Analysis Run

019b477e-c536-720b-8bac-1da4cc4b29c4

complete

Chain ID

1

Address

0x64f1ec9b76ee6695e54b9407dc2de7a49e50f84a

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
25539	artifact.fetch	complete	1 / 3	3 months ago
25540	tool.cast_disasm	complete	1 / 3	3 months ago
68698	analysis.bundle	complete	1 / 3	2 weeks ago
68699	capability.graph	complete	1 / 3	2 weeks ago
68700	detector.run	complete	1 / 3	2 weeks ago
68701	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

8

EXT*/BALANCE

7

Total opcodes

1246

Flags

heavy_ext_balance_usage

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x004e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x104bfd8d
00000019: EQ
0000001a: PUSH2 0x0057
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x12065fe0
00000024: EQ
00000025: PUSH2 0x0082
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x1249c58b
0000002f: EQ
00000030: PUSH2 0x00a4
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x150b7a02
0000003a: EQ
0000003b: PUSH2 0x00ac
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0x8a4068dd
00000045: EQ
00000046: PUSH2 0x00d9
00000049: JUMPI
0000004a: PUSH2 0x0055
0000004d: JUMP
0000004e: JUMPDEST
0000004f: CALLDATASIZE
00000050: PUSH2 0x0055
00000053: JUMPI
00000054: STOP
00000055: JUMPDEST
00000056: STOP
00000057: JUMPDEST
00000058: CALLVALUE
00000059: DUP1
0000005a: ISZERO
0000005b: PUSH2 0x0063
0000005e: JUMPI
0000005f: PUSH1 0x00
00000061: DUP1
00000062: REVERT
00000063: JUMPDEST
00000064: POP
00000065: PUSH2 0x006c
00000068: PUSH2 0x00ee
0000006b: JUMP
0000006c: JUMPDEST
0000006d: PUSH1 0x40
0000006f: MLOAD
00000070: PUSH2 0x0079
00000073: SWAP2
00000074: SWAP1
00000075: PUSH2 0x05ec
00000078: JUMP
00000079: JUMPDEST
0000007a: PUSH1 0x40
0000007c: MLOAD
0000007d: DUP1
0000007e: SWAP2
0000007f: SUB
00000080: SWAP1
00000081: RETURN
00000082: JUMPDEST
00000083: CALLVALUE
00000084: DUP1
00000085: ISZERO
00000086: PUSH2 0x008e
00000089: JUMPI
0000008a: PUSH1 0x00
0000008c: DUP1
0000008d: REVERT
0000008e: JUMPDEST
0000008f: POP
00000090: PUSH2 0x0097
00000093: PUSH2 0x00fd
00000096: JUMP
00000097: JUMPDEST
00000098: PUSH1 0x40
0000009a: MLOAD
0000009b: PUSH2 0x0079
0000009e: SWAP2
0000009f: SWAP1
000000a0: PUSH2 0x0652
000000a3: JUMP
000000a4: JUMPDEST
000000a5: PUSH2 0x0055
000000a8: PUSH2 0x0101
000000ab: JUMP
000000ac: JUMPDEST
000000ad: CALLVALUE
000000ae: DUP1
000000af: ISZERO
000000b0: PUSH2 0x00b8
000000b3: JUMPI
000000b4: PUSH1 0x00
000000b6: DUP1
000000b7: REVERT
000000b8: JUMPDEST
000000b9: POP
000000ba: PUSH2 0x00cc
000000bd: PUSH2 0x00c7
000000c0: CALLDATASIZE
000000c1: PUSH1 0x04
000000c3: PUSH2 0x053e
000000c6: JUMP
000000c7: JUMPDEST
000000c8: PUSH2 0x0170
000000cb: JUMP
000000cc: JUMPDEST
000000cd: PUSH1 0x40
000000cf: MLOAD
000000d0: PUSH2 0x0079
000000d3: SWAP2
000000d4: SWAP1
000000d5: PUSH2 0x063d
000000d8: JUMP
000000d9: JUMPDEST
000000da: CALLVALUE
000000db: DUP1
000000dc: ISZERO
000000dd: PUSH2 0x00e5
000000e0: JUMPI
000000e1: PUSH1 0x00
000000e3: DUP1
000000e4: REVERT
000000e5: JUMPDEST
000000e6: POP
000000e7: PUSH2 0x0055
000000ea: PUSH2 0x030f
000000ed: JUMP
000000ee: JUMPDEST
000000ef: PUSH1 0x00
000000f1: SLOAD
000000f2: PUSH1 0x01
000000f4: PUSH1 0x01
000000f6: PUSH1 0xa0
000000f8: SHL
000000f9: SUB
000000fa: AND
000000fb: DUP2
000000fc: JUMP
000000fd: JUMPDEST
000000fe: SELFBALANCE
000000ff: SWAP1
00000100: JUMP
00000101: JUMPDEST
00000102: PUSH1 0x00
00000104: SLOAD
00000105: PUSH1 0x40
00000107: MLOAD
00000108: PUSH4 0x05fd63a1
0000010d: PUSH1 0xe3
0000010f: SHL
00000110: DUP2
00000111: MSTORE
00000112: PUSH1 0x01
00000114: PUSH1 0x01
00000116: PUSH1 0xa0
00000118: SHL
00000119: SUB
0000011a: SWAP1
0000011b: SWAP2
0000011c: AND
0000011d: SWAP1
0000011e: PUSH4 0x2feb1d08
00000123: SWAP1
00000124: PUSH8 0x016345785d8a0000
0000012d: SWAP1
0000012e: PUSH2 0x013c
00000131: SWAP1
00000132: PUSH1 0x01
00000134: SWAP1
00000135: PUSH1 0x04
00000137: ADD
00000138: PUSH2 0x0652
0000013b: JUMP
0000013c: JUMPDEST
0000013d: PUSH1 0x00
0000013f: PUSH1 0x40
00000141: MLOAD
00000142: DUP1
00000143: DUP4
00000144: SUB
00000145: DUP2
00000146: DUP6
00000147: DUP9
00000148: DUP1
00000149: EXTCODESIZE
0000014a: ISZERO
0000014b: DUP1
0000014c: ISZERO
0000014d: PUSH2 0x0155
00000150: JUMPI
00000151: PUSH1 0x00
00000153: DUP1
00000154: REVERT
00000155: JUMPDEST
00000156: POP
00000157: GAS
00000158: CALL
00000159: ISZERO
0000015a: DUP1
0000015b: ISZERO
0000015c: PUSH2 0x0169
0000015f: JUMPI
00000160: RETURNDATASIZE
00000161: PUSH1 0x00
00000163: DUP1
00000164: RETURNDATACOPY
00000165: RETURNDATASIZE
00000166: PUSH1 0x00
00000168: REVERT
00000169: JUMPDEST
0000016a: POP
0000016b: POP
0000016c: POP
0000016d: POP
0000016e: POP
0000016f: JUMP
00000170: JUMPDEST
00000171: PUSH1 0x00
00000173: PUSH8 0x016345785d8a0000
0000017c: SELFBALANCE
0000017d: LT
0000017e: PUSH2 0x02fd
00000181: JUMPI
00000182: PUSH1 0x00
00000184: DUP1
00000185: SLOAD
00000186: SWAP1
00000187: PUSH2 0x0100
0000018a: EXP
0000018b: SWAP1
0000018c: DIV
0000018d: PUSH1 0x01
0000018f: PUSH1 0x01
00000191: PUSH1 0xa0
00000193: SHL
00000194: SUB
00000195: AND
00000196: PUSH1 0x01
00000198: PUSH1 0x01
0000019a: PUSH1 0xa0
0000019c: SHL
0000019d: SUB
0000019e: AND
0000019f: PUSH4 0xd65db8ac
000001a4: PUSH1 0x40
000001a6: MLOAD
000001a7: DUP2
000001a8: PUSH4 0xffffffff
000001ad: AND
000001ae: PUSH1 0xe0
000001b0: SHL
000001b1: DUP2
000001b2: MSTORE
000001b3: PUSH1 0x04
000001b5: ADD
000001b6: PUSH1 0x20
000001b8: PUSH1 0x40
000001ba: MLOAD
000001bb: DUP1
000001bc: DUP4
000001bd: SUB
000001be: DUP2
000001bf: DUP7
000001c0: DUP1
000001c1: EXTCODESIZE
000001c2: ISZERO
000001c3: DUP1
000001c4: ISZERO
000001c5: PUSH2 0x01cd
000001c8: JUMPI
000001c9: PUSH1 0x00
000001cb: DUP1
000001cc: REVERT
000001cd: JUMPDEST
000001ce: POP
000001cf: GAS
000001d0: STATICCALL
000001d1: ISZERO
000001d2: DUP1
000001d3: ISZERO
000001d4: PUSH2 0x01e1
000001d7: JUMPI
000001d8: RETURNDATASIZE
000001d9: PUSH1 0x00
000001db: DUP1
000001dc: RETURNDATACOPY
000001dd: RETURNDATASIZE
000001de: PUSH1 0x00
000001e0: REVERT
000001e1: JUMPDEST
000001e2: POP
000001e3: POP
000001e4: POP
000001e5: POP
000001e6: PUSH1 0x40
000001e8: MLOAD
000001e9: RETURNDATASIZE
000001ea: PUSH1 0x1f
000001ec: NOT
000001ed: PUSH1 0x1f
000001ef: DUP3
000001f0: ADD
000001f1: AND
000001f2: DUP3
000001f3: ADD
000001f4: DUP1
000001f5: PUSH1 0x40
000001f7: MSTORE
000001f8: POP
000001f9: DUP2
000001fa: ADD
000001fb: SWAP1
000001fc: PUSH2 0x0205
000001ff: SWAP2
00000200: SWAP1
00000201: PUSH2 0x05d4
00000204: JUMP
00000205: JUMPDEST
00000206: PUSH1 0x00
00000208: DUP1
00000209: SLOAD
0000020a: SWAP1
0000020b: PUSH2 0x0100
0000020e: EXP
0000020f: SWAP1
00000210: DIV
00000211: PUSH1 0x01
00000213: PUSH1 0x01
00000215: PUSH1 0xa0
00000217: SHL
00000218: SUB
00000219: AND
0000021a: PUSH1 0x01
0000021c: PUSH1 0x01
0000021e: PUSH1 0xa0
00000220: SHL
00000221: SUB
00000222: AND
00000223: PUSH4 0x18160ddd
00000228: PUSH1 0x40
0000022a: MLOAD
0000022b: DUP2
0000022c: PUSH4 0xffffffff
00000231: AND
00000232: PUSH1 0xe0
00000234: SHL
00000235: DUP2
00000236: MSTORE
00000237: PUSH1 0x04
00000239: ADD
0000023a: PUSH1 0x20
0000023c: PUSH1 0x40
0000023e: MLOAD
0000023f: DUP1
00000240: DUP4
00000241: SUB
00000242: DUP2
00000243: DUP7
00000244: DUP1
00000245: EXTCODESIZE
00000246: ISZERO
00000247: DUP1
00000248: ISZERO
00000249: PUSH2 0x0251
0000024c: JUMPI
0000024d: PUSH1 0x00
0000024f: DUP1
00000250: REVERT
00000251: JUMPDEST
00000252: POP
00000253: GAS
00000254: STATICCALL
00000255: ISZERO
00000256: DUP1
00000257: ISZERO
00000258: PUSH2 0x0265
0000025b: JUMPI
0000025c: RETURNDATASIZE
0000025d: PUSH1 0x00
0000025f: DUP1
00000260: RETURNDATACOPY
00000261: RETURNDATASIZE
00000262: PUSH1 0x00
00000264: REVERT
00000265: JUMPDEST
00000266: POP
00000267: POP
00000268: POP
00000269: POP
0000026a: PUSH1 0x40
0000026c: MLOAD
0000026d: RETURNDATASIZE
0000026e: PUSH1 0x1f
00000270: NOT
00000271: PUSH1 0x1f
00000273: DUP3
00000274: ADD
00000275: AND
00000276: DUP3
00000277: ADD
00000278: DUP1
00000279: PUSH1 0x40
0000027b: MSTORE
0000027c: POP
0000027d: DUP2
0000027e: ADD
0000027f: SWAP1
00000280: PUSH2 0x0289
00000283: SWAP2
00000284: SWAP1
00000285: PUSH2 0x05d4
00000288: JUMP
00000289: JUMPDEST
0000028a: LT
0000028b: ISZERO
0000028c: PUSH2 0x02fd
0000028f: JUMPI
00000290: PUSH1 0x00
00000292: SLOAD
00000293: PUSH1 0x40
00000295: MLOAD
00000296: PUSH4 0x05fd63a1
0000029b: PUSH1 0xe3
0000029d: SHL
0000029e: DUP2
0000029f: MSTORE
000002a0: PUSH1 0x01
000002a2: PUSH1 0x01
000002a4: PUSH1 0xa0
000002a6: SHL
000002a7: SUB
000002a8: SWAP1
000002a9: SWAP2
000002aa: AND
000002ab: SWAP1
000002ac: PUSH4 0x2feb1d08
000002b1: SWAP1
000002b2: PUSH8 0x016345785d8a0000
000002bb: SWAP1
000002bc: PUSH2 0x02ca
000002bf: SWAP1
000002c0: PUSH1 0x01
000002c2: SWAP1
000002c3: PUSH1 0x04
000002c5: ADD
000002c6: PUSH2 0x0652
000002c9: JUMP
000002ca: JUMPDEST
000002cb: PUSH1 0x00
000002cd: PUSH1 0x40
000002cf: MLOAD
000002d0: DUP1
000002d1: DUP4
000002d2: SUB
000002d3: DUP2
000002d4: DUP6
000002d5: DUP9
000002d6: DUP1
000002d7: EXTCODESIZE
000002d8: ISZERO
000002d9: DUP1
000002da: ISZERO
000002db: PUSH2 0x02e3
000002de: JUMPI
000002df: PUSH1 0x00
000002e1: DUP1
000002e2: REVERT
000002e3: JUMPDEST
000002e4: POP
000002e5: GAS
000002e6: CALL
000002e7: ISZERO
000002e8: DUP1
000002e9: ISZERO
000002ea: PUSH2 0x02f7
000002ed: JUMPI
000002ee: RETURNDATASIZE
000002ef: PUSH1 0x00
000002f1: DUP1
000002f2: RETURNDATACOPY
000002f3: RETURNDATASIZE
000002f4: PUSH1 0x00
000002f6: REVERT
000002f7: JUMPDEST
000002f8: POP
000002f9: POP
000002fa: POP
000002fb: POP
000002fc: POP
000002fd: JUMPDEST
000002fe: POP
000002ff: PUSH4 0x0a85bd01
00000304: PUSH1 0xe1
00000306: SHL
00000307: SWAP6
00000308: SWAP5
00000309: POP
0000030a: POP
0000030b: POP
0000030c: POP
0000030d: POP
0000030e: JUMP
0000030f: JUMPDEST
00000310: PUSH1 0x01
00000312: SLOAD
00000313: PUSH1 0x01
00000315: PUSH1 0x01
00000317: PUSH1 0xa0
00000319: SHL
0000031a: SUB
0000031b: AND
0000031c: CALLER
0000031d: EQ
0000031e: PUSH2 0x0342
00000321: JUMPI
00000322: PUSH1 0x40
00000324: MLOAD
00000325: PUSH3 0x461bcd
00000329: PUSH1 0xe5
0000032b: SHL
0000032c: DUP2
0000032d: MSTORE
0000032e: PUSH1 0x04
00000330: ADD
00000331: PUSH2 0x0339
00000334: SWAP1
00000335: PUSH2 0x06ae
00000338: JUMP
00000339: JUMPDEST
0000033a: PUSH1 0x40
0000033c: MLOAD
0000033d: DUP1
0000033e: SWAP2
0000033f: SUB
00000340: SWAP1
00000341: REVERT
00000342: JUMPDEST
00000343: PUSH1 0x00
00000345: DUP1
00000346: SLOAD
00000347: PUSH1 0x40
00000349: MLOAD
0000034a: PUSH4 0x70a08231
0000034f: PUSH1 0xe0
00000351: SHL
00000352: DUP2
00000353: MSTORE
00000354: PUSH1 0x01
00000356: PUSH1 0x01
00000358: PUSH1 0xa0
0000035a: SHL
0000035b: SUB
0000035c: SWAP1
0000035d: SWAP2
0000035e: AND
0000035f: SWAP1
00000360: PUSH4 0x70a08231
00000365: SWAP1
00000366: PUSH2 0x0373
00000369: SWAP1
0000036a: ADDRESS
0000036b: SWAP1
0000036c: PUSH1 0x04
0000036e: ADD
0000036f: PUSH2 0x05ec
00000372: JUMP
00000373: JUMPDEST
00000374: PUSH1 0x20
00000376: PUSH1 0x40
00000378: MLOAD
00000379: DUP1
0000037a: DUP4
0000037b: SUB
0000037c: DUP2
0000037d: DUP7
0000037e: DUP1
0000037f: EXTCODESIZE
00000380: ISZERO
00000381: DUP1
00000382: ISZERO
00000383: PUSH2 0x038b
00000386: JUMPI
00000387: PUSH1 0x00
00000389: DUP1
0000038a: REVERT
0000038b: JUMPDEST
0000038c: POP
0000038d: GAS
0000038e: STATICCALL
0000038f: ISZERO
00000390: DUP1
00000391: ISZERO
00000392: PUSH2 0x039f
00000395: JUMPI
00000396: RETURNDATASIZE
00000397: PUSH1 0x00
00000399: DUP1
0000039a: RETURNDATACOPY
0000039b: RETURNDATASIZE
0000039c: PUSH1 0x00
0000039e: REVERT
0000039f: JUMPDEST
000003a0: POP
000003a1: POP
000003a2: POP
000003a3: POP
000003a4: PUSH1 0x40
000003a6: MLOAD
000003a7: RETURNDATASIZE
000003a8: PUSH1 0x1f
000003aa: NOT
000003ab: PUSH1 0x1f
000003ad: DUP3
000003ae: ADD
000003af: AND
000003b0: DUP3
000003b1: ADD
000003b2: DUP1
000003b3: PUSH1 0x40
000003b5: MSTORE
000003b6: POP
000003b7: DUP2
000003b8: ADD
000003b9: SWAP1
000003ba: PUSH2 0x03c3
000003bd: SWAP2
000003be: SWAP1
000003bf: PUSH2 0x05d4
000003c2: JUMP
000003c3: JUMPDEST
000003c4: GT
000003c5: ISZERO
000003c6: PUSH2 0x04b9
000003c9: JUMPI
000003ca: PUSH1 0x00
000003cc: DUP1
000003cd: SLOAD
000003ce: PUSH1 0x40
000003d0: MLOAD
000003d1: PUSH4 0x2f745c59
000003d6: PUSH1 0xe0
000003d8: SHL
000003d9: DUP2
000003da: MSTORE
000003db: PUSH1 0x01
000003dd: PUSH1 0x01
000003df: PUSH1 0xa0
000003e1: SHL
000003e2: SUB
000003e3: SWAP1
000003e4: SWAP2
000003e5: AND
000003e6: SWAP1
000003e7: PUSH4 0x2f745c59
000003ec: SWAP1
000003ed: PUSH2 0x03fc
000003f0: SWAP1
000003f1: ADDRESS
000003f2: SWAP1
000003f3: DUP6
000003f4: SWAP1
000003f5: PUSH1 0x04
000003f7: ADD
000003f8: PUSH2 0x0624
000003fb: JUMP
000003fc: JUMPDEST
000003fd: PUSH1 0x20
000003ff: PUSH1 0x40
00000401: MLOAD
00000402: DUP1
00000403: DUP4
00000404: SUB
00000405: DUP2
00000406: DUP7
00000407: DUP1
00000408: EXTCODESIZE
00000409: ISZERO
0000040a: DUP1
0000040b: ISZERO
0000040c: PUSH2 0x0414
0000040f: JUMPI
00000410: PUSH1 0x00
00000412: DUP1
00000413: REVERT
00000414: JUMPDEST
00000415: POP
00000416: GAS
00000417: STATICCALL
00000418: ISZERO
00000419: DUP1
0000041a: ISZERO
0000041b: PUSH2 0x0428
0000041e: JUMPI
0000041f: RETURNDATASIZE
00000420: PUSH1 0x00
00000422: DUP1
00000423: RETURNDATACOPY
00000424: RETURNDATASIZE
00000425: PUSH1 0x00
00000427: REVERT
00000428: JUMPDEST
00000429: POP
0000042a: POP
0000042b: POP
0000042c: POP
0000042d: PUSH1 0x40
0000042f: MLOAD
00000430: RETURNDATASIZE
00000431: PUSH1 0x1f
00000433: NOT
00000434: PUSH1 0x1f
00000436: DUP3
00000437: ADD
00000438: AND
00000439: DUP3
0000043a: ADD
0000043b: DUP1
0000043c: PUSH1 0x40
0000043e: MSTORE
0000043f: POP
00000440: DUP2
00000441: ADD
00000442: SWAP1
00000443: PUSH2 0x044c
00000446: SWAP2
00000447: SWAP1
00000448: PUSH2 0x05d4
0000044b: JUMP
0000044c: JUMPDEST
0000044d: PUSH1 0x00
0000044f: SLOAD
00000450: PUSH1 0x40
00000452: MLOAD
00000453: PUSH4 0x21421707
00000458: PUSH1 0xe1
0000045a: SHL
0000045b: DUP2
0000045c: MSTORE
0000045d: SWAP2
0000045e: SWAP3
0000045f: POP
00000460: PUSH1 0x01
00000462: PUSH1 0x01
00000464: PUSH1 0xa0
00000466: SHL
00000467: SUB
00000468: AND
00000469: SWAP1
0000046a: PUSH4 0x42842e0e
0000046f: SWAP1
00000470: PUSH2 0x0481
00000473: SWAP1
00000474: ADDRESS
00000475: SWAP1
00000476: CALLER
00000477: SWAP1
00000478: DUP7
00000479: SWAP1
0000047a: PUSH1 0x04
0000047c: ADD
0000047d: PUSH2 0x0600
00000480: JUMP
00000481: JUMPDEST
00000482: PUSH1 0x00
00000484: PUSH1 0x40
00000486: MLOAD
00000487: DUP1
00000488: DUP4
00000489: SUB
0000048a: DUP2
0000048b: PUSH1 0x00
0000048d: DUP8
0000048e: DUP1
0000048f: EXTCODESIZE
00000490: ISZERO
00000491: DUP1
00000492: ISZERO
00000493: PUSH2 0x049b
00000496: JUMPI
00000497: PUSH1 0x00
00000499: DUP1
0000049a: REVERT
0000049b: JUMPDEST
0000049c: POP
0000049d: GAS
0000049e: CALL
0000049f: ISZERO
000004a0: DUP1
000004a1: ISZERO
000004a2: PUSH2 0x04af
000004a5: JUMPI
000004a6: RETURNDATASIZE
000004a7: PUSH1 0x00
000004a9: DUP1
000004aa: RETURNDATACOPY
000004ab: RETURNDATASIZE
000004ac: PUSH1 0x00
000004ae: REVERT
000004af: JUMPDEST
000004b0: POP
000004b1: POP
000004b2: POP
000004b3: POP
000004b4: POP
000004b5: PUSH2 0x0342
000004b8: JUMP
000004b9: JUMPDEST
000004ba: JUMP
000004bb: JUMPDEST
000004bc: PUSH2 0x04fe
000004bf: DUP2
000004c0: PUSH1 0x40
000004c2: MLOAD
000004c3: PUSH1 0x24
000004c5: ADD
000004c6: PUSH2 0x04cf
000004c9: SWAP2
000004ca: SWAP1
000004cb: PUSH2 0x065b
000004ce: JUMP
000004cf: JUMPDEST
000004d0: PUSH1 0x40
000004d2: DUP1
000004d3: MLOAD
000004d4: PUSH1 0x1f
000004d6: NOT
000004d7: DUP2
000004d8: DUP5
000004d9: SUB
000004da: ADD
000004db: DUP2
000004dc: MSTORE
000004dd: SWAP2
000004de: SWAP1
000004df: MSTORE
000004e0: PUSH1 0x20
000004e2: DUP2
000004e3: ADD
000004e4: DUP1
000004e5: MLOAD
000004e6: PUSH1 0x01
000004e8: PUSH1 0x01
000004ea: PUSH1 0xe0
000004ec: SHL
000004ed: SUB
000004ee: AND
000004ef: PUSH4 0x104c13eb
000004f4: PUSH1 0xe2
000004f6: SHL
000004f7: OR
000004f8: SWAP1
000004f9: MSTORE
000004fa: PUSH2 0x0501
000004fd: JUMP
000004fe: JUMPDEST
000004ff: POP
00000500: JUMP
00000501: JUMPDEST
00000502: DUP1
00000503: MLOAD
00000504: PUSH11 0x636f6e736f6c652e6c6f67
00000510: PUSH1 0x20
00000512: DUP4
00000513: ADD
00000514: PUSH1 0x00
00000516: DUP1
00000517: DUP5
00000518: DUP4
00000519: DUP6
0000051a: GAS
0000051b: STATICCALL
0000051c: POP
0000051d: POP
0000051e: POP
0000051f: POP
00000520: POP
00000521: JUMP
00000522: JUMPDEST
00000523: DUP1
00000524: CALLDATALOAD
00000525: PUSH1 0x01
00000527: PUSH1 0x01
00000529: PUSH1 0xa0
0000052b: SHL
0000052c: SUB
0000052d: DUP2
0000052e: AND
0000052f: DUP2
00000530: EQ
00000531: PUSH2 0x0539
00000534: JUMPI
00000535: PUSH1 0x00
00000537: DUP1
00000538: REVERT
00000539: JUMPDEST
0000053a: SWAP2
0000053b: SWAP1
0000053c: POP
0000053d: JUMP
0000053e: JUMPDEST
0000053f: PUSH1 0x00
00000541: DUP1
00000542: PUSH1 0x00
00000544: DUP1
00000545: PUSH1 0x00
00000547: PUSH1 0x80
00000549: DUP7
0000054a: DUP9
0000054b: SUB
0000054c: SLT
0000054d: ISZERO
0000054e: PUSH2 0x0555
00000551: JUMPI
00000552: DUP1
00000553: DUP2
00000554: REVERT
00000555: JUMPDEST
00000556: PUSH2 0x055e
00000559: DUP7
0000055a: PUSH2 0x0522
0000055d: JUMP
0000055e: JUMPDEST
0000055f: SWAP5
00000560: POP
00000561: PUSH2 0x056c
00000564: PUSH1 0x20
00000566: DUP8
00000567: ADD
00000568: PUSH2 0x0522
0000056b: JUMP
0000056c: JUMPDEST
0000056d: SWAP4
0000056e: POP
0000056f: PUSH1 0x40
00000571: DUP7
00000572: ADD
00000573: CALLDATALOAD
00000574: SWAP3
00000575: POP
00000576: PUSH1 0x60
00000578: DUP7
00000579: ADD
0000057a: CALLDATALOAD
0000057b: PUSH8 0xffffffffffffffff
00000584: DUP1
00000585: DUP3
00000586: GT
00000587: ISZERO
00000588: PUSH2 0x058f
0000058b: JUMPI
0000058c: DUP3
0000058d: DUP4
0000058e: REVERT
0000058f: JUMPDEST
00000590: DUP2
00000591: DUP9
00000592: ADD
00000593: SWAP2
00000594: POP
00000595: DUP9
00000596: PUSH1 0x1f
00000598: DUP4
00000599: ADD
0000059a: SLT
0000059b: PUSH2 0x05a2
0000059e: JUMPI
0000059f: DUP3
000005a0: DUP4
000005a1: REVERT
000005a2: JUMPDEST
000005a3: DUP2
000005a4: CALLDATALOAD
000005a5: DUP2
000005a6: DUP2
000005a7: GT
000005a8: ISZERO
000005a9: PUSH2 0x05b0
000005ac: JUMPI
000005ad: DUP4
000005ae: DUP5
000005af: REVERT
000005b0: JUMPDEST
000005b1: DUP10
000005b2: PUSH1 0x20
000005b4: DUP3
000005b5: DUP6
000005b6: ADD
000005b7: ADD
000005b8: GT
000005b9: ISZERO
000005ba: PUSH2 0x05c1
000005bd: JUMPI
000005be: DUP4
000005bf: DUP5
000005c0: REVERT
000005c1: JUMPDEST
000005c2: SWAP7
000005c3: SWAP10
000005c4: SWAP6
000005c5: SWAP9
000005c6: POP
000005c7: SWAP4
000005c8: SWAP7
000005c9: POP
000005ca: PUSH1 0x20
000005cc: ADD
000005cd: SWAP5
000005ce: SWAP4
000005cf: SWAP3
000005d0: POP
000005d1: POP
000005d2: POP
000005d3: JUMP
000005d4: JUMPDEST
000005d5: PUSH1 0x00
000005d7: PUSH1 0x20
000005d9: DUP3
000005da: DUP5
000005db: SUB
000005dc: SLT
000005dd: ISZERO
000005de: PUSH2 0x05e5
000005e1: JUMPI
000005e2: DUP1
000005e3: DUP2
000005e4: REVERT
000005e5: JUMPDEST
000005e6: POP
000005e7: MLOAD
000005e8: SWAP2
000005e9: SWAP1
000005ea: POP
000005eb: JUMP
000005ec: JUMPDEST
000005ed: PUSH1 0x01
000005ef: PUSH1 0x01
000005f1: PUSH1 0xa0
000005f3: SHL
000005f4: SUB
000005f5: SWAP2
000005f6: SWAP1
000005f7: SWAP2
000005f8: AND
000005f9: DUP2
000005fa: MSTORE
000005fb: PUSH1 0x20
000005fd: ADD
000005fe: SWAP1
000005ff: JUMP
00000600: JUMPDEST
00000601: PUSH1 0x01
00000603: PUSH1 0x01
00000605: PUSH1 0xa0
00000607: SHL
00000608: SUB
00000609: SWAP4
0000060a: DUP5
0000060b: AND
0000060c: DUP2
0000060d: MSTORE
0000060e: SWAP2
0000060f: SWAP1
00000610: SWAP3
00000611: AND
00000612: PUSH1 0x20
00000614: DUP3
00000615: ADD
00000616: MSTORE
00000617: PUSH1 0x40
00000619: DUP2
0000061a: ADD
0000061b: SWAP2
0000061c: SWAP1
0000061d: SWAP2
0000061e: MSTORE
0000061f: PUSH1 0x60
00000621: ADD
00000622: SWAP1
00000623: JUMP
00000624: JUMPDEST
00000625: PUSH1 0x01
00000627: PUSH1 0x01
00000629: PUSH1 0xa0
0000062b: SHL
0000062c: SUB
0000062d: SWAP3
0000062e: SWAP1
0000062f: SWAP3
00000630: AND
00000631: DUP3
00000632: MSTORE
00000633: PUSH1 0x20
00000635: DUP3
00000636: ADD
00000637: MSTORE
00000638: PUSH1 0x40
0000063a: ADD
0000063b: SWAP1
0000063c: JUMP
0000063d: JUMPDEST
0000063e: PUSH1 0x01
00000640: PUSH1 0x01
00000642: PUSH1 0xe0
00000644: SHL
00000645: SUB
00000646: NOT
00000647: SWAP2
00000648: SWAP1
00000649: SWAP2
0000064a: AND
0000064b: DUP2
0000064c: MSTORE
0000064d: PUSH1 0x20
0000064f: ADD
00000650: SWAP1
00000651: JUMP
00000652: JUMPDEST
00000653: SWAP1
00000654: DUP2
00000655: MSTORE
00000656: PUSH1 0x20
00000658: ADD
00000659: SWAP1
0000065a: JUMP
0000065b: JUMPDEST
0000065c: PUSH1 0x00
0000065e: PUSH1 0x20
00000660: DUP1
00000661: DUP4
00000662: MSTORE
00000663: DUP4
00000664: MLOAD
00000665: DUP1
00000666: DUP3
00000667: DUP6
00000668: ADD
00000669: MSTORE
0000066a: DUP3
0000066b: JUMPDEST
0000066c: DUP2
0000066d: DUP2
0000066e: LT
0000066f: ISZERO
00000670: PUSH2 0x0687
00000673: JUMPI
00000674: DUP6
00000675: DUP2
00000676: ADD
00000677: DUP4
00000678: ADD
00000679: MLOAD
0000067a: DUP6
0000067b: DUP3
0000067c: ADD
0000067d: PUSH1 0x40
0000067f: ADD
00000680: MSTORE
00000681: DUP3
00000682: ADD
00000683: PUSH2 0x066b
00000686: JUMP
00000687: JUMPDEST
00000688: DUP2
00000689: DUP2
0000068a: GT
0000068b: ISZERO
0000068c: PUSH2 0x0698
0000068f: JUMPI
00000690: DUP4
00000691: PUSH1 0x40
00000693: DUP4
00000694: DUP8
00000695: ADD
00000696: ADD
00000697: MSTORE
00000698: JUMPDEST
00000699: POP
0000069a: PUSH1 0x1f
0000069c: ADD
0000069d: PUSH1 0x1f
0000069f: NOT
000006a0: AND
000006a1: SWAP3
000006a2: SWAP1
000006a3: SWAP3
000006a4: ADD
000006a5: PUSH1 0x40
000006a7: ADD
000006a8: SWAP4
000006a9: SWAP3
000006aa: POP
000006ab: POP
000006ac: POP
000006ad: JUMP
000006ae: JUMPDEST
000006af: PUSH1 0x20
000006b1: DUP1
000006b2: DUP3
000006b3: MSTORE
000006b4: PUSH1 0x17
000006b6: SWAP1
000006b7: DUP3
000006b8: ADD
000006b9: MSTORE
000006ba: PUSH32 0x6f6e6c79206f776e65722063616e207472616e73666572000000000000000000
000006db: PUSH1 0x40
000006dd: DUP3
000006de: ADD
000006df: MSTORE
000006e0: PUSH1 0x60
000006e2: ADD
000006e3: SWAP1
000006e4: JUMP
000006e5: INVALID
000006e6: LOG2
000006e7: PUSH5 0x6970667358
000006ed: UNKNOWN(0x22)
000006ee: SLT
000006ef: KECCAK256
000006f0: UNKNOWN(0x1F)
000006f1: UNKNOWN(0xAF)
000006f2: DUP9
000006f3: PUSH28 0xa56dc9fab641dfd1c72dfff0b6429aa2b8d6a6828e0ef6fda03e0c56
00000710: PUSH5 0x736f6c6343
00000716: STOP
00000717: ADDMOD
00000718: STOP
00000719: STOP
0000071a: CALLER

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x289255f23ac58c7b3f1153e5070b6ecd91ea9f0090411444726134ff03d828ed call_targets: 0x64f1ec9b76ee6695e54b9407dc2de7a49e50f84a target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x289255f23ac58c7b3f1153e5070b6ecd91ea9f0090411444726134ff03d828ed", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x64f1ec9b76ee6695e54b9407dc2de7a49e50f84a" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x104bfd8d", "selector": "0x104bfd8d", "calldata_variants": [ "0x104bfd8d", "0x104bfd8d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x12065fe0", "selector": "0x12065fe0", "calldata_variants": [ "0x12065fe0", "0x12065fe00000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1249c58b", "selector": "0x1249c58b", "calldata_variants": [ "0x1249c58b", "0x1249c58b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x150b7a02", "selector": "0x150b7a02", "calldata_variants": [ "0x150b7a02", "0x150b7a020000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8a4068dd", "selector": "0x8a4068dd", "calldata_variants": [ "0x8a4068dd", "0x8a4068dd0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 344, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 742, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1182, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 3, "guards_detected": [], "untrusted_call_count": 3 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x289255f23ac58c7b3f1153e5070b6ecd91ea9f0090411444726134ff03d828ed call_targets: 0x64f1ec9b76ee6695e54b9407dc2de7a49e50f84a target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x289255f23ac58c7b3f1153e5070b6ecd91ea9f0090411444726134ff03d828ed", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x64f1ec9b76ee6695e54b9407dc2de7a49e50f84a" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x104bfd8d", "selector": "0x104bfd8d", "calldata_variants": [ "0x104bfd8d", "0x104bfd8d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x12065fe0", "selector": "0x12065fe0", "calldata_variants": [ "0x12065fe0", "0x12065fe00000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x1249c58b", "selector": "0x1249c58b", "calldata_variants": [ "0x1249c58b", "0x1249c58b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x150b7a02", "selector": "0x150b7a02", "calldata_variants": [ "0x150b7a02", "0x150b7a020000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8a4068dd", "selector": "0x8a4068dd", "calldata_variants": [ "0x8a4068dd", "0x8a4068dd0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 344, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 742, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 1182, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 3, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x289255f23ac58c7b3f1153e5070b6ecd91ea9f0090411444726134ff03d828ed

call_targets: 0x64f1ec9b76ee6695e54b9407dc2de7a49e50f84a

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x289255f23ac58c7b3f1153e5070b6ecd91ea9f0090411444726134ff03d828ed",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x64f1ec9b76ee6695e54b9407dc2de7a49e50f84a"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x104bfd8d",
            "selector": "0x104bfd8d",
            "calldata_variants": [
                "0x104bfd8d",
                "0x104bfd8d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x12065fe0",
            "selector": "0x12065fe0",
            "calldata_variants": [
                "0x12065fe0",
                "0x12065fe00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x1249c58b",
            "selector": "0x1249c58b",
            "calldata_variants": [
                "0x1249c58b",
                "0x1249c58b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x150b7a02",
            "selector": "0x150b7a02",
            "calldata_variants": [
                "0x150b7a02",
                "0x150b7a020000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8a4068dd",
            "selector": "0x8a4068dd",
            "calldata_variants": [
                "0x8a4068dd",
                "0x8a4068dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 344,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 742,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1182,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 3
}