019b477e-c9c1-7236-b05c-dc9dc34da228
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 26375 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 26376 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 69510 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 69511 | capability.graph | complete | 1 / 3 | 1 week ago |
| 69512 | detector.run | complete | 1 / 3 | 1 week ago |
| 69513 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: PUSH2 0x000b 00000009: JUMPI 0000000a: STOP 0000000b: JUMPDEST 0000000c: PUSH2 0x0013 0000000f: PUSH2 0x0015 00000012: JUMP 00000013: JUMPDEST 00000014: STOP 00000015: JUMPDEST 00000016: PUSH2 0x0025 00000019: PUSH2 0x0020 0000001c: PUSH2 0x0072 0000001f: JUMP 00000020: JUMPDEST 00000021: PUSH2 0x00b7 00000024: JUMP 00000025: JUMPDEST 00000026: JUMP 00000027: JUMPDEST 00000028: PUSH1 0x60 0000002a: PUSH2 0x004c 0000002d: DUP4 0000002e: DUP4 0000002f: PUSH1 0x40 00000031: MLOAD 00000032: DUP1 00000033: PUSH1 0x60 00000035: ADD 00000036: PUSH1 0x40 00000038: MSTORE 00000039: DUP1 0000003a: PUSH1 0x27 0000003c: DUP2 0000003d: MSTORE 0000003e: PUSH1 0x20 00000040: ADD 00000041: PUSH2 0x02a7 00000044: PUSH1 0x27 00000046: SWAP2 00000047: CODECOPY 00000048: PUSH2 0x00db 0000004b: JUMP 0000004c: JUMPDEST 0000004d: SWAP4 0000004e: SWAP3 0000004f: POP 00000050: POP 00000051: POP 00000052: JUMP 00000053: JUMPDEST 00000054: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000069: AND 0000006a: EXTCODESIZE 0000006b: ISZERO 0000006c: ISZERO 0000006d: SWAP1 0000006e: JUMP 0000006f: JUMPDEST 00000070: SWAP1 00000071: JUMP 00000072: JUMPDEST 00000073: PUSH1 0x00 00000075: PUSH2 0x00b2 00000078: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000099: SLOAD 0000009a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000af: AND 000000b0: SWAP1 000000b1: JUMP 000000b2: JUMPDEST 000000b3: SWAP1 000000b4: POP 000000b5: SWAP1 000000b6: JUMP 000000b7: JUMPDEST 000000b8: CALLDATASIZE 000000b9: PUSH1 0x00 000000bb: DUP1 000000bc: CALLDATACOPY 000000bd: PUSH1 0x00 000000bf: DUP1 000000c0: CALLDATASIZE 000000c1: PUSH1 0x00 000000c3: DUP5 000000c4: GAS 000000c5: DELEGATECALL 000000c6: RETURNDATASIZE 000000c7: PUSH1 0x00 000000c9: DUP1 000000ca: RETURNDATACOPY 000000cb: DUP1 000000cc: DUP1 000000cd: ISZERO 000000ce: PUSH2 0x00d6 000000d1: JUMPI 000000d2: RETURNDATASIZE 000000d3: PUSH1 0x00 000000d5: RETURN 000000d6: JUMPDEST 000000d7: RETURNDATASIZE 000000d8: PUSH1 0x00 000000da: REVERT 000000db: JUMPDEST 000000dc: PUSH1 0x60 000000de: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000f3: DUP5 000000f4: AND 000000f5: EXTCODESIZE 000000f6: PUSH2 0x016c 000000f9: JUMPI 000000fa: PUSH1 0x40 000000fc: MLOAD 000000fd: PUSH3 0x461bcd 00000101: PUSH1 0xe5 00000103: SHL 00000104: DUP2 00000105: MSTORE 00000106: PUSH1 0x20 00000108: PUSH1 0x04 0000010a: DUP3 0000010b: ADD 0000010c: MSTORE 0000010d: PUSH1 0x26 0000010f: PUSH1 0x24 00000111: DUP3 00000112: ADD 00000113: MSTORE 00000114: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f 00000135: PUSH1 0x44 00000137: DUP3 00000138: ADD 00000139: MSTORE 0000013a: PUSH32 0x6e74726163740000000000000000000000000000000000000000000000000000 0000015b: PUSH1 0x64 0000015d: DUP3 0000015e: ADD 0000015f: MSTORE 00000160: PUSH1 0x84 00000162: ADD 00000163: JUMPDEST 00000164: PUSH1 0x40 00000166: MLOAD 00000167: DUP1 00000168: SWAP2 00000169: SUB 0000016a: SWAP1 0000016b: REVERT 0000016c: JUMPDEST 0000016d: PUSH1 0x00 0000016f: DUP1 00000170: DUP6 00000171: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000186: AND 00000187: DUP6 00000188: PUSH1 0x40 0000018a: MLOAD 0000018b: PUSH2 0x0194 0000018e: SWAP2 0000018f: SWAP1 00000190: PUSH2 0x0257 00000193: JUMP 00000194: JUMPDEST 00000195: PUSH1 0x00 00000197: PUSH1 0x40 00000199: MLOAD 0000019a: DUP1 0000019b: DUP4 0000019c: SUB 0000019d: DUP2 0000019e: DUP6 0000019f: GAS 000001a0: DELEGATECALL 000001a1: SWAP2 000001a2: POP 000001a3: POP 000001a4: RETURNDATASIZE 000001a5: DUP1 000001a6: PUSH1 0x00 000001a8: DUP2 000001a9: EQ 000001aa: PUSH2 0x01cf 000001ad: JUMPI 000001ae: PUSH1 0x40 000001b0: MLOAD 000001b1: SWAP2 000001b2: POP 000001b3: PUSH1 0x1f 000001b5: NOT 000001b6: PUSH1 0x3f 000001b8: RETURNDATASIZE 000001b9: ADD 000001ba: AND 000001bb: DUP3 000001bc: ADD 000001bd: PUSH1 0x40 000001bf: MSTORE 000001c0: RETURNDATASIZE 000001c1: DUP3 000001c2: MSTORE 000001c3: RETURNDATASIZE 000001c4: PUSH1 0x00 000001c6: PUSH1 0x20 000001c8: DUP5 000001c9: ADD 000001ca: RETURNDATACOPY 000001cb: PUSH2 0x01d4 000001ce: JUMP 000001cf: JUMPDEST 000001d0: PUSH1 0x60 000001d2: SWAP2 000001d3: POP 000001d4: JUMPDEST 000001d5: POP 000001d6: SWAP2 000001d7: POP 000001d8: SWAP2 000001d9: POP 000001da: PUSH2 0x01e4 000001dd: DUP3 000001de: DUP3 000001df: DUP7 000001e0: PUSH2 0x01ee 000001e3: JUMP 000001e4: JUMPDEST 000001e5: SWAP7 000001e6: SWAP6 000001e7: POP 000001e8: POP 000001e9: POP 000001ea: POP 000001eb: POP 000001ec: POP 000001ed: JUMP 000001ee: JUMPDEST 000001ef: PUSH1 0x60 000001f1: DUP4 000001f2: ISZERO 000001f3: PUSH2 0x01fd 000001f6: JUMPI 000001f7: POP 000001f8: DUP2 000001f9: PUSH2 0x004c 000001fc: JUMP 000001fd: JUMPDEST 000001fe: DUP3 000001ff: MLOAD 00000200: ISZERO 00000201: PUSH2 0x020d 00000204: JUMPI 00000205: DUP3 00000206: MLOAD 00000207: DUP1 00000208: DUP5 00000209: PUSH1 0x20 0000020b: ADD 0000020c: REVERT 0000020d: JUMPDEST 0000020e: DUP2 0000020f: PUSH1 0x40 00000211: MLOAD 00000212: PUSH3 0x461bcd 00000216: PUSH1 0xe5 00000218: SHL 00000219: DUP2 0000021a: MSTORE 0000021b: PUSH1 0x04 0000021d: ADD 0000021e: PUSH2 0x0163 00000221: SWAP2 00000222: SWAP1 00000223: PUSH2 0x0273 00000226: JUMP 00000227: JUMPDEST 00000228: PUSH1 0x00 0000022a: JUMPDEST 0000022b: DUP4 0000022c: DUP2 0000022d: LT 0000022e: ISZERO 0000022f: PUSH2 0x0242 00000232: JUMPI 00000233: DUP2 00000234: DUP2 00000235: ADD 00000236: MLOAD 00000237: DUP4 00000238: DUP3 00000239: ADD 0000023a: MSTORE 0000023b: PUSH1 0x20 0000023d: ADD 0000023e: PUSH2 0x022a 00000241: JUMP 00000242: JUMPDEST 00000243: DUP4 00000244: DUP2 00000245: GT 00000246: ISZERO 00000247: PUSH2 0x0251 0000024a: JUMPI 0000024b: PUSH1 0x00 0000024d: DUP5 0000024e: DUP5 0000024f: ADD 00000250: MSTORE 00000251: JUMPDEST 00000252: POP 00000253: POP 00000254: POP 00000255: POP 00000256: JUMP 00000257: JUMPDEST 00000258: PUSH1 0x00 0000025a: DUP3 0000025b: MLOAD 0000025c: PUSH2 0x0269 0000025f: DUP2 00000260: DUP5 00000261: PUSH1 0x20 00000263: DUP8 00000264: ADD 00000265: PUSH2 0x0227 00000268: JUMP 00000269: JUMPDEST 0000026a: SWAP2 0000026b: SWAP1 0000026c: SWAP2 0000026d: ADD 0000026e: SWAP3 0000026f: SWAP2 00000270: POP 00000271: POP 00000272: JUMP 00000273: JUMPDEST 00000274: PUSH1 0x20 00000276: DUP2 00000277: MSTORE 00000278: PUSH1 0x00 0000027a: DUP3 0000027b: MLOAD 0000027c: DUP1 0000027d: PUSH1 0x20 0000027f: DUP5 00000280: ADD 00000281: MSTORE 00000282: PUSH2 0x0292 00000285: DUP2 00000286: PUSH1 0x40 00000288: DUP6 00000289: ADD 0000028a: PUSH1 0x20 0000028c: DUP8 0000028d: ADD 0000028e: PUSH2 0x0227 00000291: JUMP 00000292: JUMPDEST 00000293: PUSH1 0x1f 00000295: ADD 00000296: PUSH1 0x1f 00000298: NOT 00000299: AND 0000029a: SWAP2 0000029b: SWAP1 0000029c: SWAP2 0000029d: ADD 0000029e: PUSH1 0x40 000002a0: ADD 000002a1: SWAP3 000002a2: SWAP2 000002a3: POP 000002a4: POP 000002a5: JUMP 000002a6: INVALID 000002a7: COINBASE 000002a8: PUSH5 0x6472657373 000002ae: GASPRICE 000002af: KECCAK256 000002b0: PUSH13 0x6f772d6c6576656c2064656c65 000002be: PUSH8 0x6174652063616c6c 000002c7: KECCAK256 000002c8: PUSH7 0x61696c6564a264 000002d0: PUSH10 0x70667358221220d92f9f 000002db: BALANCE 000002dc: SELFDESTRUCT 000002dd: UNKNOWN(0x0C) 000002de: UNKNOWN(0xB1) 000002df: UNKNOWN(0x27) 000002e0: SDIV 000002e1: UNKNOWN(0xE5) 000002e2: PUSH30 0xfe61c378cc8a0106180b4ad78c139de1f7f0cfba6864736f6c634300080d 00000301: STOP 00000302: CALLER
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewvalidation_json{
"sink": "DELEGATECALL",
"errors": 10,
"status": "unknown",
"attempts": 11,
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 197,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 416,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0x45ae806697c2291abec83754a69575cdff3d37711e8068fcb11f419107ba825b
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 1,
"trace_id": "0x45ae806697c2291abec83754a69575cdff3d37711e8068fcb11f419107ba825b",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|