Analysis Run

019b477e-c8fa-73dd-8b12-02093ecaaafd

complete

Chain ID

1

Address

0xa6646162ab02e9945ceddf950167f892f682c985

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Verified

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
26243	artifact.fetch	complete	1 / 3	3 months ago
26244	tool.cast_disasm	complete	1 / 3	3 months ago
112759	analysis.bundle	complete	1 / 3	1 week ago
112760	capability.graph	complete	1 / 3	1 week ago
112761	detector.run	complete	1 / 3	1 week ago
112762	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

2

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

0

EXT*/BALANCE

3

Total opcodes

1124

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x004e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x3659cfe6
00000019: EQ
0000001a: PUSH2 0x0065
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x4f1ef286
00000024: EQ
00000025: PUSH2 0x0085
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x5c60da1b
0000002f: EQ
00000030: PUSH2 0x0098
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x8f283970
0000003a: EQ
0000003b: PUSH2 0x00c9
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf851a440
00000045: EQ
00000046: PUSH2 0x00e9
00000049: JUMPI
0000004a: PUSH2 0x005d
0000004d: JUMP
0000004e: JUMPDEST
0000004f: CALLDATASIZE
00000050: PUSH2 0x005d
00000053: JUMPI
00000054: PUSH2 0x005b
00000057: PUSH2 0x00fe
0000005a: JUMP
0000005b: JUMPDEST
0000005c: STOP
0000005d: JUMPDEST
0000005e: PUSH2 0x005b
00000061: PUSH2 0x00fe
00000064: JUMP
00000065: JUMPDEST
00000066: CALLVALUE
00000067: DUP1
00000068: ISZERO
00000069: PUSH2 0x0071
0000006c: JUMPI
0000006d: PUSH1 0x00
0000006f: DUP1
00000070: REVERT
00000071: JUMPDEST
00000072: POP
00000073: PUSH2 0x005b
00000076: PUSH2 0x0080
00000079: CALLDATASIZE
0000007a: PUSH1 0x04
0000007c: PUSH2 0x064f
0000007f: JUMP
00000080: JUMPDEST
00000081: PUSH2 0x0110
00000084: JUMP
00000085: JUMPDEST
00000086: PUSH2 0x005b
00000089: PUSH2 0x0093
0000008c: CALLDATASIZE
0000008d: PUSH1 0x04
0000008f: PUSH2 0x066a
00000092: JUMP
00000093: JUMPDEST
00000094: PUSH2 0x0157
00000097: JUMP
00000098: JUMPDEST
00000099: CALLVALUE
0000009a: DUP1
0000009b: ISZERO
0000009c: PUSH2 0x00a4
0000009f: JUMPI
000000a0: PUSH1 0x00
000000a2: DUP1
000000a3: REVERT
000000a4: JUMPDEST
000000a5: POP
000000a6: PUSH2 0x00ad
000000a9: PUSH2 0x01c8
000000ac: JUMP
000000ad: JUMPDEST
000000ae: PUSH1 0x40
000000b0: MLOAD
000000b1: PUSH1 0x01
000000b3: PUSH1 0x01
000000b5: PUSH1 0xa0
000000b7: SHL
000000b8: SUB
000000b9: SWAP1
000000ba: SWAP2
000000bb: AND
000000bc: DUP2
000000bd: MSTORE
000000be: PUSH1 0x20
000000c0: ADD
000000c1: PUSH1 0x40
000000c3: MLOAD
000000c4: DUP1
000000c5: SWAP2
000000c6: SUB
000000c7: SWAP1
000000c8: RETURN
000000c9: JUMPDEST
000000ca: CALLVALUE
000000cb: DUP1
000000cc: ISZERO
000000cd: PUSH2 0x00d5
000000d0: JUMPI
000000d1: PUSH1 0x00
000000d3: DUP1
000000d4: REVERT
000000d5: JUMPDEST
000000d6: POP
000000d7: PUSH2 0x005b
000000da: PUSH2 0x00e4
000000dd: CALLDATASIZE
000000de: PUSH1 0x04
000000e0: PUSH2 0x064f
000000e3: JUMP
000000e4: JUMPDEST
000000e5: PUSH2 0x0203
000000e8: JUMP
000000e9: JUMPDEST
000000ea: CALLVALUE
000000eb: DUP1
000000ec: ISZERO
000000ed: PUSH2 0x00f5
000000f0: JUMPI
000000f1: PUSH1 0x00
000000f3: DUP1
000000f4: REVERT
000000f5: JUMPDEST
000000f6: POP
000000f7: PUSH2 0x00ad
000000fa: PUSH2 0x022d
000000fd: JUMP
000000fe: JUMPDEST
000000ff: PUSH2 0x010e
00000102: PUSH2 0x0109
00000105: PUSH2 0x0293
00000108: JUMP
00000109: JUMPDEST
0000010a: PUSH2 0x029d
0000010d: JUMP
0000010e: JUMPDEST
0000010f: JUMP
00000110: JUMPDEST
00000111: PUSH2 0x0118
00000114: PUSH2 0x02c1
00000117: JUMP
00000118: JUMPDEST
00000119: PUSH1 0x01
0000011b: PUSH1 0x01
0000011d: PUSH1 0xa0
0000011f: SHL
00000120: SUB
00000121: AND
00000122: CALLER
00000123: PUSH1 0x01
00000125: PUSH1 0x01
00000127: PUSH1 0xa0
00000129: SHL
0000012a: SUB
0000012b: AND
0000012c: EQ
0000012d: ISZERO
0000012e: PUSH2 0x014f
00000131: JUMPI
00000132: PUSH2 0x014c
00000135: DUP2
00000136: PUSH1 0x40
00000138: MLOAD
00000139: DUP1
0000013a: PUSH1 0x20
0000013c: ADD
0000013d: PUSH1 0x40
0000013f: MSTORE
00000140: DUP1
00000141: PUSH1 0x00
00000143: DUP2
00000144: MSTORE
00000145: POP
00000146: PUSH1 0x00
00000148: PUSH2 0x02f4
0000014b: JUMP
0000014c: JUMPDEST
0000014d: POP
0000014e: JUMP
0000014f: JUMPDEST
00000150: PUSH2 0x014c
00000153: PUSH2 0x00fe
00000156: JUMP
00000157: JUMPDEST
00000158: PUSH2 0x015f
0000015b: PUSH2 0x02c1
0000015e: JUMP
0000015f: JUMPDEST
00000160: PUSH1 0x01
00000162: PUSH1 0x01
00000164: PUSH1 0xa0
00000166: SHL
00000167: SUB
00000168: AND
00000169: CALLER
0000016a: PUSH1 0x01
0000016c: PUSH1 0x01
0000016e: PUSH1 0xa0
00000170: SHL
00000171: SUB
00000172: AND
00000173: EQ
00000174: ISZERO
00000175: PUSH2 0x01c0
00000178: JUMPI
00000179: PUSH2 0x01bb
0000017c: DUP4
0000017d: DUP4
0000017e: DUP4
0000017f: DUP1
00000180: DUP1
00000181: PUSH1 0x1f
00000183: ADD
00000184: PUSH1 0x20
00000186: DUP1
00000187: SWAP2
00000188: DIV
00000189: MUL
0000018a: PUSH1 0x20
0000018c: ADD
0000018d: PUSH1 0x40
0000018f: MLOAD
00000190: SWAP1
00000191: DUP2
00000192: ADD
00000193: PUSH1 0x40
00000195: MSTORE
00000196: DUP1
00000197: SWAP4
00000198: SWAP3
00000199: SWAP2
0000019a: SWAP1
0000019b: DUP2
0000019c: DUP2
0000019d: MSTORE
0000019e: PUSH1 0x20
000001a0: ADD
000001a1: DUP4
000001a2: DUP4
000001a3: DUP1
000001a4: DUP3
000001a5: DUP5
000001a6: CALLDATACOPY
000001a7: PUSH1 0x00
000001a9: SWAP3
000001aa: ADD
000001ab: SWAP2
000001ac: SWAP1
000001ad: SWAP2
000001ae: MSTORE
000001af: POP
000001b0: PUSH1 0x01
000001b2: SWAP3
000001b3: POP
000001b4: PUSH2 0x02f4
000001b7: SWAP2
000001b8: POP
000001b9: POP
000001ba: JUMP
000001bb: JUMPDEST
000001bc: POP
000001bd: POP
000001be: POP
000001bf: JUMP
000001c0: JUMPDEST
000001c1: PUSH2 0x01bb
000001c4: PUSH2 0x00fe
000001c7: JUMP
000001c8: JUMPDEST
000001c9: PUSH1 0x00
000001cb: PUSH2 0x01d2
000001ce: PUSH2 0x02c1
000001d1: JUMP
000001d2: JUMPDEST
000001d3: PUSH1 0x01
000001d5: PUSH1 0x01
000001d7: PUSH1 0xa0
000001d9: SHL
000001da: SUB
000001db: AND
000001dc: CALLER
000001dd: PUSH1 0x01
000001df: PUSH1 0x01
000001e1: PUSH1 0xa0
000001e3: SHL
000001e4: SUB
000001e5: AND
000001e6: EQ
000001e7: ISZERO
000001e8: PUSH2 0x01f8
000001eb: JUMPI
000001ec: PUSH2 0x01f3
000001ef: PUSH2 0x0293
000001f2: JUMP
000001f3: JUMPDEST
000001f4: SWAP1
000001f5: POP
000001f6: SWAP1
000001f7: JUMP
000001f8: JUMPDEST
000001f9: PUSH2 0x0200
000001fc: PUSH2 0x00fe
000001ff: JUMP
00000200: JUMPDEST
00000201: SWAP1
00000202: JUMP
00000203: JUMPDEST
00000204: PUSH2 0x020b
00000207: PUSH2 0x02c1
0000020a: JUMP
0000020b: JUMPDEST
0000020c: PUSH1 0x01
0000020e: PUSH1 0x01
00000210: PUSH1 0xa0
00000212: SHL
00000213: SUB
00000214: AND
00000215: CALLER
00000216: PUSH1 0x01
00000218: PUSH1 0x01
0000021a: PUSH1 0xa0
0000021c: SHL
0000021d: SUB
0000021e: AND
0000021f: EQ
00000220: ISZERO
00000221: PUSH2 0x014f
00000224: JUMPI
00000225: PUSH2 0x014c
00000228: DUP2
00000229: PUSH2 0x031f
0000022c: JUMP
0000022d: JUMPDEST
0000022e: PUSH1 0x00
00000230: PUSH2 0x0237
00000233: PUSH2 0x02c1
00000236: JUMP
00000237: JUMPDEST
00000238: PUSH1 0x01
0000023a: PUSH1 0x01
0000023c: PUSH1 0xa0
0000023e: SHL
0000023f: SUB
00000240: AND
00000241: CALLER
00000242: PUSH1 0x01
00000244: PUSH1 0x01
00000246: PUSH1 0xa0
00000248: SHL
00000249: SUB
0000024a: AND
0000024b: EQ
0000024c: ISZERO
0000024d: PUSH2 0x01f8
00000250: JUMPI
00000251: PUSH2 0x01f3
00000254: PUSH2 0x02c1
00000257: JUMP
00000258: JUMPDEST
00000259: PUSH1 0x60
0000025b: PUSH2 0x027d
0000025e: DUP4
0000025f: DUP4
00000260: PUSH1 0x40
00000262: MLOAD
00000263: DUP1
00000264: PUSH1 0x60
00000266: ADD
00000267: PUSH1 0x40
00000269: MSTORE
0000026a: DUP1
0000026b: PUSH1 0x27
0000026d: DUP2
0000026e: MSTORE
0000026f: PUSH1 0x20
00000271: ADD
00000272: PUSH2 0x0769
00000275: PUSH1 0x27
00000277: SWAP2
00000278: CODECOPY
00000279: PUSH2 0x0373
0000027c: JUMP
0000027d: JUMPDEST
0000027e: SWAP4
0000027f: SWAP3
00000280: POP
00000281: POP
00000282: POP
00000283: JUMP
00000284: JUMPDEST
00000285: PUSH1 0x01
00000287: PUSH1 0x01
00000289: PUSH1 0xa0
0000028b: SHL
0000028c: SUB
0000028d: AND
0000028e: EXTCODESIZE
0000028f: ISZERO
00000290: ISZERO
00000291: SWAP1
00000292: JUMP
00000293: JUMPDEST
00000294: PUSH1 0x00
00000296: PUSH2 0x01f3
00000299: PUSH2 0x0455
0000029c: JUMP
0000029d: JUMPDEST
0000029e: CALLDATASIZE
0000029f: PUSH1 0x00
000002a1: DUP1
000002a2: CALLDATACOPY
000002a3: PUSH1 0x00
000002a5: DUP1
000002a6: CALLDATASIZE
000002a7: PUSH1 0x00
000002a9: DUP5
000002aa: GAS
000002ab: DELEGATECALL
000002ac: RETURNDATASIZE
000002ad: PUSH1 0x00
000002af: DUP1
000002b0: RETURNDATACOPY
000002b1: DUP1
000002b2: DUP1
000002b3: ISZERO
000002b4: PUSH2 0x02bc
000002b7: JUMPI
000002b8: RETURNDATASIZE
000002b9: PUSH1 0x00
000002bb: RETURN
000002bc: JUMPDEST
000002bd: RETURNDATASIZE
000002be: PUSH1 0x00
000002c0: REVERT
000002c1: JUMPDEST
000002c2: PUSH1 0x00
000002c4: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000002e5: JUMPDEST
000002e6: SLOAD
000002e7: PUSH1 0x01
000002e9: PUSH1 0x01
000002eb: PUSH1 0xa0
000002ed: SHL
000002ee: SUB
000002ef: AND
000002f0: SWAP2
000002f1: SWAP1
000002f2: POP
000002f3: JUMP
000002f4: JUMPDEST
000002f5: PUSH2 0x02fd
000002f8: DUP4
000002f9: PUSH2 0x047d
000002fc: JUMP
000002fd: JUMPDEST
000002fe: PUSH1 0x00
00000300: DUP3
00000301: MLOAD
00000302: GT
00000303: DUP1
00000304: PUSH2 0x030a
00000307: JUMPI
00000308: POP
00000309: DUP1
0000030a: JUMPDEST
0000030b: ISZERO
0000030c: PUSH2 0x01bb
0000030f: JUMPI
00000310: PUSH2 0x0319
00000313: DUP4
00000314: DUP4
00000315: PUSH2 0x0258
00000318: JUMP
00000319: JUMPDEST
0000031a: POP
0000031b: POP
0000031c: POP
0000031d: POP
0000031e: JUMP
0000031f: JUMPDEST
00000320: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
00000341: PUSH2 0x0348
00000344: PUSH2 0x02c1
00000347: JUMP
00000348: JUMPDEST
00000349: PUSH1 0x40
0000034b: DUP1
0000034c: MLOAD
0000034d: PUSH1 0x01
0000034f: PUSH1 0x01
00000351: PUSH1 0xa0
00000353: SHL
00000354: SUB
00000355: SWAP3
00000356: DUP4
00000357: AND
00000358: DUP2
00000359: MSTORE
0000035a: SWAP2
0000035b: DUP5
0000035c: AND
0000035d: PUSH1 0x20
0000035f: DUP4
00000360: ADD
00000361: MSTORE
00000362: ADD
00000363: PUSH1 0x40
00000365: MLOAD
00000366: DUP1
00000367: SWAP2
00000368: SUB
00000369: SWAP1
0000036a: LOG1
0000036b: PUSH2 0x014c
0000036e: DUP2
0000036f: PUSH2 0x04bd
00000372: JUMP
00000373: JUMPDEST
00000374: PUSH1 0x60
00000376: PUSH1 0x01
00000378: PUSH1 0x01
0000037a: PUSH1 0xa0
0000037c: SHL
0000037d: SUB
0000037e: DUP5
0000037f: AND
00000380: EXTCODESIZE
00000381: PUSH2 0x03e0
00000384: JUMPI
00000385: PUSH1 0x40
00000387: MLOAD
00000388: PUSH3 0x461bcd
0000038c: PUSH1 0xe5
0000038e: SHL
0000038f: DUP2
00000390: MSTORE
00000391: PUSH1 0x20
00000393: PUSH1 0x04
00000395: DUP3
00000396: ADD
00000397: MSTORE
00000398: PUSH1 0x26
0000039a: PUSH1 0x24
0000039c: DUP3
0000039d: ADD
0000039e: MSTORE
0000039f: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f
000003c0: PUSH1 0x44
000003c2: DUP3
000003c3: ADD
000003c4: MSTORE
000003c5: PUSH6 0x1b9d1c9858dd
000003cc: PUSH1 0xd2
000003ce: SHL
000003cf: PUSH1 0x64
000003d1: DUP3
000003d2: ADD
000003d3: MSTORE
000003d4: PUSH1 0x84
000003d6: ADD
000003d7: JUMPDEST
000003d8: PUSH1 0x40
000003da: MLOAD
000003db: DUP1
000003dc: SWAP2
000003dd: SUB
000003de: SWAP1
000003df: REVERT
000003e0: JUMPDEST
000003e1: PUSH1 0x00
000003e3: DUP1
000003e4: DUP6
000003e5: PUSH1 0x01
000003e7: PUSH1 0x01
000003e9: PUSH1 0xa0
000003eb: SHL
000003ec: SUB
000003ed: AND
000003ee: DUP6
000003ef: PUSH1 0x40
000003f1: MLOAD
000003f2: PUSH2 0x03fb
000003f5: SWAP2
000003f6: SWAP1
000003f7: PUSH2 0x0719
000003fa: JUMP
000003fb: JUMPDEST
000003fc: PUSH1 0x00
000003fe: PUSH1 0x40
00000400: MLOAD
00000401: DUP1
00000402: DUP4
00000403: SUB
00000404: DUP2
00000405: DUP6
00000406: GAS
00000407: DELEGATECALL
00000408: SWAP2
00000409: POP
0000040a: POP
0000040b: RETURNDATASIZE
0000040c: DUP1
0000040d: PUSH1 0x00
0000040f: DUP2
00000410: EQ
00000411: PUSH2 0x0436
00000414: JUMPI
00000415: PUSH1 0x40
00000417: MLOAD
00000418: SWAP2
00000419: POP
0000041a: PUSH1 0x1f
0000041c: NOT
0000041d: PUSH1 0x3f
0000041f: RETURNDATASIZE
00000420: ADD
00000421: AND
00000422: DUP3
00000423: ADD
00000424: PUSH1 0x40
00000426: MSTORE
00000427: RETURNDATASIZE
00000428: DUP3
00000429: MSTORE
0000042a: RETURNDATASIZE
0000042b: PUSH1 0x00
0000042d: PUSH1 0x20
0000042f: DUP5
00000430: ADD
00000431: RETURNDATACOPY
00000432: PUSH2 0x043b
00000435: JUMP
00000436: JUMPDEST
00000437: PUSH1 0x60
00000439: SWAP2
0000043a: POP
0000043b: JUMPDEST
0000043c: POP
0000043d: SWAP2
0000043e: POP
0000043f: SWAP2
00000440: POP
00000441: PUSH2 0x044b
00000444: DUP3
00000445: DUP3
00000446: DUP7
00000447: PUSH2 0x0566
0000044a: JUMP
0000044b: JUMPDEST
0000044c: SWAP7
0000044d: SWAP6
0000044e: POP
0000044f: POP
00000450: POP
00000451: POP
00000452: POP
00000453: POP
00000454: JUMP
00000455: JUMPDEST
00000456: PUSH1 0x00
00000458: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000479: PUSH2 0x02e5
0000047c: JUMP
0000047d: JUMPDEST
0000047e: PUSH2 0x0486
00000481: DUP2
00000482: PUSH2 0x059f
00000485: JUMP
00000486: JUMPDEST
00000487: PUSH1 0x40
00000489: MLOAD
0000048a: PUSH1 0x01
0000048c: PUSH1 0x01
0000048e: PUSH1 0xa0
00000490: SHL
00000491: SUB
00000492: DUP3
00000493: AND
00000494: SWAP1
00000495: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
000004b6: SWAP1
000004b7: PUSH1 0x00
000004b9: SWAP1
000004ba: LOG2
000004bb: POP
000004bc: JUMP
000004bd: JUMPDEST
000004be: PUSH1 0x01
000004c0: PUSH1 0x01
000004c2: PUSH1 0xa0
000004c4: SHL
000004c5: SUB
000004c6: DUP2
000004c7: AND
000004c8: PUSH2 0x0522
000004cb: JUMPI
000004cc: PUSH1 0x40
000004ce: MLOAD
000004cf: PUSH3 0x461bcd
000004d3: PUSH1 0xe5
000004d5: SHL
000004d6: DUP2
000004d7: MSTORE
000004d8: PUSH1 0x20
000004da: PUSH1 0x04
000004dc: DUP3
000004dd: ADD
000004de: MSTORE
000004df: PUSH1 0x26
000004e1: PUSH1 0x24
000004e3: DUP3
000004e4: ADD
000004e5: MSTORE
000004e6: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
00000507: PUSH1 0x44
00000509: DUP3
0000050a: ADD
0000050b: MSTORE
0000050c: PUSH6 0x646472657373
00000513: PUSH1 0xd0
00000515: SHL
00000516: PUSH1 0x64
00000518: DUP3
00000519: ADD
0000051a: MSTORE
0000051b: PUSH1 0x84
0000051d: ADD
0000051e: PUSH2 0x03d7
00000521: JUMP
00000522: JUMPDEST
00000523: DUP1
00000524: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000545: JUMPDEST
00000546: DUP1
00000547: SLOAD
00000548: PUSH1 0x01
0000054a: PUSH1 0x01
0000054c: PUSH1 0xa0
0000054e: SHL
0000054f: SUB
00000550: NOT
00000551: AND
00000552: PUSH1 0x01
00000554: PUSH1 0x01
00000556: PUSH1 0xa0
00000558: SHL
00000559: SUB
0000055a: SWAP3
0000055b: SWAP1
0000055c: SWAP3
0000055d: AND
0000055e: SWAP2
0000055f: SWAP1
00000560: SWAP2
00000561: OR
00000562: SWAP1
00000563: SSTORE
00000564: POP
00000565: JUMP
00000566: JUMPDEST
00000567: PUSH1 0x60
00000569: DUP4
0000056a: ISZERO
0000056b: PUSH2 0x0575
0000056e: JUMPI
0000056f: POP
00000570: DUP2
00000571: PUSH2 0x027d
00000574: JUMP
00000575: JUMPDEST
00000576: DUP3
00000577: MLOAD
00000578: ISZERO
00000579: PUSH2 0x0585
0000057c: JUMPI
0000057d: DUP3
0000057e: MLOAD
0000057f: DUP1
00000580: DUP5
00000581: PUSH1 0x20
00000583: ADD
00000584: REVERT
00000585: JUMPDEST
00000586: DUP2
00000587: PUSH1 0x40
00000589: MLOAD
0000058a: PUSH3 0x461bcd
0000058e: PUSH1 0xe5
00000590: SHL
00000591: DUP2
00000592: MSTORE
00000593: PUSH1 0x04
00000595: ADD
00000596: PUSH2 0x03d7
00000599: SWAP2
0000059a: SWAP1
0000059b: PUSH2 0x0735
0000059e: JUMP
0000059f: JUMPDEST
000005a0: PUSH1 0x01
000005a2: PUSH1 0x01
000005a4: PUSH1 0xa0
000005a6: SHL
000005a7: SUB
000005a8: DUP2
000005a9: AND
000005aa: EXTCODESIZE
000005ab: PUSH2 0x060c
000005ae: JUMPI
000005af: PUSH1 0x40
000005b1: MLOAD
000005b2: PUSH3 0x461bcd
000005b6: PUSH1 0xe5
000005b8: SHL
000005b9: DUP2
000005ba: MSTORE
000005bb: PUSH1 0x20
000005bd: PUSH1 0x04
000005bf: DUP3
000005c0: ADD
000005c1: MSTORE
000005c2: PUSH1 0x2d
000005c4: PUSH1 0x24
000005c6: DUP3
000005c7: ADD
000005c8: MSTORE
000005c9: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
000005ea: PUSH1 0x44
000005ec: DUP3
000005ed: ADD
000005ee: MSTORE
000005ef: PUSH13 0x1bdd08184818dbdb9d1c9858dd
000005fd: PUSH1 0x9a
000005ff: SHL
00000600: PUSH1 0x64
00000602: DUP3
00000603: ADD
00000604: MSTORE
00000605: PUSH1 0x84
00000607: ADD
00000608: PUSH2 0x03d7
0000060b: JUMP
0000060c: JUMPDEST
0000060d: DUP1
0000060e: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000062f: PUSH2 0x0545
00000632: JUMP
00000633: JUMPDEST
00000634: DUP1
00000635: CALLDATALOAD
00000636: PUSH1 0x01
00000638: PUSH1 0x01
0000063a: PUSH1 0xa0
0000063c: SHL
0000063d: SUB
0000063e: DUP2
0000063f: AND
00000640: DUP2
00000641: EQ
00000642: PUSH2 0x064a
00000645: JUMPI
00000646: PUSH1 0x00
00000648: DUP1
00000649: REVERT
0000064a: JUMPDEST
0000064b: SWAP2
0000064c: SWAP1
0000064d: POP
0000064e: JUMP
0000064f: JUMPDEST
00000650: PUSH1 0x00
00000652: PUSH1 0x20
00000654: DUP3
00000655: DUP5
00000656: SUB
00000657: SLT
00000658: ISZERO
00000659: PUSH2 0x0661
0000065c: JUMPI
0000065d: PUSH1 0x00
0000065f: DUP1
00000660: REVERT
00000661: JUMPDEST
00000662: PUSH2 0x027d
00000665: DUP3
00000666: PUSH2 0x0633
00000669: JUMP
0000066a: JUMPDEST
0000066b: PUSH1 0x00
0000066d: DUP1
0000066e: PUSH1 0x00
00000670: PUSH1 0x40
00000672: DUP5
00000673: DUP7
00000674: SUB
00000675: SLT
00000676: ISZERO
00000677: PUSH2 0x067f
0000067a: JUMPI
0000067b: PUSH1 0x00
0000067d: DUP1
0000067e: REVERT
0000067f: JUMPDEST
00000680: PUSH2 0x0688
00000683: DUP5
00000684: PUSH2 0x0633
00000687: JUMP
00000688: JUMPDEST
00000689: SWAP3
0000068a: POP
0000068b: PUSH1 0x20
0000068d: DUP5
0000068e: ADD
0000068f: CALLDATALOAD
00000690: PUSH8 0xffffffffffffffff
00000699: DUP1
0000069a: DUP3
0000069b: GT
0000069c: ISZERO
0000069d: PUSH2 0x06a5
000006a0: JUMPI
000006a1: PUSH1 0x00
000006a3: DUP1
000006a4: REVERT
000006a5: JUMPDEST
000006a6: DUP2
000006a7: DUP7
000006a8: ADD
000006a9: SWAP2
000006aa: POP
000006ab: DUP7
000006ac: PUSH1 0x1f
000006ae: DUP4
000006af: ADD
000006b0: SLT
000006b1: PUSH2 0x06b9
000006b4: JUMPI
000006b5: PUSH1 0x00
000006b7: DUP1
000006b8: REVERT
000006b9: JUMPDEST
000006ba: DUP2
000006bb: CALLDATALOAD
000006bc: DUP2
000006bd: DUP2
000006be: GT
000006bf: ISZERO
000006c0: PUSH2 0x06c8
000006c3: JUMPI
000006c4: PUSH1 0x00
000006c6: DUP1
000006c7: REVERT
000006c8: JUMPDEST
000006c9: DUP8
000006ca: PUSH1 0x20
000006cc: DUP3
000006cd: DUP6
000006ce: ADD
000006cf: ADD
000006d0: GT
000006d1: ISZERO
000006d2: PUSH2 0x06da
000006d5: JUMPI
000006d6: PUSH1 0x00
000006d8: DUP1
000006d9: REVERT
000006da: JUMPDEST
000006db: PUSH1 0x20
000006dd: DUP4
000006de: ADD
000006df: SWAP5
000006e0: POP
000006e1: DUP1
000006e2: SWAP4
000006e3: POP
000006e4: POP
000006e5: POP
000006e6: POP
000006e7: SWAP3
000006e8: POP
000006e9: SWAP3
000006ea: POP
000006eb: SWAP3
000006ec: JUMP
000006ed: JUMPDEST
000006ee: PUSH1 0x00
000006f0: JUMPDEST
000006f1: DUP4
000006f2: DUP2
000006f3: LT
000006f4: ISZERO
000006f5: PUSH2 0x0708
000006f8: JUMPI
000006f9: DUP2
000006fa: DUP2
000006fb: ADD
000006fc: MLOAD
000006fd: DUP4
000006fe: DUP3
000006ff: ADD
00000700: MSTORE
00000701: PUSH1 0x20
00000703: ADD
00000704: PUSH2 0x06f0
00000707: JUMP
00000708: JUMPDEST
00000709: DUP4
0000070a: DUP2
0000070b: GT
0000070c: ISZERO
0000070d: PUSH2 0x0319
00000710: JUMPI
00000711: POP
00000712: POP
00000713: PUSH1 0x00
00000715: SWAP2
00000716: ADD
00000717: MSTORE
00000718: JUMP
00000719: JUMPDEST
0000071a: PUSH1 0x00
0000071c: DUP3
0000071d: MLOAD
0000071e: PUSH2 0x072b
00000721: DUP2
00000722: DUP5
00000723: PUSH1 0x20
00000725: DUP8
00000726: ADD
00000727: PUSH2 0x06ed
0000072a: JUMP
0000072b: JUMPDEST
0000072c: SWAP2
0000072d: SWAP1
0000072e: SWAP2
0000072f: ADD
00000730: SWAP3
00000731: SWAP2
00000732: POP
00000733: POP
00000734: JUMP
00000735: JUMPDEST
00000736: PUSH1 0x20
00000738: DUP2
00000739: MSTORE
0000073a: PUSH1 0x00
0000073c: DUP3
0000073d: MLOAD
0000073e: DUP1
0000073f: PUSH1 0x20
00000741: DUP5
00000742: ADD
00000743: MSTORE
00000744: PUSH2 0x0754
00000747: DUP2
00000748: PUSH1 0x40
0000074a: DUP6
0000074b: ADD
0000074c: PUSH1 0x20
0000074e: DUP8
0000074f: ADD
00000750: PUSH2 0x06ed
00000753: JUMP
00000754: JUMPDEST
00000755: PUSH1 0x1f
00000757: ADD
00000758: PUSH1 0x1f
0000075a: NOT
0000075b: AND
0000075c: SWAP2
0000075d: SWAP1
0000075e: SWAP2
0000075f: ADD
00000760: PUSH1 0x40
00000762: ADD
00000763: SWAP3
00000764: SWAP2
00000765: POP
00000766: POP
00000767: JUMP
00000768: INVALID
00000769: COINBASE
0000076a: PUSH5 0x6472657373
00000770: GASPRICE
00000771: KECCAK256
00000772: PUSH13 0x6f772d6c6576656c2064656c65
00000780: PUSH8 0x6174652063616c6c
00000789: KECCAK256
0000078a: PUSH7 0x61696c6564a264
00000792: PUSH10 0x70667358221220d5b5e2
0000079d: GASPRICE
0000079e: UNKNOWN(0xF6)
0000079f: UNKNOWN(0xB0)
000007a0: DUP3
000007a1: TSTORE
000007a2: AND
000007a3: DUP10
000007a4: PUSH22 0x5fa0b6b5d5e8ce8304bec87ddd0701741a0be19bdb64
000007bb: PUSH20

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0x2b6ca2793b8d964035df2c80b335abfe04f311e5fb47d62863507bccb645b452 call_targets: 0x4dd41325c5a434376777e698268b7f46c176143d target_varies: no classification: constant_target validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "sink_reached", "attempts": 2, "trace_id": "0x2b6ca2793b8d964035df2c80b335abfe04f311e5fb47d62863507bccb645b452", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x4dd41325c5a434376777e698268b7f46c176143d" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x3659cfe6", "selector": "0x3659cfe6", "calldata_variants": [ "0x3659cfe6", "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4f1ef286", "selector": "0x4f1ef286", "calldata_variants": [ "0x4f1ef286", "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x5c60da1b", "selector": "0x5c60da1b", "calldata_variants": [ "0x5c60da1b", "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8f283970", "selector": "0x8f283970", "calldata_variants": [ "0x8f283970", "0x8f2839700000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf851a440", "selector": "0xf851a440", "calldata_variants": [ "0xf851a440", "0xf851a4400000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 683, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1031, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 2, "untrusted_delegatecall_count": 2 }

Severity