TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-c7a0-7273-8165-a5b267602f1d

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
26001 artifact.fetch complete 1 / 3 3 months ago
26002 tool.cast_disasm complete 1 / 3 3 months ago
112643 analysis.bundle complete 1 / 3 1 week ago
112644 capability.graph complete 1 / 3 1 week ago
112645 detector.run complete 1 / 3 1 week ago
112646 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
3
Total opcodes
956
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0043
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x3659cfe6
00000019: EQ
0000001a: PUSH2 0x005a
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x4f1ef286
00000024: EQ
00000025: PUSH2 0x007a
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x5c60da1b
0000002f: EQ
00000030: PUSH2 0x008d
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf851a440
0000003a: EQ
0000003b: PUSH2 0x00be
0000003e: JUMPI
0000003f: PUSH2 0x0052
00000042: JUMP
00000043: JUMPDEST
00000044: CALLDATASIZE
00000045: PUSH2 0x0052
00000048: JUMPI
00000049: PUSH2 0x0050
0000004c: PUSH2 0x00d3
0000004f: JUMP
00000050: JUMPDEST
00000051: STOP
00000052: JUMPDEST
00000053: PUSH2 0x0050
00000056: PUSH2 0x00d3
00000059: JUMP
0000005a: JUMPDEST
0000005b: CALLVALUE
0000005c: DUP1
0000005d: ISZERO
0000005e: PUSH2 0x0066
00000061: JUMPI
00000062: PUSH1 0x00
00000064: DUP1
00000065: REVERT
00000066: JUMPDEST
00000067: POP
00000068: PUSH2 0x0050
0000006b: PUSH2 0x0075
0000006e: CALLDATASIZE
0000006f: PUSH1 0x04
00000071: PUSH2 0x058f
00000074: JUMP
00000075: JUMPDEST
00000076: PUSH2 0x00ed
00000079: JUMP
0000007a: JUMPDEST
0000007b: PUSH2 0x0050
0000007e: PUSH2 0x0088
00000081: CALLDATASIZE
00000082: PUSH1 0x04
00000084: PUSH2 0x05aa
00000087: JUMP
00000088: JUMPDEST
00000089: PUSH2 0x0143
0000008c: JUMP
0000008d: JUMPDEST
0000008e: CALLVALUE
0000008f: DUP1
00000090: ISZERO
00000091: PUSH2 0x0099
00000094: JUMPI
00000095: PUSH1 0x00
00000097: DUP1
00000098: REVERT
00000099: JUMPDEST
0000009a: POP
0000009b: PUSH2 0x00a2
0000009e: PUSH2 0x01c3
000000a1: JUMP
000000a2: JUMPDEST
000000a3: PUSH1 0x40
000000a5: MLOAD
000000a6: PUSH1 0x01
000000a8: PUSH1 0x01
000000aa: PUSH1 0xa0
000000ac: SHL
000000ad: SUB
000000ae: SWAP1
000000af: SWAP2
000000b0: AND
000000b1: DUP2
000000b2: MSTORE
000000b3: PUSH1 0x20
000000b5: ADD
000000b6: PUSH1 0x40
000000b8: MLOAD
000000b9: DUP1
000000ba: SWAP2
000000bb: SUB
000000bc: SWAP1
000000bd: RETURN
000000be: JUMPDEST
000000bf: CALLVALUE
000000c0: DUP1
000000c1: ISZERO
000000c2: PUSH2 0x00ca
000000c5: JUMPI
000000c6: PUSH1 0x00
000000c8: DUP1
000000c9: REVERT
000000ca: JUMPDEST
000000cb: POP
000000cc: PUSH2 0x00a2
000000cf: PUSH2 0x020d
000000d2: JUMP
000000d3: JUMPDEST
000000d4: PUSH2 0x00db
000000d7: PUSH2 0x029f
000000da: JUMP
000000db: JUMPDEST
000000dc: PUSH2 0x00eb
000000df: PUSH2 0x00e6
000000e2: PUSH2 0x02e8
000000e5: JUMP
000000e6: JUMPDEST
000000e7: PUSH2 0x031b
000000ea: JUMP
000000eb: JUMPDEST
000000ec: JUMP
000000ed: JUMPDEST
000000ee: PUSH1 0x01
000000f0: PUSH1 0x01
000000f2: PUSH1 0xa0
000000f4: SHL
000000f5: SUB
000000f6: PUSH32 0x00000000000000000000000012388c005c3e3a88b6d30c55f21e49b747d118cb
00000117: AND
00000118: CALLER
00000119: SUB
0000011a: PUSH2 0x013b
0000011d: JUMPI
0000011e: PUSH2 0x0138
00000121: DUP2
00000122: PUSH1 0x40
00000124: MLOAD
00000125: DUP1
00000126: PUSH1 0x20
00000128: ADD
00000129: PUSH1 0x40
0000012b: MSTORE
0000012c: DUP1
0000012d: PUSH1 0x00
0000012f: DUP2
00000130: MSTORE
00000131: POP
00000132: PUSH1 0x00
00000134: PUSH2 0x033f
00000137: JUMP
00000138: JUMPDEST
00000139: POP
0000013a: JUMP
0000013b: JUMPDEST
0000013c: PUSH2 0x0138
0000013f: PUSH2 0x00d3
00000142: JUMP
00000143: JUMPDEST
00000144: PUSH1 0x01
00000146: PUSH1 0x01
00000148: PUSH1 0xa0
0000014a: SHL
0000014b: SUB
0000014c: PUSH32 0x00000000000000000000000012388c005c3e3a88b6d30c55f21e49b747d118cb
0000016d: AND
0000016e: CALLER
0000016f: SUB
00000170: PUSH2 0x01bb
00000173: JUMPI
00000174: PUSH2 0x01b6
00000177: DUP4
00000178: DUP4
00000179: DUP4
0000017a: DUP1
0000017b: DUP1
0000017c: PUSH1 0x1f
0000017e: ADD
0000017f: PUSH1 0x20
00000181: DUP1
00000182: SWAP2
00000183: DIV
00000184: MUL
00000185: PUSH1 0x20
00000187: ADD
00000188: PUSH1 0x40
0000018a: MLOAD
0000018b: SWAP1
0000018c: DUP2
0000018d: ADD
0000018e: PUSH1 0x40
00000190: MSTORE
00000191: DUP1
00000192: SWAP4
00000193: SWAP3
00000194: SWAP2
00000195: SWAP1
00000196: DUP2
00000197: DUP2
00000198: MSTORE
00000199: PUSH1 0x20
0000019b: ADD
0000019c: DUP4
0000019d: DUP4
0000019e: DUP1
0000019f: DUP3
000001a0: DUP5
000001a1: CALLDATACOPY
000001a2: PUSH1 0x00
000001a4: SWAP3
000001a5: ADD
000001a6: SWAP2
000001a7: SWAP1
000001a8: SWAP2
000001a9: MSTORE
000001aa: POP
000001ab: PUSH1 0x01
000001ad: SWAP3
000001ae: POP
000001af: PUSH2 0x033f
000001b2: SWAP2
000001b3: POP
000001b4: POP
000001b5: JUMP
000001b6: JUMPDEST
000001b7: POP
000001b8: POP
000001b9: POP
000001ba: JUMP
000001bb: JUMPDEST
000001bc: PUSH2 0x01b6
000001bf: PUSH2 0x00d3
000001c2: JUMP
000001c3: JUMPDEST
000001c4: PUSH1 0x00
000001c6: PUSH1 0x01
000001c8: PUSH1 0x01
000001ca: PUSH1 0xa0
000001cc: SHL
000001cd: SUB
000001ce: PUSH32 0x00000000000000000000000012388c005c3e3a88b6d30c55f21e49b747d118cb
000001ef: AND
000001f0: CALLER
000001f1: SUB
000001f2: PUSH2 0x0202
000001f5: JUMPI
000001f6: PUSH2 0x01fd
000001f9: PUSH2 0x02e8
000001fc: JUMP
000001fd: JUMPDEST
000001fe: SWAP1
000001ff: POP
00000200: SWAP1
00000201: JUMP
00000202: JUMPDEST
00000203: PUSH2 0x020a
00000206: PUSH2 0x00d3
00000209: JUMP
0000020a: JUMPDEST
0000020b: SWAP1
0000020c: JUMP
0000020d: JUMPDEST
0000020e: PUSH1 0x00
00000210: PUSH1 0x01
00000212: PUSH1 0x01
00000214: PUSH1 0xa0
00000216: SHL
00000217: SUB
00000218: PUSH32 0x00000000000000000000000012388c005c3e3a88b6d30c55f21e49b747d118cb
00000239: AND
0000023a: CALLER
0000023b: SUB
0000023c: PUSH2 0x0202
0000023f: JUMPI
00000240: POP
00000241: PUSH32 0x00000000000000000000000012388c005c3e3a88b6d30c55f21e49b747d118cb
00000262: SWAP1
00000263: JUMP
00000264: JUMPDEST
00000265: PUSH1 0x60
00000267: PUSH2 0x0289
0000026a: DUP4
0000026b: DUP4
0000026c: PUSH1 0x40
0000026e: MLOAD
0000026f: DUP1
00000270: PUSH1 0x60
00000272: ADD
00000273: PUSH1 0x40
00000275: MSTORE
00000276: DUP1
00000277: PUSH1 0x27
00000279: DUP2
0000027a: MSTORE
0000027b: PUSH1 0x20
0000027d: ADD
0000027e: PUSH2 0x06a9
00000281: PUSH1 0x27
00000283: SWAP2
00000284: CODECOPY
00000285: PUSH2 0x036a
00000288: JUMP
00000289: JUMPDEST
0000028a: SWAP4
0000028b: SWAP3
0000028c: POP
0000028d: POP
0000028e: POP
0000028f: JUMP
00000290: JUMPDEST
00000291: PUSH1 0x01
00000293: PUSH1 0x01
00000295: PUSH1 0xa0
00000297: SHL
00000298: SUB
00000299: AND
0000029a: EXTCODESIZE
0000029b: ISZERO
0000029c: ISZERO
0000029d: SWAP1
0000029e: JUMP
0000029f: JUMPDEST
000002a0: PUSH1 0x01
000002a2: PUSH1 0x01
000002a4: PUSH1 0xa0
000002a6: SHL
000002a7: SUB
000002a8: PUSH32 0x00000000000000000000000012388c005c3e3a88b6d30c55f21e49b747d118cb
000002c9: AND
000002ca: CALLER
000002cb: SUB
000002cc: PUSH2 0x00eb
000002cf: JUMPI
000002d0: PUSH1 0x40
000002d2: MLOAD
000002d3: PUSH4 0x4ca88867
000002d8: PUSH1 0xe0
000002da: SHL
000002db: DUP2
000002dc: MSTORE
000002dd: PUSH1 0x04
000002df: ADD
000002e0: PUSH1 0x40
000002e2: MLOAD
000002e3: DUP1
000002e4: SWAP2
000002e5: SUB
000002e6: SWAP1
000002e7: REVERT
000002e8: JUMPDEST
000002e9: PUSH1 0x00
000002eb: PUSH2 0x01fd
000002ee: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000030f: SLOAD
00000310: PUSH1 0x01
00000312: PUSH1 0x01
00000314: PUSH1 0xa0
00000316: SHL
00000317: SUB
00000318: AND
00000319: SWAP1
0000031a: JUMP
0000031b: JUMPDEST
0000031c: CALLDATASIZE
0000031d: PUSH1 0x00
0000031f: DUP1
00000320: CALLDATACOPY
00000321: PUSH1 0x00
00000323: DUP1
00000324: CALLDATASIZE
00000325: PUSH1 0x00
00000327: DUP5
00000328: GAS
00000329: DELEGATECALL
0000032a: RETURNDATASIZE
0000032b: PUSH1 0x00
0000032d: DUP1
0000032e: RETURNDATACOPY
0000032f: DUP1
00000330: DUP1
00000331: ISZERO
00000332: PUSH2 0x033a
00000335: JUMPI
00000336: RETURNDATASIZE
00000337: PUSH1 0x00
00000339: RETURN
0000033a: JUMPDEST
0000033b: RETURNDATASIZE
0000033c: PUSH1 0x00
0000033e: REVERT
0000033f: JUMPDEST
00000340: PUSH2 0x0348
00000343: DUP4
00000344: PUSH2 0x044c
00000347: JUMP
00000348: JUMPDEST
00000349: PUSH1 0x00
0000034b: DUP3
0000034c: MLOAD
0000034d: GT
0000034e: DUP1
0000034f: PUSH2 0x0355
00000352: JUMPI
00000353: POP
00000354: DUP1
00000355: JUMPDEST
00000356: ISZERO
00000357: PUSH2 0x01b6
0000035a: JUMPI
0000035b: PUSH2 0x0364
0000035e: DUP4
0000035f: DUP4
00000360: PUSH2 0x0264
00000363: JUMP
00000364: JUMPDEST
00000365: POP
00000366: POP
00000367: POP
00000368: POP
00000369: JUMP
0000036a: JUMPDEST
0000036b: PUSH1 0x60
0000036d: PUSH1 0x01
0000036f: PUSH1 0x01
00000371: PUSH1 0xa0
00000373: SHL
00000374: SUB
00000375: DUP5
00000376: AND
00000377: EXTCODESIZE
00000378: PUSH2 0x03d7
0000037b: JUMPI
0000037c: PUSH1 0x40
0000037e: MLOAD
0000037f: PUSH3 0x461bcd
00000383: PUSH1 0xe5
00000385: SHL
00000386: DUP2
00000387: MSTORE
00000388: PUSH1 0x20
0000038a: PUSH1 0x04
0000038c: DUP3
0000038d: ADD
0000038e: MSTORE
0000038f: PUSH1 0x26
00000391: PUSH1 0x24
00000393: DUP3
00000394: ADD
00000395: MSTORE
00000396: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f
000003b7: PUSH1 0x44
000003b9: DUP3
000003ba: ADD
000003bb: MSTORE
000003bc: PUSH6 0x1b9d1c9858dd
000003c3: PUSH1 0xd2
000003c5: SHL
000003c6: PUSH1 0x64
000003c8: DUP3
000003c9: ADD
000003ca: MSTORE
000003cb: PUSH1 0x84
000003cd: ADD
000003ce: JUMPDEST
000003cf: PUSH1 0x40
000003d1: MLOAD
000003d2: DUP1
000003d3: SWAP2
000003d4: SUB
000003d5: SWAP1
000003d6: REVERT
000003d7: JUMPDEST
000003d8: PUSH1 0x00
000003da: DUP1
000003db: DUP6
000003dc: PUSH1 0x01
000003de: PUSH1 0x01
000003e0: PUSH1 0xa0
000003e2: SHL
000003e3: SUB
000003e4: AND
000003e5: DUP6
000003e6: PUSH1 0x40
000003e8: MLOAD
000003e9: PUSH2 0x03f2
000003ec: SWAP2
000003ed: SWAP1
000003ee: PUSH2 0x0659
000003f1: JUMP
000003f2: JUMPDEST
000003f3: PUSH1 0x00
000003f5: PUSH1 0x40
000003f7: MLOAD
000003f8: DUP1
000003f9: DUP4
000003fa: SUB
000003fb: DUP2
000003fc: DUP6
000003fd: GAS
000003fe: DELEGATECALL
000003ff: SWAP2
00000400: POP
00000401: POP
00000402: RETURNDATASIZE
00000403: DUP1
00000404: PUSH1 0x00
00000406: DUP2
00000407: EQ
00000408: PUSH2 0x042d
0000040b: JUMPI
0000040c: PUSH1 0x40
0000040e: MLOAD
0000040f: SWAP2
00000410: POP
00000411: PUSH1 0x1f
00000413: NOT
00000414: PUSH1 0x3f
00000416: RETURNDATASIZE
00000417: ADD
00000418: AND
00000419: DUP3
0000041a: ADD
0000041b: PUSH1 0x40
0000041d: MSTORE
0000041e: RETURNDATASIZE
0000041f: DUP3
00000420: MSTORE
00000421: RETURNDATASIZE
00000422: PUSH1 0x00
00000424: PUSH1 0x20
00000426: DUP5
00000427: ADD
00000428: RETURNDATACOPY
00000429: PUSH2 0x0432
0000042c: JUMP
0000042d: JUMPDEST
0000042e: PUSH1 0x60
00000430: SWAP2
00000431: POP
00000432: JUMPDEST
00000433: POP
00000434: SWAP2
00000435: POP
00000436: SWAP2
00000437: POP
00000438: PUSH2 0x0442
0000043b: DUP3
0000043c: DUP3
0000043d: DUP7
0000043e: PUSH2 0x048c
00000441: JUMP
00000442: JUMPDEST
00000443: SWAP7
00000444: SWAP6
00000445: POP
00000446: POP
00000447: POP
00000448: POP
00000449: POP
0000044a: POP
0000044b: JUMP
0000044c: JUMPDEST
0000044d: PUSH2 0x0455
00000450: DUP2
00000451: PUSH2 0x04c5
00000454: JUMP
00000455: JUMPDEST
00000456: PUSH1 0x40
00000458: MLOAD
00000459: PUSH1 0x01
0000045b: PUSH1 0x01
0000045d: PUSH1 0xa0
0000045f: SHL
00000460: SUB
00000461: DUP3
00000462: AND
00000463: SWAP1
00000464: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
00000485: SWAP1
00000486: PUSH1 0x00
00000488: SWAP1
00000489: LOG2
0000048a: POP
0000048b: JUMP
0000048c: JUMPDEST
0000048d: PUSH1 0x60
0000048f: DUP4
00000490: ISZERO
00000491: PUSH2 0x049b
00000494: JUMPI
00000495: POP
00000496: DUP2
00000497: PUSH2 0x0289
0000049a: JUMP
0000049b: JUMPDEST
0000049c: DUP3
0000049d: MLOAD
0000049e: ISZERO
0000049f: PUSH2 0x04ab
000004a2: JUMPI
000004a3: DUP3
000004a4: MLOAD
000004a5: DUP1
000004a6: DUP5
000004a7: PUSH1 0x20
000004a9: ADD
000004aa: REVERT
000004ab: JUMPDEST
000004ac: DUP2
000004ad: PUSH1 0x40
000004af: MLOAD
000004b0: PUSH3 0x461bcd
000004b4: PUSH1 0xe5
000004b6: SHL
000004b7: DUP2
000004b8: MSTORE
000004b9: PUSH1 0x04
000004bb: ADD
000004bc: PUSH2 0x03ce
000004bf: SWAP2
000004c0: SWAP1
000004c1: PUSH2 0x0675
000004c4: JUMP
000004c5: JUMPDEST
000004c6: PUSH1 0x01
000004c8: PUSH1 0x01
000004ca: PUSH1 0xa0
000004cc: SHL
000004cd: SUB
000004ce: DUP2
000004cf: AND
000004d0: EXTCODESIZE
000004d1: PUSH2 0x0532
000004d4: JUMPI
000004d5: PUSH1 0x40
000004d7: MLOAD
000004d8: PUSH3 0x461bcd
000004dc: PUSH1 0xe5
000004de: SHL
000004df: DUP2
000004e0: MSTORE
000004e1: PUSH1 0x20
000004e3: PUSH1 0x04
000004e5: DUP3
000004e6: ADD
000004e7: MSTORE
000004e8: PUSH1 0x2d
000004ea: PUSH1 0x24
000004ec: DUP3
000004ed: ADD
000004ee: MSTORE
000004ef: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
00000510: PUSH1 0x44
00000512: DUP3
00000513: ADD
00000514: MSTORE
00000515: PUSH13 0x1bdd08184818dbdb9d1c9858dd
00000523: PUSH1 0x9a
00000525: SHL
00000526: PUSH1 0x64
00000528: DUP3
00000529: ADD
0000052a: MSTORE
0000052b: PUSH1 0x84
0000052d: ADD
0000052e: PUSH2 0x03ce
00000531: JUMP
00000532: JUMPDEST
00000533: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000554: DUP1
00000555: SLOAD
00000556: PUSH1 0x01
00000558: PUSH1 0x01
0000055a: PUSH1 0xa0
0000055c: SHL
0000055d: SUB
0000055e: NOT
0000055f: AND
00000560: PUSH1 0x01
00000562: PUSH1 0x01
00000564: PUSH1 0xa0
00000566: SHL
00000567: SUB
00000568: SWAP3
00000569: SWAP1
0000056a: SWAP3
0000056b: AND
0000056c: SWAP2
0000056d: SWAP1
0000056e: SWAP2
0000056f: OR
00000570: SWAP1
00000571: SSTORE
00000572: JUMP
00000573: JUMPDEST
00000574: DUP1
00000575: CALLDATALOAD
00000576: PUSH1 0x01
00000578: PUSH1 0x01
0000057a: PUSH1 0xa0
0000057c: SHL
0000057d: SUB
0000057e: DUP2
0000057f: AND
00000580: DUP2
00000581: EQ
00000582: PUSH2 0x058a
00000585: JUMPI
00000586: PUSH1 0x00
00000588: DUP1
00000589: REVERT
0000058a: JUMPDEST
0000058b: SWAP2
0000058c: SWAP1
0000058d: POP
0000058e: JUMP
0000058f: JUMPDEST
00000590: PUSH1 0x00
00000592: PUSH1 0x20
00000594: DUP3
00000595: DUP5
00000596: SUB
00000597: SLT
00000598: ISZERO
00000599: PUSH2 0x05a1
0000059c: JUMPI
0000059d: PUSH1 0x00
0000059f: DUP1
000005a0: REVERT
000005a1: JUMPDEST
000005a2: PUSH2 0x0289
000005a5: DUP3
000005a6: PUSH2 0x0573
000005a9: JUMP
000005aa: JUMPDEST
000005ab: PUSH1 0x00
000005ad: DUP1
000005ae: PUSH1 0x00
000005b0: PUSH1 0x40
000005b2: DUP5
000005b3: DUP7
000005b4: SUB
000005b5: SLT
000005b6: ISZERO
000005b7: PUSH2 0x05bf
000005ba: JUMPI
000005bb: PUSH1 0x00
000005bd: DUP1
000005be: REVERT
000005bf: JUMPDEST
000005c0: PUSH2 0x05c8
000005c3: DUP5
000005c4: PUSH2 0x0573
000005c7: JUMP
000005c8: JUMPDEST
000005c9: SWAP3
000005ca: POP
000005cb: PUSH1 0x20
000005cd: DUP5
000005ce: ADD
000005cf: CALLDATALOAD
000005d0: PUSH8 0xffffffffffffffff
000005d9: DUP1
000005da: DUP3
000005db: GT
000005dc: ISZERO
000005dd: PUSH2 0x05e5
000005e0: JUMPI
000005e1: PUSH1 0x00
000005e3: DUP1
000005e4: REVERT
000005e5: JUMPDEST
000005e6: DUP2
000005e7: DUP7
000005e8: ADD
000005e9: SWAP2
000005ea: POP
000005eb: DUP7
000005ec: PUSH1 0x1f
000005ee: DUP4
000005ef: ADD
000005f0: SLT
000005f1: PUSH2 0x05f9
000005f4: JUMPI
000005f5: PUSH1 0x00
000005f7: DUP1
000005f8: REVERT
000005f9: JUMPDEST
000005fa: DUP2
000005fb: CALLDATALOAD
000005fc: DUP2
000005fd: DUP2
000005fe: GT
000005ff: ISZERO
00000600: PUSH2 0x0608
00000603: JUMPI
00000604: PUSH1 0x00
00000606: DUP1
00000607: REVERT
00000608: JUMPDEST
00000609: DUP8
0000060a: PUSH1 0x20
0000060c: DUP3
0000060d: DUP6
0000060e: ADD
0000060f: ADD
00000610: GT
00000611: ISZERO
00000612: PUSH2 0x061a
00000615: JUMPI
00000616: PUSH1 0x00
00000618: DUP1
00000619: REVERT
0000061a: JUMPDEST
0000061b: PUSH1 0x20
0000061d: DUP4
0000061e: ADD
0000061f: SWAP5
00000620: POP
00000621: DUP1
00000622: SWAP4
00000623: POP
00000624: POP
00000625: POP
00000626: POP
00000627: SWAP3
00000628: POP
00000629: SWAP3
0000062a: POP
0000062b: SWAP3
0000062c: JUMP
0000062d: JUMPDEST
0000062e: PUSH1 0x00
00000630: JUMPDEST
00000631: DUP4
00000632: DUP2
00000633: LT
00000634: ISZERO
00000635: PUSH2 0x0648
00000638: JUMPI
00000639: DUP2
0000063a: DUP2
0000063b: ADD
0000063c: MLOAD
0000063d: DUP4
0000063e: DUP3
0000063f: ADD
00000640: MSTORE
00000641: PUSH1 0x20
00000643: ADD
00000644: PUSH2 0x0630
00000647: JUMP
00000648: JUMPDEST
00000649: DUP4
0000064a: DUP2
0000064b: GT
0000064c: ISZERO
0000064d: PUSH2 0x0364
00000650: JUMPI
00000651: POP
00000652: POP
00000653: PUSH1 0x00
00000655: SWAP2
00000656: ADD
00000657: MSTORE
00000658: JUMP
00000659: JUMPDEST
0000065a: PUSH1 0x00
0000065c: DUP3
0000065d: MLOAD
0000065e: PUSH2 0x066b
00000661: DUP2
00000662: DUP5
00000663: PUSH1 0x20
00000665: DUP8
00000666: ADD
00000667: PUSH2 0x062d
0000066a: JUMP
0000066b: JUMPDEST
0000066c: SWAP2
0000066d: SWAP1
0000066e: SWAP2
0000066f: ADD
00000670: SWAP3
00000671: SWAP2
00000672: POP
00000673: POP
00000674: JUMP
00000675: JUMPDEST
00000676: PUSH1 0x20
00000678: DUP2
00000679: MSTORE
0000067a: PUSH1 0x00
0000067c: DUP3
0000067d: MLOAD
0000067e: DUP1
0000067f: PUSH1 0x20
00000681: DUP5
00000682: ADD
00000683: MSTORE
00000684: PUSH2 0x0694
00000687: DUP2
00000688: PUSH1 0x40
0000068a: DUP6
0000068b: ADD
0000068c: PUSH1 0x20
0000068e: DUP8
0000068f: ADD
00000690: PUSH2 0x062d
00000693: JUMP
00000694: JUMPDEST
00000695: PUSH1 0x1f
00000697: ADD
00000698: PUSH1 0x1f
0000069a: NOT
0000069b: AND
0000069c: SWAP2
0000069d: SWAP1
0000069e: SWAP2
0000069f: ADD
000006a0: PUSH1 0x40
000006a2: ADD
000006a3: SWAP3
000006a4: SWAP2
000006a5: POP
000006a6: POP
000006a7: JUMP
000006a8: INVALID
000006a9: COINBASE
000006aa: PUSH5 0x6472657373
000006b0: GASPRICE
000006b1: KECCAK256
000006b2: PUSH13 0x6f772d6c6576656c2064656c65
000006c0: PUSH8 0x6174652063616c6c
000006c9: KECCAK256
000006ca: PUSH7 0x61696c6564a164
000006d2: PUSH20

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0x69b480cc426d1734e4ce1545d8ad502aeb9c7bb3198d6485ec39d972966a2267
call_targets: 0xf3b685d24f84b6eeeeee334250cf73ade1f10144
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 2,
    "trace_id": "0x69b480cc426d1734e4ce1545d8ad502aeb9c7bb3198d6485ec39d972966a2267",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xf3b685d24f84b6eeeeee334250cf73ade1f10144"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 809,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1022,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}