
00000838: POP
00000839: SWAP3
0000083a: SWAP2
0000083b: POP
0000083c: POP
0000083d: JUMP
0000083e: JUMPDEST
0000083f: PUSH1 0x00
00000841: DUP1
00000842: DUP4
00000843: GT
00000844: DUP3
00000845: SWAP1
00000846: PUSH2 0x08ea
00000849: JUMPI
0000084a: PUSH1 0x40
0000084c: MLOAD
0000084d: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000086e: DUP2
0000086f: MSTORE
00000870: PUSH1 0x04
00000872: ADD
00000873: DUP1
00000874: DUP1
00000875: PUSH1 0x20
00000877: ADD
00000878: DUP3
00000879: DUP2
0000087a: SUB
0000087b: DUP3
0000087c: MSTORE
0000087d: DUP4
0000087e: DUP2
0000087f: DUP2
00000880: MLOAD
00000881: DUP2
00000882: MSTORE
00000883: PUSH1 0x20
00000885: ADD
00000886: SWAP2
00000887: POP
00000888: DUP1
00000889: MLOAD
0000088a: SWAP1
0000088b: PUSH1 0x20
0000088d: ADD
0000088e: SWAP1
0000088f: DUP1
00000890: DUP4
00000891: DUP4
00000892: PUSH1 0x00
00000894: JUMPDEST
00000895: DUP4
00000896: DUP2
00000897: LT
00000898: ISZERO
00000899: PUSH2 0x08af
0000089c: JUMPI
0000089d: DUP1
0000089e: DUP3
0000089f: ADD
000008a0: MLOAD
000008a1: DUP2
000008a2: DUP5
000008a3: ADD
000008a4: MSTORE
000008a5: PUSH1 0x20
000008a7: DUP2
000008a8: ADD
000008a9: SWAP1
000008aa: POP
000008ab: PUSH2 0x0894
000008ae: JUMP
000008af: JUMPDEST
000008b0: POP
000008b1: POP
000008b2: POP
000008b3: POP
000008b4: SWAP1
000008b5: POP
000008b6: SWAP1
000008b7: DUP2
000008b8: ADD
000008b9: SWAP1
000008ba: PUSH1 0x1f
000008bc: AND
000008bd: DUP1
000008be: ISZERO
000008bf: PUSH2 0x08dc
000008c2: JUMPI
000008c3: DUP1
000008c4: DUP3
000008c5: SUB
000008c6: DUP1
000008c7: MLOAD
000008c8: PUSH1 0x01
000008ca: DUP4
000008cb: PUSH1 0x20
000008cd: SUB
000008ce: PUSH2 0x0100
000008d1: EXP
000008d2: SUB
000008d3: NOT
000008d4: AND
000008d5: DUP2
000008d6: MSTORE
000008d7: PUSH1 0x20
000008d9: ADD
000008da: SWAP2
000008db: POP
000008dc: JUMPDEST
000008dd: POP
000008de: SWAP3
000008df: POP
000008e0: POP
000008e1: POP
000008e2: PUSH1 0x40
000008e4: MLOAD
000008e5: DUP1
000008e6: SWAP2
000008e7: SUB
000008e8: SWAP1
000008e9: REVERT
000008ea: JUMPDEST
000008eb: POP
000008ec: PUSH1 0x00
000008ee: DUP4
000008ef: DUP6
000008f0: DUP2
000008f1: PUSH2 0x08f6
000008f4: JUMPI
000008f5: INVALID
000008f6: JUMPDEST
000008f7: DIV
000008f8: SWAP1
000008f9: POP
000008fa: DUP1
000008fb: SWAP2
000008fc: POP
000008fd: POP
000008fe: SWAP4
000008ff: SWAP3
00000900: POP
00000901: POP
00000902: POP
00000903: JUMP
00000904: JUMPDEST
00000905: PUSH1 0x00
00000907: DUP4
00000908: DUP4
00000909: GT
0000090a: ISZERO
0000090b: DUP3
0000090c: SWAP1
0000090d: PUSH2 0x09b1
00000910: JUMPI
00000911: PUSH1 0x40
00000913: MLOAD
00000914: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000935: DUP2
00000936: MSTORE
00000937: PUSH1 0x04
00000939: ADD
0000093a: DUP1
0000093b: DUP1
0000093c: PUSH1 0x20
0000093e: ADD
0000093f: DUP3
00000940: DUP2
00000941: SUB
00000942: DUP3
00000943: MSTORE
00000944: DUP4
00000945: DUP2
00000946: DUP2
00000947: MLOAD
00000948: DUP2
00000949: MSTORE
0000094a: PUSH1 0x20
0000094c: ADD
0000094d: SWAP2
0000094e: POP
0000094f: DUP1
00000950: MLOAD
00000951: SWAP1
00000952: PUSH1 0x20
00000954: ADD
00000955: SWAP1
00000956: DUP1
00000957: DUP4
00000958: DUP4
00000959: PUSH1 0x00
0000095b: JUMPDEST
0000095c: DUP4
0000095d: DUP2
0000095e: LT
0000095f: ISZERO
00000960: PUSH2 0x0976
00000963: JUMPI
00000964: DUP1
00000965: DUP3
00000966: ADD
00000967: MLOAD
00000968: DUP2
00000969: DUP5
0000096a: ADD
0000096b: MSTORE
0000096c: PUSH1 0x20
0000096e: DUP2
0000096f: ADD
00000970: SWAP1
00000971: POP
00000972: PUSH2 0x095b
00000975: JUMP
00000976: JUMPDEST
00000977: POP
00000978: POP
00000979: POP
0000097a: POP
0000097b: SWAP1
0000097c: POP
0000097d: SWAP1
0000097e: DUP2
0000097f: ADD
00000980: SWAP1
00000981: PUSH1 0x1f
00000983: AND
00000984: DUP1
00000985: ISZERO
00000986: PUSH2 0x09a3
00000989: JUMPI
0000098a: DUP1
0000098b: DUP3
0000098c: SUB
0000098d: DUP1
0000098e: MLOAD
0000098f: PUSH1 0x01
00000991: DUP4
00000992: PUSH1 0x20
00000994: SUB
00000995: PUSH2 0x0100
00000998: EXP
00000999: SUB
0000099a: NOT
0000099b: AND
0000099c: DUP2
0000099d: MSTORE
0000099e: PUSH1 0x20
000009a0: ADD
000009a1: SWAP2
000009a2: POP
000009a3: JUMPDEST
000009a4: POP
000009a5: SWAP3
000009a6: POP
000009a7: POP
000009a8: POP
000009a9: PUSH1 0x40
000009ab: MLOAD
000009ac: DUP1
000009ad: SWAP2
000009ae: SUB
000009af: SWAP1
000009b0: REVERT
000009b1: JUMPDEST
000009b2: POP
000009b3: PUSH1 0x00
000009b5: DUP4
000009b6: DUP6
000009b7: SUB
000009b8: SWAP1
000009b9: POP
000009ba: DUP1
000009bb: SWAP2
000009bc: POP
000009bd: POP
000009be: SWAP4
000009bf: SWAP3
000009c0: POP
000009c1: POP
000009c2: POP
000009c3: JUMP
000009c4: INVALID
000009c5: POP
000009c6: PUSH2 0x796d
000009c9: PUSH6 0x6e7453706c69
000009d0: PUSH21 0x7465723a206163636f756e7420686173206e6f2073
000009e6: PUSH9 0x617265735061796d65
000009f0: PUSH15 0x7453706c69747465723a206163636f
00000a00: PUSH22 0x6e74206973206e6f7420647565207061796d656e7453
00000a17: PUSH2 0x6665
00000a1a: UNKNOWN(0x4D)
00000a1b: PUSH2 0x7468
00000a1e: GASPRICE
00000a1f: KECCAK256
00000a20: PUSH14 0x756c7469706c69636174696f6e20
00000a2f: PUSH16 0x766572666c6f77a26469706673582212
00000a40: KECCAK256
00000a41: DUP14
00000a42: PUSH7 0xa6580351e91208
00000a4a: UNKNOWN(0xCB)
00000a4b: BYTE
00000a4c: UNKNOWN(0xD3)
00000a4d: PUSH22 0xd99ea104a841ae18fcbb8063c0dab1f729c4e864736f
00000a64: PUSH13

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xbf5d28857bc7e694cc61ef91830aa97243d24131479e85c7ceb8a73bb07e3f95
call_targets: 0xcfda28b71b219027357c70f772979b9de263c3f2
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xbf5d28857bc7e694cc61ef91830aa97243d24131479e85c7ceb8a73bb07e3f95",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xcfda28b71b219027357c70f772979b9de263c3f2"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x19165587",
            "selector": "0x19165587",
            "calldata_variants": [
                "0x19165587",
                "0x191655870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3a98ef39",
            "selector": "0x3a98ef39",
            "calldata_variants": [
                "0x3a98ef39",
                "0x3a98ef390000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8b83209b",
            "selector": "0x8b83209b",
            "calldata_variants": [
                "0x8b83209b",
                "0x8b83209b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9852595c",
            "selector": "0x9852595c",
            "calldata_variants": [
                "0x9852595c",
                "0x9852595c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xce7c2ac2",
            "selector": "0xce7c2ac2",
            "calldata_variants": [
                "0xce7c2ac2",
                "0xce7c2ac20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe33b7de3",
            "selector": "0xe33b7de3",
            "calldata_variants": [
                "0xe33b7de3",
                "0xe33b7de30000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1349,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [],
    "untrusted_call_count": 1
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xbf5d28857bc7e694cc61ef91830aa97243d24131479e85c7ceb8a73bb07e3f95
call_targets: 0xcfda28b71b219027357c70f772979b9de263c3f2
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xbf5d28857bc7e694cc61ef91830aa97243d24131479e85c7ceb8a73bb07e3f95",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xcfda28b71b219027357c70f772979b9de263c3f2"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x19165587",
            "selector": "0x19165587",
            "calldata_variants": [
                "0x19165587",
                "0x191655870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3a98ef39",
            "selector": "0x3a98ef39",
            "calldata_variants": [
                "0x3a98ef39",
                "0x3a98ef390000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8b83209b",
            "selector": "0x8b83209b",
            "calldata_variants": [
                "0x8b83209b",
                "0x8b83209b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9852595c",
            "selector": "0x9852595c",
            "calldata_variants": [
                "0x9852595c",
                "0x9852595c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xce7c2ac2",
            "selector": "0xce7c2ac2",
            "calldata_variants": [
                "0xce7c2ac2",
                "0xce7c2ac20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe33b7de3",
            "selector": "0xe33b7de3",
            "calldata_variants": [
                "0xe33b7de3",
                "0xe33b7de30000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1349,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": []
}