TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-c546-705c-87cb-015769f2aca1

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
25549 artifact.fetch complete 1 / 3 3 months ago
25550 tool.cast_disasm complete 1 / 3 3 months ago
68718 analysis.bundle complete 1 / 3 2 weeks ago
68719 capability.graph complete 1 / 3 2 weeks ago
68720 detector.run complete 1 / 3 2 weeks ago
68721 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
3
Total opcodes
1067
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x005e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x5c60da1b
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x5c60da1b
00000024: EQ
00000025: PUSH2 0x00a8
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8f283970
0000002f: EQ
00000030: PUSH2 0x00e6
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf851a440
0000003a: EQ
0000003b: PUSH2 0x0106
0000003e: JUMPI
0000003f: PUSH2 0x006d
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x3659cfe6
0000004a: EQ
0000004b: PUSH2 0x0075
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x4f1ef286
00000055: EQ
00000056: PUSH2 0x0095
00000059: JUMPI
0000005a: PUSH2 0x006d
0000005d: JUMP
0000005e: JUMPDEST
0000005f: CALLDATASIZE
00000060: PUSH2 0x006d
00000063: JUMPI
00000064: PUSH2 0x006b
00000067: PUSH2 0x011b
0000006a: JUMP
0000006b: JUMPDEST
0000006c: STOP
0000006d: JUMPDEST
0000006e: PUSH2 0x006b
00000071: PUSH2 0x011b
00000074: JUMP
00000075: JUMPDEST
00000076: CALLVALUE
00000077: DUP1
00000078: ISZERO
00000079: PUSH2 0x0081
0000007c: JUMPI
0000007d: PUSH1 0x00
0000007f: DUP1
00000080: REVERT
00000081: JUMPDEST
00000082: POP
00000083: PUSH2 0x006b
00000086: PUSH2 0x0090
00000089: CALLDATASIZE
0000008a: PUSH1 0x04
0000008c: PUSH2 0x08dd
0000008f: JUMP
00000090: JUMPDEST
00000091: PUSH2 0x0135
00000094: JUMP
00000095: JUMPDEST
00000096: PUSH2 0x006b
00000099: PUSH2 0x00a3
0000009c: CALLDATASIZE
0000009d: PUSH1 0x04
0000009f: PUSH2 0x08f8
000000a2: JUMP
000000a3: JUMPDEST
000000a4: PUSH2 0x0196
000000a7: JUMP
000000a8: JUMPDEST
000000a9: CALLVALUE
000000aa: DUP1
000000ab: ISZERO
000000ac: PUSH2 0x00b4
000000af: JUMPI
000000b0: PUSH1 0x00
000000b2: DUP1
000000b3: REVERT
000000b4: JUMPDEST
000000b5: POP
000000b6: PUSH2 0x00bd
000000b9: PUSH2 0x0221
000000bc: JUMP
000000bd: JUMPDEST
000000be: PUSH1 0x40
000000c0: MLOAD
000000c1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000d6: SWAP1
000000d7: SWAP2
000000d8: AND
000000d9: DUP2
000000da: MSTORE
000000db: PUSH1 0x20
000000dd: ADD
000000de: PUSH1 0x40
000000e0: MLOAD
000000e1: DUP1
000000e2: SWAP2
000000e3: SUB
000000e4: SWAP1
000000e5: RETURN
000000e6: JUMPDEST
000000e7: CALLVALUE
000000e8: DUP1
000000e9: ISZERO
000000ea: PUSH2 0x00f2
000000ed: JUMPI
000000ee: PUSH1 0x00
000000f0: DUP1
000000f1: REVERT
000000f2: JUMPDEST
000000f3: POP
000000f4: PUSH2 0x006b
000000f7: PUSH2 0x0101
000000fa: CALLDATASIZE
000000fb: PUSH1 0x04
000000fd: PUSH2 0x08dd
00000100: JUMP
00000101: JUMPDEST
00000102: PUSH2 0x0276
00000105: JUMP
00000106: JUMPDEST
00000107: CALLVALUE
00000108: DUP1
00000109: ISZERO
0000010a: PUSH2 0x0112
0000010d: JUMPI
0000010e: PUSH1 0x00
00000110: DUP1
00000111: REVERT
00000112: JUMPDEST
00000113: POP
00000114: PUSH2 0x00bd
00000117: PUSH2 0x02ba
0000011a: JUMP
0000011b: JUMPDEST
0000011c: PUSH2 0x0123
0000011f: PUSH2 0x0331
00000122: JUMP
00000123: JUMPDEST
00000124: PUSH2 0x0133
00000127: PUSH2 0x012e
0000012a: PUSH2 0x041f
0000012d: JUMP
0000012e: JUMPDEST
0000012f: PUSH2 0x0429
00000132: JUMP
00000133: JUMPDEST
00000134: JUMP
00000135: JUMPDEST
00000136: PUSH2 0x013d
00000139: PUSH2 0x044d
0000013c: JUMP
0000013d: JUMPDEST
0000013e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000153: AND
00000154: CALLER
00000155: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000016a: AND
0000016b: EQ
0000016c: ISZERO
0000016d: PUSH2 0x018e
00000170: JUMPI
00000171: PUSH2 0x018b
00000174: DUP2
00000175: PUSH1 0x40
00000177: MLOAD
00000178: DUP1
00000179: PUSH1 0x20
0000017b: ADD
0000017c: PUSH1 0x40
0000017e: MSTORE
0000017f: DUP1
00000180: PUSH1 0x00
00000182: DUP2
00000183: MSTORE
00000184: POP
00000185: PUSH1 0x00
00000187: PUSH2 0x048d
0000018a: JUMP
0000018b: JUMPDEST
0000018c: POP
0000018d: JUMP
0000018e: JUMPDEST
0000018f: PUSH2 0x018b
00000192: PUSH2 0x011b
00000195: JUMP
00000196: JUMPDEST
00000197: PUSH2 0x019e
0000019a: PUSH2 0x044d
0000019d: JUMP
0000019e: JUMPDEST
0000019f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001b4: AND
000001b5: CALLER
000001b6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001cb: AND
000001cc: EQ
000001cd: ISZERO
000001ce: PUSH2 0x0219
000001d1: JUMPI
000001d2: PUSH2 0x0214
000001d5: DUP4
000001d6: DUP4
000001d7: DUP4
000001d8: DUP1
000001d9: DUP1
000001da: PUSH1 0x1f
000001dc: ADD
000001dd: PUSH1 0x20
000001df: DUP1
000001e0: SWAP2
000001e1: DIV
000001e2: MUL
000001e3: PUSH1 0x20
000001e5: ADD
000001e6: PUSH1 0x40
000001e8: MLOAD
000001e9: SWAP1
000001ea: DUP2
000001eb: ADD
000001ec: PUSH1 0x40
000001ee: MSTORE
000001ef: DUP1
000001f0: SWAP4
000001f1: SWAP3
000001f2: SWAP2
000001f3: SWAP1
000001f4: DUP2
000001f5: DUP2
000001f6: MSTORE
000001f7: PUSH1 0x20
000001f9: ADD
000001fa: DUP4
000001fb: DUP4
000001fc: DUP1
000001fd: DUP3
000001fe: DUP5
000001ff: CALLDATACOPY
00000200: PUSH1 0x00
00000202: SWAP3
00000203: ADD
00000204: SWAP2
00000205: SWAP1
00000206: SWAP2
00000207: MSTORE
00000208: POP
00000209: PUSH1 0x01
0000020b: SWAP3
0000020c: POP
0000020d: PUSH2 0x048d
00000210: SWAP2
00000211: POP
00000212: POP
00000213: JUMP
00000214: JUMPDEST
00000215: POP
00000216: POP
00000217: POP
00000218: JUMP
00000219: JUMPDEST
0000021a: PUSH2 0x0214
0000021d: PUSH2 0x011b
00000220: JUMP
00000221: JUMPDEST
00000222: PUSH1 0x00
00000224: PUSH2 0x022b
00000227: PUSH2 0x044d
0000022a: JUMP
0000022b: JUMPDEST
0000022c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000241: AND
00000242: CALLER
00000243: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000258: AND
00000259: EQ
0000025a: ISZERO
0000025b: PUSH2 0x026b
0000025e: JUMPI
0000025f: PUSH2 0x0266
00000262: PUSH2 0x041f
00000265: JUMP
00000266: JUMPDEST
00000267: SWAP1
00000268: POP
00000269: SWAP1
0000026a: JUMP
0000026b: JUMPDEST
0000026c: PUSH2 0x0273
0000026f: PUSH2 0x011b
00000272: JUMP
00000273: JUMPDEST
00000274: SWAP1
00000275: JUMP
00000276: JUMPDEST
00000277: PUSH2 0x027e
0000027a: PUSH2 0x044d
0000027d: JUMP
0000027e: JUMPDEST
0000027f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000294: AND
00000295: CALLER
00000296: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002ab: AND
000002ac: EQ
000002ad: ISZERO
000002ae: PUSH2 0x018e
000002b1: JUMPI
000002b2: PUSH2 0x018b
000002b5: DUP2
000002b6: PUSH2 0x04b8
000002b9: JUMP
000002ba: JUMPDEST
000002bb: PUSH1 0x00
000002bd: PUSH2 0x02c4
000002c0: PUSH2 0x044d
000002c3: JUMP
000002c4: JUMPDEST
000002c5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002da: AND
000002db: CALLER
000002dc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002f1: AND
000002f2: EQ
000002f3: ISZERO
000002f4: PUSH2 0x026b
000002f7: JUMPI
000002f8: PUSH2 0x0266
000002fb: PUSH2 0x044d
000002fe: JUMP
000002ff: JUMPDEST
00000300: PUSH1 0x60
00000302: PUSH2 0x0324
00000305: DUP4
00000306: DUP4
00000307: PUSH1 0x40
00000309: MLOAD
0000030a: DUP1
0000030b: PUSH1 0x60
0000030d: ADD
0000030e: PUSH1 0x40
00000310: MSTORE
00000311: DUP1
00000312: PUSH1 0x27
00000314: DUP2
00000315: MSTORE
00000316: PUSH1 0x20
00000318: ADD
00000319: PUSH2 0x0a15
0000031c: PUSH1 0x27
0000031e: SWAP2
0000031f: CODECOPY
00000320: PUSH2 0x0519
00000323: JUMP
00000324: JUMPDEST
00000325: SWAP4
00000326: SWAP3
00000327: POP
00000328: POP
00000329: POP
0000032a: JUMP
0000032b: JUMPDEST
0000032c: EXTCODESIZE
0000032d: ISZERO
0000032e: ISZERO
0000032f: SWAP1
00000330: JUMP
00000331: JUMPDEST
00000332: PUSH2 0x0339
00000335: PUSH2 0x044d
00000338: JUMP
00000339: JUMPDEST
0000033a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000034f: AND
00000350: CALLER
00000351: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000366: AND
00000367: EQ
00000368: ISZERO
00000369: PUSH2 0x0133
0000036c: JUMPI
0000036d: PUSH1 0x40
0000036f: MLOAD
00000370: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000391: DUP2
00000392: MSTORE
00000393: PUSH1 0x20
00000395: PUSH1 0x04
00000397: DUP3
00000398: ADD
00000399: MSTORE
0000039a: PUSH1 0x42
0000039c: PUSH1 0x24
0000039e: DUP3
0000039f: ADD
000003a0: MSTORE
000003a1: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
000003c2: PUSH1 0x44
000003c4: DUP3
000003c5: ADD
000003c6: MSTORE
000003c7: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
000003e8: PUSH1 0x64
000003ea: DUP3
000003eb: ADD
000003ec: MSTORE
000003ed: PUSH32 0x6574000000000000000000000000000000000000000000000000000000000000
0000040e: PUSH1 0x84
00000410: DUP3
00000411: ADD
00000412: MSTORE
00000413: PUSH1 0xa4
00000415: ADD
00000416: JUMPDEST
00000417: PUSH1 0x40
00000419: MLOAD
0000041a: DUP1
0000041b: SWAP2
0000041c: SUB
0000041d: SWAP1
0000041e: REVERT
0000041f: JUMPDEST
00000420: PUSH1 0x00
00000422: PUSH2 0x0266
00000425: PUSH2 0x062b
00000428: JUMP
00000429: JUMPDEST
0000042a: CALLDATASIZE
0000042b: PUSH1 0x00
0000042d: DUP1
0000042e: CALLDATACOPY
0000042f: PUSH1 0x00
00000431: DUP1
00000432: CALLDATASIZE
00000433: PUSH1 0x00
00000435: DUP5
00000436: GAS
00000437: DELEGATECALL
00000438: RETURNDATASIZE
00000439: PUSH1 0x00
0000043b: DUP1
0000043c: RETURNDATACOPY
0000043d: DUP1
0000043e: DUP1
0000043f: ISZERO
00000440: PUSH2 0x0448
00000443: JUMPI
00000444: RETURNDATASIZE
00000445: PUSH1 0x00
00000447: RETURN
00000448: JUMPDEST
00000449: RETURNDATASIZE
0000044a: PUSH1 0x00
0000044c: REVERT
0000044d: JUMPDEST
0000044e: PUSH1 0x00
00000450: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000471: JUMPDEST
00000472: SLOAD
00000473: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000488: AND
00000489: SWAP2
0000048a: SWAP1
0000048b: POP
0000048c: JUMP
0000048d: JUMPDEST
0000048e: PUSH2 0x0496
00000491: DUP4
00000492: PUSH2 0x0653
00000495: JUMP
00000496: JUMPDEST
00000497: PUSH1 0x00
00000499: DUP3
0000049a: MLOAD
0000049b: GT
0000049c: DUP1
0000049d: PUSH2 0x04a3
000004a0: JUMPI
000004a1: POP
000004a2: DUP1
000004a3: JUMPDEST
000004a4: ISZERO
000004a5: PUSH2 0x0214
000004a8: JUMPI
000004a9: PUSH2 0x04b2
000004ac: DUP4
000004ad: DUP4
000004ae: PUSH2 0x02ff
000004b1: JUMP
000004b2: JUMPDEST
000004b3: POP
000004b4: POP
000004b5: POP
000004b6: POP
000004b7: JUMP
000004b8: JUMPDEST
000004b9: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
000004da: PUSH2 0x04e1
000004dd: PUSH2 0x044d
000004e0: JUMP
000004e1: JUMPDEST
000004e2: PUSH1 0x40
000004e4: DUP1
000004e5: MLOAD
000004e6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004fb: SWAP3
000004fc: DUP4
000004fd: AND
000004fe: DUP2
000004ff: MSTORE
00000500: SWAP2
00000501: DUP5
00000502: AND
00000503: PUSH1 0x20
00000505: DUP4
00000506: ADD
00000507: MSTORE
00000508: ADD
00000509: PUSH1 0x40
0000050b: MLOAD
0000050c: DUP1
0000050d: SWAP2
0000050e: SUB
0000050f: SWAP1
00000510: LOG1
00000511: PUSH2 0x018b
00000514: DUP2
00000515: PUSH2 0x06a0
00000518: JUMP
00000519: JUMPDEST
0000051a: PUSH1 0x60
0000051c: DUP4
0000051d: EXTCODESIZE
0000051e: PUSH2 0x05a9
00000521: JUMPI
00000522: PUSH1 0x40
00000524: MLOAD
00000525: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000546: DUP2
00000547: MSTORE
00000548: PUSH1 0x20
0000054a: PUSH1 0x04
0000054c: DUP3
0000054d: ADD
0000054e: MSTORE
0000054f: PUSH1 0x26
00000551: PUSH1 0x24
00000553: DUP3
00000554: ADD
00000555: MSTORE
00000556: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f
00000577: PUSH1 0x44
00000579: DUP3
0000057a: ADD
0000057b: MSTORE
0000057c: PUSH32 0x6e74726163740000000000000000000000000000000000000000000000000000
0000059d: PUSH1 0x64
0000059f: DUP3
000005a0: ADD
000005a1: MSTORE
000005a2: PUSH1 0x84
000005a4: ADD
000005a5: PUSH2 0x0416
000005a8: JUMP
000005a9: JUMPDEST
000005aa: PUSH1 0x00
000005ac: DUP1
000005ad: DUP6
000005ae: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005c3: AND
000005c4: DUP6
000005c5: PUSH1 0x40
000005c7: MLOAD
000005c8: PUSH2 0x05d1
000005cb: SWAP2
000005cc: SWAP1
000005cd: PUSH2 0x097b
000005d0: JUMP
000005d1: JUMPDEST
000005d2: PUSH1 0x00
000005d4: PUSH1 0x40
000005d6: MLOAD
000005d7: DUP1
000005d8: DUP4
000005d9: SUB
000005da: DUP2
000005db: DUP6
000005dc: GAS
000005dd: DELEGATECALL
000005de: SWAP2
000005df: POP
000005e0: POP
000005e1: RETURNDATASIZE
000005e2: DUP1
000005e3: PUSH1 0x00
000005e5: DUP2
000005e6: EQ
000005e7: PUSH2 0x060c
000005ea: JUMPI
000005eb: PUSH1 0x40
000005ed: MLOAD
000005ee: SWAP2
000005ef: POP
000005f0: PUSH1 0x1f
000005f2: NOT
000005f3: PUSH1 0x3f
000005f5: RETURNDATASIZE
000005f6: ADD
000005f7: AND
000005f8: DUP3
000005f9: ADD
000005fa: PUSH1 0x40
000005fc: MSTORE
000005fd: RETURNDATASIZE
000005fe: DUP3
000005ff: MSTORE
00000600: RETURNDATASIZE
00000601: PUSH1 0x00
00000603: PUSH1 0x20
00000605: DUP5
00000606: ADD
00000607: RETURNDATACOPY
00000608: PUSH2 0x0611
0000060b: JUMP
0000060c: JUMPDEST
0000060d: PUSH1 0x60
0000060f: SWAP2
00000610: POP
00000611: JUMPDEST
00000612: POP
00000613: SWAP2
00000614: POP
00000615: SWAP2
00000616: POP
00000617: PUSH2 0x0621
0000061a: DUP3
0000061b: DUP3
0000061c: DUP7
0000061d: PUSH2 0x07ac
00000620: JUMP
00000621: JUMPDEST
00000622: SWAP7
00000623: SWAP6
00000624: POP
00000625: POP
00000626: POP
00000627: POP
00000628: POP
00000629: POP
0000062a: JUMP
0000062b: JUMPDEST
0000062c: PUSH1 0x00
0000062e: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000064f: PUSH2 0x0471
00000652: JUMP
00000653: JUMPDEST
00000654: PUSH2 0x065c
00000657: DUP2
00000658: PUSH2 0x07ff
0000065b: JUMP
0000065c: JUMPDEST
0000065d: PUSH1 0x40
0000065f: MLOAD
00000660: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000675: DUP3
00000676: AND
00000677: SWAP1
00000678: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
00000699: SWAP1
0000069a: PUSH1 0x00
0000069c: SWAP1
0000069d: LOG2
0000069e: POP
0000069f: JUMP
000006a0: JUMPDEST
000006a1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006b6: DUP2
000006b7: AND
000006b8: PUSH2 0x0743
000006bb: JUMPI
000006bc: PUSH1 0x40
000006be: MLOAD
000006bf: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000006e0: DUP2
000006e1: MSTORE
000006e2: PUSH1 0x20
000006e4: PUSH1 0x04
000006e6: DUP3
000006e7: ADD
000006e8: MSTORE
000006e9: PUSH1 0x26
000006eb: PUSH1 0x24
000006ed: DUP3
000006ee: ADD
000006ef: MSTORE
000006f0: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
00000711: PUSH1 0x44
00000713: DUP3
00000714: ADD
00000715: MSTORE
00000716: PUSH32 0x6464726573730000000000000000000000000000000000000000000000000000
00000737: PUSH1 0x64
00000739: DUP3
0000073a: ADD
0000073b: MSTORE
0000073c: PUSH1 0x84
0000073e: ADD
0000073f: PUSH2 0x0416
00000742: JUMP
00000743: JUMPDEST
00000744: DUP1
00000745: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000766: JUMPDEST
00000767: DUP1
00000768: SLOAD
00000769: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000
0000078a: AND
0000078b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007a0: SWAP3
000007a1: SWAP1
000007a2: SWAP3
000007a3: AND
000007a4: SWAP2
000007a5: SWAP1
000007a6: SWAP2
000007a7: OR
000007a8: SWAP1
000007a9: SSTORE
000007aa: POP
000007ab: JUMP
000007ac: JUMPDEST
000007ad: PUSH1 0x60
000007af: DUP4
000007b0: ISZERO
000007b1: PUSH2 0x07bb
000007b4: JUMPI
000007b5: POP
000007b6: DUP2
000007b7: PUSH2 0x0324
000007ba: JUMP
000007bb: JUMPDEST
000007bc: DUP3
000007bd: MLOAD
000007be: ISZERO
000007bf: PUSH2 0x07cb
000007c2: JUMPI
000007c3: DUP3
000007c4: MLOAD
000007c5: DUP1
000007c6: DUP5
000007c7: PUSH1 0x20
000007c9: ADD
000007ca: REVERT
000007cb: JUMPDEST
000007cc: DUP2
000007cd: PUSH1 0x40
000007cf: MLOAD
000007d0: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000007f1: DUP2
000007f2: MSTORE
000007f3: PUSH1 0x04
000007f5: ADD
000007f6: PUSH2 0x0416
000007f9: SWAP2
000007fa: SWAP1
000007fb: PUSH2 0x0997
000007fe: JUMP
000007ff: JUMPDEST
00000800: DUP1
00000801: EXTCODESIZE
00000802: PUSH2 0x088d
00000805: JUMPI
00000806: PUSH1 0x40
00000808: MLOAD
00000809: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000082a: DUP2
0000082b: MSTORE
0000082c: PUSH1 0x20
0000082e: PUSH1 0x04
00000830: DUP3
00000831: ADD
00000832: MSTORE
00000833: PUSH1 0x2d
00000835: PUSH1 0x24
00000837: DUP3
00000838: ADD
00000839: MSTORE
0000083a: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
0000085b: PUSH1 0x44
0000085d: DUP3
0000085e: ADD
0000085f: MSTORE
00000860: PUSH32 0x6f74206120636f6e747261637400000000000000000000000000000000000000
00000881: PUSH1 0x64
00000883: DUP3
00000884: ADD
00000885: MSTORE
00000886: PUSH1 0x84
00000888: ADD
00000889: PUSH2 0x0416
0000088c: JUMP
0000088d: JUMPDEST
0000088e: DUP1
0000088f: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000008b0: PUSH2 0x0766
000008b3: JUMP
000008b4: JUMPDEST
000008b5: DUP1
000008b6: CALLDATALOAD
000008b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008cc: DUP2
000008cd: AND
000008ce: DUP2
000008cf: EQ
000008d0: PUSH2 0x08d8
000008d3: JUMPI
000008d4: PUSH1 0x00
000008d6: DUP1
000008d7: REVERT
000008d8: JUMPDEST
000008d9: SWAP2
000008da: SWAP1
000008db: POP
000008dc: JUMP
000008dd: JUMPDEST
000008de: PUSH1 0x00
000008e0: PUSH1 0x20
000008e2: DUP3
000008e3: DUP5
000008e4: SUB
000008e5: SLT
000008e6: ISZERO
000008e7: PUSH2 0x08ef
000008ea: JUMPI
000008eb: PUSH1 0x00
000008ed: DUP1
000008ee: REVERT
000008ef: JUMPDEST
000008f0: PUSH2 0x0324
000008f3: DUP3
000008f4: PUSH2 0x08b4
000008f7: JUMP
000008f8: JUMPDEST
000008f9: PUSH1 0x00
000008fb: DUP1
000008fc: PUSH1 0x00
000008fe: PUSH1 0x40
00000900: DUP5
00000901: DUP7
00000902: SUB
00000903: SLT
00000904: ISZERO
00000905: PUSH2 0x090d
00000908: JUMPI
00000909: PUSH1 0x00
0000090b: DUP1
0000090c: REVERT
0000090d: JUMPDEST
0000090e: PUSH2 0x0916
00000911: DUP5
00000912: PUSH2 0x08b4
00000915: JUMP
00000916: JUMPDEST
00000917: SWAP3
00000918: POP
00000919: PUSH1 0x20
0000091b: DUP5
0000091c: ADD
0000091d: CALLDATALOAD
0000091e: PUSH8 0xffffffffffffffff
00000927: DUP1
00000928: DUP3
00000929: GT
0000092a: ISZERO
0000092b: PUSH2 0x0933
0000092e: JUMPI
0000092f: PUSH1 0x00
00000931: DUP1
00000932: REVERT
00000933: JUMPDEST
00000934: DUP2
00000935: DUP7
00000936: ADD
00000937: SWAP2
00000938: POP
00000939: DUP7
0000093a: PUSH1 0x1f
0000093c: DUP4
0000093d: ADD
0000093e: SLT
0000093f: PUSH2 0x0947
00000942: JUMPI
00000943: PUSH1 0x00
00000945: DUP1
00000946: REVERT
00000947: JUMPDEST
00000948: DUP2
00000949: CALLDATALOAD
0000094a: DUP2
0000094b: DUP2
0000094c: GT
0000094d: ISZERO
0000094e: PUSH2 0x0956
00000951: JUMPI
00000952: PUSH1 0x00
00000954: DUP1
00000955: REVERT
00000956: JUMPDEST
00000957: DUP8
00000958: PUSH1 0x20
0000095a: DUP3
0000095b: DUP6
0000095c: ADD
0000095d: ADD
0000095e: GT
0000095f: ISZERO
00000960: PUSH2 0x0968
00000963: JUMPI
00000964: PUSH1 0x00
00000966: DUP1
00000967: REVERT
00000968: JUMPDEST
00000969: PUSH1 0x20
0000096b: DUP4
0000096c: ADD
0000096d: SWAP5
0000096e: POP
0000096f: DUP1
00000970: SWAP4
00000971: POP
00000972: POP
00000973: POP
00000974: POP
00000975: SWAP3
00000976: POP
00000977: SWAP3
00000978: POP
00000979: SWAP3
0000097a: JUMP
0000097b: JUMPDEST
0000097c: PUSH1 0x00
0000097e: DUP3
0000097f: MLOAD
00000980: PUSH2 0x098d
00000983: DUP2
00000984: DUP5
00000985: PUSH1 0x20
00000987: DUP8
00000988: ADD
00000989: PUSH2 0x09e8
0000098c: JUMP
0000098d: JUMPDEST
0000098e: SWAP2
0000098f: SWAP1
00000990: SWAP2
00000991: ADD
00000992: SWAP3
00000993: SWAP2
00000994: POP
00000995: POP
00000996: JUMP
00000997: JUMPDEST
00000998: PUSH1 0x20
0000099a: DUP2
0000099b: MSTORE
0000099c: PUSH1 0x00
0000099e: DUP3
0000099f: MLOAD
000009a0: DUP1
000009a1: PUSH1 0x20
000009a3: DUP5
000009a4: ADD
000009a5: MSTORE
000009a6: PUSH2 0x09b6
000009a9: DUP2
000009aa: PUSH1 0x40
000009ac: DUP6
000009ad: ADD
000009ae: PUSH1 0x20
000009b0: DUP8
000009b1: ADD
000009b2: PUSH2 0x09e8
000009b5: JUMP
000009b6: JUMPDEST
000009b7: PUSH1 0x1f
000009b9: ADD
000009ba: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
000009db: AND
000009dc: SWAP2
000009dd: SWAP1
000009de: SWAP2
000009df: ADD
000009e0: PUSH1 0x40
000009e2: ADD
000009e3: SWAP3
000009e4: SWAP2
000009e5: POP
000009e6: POP
000009e7: JUMP
000009e8: JUMPDEST
000009e9: PUSH1 0x00
000009eb: JUMPDEST
000009ec: DUP4
000009ed: DUP2
000009ee: LT
000009ef: ISZERO
000009f0: PUSH2 0x0a03
000009f3: JUMPI
000009f4: DUP2
000009f5: DUP2
000009f6: ADD
000009f7: MLOAD
000009f8: DUP4
000009f9: DUP3
000009fa: ADD
000009fb: MSTORE
000009fc: PUSH1 0x20
000009fe: ADD
000009ff: PUSH2 0x09eb
00000a02: JUMP
00000a03: JUMPDEST
00000a04: DUP4
00000a05: DUP2
00000a06: GT
00000a07: ISZERO
00000a08: PUSH2 0x04b2
00000a0b: JUMPI
00000a0c: POP
00000a0d: POP
00000a0e: PUSH1 0x00
00000a10: SWAP2
00000a11: ADD
00000a12: MSTORE
00000a13: JUMP
00000a14: INVALID
00000a15: COINBASE
00000a16: PUSH5 0x6472657373
00000a1c: GASPRICE
00000a1d: KECCAK256
00000a1e: PUSH13 0x6f772d6c6576656c2064656c65
00000a2c: PUSH8 0x6174652063616c6c
00000a35: KECCAK256
00000a36: PUSH7 0x61696c6564a264
00000a3e: PUSH10 0x70667358221220b4e62e
00000a49: PUSH27 0x4d416e523ee9db2c554cd3bbf6fb7f375b8277ade11464c4a13a41
00000a65: PUSH30

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0x32e2763e3a02a4c316c05aa35cf4f83c73225deba61258f50b256e56e43c77c4
call_targets: 0x6a55dca17c2fda6d6ac91b603a58f41bfc07fdca
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x32e2763e3a02a4c316c05aa35cf4f83c73225deba61258f50b256e56e43c77c4",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x6a55dca17c2fda6d6ac91b603a58f41bfc07fdca"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1079,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1501,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 340,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 437,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 578,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 661,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 731,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 848,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}