TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-c3c9-7249-9461-82b080effca0

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
25281 artifact.fetch complete 1 / 3 3 months ago
25282 tool.cast_disasm complete 1 / 3 3 months ago
68110 analysis.bundle complete 1 / 3 2 weeks ago
68111 capability.graph complete 1 / 3 2 weeks ago
68112 detector.run complete 1 / 3 2 weeks ago
68113 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
2
Total opcodes
966
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x005e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x4f1ef286
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x4f1ef286
00000024: EQ
00000025: PUSH2 0x0174
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8da5cb5b
0000002f: EQ
00000030: PUSH2 0x0201
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf2fde38b
0000003a: EQ
0000003b: PUSH2 0x023f
0000003e: JUMPI
0000003f: PUSH2 0x00ca
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x01ffc9a7
0000004a: EQ
0000004b: PUSH2 0x00d4
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x3659cfe6
00000055: EQ
00000056: PUSH2 0x0134
00000059: JUMPI
0000005a: PUSH2 0x00ca
0000005d: JUMP
0000005e: JUMPDEST
0000005f: CALLDATASIZE
00000060: PUSH2 0x00ca
00000063: JUMPI
00000064: PUSH1 0x40
00000066: DUP1
00000067: MLOAD
00000068: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000089: DUP2
0000008a: MSTORE
0000008b: PUSH1 0x20
0000008d: PUSH1 0x04
0000008f: DUP3
00000090: ADD
00000091: MSTORE
00000092: PUSH1 0x0e
00000094: PUSH1 0x24
00000096: DUP3
00000097: ADD
00000098: MSTORE
00000099: PUSH32 0x45544845525f52454a4543544544000000000000000000000000000000000000
000000ba: PUSH1 0x44
000000bc: DUP3
000000bd: ADD
000000be: MSTORE
000000bf: SWAP1
000000c0: MLOAD
000000c1: SWAP1
000000c2: DUP2
000000c3: SWAP1
000000c4: SUB
000000c5: PUSH1 0x64
000000c7: ADD
000000c8: SWAP1
000000c9: REVERT
000000ca: JUMPDEST
000000cb: PUSH2 0x00d2
000000ce: PUSH2 0x027f
000000d1: JUMP
000000d2: JUMPDEST
000000d3: STOP
000000d4: JUMPDEST
000000d5: CALLVALUE
000000d6: DUP1
000000d7: ISZERO
000000d8: PUSH2 0x00e0
000000db: JUMPI
000000dc: PUSH1 0x00
000000de: DUP1
000000df: REVERT
000000e0: JUMPDEST
000000e1: POP
000000e2: PUSH2 0x0120
000000e5: PUSH1 0x04
000000e7: DUP1
000000e8: CALLDATASIZE
000000e9: SUB
000000ea: PUSH1 0x20
000000ec: DUP2
000000ed: LT
000000ee: ISZERO
000000ef: PUSH2 0x00f7
000000f2: JUMPI
000000f3: PUSH1 0x00
000000f5: DUP1
000000f6: REVERT
000000f7: JUMPDEST
000000f8: POP
000000f9: CALLDATALOAD
000000fa: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
0000011b: AND
0000011c: PUSH2 0x02ca
0000011f: JUMP
00000120: JUMPDEST
00000121: PUSH1 0x40
00000123: DUP1
00000124: MLOAD
00000125: SWAP2
00000126: ISZERO
00000127: ISZERO
00000128: DUP3
00000129: MSTORE
0000012a: MLOAD
0000012b: SWAP1
0000012c: DUP2
0000012d: SWAP1
0000012e: SUB
0000012f: PUSH1 0x20
00000131: ADD
00000132: SWAP1
00000133: RETURN
00000134: JUMPDEST
00000135: CALLVALUE
00000136: DUP1
00000137: ISZERO
00000138: PUSH2 0x0140
0000013b: JUMPI
0000013c: PUSH1 0x00
0000013e: DUP1
0000013f: REVERT
00000140: JUMPDEST
00000141: POP
00000142: PUSH2 0x00d2
00000145: PUSH1 0x04
00000147: DUP1
00000148: CALLDATASIZE
00000149: SUB
0000014a: PUSH1 0x20
0000014c: DUP2
0000014d: LT
0000014e: ISZERO
0000014f: PUSH2 0x0157
00000152: JUMPI
00000153: PUSH1 0x00
00000155: DUP1
00000156: REVERT
00000157: JUMPDEST
00000158: POP
00000159: CALLDATALOAD
0000015a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000016f: AND
00000170: PUSH2 0x048d
00000173: JUMP
00000174: JUMPDEST
00000175: PUSH2 0x00d2
00000178: PUSH1 0x04
0000017a: DUP1
0000017b: CALLDATASIZE
0000017c: SUB
0000017d: PUSH1 0x40
0000017f: DUP2
00000180: LT
00000181: ISZERO
00000182: PUSH2 0x018a
00000185: JUMPI
00000186: PUSH1 0x00
00000188: DUP1
00000189: REVERT
0000018a: JUMPDEST
0000018b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001a0: DUP3
000001a1: CALLDATALOAD
000001a2: AND
000001a3: SWAP2
000001a4: SWAP1
000001a5: DUP2
000001a6: ADD
000001a7: SWAP1
000001a8: PUSH1 0x40
000001aa: DUP2
000001ab: ADD
000001ac: PUSH1 0x20
000001ae: DUP3
000001af: ADD
000001b0: CALLDATALOAD
000001b1: PUSH5 0x0100000000
000001b7: DUP2
000001b8: GT
000001b9: ISZERO
000001ba: PUSH2 0x01c2
000001bd: JUMPI
000001be: PUSH1 0x00
000001c0: DUP1
000001c1: REVERT
000001c2: JUMPDEST
000001c3: DUP3
000001c4: ADD
000001c5: DUP4
000001c6: PUSH1 0x20
000001c8: DUP3
000001c9: ADD
000001ca: GT
000001cb: ISZERO
000001cc: PUSH2 0x01d4
000001cf: JUMPI
000001d0: PUSH1 0x00
000001d2: DUP1
000001d3: REVERT
000001d4: JUMPDEST
000001d5: DUP1
000001d6: CALLDATALOAD
000001d7: SWAP1
000001d8: PUSH1 0x20
000001da: ADD
000001db: SWAP2
000001dc: DUP5
000001dd: PUSH1 0x01
000001df: DUP4
000001e0: MUL
000001e1: DUP5
000001e2: ADD
000001e3: GT
000001e4: PUSH5 0x0100000000
000001ea: DUP4
000001eb: GT
000001ec: OR
000001ed: ISZERO
000001ee: PUSH2 0x01f6
000001f1: JUMPI
000001f2: PUSH1 0x00
000001f4: DUP1
000001f5: REVERT
000001f6: JUMPDEST
000001f7: POP
000001f8: SWAP1
000001f9: SWAP3
000001fa: POP
000001fb: SWAP1
000001fc: POP
000001fd: PUSH2 0x054a
00000200: JUMP
00000201: JUMPDEST
00000202: CALLVALUE
00000203: DUP1
00000204: ISZERO
00000205: PUSH2 0x020d
00000208: JUMPI
00000209: PUSH1 0x00
0000020b: DUP1
0000020c: REVERT
0000020d: JUMPDEST
0000020e: POP
0000020f: PUSH2 0x0216
00000212: PUSH2 0x0630
00000215: JUMP
00000216: JUMPDEST
00000217: PUSH1 0x40
00000219: DUP1
0000021a: MLOAD
0000021b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000230: SWAP1
00000231: SWAP3
00000232: AND
00000233: DUP3
00000234: MSTORE
00000235: MLOAD
00000236: SWAP1
00000237: DUP2
00000238: SWAP1
00000239: SUB
0000023a: PUSH1 0x20
0000023c: ADD
0000023d: SWAP1
0000023e: RETURN
0000023f: JUMPDEST
00000240: CALLVALUE
00000241: DUP1
00000242: ISZERO
00000243: PUSH2 0x024b
00000246: JUMPI
00000247: PUSH1 0x00
00000249: DUP1
0000024a: REVERT
0000024b: JUMPDEST
0000024c: POP
0000024d: PUSH2 0x00d2
00000250: PUSH1 0x04
00000252: DUP1
00000253: CALLDATASIZE
00000254: SUB
00000255: PUSH1 0x20
00000257: DUP2
00000258: LT
00000259: ISZERO
0000025a: PUSH2 0x0262
0000025d: JUMPI
0000025e: PUSH1 0x00
00000260: DUP1
00000261: REVERT
00000262: JUMPDEST
00000263: POP
00000264: CALLDATALOAD
00000265: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000027a: AND
0000027b: PUSH2 0x063f
0000027e: JUMP
0000027f: JUMPDEST
00000280: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000002a1: SLOAD
000002a2: PUSH1 0x00
000002a4: CALLDATASIZE
000002a5: DUP2
000002a6: DUP3
000002a7: CALLDATACOPY
000002a8: DUP1
000002a9: DUP2
000002aa: CALLDATASIZE
000002ab: DUP4
000002ac: DUP6
000002ad: GAS
000002ae: DELEGATECALL
000002af: SWAP2
000002b0: POP
000002b1: RETURNDATASIZE
000002b2: DUP1
000002b3: DUP3
000002b4: DUP4
000002b5: RETURNDATACOPY
000002b6: DUP3
000002b7: DUP1
000002b8: ISZERO
000002b9: PUSH2 0x02c0
000002bc: JUMPI
000002bd: DUP2
000002be: DUP4
000002bf: RETURN
000002c0: JUMPDEST
000002c1: DUP2
000002c2: DUP4
000002c3: REVERT
000002c4: JUMPDEST
000002c5: POP
000002c6: POP
000002c7: POP
000002c8: POP
000002c9: JUMP
000002ca: JUMPDEST
000002cb: PUSH1 0x00
000002cd: PUSH32 0x01ffc9a700000000000000000000000000000000000000000000000000000000
000002ee: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
0000030f: DUP4
00000310: AND
00000311: EQ
00000312: DUP1
00000313: PUSH2 0x035d
00000316: JUMPI
00000317: POP
00000318: PUSH32 0x7f5828d000000000000000000000000000000000000000000000000000000000
00000339: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
0000035a: DUP4
0000035b: AND
0000035c: EQ
0000035d: JUMPDEST
0000035e: ISZERO
0000035f: PUSH2 0x036a
00000362: JUMPI
00000363: POP
00000364: PUSH1 0x01
00000366: PUSH2 0x0488
00000369: JUMP
0000036a: JUMPDEST
0000036b: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
0000038c: DUP1
0000038d: DUP4
0000038e: AND
0000038f: EQ
00000390: ISZERO
00000391: PUSH2 0x039c
00000394: JUMPI
00000395: POP
00000396: PUSH1 0x00
00000398: PUSH2 0x0488
0000039b: JUMP
0000039c: JUMPDEST
0000039d: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000003be: SLOAD
000003bf: PUSH1 0x40
000003c1: DUP1
000003c2: MLOAD
000003c3: PUSH32 0x01ffc9a700000000000000000000000000000000000000000000000000000000
000003e4: DUP2
000003e5: MSTORE
000003e6: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
00000407: DUP6
00000408: AND
00000409: PUSH1 0x04
0000040b: DUP3
0000040c: ADD
0000040d: MSTORE
0000040e: SWAP1
0000040f: MLOAD
00000410: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000425: DUP4
00000426: AND
00000427: SWAP2
00000428: PUSH4 0x01ffc9a7
0000042d: SWAP2
0000042e: PUSH1 0x24
00000430: DUP1
00000431: DUP4
00000432: ADD
00000433: SWAP3
00000434: PUSH1 0x20
00000436: SWAP3
00000437: SWAP2
00000438: SWAP1
00000439: DUP3
0000043a: SWAP1
0000043b: SUB
0000043c: ADD
0000043d: DUP2
0000043e: DUP7
0000043f: DUP1
00000440: EXTCODESIZE
00000441: ISZERO
00000442: DUP1
00000443: ISZERO
00000444: PUSH2 0x044c
00000447: JUMPI
00000448: PUSH1 0x00
0000044a: DUP1
0000044b: REVERT
0000044c: JUMPDEST
0000044d: POP
0000044e: GAS
0000044f: STATICCALL
00000450: SWAP3
00000451: POP
00000452: POP
00000453: POP
00000454: DUP1
00000455: ISZERO
00000456: PUSH2 0x0471
00000459: JUMPI
0000045a: POP
0000045b: PUSH1 0x40
0000045d: MLOAD
0000045e: RETURNDATASIZE
0000045f: PUSH1 0x20
00000461: DUP2
00000462: LT
00000463: ISZERO
00000464: PUSH2 0x046c
00000467: JUMPI
00000468: PUSH1 0x00
0000046a: DUP1
0000046b: REVERT
0000046c: JUMPDEST
0000046d: POP
0000046e: MLOAD
0000046f: PUSH1 0x01
00000471: JUMPDEST
00000472: PUSH2 0x047f
00000475: JUMPI
00000476: PUSH1 0x00
00000478: SWAP2
00000479: POP
0000047a: POP
0000047b: PUSH2 0x0488
0000047e: JUMP
0000047f: JUMPDEST
00000480: SWAP2
00000481: POP
00000482: PUSH2 0x0488
00000485: SWAP1
00000486: POP
00000487: JUMP
00000488: JUMPDEST
00000489: SWAP2
0000048a: SWAP1
0000048b: POP
0000048c: JUMP
0000048d: JUMPDEST
0000048e: PUSH2 0x0495
00000491: PUSH2 0x06e9
00000494: JUMP
00000495: JUMPDEST
00000496: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004ab: AND
000004ac: CALLER
000004ad: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004c2: AND
000004c3: EQ
000004c4: PUSH2 0x052e
000004c7: JUMPI
000004c8: PUSH1 0x40
000004ca: DUP1
000004cb: MLOAD
000004cc: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000004ed: DUP2
000004ee: MSTORE
000004ef: PUSH1 0x20
000004f1: PUSH1 0x04
000004f3: DUP3
000004f4: ADD
000004f5: MSTORE
000004f6: PUSH1 0x0e
000004f8: PUSH1 0x24
000004fa: DUP3
000004fb: ADD
000004fc: MSTORE
000004fd: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000
0000051e: PUSH1 0x44
00000520: DUP3
00000521: ADD
00000522: MSTORE
00000523: SWAP1
00000524: MLOAD
00000525: SWAP1
00000526: DUP2
00000527: SWAP1
00000528: SUB
00000529: PUSH1 0x64
0000052b: ADD
0000052c: SWAP1
0000052d: REVERT
0000052e: JUMPDEST
0000052f: PUSH2 0x0547
00000532: DUP2
00000533: PUSH1 0x40
00000535: MLOAD
00000536: DUP1
00000537: PUSH1 0x20
00000539: ADD
0000053a: PUSH1 0x40
0000053c: MSTORE
0000053d: DUP1
0000053e: PUSH1 0x00
00000540: DUP2
00000541: MSTORE
00000542: POP
00000543: PUSH2 0x070e
00000546: JUMP
00000547: JUMPDEST
00000548: POP
00000549: JUMP
0000054a: JUMPDEST
0000054b: PUSH2 0x0552
0000054e: PUSH2 0x06e9
00000551: JUMP
00000552: JUMPDEST
00000553: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000568: AND
00000569: CALLER
0000056a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000057f: AND
00000580: EQ
00000581: PUSH2 0x05eb
00000584: JUMPI
00000585: PUSH1 0x40
00000587: DUP1
00000588: MLOAD
00000589: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000005aa: DUP2
000005ab: MSTORE
000005ac: PUSH1 0x20
000005ae: PUSH1 0x04
000005b0: DUP3
000005b1: ADD
000005b2: MSTORE
000005b3: PUSH1 0x0e
000005b5: PUSH1 0x24
000005b7: DUP3
000005b8: ADD
000005b9: MSTORE
000005ba: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000
000005db: PUSH1 0x44
000005dd: DUP3
000005de: ADD
000005df: MSTORE
000005e0: SWAP1
000005e1: MLOAD
000005e2: SWAP1
000005e3: DUP2
000005e4: SWAP1
000005e5: SUB
000005e6: PUSH1 0x64
000005e8: ADD
000005e9: SWAP1
000005ea: REVERT
000005eb: JUMPDEST
000005ec: PUSH2 0x062b
000005ef: DUP4
000005f0: DUP4
000005f1: DUP4
000005f2: DUP1
000005f3: DUP1
000005f4: PUSH1 0x1f
000005f6: ADD
000005f7: PUSH1 0x20
000005f9: DUP1
000005fa: SWAP2
000005fb: DIV
000005fc: MUL
000005fd: PUSH1 0x20
000005ff: ADD
00000600: PUSH1 0x40
00000602: MLOAD
00000603: SWAP1
00000604: DUP2
00000605: ADD
00000606: PUSH1 0x40
00000608: MSTORE
00000609: DUP1
0000060a: SWAP4
0000060b: SWAP3
0000060c: SWAP2
0000060d: SWAP1
0000060e: DUP2
0000060f: DUP2
00000610: MSTORE
00000611: PUSH1 0x20
00000613: ADD
00000614: DUP4
00000615: DUP4
00000616: DUP1
00000617: DUP3
00000618: DUP5
00000619: CALLDATACOPY
0000061a: PUSH1 0x00
0000061c: SWAP3
0000061d: ADD
0000061e: SWAP2
0000061f: SWAP1
00000620: SWAP2
00000621: MSTORE
00000622: POP
00000623: PUSH2 0x070e
00000626: SWAP3
00000627: POP
00000628: POP
00000629: POP
0000062a: JUMP
0000062b: JUMPDEST
0000062c: POP
0000062d: POP
0000062e: POP
0000062f: JUMP
00000630: JUMPDEST
00000631: PUSH1 0x00
00000633: PUSH2 0x063a
00000636: PUSH2 0x06e9
00000639: JUMP
0000063a: JUMPDEST
0000063b: SWAP1
0000063c: POP
0000063d: SWAP1
0000063e: JUMP
0000063f: JUMPDEST
00000640: PUSH2 0x0647
00000643: PUSH2 0x06e9
00000646: JUMP
00000647: JUMPDEST
00000648: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000065d: AND
0000065e: CALLER
0000065f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000674: AND
00000675: EQ
00000676: PUSH2 0x06e0
00000679: JUMPI
0000067a: PUSH1 0x40
0000067c: DUP1
0000067d: MLOAD
0000067e: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000069f: DUP2
000006a0: MSTORE
000006a1: PUSH1 0x20
000006a3: PUSH1 0x04
000006a5: DUP3
000006a6: ADD
000006a7: MSTORE
000006a8: PUSH1 0x0e
000006aa: PUSH1 0x24
000006ac: DUP3
000006ad: ADD
000006ae: MSTORE
000006af: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000
000006d0: PUSH1 0x44
000006d2: DUP3
000006d3: ADD
000006d4: MSTORE
000006d5: SWAP1
000006d6: MLOAD
000006d7: SWAP1
000006d8: DUP2
000006d9: SWAP1
000006da: SUB
000006db: PUSH1 0x64
000006dd: ADD
000006de: SWAP1
000006df: REVERT
000006e0: JUMPDEST
000006e1: PUSH2 0x0547
000006e4: DUP2
000006e5: PUSH2 0x0862
000006e8: JUMP
000006e9: JUMPDEST
000006ea: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000070b: SLOAD
0000070c: SWAP1
0000070d: JUMP
0000070e: JUMPDEST
0000070f: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000730: DUP1
00000731: SLOAD
00000732: SWAP1
00000733: DUP4
00000734: SWAP1
00000735: SSTORE
00000736: PUSH1 0x40
00000738: MLOAD
00000739: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000074e: DUP1
0000074f: DUP6
00000750: AND
00000751: SWAP2
00000752: SWAP1
00000753: DUP4
00000754: AND
00000755: SWAP1
00000756: PUSH32 0x5570d70a002632a7b0b3c9304cc89efb62d8da9eca0dbd7752c83b7379068296
00000777: SWAP1
00000778: PUSH1 0x00
0000077a: SWAP1
0000077b: LOG3
0000077c: DUP2
0000077d: MLOAD
0000077e: ISZERO
0000077f: PUSH2 0x062b
00000782: JUMPI
00000783: PUSH1 0x00
00000785: DUP4
00000786: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000079b: AND
0000079c: DUP4
0000079d: PUSH1 0x40
0000079f: MLOAD
000007a0: DUP1
000007a1: DUP3
000007a2: DUP1
000007a3: MLOAD
000007a4: SWAP1
000007a5: PUSH1 0x20
000007a7: ADD
000007a8: SWAP1
000007a9: DUP1
000007aa: DUP4
000007ab: DUP4
000007ac: JUMPDEST
000007ad: PUSH1 0x20
000007af: DUP4
000007b0: LT
000007b1: PUSH2 0x07e9
000007b4: JUMPI
000007b5: DUP1
000007b6: MLOAD
000007b7: DUP3
000007b8: MSTORE
000007b9: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
000007da: SWAP1
000007db: SWAP3
000007dc: ADD
000007dd: SWAP2
000007de: PUSH1 0x20
000007e0: SWAP2
000007e1: DUP3
000007e2: ADD
000007e3: SWAP2
000007e4: ADD
000007e5: PUSH2 0x07ac
000007e8: JUMP
000007e9: JUMPDEST
000007ea: PUSH1 0x01
000007ec: DUP4
000007ed: PUSH1 0x20
000007ef: SUB
000007f0: PUSH2 0x0100
000007f3: EXP
000007f4: SUB
000007f5: DUP1
000007f6: NOT
000007f7: DUP3
000007f8: MLOAD
000007f9: AND
000007fa: DUP2
000007fb: DUP5
000007fc: MLOAD
000007fd: AND
000007fe: DUP1
000007ff: DUP3
00000800: OR
00000801: DUP6
00000802: MSTORE
00000803: POP
00000804: POP
00000805: POP
00000806: POP
00000807: POP
00000808: POP
00000809: SWAP1
0000080a: POP
0000080b: ADD
0000080c: SWAP2
0000080d: POP
0000080e: POP
0000080f: PUSH1 0x00
00000811: PUSH1 0x40
00000813: MLOAD
00000814: DUP1
00000815: DUP4
00000816: SUB
00000817: DUP2
00000818: DUP6
00000819: GAS
0000081a: DELEGATECALL
0000081b: SWAP2
0000081c: POP
0000081d: POP
0000081e: RETURNDATASIZE
0000081f: DUP1
00000820: PUSH1 0x00
00000822: DUP2
00000823: EQ
00000824: PUSH2 0x0849
00000827: JUMPI
00000828: PUSH1 0x40
0000082a: MLOAD
0000082b: SWAP2
0000082c: POP
0000082d: PUSH1 0x1f
0000082f: NOT
00000830: PUSH1 0x3f
00000832: RETURNDATASIZE
00000833: ADD
00000834: AND
00000835: DUP3
00000836: ADD
00000837: PUSH1 0x40
00000839: MSTORE
0000083a: RETURNDATASIZE
0000083b: DUP3
0000083c: MSTORE
0000083d: RETURNDATASIZE
0000083e: PUSH1 0x00
00000840: PUSH1 0x20
00000842: DUP5
00000843: ADD
00000844: RETURNDATACOPY
00000845: PUSH2 0x084e
00000848: JUMP
00000849: JUMPDEST
0000084a: PUSH1 0x60
0000084c: SWAP2
0000084d: POP
0000084e: JUMPDEST
0000084f: POP
00000850: POP
00000851: SWAP1
00000852: POP
00000853: DUP1
00000854: PUSH2 0x02c4
00000857: JUMPI
00000858: RETURNDATASIZE
00000859: DUP1
0000085a: PUSH1 0x00
0000085c: DUP1
0000085d: RETURNDATACOPY
0000085e: DUP1
0000085f: PUSH1 0x00
00000861: REVERT
00000862: JUMPDEST
00000863: PUSH1 0x00
00000865: PUSH2 0x086c
00000868: PUSH2 0x06e9
0000086b: JUMP
0000086c: JUMPDEST
0000086d: SWAP1
0000086e: POP
0000086f: DUP2
00000870: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000891: SSTORE
00000892: DUP2
00000893: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008a8: AND
000008a9: DUP2
000008aa: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008bf: AND
000008c0: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
000008e1: PUSH1 0x40
000008e3: MLOAD
000008e4: PUSH1 0x40
000008e6: MLOAD
000008e7: DUP1
000008e8: SWAP2
000008e9: SUB
000008ea: SWAP1
000008eb: LOG3
000008ec: POP
000008ed: POP
000008ee: JUMP
000008ef: INVALID
000008f0: LOG2
000008f1: PUSH5 0x6970667358
000008f7: UNKNOWN(0x22)
000008f8: SLT
000008f9: KECCAK256
000008fa: DUP13
000008fb: DUP5
000008fc: TIMESTAMP
000008fd: DUP5
000008fe: MCOPY
000008ff: MLOAD
00000900: MLOAD
00000901: SWAP16
00000902: UNKNOWN(0xE6)
00000903: PUSH3 0x69cee8
00000907: INVALID
00000908: SDIV
00000909: UNKNOWN(0x4B)
0000090a: DUP4
0000090b: UNKNOWN(0xB7)
0000090c: PUSH2 0x7dbc
0000090f: UNKNOWN(0xD8)
00000910: UNKNOWN(0xCF)
00000911: UNKNOWN(0x4D)
00000912: PUSH1 0x74
00000914: UNKNOWN(0x0D)
00000915: UNKNOWN(0x27)
00000916: EXTCODEHASH
00000917: LOG0
00000918: UNKNOWN(0xB8)
00000919: LOG4
0000091a: PUSH5 0x736f6c6343
00000920: STOP
00000921: SMOD
00000922: MOD
00000923: STOP
00000924: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0xbf2d7721fd7802f27fb26fdbe93ce6b60c157fe24e57f005cd759faac1188126
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 60,
    "trace_id": "0xbf2d7721fd7802f27fb26fdbe93ce6b60c157fe24e57f005cd759faac1188126",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf2fde38b",
            "selector": "0xf2fde38b",
            "calldata_variants": [
                "0xf2fde38b",
                "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x01ffc9a7",
            "selector": "0x01ffc9a7",
            "calldata_variants": [
                "0x01ffc9a7",
                "0x01ffc9a70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 686,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 2074,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 1196,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1385,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1630,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}