TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-c47e-71f5-8c7f-5096a2d01f38

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
25419 artifact.fetch complete 1 / 3 4 months ago
25420 tool.cast_disasm complete 1 / 3 4 months ago
90845 analysis.bundle complete 1 / 3 2 weeks ago
90846 capability.graph complete 1 / 3 2 weeks ago
90847 detector.run complete 1 / 3 2 weeks ago
90848 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
0
Total opcodes
895
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0038
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x3ccfd60b
00000019: EQ
0000001a: PUSH2 0x0041
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x50188301
00000024: EQ
00000025: PUSH2 0x0058
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x880cdc31
0000002f: EQ
00000030: PUSH2 0x0083
00000033: JUMPI
00000034: PUSH2 0x003f
00000037: JUMP
00000038: JUMPDEST
00000039: CALLDATASIZE
0000003a: PUSH2 0x003f
0000003d: JUMPI
0000003e: STOP
0000003f: JUMPDEST
00000040: STOP
00000041: JUMPDEST
00000042: CALLVALUE
00000043: DUP1
00000044: ISZERO
00000045: PUSH2 0x004d
00000048: JUMPI
00000049: PUSH1 0x00
0000004b: DUP1
0000004c: REVERT
0000004d: JUMPDEST
0000004e: POP
0000004f: PUSH2 0x0056
00000052: PUSH2 0x00ac
00000055: JUMP
00000056: JUMPDEST
00000057: STOP
00000058: JUMPDEST
00000059: CALLVALUE
0000005a: DUP1
0000005b: ISZERO
0000005c: PUSH2 0x0064
0000005f: JUMPI
00000060: PUSH1 0x00
00000062: DUP1
00000063: REVERT
00000064: JUMPDEST
00000065: POP
00000066: PUSH2 0x006d
00000069: PUSH2 0x0171
0000006c: JUMP
0000006d: JUMPDEST
0000006e: PUSH1 0x40
00000070: MLOAD
00000071: PUSH2 0x007a
00000074: SWAP2
00000075: SWAP1
00000076: PUSH2 0x041e
00000079: JUMP
0000007a: JUMPDEST
0000007b: PUSH1 0x40
0000007d: MLOAD
0000007e: DUP1
0000007f: SWAP2
00000080: SUB
00000081: SWAP1
00000082: RETURN
00000083: JUMPDEST
00000084: CALLVALUE
00000085: DUP1
00000086: ISZERO
00000087: PUSH2 0x008f
0000008a: JUMPI
0000008b: PUSH1 0x00
0000008d: DUP1
0000008e: REVERT
0000008f: JUMPDEST
00000090: POP
00000091: PUSH2 0x00aa
00000094: PUSH1 0x04
00000096: DUP1
00000097: CALLDATASIZE
00000098: SUB
00000099: DUP2
0000009a: ADD
0000009b: SWAP1
0000009c: PUSH2 0x00a5
0000009f: SWAP2
000000a0: SWAP1
000000a1: PUSH2 0x03aa
000000a4: JUMP
000000a5: JUMPDEST
000000a6: PUSH2 0x01c3
000000a9: JUMP
000000aa: JUMPDEST
000000ab: STOP
000000ac: JUMPDEST
000000ad: PUSH1 0x00
000000af: PUSH2 0x00b6
000000b2: PUSH2 0x0216
000000b5: JUMP
000000b6: JUMPDEST
000000b7: SWAP1
000000b8: POP
000000b9: PUSH1 0x00
000000bb: PUSH8 0x0de0b6b3a7640000
000000c4: DUP3
000000c5: PUSH1 0x01
000000c7: ADD
000000c8: SLOAD
000000c9: PUSH2 0x00d0
000000cc: PUSH2 0x0341
000000cf: JUMP
000000d0: JUMPDEST
000000d1: PUSH2 0x00da
000000d4: SWAP2
000000d5: SWAP1
000000d6: PUSH2 0x04cb
000000d9: JUMP
000000da: JUMPDEST
000000db: PUSH2 0x00e4
000000de: SWAP2
000000df: SWAP1
000000e0: PUSH2 0x049a
000000e3: JUMP
000000e4: JUMPDEST
000000e5: SWAP1
000000e6: POP
000000e7: PUSH1 0x00
000000e9: DUP3
000000ea: PUSH1 0x02
000000ec: ADD
000000ed: SLOAD
000000ee: DUP3
000000ef: PUSH2 0x00f8
000000f2: SWAP2
000000f3: SWAP1
000000f4: PUSH2 0x0525
000000f7: JUMP
000000f8: JUMPDEST
000000f9: SWAP1
000000fa: POP
000000fb: DUP2
000000fc: DUP4
000000fd: PUSH1 0x02
000000ff: ADD
00000100: DUP2
00000101: SWAP1
00000102: SSTORE
00000103: POP
00000104: CALLER
00000105: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000011a: AND
0000011b: DUP2
0000011c: PUSH1 0x40
0000011e: MLOAD
0000011f: PUSH2 0x0127
00000122: SWAP1
00000123: PUSH2 0x0409
00000126: JUMP
00000127: JUMPDEST
00000128: PUSH1 0x00
0000012a: PUSH1 0x40
0000012c: MLOAD
0000012d: DUP1
0000012e: DUP4
0000012f: SUB
00000130: DUP2
00000131: DUP6
00000132: DUP8
00000133: GAS
00000134: CALL
00000135: SWAP3
00000136: POP
00000137: POP
00000138: POP
00000139: RETURNDATASIZE
0000013a: DUP1
0000013b: PUSH1 0x00
0000013d: DUP2
0000013e: EQ
0000013f: PUSH2 0x0164
00000142: JUMPI
00000143: PUSH1 0x40
00000145: MLOAD
00000146: SWAP2
00000147: POP
00000148: PUSH1 0x1f
0000014a: NOT
0000014b: PUSH1 0x3f
0000014d: RETURNDATASIZE
0000014e: ADD
0000014f: AND
00000150: DUP3
00000151: ADD
00000152: PUSH1 0x40
00000154: MSTORE
00000155: RETURNDATASIZE
00000156: DUP3
00000157: MSTORE
00000158: RETURNDATASIZE
00000159: PUSH1 0x00
0000015b: PUSH1 0x20
0000015d: DUP5
0000015e: ADD
0000015f: RETURNDATACOPY
00000160: PUSH2 0x0169
00000163: JUMP
00000164: JUMPDEST
00000165: PUSH1 0x60
00000167: SWAP2
00000168: POP
00000169: JUMPDEST
0000016a: POP
0000016b: POP
0000016c: POP
0000016d: POP
0000016e: POP
0000016f: POP
00000170: JUMP
00000171: JUMPDEST
00000172: PUSH1 0x00
00000174: DUP1
00000175: PUSH2 0x017c
00000178: PUSH2 0x0216
0000017b: JUMP
0000017c: JUMPDEST
0000017d: SWAP1
0000017e: POP
0000017f: PUSH1 0x00
00000181: PUSH8 0x0de0b6b3a7640000
0000018a: DUP3
0000018b: PUSH1 0x01
0000018d: ADD
0000018e: SLOAD
0000018f: PUSH2 0x0196
00000192: PUSH2 0x0341
00000195: JUMP
00000196: JUMPDEST
00000197: PUSH2 0x01a0
0000019a: SWAP2
0000019b: SWAP1
0000019c: PUSH2 0x04cb
0000019f: JUMP
000001a0: JUMPDEST
000001a1: PUSH2 0x01aa
000001a4: SWAP2
000001a5: SWAP1
000001a6: PUSH2 0x049a
000001a9: JUMP
000001aa: JUMPDEST
000001ab: SWAP1
000001ac: POP
000001ad: DUP2
000001ae: PUSH1 0x02
000001b0: ADD
000001b1: SLOAD
000001b2: DUP2
000001b3: PUSH2 0x01bc
000001b6: SWAP2
000001b7: SWAP1
000001b8: PUSH2 0x0525
000001bb: JUMP
000001bc: JUMPDEST
000001bd: SWAP3
000001be: POP
000001bf: POP
000001c0: POP
000001c1: SWAP1
000001c2: JUMP
000001c3: JUMPDEST
000001c4: PUSH1 0x00
000001c6: PUSH2 0x01cd
000001c9: PUSH2 0x0216
000001cc: JUMP
000001cd: JUMPDEST
000001ce: SWAP1
000001cf: POP
000001d0: DUP2
000001d1: DUP2
000001d2: PUSH1 0x00
000001d4: ADD
000001d5: PUSH1 0x00
000001d7: PUSH2 0x0100
000001da: EXP
000001db: DUP2
000001dc: SLOAD
000001dd: DUP2
000001de: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001f3: MUL
000001f4: NOT
000001f5: AND
000001f6: SWAP1
000001f7: DUP4
000001f8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000020d: AND
0000020e: MUL
0000020f: OR
00000210: SWAP1
00000211: SSTORE
00000212: POP
00000213: POP
00000214: POP
00000215: JUMP
00000216: JUMPDEST
00000217: PUSH1 0x00
00000219: DUP1
0000021a: PUSH1 0x00
0000021c: DUP1
0000021d: PUSH1 0x02
0000021f: DUP2
00000220: LT
00000221: PUSH2 0x022d
00000224: JUMPI
00000225: PUSH2 0x022c
00000228: PUSH2 0x05f3
0000022b: JUMP
0000022c: JUMPDEST
0000022d: JUMPDEST
0000022e: PUSH1 0x03
00000230: MUL
00000231: ADD
00000232: PUSH1 0x00
00000234: ADD
00000235: PUSH1 0x00
00000237: SWAP1
00000238: SLOAD
00000239: SWAP1
0000023a: PUSH2 0x0100
0000023d: EXP
0000023e: SWAP1
0000023f: DIV
00000240: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000255: AND
00000256: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000026b: AND
0000026c: CALLER
0000026d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000282: AND
00000283: EQ
00000284: ISZERO
00000285: PUSH2 0x02a8
00000288: JUMPI
00000289: PUSH1 0x00
0000028b: DUP1
0000028c: PUSH1 0x02
0000028e: DUP2
0000028f: LT
00000290: PUSH2 0x029c
00000293: JUMPI
00000294: PUSH2 0x029b
00000297: PUSH2 0x05f3
0000029a: JUMP
0000029b: JUMPDEST
0000029c: JUMPDEST
0000029d: PUSH1 0x03
0000029f: MUL
000002a0: ADD
000002a1: SWAP2
000002a2: POP
000002a3: POP
000002a4: PUSH2 0x033e
000002a7: JUMP
000002a8: JUMPDEST
000002a9: PUSH1 0x00
000002ab: PUSH1 0x01
000002ad: PUSH1 0x02
000002af: DUP2
000002b0: LT
000002b1: PUSH2 0x02bd
000002b4: JUMPI
000002b5: PUSH2 0x02bc
000002b8: PUSH2 0x05f3
000002bb: JUMP
000002bc: JUMPDEST
000002bd: JUMPDEST
000002be: PUSH1 0x03
000002c0: MUL
000002c1: ADD
000002c2: PUSH1 0x00
000002c4: ADD
000002c5: PUSH1 0x00
000002c7: SWAP1
000002c8: SLOAD
000002c9: SWAP1
000002ca: PUSH2 0x0100
000002cd: EXP
000002ce: SWAP1
000002cf: DIV
000002d0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002e5: AND
000002e6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002fb: AND
000002fc: CALLER
000002fd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000312: AND
00000313: EQ
00000314: ISZERO
00000315: PUSH2 0x0339
00000318: JUMPI
00000319: PUSH1 0x00
0000031b: PUSH1 0x01
0000031d: PUSH1 0x02
0000031f: DUP2
00000320: LT
00000321: PUSH2 0x032d
00000324: JUMPI
00000325: PUSH2 0x032c
00000328: PUSH2 0x05f3
0000032b: JUMP
0000032c: JUMPDEST
0000032d: JUMPDEST
0000032e: PUSH1 0x03
00000330: MUL
00000331: ADD
00000332: SWAP2
00000333: POP
00000334: POP
00000335: PUSH2 0x033e
00000338: JUMP
00000339: JUMPDEST
0000033a: PUSH1 0x00
0000033c: DUP1
0000033d: REVERT
0000033e: JUMPDEST
0000033f: SWAP1
00000340: JUMP
00000341: JUMPDEST
00000342: PUSH1 0x00
00000344: DUP1
00000345: PUSH1 0x01
00000347: PUSH1 0x02
00000349: DUP2
0000034a: LT
0000034b: PUSH2 0x0357
0000034e: JUMPI
0000034f: PUSH2 0x0356
00000352: PUSH2 0x05f3
00000355: JUMP
00000356: JUMPDEST
00000357: JUMPDEST
00000358: PUSH1 0x03
0000035a: MUL
0000035b: ADD
0000035c: PUSH1 0x02
0000035e: ADD
0000035f: SLOAD
00000360: PUSH1 0x00
00000362: DUP1
00000363: PUSH1 0x02
00000365: DUP2
00000366: LT
00000367: PUSH2 0x0373
0000036a: JUMPI
0000036b: PUSH2 0x0372
0000036e: PUSH2 0x05f3
00000371: JUMP
00000372: JUMPDEST
00000373: JUMPDEST
00000374: PUSH1 0x03
00000376: MUL
00000377: ADD
00000378: PUSH1 0x02
0000037a: ADD
0000037b: SLOAD
0000037c: SELFBALANCE
0000037d: PUSH2 0x0386
00000380: SWAP2
00000381: SWAP1
00000382: PUSH2 0x0444
00000385: JUMP
00000386: JUMPDEST
00000387: PUSH2 0x0390
0000038a: SWAP2
0000038b: SWAP1
0000038c: PUSH2 0x0444
0000038f: JUMP
00000390: JUMPDEST
00000391: SWAP1
00000392: POP
00000393: SWAP1
00000394: JUMP
00000395: JUMPDEST
00000396: PUSH1 0x00
00000398: DUP2
00000399: CALLDATALOAD
0000039a: SWAP1
0000039b: POP
0000039c: PUSH2 0x03a4
0000039f: DUP2
000003a0: PUSH2 0x062a
000003a3: JUMP
000003a4: JUMPDEST
000003a5: SWAP3
000003a6: SWAP2
000003a7: POP
000003a8: POP
000003a9: JUMP
000003aa: JUMPDEST
000003ab: PUSH1 0x00
000003ad: PUSH1 0x20
000003af: DUP3
000003b0: DUP5
000003b1: SUB
000003b2: SLT
000003b3: ISZERO
000003b4: PUSH2 0x03c0
000003b7: JUMPI
000003b8: PUSH2 0x03bf
000003bb: PUSH2 0x0622
000003be: JUMP
000003bf: JUMPDEST
000003c0: JUMPDEST
000003c1: PUSH1 0x00
000003c3: PUSH2 0x03ce
000003c6: DUP5
000003c7: DUP3
000003c8: DUP6
000003c9: ADD
000003ca: PUSH2 0x0395
000003cd: JUMP
000003ce: JUMPDEST
000003cf: SWAP2
000003d0: POP
000003d1: POP
000003d2: SWAP3
000003d3: SWAP2
000003d4: POP
000003d5: POP
000003d6: JUMP
000003d7: JUMPDEST
000003d8: PUSH1 0x00
000003da: PUSH2 0x03e4
000003dd: PUSH1 0x00
000003df: DUP4
000003e0: PUSH2 0x0439
000003e3: JUMP
000003e4: JUMPDEST
000003e5: SWAP2
000003e6: POP
000003e7: PUSH2 0x03ef
000003ea: DUP3
000003eb: PUSH2 0x0627
000003ee: JUMP
000003ef: JUMPDEST
000003f0: PUSH1 0x00
000003f2: DUP3
000003f3: ADD
000003f4: SWAP1
000003f5: POP
000003f6: SWAP2
000003f7: SWAP1
000003f8: POP
000003f9: JUMP
000003fa: JUMPDEST
000003fb: PUSH2 0x0403
000003fe: DUP2
000003ff: PUSH2 0x058b
00000402: JUMP
00000403: JUMPDEST
00000404: DUP3
00000405: MSTORE
00000406: POP
00000407: POP
00000408: JUMP
00000409: JUMPDEST
0000040a: PUSH1 0x00
0000040c: PUSH2 0x0414
0000040f: DUP3
00000410: PUSH2 0x03d7
00000413: JUMP
00000414: JUMPDEST
00000415: SWAP2
00000416: POP
00000417: DUP2
00000418: SWAP1
00000419: POP
0000041a: SWAP2
0000041b: SWAP1
0000041c: POP
0000041d: JUMP
0000041e: JUMPDEST
0000041f: PUSH1 0x00
00000421: PUSH1 0x20
00000423: DUP3
00000424: ADD
00000425: SWAP1
00000426: POP
00000427: PUSH2 0x0433
0000042a: PUSH1 0x00
0000042c: DUP4
0000042d: ADD
0000042e: DUP5
0000042f: PUSH2 0x03fa
00000432: JUMP
00000433: JUMPDEST
00000434: SWAP3
00000435: SWAP2
00000436: POP
00000437: POP
00000438: JUMP
00000439: JUMPDEST
0000043a: PUSH1 0x00
0000043c: DUP2
0000043d: SWAP1
0000043e: POP
0000043f: SWAP3
00000440: SWAP2
00000441: POP
00000442: POP
00000443: JUMP
00000444: JUMPDEST
00000445: PUSH1 0x00
00000447: PUSH2 0x044f
0000044a: DUP3
0000044b: PUSH2 0x058b
0000044e: JUMP
0000044f: JUMPDEST
00000450: SWAP2
00000451: POP
00000452: PUSH2 0x045a
00000455: DUP4
00000456: PUSH2 0x058b
00000459: JUMP
0000045a: JUMPDEST
0000045b: SWAP3
0000045c: POP
0000045d: DUP3
0000045e: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
0000047f: SUB
00000480: DUP3
00000481: GT
00000482: ISZERO
00000483: PUSH2 0x048f
00000486: JUMPI
00000487: PUSH2 0x048e
0000048a: PUSH2 0x0595
0000048d: JUMP
0000048e: JUMPDEST
0000048f: JUMPDEST
00000490: DUP3
00000491: DUP3
00000492: ADD
00000493: SWAP1
00000494: POP
00000495: SWAP3
00000496: SWAP2
00000497: POP
00000498: POP
00000499: JUMP
0000049a: JUMPDEST
0000049b: PUSH1 0x00
0000049d: PUSH2 0x04a5
000004a0: DUP3
000004a1: PUSH2 0x058b
000004a4: JUMP
000004a5: JUMPDEST
000004a6: SWAP2
000004a7: POP
000004a8: PUSH2 0x04b0
000004ab: DUP4
000004ac: PUSH2 0x058b
000004af: JUMP
000004b0: JUMPDEST
000004b1: SWAP3
000004b2: POP
000004b3: DUP3
000004b4: PUSH2 0x04c0
000004b7: JUMPI
000004b8: PUSH2 0x04bf
000004bb: PUSH2 0x05c4
000004be: JUMP
000004bf: JUMPDEST
000004c0: JUMPDEST
000004c1: DUP3
000004c2: DUP3
000004c3: DIV
000004c4: SWAP1
000004c5: POP
000004c6: SWAP3
000004c7: SWAP2
000004c8: POP
000004c9: POP
000004ca: JUMP
000004cb: JUMPDEST
000004cc: PUSH1 0x00
000004ce: PUSH2 0x04d6
000004d1: DUP3
000004d2: PUSH2 0x058b
000004d5: JUMP
000004d6: JUMPDEST
000004d7: SWAP2
000004d8: POP
000004d9: PUSH2 0x04e1
000004dc: DUP4
000004dd: PUSH2 0x058b
000004e0: JUMP
000004e1: JUMPDEST
000004e2: SWAP3
000004e3: POP
000004e4: DUP2
000004e5: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
00000506: DIV
00000507: DUP4
00000508: GT
00000509: DUP3
0000050a: ISZERO
0000050b: ISZERO
0000050c: AND
0000050d: ISZERO
0000050e: PUSH2 0x051a
00000511: JUMPI
00000512: PUSH2 0x0519
00000515: PUSH2 0x0595
00000518: JUMP
00000519: JUMPDEST
0000051a: JUMPDEST
0000051b: DUP3
0000051c: DUP3
0000051d: MUL
0000051e: SWAP1
0000051f: POP
00000520: SWAP3
00000521: SWAP2
00000522: POP
00000523: POP
00000524: JUMP
00000525: JUMPDEST
00000526: PUSH1 0x00
00000528: PUSH2 0x0530
0000052b: DUP3
0000052c: PUSH2 0x058b
0000052f: JUMP
00000530: JUMPDEST
00000531: SWAP2
00000532: POP
00000533: PUSH2 0x053b
00000536: DUP4
00000537: PUSH2 0x058b
0000053a: JUMP
0000053b: JUMPDEST
0000053c: SWAP3
0000053d: POP
0000053e: DUP3
0000053f: DUP3
00000540: LT
00000541: ISZERO
00000542: PUSH2 0x054e
00000545: JUMPI
00000546: PUSH2 0x054d
00000549: PUSH2 0x0595
0000054c: JUMP
0000054d: JUMPDEST
0000054e: JUMPDEST
0000054f: DUP3
00000550: DUP3
00000551: SUB
00000552: SWAP1
00000553: POP
00000554: SWAP3
00000555: SWAP2
00000556: POP
00000557: POP
00000558: JUMP
00000559: JUMPDEST
0000055a: PUSH1 0x00
0000055c: PUSH2 0x0564
0000055f: DUP3
00000560: PUSH2 0x056b
00000563: JUMP
00000564: JUMPDEST
00000565: SWAP1
00000566: POP
00000567: SWAP2
00000568: SWAP1
00000569: POP
0000056a: JUMP
0000056b: JUMPDEST
0000056c: PUSH1 0x00
0000056e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000583: DUP3
00000584: AND
00000585: SWAP1
00000586: POP
00000587: SWAP2
00000588: SWAP1
00000589: POP
0000058a: JUMP
0000058b: JUMPDEST
0000058c: PUSH1 0x00
0000058e: DUP2
0000058f: SWAP1
00000590: POP
00000591: SWAP2
00000592: SWAP1
00000593: POP
00000594: JUMP
00000595: JUMPDEST
00000596: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
000005b7: PUSH1 0x00
000005b9: MSTORE
000005ba: PUSH1 0x11
000005bc: PUSH1 0x04
000005be: MSTORE
000005bf: PUSH1 0x24
000005c1: PUSH1 0x00
000005c3: REVERT
000005c4: JUMPDEST
000005c5: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
000005e6: PUSH1 0x00
000005e8: MSTORE
000005e9: PUSH1 0x12
000005eb: PUSH1 0x04
000005ed: MSTORE
000005ee: PUSH1 0x24
000005f0: PUSH1 0x00
000005f2: REVERT
000005f3: JUMPDEST
000005f4: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
00000615: PUSH1 0x00
00000617: MSTORE
00000618: PUSH1 0x32
0000061a: PUSH1 0x04
0000061c: MSTORE
0000061d: PUSH1 0x24
0000061f: PUSH1 0x00
00000621: REVERT
00000622: JUMPDEST
00000623: PUSH1 0x00
00000625: DUP1
00000626: REVERT
00000627: JUMPDEST
00000628: POP
00000629: JUMP
0000062a: JUMPDEST
0000062b: PUSH2 0x0633
0000062e: DUP2
0000062f: PUSH2 0x0559
00000632: JUMP
00000633: JUMPDEST
00000634: DUP2
00000635: EQ
00000636: PUSH2 0x063e
00000639: JUMPI
0000063a: PUSH1 0x00
0000063c: DUP1
0000063d: REVERT
0000063e: JUMPDEST
0000063f: POP
00000640: JUMP
00000641: INVALID
00000642: LOG2
00000643: PUSH5 0x6970667358
00000649: UNKNOWN(0x22)
0000064a: SLT
0000064b: KECCAK256
0000064c: UNKNOWN(0xB6)
0000064d: SWAP12
0000064e: SWAP5
0000064f: UNKNOWN(0xBF)
00000650: UNKNOWN(0xBF)
00000651: UNKNOWN(0x0F)
00000652: PUSH3 0x81a7d8
00000656: SWAP9
00000657: DUP12
00000658: SWAP3
00000659: UNKNOWN(0xAC)
0000065a: UNKNOWN(0xE8)
0000065b: RETURNDATASIZE
0000065c: UNKNOWN(0xE5)
0000065d: LOG0
0000065e: COINBASE
0000065f: UNKNOWN(0xBF)
00000660: UNKNOWN(0xB1)
00000661: PUSH16 0xb1b59ce4563069d315d864736f6c6343
00000672: STOP
00000673: ADDMOD
00000674: SMOD
00000675: STOP
00000676: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
medium other detector Untrusted CALL target/value reachable 45 no no
view
trace_id: 0x1ef1591e681e955f1958b1a9fe5b3b07ab731e76ec7fe8d9127986839bad703f
call_targets: 0xbdd81cfb7cee900dc729a08191819b7b09420fd8
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x1ef1591e681e955f1958b1a9fe5b3b07ab731e76ec7fe8d9127986839bad703f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xbdd81cfb7cee900dc729a08191819b7b09420fd8"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3ccfd60b",
            "selector": "0x3ccfd60b",
            "calldata_variants": [
                "0x3ccfd60b",
                "0x3ccfd60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x50188301",
            "selector": "0x50188301",
            "calldata_variants": [
                "0x50188301",
                "0x501883010000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x880cdc31",
            "selector": "0x880cdc31",
            "calldata_variants": [
                "0x880cdc31",
                "0x880cdc310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 308,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [
        {
            "pc": 620,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 764,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 1
}
medium other detector ETH value transfer possible 40 no no
view
trace_id: 0x1ef1591e681e955f1958b1a9fe5b3b07ab731e76ec7fe8d9127986839bad703f
call_targets: 0xbdd81cfb7cee900dc729a08191819b7b09420fd8
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x1ef1591e681e955f1958b1a9fe5b3b07ab731e76ec7fe8d9127986839bad703f",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xbdd81cfb7cee900dc729a08191819b7b09420fd8"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3ccfd60b",
            "selector": "0x3ccfd60b",
            "calldata_variants": [
                "0x3ccfd60b",
                "0x3ccfd60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x50188301",
            "selector": "0x50188301",
            "calldata_variants": [
                "0x50188301",
                "0x501883010000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x880cdc31",
            "selector": "0x880cdc31",
            "calldata_variants": [
                "0x880cdc31",
                "0x880cdc310000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 308,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": [
        {
            "pc": 620,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 764,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ]
}