Analysis Run

019b477e-c961-7044-a84c-61b993f0438a

complete

Chain ID

1

Address

0x64192819ac13ef72bf6b5ae239ac672b43a9af08

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Verified

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
26309	artifact.fetch	complete	1 / 3	3 months ago
26310	tool.cast_disasm	complete	1 / 3	3 months ago
110458	analysis.bundle	complete	1 / 3	1 week ago
110459	capability.graph	complete	1 / 3	1 week ago
110460	detector.run	complete	1 / 3	1 week ago
110461	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

3

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

0

EXT*/BALANCE

3

Total opcodes

1389

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0069
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x5c60da1b
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x5c60da1b
00000024: EQ
00000025: PUSH2 0x00c6
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8f283970
0000002f: EQ
00000030: PUSH2 0x00f7
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf851a440
0000003a: EQ
0000003b: PUSH2 0x0117
0000003e: JUMPI
0000003f: PUSH2 0x0078
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x3659cfe6
0000004a: EQ
0000004b: PUSH2 0x0080
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x4bb5274a
00000055: EQ
00000056: PUSH2 0x00a0
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0x4f1ef286
00000060: EQ
00000061: PUSH2 0x00b3
00000064: JUMPI
00000065: PUSH2 0x0078
00000068: JUMP
00000069: JUMPDEST
0000006a: CALLDATASIZE
0000006b: PUSH2 0x0078
0000006e: JUMPI
0000006f: PUSH2 0x0076
00000072: PUSH2 0x012c
00000075: JUMP
00000076: JUMPDEST
00000077: STOP
00000078: JUMPDEST
00000079: PUSH2 0x0076
0000007c: PUSH2 0x012c
0000007f: JUMP
00000080: JUMPDEST
00000081: CALLVALUE
00000082: DUP1
00000083: ISZERO
00000084: PUSH2 0x008c
00000087: JUMPI
00000088: PUSH1 0x00
0000008a: DUP1
0000008b: REVERT
0000008c: JUMPDEST
0000008d: POP
0000008e: PUSH2 0x0076
00000091: PUSH2 0x009b
00000094: CALLDATASIZE
00000095: PUSH1 0x04
00000097: PUSH2 0x07da
0000009a: JUMP
0000009b: JUMPDEST
0000009c: PUSH2 0x0146
0000009f: JUMP
000000a0: JUMPDEST
000000a1: PUSH2 0x0076
000000a4: PUSH2 0x00ae
000000a7: CALLDATASIZE
000000a8: PUSH1 0x04
000000aa: PUSH2 0x0824
000000ad: JUMP
000000ae: JUMPDEST
000000af: PUSH2 0x018d
000000b2: JUMP
000000b3: JUMPDEST
000000b4: PUSH2 0x0076
000000b7: PUSH2 0x00c1
000000ba: CALLDATASIZE
000000bb: PUSH1 0x04
000000bd: PUSH2 0x08d5
000000c0: JUMP
000000c1: JUMPDEST
000000c2: PUSH2 0x01dc
000000c5: JUMP
000000c6: JUMPDEST
000000c7: CALLVALUE
000000c8: DUP1
000000c9: ISZERO
000000ca: PUSH2 0x00d2
000000cd: JUMPI
000000ce: PUSH1 0x00
000000d0: DUP1
000000d1: REVERT
000000d2: JUMPDEST
000000d3: POP
000000d4: PUSH2 0x00db
000000d7: PUSH2 0x024d
000000da: JUMP
000000db: JUMPDEST
000000dc: PUSH1 0x40
000000de: MLOAD
000000df: PUSH1 0x01
000000e1: PUSH1 0x01
000000e3: PUSH1 0xa0
000000e5: SHL
000000e6: SUB
000000e7: SWAP1
000000e8: SWAP2
000000e9: AND
000000ea: DUP2
000000eb: MSTORE
000000ec: PUSH1 0x20
000000ee: ADD
000000ef: PUSH1 0x40
000000f1: MLOAD
000000f2: DUP1
000000f3: SWAP2
000000f4: SUB
000000f5: SWAP1
000000f6: RETURN
000000f7: JUMPDEST
000000f8: CALLVALUE
000000f9: DUP1
000000fa: ISZERO
000000fb: PUSH2 0x0103
000000fe: JUMPI
000000ff: PUSH1 0x00
00000101: DUP1
00000102: REVERT
00000103: JUMPDEST
00000104: POP
00000105: PUSH2 0x0076
00000108: PUSH2 0x0112
0000010b: CALLDATASIZE
0000010c: PUSH1 0x04
0000010e: PUSH2 0x07da
00000111: JUMP
00000112: JUMPDEST
00000113: PUSH2 0x0288
00000116: JUMP
00000117: JUMPDEST
00000118: CALLVALUE
00000119: DUP1
0000011a: ISZERO
0000011b: PUSH2 0x0123
0000011e: JUMPI
0000011f: PUSH1 0x00
00000121: DUP1
00000122: REVERT
00000123: JUMPDEST
00000124: POP
00000125: PUSH2 0x00db
00000128: PUSH2 0x02b2
0000012b: JUMP
0000012c: JUMPDEST
0000012d: PUSH2 0x0134
00000130: PUSH2 0x0318
00000133: JUMP
00000134: JUMPDEST
00000135: PUSH2 0x0144
00000138: PUSH2 0x013f
0000013b: PUSH2 0x03d2
0000013e: JUMP
0000013f: JUMPDEST
00000140: PUSH2 0x03dc
00000143: JUMP
00000144: JUMPDEST
00000145: JUMP
00000146: JUMPDEST
00000147: PUSH2 0x014e
0000014a: PUSH2 0x03fb
0000014d: JUMP
0000014e: JUMPDEST
0000014f: PUSH1 0x01
00000151: PUSH1 0x01
00000153: PUSH1 0xa0
00000155: SHL
00000156: SUB
00000157: AND
00000158: CALLER
00000159: PUSH1 0x01
0000015b: PUSH1 0x01
0000015d: PUSH1 0xa0
0000015f: SHL
00000160: SUB
00000161: AND
00000162: EQ
00000163: ISZERO
00000164: PUSH2 0x0185
00000167: JUMPI
00000168: PUSH2 0x0182
0000016b: DUP2
0000016c: PUSH1 0x40
0000016e: MLOAD
0000016f: DUP1
00000170: PUSH1 0x20
00000172: ADD
00000173: PUSH1 0x40
00000175: MSTORE
00000176: DUP1
00000177: PUSH1 0x00
00000179: DUP2
0000017a: MSTORE
0000017b: POP
0000017c: PUSH1 0x00
0000017e: PUSH2 0x042e
00000181: JUMP
00000182: JUMPDEST
00000183: POP
00000184: JUMP
00000185: JUMPDEST
00000186: PUSH2 0x0182
00000189: PUSH2 0x012c
0000018c: JUMP
0000018d: JUMPDEST
0000018e: PUSH2 0x0195
00000191: PUSH2 0x03fb
00000194: JUMP
00000195: JUMPDEST
00000196: PUSH1 0x01
00000198: PUSH1 0x01
0000019a: PUSH1 0xa0
0000019c: SHL
0000019d: SUB
0000019e: AND
0000019f: CALLER
000001a0: PUSH1 0x01
000001a2: PUSH1 0x01
000001a4: PUSH1 0xa0
000001a6: SHL
000001a7: SUB
000001a8: AND
000001a9: EQ
000001aa: ISZERO
000001ab: PUSH2 0x0185
000001ae: JUMPI
000001af: PUSH1 0x00
000001b1: PUSH2 0x01b8
000001b4: PUSH2 0x03d2
000001b7: JUMP
000001b8: JUMPDEST
000001b9: SWAP1
000001ba: POP
000001bb: PUSH1 0x00
000001bd: DUP1
000001be: DUP4
000001bf: MLOAD
000001c0: PUSH1 0x20
000001c2: DUP6
000001c3: ADD
000001c4: DUP5
000001c5: GAS
000001c6: DELEGATECALL
000001c7: RETURNDATASIZE
000001c8: PUSH1 0x00
000001ca: DUP1
000001cb: RETURNDATACOPY
000001cc: DUP1
000001cd: DUP1
000001ce: ISZERO
000001cf: PUSH2 0x01d7
000001d2: JUMPI
000001d3: RETURNDATASIZE
000001d4: PUSH1 0x00
000001d6: RETURN
000001d7: JUMPDEST
000001d8: RETURNDATASIZE
000001d9: PUSH1 0x00
000001db: REVERT
000001dc: JUMPDEST
000001dd: PUSH2 0x01e4
000001e0: PUSH2 0x03fb
000001e3: JUMP
000001e4: JUMPDEST
000001e5: PUSH1 0x01
000001e7: PUSH1 0x01
000001e9: PUSH1 0xa0
000001eb: SHL
000001ec: SUB
000001ed: AND
000001ee: CALLER
000001ef: PUSH1 0x01
000001f1: PUSH1 0x01
000001f3: PUSH1 0xa0
000001f5: SHL
000001f6: SUB
000001f7: AND
000001f8: EQ
000001f9: ISZERO
000001fa: PUSH2 0x0245
000001fd: JUMPI
000001fe: PUSH2 0x0240
00000201: DUP4
00000202: DUP4
00000203: DUP4
00000204: DUP1
00000205: DUP1
00000206: PUSH1 0x1f
00000208: ADD
00000209: PUSH1 0x20
0000020b: DUP1
0000020c: SWAP2
0000020d: DIV
0000020e: MUL
0000020f: PUSH1 0x20
00000211: ADD
00000212: PUSH1 0x40
00000214: MLOAD
00000215: SWAP1
00000216: DUP2
00000217: ADD
00000218: PUSH1 0x40
0000021a: MSTORE
0000021b: DUP1
0000021c: SWAP4
0000021d: SWAP3
0000021e: SWAP2
0000021f: SWAP1
00000220: DUP2
00000221: DUP2
00000222: MSTORE
00000223: PUSH1 0x20
00000225: ADD
00000226: DUP4
00000227: DUP4
00000228: DUP1
00000229: DUP3
0000022a: DUP5
0000022b: CALLDATACOPY
0000022c: PUSH1 0x00
0000022e: SWAP3
0000022f: ADD
00000230: SWAP2
00000231: SWAP1
00000232: SWAP2
00000233: MSTORE
00000234: POP
00000235: PUSH1 0x01
00000237: SWAP3
00000238: POP
00000239: PUSH2 0x042e
0000023c: SWAP2
0000023d: POP
0000023e: POP
0000023f: JUMP
00000240: JUMPDEST
00000241: POP
00000242: POP
00000243: POP
00000244: JUMP
00000245: JUMPDEST
00000246: PUSH2 0x0240
00000249: PUSH2 0x012c
0000024c: JUMP
0000024d: JUMPDEST
0000024e: PUSH1 0x00
00000250: PUSH2 0x0257
00000253: PUSH2 0x03fb
00000256: JUMP
00000257: JUMPDEST
00000258: PUSH1 0x01
0000025a: PUSH1 0x01
0000025c: PUSH1 0xa0
0000025e: SHL
0000025f: SUB
00000260: AND
00000261: CALLER
00000262: PUSH1 0x01
00000264: PUSH1 0x01
00000266: PUSH1 0xa0
00000268: SHL
00000269: SUB
0000026a: AND
0000026b: EQ
0000026c: ISZERO
0000026d: PUSH2 0x027d
00000270: JUMPI
00000271: PUSH2 0x0278
00000274: PUSH2 0x03d2
00000277: JUMP
00000278: JUMPDEST
00000279: SWAP1
0000027a: POP
0000027b: SWAP1
0000027c: JUMP
0000027d: JUMPDEST
0000027e: PUSH2 0x0285
00000281: PUSH2 0x012c
00000284: JUMP
00000285: JUMPDEST
00000286: SWAP1
00000287: JUMP
00000288: JUMPDEST
00000289: PUSH2 0x0290
0000028c: PUSH2 0x03fb
0000028f: JUMP
00000290: JUMPDEST
00000291: PUSH1 0x01
00000293: PUSH1 0x01
00000295: PUSH1 0xa0
00000297: SHL
00000298: SUB
00000299: AND
0000029a: CALLER
0000029b: PUSH1 0x01
0000029d: PUSH1 0x01
0000029f: PUSH1 0xa0
000002a1: SHL
000002a2: SUB
000002a3: AND
000002a4: EQ
000002a5: ISZERO
000002a6: PUSH2 0x0185
000002a9: JUMPI
000002aa: PUSH2 0x0182
000002ad: DUP2
000002ae: PUSH2 0x0459
000002b1: JUMP
000002b2: JUMPDEST
000002b3: PUSH1 0x00
000002b5: PUSH2 0x02bc
000002b8: PUSH2 0x03fb
000002bb: JUMP
000002bc: JUMPDEST
000002bd: PUSH1 0x01
000002bf: PUSH1 0x01
000002c1: PUSH1 0xa0
000002c3: SHL
000002c4: SUB
000002c5: AND
000002c6: CALLER
000002c7: PUSH1 0x01
000002c9: PUSH1 0x01
000002cb: PUSH1 0xa0
000002cd: SHL
000002ce: SUB
000002cf: AND
000002d0: EQ
000002d1: ISZERO
000002d2: PUSH2 0x027d
000002d5: JUMPI
000002d6: PUSH2 0x0278
000002d9: PUSH2 0x03fb
000002dc: JUMP
000002dd: JUMPDEST
000002de: PUSH1 0x60
000002e0: PUSH2 0x0302
000002e3: DUP4
000002e4: DUP4
000002e5: PUSH1 0x40
000002e7: MLOAD
000002e8: DUP1
000002e9: PUSH1 0x60
000002eb: ADD
000002ec: PUSH1 0x40
000002ee: MSTORE
000002ef: DUP1
000002f0: PUSH1 0x27
000002f2: DUP2
000002f3: MSTORE
000002f4: PUSH1 0x20
000002f6: ADD
000002f7: PUSH2 0x09d4
000002fa: PUSH1 0x27
000002fc: SWAP2
000002fd: CODECOPY
000002fe: PUSH2 0x04ad
00000301: JUMP
00000302: JUMPDEST
00000303: SWAP4
00000304: SWAP3
00000305: POP
00000306: POP
00000307: POP
00000308: JUMP
00000309: JUMPDEST
0000030a: PUSH1 0x01
0000030c: PUSH1 0x01
0000030e: PUSH1 0xa0
00000310: SHL
00000311: SUB
00000312: AND
00000313: EXTCODESIZE
00000314: ISZERO
00000315: ISZERO
00000316: SWAP1
00000317: JUMP
00000318: JUMPDEST
00000319: PUSH2 0x0320
0000031c: PUSH2 0x03fb
0000031f: JUMP
00000320: JUMPDEST
00000321: PUSH1 0x01
00000323: PUSH1 0x01
00000325: PUSH1 0xa0
00000327: SHL
00000328: SUB
00000329: AND
0000032a: CALLER
0000032b: PUSH1 0x01
0000032d: PUSH1 0x01
0000032f: PUSH1 0xa0
00000331: SHL
00000332: SUB
00000333: AND
00000334: EQ
00000335: ISZERO
00000336: PUSH2 0x0144
00000339: JUMPI
0000033a: PUSH1 0x40
0000033c: MLOAD
0000033d: PUSH3 0x461bcd
00000341: PUSH1 0xe5
00000343: SHL
00000344: DUP2
00000345: MSTORE
00000346: PUSH1 0x20
00000348: PUSH1 0x04
0000034a: DUP3
0000034b: ADD
0000034c: MSTORE
0000034d: PUSH1 0x42
0000034f: PUSH1 0x24
00000351: DUP3
00000352: ADD
00000353: MSTORE
00000354: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
00000375: PUSH1 0x44
00000377: DUP3
00000378: ADD
00000379: MSTORE
0000037a: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
0000039b: PUSH1 0x64
0000039d: DUP3
0000039e: ADD
0000039f: MSTORE
000003a0: PUSH32 0x6574000000000000000000000000000000000000000000000000000000000000
000003c1: PUSH1 0x84
000003c3: DUP3
000003c4: ADD
000003c5: MSTORE
000003c6: PUSH1 0xa4
000003c8: ADD
000003c9: JUMPDEST
000003ca: PUSH1 0x40
000003cc: MLOAD
000003cd: DUP1
000003ce: SWAP2
000003cf: SUB
000003d0: SWAP1
000003d1: REVERT
000003d2: JUMPDEST
000003d3: PUSH1 0x00
000003d5: PUSH2 0x0278
000003d8: PUSH2 0x05a1
000003db: JUMP
000003dc: JUMPDEST
000003dd: CALLDATASIZE
000003de: PUSH1 0x00
000003e0: DUP1
000003e1: CALLDATACOPY
000003e2: PUSH1 0x00
000003e4: DUP1
000003e5: CALLDATASIZE
000003e6: PUSH1 0x00
000003e8: DUP5
000003e9: GAS
000003ea: DELEGATECALL
000003eb: RETURNDATASIZE
000003ec: PUSH1 0x00
000003ee: DUP1
000003ef: RETURNDATACOPY
000003f0: DUP1
000003f1: DUP1
000003f2: ISZERO
000003f3: PUSH2 0x01d7
000003f6: JUMPI
000003f7: RETURNDATASIZE
000003f8: PUSH1 0x00
000003fa: RETURN
000003fb: JUMPDEST
000003fc: PUSH1 0x00
000003fe: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000041f: JUMPDEST
00000420: SLOAD
00000421: PUSH1 0x01
00000423: PUSH1 0x01
00000425: PUSH1 0xa0
00000427: SHL
00000428: SUB
00000429: AND
0000042a: SWAP2
0000042b: SWAP1
0000042c: POP
0000042d: JUMP
0000042e: JUMPDEST
0000042f: PUSH2 0x0437
00000432: DUP4
00000433: PUSH2 0x05c9
00000436: JUMP
00000437: JUMPDEST
00000438: PUSH1 0x00
0000043a: DUP3
0000043b: MLOAD
0000043c: GT
0000043d: DUP1
0000043e: PUSH2 0x0444
00000441: JUMPI
00000442: POP
00000443: DUP1
00000444: JUMPDEST
00000445: ISZERO
00000446: PUSH2 0x0240
00000449: JUMPI
0000044a: PUSH2 0x0453
0000044d: DUP4
0000044e: DUP4
0000044f: PUSH2 0x02dd
00000452: JUMP
00000453: JUMPDEST
00000454: POP
00000455: POP
00000456: POP
00000457: POP
00000458: JUMP
00000459: JUMPDEST
0000045a: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
0000047b: PUSH2 0x0482
0000047e: PUSH2 0x03fb
00000481: JUMP
00000482: JUMPDEST
00000483: PUSH1 0x40
00000485: DUP1
00000486: MLOAD
00000487: PUSH1 0x01
00000489: PUSH1 0x01
0000048b: PUSH1 0xa0
0000048d: SHL
0000048e: SUB
0000048f: SWAP3
00000490: DUP4
00000491: AND
00000492: DUP2
00000493: MSTORE
00000494: SWAP2
00000495: DUP5
00000496: AND
00000497: PUSH1 0x20
00000499: DUP4
0000049a: ADD
0000049b: MSTORE
0000049c: ADD
0000049d: PUSH1 0x40
0000049f: MLOAD
000004a0: DUP1
000004a1: SWAP2
000004a2: SUB
000004a3: SWAP1
000004a4: LOG1
000004a5: PUSH2 0x0182
000004a8: DUP2
000004a9: PUSH2 0x0609
000004ac: JUMP
000004ad: JUMPDEST
000004ae: PUSH1 0x60
000004b0: PUSH1 0x01
000004b2: PUSH1 0x01
000004b4: PUSH1 0xa0
000004b6: SHL
000004b7: SUB
000004b8: DUP5
000004b9: AND
000004ba: EXTCODESIZE
000004bb: PUSH2 0x052c
000004be: JUMPI
000004bf: PUSH1 0x40
000004c1: MLOAD
000004c2: PUSH3 0x461bcd
000004c6: PUSH1 0xe5
000004c8: SHL
000004c9: DUP2
000004ca: MSTORE
000004cb: PUSH1 0x20
000004cd: PUSH1 0x04
000004cf: DUP3
000004d0: ADD
000004d1: MSTORE
000004d2: PUSH1 0x26
000004d4: PUSH1 0x24
000004d6: DUP3
000004d7: ADD
000004d8: MSTORE
000004d9: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f
000004fa: PUSH1 0x44
000004fc: DUP3
000004fd: ADD
000004fe: MSTORE
000004ff: PUSH32 0x6e74726163740000000000000000000000000000000000000000000000000000
00000520: PUSH1 0x64
00000522: DUP3
00000523: ADD
00000524: MSTORE
00000525: PUSH1 0x84
00000527: ADD
00000528: PUSH2 0x03c9
0000052b: JUMP
0000052c: JUMPDEST
0000052d: PUSH1 0x00
0000052f: DUP1
00000530: DUP6
00000531: PUSH1 0x01
00000533: PUSH1 0x01
00000535: PUSH1 0xa0
00000537: SHL
00000538: SUB
00000539: AND
0000053a: DUP6
0000053b: PUSH1 0x40
0000053d: MLOAD
0000053e: PUSH2 0x0547
00000541: SWAP2
00000542: SWAP1
00000543: PUSH2 0x0984
00000546: JUMP
00000547: JUMPDEST
00000548: PUSH1 0x00
0000054a: PUSH1 0x40
0000054c: MLOAD
0000054d: DUP1
0000054e: DUP4
0000054f: SUB
00000550: DUP2
00000551: DUP6
00000552: GAS
00000553: DELEGATECALL
00000554: SWAP2
00000555: POP
00000556: POP
00000557: RETURNDATASIZE
00000558: DUP1
00000559: PUSH1 0x00
0000055b: DUP2
0000055c: EQ
0000055d: PUSH2 0x0582
00000560: JUMPI
00000561: PUSH1 0x40
00000563: MLOAD
00000564: SWAP2
00000565: POP
00000566: PUSH1 0x1f
00000568: NOT
00000569: PUSH1 0x3f
0000056b: RETURNDATASIZE
0000056c: ADD
0000056d: AND
0000056e: DUP3
0000056f: ADD
00000570: PUSH1 0x40
00000572: MSTORE
00000573: RETURNDATASIZE
00000574: DUP3
00000575: MSTORE
00000576: RETURNDATASIZE
00000577: PUSH1 0x00
00000579: PUSH1 0x20
0000057b: DUP5
0000057c: ADD
0000057d: RETURNDATACOPY
0000057e: PUSH2 0x0587
00000581: JUMP
00000582: JUMPDEST
00000583: PUSH1 0x60
00000585: SWAP2
00000586: POP
00000587: JUMPDEST
00000588: POP
00000589: SWAP2
0000058a: POP
0000058b: SWAP2
0000058c: POP
0000058d: PUSH2 0x0597
00000590: DUP3
00000591: DUP3
00000592: DUP7
00000593: PUSH2 0x06e1
00000596: JUMP
00000597: JUMPDEST
00000598: SWAP7
00000599: SWAP6
0000059a: POP
0000059b: POP
0000059c: POP
0000059d: POP
0000059e: POP
0000059f: POP
000005a0: JUMP
000005a1: JUMPDEST
000005a2: PUSH1 0x00
000005a4: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000005c5: PUSH2 0x041f
000005c8: JUMP
000005c9: JUMPDEST
000005ca: PUSH2 0x05d2
000005cd: DUP2
000005ce: PUSH2 0x071a
000005d1: JUMP
000005d2: JUMPDEST
000005d3: PUSH1 0x40
000005d5: MLOAD
000005d6: PUSH1 0x01
000005d8: PUSH1 0x01
000005da: PUSH1 0xa0
000005dc: SHL
000005dd: SUB
000005de: DUP3
000005df: AND
000005e0: SWAP1
000005e1: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
00000602: SWAP1
00000603: PUSH1 0x00
00000605: SWAP1
00000606: LOG2
00000607: POP
00000608: JUMP
00000609: JUMPDEST
0000060a: PUSH1 0x01
0000060c: PUSH1 0x01
0000060e: PUSH1 0xa0
00000610: SHL
00000611: SUB
00000612: DUP2
00000613: AND
00000614: PUSH2 0x0685
00000617: JUMPI
00000618: PUSH1 0x40
0000061a: MLOAD
0000061b: PUSH3 0x461bcd
0000061f: PUSH1 0xe5
00000621: SHL
00000622: DUP2
00000623: MSTORE
00000624: PUSH1 0x20
00000626: PUSH1 0x04
00000628: DUP3
00000629: ADD
0000062a: MSTORE
0000062b: PUSH1 0x26
0000062d: PUSH1 0x24
0000062f: DUP3
00000630: ADD
00000631: MSTORE
00000632: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
00000653: PUSH1 0x44
00000655: DUP3
00000656: ADD
00000657: MSTORE
00000658: PUSH32 0x6464726573730000000000000000000000000000000000000000000000000000
00000679: PUSH1 0x64
0000067b: DUP3
0000067c: ADD
0000067d: MSTORE
0000067e: PUSH1 0x84
00000680: ADD
00000681: PUSH2 0x03c9
00000684: JUMP
00000685: JUMPDEST
00000686: DUP1
00000687: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000006a8: JUMPDEST
000006a9: DUP1
000006aa: SLOAD
000006ab: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000
000006cc: AND
000006cd: PUSH1 0x01
000006cf: PUSH1 0x01
000006d1: PUSH1 0xa0
000006d3: SHL
000006d4: SUB
000006d5: SWAP3
000006d6: SWAP1
000006d7: SWAP3
000006d8: AND
000006d9: SWAP2
000006da: SWAP1
000006db: SWAP2
000006dc: OR
000006dd: SWAP1
000006de: SSTORE
000006df: POP
000006e0: JUMP
000006e1: JUMPDEST
000006e2: PUSH1 0x60
000006e4: DUP4
000006e5: ISZERO
000006e6: PUSH2 0x06f0
000006e9: JUMPI
000006ea: POP
000006eb: DUP2
000006ec: PUSH2 0x0302
000006ef: JUMP
000006f0: JUMPDEST
000006f1: DUP3
000006f2: MLOAD
000006f3: ISZERO
000006f4: PUSH2 0x0700
000006f7: JUMPI
000006f8: DUP3
000006f9: MLOAD
000006fa: DUP1
000006fb: DUP5
000006fc: PUSH1 0x20
000006fe: ADD
000006ff: REVERT
00000700: JUMPDEST
00000701: DUP2
00000702: PUSH1 0x40
00000704: MLOAD
00000705: PUSH3 0x461bcd
00000709: PUSH1 0xe5
0000070b: SHL
0000070c: DUP2
0000070d: MSTORE
0000070e: PUSH1 0x04
00000710: ADD
00000711: PUSH2 0x03c9
00000714: SWAP2
00000715: SWAP1
00000716: PUSH2 0x09a0
00000719: JUMP
0000071a: JUMPDEST
0000071b: PUSH1 0x01
0000071d: PUSH1 0x01
0000071f: PUSH1 0xa0
00000721: SHL
00000722: SUB
00000723: DUP2
00000724: AND
00000725: EXTCODESIZE
00000726: PUSH2 0x0797
00000729: JUMPI
0000072a: PUSH1 0x40
0000072c: MLOAD
0000072d: PUSH3 0x461bcd
00000731: PUSH1 0xe5
00000733: SHL
00000734: DUP2
00000735: MSTORE
00000736: PUSH1 0x20
00000738: PUSH1 0x04
0000073a: DUP3
0000073b: ADD
0000073c: MSTORE
0000073d: PUSH1 0x2d
0000073f: PUSH1 0x24
00000741: DUP3
00000742: ADD
00000743: MSTORE
00000744: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
00000765: PUSH1 0x44
00000767: DUP3
00000768: ADD
00000769: MSTORE
0000076a: PUSH32 0x6f74206120636f6e747261637400000000000000000000000000000000000000
0000078b: PUSH1 0x64
0000078d: DUP3
0000078e: ADD
0000078f: MSTORE
00000790: PUSH1 0x84
00000792: ADD
00000793: PUSH2 0x03c9
00000796: JUMP
00000797: JUMPDEST
00000798: DUP1
00000799: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000007ba: PUSH2 0x06a8
000007bd: JUMP
000007be: JUMPDEST
000007bf: DUP1
000007c0: CALLDATALOAD
000007c1: PUSH1 0x01
000007c3: PUSH1 0x01
000007c5: PUSH1 0xa0
000007c7: SHL
000007c8: SUB
000007c9: DUP2
000007ca: AND
000007cb: DUP2
000007cc: EQ
000007cd: PUSH2 0x07d5
000007d0: JUMPI
000007d1: PUSH1 0x00
000007d3: DUP1
000007d4: REVERT
000007d5: JUMPDEST
000007d6: SWAP2
000007d7: SWAP1
000007d8: POP
000007d9: JUMP
000007da: JUMPDEST
000007db: PUSH1 0x00
000007dd: PUSH1 0x20
000007df: DUP3
000007e0: DUP5
000007e1: SUB
000007e2: SLT
000007e3: ISZERO
000007e4: PUSH2 0x07ec
000007e7: JUMPI
000007e8: PUSH1 0x00
000007ea: DUP1
000007eb: REVERT
000007ec: JUMPDEST
000007ed: PUSH2 0x0302
000007f0: DUP3
000007f1: PUSH2 0x07be
000007f4: JUMP
000007f5: JUMPDEST
000007f6: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
00000817: PUSH1 0x00
00000819: MSTORE
0000081a: PUSH1 0x41
0000081c: PUSH1 0x04
0000081e: MSTORE
0000081f: PUSH1 0x24
00000821: PUSH1 0x00
00000823: REVERT
00000824: JUMPDEST
00000825: PUSH1 0x00
00000827: PUSH1 0x20
00000829: DUP3
0000082a: DUP5
0000082b: SUB
0000082c: SLT
0000082d: ISZERO
0000082e: PUSH2 0x0836
00000831: JUMPI
00000832: PUSH1 0x00
00000834: DUP1
00000835: REVERT
00000836: JUMPDEST
00000837: DUP2
00000838: CALLDATALOAD
00000839: PUSH8 0xffffffffffffffff
00000842: DUP1
00000843: DUP3
00000844: GT
00000845: ISZERO
00000846: PUSH2 0x084e
00000849: JUMPI
0000084a: PUSH1 0x00
0000084c: DUP1
0000084d: REVERT
0000084e: JUMPDEST
0000084f: DUP2
00000850: DUP5
00000851: ADD
00000852: SWAP2
00000853: POP
00000854: DUP5
00000855: PUSH1 0x1f
00000857: DUP4
00000858: ADD
00000859: SLT
0000085a: PUSH2 0x0862
0000085d: JUMPI
0000085e: PUSH1 0x00
00000860: DUP1
00000861: REVERT
00000862: JUMPDEST
00000863: DUP2
00000864: CALLDATALOAD
00000865: DUP2
00000866: DUP2
00000867: GT
00000868: ISZERO
00000869: PUSH2 0x0874
0000086c: JUMPI
0000086d: PUSH2 0x0874
00000870: PUSH2 0x07f5
00000873: JUMP
00000874: JUMPDEST
00000875: PUSH1 0x40
00000877: MLOAD
00000878: PUSH1 0x1f
0000087a: DUP3
0000087b: ADD
0000087c: PUSH1 0x1f
0000087e: NOT
0000087f: SWAP1
00000880: DUP2
00000881: AND
00000882: PUSH1 0x3f
00000884: ADD
00000885: AND
00000886: DUP2
00000887: ADD
00000888: SWAP1
00000889: DUP4
0000088a: DUP3
0000088b: GT
0000088c: DUP2
0000088d: DUP4
0000088e: LT
0000088f: OR
00000890: ISZERO
00000891: PUSH2 0x089c
00000894: JUMPI
00000895: PUSH2 0x089c
00000898: PUSH2 0x07f5
0000089b: JUMP
0000089c: JUMPDEST
0000089d: DUP2
0000089e: PUSH1 0x40
000008a0: MSTORE
000008a1: DUP3
000008a2: DUP2
000008a3: MSTORE
000008a4: DUP8
000008a5: PUSH1 0x20
000008a7: DUP5
000008a8: DUP8
000008a9: ADD
000008aa: ADD
000008ab: GT
000008ac: ISZERO
000008ad: PUSH2 0x08b5
000008b0: JUMPI
000008b1: PUSH1 0x00
000008b3: DUP1
000008b4: REVERT
000008b5: JUMPDEST
000008b6: DUP3
000008b7: PUSH1 0x20
000008b9: DUP7
000008ba: ADD
000008bb: PUSH1 0x20
000008bd: DUP4
000008be: ADD
000008bf: CALLDATACOPY
000008c0: PUSH1 0x00
000008c2: SWAP3
000008c3: DUP2
000008c4: ADD
000008c5: PUSH1 0x20
000008c7: ADD
000008c8: SWAP3
000008c9: SWAP1
000008ca: SWAP3
000008cb: MSTORE
000008cc: POP
000008cd: SWAP6
000008ce: SWAP5
000008cf: POP
000008d0: POP
000008d1: POP
000008d2: POP
000008d3: POP
000008d4: JUMP
000008d5: JUMPDEST
000008d6: PUSH1 0x00
000008d8: DUP1
000008d9: PUSH1 0x00
000008db: PUSH1 0x40
000008dd: DUP5
000008de: DUP7
000008df: SUB
000008e0: SLT
000008e1: ISZERO
000008e2: PUSH2 0x08ea
000008e5: JUMPI
000008e6: PUSH1 0x00
000008e8: DUP1
000008e9: REVERT
000008ea: JUMPDEST
000008eb: PUSH2 0x08f3
000008ee: DUP5
000008ef: PUSH2 0x07be
000008f2: JUMP
000008f3: JUMPDEST
000008f4: SWAP3
000008f5: POP
000008f6: PUSH1 0x20
000008f8: DUP5
000008f9: ADD
000008fa: CALLDATALOAD
000008fb: PUSH8 0xffffffffffffffff
00000904: DUP1
00000905: DUP3
00000906: GT
00000907: ISZERO
00000908: PUSH2 0x0910
0000090b: JUMPI
0000090c: PUSH1 0x00
0000090e: DUP1
0000090f: REVERT
00000910: JUMPDEST
00000911: DUP2
00000912: DUP7
00000913: ADD
00000914: SWAP2
00000915: POP
00000916: DUP7
00000917: PUSH1 0x1f
00000919: DUP4
0000091a: ADD
0000091b: SLT
0000091c: PUSH2 0x0924
0000091f: JUMPI
00000920: PUSH1 0x00
00000922: DUP1
00000923: REVERT
00000924: JUMPDEST
00000925: DUP2
00000926: CALLDATALOAD
00000927: DUP2
00000928: DUP2
00000929: GT
0000092a: ISZERO
0000092b: PUSH2 0x0933
0000092e: JUMPI
0000092f: PUSH1 0x00
00000931: DUP1
00000932: REVERT
00000933: JUMPDEST
00000934: DUP8
00000935: PUSH1 0x20
00000937: DUP3
00000938: DUP6
00000939: ADD
0000093a: ADD
0000093b: GT
0000093c: ISZERO
0000093d: PUSH2 0x0945
00000940: JUMPI
00000941: PUSH1 0x00
00000943: DUP1
00000944: REVERT
00000945: JUMPDEST
00000946: PUSH1 0x20
00000948: DUP4
00000949: ADD
0000094a: SWAP5
0000094b: POP
0000094c: DUP1
0000094d: SWAP4
0000094e: POP
0000094f: POP
00000950: POP
00000951: POP
00000952: SWAP3
00000953: POP
00000954: SWAP3
00000955: POP
00000956: SWAP3
00000957: JUMP
00000958: JUMPDEST
00000959: PUSH1 0x00
0000095b: JUMPDEST
0000095c: DUP4
0000095d: DUP2
0000095e: LT
0000095f: ISZERO
00000960: PUSH2 0x0973
00000963: JUMPI
00000964: DUP2
00000965: DUP2
00000966: ADD
00000967: MLOAD
00000968: DUP4
00000969: DUP3
0000096a: ADD
0000096b: MSTORE
0000096c: PUSH1 0x20
0000096e: ADD
0000096f: PUSH2 0x095b
00000972: JUMP
00000973: JUMPDEST
00000974: DUP4
00000975: DUP2
00000976: GT
00000977: ISZERO
00000978: PUSH2 0x0453
0000097b: JUMPI
0000097c: POP
0000097d: POP
0000097e: PUSH1 0x00
00000980: SWAP2
00000981: ADD
00000982: MSTORE
00000983: JUMP
00000984: JUMPDEST
00000985: PUSH1 0x00
00000987: DUP3
00000988: MLOAD
00000989: PUSH2 0x0996
0000098c: DUP2
0000098d: DUP5
0000098e: PUSH1 0x20
00000990: DUP8
00000991: ADD
00000992: PUSH2 0x0958
00000995: JUMP
00000996: JUMPDEST
00000997: SWAP2
00000998: SWAP1
00000999: SWAP2
0000099a: ADD
0000099b: SWAP3
0000099c: SWAP2
0000099d: POP
0000099e: POP
0000099f: JUMP
000009a0: JUMPDEST
000009a1: PUSH1 0x20
000009a3: DUP2
000009a4: MSTORE
000009a5: PUSH1 0x00
000009a7: DUP3
000009a8: MLOAD
000009a9: DUP1
000009aa: PUSH1 0x20
000009ac: DUP5
000009ad: ADD
000009ae: MSTORE
000009af: PUSH2 0x09bf
000009b2: DUP2
000009b3: PUSH1 0x40
000009b5: DUP6
000009b6: ADD
000009b7: PUSH1 0x20
000009b9: DUP8
000009ba: ADD
000009bb: PUSH2 0x0958
000009be: JUMP
000009bf: JUMPDEST
000009c0: PUSH1 0x1f
000009c2: ADD
000009c3: PUSH1 0x1f
000009c5: NOT
000009c6: AND
000009c7: SWAP2
000009c8: SWAP1
000009c9: SWAP2
000009ca: ADD
000009cb: PUSH1 0x40
000009cd: ADD
000009ce: SWAP3
000009cf: SWAP2
000009d0: POP
000009d1: POP
000009d2: JUMP
000009d3: INVALID
000009d4: COINBASE
000009d5: PUSH5 0x6472657373
000009db: GASPRICE
000009dc: KECCAK256
000009dd: PUSH13 0x6f772d6c6576656c2064656c65
000009eb: PUSH8 0x6174652063616c6c
000009f4: KECCAK256
000009f5: PUSH7 0x61696c6564a264
000009fd: PUSH10 0x706673582212203b097b
00000a08: DUP9
00000a09: UNKNOWN(0xC1)
00000a0a: UNKNOWN(0xCE)
00000a0b: UNKNOWN(0xE2)
00000a0c: PUSH11 0x495ec73a23404fc321233c
00000a18: UNKNOWN(0xAF)
00000a19: PUSH25

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0xc370619db349d1d8262882c8894e046b52914fc7daa4c8b22f998b3c94e87b1a call_targets: 0x5019d41b0737e39b51fd6da4859f3e27579e4e69 target_varies: no classification: constant_target validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xc370619db349d1d8262882c8894e046b52914fc7daa4c8b22f998b3c94e87b1a", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x5019d41b0737e39b51fd6da4859f3e27579e4e69" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x5c60da1b", "selector": "0x5c60da1b", "calldata_variants": [ "0x5c60da1b", "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8f283970", "selector": "0x8f283970", "calldata_variants": [ "0x8f283970", "0x8f2839700000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf851a440", "selector": "0xf851a440", "calldata_variants": [ "0xf851a440", "0xf851a4400000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x3659cfe6", "selector": "0x3659cfe6", "calldata_variants": [ "0x3659cfe6", "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4bb5274a", "selector": "0x4bb5274a", "calldata_variants": [ "0x4bb5274a", "0x4bb5274a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4f1ef286", "selector": "0x4f1ef286", "calldata_variants": [ "0x4f1ef286", "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 454, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1002, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1363, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 3, "untrusted_delegatecall_count": 3 }

Severity