019b477e-cade-71a9-9566-4d4b37647cb3
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 26585 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 26586 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 69914 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 69915 | capability.graph | complete | 1 / 3 | 1 week ago |
| 69916 | detector.run | complete | 1 / 3 | 1 week ago |
| 69917 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: PUSH2 0x0013 00000009: JUMPI 0000000a: PUSH2 0x0011 0000000d: PUSH2 0x0017 00000010: JUMP 00000011: JUMPDEST 00000012: STOP 00000013: JUMPDEST 00000014: PUSH2 0x0011 00000017: JUMPDEST 00000018: PUSH2 0x0027 0000001b: PUSH2 0x0022 0000001e: PUSH2 0x0067 00000021: JUMP 00000022: JUMPDEST 00000023: PUSH2 0x012e 00000026: JUMP 00000027: JUMPDEST 00000028: JUMP 00000029: JUMPDEST 0000002a: PUSH1 0x60 0000002c: PUSH2 0x004e 0000002f: DUP4 00000030: DUP4 00000031: PUSH1 0x40 00000033: MLOAD 00000034: DUP1 00000035: PUSH1 0x60 00000037: ADD 00000038: PUSH1 0x40 0000003a: MSTORE 0000003b: DUP1 0000003c: PUSH1 0x27 0000003e: DUP2 0000003f: MSTORE 00000040: PUSH1 0x20 00000042: ADD 00000043: PUSH2 0x0369 00000046: PUSH1 0x27 00000048: SWAP2 00000049: CODECOPY 0000004a: PUSH2 0x0152 0000004d: JUMP 0000004e: JUMPDEST 0000004f: SWAP4 00000050: SWAP3 00000051: POP 00000052: POP 00000053: POP 00000054: JUMP 00000055: JUMPDEST 00000056: SWAP1 00000057: JUMP 00000058: JUMPDEST 00000059: PUSH1 0x01 0000005b: PUSH1 0x01 0000005d: PUSH1 0xa0 0000005f: SHL 00000060: SUB 00000061: AND 00000062: EXTCODESIZE 00000063: ISZERO 00000064: ISZERO 00000065: SWAP1 00000066: JUMP 00000067: JUMPDEST 00000068: PUSH1 0x00 0000006a: PUSH1 0x04 0000006c: CALLDATASIZE 0000006d: LT 0000006e: ISZERO 0000006f: PUSH2 0x00ad 00000072: JUMPI 00000073: PUSH1 0x40 00000075: MLOAD 00000076: PUSH3 0x461bcd 0000007a: PUSH1 0xe5 0000007c: SHL 0000007d: DUP2 0000007e: MSTORE 0000007f: PUSH1 0x20 00000081: PUSH1 0x04 00000083: DUP3 00000084: ADD 00000085: MSTORE 00000086: PUSH1 0x0b 00000088: PUSH1 0x24 0000008a: DUP3 0000008b: ADD 0000008c: MSTORE 0000008d: PUSH11 0x4e4f5f46554e435f534947 00000099: PUSH1 0xa8 0000009b: SHL 0000009c: PUSH1 0x44 0000009e: DUP3 0000009f: ADD 000000a0: MSTORE 000000a1: PUSH1 0x64 000000a3: ADD 000000a4: JUMPDEST 000000a5: PUSH1 0x40 000000a7: MLOAD 000000a8: DUP1 000000a9: SWAP2 000000aa: SUB 000000ab: SWAP1 000000ac: REVERT 000000ad: JUMPDEST 000000ae: PUSH1 0x00 000000b0: CALLER 000000b1: PUSH2 0x00b8 000000b4: PUSH2 0x022d 000000b7: JUMP 000000b8: JUMPDEST 000000b9: PUSH1 0x01 000000bb: PUSH1 0x01 000000bd: PUSH1 0xa0 000000bf: SHL 000000c0: SUB 000000c1: AND 000000c2: EQ 000000c3: ISZERO 000000c4: PUSH2 0x00d4 000000c7: JUMPI 000000c8: PUSH2 0x00cf 000000cb: PUSH2 0x0260 000000ce: JUMP 000000cf: JUMPDEST 000000d0: PUSH2 0x00dc 000000d3: JUMP 000000d4: JUMPDEST 000000d5: PUSH2 0x00dc 000000d8: PUSH2 0x0288 000000db: JUMP 000000dc: JUMPDEST 000000dd: SWAP1 000000de: POP 000000df: PUSH2 0x00e7 000000e2: DUP2 000000e3: PUSH2 0x0058 000000e6: JUMP 000000e7: JUMPDEST 000000e8: PUSH2 0x0129 000000eb: JUMPI 000000ec: PUSH1 0x40 000000ee: MLOAD 000000ef: PUSH3 0x461bcd 000000f3: PUSH1 0xe5 000000f5: SHL 000000f6: DUP2 000000f7: MSTORE 000000f8: PUSH1 0x20 000000fa: PUSH1 0x04 000000fc: DUP3 000000fd: ADD 000000fe: MSTORE 000000ff: PUSH1 0x13 00000101: PUSH1 0x24 00000103: DUP3 00000104: ADD 00000105: MSTORE 00000106: PUSH19 0x15105491d15517d393d517d0d3d395149050d5 0000011a: PUSH1 0x6a 0000011c: SHL 0000011d: PUSH1 0x44 0000011f: DUP3 00000120: ADD 00000121: MSTORE 00000122: PUSH1 0x64 00000124: ADD 00000125: PUSH2 0x00a4 00000128: JUMP 00000129: JUMPDEST 0000012a: SWAP2 0000012b: SWAP1 0000012c: POP 0000012d: JUMP 0000012e: JUMPDEST 0000012f: CALLDATASIZE 00000130: PUSH1 0x00 00000132: DUP1 00000133: CALLDATACOPY 00000134: PUSH1 0x00 00000136: DUP1 00000137: CALLDATASIZE 00000138: PUSH1 0x00 0000013a: DUP5 0000013b: GAS 0000013c: DELEGATECALL 0000013d: RETURNDATASIZE 0000013e: PUSH1 0x00 00000140: DUP1 00000141: RETURNDATACOPY 00000142: DUP1 00000143: DUP1 00000144: ISZERO 00000145: PUSH2 0x014d 00000148: JUMPI 00000149: RETURNDATASIZE 0000014a: PUSH1 0x00 0000014c: RETURN 0000014d: JUMPDEST 0000014e: RETURNDATASIZE 0000014f: PUSH1 0x00 00000151: REVERT 00000152: JUMPDEST 00000153: PUSH1 0x60 00000155: PUSH2 0x015d 00000158: DUP5 00000159: PUSH2 0x0058 0000015c: JUMP 0000015d: JUMPDEST 0000015e: PUSH2 0x01b8 00000161: JUMPI 00000162: PUSH1 0x40 00000164: MLOAD 00000165: PUSH3 0x461bcd 00000169: PUSH1 0xe5 0000016b: SHL 0000016c: DUP2 0000016d: MSTORE 0000016e: PUSH1 0x20 00000170: PUSH1 0x04 00000172: DUP3 00000173: ADD 00000174: MSTORE 00000175: PUSH1 0x26 00000177: PUSH1 0x24 00000179: DUP3 0000017a: ADD 0000017b: MSTORE 0000017c: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f 0000019d: PUSH1 0x44 0000019f: DUP3 000001a0: ADD 000001a1: MSTORE 000001a2: PUSH6 0x1b9d1c9858dd 000001a9: PUSH1 0xd2 000001ab: SHL 000001ac: PUSH1 0x64 000001ae: DUP3 000001af: ADD 000001b0: MSTORE 000001b1: PUSH1 0x84 000001b3: ADD 000001b4: PUSH2 0x00a4 000001b7: JUMP 000001b8: JUMPDEST 000001b9: PUSH1 0x00 000001bb: DUP1 000001bc: DUP6 000001bd: PUSH1 0x01 000001bf: PUSH1 0x01 000001c1: PUSH1 0xa0 000001c3: SHL 000001c4: SUB 000001c5: AND 000001c6: DUP6 000001c7: PUSH1 0x40 000001c9: MLOAD 000001ca: PUSH2 0x01d3 000001cd: SWAP2 000001ce: SWAP1 000001cf: PUSH2 0x0319 000001d2: JUMP 000001d3: JUMPDEST 000001d4: PUSH1 0x00 000001d6: PUSH1 0x40 000001d8: MLOAD 000001d9: DUP1 000001da: DUP4 000001db: SUB 000001dc: DUP2 000001dd: DUP6 000001de: GAS 000001df: DELEGATECALL 000001e0: SWAP2 000001e1: POP 000001e2: POP 000001e3: RETURNDATASIZE 000001e4: DUP1 000001e5: PUSH1 0x00 000001e7: DUP2 000001e8: EQ 000001e9: PUSH2 0x020e 000001ec: JUMPI 000001ed: PUSH1 0x40 000001ef: MLOAD 000001f0: SWAP2 000001f1: POP 000001f2: PUSH1 0x1f 000001f4: NOT 000001f5: PUSH1 0x3f 000001f7: RETURNDATASIZE 000001f8: ADD 000001f9: AND 000001fa: DUP3 000001fb: ADD 000001fc: PUSH1 0x40 000001fe: MSTORE 000001ff: RETURNDATASIZE 00000200: DUP3 00000201: MSTORE 00000202: RETURNDATASIZE 00000203: PUSH1 0x00 00000205: PUSH1 0x20 00000207: DUP5 00000208: ADD 00000209: RETURNDATACOPY 0000020a: PUSH2 0x0213 0000020d: JUMP 0000020e: JUMPDEST 0000020f: PUSH1 0x60 00000211: SWAP2 00000212: POP 00000213: JUMPDEST 00000214: POP 00000215: SWAP2 00000216: POP 00000217: SWAP2 00000218: POP 00000219: PUSH2 0x0223 0000021c: DUP3 0000021d: DUP3 0000021e: DUP7 0000021f: PUSH2 0x02b0 00000222: JUMP 00000223: JUMPDEST 00000224: SWAP7 00000225: SWAP6 00000226: POP 00000227: POP 00000228: POP 00000229: POP 0000022a: POP 0000022b: POP 0000022c: JUMP 0000022d: JUMPDEST 0000022e: PUSH1 0x00 00000230: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 00000251: JUMPDEST 00000252: SLOAD 00000253: PUSH1 0x01 00000255: PUSH1 0x01 00000257: PUSH1 0xa0 00000259: SHL 0000025a: SUB 0000025b: AND 0000025c: SWAP2 0000025d: SWAP1 0000025e: POP 0000025f: JUMP 00000260: JUMPDEST 00000261: PUSH1 0x00 00000263: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000284: PUSH2 0x0251 00000287: JUMP 00000288: JUMPDEST 00000289: PUSH1 0x00 0000028b: PUSH32 0x2b1dbce74324248c222f0ec2d5ed7bd323cfc425b336f0253c5ccfda7265546d 000002ac: PUSH2 0x0251 000002af: JUMP 000002b0: JUMPDEST 000002b1: PUSH1 0x60 000002b3: DUP4 000002b4: ISZERO 000002b5: PUSH2 0x02bf 000002b8: JUMPI 000002b9: POP 000002ba: DUP2 000002bb: PUSH2 0x004e 000002be: JUMP 000002bf: JUMPDEST 000002c0: DUP3 000002c1: MLOAD 000002c2: ISZERO 000002c3: PUSH2 0x02cf 000002c6: JUMPI 000002c7: DUP3 000002c8: MLOAD 000002c9: DUP1 000002ca: DUP5 000002cb: PUSH1 0x20 000002cd: ADD 000002ce: REVERT 000002cf: JUMPDEST 000002d0: DUP2 000002d1: PUSH1 0x40 000002d3: MLOAD 000002d4: PUSH3 0x461bcd 000002d8: PUSH1 0xe5 000002da: SHL 000002db: DUP2 000002dc: MSTORE 000002dd: PUSH1 0x04 000002df: ADD 000002e0: PUSH2 0x00a4 000002e3: SWAP2 000002e4: SWAP1 000002e5: PUSH2 0x0335 000002e8: JUMP 000002e9: JUMPDEST 000002ea: PUSH1 0x00 000002ec: JUMPDEST 000002ed: DUP4 000002ee: DUP2 000002ef: LT 000002f0: ISZERO 000002f1: PUSH2 0x0304 000002f4: JUMPI 000002f5: DUP2 000002f6: DUP2 000002f7: ADD 000002f8: MLOAD 000002f9: DUP4 000002fa: DUP3 000002fb: ADD 000002fc: MSTORE 000002fd: PUSH1 0x20 000002ff: ADD 00000300: PUSH2 0x02ec 00000303: JUMP 00000304: JUMPDEST 00000305: DUP4 00000306: DUP2 00000307: GT 00000308: ISZERO 00000309: PUSH2 0x0313 0000030c: JUMPI 0000030d: PUSH1 0x00 0000030f: DUP5 00000310: DUP5 00000311: ADD 00000312: MSTORE 00000313: JUMPDEST 00000314: POP 00000315: POP 00000316: POP 00000317: POP 00000318: JUMP 00000319: JUMPDEST 0000031a: PUSH1 0x00 0000031c: DUP3 0000031d: MLOAD 0000031e: PUSH2 0x032b 00000321: DUP2 00000322: DUP5 00000323: PUSH1 0x20 00000325: DUP8 00000326: ADD 00000327: PUSH2 0x02e9 0000032a: JUMP 0000032b: JUMPDEST 0000032c: SWAP2 0000032d: SWAP1 0000032e: SWAP2 0000032f: ADD 00000330: SWAP3 00000331: SWAP2 00000332: POP 00000333: POP 00000334: JUMP 00000335: JUMPDEST 00000336: PUSH1 0x20 00000338: DUP2 00000339: MSTORE 0000033a: PUSH1 0x00 0000033c: DUP3 0000033d: MLOAD 0000033e: DUP1 0000033f: PUSH1 0x20 00000341: DUP5 00000342: ADD 00000343: MSTORE 00000344: PUSH2 0x0354 00000347: DUP2 00000348: PUSH1 0x40 0000034a: DUP6 0000034b: ADD 0000034c: PUSH1 0x20 0000034e: DUP8 0000034f: ADD 00000350: PUSH2 0x02e9 00000353: JUMP 00000354: JUMPDEST 00000355: PUSH1 0x1f 00000357: ADD 00000358: PUSH1 0x1f 0000035a: NOT 0000035b: AND 0000035c: SWAP2 0000035d: SWAP1 0000035e: SWAP2 0000035f: ADD 00000360: PUSH1 0x40 00000362: ADD 00000363: SWAP3 00000364: SWAP2 00000365: POP 00000366: POP 00000367: JUMP 00000368: INVALID 00000369: COINBASE 0000036a: PUSH5 0x6472657373 00000370: GASPRICE 00000371: KECCAK256 00000372: PUSH13 0x6f772d6c6576656c2064656c65 00000380: PUSH8 0x6174652063616c6c 00000389: KECCAK256 0000038a: PUSH7 0x61696c6564a264 00000392: PUSH10 0x706673582212209c7854 0000039d: PUSH21 0xfdcd1ba13f5d8ab2e33cef4b0c8685545bba065eff 000003b3: UNKNOWN(0xAD) 000003b4: PUSH8 0x4acb96aefe64736f 000003bd: PUSH13
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewvalidation_json{
"sink": "DELEGATECALL",
"errors": 10,
"status": "unknown",
"attempts": 11,
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 316,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 479,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|