TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-c646-7225-9d22-7daf816fda8d

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
25745 artifact.fetch complete 1 / 3 3 months ago
25746 tool.cast_disasm complete 1 / 3 3 months ago
69094 analysis.bundle complete 1 / 3 1 week ago
69095 capability.graph complete 1 / 3 1 week ago
69096 detector.run complete 1 / 3 1 week ago
69097 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
0
Total opcodes
992
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0148
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x7ecebe00
00000019: GT
0000001a: PUSH2 0x00c0
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0xcfd7b0df
00000024: GT
00000025: PUSH2 0x0074
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0xdd62ed3e
0000002f: GT
00000030: PUSH2 0x0059
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xdd62ed3e
0000003a: EQ
0000003b: PUSH2 0x040d
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xe3b2594f
00000045: EQ
00000046: PUSH2 0x0445
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0xf72655ef
00000050: EQ
00000051: PUSH2 0x045b
00000054: JUMPI
00000055: PUSH2 0x014f
00000058: JUMP
00000059: JUMPDEST
0000005a: DUP1
0000005b: PUSH4 0xcfd7b0df
00000060: EQ
00000061: PUSH2 0x03b3
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0xd7dfa0dd
0000006b: EQ
0000006c: PUSH2 0x03e0
0000006f: JUMPI
00000070: PUSH2 0x014f
00000073: JUMP
00000074: JUMPDEST
00000075: DUP1
00000076: PUSH4 0x95d89b41
0000007b: GT
0000007c: PUSH2 0x00a5
0000007f: JUMPI
00000080: DUP1
00000081: PUSH4 0x95d89b41
00000086: EQ
00000087: PUSH2 0x035b
0000008a: JUMPI
0000008b: DUP1
0000008c: PUSH4 0xa001ecdd
00000091: EQ
00000092: PUSH2 0x0370
00000095: JUMPI
00000096: DUP1
00000097: PUSH4 0xb8ddbcb3
0000009c: EQ
0000009d: PUSH2 0x0386
000000a0: JUMPI
000000a1: PUSH2 0x014f
000000a4: JUMP
000000a5: JUMPDEST
000000a6: DUP1
000000a7: PUSH4 0x7ecebe00
000000ac: EQ
000000ad: PUSH2 0x0318
000000b0: JUMPI
000000b1: DUP1
000000b2: PUSH4 0x8dc06c7f
000000b7: EQ
000000b8: PUSH2 0x0345
000000bb: JUMPI
000000bc: PUSH2 0x014f
000000bf: JUMP
000000c0: JUMPDEST
000000c1: DUP1
000000c2: PUSH4 0x200d2ed2
000000c7: GT
000000c8: PUSH2 0x0117
000000cb: JUMPI
000000cc: DUP1
000000cd: PUSH4 0x570ca735
000000d2: GT
000000d3: PUSH2 0x00fc
000000d6: JUMPI
000000d7: DUP1
000000d8: PUSH4 0x570ca735
000000dd: EQ
000000de: PUSH2 0x02a8
000000e1: JUMPI
000000e2: DUP1
000000e3: PUSH4 0x70a08231
000000e8: EQ
000000e9: PUSH2 0x02d5
000000ec: JUMPI
000000ed: DUP1
000000ee: PUSH4 0x7b4044a0
000000f3: EQ
000000f4: PUSH2 0x0302
000000f7: JUMPI
000000f8: PUSH2 0x014f
000000fb: JUMP
000000fc: JUMPDEST
000000fd: DUP1
000000fe: PUSH4 0x200d2ed2
00000103: EQ
00000104: PUSH2 0x025a
00000107: JUMPI
00000108: DUP1
00000109: PUSH4 0x313ce567
0000010e: EQ
0000010f: PUSH2 0x0281
00000112: JUMPI
00000113: PUSH2 0x014f
00000116: JUMP
00000117: JUMPDEST
00000118: DUP1
00000119: PUSH4 0x06fdde03
0000011e: EQ
0000011f: PUSH2 0x0190
00000122: JUMPI
00000123: DUP1
00000124: PUSH4 0x18160ddd
00000129: EQ
0000012a: PUSH2 0x01bb
0000012d: JUMPI
0000012e: DUP1
0000012f: PUSH4 0x18a855c7
00000134: EQ
00000135: PUSH2 0x01df
00000138: JUMPI
00000139: DUP1
0000013a: PUSH4 0x1bb534ba
0000013f: EQ
00000140: PUSH2 0x0208
00000143: JUMPI
00000144: PUSH2 0x014f
00000147: JUMP
00000148: JUMPDEST
00000149: CALLDATASIZE
0000014a: PUSH2 0x014f
0000014d: JUMPI
0000014e: STOP
0000014f: JUMPDEST
00000150: PUSH1 0x10
00000152: SLOAD
00000153: PUSH1 0x40
00000155: MLOAD
00000156: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000016b: SWAP1
0000016c: SWAP2
0000016d: AND
0000016e: SWAP1
0000016f: CALLDATASIZE
00000170: PUSH1 0x00
00000172: DUP3
00000173: CALLDATACOPY
00000174: PUSH1 0x00
00000176: DUP1
00000177: CALLDATASIZE
00000178: DUP4
00000179: DUP6
0000017a: GAS
0000017b: DELEGATECALL
0000017c: RETURNDATASIZE
0000017d: DUP1
0000017e: PUSH1 0x00
00000180: DUP5
00000181: RETURNDATACOPY
00000182: DUP2
00000183: DUP1
00000184: ISZERO
00000185: PUSH2 0x018c
00000188: JUMPI
00000189: DUP2
0000018a: DUP5
0000018b: RETURN
0000018c: JUMPDEST
0000018d: DUP2
0000018e: DUP5
0000018f: REVERT
00000190: JUMPDEST
00000191: CALLVALUE
00000192: DUP1
00000193: ISZERO
00000194: PUSH2 0x019c
00000197: JUMPI
00000198: PUSH1 0x00
0000019a: DUP1
0000019b: REVERT
0000019c: JUMPDEST
0000019d: POP
0000019e: PUSH2 0x01a5
000001a1: PUSH2 0x0471
000001a4: JUMP
000001a5: JUMPDEST
000001a6: PUSH1 0x40
000001a8: MLOAD
000001a9: PUSH2 0x01b2
000001ac: SWAP2
000001ad: SWAP1
000001ae: PUSH2 0x05cb
000001b1: JUMP
000001b2: JUMPDEST
000001b3: PUSH1 0x40
000001b5: MLOAD
000001b6: DUP1
000001b7: SWAP2
000001b8: SUB
000001b9: SWAP1
000001ba: RETURN
000001bb: JUMPDEST
000001bc: CALLVALUE
000001bd: DUP1
000001be: ISZERO
000001bf: PUSH2 0x01c7
000001c2: JUMPI
000001c3: PUSH1 0x00
000001c5: DUP1
000001c6: REVERT
000001c7: JUMPDEST
000001c8: POP
000001c9: PUSH2 0x01d1
000001cc: PUSH1 0x0c
000001ce: SLOAD
000001cf: DUP2
000001d0: JUMP
000001d1: JUMPDEST
000001d2: PUSH1 0x40
000001d4: MLOAD
000001d5: SWAP1
000001d6: DUP2
000001d7: MSTORE
000001d8: PUSH1 0x20
000001da: ADD
000001db: PUSH2 0x01b2
000001de: JUMP
000001df: JUMPDEST
000001e0: CALLVALUE
000001e1: DUP1
000001e2: ISZERO
000001e3: PUSH2 0x01eb
000001e6: JUMPI
000001e7: PUSH1 0x00
000001e9: DUP1
000001ea: REVERT
000001eb: JUMPDEST
000001ec: POP
000001ed: PUSH2 0x01f5
000001f0: PUSH2 0x0384
000001f3: DUP2
000001f4: JUMP
000001f5: JUMPDEST
000001f6: PUSH1 0x40
000001f8: MLOAD
000001f9: PUSH2 0xffff
000001fc: SWAP1
000001fd: SWAP2
000001fe: AND
000001ff: DUP2
00000200: MSTORE
00000201: PUSH1 0x20
00000203: ADD
00000204: PUSH2 0x01b2
00000207: JUMP
00000208: JUMPDEST
00000209: CALLVALUE
0000020a: DUP1
0000020b: ISZERO
0000020c: PUSH2 0x0214
0000020f: JUMPI
00000210: PUSH1 0x00
00000212: DUP1
00000213: REVERT
00000214: JUMPDEST
00000215: POP
00000216: PUSH1 0x01
00000218: SLOAD
00000219: PUSH2 0x0235
0000021c: SWAP1
0000021d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000232: AND
00000233: DUP2
00000234: JUMP
00000235: JUMPDEST
00000236: PUSH1 0x40
00000238: MLOAD
00000239: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000024e: SWAP1
0000024f: SWAP2
00000250: AND
00000251: DUP2
00000252: MSTORE
00000253: PUSH1 0x20
00000255: ADD
00000256: PUSH2 0x01b2
00000259: JUMP
0000025a: JUMPDEST
0000025b: CALLVALUE
0000025c: DUP1
0000025d: ISZERO
0000025e: PUSH2 0x0266
00000261: JUMPI
00000262: PUSH1 0x00
00000264: DUP1
00000265: REVERT
00000266: JUMPDEST
00000267: POP
00000268: PUSH1 0x08
0000026a: SLOAD
0000026b: PUSH2 0x0274
0000026e: SWAP1
0000026f: PUSH1 0xff
00000271: AND
00000272: DUP2
00000273: JUMP
00000274: JUMPDEST
00000275: PUSH1 0x40
00000277: MLOAD
00000278: PUSH2 0x01b2
0000027b: SWAP2
0000027c: SWAP1
0000027d: PUSH2 0x058a
00000280: JUMP
00000281: JUMPDEST
00000282: CALLVALUE
00000283: DUP1
00000284: ISZERO
00000285: PUSH2 0x028d
00000288: JUMPI
00000289: PUSH1 0x00
0000028b: DUP1
0000028c: REVERT
0000028d: JUMPDEST
0000028e: POP
0000028f: PUSH2 0x0296
00000292: PUSH1 0x12
00000294: DUP2
00000295: JUMP
00000296: JUMPDEST
00000297: PUSH1 0x40
00000299: MLOAD
0000029a: PUSH1 0xff
0000029c: SWAP1
0000029d: SWAP2
0000029e: AND
0000029f: DUP2
000002a0: MSTORE
000002a1: PUSH1 0x20
000002a3: ADD
000002a4: PUSH2 0x01b2
000002a7: JUMP
000002a8: JUMPDEST
000002a9: CALLVALUE
000002aa: DUP1
000002ab: ISZERO
000002ac: PUSH2 0x02b4
000002af: JUMPI
000002b0: PUSH1 0x00
000002b2: DUP1
000002b3: REVERT
000002b4: JUMPDEST
000002b5: POP
000002b6: PUSH1 0x00
000002b8: SLOAD
000002b9: PUSH2 0x0235
000002bc: SWAP1
000002bd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002d2: AND
000002d3: DUP2
000002d4: JUMP
000002d5: JUMPDEST
000002d6: CALLVALUE
000002d7: DUP1
000002d8: ISZERO
000002d9: PUSH2 0x02e1
000002dc: JUMPI
000002dd: PUSH1 0x00
000002df: DUP1
000002e0: REVERT
000002e1: JUMPDEST
000002e2: POP
000002e3: PUSH2 0x01d1
000002e6: PUSH2 0x02f0
000002e9: CALLDATASIZE
000002ea: PUSH1 0x04
000002ec: PUSH2 0x0535
000002ef: JUMP
000002f0: JUMPDEST
000002f1: PUSH1 0x0d
000002f3: PUSH1 0x20
000002f5: MSTORE
000002f6: PUSH1 0x00
000002f8: SWAP1
000002f9: DUP2
000002fa: MSTORE
000002fb: PUSH1 0x40
000002fd: SWAP1
000002fe: KECCAK256
000002ff: SLOAD
00000300: DUP2
00000301: JUMP
00000302: JUMPDEST
00000303: CALLVALUE
00000304: DUP1
00000305: ISZERO
00000306: PUSH2 0x030e
00000309: JUMPI
0000030a: PUSH1 0x00
0000030c: DUP1
0000030d: REVERT
0000030e: JUMPDEST
0000030f: POP
00000310: PUSH2 0x01d1
00000313: PUSH1 0x05
00000315: SLOAD
00000316: DUP2
00000317: JUMP
00000318: JUMPDEST
00000319: CALLVALUE
0000031a: DUP1
0000031b: ISZERO
0000031c: PUSH2 0x0324
0000031f: JUMPI
00000320: PUSH1 0x00
00000322: DUP1
00000323: REVERT
00000324: JUMPDEST
00000325: POP
00000326: PUSH2 0x01d1
00000329: PUSH2 0x0333
0000032c: CALLDATASIZE
0000032d: PUSH1 0x04
0000032f: PUSH2 0x0535
00000332: JUMP
00000333: JUMPDEST
00000334: PUSH1 0x0f
00000336: PUSH1 0x20
00000338: MSTORE
00000339: PUSH1 0x00
0000033b: SWAP1
0000033c: DUP2
0000033d: MSTORE
0000033e: PUSH1 0x40
00000340: SWAP1
00000341: KECCAK256
00000342: SLOAD
00000343: DUP2
00000344: JUMP
00000345: JUMPDEST
00000346: CALLVALUE
00000347: DUP1
00000348: ISZERO
00000349: PUSH2 0x0351
0000034c: JUMPI
0000034d: PUSH1 0x00
0000034f: DUP1
00000350: REVERT
00000351: JUMPDEST
00000352: POP
00000353: PUSH2 0x01d1
00000356: PUSH1 0x0b
00000358: SLOAD
00000359: DUP2
0000035a: JUMP
0000035b: JUMPDEST
0000035c: CALLVALUE
0000035d: DUP1
0000035e: ISZERO
0000035f: PUSH2 0x0367
00000362: JUMPI
00000363: PUSH1 0x00
00000365: DUP1
00000366: REVERT
00000367: JUMPDEST
00000368: POP
00000369: PUSH2 0x01a5
0000036c: PUSH2 0x04ff
0000036f: JUMP
00000370: JUMPDEST
00000371: CALLVALUE
00000372: DUP1
00000373: ISZERO
00000374: PUSH2 0x037c
00000377: JUMPI
00000378: PUSH1 0x00
0000037a: DUP1
0000037b: REVERT
0000037c: JUMPDEST
0000037d: POP
0000037e: PUSH2 0x01d1
00000381: PUSH1 0x04
00000383: SLOAD
00000384: DUP2
00000385: JUMP
00000386: JUMPDEST
00000387: CALLVALUE
00000388: DUP1
00000389: ISZERO
0000038a: PUSH2 0x0392
0000038d: JUMPI
0000038e: PUSH1 0x00
00000390: DUP1
00000391: REVERT
00000392: JUMPDEST
00000393: POP
00000394: PUSH1 0x11
00000396: SLOAD
00000397: PUSH2 0x0235
0000039a: SWAP1
0000039b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003b0: AND
000003b1: DUP2
000003b2: JUMP
000003b3: JUMPDEST
000003b4: CALLVALUE
000003b5: DUP1
000003b6: ISZERO
000003b7: PUSH2 0x03bf
000003ba: JUMPI
000003bb: PUSH1 0x00
000003bd: DUP1
000003be: REVERT
000003bf: JUMPDEST
000003c0: POP
000003c1: PUSH1 0x02
000003c3: SLOAD
000003c4: PUSH2 0x0235
000003c7: SWAP1
000003c8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003dd: AND
000003de: DUP2
000003df: JUMP
000003e0: JUMPDEST
000003e1: CALLVALUE
000003e2: DUP1
000003e3: ISZERO
000003e4: PUSH2 0x03ec
000003e7: JUMPI
000003e8: PUSH1 0x00
000003ea: DUP1
000003eb: REVERT
000003ec: JUMPDEST
000003ed: POP
000003ee: PUSH1 0x10
000003f0: SLOAD
000003f1: PUSH2 0x0235
000003f4: SWAP1
000003f5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000040a: AND
0000040b: DUP2
0000040c: JUMP
0000040d: JUMPDEST
0000040e: CALLVALUE
0000040f: DUP1
00000410: ISZERO
00000411: PUSH2 0x0419
00000414: JUMPI
00000415: PUSH1 0x00
00000417: DUP1
00000418: REVERT
00000419: JUMPDEST
0000041a: POP
0000041b: PUSH2 0x01d1
0000041e: PUSH2 0x0428
00000421: CALLDATASIZE
00000422: PUSH1 0x04
00000424: PUSH2 0x0557
00000427: JUMP
00000428: JUMPDEST
00000429: PUSH1 0x0e
0000042b: PUSH1 0x20
0000042d: SWAP1
0000042e: DUP2
0000042f: MSTORE
00000430: PUSH1 0x00
00000432: SWAP3
00000433: DUP4
00000434: MSTORE
00000435: PUSH1 0x40
00000437: DUP1
00000438: DUP5
00000439: KECCAK256
0000043a: SWAP1
0000043b: SWAP2
0000043c: MSTORE
0000043d: SWAP1
0000043e: DUP3
0000043f: MSTORE
00000440: SWAP1
00000441: KECCAK256
00000442: SLOAD
00000443: DUP2
00000444: JUMP
00000445: JUMPDEST
00000446: CALLVALUE
00000447: DUP1
00000448: ISZERO
00000449: PUSH2 0x0451
0000044c: JUMPI
0000044d: PUSH1 0x00
0000044f: DUP1
00000450: REVERT
00000451: JUMPDEST
00000452: POP
00000453: PUSH2 0x01d1
00000456: PUSH1 0x03
00000458: SLOAD
00000459: DUP2
0000045a: JUMP
0000045b: JUMPDEST
0000045c: CALLVALUE
0000045d: DUP1
0000045e: ISZERO
0000045f: PUSH2 0x0467
00000462: JUMPI
00000463: PUSH1 0x00
00000465: DUP1
00000466: REVERT
00000467: JUMPDEST
00000468: POP
00000469: PUSH2 0x01d1
0000046c: PUSH1 0x0a
0000046e: SLOAD
0000046f: DUP2
00000470: JUMP
00000471: JUMPDEST
00000472: PUSH1 0x07
00000474: DUP1
00000475: SLOAD
00000476: PUSH2 0x047e
00000479: SWAP1
0000047a: PUSH2 0x063e
0000047d: JUMP
0000047e: JUMPDEST
0000047f: DUP1
00000480: PUSH1 0x1f
00000482: ADD
00000483: PUSH1 0x20
00000485: DUP1
00000486: SWAP2
00000487: DIV
00000488: MUL
00000489: PUSH1 0x20
0000048b: ADD
0000048c: PUSH1 0x40
0000048e: MLOAD
0000048f: SWAP1
00000490: DUP2
00000491: ADD
00000492: PUSH1 0x40
00000494: MSTORE
00000495: DUP1
00000496: SWAP3
00000497: SWAP2
00000498: SWAP1
00000499: DUP2
0000049a: DUP2
0000049b: MSTORE
0000049c: PUSH1 0x20
0000049e: ADD
0000049f: DUP3
000004a0: DUP1
000004a1: SLOAD
000004a2: PUSH2 0x04aa
000004a5: SWAP1
000004a6: PUSH2 0x063e
000004a9: JUMP
000004aa: JUMPDEST
000004ab: DUP1
000004ac: ISZERO
000004ad: PUSH2 0x04f7
000004b0: JUMPI
000004b1: DUP1
000004b2: PUSH1 0x1f
000004b4: LT
000004b5: PUSH2 0x04cc
000004b8: JUMPI
000004b9: PUSH2 0x0100
000004bc: DUP1
000004bd: DUP4
000004be: SLOAD
000004bf: DIV
000004c0: MUL
000004c1: DUP4
000004c2: MSTORE
000004c3: SWAP2
000004c4: PUSH1 0x20
000004c6: ADD
000004c7: SWAP2
000004c8: PUSH2 0x04f7
000004cb: JUMP
000004cc: JUMPDEST
000004cd: DUP3
000004ce: ADD
000004cf: SWAP2
000004d0: SWAP1
000004d1: PUSH1 0x00
000004d3: MSTORE
000004d4: PUSH1 0x20
000004d6: PUSH1 0x00
000004d8: KECCAK256
000004d9: SWAP1
000004da: JUMPDEST
000004db: DUP2
000004dc: SLOAD
000004dd: DUP2
000004de: MSTORE
000004df: SWAP1
000004e0: PUSH1 0x01
000004e2: ADD
000004e3: SWAP1
000004e4: PUSH1 0x20
000004e6: ADD
000004e7: DUP1
000004e8: DUP4
000004e9: GT
000004ea: PUSH2 0x04da
000004ed: JUMPI
000004ee: DUP3
000004ef: SWAP1
000004f0: SUB
000004f1: PUSH1 0x1f
000004f3: AND
000004f4: DUP3
000004f5: ADD
000004f6: SWAP2
000004f7: JUMPDEST
000004f8: POP
000004f9: POP
000004fa: POP
000004fb: POP
000004fc: POP
000004fd: DUP2
000004fe: JUMP
000004ff: JUMPDEST
00000500: PUSH1 0x06
00000502: DUP1
00000503: SLOAD
00000504: PUSH2 0x047e
00000507: SWAP1
00000508: PUSH2 0x063e
0000050b: JUMP
0000050c: JUMPDEST
0000050d: DUP1
0000050e: CALLDATALOAD
0000050f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000524: DUP2
00000525: AND
00000526: DUP2
00000527: EQ
00000528: PUSH2 0x0530
0000052b: JUMPI
0000052c: PUSH1 0x00
0000052e: DUP1
0000052f: REVERT
00000530: JUMPDEST
00000531: SWAP2
00000532: SWAP1
00000533: POP
00000534: JUMP
00000535: JUMPDEST
00000536: PUSH1 0x00
00000538: PUSH1 0x20
0000053a: DUP3
0000053b: DUP5
0000053c: SUB
0000053d: SLT
0000053e: ISZERO
0000053f: PUSH2 0x0547
00000542: JUMPI
00000543: PUSH1 0x00
00000545: DUP1
00000546: REVERT
00000547: JUMPDEST
00000548: PUSH2 0x0550
0000054b: DUP3
0000054c: PUSH2 0x050c
0000054f: JUMP
00000550: JUMPDEST
00000551: SWAP4
00000552: SWAP3
00000553: POP
00000554: POP
00000555: POP
00000556: JUMP
00000557: JUMPDEST
00000558: PUSH1 0x00
0000055a: DUP1
0000055b: PUSH1 0x40
0000055d: DUP4
0000055e: DUP6
0000055f: SUB
00000560: SLT
00000561: ISZERO
00000562: PUSH2 0x056a
00000565: JUMPI
00000566: PUSH1 0x00
00000568: DUP1
00000569: REVERT
0000056a: JUMPDEST
0000056b: PUSH2 0x0573
0000056e: DUP4
0000056f: PUSH2 0x050c
00000572: JUMP
00000573: JUMPDEST
00000574: SWAP2
00000575: POP
00000576: PUSH2 0x0581
00000579: PUSH1 0x20
0000057b: DUP5
0000057c: ADD
0000057d: PUSH2 0x050c
00000580: JUMP
00000581: JUMPDEST
00000582: SWAP1
00000583: POP
00000584: SWAP3
00000585: POP
00000586: SWAP3
00000587: SWAP1
00000588: POP
00000589: JUMP
0000058a: JUMPDEST
0000058b: PUSH1 0x20
0000058d: DUP2
0000058e: ADD
0000058f: PUSH1 0x02
00000591: DUP4
00000592: LT
00000593: PUSH2 0x05c5
00000596: JUMPI
00000597: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
000005b8: PUSH1 0x00
000005ba: MSTORE
000005bb: PUSH1 0x21
000005bd: PUSH1 0x04
000005bf: MSTORE
000005c0: PUSH1 0x24
000005c2: PUSH1 0x00
000005c4: REVERT
000005c5: JUMPDEST
000005c6: SWAP2
000005c7: SWAP1
000005c8: MSTORE
000005c9: SWAP1
000005ca: JUMP
000005cb: JUMPDEST
000005cc: PUSH1 0x00
000005ce: PUSH1 0x20
000005d0: DUP1
000005d1: DUP4
000005d2: MSTORE
000005d3: DUP4
000005d4: MLOAD
000005d5: DUP1
000005d6: DUP3
000005d7: DUP6
000005d8: ADD
000005d9: MSTORE
000005da: PUSH1 0x00
000005dc: JUMPDEST
000005dd: DUP2
000005de: DUP2
000005df: LT
000005e0: ISZERO
000005e1: PUSH2 0x05f8
000005e4: JUMPI
000005e5: DUP6
000005e6: DUP2
000005e7: ADD
000005e8: DUP4
000005e9: ADD
000005ea: MLOAD
000005eb: DUP6
000005ec: DUP3
000005ed: ADD
000005ee: PUSH1 0x40
000005f0: ADD
000005f1: MSTORE
000005f2: DUP3
000005f3: ADD
000005f4: PUSH2 0x05dc
000005f7: JUMP
000005f8: JUMPDEST
000005f9: DUP2
000005fa: DUP2
000005fb: GT
000005fc: ISZERO
000005fd: PUSH2 0x060a
00000600: JUMPI
00000601: PUSH1 0x00
00000603: PUSH1 0x40
00000605: DUP4
00000606: DUP8
00000607: ADD
00000608: ADD
00000609: MSTORE
0000060a: JUMPDEST
0000060b: POP
0000060c: PUSH1 0x1f
0000060e: ADD
0000060f: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
00000630: AND
00000631: SWAP3
00000632: SWAP1
00000633: SWAP3
00000634: ADD
00000635: PUSH1 0x40
00000637: ADD
00000638: SWAP4
00000639: SWAP3
0000063a: POP
0000063b: POP
0000063c: POP
0000063d: JUMP
0000063e: JUMPDEST
0000063f: PUSH1 0x01
00000641: DUP2
00000642: DUP2
00000643: SHR
00000644: SWAP1
00000645: DUP3
00000646: AND
00000647: DUP1
00000648: PUSH2 0x0652
0000064b: JUMPI
0000064c: PUSH1 0x7f
0000064e: DUP3
0000064f: AND
00000650: SWAP2
00000651: POP
00000652: JUMPDEST
00000653: PUSH1 0x20
00000655: DUP3
00000656: LT
00000657: DUP2
00000658: EQ
00000659: ISZERO
0000065a: PUSH2 0x068c
0000065d: JUMPI
0000065e: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
0000067f: PUSH1 0x00
00000681: MSTORE
00000682: PUSH1 0x22
00000684: PUSH1 0x04
00000686: MSTORE
00000687: PUSH1 0x24
00000689: PUSH1 0x00
0000068b: REVERT
0000068c: JUMPDEST
0000068d: POP
0000068e: SWAP2
0000068f: SWAP1
00000690: POP
00000691: JUMP
00000692: INVALID
00000693: LOG2
00000694: PUSH5 0x6970667358
0000069a: UNKNOWN(0x22)
0000069b: SLT
0000069c: KECCAK256
0000069d: UNKNOWN(0xB2)
0000069e: UNKNOWN(0x29)
0000069f: CALLDATASIZE
000006a0: UNKNOWN(0x4E)
000006a1: PUSH27 0x9918553c008bca2249fc251b0662b166387bb68248fe64daee07b8
000006bd: PUSH5 0x736f6c6343
000006c3: STOP
000006c4: ADDMOD
000006c5: MOD
000006c6: STOP
000006c7: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0x52e5a06fafd65f281e127a9136b0d920fae296378cdb16b56531f28f2b843faf
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 192,
    "trace_id": "0x52e5a06fafd65f281e127a9136b0d920fae296378cdb16b56531f28f2b843faf",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xdd62ed3e",
            "selector": "0xdd62ed3e",
            "calldata_variants": [
                "0xdd62ed3e",
                "0xdd62ed3e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe3b2594f",
            "selector": "0xe3b2594f",
            "calldata_variants": [
                "0xe3b2594f",
                "0xe3b2594f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf72655ef",
            "selector": "0xf72655ef",
            "calldata_variants": [
                "0xf72655ef",
                "0xf72655ef0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xcfd7b0df",
            "selector": "0xcfd7b0df",
            "calldata_variants": [
                "0xcfd7b0df",
                "0xcfd7b0df0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd7dfa0dd",
            "selector": "0xd7dfa0dd",
            "calldata_variants": [
                "0xd7dfa0dd",
                "0xd7dfa0dd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x95d89b41",
            "selector": "0x95d89b41",
            "calldata_variants": [
                "0x95d89b41",
                "0x95d89b410000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xa001ecdd",
            "selector": "0xa001ecdd",
            "calldata_variants": [
                "0xa001ecdd",
                "0xa001ecdd0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb8ddbcb3",
            "selector": "0xb8ddbcb3",
            "calldata_variants": [
                "0xb8ddbcb3",
                "0xb8ddbcb30000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 379,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}