019b477e-cc2b-709a-8f77-931c020026cc
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 26821 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 26822 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 113179 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 113180 | capability.graph | complete | 1 / 3 | 1 week ago |
| 113181 | detector.run | complete | 1 / 3 | 1 week ago |
| 113182 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x004e 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH1 0xe0 00000012: SHR 00000013: DUP1 00000014: PUSH4 0x0fd5b6ae 00000019: EQ 0000001a: PUSH2 0x0065 0000001d: JUMPI 0000001e: DUP1 0000001f: PUSH4 0x1646cbb8 00000024: EQ 00000025: PUSH2 0x0096 00000028: JUMPI 00000029: DUP1 0000002a: PUSH4 0x6726eb16 0000002f: EQ 00000030: PUSH2 0x00ab 00000033: JUMPI 00000034: DUP1 00000035: PUSH4 0x9fea0eb1 0000003a: EQ 0000003b: PUSH2 0x00be 0000003e: JUMPI 0000003f: DUP1 00000040: PUSH4 0xe405236b 00000045: EQ 00000046: PUSH2 0x00de 00000049: JUMPI 0000004a: PUSH2 0x005d 0000004d: JUMP 0000004e: JUMPDEST 0000004f: CALLDATASIZE 00000050: PUSH2 0x005d 00000053: JUMPI 00000054: PUSH2 0x005b 00000057: PUSH2 0x00fe 0000005a: JUMP 0000005b: JUMPDEST 0000005c: STOP 0000005d: JUMPDEST 0000005e: PUSH2 0x005b 00000061: PUSH2 0x00fe 00000064: JUMP 00000065: JUMPDEST 00000066: CALLVALUE 00000067: DUP1 00000068: ISZERO 00000069: PUSH2 0x0071 0000006c: JUMPI 0000006d: PUSH1 0x00 0000006f: DUP1 00000070: REVERT 00000071: JUMPDEST 00000072: POP 00000073: PUSH2 0x007a 00000076: PUSH2 0x0153 00000079: JUMP 0000007a: JUMPDEST 0000007b: PUSH1 0x40 0000007d: MLOAD 0000007e: PUSH1 0x01 00000080: PUSH1 0x01 00000082: PUSH1 0xa0 00000084: SHL 00000085: SUB 00000086: SWAP1 00000087: SWAP2 00000088: AND 00000089: DUP2 0000008a: MSTORE 0000008b: PUSH1 0x20 0000008d: ADD 0000008e: PUSH1 0x40 00000090: MLOAD 00000091: DUP1 00000092: SWAP2 00000093: SUB 00000094: SWAP1 00000095: RETURN 00000096: JUMPDEST 00000097: CALLVALUE 00000098: DUP1 00000099: ISZERO 0000009a: PUSH2 0x00a2 0000009d: JUMPI 0000009e: PUSH1 0x00 000000a0: DUP1 000000a1: REVERT 000000a2: JUMPDEST 000000a3: POP 000000a4: PUSH2 0x007a 000000a7: PUSH2 0x0182 000000aa: JUMP 000000ab: JUMPDEST 000000ac: PUSH2 0x005b 000000af: PUSH2 0x00b9 000000b2: CALLDATASIZE 000000b3: PUSH1 0x04 000000b5: PUSH2 0x0510 000000b8: JUMP 000000b9: JUMPDEST 000000ba: PUSH2 0x019a 000000bd: JUMP 000000be: JUMPDEST 000000bf: CALLVALUE 000000c0: DUP1 000000c1: ISZERO 000000c2: PUSH2 0x00ca 000000c5: JUMPI 000000c6: PUSH1 0x00 000000c8: DUP1 000000c9: REVERT 000000ca: JUMPDEST 000000cb: POP 000000cc: PUSH2 0x005b 000000cf: PUSH2 0x00d9 000000d2: CALLDATASIZE 000000d3: PUSH1 0x04 000000d5: PUSH2 0x0593 000000d8: JUMP 000000d9: JUMPDEST 000000da: PUSH2 0x025c 000000dd: JUMP 000000de: JUMPDEST 000000df: CALLVALUE 000000e0: DUP1 000000e1: ISZERO 000000e2: PUSH2 0x00ea 000000e5: JUMPI 000000e6: PUSH1 0x00 000000e8: DUP1 000000e9: REVERT 000000ea: JUMPDEST 000000eb: POP 000000ec: PUSH2 0x005b 000000ef: PUSH2 0x00f9 000000f2: CALLDATASIZE 000000f3: PUSH1 0x04 000000f5: PUSH2 0x0593 000000f8: JUMP 000000f9: JUMPDEST 000000fa: PUSH2 0x0383 000000fd: JUMP 000000fe: JUMPDEST 000000ff: CALLER 00000100: EXTCODESIZE 00000101: ISZERO 00000102: ISZERO 00000103: DUP1 00000104: ISZERO 00000105: PUSH2 0x010c 00000108: JUMPI 00000109: POP 0000010a: CALLDATASIZE 0000010b: ISZERO 0000010c: JUMPDEST 0000010d: DUP1 0000010e: ISZERO 0000010f: PUSH2 0x011a 00000112: JUMPI 00000113: POP 00000114: PUSH2 0x08fc 00000117: GAS 00000118: GT 00000119: ISZERO 0000011a: JUMPDEST 0000011b: ISZERO 0000011c: PUSH2 0x0121 0000011f: JUMPI 00000120: JUMP 00000121: JUMPDEST 00000122: PUSH2 0x0151 00000125: PUSH2 0x014c 00000128: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000149: SLOAD 0000014a: SWAP1 0000014b: JUMP 0000014c: JUMPDEST 0000014d: PUSH2 0x03db 00000150: JUMP 00000151: JUMPDEST 00000152: JUMP 00000153: JUMPDEST 00000154: PUSH1 0x00 00000156: PUSH2 0x017d 00000159: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 0000017a: SLOAD 0000017b: SWAP1 0000017c: JUMP 0000017d: JUMPDEST 0000017e: SWAP1 0000017f: POP 00000180: SWAP1 00000181: JUMP 00000182: JUMPDEST 00000183: PUSH1 0x00 00000185: PUSH2 0x017d 00000188: PUSH1 0x00 0000018a: DUP1 0000018b: MLOAD 0000018c: PUSH1 0x20 0000018e: PUSH2 0x05ea 00000191: DUP4 00000192: CODECOPY 00000193: DUP2 00000194: MLOAD 00000195: SWAP2 00000196: MSTORE 00000197: SLOAD 00000198: SWAP1 00000199: JUMP 0000019a: JUMPDEST 0000019b: PUSH1 0x00 0000019d: DUP1 0000019e: MLOAD 0000019f: PUSH1 0x20 000001a1: PUSH2 0x05ea 000001a4: DUP4 000001a5: CODECOPY 000001a6: DUP2 000001a7: MLOAD 000001a8: SWAP2 000001a9: MSTORE 000001aa: SLOAD 000001ab: PUSH1 0x01 000001ad: PUSH1 0x01 000001af: PUSH1 0xa0 000001b1: SHL 000001b2: SUB 000001b3: AND 000001b4: CALLER 000001b5: PUSH1 0x01 000001b7: PUSH1 0x01 000001b9: PUSH1 0xa0 000001bb: SHL 000001bc: SUB 000001bd: AND 000001be: EQ 000001bf: PUSH2 0x01e3 000001c2: JUMPI 000001c3: PUSH1 0x40 000001c5: MLOAD 000001c6: PUSH3 0x461bcd 000001ca: PUSH1 0xe5 000001cc: SHL 000001cd: DUP2 000001ce: MSTORE 000001cf: PUSH1 0x04 000001d1: ADD 000001d2: PUSH2 0x01da 000001d5: SWAP1 000001d6: PUSH2 0x05b5 000001d9: JUMP 000001da: JUMPDEST 000001db: PUSH1 0x40 000001dd: MLOAD 000001de: DUP1 000001df: SWAP2 000001e0: SUB 000001e1: SWAP1 000001e2: REVERT 000001e3: JUMPDEST 000001e4: PUSH2 0x01ec 000001e7: DUP4 000001e8: PUSH2 0x03ff 000001eb: JUMP 000001ec: JUMPDEST 000001ed: PUSH1 0x00 000001ef: DUP4 000001f0: PUSH1 0x01 000001f2: PUSH1 0x01 000001f4: PUSH1 0xa0 000001f6: SHL 000001f7: SUB 000001f8: AND 000001f9: DUP4 000001fa: DUP4 000001fb: PUSH1 0x40 000001fd: MLOAD 000001fe: PUSH2 0x0208 00000201: SWAP3 00000202: SWAP2 00000203: SWAP1 00000204: PUSH2 0x05d9 00000207: JUMP 00000208: JUMPDEST 00000209: PUSH1 0x00 0000020b: PUSH1 0x40 0000020d: MLOAD 0000020e: DUP1 0000020f: DUP4 00000210: SUB 00000211: DUP2 00000212: DUP6 00000213: GAS 00000214: DELEGATECALL 00000215: SWAP2 00000216: POP 00000217: POP 00000218: RETURNDATASIZE 00000219: DUP1 0000021a: PUSH1 0x00 0000021c: DUP2 0000021d: EQ 0000021e: PUSH2 0x0243 00000221: JUMPI 00000222: PUSH1 0x40 00000224: MLOAD 00000225: SWAP2 00000226: POP 00000227: PUSH1 0x1f 00000229: NOT 0000022a: PUSH1 0x3f 0000022c: RETURNDATASIZE 0000022d: ADD 0000022e: AND 0000022f: DUP3 00000230: ADD 00000231: PUSH1 0x40 00000233: MSTORE 00000234: RETURNDATASIZE 00000235: DUP3 00000236: MSTORE 00000237: RETURNDATASIZE 00000238: PUSH1 0x00 0000023a: PUSH1 0x20 0000023c: DUP5 0000023d: ADD 0000023e: RETURNDATACOPY 0000023f: PUSH2 0x0248 00000242: JUMP 00000243: JUMPDEST 00000244: PUSH1 0x60 00000246: SWAP2 00000247: POP 00000248: JUMPDEST 00000249: POP 0000024a: POP 0000024b: SWAP1 0000024c: POP 0000024d: DUP1 0000024e: PUSH2 0x0256 00000251: JUMPI 00000252: PUSH1 0x00 00000254: DUP1 00000255: REVERT 00000256: JUMPDEST 00000257: POP 00000258: POP 00000259: POP 0000025a: POP 0000025b: JUMP 0000025c: JUMPDEST 0000025d: PUSH1 0x00 0000025f: DUP1 00000260: MLOAD 00000261: PUSH1 0x20 00000263: PUSH2 0x05ea 00000266: DUP4 00000267: CODECOPY 00000268: DUP2 00000269: MLOAD 0000026a: SWAP2 0000026b: MSTORE 0000026c: SLOAD 0000026d: PUSH1 0x01 0000026f: PUSH1 0x01 00000271: PUSH1 0xa0 00000273: SHL 00000274: SUB 00000275: AND 00000276: CALLER 00000277: PUSH1 0x01 00000279: PUSH1 0x01 0000027b: PUSH1 0xa0 0000027d: SHL 0000027e: SUB 0000027f: AND 00000280: EQ 00000281: PUSH2 0x029c 00000284: JUMPI 00000285: PUSH1 0x40 00000287: MLOAD 00000288: PUSH3 0x461bcd 0000028c: PUSH1 0xe5 0000028e: SHL 0000028f: DUP2 00000290: MSTORE 00000291: PUSH1 0x04 00000293: ADD 00000294: PUSH2 0x01da 00000297: SWAP1 00000298: PUSH2 0x05b5 0000029b: JUMP 0000029c: JUMPDEST 0000029d: PUSH1 0x01 0000029f: PUSH1 0x01 000002a1: PUSH1 0xa0 000002a3: SHL 000002a4: SUB 000002a5: DUP2 000002a6: AND 000002a7: PUSH2 0x0311 000002aa: JUMPI 000002ab: PUSH1 0x40 000002ad: MLOAD 000002ae: PUSH3 0x461bcd 000002b2: PUSH1 0xe5 000002b4: SHL 000002b5: DUP2 000002b6: MSTORE 000002b7: PUSH1 0x20 000002b9: PUSH1 0x04 000002bb: DUP3 000002bc: ADD 000002bd: MSTORE 000002be: PUSH1 0x36 000002c0: PUSH1 0x24 000002c2: DUP3 000002c3: ADD 000002c4: MSTORE 000002c5: PUSH32 0x43616e6e6f74206368616e6765207468652061646d696e206f6620612070726f 000002e6: PUSH1 0x44 000002e8: DUP3 000002e9: ADD 000002ea: MSTORE 000002eb: PUSH22 0x787920746f20746865207a65726f2061646472657373 00000302: PUSH1 0x50 00000304: SHL 00000305: PUSH1 0x64 00000307: DUP3 00000308: ADD 00000309: MSTORE 0000030a: PUSH1 0x84 0000030c: ADD 0000030d: PUSH2 0x01da 00000310: JUMP 00000311: JUMPDEST 00000312: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f 00000333: PUSH2 0x0348 00000336: PUSH1 0x00 00000338: DUP1 00000339: MLOAD 0000033a: PUSH1 0x20 0000033c: PUSH2 0x05ea 0000033f: DUP4 00000340: CODECOPY 00000341: DUP2 00000342: MLOAD 00000343: SWAP2 00000344: MSTORE 00000345: SLOAD 00000346: SWAP1 00000347: JUMP 00000348: JUMPDEST 00000349: PUSH1 0x40 0000034b: DUP1 0000034c: MLOAD 0000034d: PUSH1 0x01 0000034f: PUSH1 0x01 00000351: PUSH1 0xa0 00000353: SHL 00000354: SUB 00000355: SWAP3 00000356: DUP4 00000357: AND 00000358: DUP2 00000359: MSTORE 0000035a: SWAP2 0000035b: DUP5 0000035c: AND 0000035d: PUSH1 0x20 0000035f: DUP4 00000360: ADD 00000361: MSTORE 00000362: ADD 00000363: PUSH1 0x40 00000365: MLOAD 00000366: DUP1 00000367: SWAP2 00000368: SUB 00000369: SWAP1 0000036a: LOG1 0000036b: PUSH2 0x0380 0000036e: DUP2 0000036f: PUSH1 0x00 00000371: DUP1 00000372: MLOAD 00000373: PUSH1 0x20 00000375: PUSH2 0x05ea 00000378: DUP4 00000379: CODECOPY 0000037a: DUP2 0000037b: MLOAD 0000037c: SWAP2 0000037d: MSTORE 0000037e: SSTORE 0000037f: JUMP 00000380: JUMPDEST 00000381: POP 00000382: JUMP 00000383: JUMPDEST 00000384: PUSH1 0x00 00000386: DUP1 00000387: MLOAD 00000388: PUSH1 0x20 0000038a: PUSH2 0x05ea 0000038d: DUP4 0000038e: CODECOPY 0000038f: DUP2 00000390: MLOAD 00000391: SWAP2 00000392: MSTORE 00000393: SLOAD 00000394: PUSH1 0x01 00000396: PUSH1 0x01 00000398: PUSH1 0xa0 0000039a: SHL 0000039b: SUB 0000039c: AND 0000039d: CALLER 0000039e: PUSH1 0x01 000003a0: PUSH1 0x01 000003a2: PUSH1 0xa0 000003a4: SHL 000003a5: SUB 000003a6: AND 000003a7: EQ 000003a8: PUSH2 0x03c3 000003ab: JUMPI 000003ac: PUSH1 0x40 000003ae: MLOAD 000003af: PUSH3 0x461bcd 000003b3: PUSH1 0xe5 000003b5: SHL 000003b6: DUP2 000003b7: MSTORE 000003b8: PUSH1 0x04 000003ba: ADD 000003bb: PUSH2 0x01da 000003be: SWAP1 000003bf: PUSH2 0x05b5 000003c2: JUMP 000003c3: JUMPDEST 000003c4: PUSH2 0x0380 000003c7: DUP2 000003c8: PUSH2 0x03ff 000003cb: JUMP 000003cc: JUMPDEST 000003cd: PUSH1 0x01 000003cf: PUSH1 0x01 000003d1: PUSH1 0xa0 000003d3: SHL 000003d4: SUB 000003d5: AND 000003d6: EXTCODESIZE 000003d7: ISZERO 000003d8: ISZERO 000003d9: SWAP1 000003da: JUMP 000003db: JUMPDEST 000003dc: CALLDATASIZE 000003dd: PUSH1 0x00 000003df: DUP1 000003e0: CALLDATACOPY 000003e1: PUSH1 0x00 000003e3: DUP1 000003e4: CALLDATASIZE 000003e5: PUSH1 0x00 000003e7: DUP5 000003e8: GAS 000003e9: DELEGATECALL 000003ea: RETURNDATASIZE 000003eb: PUSH1 0x00 000003ed: DUP1 000003ee: RETURNDATACOPY 000003ef: DUP1 000003f0: DUP1 000003f1: ISZERO 000003f2: PUSH2 0x03fa 000003f5: JUMPI 000003f6: RETURNDATASIZE 000003f7: PUSH1 0x00 000003f9: RETURN 000003fa: JUMPDEST 000003fb: RETURNDATASIZE 000003fc: PUSH1 0x00 000003fe: REVERT 000003ff: JUMPDEST 00000400: PUSH2 0x0408 00000403: DUP2 00000404: PUSH2 0x043f 00000407: JUMP 00000408: JUMPDEST 00000409: PUSH1 0x40 0000040b: MLOAD 0000040c: PUSH1 0x01 0000040e: PUSH1 0x01 00000410: PUSH1 0xa0 00000412: SHL 00000413: SUB 00000414: DUP3 00000415: AND 00000416: SWAP1 00000417: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b 00000438: SWAP1 00000439: PUSH1 0x00 0000043b: SWAP1 0000043c: LOG2 0000043d: POP 0000043e: JUMP 0000043f: JUMPDEST 00000440: PUSH1 0x01 00000442: PUSH1 0x01 00000444: PUSH1 0xa0 00000446: SHL 00000447: SUB 00000448: DUP2 00000449: AND 0000044a: ISZERO 0000044b: DUP1 0000044c: PUSH2 0x045e 0000044f: JUMPI 00000450: POP 00000451: PUSH1 0x01 00000453: PUSH1 0x01 00000455: PUSH1 0xa0 00000457: SHL 00000458: SUB 00000459: DUP2 0000045a: AND 0000045b: EXTCODESIZE 0000045c: ISZERO 0000045d: ISZERO 0000045e: JUMPDEST 0000045f: PUSH2 0x04d0 00000462: JUMPI 00000463: PUSH1 0x40 00000465: MLOAD 00000466: PUSH3 0x461bcd 0000046a: PUSH1 0xe5 0000046c: SHL 0000046d: DUP2 0000046e: MSTORE 0000046f: PUSH1 0x20 00000471: PUSH1 0x04 00000473: DUP3 00000474: ADD 00000475: MSTORE 00000476: PUSH1 0x3b 00000478: PUSH1 0x24 0000047a: DUP3 0000047b: ADD 0000047c: MSTORE 0000047d: PUSH32 0x43616e6e6f742073657420612070726f787920696d706c656d656e746174696f 0000049e: PUSH1 0x44 000004a0: DUP3 000004a1: ADD 000004a2: MSTORE 000004a3: PUSH32 0x6e20746f2061206e6f6e2d636f6e747261637420616464726573730000000000 000004c4: PUSH1 0x64 000004c6: DUP3 000004c7: ADD 000004c8: MSTORE 000004c9: PUSH1 0x84 000004cb: ADD 000004cc: PUSH2 0x01da 000004cf: JUMP 000004d0: JUMPDEST 000004d1: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000004f2: SSTORE 000004f3: JUMP 000004f4: JUMPDEST 000004f5: DUP1 000004f6: CALLDATALOAD 000004f7: PUSH1 0x01 000004f9: PUSH1 0x01 000004fb: PUSH1 0xa0 000004fd: SHL 000004fe: SUB 000004ff: DUP2 00000500: AND 00000501: DUP2 00000502: EQ 00000503: PUSH2 0x050b 00000506: JUMPI 00000507: PUSH1 0x00 00000509: DUP1 0000050a: REVERT 0000050b: JUMPDEST 0000050c: SWAP2 0000050d: SWAP1 0000050e: POP 0000050f: JUMP 00000510: JUMPDEST 00000511: PUSH1 0x00 00000513: DUP1 00000514: PUSH1 0x00 00000516: PUSH1 0x40 00000518: DUP5 00000519: DUP7 0000051a: SUB 0000051b: SLT 0000051c: ISZERO 0000051d: PUSH2 0x0525 00000520: JUMPI 00000521: PUSH1 0x00 00000523: DUP1 00000524: REVERT 00000525: JUMPDEST 00000526: PUSH2 0x052e 00000529: DUP5 0000052a: PUSH2 0x04f4 0000052d: JUMP 0000052e: JUMPDEST 0000052f: SWAP3 00000530: POP 00000531: PUSH1 0x20 00000533: DUP5 00000534: ADD 00000535: CALLDATALOAD 00000536: PUSH8 0xffffffffffffffff 0000053f: DUP1 00000540: DUP3 00000541: GT 00000542: ISZERO 00000543: PUSH2 0x054b 00000546: JUMPI 00000547: PUSH1 0x00 00000549: DUP1 0000054a: REVERT 0000054b: JUMPDEST 0000054c: DUP2 0000054d: DUP7 0000054e: ADD 0000054f: SWAP2 00000550: POP 00000551: DUP7 00000552: PUSH1 0x1f 00000554: DUP4 00000555: ADD 00000556: SLT 00000557: PUSH2 0x055f 0000055a: JUMPI 0000055b: PUSH1 0x00 0000055d: DUP1 0000055e: REVERT 0000055f: JUMPDEST 00000560: DUP2 00000561: CALLDATALOAD 00000562: DUP2 00000563: DUP2 00000564: GT 00000565: ISZERO 00000566: PUSH2 0x056e 00000569: JUMPI 0000056a: PUSH1 0x00 0000056c: DUP1 0000056d: REVERT 0000056e: JUMPDEST 0000056f: DUP8 00000570: PUSH1 0x20 00000572: DUP3 00000573: DUP6 00000574: ADD 00000575: ADD 00000576: GT 00000577: ISZERO 00000578: PUSH2 0x0580 0000057b: JUMPI 0000057c: PUSH1 0x00 0000057e: DUP1 0000057f: REVERT 00000580: JUMPDEST 00000581: PUSH1 0x20 00000583: DUP4 00000584: ADD 00000585: SWAP5 00000586: POP 00000587: DUP1 00000588: SWAP4 00000589: POP 0000058a: POP 0000058b: POP 0000058c: POP 0000058d: SWAP3 0000058e: POP 0000058f: SWAP3 00000590: POP 00000591: SWAP3 00000592: JUMP 00000593: JUMPDEST 00000594: PUSH1 0x00 00000596: PUSH1 0x20 00000598: DUP3 00000599: DUP5 0000059a: SUB 0000059b: SLT 0000059c: ISZERO 0000059d: PUSH2 0x05a5 000005a0: JUMPI 000005a1: PUSH1 0x00 000005a3: DUP1 000005a4: REVERT 000005a5: JUMPDEST 000005a6: PUSH2 0x05ae 000005a9: DUP3 000005aa: PUSH2 0x04f4 000005ad: JUMP 000005ae: JUMPDEST 000005af: SWAP4 000005b0: SWAP3 000005b1: POP 000005b2: POP 000005b3: POP 000005b4: JUMP 000005b5: JUMPDEST 000005b6: PUSH1 0x20 000005b8: DUP1 000005b9: DUP3 000005ba: MSTORE 000005bb: PUSH1 0x0a 000005bd: SWAP1 000005be: DUP3 000005bf: ADD 000005c0: MSTORE 000005c1: PUSH10 0x37b7363c9030b236b4b7 000005cc: PUSH1 0xb1 000005ce: SHL 000005cf: PUSH1 0x40 000005d1: DUP3 000005d2: ADD 000005d3: MSTORE 000005d4: PUSH1 0x60 000005d6: ADD 000005d7: SWAP1 000005d8: JUMP 000005d9: JUMPDEST 000005da: DUP2 000005db: DUP4 000005dc: DUP3 000005dd: CALLDATACOPY 000005de: PUSH1 0x00 000005e0: SWAP2 000005e1: ADD 000005e2: SWAP1 000005e3: DUP2 000005e4: MSTORE 000005e5: SWAP2 000005e6: SWAP1 000005e7: POP 000005e8: JUMP 000005e9: INVALID 000005ea: UNKNOWN(0xB5) 000005eb: BALANCE 000005ec: UNKNOWN(0x27) 000005ed: PUSH9 0x4a568b3173ae13b9f8 000005f7: UNKNOWN(0xA6) 000005f8: ADD 000005f9: PUSH15 0x243e63b6e8ee1178d6a717850b5d61 00000609: SUB 0000060a: LOG2 0000060b: PUSH5 0x6970667358 00000611: UNKNOWN(0x22) 00000612: SLT 00000613: KECCAK256 00000614: GASLIMIT 00000615: UNKNOWN(0xC8) 00000616: UNKNOWN(0x0D) 00000617: CALLCODE 00000618: PUSH7 0xccaf27913ee326 00000620: UNKNOWN(0xC3) 00000621: UNKNOWN(0xBF) 00000622: ORIGIN 00000623: UNKNOWN(0xC3) 00000624: ADD 00000625: UNKNOWN(0x25) 00000626: DIFFICULTY 00000627: UNKNOWN(0xE0) 00000628: UNKNOWN(0xD1) 00000629: SHL 0000062a: PUSH7 0x6a280ec854e881 00000632: SWAP6 00000633: UNKNOWN(0x2C) 00000634: PUSH5 0x736f6c6343 0000063a: STOP 0000063b: ADDMOD 0000063c: GT 0000063d: STOP 0000063e: CALLER
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | upgradeability | detector | Untrusted DELEGATECALL target reachable | 55 | no | no |
viewtrace_id: 0xdc5407e6d03a3e86bcfd5a360eed81d0e985339f4a135768d6c081da38b17e77
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "unknown",
"attempts": 60,
"trace_id": "0xdc5407e6d03a3e86bcfd5a360eed81d0e985339f4a135768d6c081da38b17e77",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0fd5b6ae",
"selector": "0x0fd5b6ae",
"calldata_variants": [
"0x0fd5b6ae",
"0x0fd5b6ae0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x1646cbb8",
"selector": "0x1646cbb8",
"calldata_variants": [
"0x1646cbb8",
"0x1646cbb80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6726eb16",
"selector": "0x6726eb16",
"calldata_variants": [
"0x6726eb16",
"0x6726eb160000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9fea0eb1",
"selector": "0x9fea0eb1",
"calldata_variants": [
"0x9fea0eb1",
"0x9fea0eb10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe405236b",
"selector": "0xe405236b",
"calldata_variants": [
"0xe405236b",
"0xe405236b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 532,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 1001,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [
{
"pc": 1570,
"type": "tx_origin_used"
}
],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|
| high | auth | detector | Authorization based on tx.origin | 70 | no | — |
viewvalidation_json{
"reason": "missing sink mapping",
"status": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0fd5b6ae",
"selector": "0x0fd5b6ae",
"calldata_variants": [
"0x0fd5b6ae",
"0x0fd5b6ae0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x1646cbb8",
"selector": "0x1646cbb8",
"calldata_variants": [
"0x1646cbb8",
"0x1646cbb80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6726eb16",
"selector": "0x6726eb16",
"calldata_variants": [
"0x6726eb16",
"0x6726eb160000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9fea0eb1",
"selector": "0x9fea0eb1",
"calldata_variants": [
"0x9fea0eb1",
"0x9fea0eb10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe405236b",
"selector": "0xe405236b",
"calldata_variants": [
"0xe405236b",
"0xe405236b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [
{
"pc": 1570,
"type": "tx_origin_used"
}
]
}
|
| medium | other | detector | Untrusted CALL target/value reachable | 45 | no | no |
viewtrace_id: 0xa2615beea771f137029fbee849d80b719f588399e96f64b4022304358e71c6b4
call_targets:
0x146f2ac6ffc0c953073598fb5d6fbe0976421d8e
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xa2615beea771f137029fbee849d80b719f588399e96f64b4022304358e71c6b4",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x146f2ac6ffc0c953073598fb5d6fbe0976421d8e"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0fd5b6ae",
"selector": "0x0fd5b6ae",
"calldata_variants": [
"0x0fd5b6ae",
"0x0fd5b6ae0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x1646cbb8",
"selector": "0x1646cbb8",
"calldata_variants": [
"0x1646cbb8",
"0x1646cbb80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6726eb16",
"selector": "0x6726eb16",
"calldata_variants": [
"0x6726eb16",
"0x6726eb160000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9fea0eb1",
"selector": "0x9fea0eb1",
"calldata_variants": [
"0x9fea0eb1",
"0x9fea0eb10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe405236b",
"selector": "0xe405236b",
"calldata_variants": [
"0xe405236b",
"0xe405236b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1559,
"opcode": "CALLCODE",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [
{
"pc": 1570,
"type": "tx_origin_used"
}
],
"untrusted_call_count": 1
}
|
| medium | other | detector | ETH value transfer possible | 40 | no | no |
viewtrace_id: 0xa2615beea771f137029fbee849d80b719f588399e96f64b4022304358e71c6b4
call_targets:
0x146f2ac6ffc0c953073598fb5d6fbe0976421d8e
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xa2615beea771f137029fbee849d80b719f588399e96f64b4022304358e71c6b4",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x146f2ac6ffc0c953073598fb5d6fbe0976421d8e"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x0fd5b6ae",
"selector": "0x0fd5b6ae",
"calldata_variants": [
"0x0fd5b6ae",
"0x0fd5b6ae0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x1646cbb8",
"selector": "0x1646cbb8",
"calldata_variants": [
"0x1646cbb8",
"0x1646cbb80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6726eb16",
"selector": "0x6726eb16",
"calldata_variants": [
"0x6726eb16",
"0x6726eb160000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9fea0eb1",
"selector": "0x9fea0eb1",
"calldata_variants": [
"0x9fea0eb1",
"0x9fea0eb10000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe405236b",
"selector": "0xe405236b",
"calldata_variants": [
"0xe405236b",
"0xe405236b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1559,
"opcode": "CALLCODE",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": [
{
"pc": 1570,
"type": "tx_origin_used"
}
]
}
|