Analysis Run

019b477e-cd74-71bc-9e18-f16ba276041a

complete

Chain ID

1

Address

0x942431cc0aa4c5bd88695175d36c17ec5405608d

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
27035	artifact.fetch	complete	1 / 3	3 months ago
27036	tool.cast_disasm	complete	1 / 3	3 months ago
92089	analysis.bundle	complete	1 / 3	2 weeks ago
92090	capability.graph	complete	1 / 3	2 weeks ago
92091	detector.run	complete	1 / 3	2 weeks ago
92092	validation.fork	complete	1 / 3	2 weeks ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

7

EXT*/BALANCE

2

Total opcodes

1184

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0074
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x8da5cb5b
00000019: GT
0000001a: PUSH2 0x004e
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x8da5cb5b
00000024: EQ
00000025: PUSH2 0x00e2
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x967899bc
0000002f: EQ
00000030: PUSH2 0x010d
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xb9a3daf9
0000003a: EQ
0000003b: PUSH2 0x0122
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xd0e30db0
00000045: EQ
00000046: PUSH2 0x0137
00000049: JUMPI
0000004a: PUSH2 0x007b
0000004d: JUMP
0000004e: JUMPDEST
0000004f: DUP1
00000050: PUSH4 0x7608e059
00000055: EQ
00000056: PUSH2 0x0080
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0x7fc359d4
00000060: EQ
00000061: PUSH2 0x00a2
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0x8cd40c9d
0000006b: EQ
0000006c: PUSH2 0x00c2
0000006f: JUMPI
00000070: PUSH2 0x007b
00000073: JUMP
00000074: JUMPDEST
00000075: CALLDATASIZE
00000076: PUSH2 0x007b
00000079: JUMPI
0000007a: STOP
0000007b: JUMPDEST
0000007c: PUSH1 0x00
0000007e: DUP1
0000007f: REVERT
00000080: JUMPDEST
00000081: CALLVALUE
00000082: DUP1
00000083: ISZERO
00000084: PUSH2 0x008c
00000087: JUMPI
00000088: PUSH1 0x00
0000008a: DUP1
0000008b: REVERT
0000008c: JUMPDEST
0000008d: POP
0000008e: PUSH2 0x00a0
00000091: PUSH2 0x009b
00000094: CALLDATASIZE
00000095: PUSH1 0x04
00000097: PUSH2 0x069f
0000009a: JUMP
0000009b: JUMPDEST
0000009c: PUSH2 0x013f
0000009f: JUMP
000000a0: JUMPDEST
000000a1: STOP
000000a2: JUMPDEST
000000a3: CALLVALUE
000000a4: DUP1
000000a5: ISZERO
000000a6: PUSH2 0x00ae
000000a9: JUMPI
000000aa: PUSH1 0x00
000000ac: DUP1
000000ad: REVERT
000000ae: JUMPDEST
000000af: POP
000000b0: PUSH2 0x00a0
000000b3: PUSH2 0x00bd
000000b6: CALLDATASIZE
000000b7: PUSH1 0x04
000000b9: PUSH2 0x073d
000000bc: JUMP
000000bd: JUMPDEST
000000be: PUSH2 0x01d6
000000c1: JUMP
000000c2: JUMPDEST
000000c3: CALLVALUE
000000c4: DUP1
000000c5: ISZERO
000000c6: PUSH2 0x00ce
000000c9: JUMPI
000000ca: PUSH1 0x00
000000cc: DUP1
000000cd: REVERT
000000ce: JUMPDEST
000000cf: POP
000000d0: PUSH2 0x00a0
000000d3: PUSH2 0x00dd
000000d6: CALLDATASIZE
000000d7: PUSH1 0x04
000000d9: PUSH2 0x065c
000000dc: JUMP
000000dd: JUMPDEST
000000de: PUSH2 0x022b
000000e1: JUMP
000000e2: JUMPDEST
000000e3: CALLVALUE
000000e4: DUP1
000000e5: ISZERO
000000e6: PUSH2 0x00ee
000000e9: JUMPI
000000ea: PUSH1 0x00
000000ec: DUP1
000000ed: REVERT
000000ee: JUMPDEST
000000ef: POP
000000f0: PUSH2 0x00f7
000000f3: PUSH2 0x0274
000000f6: JUMP
000000f7: JUMPDEST
000000f8: PUSH1 0x40
000000fa: MLOAD
000000fb: PUSH2 0x0104
000000fe: SWAP2
000000ff: SWAP1
00000100: PUSH2 0x07b6
00000103: JUMP
00000104: JUMPDEST
00000105: PUSH1 0x40
00000107: MLOAD
00000108: DUP1
00000109: SWAP2
0000010a: SUB
0000010b: SWAP1
0000010c: RETURN
0000010d: JUMPDEST
0000010e: PUSH2 0x0115
00000111: PUSH2 0x0290
00000114: JUMP
00000115: JUMPDEST
00000116: PUSH1 0x40
00000118: MLOAD
00000119: PUSH2 0x0104
0000011c: SWAP2
0000011d: SWAP1
0000011e: PUSH2 0x0834
00000121: JUMP
00000122: JUMPDEST
00000123: CALLVALUE
00000124: DUP1
00000125: ISZERO
00000126: PUSH2 0x012e
00000129: JUMPI
0000012a: PUSH1 0x00
0000012c: DUP1
0000012d: REVERT
0000012e: JUMPDEST
0000012f: POP
00000130: PUSH2 0x00a0
00000133: PUSH2 0x04ad
00000136: JUMP
00000137: JUMPDEST
00000138: PUSH2 0x00a0
0000013b: PUSH2 0x0500
0000013e: JUMP
0000013f: JUMPDEST
00000140: PUSH1 0x00
00000142: SLOAD
00000143: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000158: AND
00000159: CALLER
0000015a: EQ
0000015b: PUSH2 0x0163
0000015e: JUMPI
0000015f: PUSH1 0x00
00000161: DUP1
00000162: REVERT
00000163: JUMPDEST
00000164: DUP4
00000165: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000017a: AND
0000017b: DUP4
0000017c: DUP4
0000017d: DUP4
0000017e: PUSH1 0x40
00000180: MLOAD
00000181: PUSH2 0x018b
00000184: SWAP3
00000185: SWAP2
00000186: SWAP1
00000187: PUSH2 0x076d
0000018a: JUMP
0000018b: JUMPDEST
0000018c: PUSH1 0x00
0000018e: PUSH1 0x40
00000190: MLOAD
00000191: DUP1
00000192: DUP4
00000193: SUB
00000194: DUP2
00000195: DUP6
00000196: DUP8
00000197: GAS
00000198: CALL
00000199: SWAP3
0000019a: POP
0000019b: POP
0000019c: POP
0000019d: RETURNDATASIZE
0000019e: DUP1
0000019f: PUSH1 0x00
000001a1: DUP2
000001a2: EQ
000001a3: PUSH2 0x01c8
000001a6: JUMPI
000001a7: PUSH1 0x40
000001a9: MLOAD
000001aa: SWAP2
000001ab: POP
000001ac: PUSH1 0x1f
000001ae: NOT
000001af: PUSH1 0x3f
000001b1: RETURNDATASIZE
000001b2: ADD
000001b3: AND
000001b4: DUP3
000001b5: ADD
000001b6: PUSH1 0x40
000001b8: MSTORE
000001b9: RETURNDATASIZE
000001ba: DUP3
000001bb: MSTORE
000001bc: RETURNDATASIZE
000001bd: PUSH1 0x00
000001bf: PUSH1 0x20
000001c1: DUP5
000001c2: ADD
000001c3: RETURNDATACOPY
000001c4: PUSH2 0x01cd
000001c7: JUMP
000001c8: JUMPDEST
000001c9: PUSH1 0x60
000001cb: SWAP2
000001cc: POP
000001cd: JUMPDEST
000001ce: POP
000001cf: POP
000001d0: POP
000001d1: POP
000001d2: POP
000001d3: POP
000001d4: POP
000001d5: JUMP
000001d6: JUMPDEST
000001d7: PUSH1 0x00
000001d9: SLOAD
000001da: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001ef: AND
000001f0: CALLER
000001f1: EQ
000001f2: PUSH2 0x01fa
000001f5: JUMPI
000001f6: PUSH1 0x00
000001f8: DUP1
000001f9: REVERT
000001fa: JUMPDEST
000001fb: PUSH1 0x40
000001fd: MLOAD
000001fe: CALLER
000001ff: SWAP1
00000200: DUP3
00000201: ISZERO
00000202: PUSH2 0x08fc
00000205: MUL
00000206: SWAP1
00000207: DUP4
00000208: SWAP1
00000209: PUSH1 0x00
0000020b: DUP2
0000020c: DUP2
0000020d: DUP2
0000020e: DUP6
0000020f: DUP9
00000210: DUP9
00000211: CALL
00000212: SWAP4
00000213: POP
00000214: POP
00000215: POP
00000216: POP
00000217: ISZERO
00000218: DUP1
00000219: ISZERO
0000021a: PUSH2 0x0227
0000021d: JUMPI
0000021e: RETURNDATASIZE
0000021f: PUSH1 0x00
00000221: DUP1
00000222: RETURNDATACOPY
00000223: RETURNDATASIZE
00000224: PUSH1 0x00
00000226: REVERT
00000227: JUMPDEST
00000228: POP
00000229: POP
0000022a: JUMP
0000022b: JUMPDEST
0000022c: PUSH1 0x00
0000022e: SLOAD
0000022f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000244: AND
00000245: CALLER
00000246: EQ
00000247: PUSH2 0x024f
0000024a: JUMPI
0000024b: PUSH1 0x00
0000024d: DUP1
0000024e: REVERT
0000024f: JUMPDEST
00000250: PUSH1 0x00
00000252: SLOAD
00000253: PUSH2 0x0227
00000256: SWAP1
00000257: DUP4
00000258: SWAP1
00000259: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000026e: AND
0000026f: DUP4
00000270: PUSH2 0x0502
00000273: JUMP
00000274: JUMPDEST
00000275: PUSH1 0x00
00000277: SLOAD
00000278: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000028d: AND
0000028e: DUP2
0000028f: JUMP
00000290: JUMPDEST
00000291: PUSH1 0x00
00000293: DUP1
00000294: GAS
00000295: PUSH1 0x40
00000297: DUP1
00000298: MLOAD
00000299: PUSH1 0x00
0000029b: DUP2
0000029c: MSTORE
0000029d: PUSH1 0x20
0000029f: DUP2
000002a0: ADD
000002a1: SWAP2
000002a2: DUP3
000002a3: SWAP1
000002a4: MSTORE
000002a5: SWAP2
000002a6: SWAP3
000002a7: POP
000002a8: SELFBALANCE
000002a9: SWAP2
000002aa: PUSH20 0x9d9bcdd249e439aaab545f59a33812e39a8e3072
000002bf: SWAP2
000002c0: DUP4
000002c1: SWAP2
000002c2: PUSH2 0x02ca
000002c5: SWAP2
000002c6: PUSH2 0x077d
000002c9: JUMP
000002ca: JUMPDEST
000002cb: PUSH1 0x00
000002cd: PUSH1 0x40
000002cf: MLOAD
000002d0: DUP1
000002d1: DUP4
000002d2: SUB
000002d3: DUP2
000002d4: DUP6
000002d5: DUP8
000002d6: GAS
000002d7: CALL
000002d8: SWAP3
000002d9: POP
000002da: POP
000002db: POP
000002dc: RETURNDATASIZE
000002dd: DUP1
000002de: PUSH1 0x00
000002e0: DUP2
000002e1: EQ
000002e2: PUSH2 0x0307
000002e5: JUMPI
000002e6: PUSH1 0x40
000002e8: MLOAD
000002e9: SWAP2
000002ea: POP
000002eb: PUSH1 0x1f
000002ed: NOT
000002ee: PUSH1 0x3f
000002f0: RETURNDATASIZE
000002f1: ADD
000002f2: AND
000002f3: DUP3
000002f4: ADD
000002f5: PUSH1 0x40
000002f7: MSTORE
000002f8: RETURNDATASIZE
000002f9: DUP3
000002fa: MSTORE
000002fb: RETURNDATASIZE
000002fc: PUSH1 0x00
000002fe: PUSH1 0x20
00000300: DUP5
00000301: ADD
00000302: RETURNDATACOPY
00000303: PUSH2 0x030c
00000306: JUMP
00000307: JUMPDEST
00000308: PUSH1 0x60
0000030a: SWAP2
0000030b: POP
0000030c: JUMPDEST
0000030d: POP
0000030e: POP
0000030f: PUSH1 0x40
00000311: MLOAD
00000312: PUSH32 0x70a0823100000000000000000000000000000000000000000000000000000000
00000333: DUP2
00000334: MSTORE
00000335: PUSH1 0x00
00000337: SWAP2
00000338: POP
00000339: PUSH20 0xa3d58c4e56fedcae3a7c43a725aee9a71f0ece4e
0000034e: SWAP1
0000034f: PUSH4 0x70a08231
00000354: SWAP1
00000355: PUSH2 0x0362
00000358: SWAP1
00000359: ADDRESS
0000035a: SWAP1
0000035b: PUSH1 0x04
0000035d: ADD
0000035e: PUSH2 0x07b6
00000361: JUMP
00000362: JUMPDEST
00000363: PUSH1 0x20
00000365: PUSH1 0x40
00000367: MLOAD
00000368: DUP1
00000369: DUP4
0000036a: SUB
0000036b: DUP2
0000036c: DUP7
0000036d: DUP1
0000036e: EXTCODESIZE
0000036f: ISZERO
00000370: DUP1
00000371: ISZERO
00000372: PUSH2 0x037a
00000375: JUMPI
00000376: PUSH1 0x00
00000378: DUP1
00000379: REVERT
0000037a: JUMPDEST
0000037b: POP
0000037c: GAS
0000037d: STATICCALL
0000037e: ISZERO
0000037f: DUP1
00000380: ISZERO
00000381: PUSH2 0x038e
00000384: JUMPI
00000385: RETURNDATASIZE
00000386: PUSH1 0x00
00000388: DUP1
00000389: RETURNDATACOPY
0000038a: RETURNDATASIZE
0000038b: PUSH1 0x00
0000038d: REVERT
0000038e: JUMPDEST
0000038f: POP
00000390: POP
00000391: POP
00000392: POP
00000393: PUSH1 0x40
00000395: MLOAD
00000396: RETURNDATASIZE
00000397: PUSH1 0x1f
00000399: NOT
0000039a: PUSH1 0x1f
0000039c: DUP3
0000039d: ADD
0000039e: AND
0000039f: DUP3
000003a0: ADD
000003a1: DUP1
000003a2: PUSH1 0x40
000003a4: MSTORE
000003a5: POP
000003a6: DUP2
000003a7: ADD
000003a8: SWAP1
000003a9: PUSH2 0x03b2
000003ac: SWAP2
000003ad: SWAP1
000003ae: PUSH2 0x0755
000003b1: JUMP
000003b2: JUMPDEST
000003b3: PUSH1 0x40
000003b5: MLOAD
000003b6: PUSH31 0x1773e600000000000000000000000000000000000000000000000000000000
000003d6: DUP2
000003d7: MSTORE
000003d8: SWAP1
000003d9: SWAP2
000003da: POP
000003db: PUSH20 0x686e5ac50d9236a9b7406791256e47feddb26aba
000003f0: SWAP1
000003f1: PUSH3 0x1773e6
000003f5: SWAP1
000003f6: PUSH2 0x0406
000003f9: SWAP1
000003fa: DUP5
000003fb: SWAP1
000003fc: PUSH1 0x01
000003fe: SWAP1
000003ff: PUSH1 0x04
00000401: ADD
00000402: PUSH2 0x083d
00000405: JUMP
00000406: JUMPDEST
00000407: PUSH1 0x20
00000409: PUSH1 0x40
0000040b: MLOAD
0000040c: DUP1
0000040d: DUP4
0000040e: SUB
0000040f: DUP2
00000410: PUSH1 0x00
00000412: DUP8
00000413: DUP1
00000414: EXTCODESIZE
00000415: ISZERO
00000416: DUP1
00000417: ISZERO
00000418: PUSH2 0x0420
0000041b: JUMPI
0000041c: PUSH1 0x00
0000041e: DUP1
0000041f: REVERT
00000420: JUMPDEST
00000421: POP
00000422: GAS
00000423: CALL
00000424: ISZERO
00000425: DUP1
00000426: ISZERO
00000427: PUSH2 0x0434
0000042a: JUMPI
0000042b: RETURNDATASIZE
0000042c: PUSH1 0x00
0000042e: DUP1
0000042f: RETURNDATACOPY
00000430: RETURNDATASIZE
00000431: PUSH1 0x00
00000433: REVERT
00000434: JUMPDEST
00000435: POP
00000436: POP
00000437: POP
00000438: POP
00000439: PUSH1 0x40
0000043b: MLOAD
0000043c: RETURNDATASIZE
0000043d: PUSH1 0x1f
0000043f: NOT
00000440: PUSH1 0x1f
00000442: DUP3
00000443: ADD
00000444: AND
00000445: DUP3
00000446: ADD
00000447: DUP1
00000448: PUSH1 0x40
0000044a: MSTORE
0000044b: POP
0000044c: DUP2
0000044d: ADD
0000044e: SWAP1
0000044f: PUSH2 0x0458
00000452: SWAP2
00000453: SWAP1
00000454: PUSH2 0x0755
00000457: JUMP
00000458: JUMPDEST
00000459: POP
0000045a: SELFBALANCE
0000045b: DUP3
0000045c: GAS
0000045d: DUP6
0000045e: SUB
0000045f: GASPRICE
00000460: MUL
00000461: ADD
00000462: DUP2
00000463: GT
00000464: PUSH2 0x04a2
00000467: JUMPI
00000468: PUSH1 0x40
0000046a: MLOAD
0000046b: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000048c: DUP2
0000048d: MSTORE
0000048e: PUSH1 0x04
00000490: ADD
00000491: PUSH2 0x0499
00000494: SWAP1
00000495: PUSH2 0x07fd
00000498: JUMP
00000499: JUMPDEST
0000049a: PUSH1 0x40
0000049c: MLOAD
0000049d: DUP1
0000049e: SWAP2
0000049f: SUB
000004a0: SWAP1
000004a1: REVERT
000004a2: JUMPDEST
000004a3: SWAP2
000004a4: SWAP1
000004a5: SWAP2
000004a6: SUB
000004a7: SWAP4
000004a8: SWAP3
000004a9: POP
000004aa: POP
000004ab: POP
000004ac: JUMP
000004ad: JUMPDEST
000004ae: PUSH1 0x00
000004b0: SLOAD
000004b1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004c6: AND
000004c7: CALLER
000004c8: EQ
000004c9: PUSH2 0x04d1
000004cc: JUMPI
000004cd: PUSH1 0x00
000004cf: DUP1
000004d0: REVERT
000004d1: JUMPDEST
000004d2: PUSH1 0x40
000004d4: MLOAD
000004d5: CALLER
000004d6: SWAP1
000004d7: SELFBALANCE
000004d8: DUP1
000004d9: ISZERO
000004da: PUSH2 0x08fc
000004dd: MUL
000004de: SWAP2
000004df: PUSH1 0x00
000004e1: DUP2
000004e2: DUP2
000004e3: DUP2
000004e4: DUP6
000004e5: DUP9
000004e6: DUP9
000004e7: CALL
000004e8: SWAP4
000004e9: POP
000004ea: POP
000004eb: POP
000004ec: POP
000004ed: ISZERO
000004ee: DUP1
000004ef: ISZERO
000004f0: PUSH2 0x04fd
000004f3: JUMPI
000004f4: RETURNDATASIZE
000004f5: PUSH1 0x00
000004f7: DUP1
000004f8: RETURNDATACOPY
000004f9: RETURNDATASIZE
000004fa: PUSH1 0x00
000004fc: REVERT
000004fd: JUMPDEST
000004fe: POP
000004ff: JUMP
00000500: JUMPDEST
00000501: JUMP
00000502: JUMPDEST
00000503: PUSH1 0x40
00000505: DUP1
00000506: MLOAD
00000507: DUP1
00000508: DUP3
00000509: ADD
0000050a: DUP3
0000050b: MSTORE
0000050c: PUSH1 0x19
0000050e: DUP2
0000050f: MSTORE
00000510: PUSH32 0x7472616e7366657228616464726573732c75696e743235362900000000000000
00000531: PUSH1 0x20
00000533: SWAP1
00000534: SWAP2
00000535: ADD
00000536: MSTORE
00000537: MLOAD
00000538: PUSH1 0x00
0000053a: SWAP1
0000053b: PUSH1 0x60
0000053d: SWAP1
0000053e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000553: DUP7
00000554: AND
00000555: SWAP1
00000556: PUSH32 0xa9059cbb2ab09eb219583f4a59a5d0623ade346d962bcd4e46b11da047c9049b
00000577: SWAP1
00000578: PUSH2 0x0587
0000057b: SWAP1
0000057c: DUP8
0000057d: SWAP1
0000057e: DUP8
0000057f: SWAP1
00000580: PUSH1 0x24
00000582: ADD
00000583: PUSH2 0x07d7
00000586: JUMP
00000587: JUMPDEST
00000588: PUSH1 0x40
0000058a: DUP1
0000058b: MLOAD
0000058c: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
000005ad: DUP2
000005ae: DUP5
000005af: SUB
000005b0: ADD
000005b1: DUP2
000005b2: MSTORE
000005b3: SWAP2
000005b4: DUP2
000005b5: MSTORE
000005b6: PUSH1 0x20
000005b8: DUP3
000005b9: ADD
000005ba: DUP1
000005bb: MLOAD
000005bc: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
000005d9: AND
000005da: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
000005fb: SWAP1
000005fc: SWAP5
000005fd: AND
000005fe: SWAP4
000005ff: SWAP1
00000600: SWAP4
00000601: OR
00000602: SWAP1
00000603: SWAP3
00000604: MSTORE
00000605: SWAP1
00000606: MLOAD
00000607: PUSH2 0x0610
0000060a: SWAP2
0000060b: SWAP1
0000060c: PUSH2 0x077d
0000060f: JUMP
00000610: JUMPDEST
00000611: PUSH1 0x00
00000613: PUSH1 0x40
00000615: MLOAD
00000616: DUP1
00000617: DUP4
00000618: SUB
00000619: DUP2
0000061a: PUSH1 0x00
0000061c: DUP7
0000061d: GAS
0000061e: CALL
0000061f: SWAP2
00000620: POP
00000621: POP
00000622: RETURNDATASIZE
00000623: DUP1
00000624: PUSH1 0x00
00000626: DUP2
00000627: EQ
00000628: PUSH2 0x064d
0000062b: JUMPI
0000062c: PUSH1 0x40
0000062e: MLOAD
0000062f: SWAP2
00000630: POP
00000631: PUSH1 0x1f
00000633: NOT
00000634: PUSH1 0x3f
00000636: RETURNDATASIZE
00000637: ADD
00000638: AND
00000639: DUP3
0000063a: ADD
0000063b: PUSH1 0x40
0000063d: MSTORE
0000063e: RETURNDATASIZE
0000063f: DUP3
00000640: MSTORE
00000641: RETURNDATASIZE
00000642: PUSH1 0x00
00000644: PUSH1 0x20
00000646: DUP5
00000647: ADD
00000648: RETURNDATACOPY
00000649: PUSH2 0x0652
0000064c: JUMP
0000064d: JUMPDEST
0000064e: PUSH1 0x60
00000650: SWAP2
00000651: POP
00000652: JUMPDEST
00000653: POP
00000654: POP
00000655: POP
00000656: POP
00000657: POP
00000658: POP
00000659: POP
0000065a: POP
0000065b: JUMP
0000065c: JUMPDEST
0000065d: PUSH1 0x00
0000065f: DUP1
00000660: PUSH1 0x40
00000662: DUP4
00000663: DUP6
00000664: SUB
00000665: SLT
00000666: ISZERO
00000667: PUSH2 0x066e
0000066a: JUMPI
0000066b: DUP2
0000066c: DUP3
0000066d: REVERT
0000066e: JUMPDEST
0000066f: DUP3
00000670: CALLDATALOAD
00000671: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000686: DUP2
00000687: AND
00000688: DUP2
00000689: EQ
0000068a: PUSH2 0x0691
0000068d: JUMPI
0000068e: DUP3
0000068f: DUP4
00000690: REVERT
00000691: JUMPDEST
00000692: SWAP5
00000693: PUSH1 0x20
00000695: SWAP4
00000696: SWAP1
00000697: SWAP4
00000698: ADD
00000699: CALLDATALOAD
0000069a: SWAP4
0000069b: POP
0000069c: POP
0000069d: POP
0000069e: JUMP
0000069f: JUMPDEST
000006a0: PUSH1 0x00
000006a2: DUP1
000006a3: PUSH1 0x00
000006a5: DUP1
000006a6: PUSH1 0x60
000006a8: DUP6
000006a9: DUP8
000006aa: SUB
000006ab: SLT
000006ac: ISZERO
000006ad: PUSH2 0x06b4
000006b0: JUMPI
000006b1: DUP2
000006b2: DUP3
000006b3: REVERT
000006b4: JUMPDEST
000006b5: DUP5
000006b6: CALLDATALOAD
000006b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006cc: DUP2
000006cd: AND
000006ce: DUP2
000006cf: EQ
000006d0: PUSH2 0x06d7
000006d3: JUMPI
000006d4: DUP3
000006d5: DUP4
000006d6: REVERT
000006d7: JUMPDEST
000006d8: SWAP4
000006d9: POP
000006da: PUSH1 0x20
000006dc: DUP6
000006dd: ADD
000006de: CALLDATALOAD
000006df: SWAP3
000006e0: POP
000006e1: PUSH1 0x40
000006e3: DUP6
000006e4: ADD
000006e5: CALLDATALOAD
000006e6: PUSH8 0xffffffffffffffff
000006ef: DUP1
000006f0: DUP3
000006f1: GT
000006f2: ISZERO
000006f3: PUSH2 0x06fa
000006f6: JUMPI
000006f7: DUP4
000006f8: DUP5
000006f9: REVERT
000006fa: JUMPDEST
000006fb: DUP2
000006fc: DUP8
000006fd: ADD
000006fe: DUP9
000006ff: PUSH1 0x1f
00000701: DUP3
00000702: ADD
00000703: SLT
00000704: PUSH2 0x070b
00000707: JUMPI
00000708: DUP5
00000709: DUP6
0000070a: REVERT
0000070b: JUMPDEST
0000070c: DUP1
0000070d: CALLDATALOAD
0000070e: SWAP3
0000070f: POP
00000710: DUP2
00000711: DUP4
00000712: GT
00000713: ISZERO
00000714: PUSH2 0x071b
00000717: JUMPI
00000718: DUP5
00000719: DUP6
0000071a: REVERT
0000071b: JUMPDEST
0000071c: DUP9
0000071d: PUSH1 0x20
0000071f: DUP5
00000720: DUP4
00000721: ADD
00000722: ADD
00000723: GT
00000724: ISZERO
00000725: PUSH2 0x072c
00000728: JUMPI
00000729: DUP5
0000072a: DUP6
0000072b: REVERT
0000072c: JUMPDEST
0000072d: SWAP6
0000072e: SWAP9
0000072f: SWAP5
00000730: SWAP8
00000731: POP
00000732: POP
00000733: PUSH1 0x20
00000735: SWAP1
00000736: SWAP5
00000737: ADD
00000738: SWAP5
00000739: POP
0000073a: POP
0000073b: POP
0000073c: JUMP
0000073d: JUMPDEST
0000073e: PUSH1 0x00
00000740: PUSH1 0x20
00000742: DUP3
00000743: DUP5
00000744: SUB
00000745: SLT
00000746: ISZERO
00000747: PUSH2 0x074e
0000074a: JUMPI
0000074b: DUP1
0000074c: DUP2
0000074d: REVERT
0000074e: JUMPDEST
0000074f: POP
00000750: CALLDATALOAD
00000751: SWAP2
00000752: SWAP1
00000753: POP
00000754: JUMP
00000755: JUMPDEST
00000756: PUSH1 0x00
00000758: PUSH1 0x20
0000075a: DUP3
0000075b: DUP5
0000075c: SUB
0000075d: SLT
0000075e: ISZERO
0000075f: PUSH2 0x0766
00000762: JUMPI
00000763: DUP1
00000764: DUP2
00000765: REVERT
00000766: JUMPDEST
00000767: POP
00000768: MLOAD
00000769: SWAP2
0000076a: SWAP1
0000076b: POP
0000076c: JUMP
0000076d: JUMPDEST
0000076e: PUSH1 0x00
00000770: DUP3
00000771: DUP5
00000772: DUP4
00000773: CALLDATACOPY
00000774: SWAP2
00000775: ADD
00000776: SWAP1
00000777: DUP2
00000778: MSTORE
00000779: SWAP2
0000077a: SWAP1
0000077b: POP
0000077c: JUMP
0000077d: JUMPDEST
0000077e: PUSH1 0x00
00000780: DUP3
00000781: MLOAD
00000782: DUP2
00000783: JUMPDEST
00000784: DUP2
00000785: DUP2
00000786: LT
00000787: ISZERO
00000788: PUSH2 0x079d
0000078b: JUMPI
0000078c: PUSH1 0x20
0000078e: DUP2
0000078f: DUP7
00000790: ADD
00000791: DUP2
00000792: ADD
00000793: MLOAD
00000794: DUP6
00000795: DUP4
00000796: ADD
00000797: MSTORE
00000798: ADD
00000799: PUSH2 0x0783
0000079c: JUMP
0000079d: JUMPDEST
0000079e: DUP2
0000079f: DUP2
000007a0: GT
000007a1: ISZERO
000007a2: PUSH2 0x07ab
000007a5: JUMPI
000007a6: DUP3
000007a7: DUP3
000007a8: DUP6
000007a9: ADD
000007aa: MSTORE
000007ab: JUMPDEST
000007ac: POP
000007ad: SWAP2
000007ae: SWAP1
000007af: SWAP2
000007b0: ADD
000007b1: SWAP3
000007b2: SWAP2
000007b3: POP
000007b4: POP
000007b5: JUMP
000007b6: JUMPDEST
000007b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007cc: SWAP2
000007cd: SWAP1
000007ce: SWAP2
000007cf: AND
000007d0: DUP2
000007d1: MSTORE
000007d2: PUSH1 0x20
000007d4: ADD
000007d5: SWAP1
000007d6: JUMP
000007d7: JUMPDEST
000007d8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007ed: SWAP3
000007ee: SWAP1
000007ef: SWAP3
000007f0: AND
000007f1: DUP3
000007f2: MSTORE
000007f3: PUSH1 0x20
000007f5: DUP3
000007f6: ADD
000007f7: MSTORE
000007f8: PUSH1 0x40
000007fa: ADD
000007fb: SWAP1
000007fc: JUMP
000007fd: JUMPDEST
000007fe: PUSH1 0x20
00000800: DUP1
00000801: DUP3
00000802: MSTORE
00000803: PUSH1 0x01
00000805: SWAP1
00000806: DUP3
00000807: ADD
00000808: MSTORE
00000809: PUSH32 0x6900000000000000000000000000000000000000000000000000000000000000
0000082a: PUSH1 0x40
0000082c: DUP3
0000082d: ADD
0000082e: MSTORE
0000082f: PUSH1 0x60
00000831: ADD
00000832: SWAP1
00000833: JUMP
00000834: JUMPDEST
00000835: SWAP1
00000836: DUP2
00000837: MSTORE
00000838: PUSH1 0x20
0000083a: ADD
0000083b: SWAP1
0000083c: JUMP
0000083d: JUMPDEST
0000083e: SWAP2
0000083f: DUP3
00000840: MSTORE
00000841: PUSH1 0x20
00000843: DUP3
00000844: ADD
00000845: MSTORE
00000846: PUSH1 0x40
00000848: ADD
00000849: SWAP1
0000084a: JUMP
0000084b: INVALID
0000084c: LOG2
0000084d: PUSH5 0x6970667358
00000853: UNKNOWN(0x22)
00000854: SLT
00000855: KECCAK256
00000856: UNKNOWN(0xDD)
00000857: PUSH14 0x9abab3b61ff7c2c68c24cb33afb5
00000866: PUSH10 0x79ea62b52321adcec8cd
00000871: SWAP11
00000872: SHL
00000873: PUSH26

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0xdcb8ffccc68dbefaecc46a7047035b7ce60c222591315ff1ba72e00b102cdceb call_targets: 0x942431cc0aa4c5bd88695175d36c17ec5405608d target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xdcb8ffccc68dbefaecc46a7047035b7ce60c222591315ff1ba72e00b102cdceb", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x942431cc0aa4c5bd88695175d36c17ec5405608d" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x967899bc", "selector": "0x967899bc", "calldata_variants": [ "0x967899bc", "0x967899bc0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xb9a3daf9", "selector": "0xb9a3daf9", "calldata_variants": [ "0xb9a3daf9", "0xb9a3daf90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd0e30db0", "selector": "0xd0e30db0", "calldata_variants": [ "0xd0e30db0", "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x7608e059", "selector": "0x7608e059", "calldata_variants": [ "0x7608e059", "0x7608e0590000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x7fc359d4", "selector": "0x7fc359d4", "calldata_variants": [ "0x7fc359d4", "0x7fc359d40000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8cd40c9d", "selector": "0x8cd40c9d", "calldata_variants": [ "0x8cd40c9d", "0x8cd40c9d0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 408, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 529, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 727, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 6, "guards_detected": [], "untrusted_call_count": 6 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0xdcb8ffccc68dbefaecc46a7047035b7ce60c222591315ff1ba72e00b102cdceb call_targets: 0x942431cc0aa4c5bd88695175d36c17ec5405608d target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0xdcb8ffccc68dbefaecc46a7047035b7ce60c222591315ff1ba72e00b102cdceb", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x942431cc0aa4c5bd88695175d36c17ec5405608d" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x967899bc", "selector": "0x967899bc", "calldata_variants": [ "0x967899bc", "0x967899bc0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xb9a3daf9", "selector": "0xb9a3daf9", "calldata_variants": [ "0xb9a3daf9", "0xb9a3daf90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd0e30db0", "selector": "0xd0e30db0", "calldata_variants": [ "0xd0e30db0", "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x7608e059", "selector": "0x7608e059", "calldata_variants": [ "0x7608e059", "0x7608e0590000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x7fc359d4", "selector": "0x7fc359d4", "calldata_variants": [ "0x7fc359d4", "0x7fc359d40000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8cd40c9d", "selector": "0x8cd40c9d", "calldata_variants": [ "0x8cd40c9d", "0x8cd40c9d0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 408, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 529, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 727, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 6, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0xdcb8ffccc68dbefaecc46a7047035b7ce60c222591315ff1ba72e00b102cdceb

call_targets: 0x942431cc0aa4c5bd88695175d36c17ec5405608d

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xdcb8ffccc68dbefaecc46a7047035b7ce60c222591315ff1ba72e00b102cdceb",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x942431cc0aa4c5bd88695175d36c17ec5405608d"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x967899bc",
            "selector": "0x967899bc",
            "calldata_variants": [
                "0x967899bc",
                "0x967899bc0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb9a3daf9",
            "selector": "0xb9a3daf9",
            "calldata_variants": [
                "0xb9a3daf9",
                "0xb9a3daf90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd0e30db0",
            "selector": "0xd0e30db0",
            "calldata_variants": [
                "0xd0e30db0",
                "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7608e059",
            "selector": "0x7608e059",
            "calldata_variants": [
                "0x7608e059",
                "0x7608e0590000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x7fc359d4",
            "selector": "0x7fc359d4",
            "calldata_variants": [
                "0x7fc359d4",
                "0x7fc359d40000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8cd40c9d",
            "selector": "0x8cd40c9d",
            "calldata_variants": [
                "0x8cd40c9d",
                "0x8cd40c9d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 408,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 529,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 727,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 6,
    "guards_detected": [],
    "untrusted_call_count": 6
}