019b477e-c84b-71af-9d09-861e72932b78
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 26109 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 26110 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 113011 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 113012 | capability.graph | complete | 1 / 3 | 1 week ago |
| 113013 | detector.run | complete | 1 / 3 | 1 week ago |
| 113014 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: PUSH2 0x0013 00000009: JUMPI 0000000a: PUSH2 0x0011 0000000d: PUSH2 0x0017 00000010: JUMP 00000011: JUMPDEST 00000012: STOP 00000013: JUMPDEST 00000014: PUSH2 0x0011 00000017: JUMPDEST 00000018: PUSH2 0x0027 0000001b: PUSH2 0x0022 0000001e: PUSH2 0x005e 00000021: JUMP 00000022: JUMPDEST 00000023: PUSH2 0x0106 00000026: JUMP 00000027: JUMPDEST 00000028: JUMP 00000029: JUMPDEST 0000002a: PUSH1 0x60 0000002c: PUSH2 0x004e 0000002f: DUP4 00000030: DUP4 00000031: PUSH1 0x40 00000033: MLOAD 00000034: DUP1 00000035: PUSH1 0x60 00000037: ADD 00000038: PUSH1 0x40 0000003a: MSTORE 0000003b: DUP1 0000003c: PUSH1 0x27 0000003e: DUP2 0000003f: MSTORE 00000040: PUSH1 0x20 00000042: ADD 00000043: PUSH2 0x02e5 00000046: PUSH1 0x27 00000048: SWAP2 00000049: CODECOPY 0000004a: PUSH2 0x012a 0000004d: JUMP 0000004e: JUMPDEST 0000004f: SWAP4 00000050: SWAP3 00000051: POP 00000052: POP 00000053: POP 00000054: JUMP 00000055: JUMPDEST 00000056: EXTCODESIZE 00000057: ISZERO 00000058: ISZERO 00000059: SWAP1 0000005a: JUMP 0000005b: JUMPDEST 0000005c: SWAP1 0000005d: JUMP 0000005e: JUMPDEST 0000005f: PUSH1 0x00 00000061: PUSH2 0x0091 00000064: PUSH32 0xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50 00000085: SLOAD 00000086: PUSH1 0x01 00000088: PUSH1 0x01 0000008a: PUSH1 0xa0 0000008c: SHL 0000008d: SUB 0000008e: AND 0000008f: SWAP1 00000090: JUMP 00000091: JUMPDEST 00000092: PUSH1 0x01 00000094: PUSH1 0x01 00000096: PUSH1 0xa0 00000098: SHL 00000099: SUB 0000009a: AND 0000009b: PUSH4 0x5c60da1b 000000a0: PUSH1 0x40 000000a2: MLOAD 000000a3: DUP2 000000a4: PUSH4 0xffffffff 000000a9: AND 000000aa: PUSH1 0xe0 000000ac: SHL 000000ad: DUP2 000000ae: MSTORE 000000af: PUSH1 0x04 000000b1: ADD 000000b2: PUSH1 0x20 000000b4: PUSH1 0x40 000000b6: MLOAD 000000b7: DUP1 000000b8: DUP4 000000b9: SUB 000000ba: DUP2 000000bb: DUP7 000000bc: DUP1 000000bd: EXTCODESIZE 000000be: ISZERO 000000bf: DUP1 000000c0: ISZERO 000000c1: PUSH2 0x00c9 000000c4: JUMPI 000000c5: PUSH1 0x00 000000c7: DUP1 000000c8: REVERT 000000c9: JUMPDEST 000000ca: POP 000000cb: GAS 000000cc: STATICCALL 000000cd: ISZERO 000000ce: DUP1 000000cf: ISZERO 000000d0: PUSH2 0x00dd 000000d3: JUMPI 000000d4: RETURNDATASIZE 000000d5: PUSH1 0x00 000000d7: DUP1 000000d8: RETURNDATACOPY 000000d9: RETURNDATASIZE 000000da: PUSH1 0x00 000000dc: REVERT 000000dd: JUMPDEST 000000de: POP 000000df: POP 000000e0: POP 000000e1: POP 000000e2: PUSH1 0x40 000000e4: MLOAD 000000e5: RETURNDATASIZE 000000e6: PUSH1 0x1f 000000e8: NOT 000000e9: PUSH1 0x1f 000000eb: DUP3 000000ec: ADD 000000ed: AND 000000ee: DUP3 000000ef: ADD 000000f0: DUP1 000000f1: PUSH1 0x40 000000f3: MSTORE 000000f4: POP 000000f5: DUP2 000000f6: ADD 000000f7: SWAP1 000000f8: PUSH2 0x0101 000000fb: SWAP2 000000fc: SWAP1 000000fd: PUSH2 0x023c 00000100: JUMP 00000101: JUMPDEST 00000102: SWAP1 00000103: POP 00000104: SWAP1 00000105: JUMP 00000106: JUMPDEST 00000107: CALLDATASIZE 00000108: PUSH1 0x00 0000010a: DUP1 0000010b: CALLDATACOPY 0000010c: PUSH1 0x00 0000010e: DUP1 0000010f: CALLDATASIZE 00000110: PUSH1 0x00 00000112: DUP5 00000113: GAS 00000114: DELEGATECALL 00000115: RETURNDATASIZE 00000116: PUSH1 0x00 00000118: DUP1 00000119: RETURNDATACOPY 0000011a: DUP1 0000011b: DUP1 0000011c: ISZERO 0000011d: PUSH2 0x0125 00000120: JUMPI 00000121: RETURNDATASIZE 00000122: PUSH1 0x00 00000124: RETURN 00000125: JUMPDEST 00000126: RETURNDATASIZE 00000127: PUSH1 0x00 00000129: REVERT 0000012a: JUMPDEST 0000012b: PUSH1 0x60 0000012d: DUP4 0000012e: EXTCODESIZE 0000012f: PUSH2 0x018e 00000132: JUMPI 00000133: PUSH1 0x40 00000135: MLOAD 00000136: PUSH3 0x461bcd 0000013a: PUSH1 0xe5 0000013c: SHL 0000013d: DUP2 0000013e: MSTORE 0000013f: PUSH1 0x20 00000141: PUSH1 0x04 00000143: DUP3 00000144: ADD 00000145: MSTORE 00000146: PUSH1 0x26 00000148: PUSH1 0x24 0000014a: DUP3 0000014b: ADD 0000014c: MSTORE 0000014d: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f 0000016e: PUSH1 0x44 00000170: DUP3 00000171: ADD 00000172: MSTORE 00000173: PUSH6 0x1b9d1c9858dd 0000017a: PUSH1 0xd2 0000017c: SHL 0000017d: PUSH1 0x64 0000017f: DUP3 00000180: ADD 00000181: MSTORE 00000182: PUSH1 0x84 00000184: ADD 00000185: JUMPDEST 00000186: PUSH1 0x40 00000188: MLOAD 00000189: DUP1 0000018a: SWAP2 0000018b: SUB 0000018c: SWAP1 0000018d: REVERT 0000018e: JUMPDEST 0000018f: PUSH1 0x00 00000191: DUP1 00000192: DUP6 00000193: PUSH1 0x01 00000195: PUSH1 0x01 00000197: PUSH1 0xa0 00000199: SHL 0000019a: SUB 0000019b: AND 0000019c: DUP6 0000019d: PUSH1 0x40 0000019f: MLOAD 000001a0: PUSH2 0x01a9 000001a3: SWAP2 000001a4: SWAP1 000001a5: PUSH2 0x0265 000001a8: JUMP 000001a9: JUMPDEST 000001aa: PUSH1 0x00 000001ac: PUSH1 0x40 000001ae: MLOAD 000001af: DUP1 000001b0: DUP4 000001b1: SUB 000001b2: DUP2 000001b3: DUP6 000001b4: GAS 000001b5: DELEGATECALL 000001b6: SWAP2 000001b7: POP 000001b8: POP 000001b9: RETURNDATASIZE 000001ba: DUP1 000001bb: PUSH1 0x00 000001bd: DUP2 000001be: EQ 000001bf: PUSH2 0x01e4 000001c2: JUMPI 000001c3: PUSH1 0x40 000001c5: MLOAD 000001c6: SWAP2 000001c7: POP 000001c8: PUSH1 0x1f 000001ca: NOT 000001cb: PUSH1 0x3f 000001cd: RETURNDATASIZE 000001ce: ADD 000001cf: AND 000001d0: DUP3 000001d1: ADD 000001d2: PUSH1 0x40 000001d4: MSTORE 000001d5: RETURNDATASIZE 000001d6: DUP3 000001d7: MSTORE 000001d8: RETURNDATASIZE 000001d9: PUSH1 0x00 000001db: PUSH1 0x20 000001dd: DUP5 000001de: ADD 000001df: RETURNDATACOPY 000001e0: PUSH2 0x01e9 000001e3: JUMP 000001e4: JUMPDEST 000001e5: PUSH1 0x60 000001e7: SWAP2 000001e8: POP 000001e9: JUMPDEST 000001ea: POP 000001eb: SWAP2 000001ec: POP 000001ed: SWAP2 000001ee: POP 000001ef: PUSH2 0x01f9 000001f2: DUP3 000001f3: DUP3 000001f4: DUP7 000001f5: PUSH2 0x0203 000001f8: JUMP 000001f9: JUMPDEST 000001fa: SWAP7 000001fb: SWAP6 000001fc: POP 000001fd: POP 000001fe: POP 000001ff: POP 00000200: POP 00000201: POP 00000202: JUMP 00000203: JUMPDEST 00000204: PUSH1 0x60 00000206: DUP4 00000207: ISZERO 00000208: PUSH2 0x0212 0000020b: JUMPI 0000020c: POP 0000020d: DUP2 0000020e: PUSH2 0x004e 00000211: JUMP 00000212: JUMPDEST 00000213: DUP3 00000214: MLOAD 00000215: ISZERO 00000216: PUSH2 0x0222 00000219: JUMPI 0000021a: DUP3 0000021b: MLOAD 0000021c: DUP1 0000021d: DUP5 0000021e: PUSH1 0x20 00000220: ADD 00000221: REVERT 00000222: JUMPDEST 00000223: DUP2 00000224: PUSH1 0x40 00000226: MLOAD 00000227: PUSH3 0x461bcd 0000022b: PUSH1 0xe5 0000022d: SHL 0000022e: DUP2 0000022f: MSTORE 00000230: PUSH1 0x04 00000232: ADD 00000233: PUSH2 0x0185 00000236: SWAP2 00000237: SWAP1 00000238: PUSH2 0x0281 0000023b: JUMP 0000023c: JUMPDEST 0000023d: PUSH1 0x00 0000023f: PUSH1 0x20 00000241: DUP3 00000242: DUP5 00000243: SUB 00000244: SLT 00000245: ISZERO 00000246: PUSH2 0x024e 00000249: JUMPI 0000024a: PUSH1 0x00 0000024c: DUP1 0000024d: REVERT 0000024e: JUMPDEST 0000024f: DUP2 00000250: MLOAD 00000251: PUSH1 0x01 00000253: PUSH1 0x01 00000255: PUSH1 0xa0 00000257: SHL 00000258: SUB 00000259: DUP2 0000025a: AND 0000025b: DUP2 0000025c: EQ 0000025d: PUSH2 0x004e 00000260: JUMPI 00000261: PUSH1 0x00 00000263: DUP1 00000264: REVERT 00000265: JUMPDEST 00000266: PUSH1 0x00 00000268: DUP3 00000269: MLOAD 0000026a: PUSH2 0x0277 0000026d: DUP2 0000026e: DUP5 0000026f: PUSH1 0x20 00000271: DUP8 00000272: ADD 00000273: PUSH2 0x02b4 00000276: JUMP 00000277: JUMPDEST 00000278: SWAP2 00000279: SWAP1 0000027a: SWAP2 0000027b: ADD 0000027c: SWAP3 0000027d: SWAP2 0000027e: POP 0000027f: POP 00000280: JUMP 00000281: JUMPDEST 00000282: PUSH1 0x20 00000284: DUP2 00000285: MSTORE 00000286: PUSH1 0x00 00000288: DUP3 00000289: MLOAD 0000028a: DUP1 0000028b: PUSH1 0x20 0000028d: DUP5 0000028e: ADD 0000028f: MSTORE 00000290: PUSH2 0x02a0 00000293: DUP2 00000294: PUSH1 0x40 00000296: DUP6 00000297: ADD 00000298: PUSH1 0x20 0000029a: DUP8 0000029b: ADD 0000029c: PUSH2 0x02b4 0000029f: JUMP 000002a0: JUMPDEST 000002a1: PUSH1 0x1f 000002a3: ADD 000002a4: PUSH1 0x1f 000002a6: NOT 000002a7: AND 000002a8: SWAP2 000002a9: SWAP1 000002aa: SWAP2 000002ab: ADD 000002ac: PUSH1 0x40 000002ae: ADD 000002af: SWAP3 000002b0: SWAP2 000002b1: POP 000002b2: POP 000002b3: JUMP 000002b4: JUMPDEST 000002b5: PUSH1 0x00 000002b7: JUMPDEST 000002b8: DUP4 000002b9: DUP2 000002ba: LT 000002bb: ISZERO 000002bc: PUSH2 0x02cf 000002bf: JUMPI 000002c0: DUP2 000002c1: DUP2 000002c2: ADD 000002c3: MLOAD 000002c4: DUP4 000002c5: DUP3 000002c6: ADD 000002c7: MSTORE 000002c8: PUSH1 0x20 000002ca: ADD 000002cb: PUSH2 0x02b7 000002ce: JUMP 000002cf: JUMPDEST 000002d0: DUP4 000002d1: DUP2 000002d2: GT 000002d3: ISZERO 000002d4: PUSH2 0x02de 000002d7: JUMPI 000002d8: PUSH1 0x00 000002da: DUP5 000002db: DUP5 000002dc: ADD 000002dd: MSTORE 000002de: JUMPDEST 000002df: POP 000002e0: POP 000002e1: POP 000002e2: POP 000002e3: JUMP 000002e4: INVALID 000002e5: COINBASE 000002e6: PUSH5 0x6472657373 000002ec: GASPRICE 000002ed: KECCAK256 000002ee: PUSH13 0x6f772d6c6576656c2064656c65 000002fc: PUSH8 0x6174652063616c6c 00000305: KECCAK256 00000306: PUSH7 0x61696c6564a264 0000030e: PUSH10 0x706673582212200fee2b 00000319: PUSH1 0x77 0000031b: UNKNOWN(0x4C) 0000031c: UNKNOWN(0xE1) 0000031d: UNKNOWN(0x4C) 0000031e: MSTORE 0000031f: UNKNOWN(0xAF) 00000320: UNKNOWN(0xEB) 00000321: CLZ 00000322: UNKNOWN(0xB5) 00000323: UNKNOWN(0xAE) 00000324: ADDRESS 00000325: SMOD 00000326: BLOCKHASH 00000327: CALL 00000328: CALLER 00000329: UNKNOWN(0xD4) 0000032a: UNKNOWN(0xD6) 0000032b: UNKNOWN(0xCA) 0000032c: BYTE 0000032d: SDIV 0000032e: MSIZE 0000032f: RETURN 00000330: BYTE 00000331: UNKNOWN(0xD6) 00000332: PUSH29
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0xcc327a5d83ce8c469af340b75d35509c39a1d179b8265ad6327228949d050d5b
call_targets:
0x126161afbcd8c8f18d16054f0143374a22421a60
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xcc327a5d83ce8c469af340b75d35509c39a1d179b8265ad6327228949d050d5b",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x126161afbcd8c8f18d16054f0143374a22421a60"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 276,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 437,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xcc327a5d83ce8c469af340b75d35509c39a1d179b8265ad6327228949d050d5b
call_targets:
0x53af4705e25e0eea416ffb470a3cad970b4fe66b
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xcc327a5d83ce8c469af340b75d35509c39a1d179b8265ad6327228949d050d5b",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x53af4705e25e0eea416ffb470a3cad970b4fe66b"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 807,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xcc327a5d83ce8c469af340b75d35509c39a1d179b8265ad6327228949d050d5b
call_targets:
0x53af4705e25e0eea416ffb470a3cad970b4fe66b
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xcc327a5d83ce8c469af340b75d35509c39a1d179b8265ad6327228949d050d5b",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x53af4705e25e0eea416ffb470a3cad970b4fe66b"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 807,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|