Analysis Run

019b477e-cf3f-72fb-b5dc-f438cec5f8f0

complete

Chain ID

1

Address

0xc1e718674d3a366f8432bb1b4b40fb619e22566f

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Bytecode only

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
27343	artifact.fetch	complete	1 / 3	3 months ago
27344	tool.cast_disasm	complete	1 / 3	3 months ago
70791	analysis.bundle	complete	1 / 3	1 week ago
70792	capability.graph	complete	1 / 3	1 week ago
70793	detector.run	complete	1 / 3	1 week ago
70794	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

2

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

0

EXT*/BALANCE

3

Total opcodes

1237

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0074
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x6e9960c3
00000019: GT
0000001a: PUSH2 0x004e
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x6e9960c3
00000024: EQ
00000025: PUSH2 0x00ef
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8f283970
0000002f: EQ
00000030: PUSH2 0x0104
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xaaf10f42
0000003a: EQ
0000003b: PUSH2 0x0124
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf851a440
00000045: EQ
00000046: PUSH2 0x0139
00000049: JUMPI
0000004a: PUSH2 0x0083
0000004d: JUMP
0000004e: JUMPDEST
0000004f: DUP1
00000050: PUSH4 0x3659cfe6
00000055: EQ
00000056: PUSH2 0x008b
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0x4f1ef286
00000060: EQ
00000061: PUSH2 0x00ab
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0x5c60da1b
0000006b: EQ
0000006c: PUSH2 0x00be
0000006f: JUMPI
00000070: PUSH2 0x0083
00000073: JUMP
00000074: JUMPDEST
00000075: CALLDATASIZE
00000076: PUSH2 0x0083
00000079: JUMPI
0000007a: PUSH2 0x0081
0000007d: PUSH2 0x014e
00000080: JUMP
00000081: JUMPDEST
00000082: STOP
00000083: JUMPDEST
00000084: PUSH2 0x0081
00000087: PUSH2 0x014e
0000008a: JUMP
0000008b: JUMPDEST
0000008c: CALLVALUE
0000008d: DUP1
0000008e: ISZERO
0000008f: PUSH2 0x0097
00000092: JUMPI
00000093: PUSH1 0x00
00000095: DUP1
00000096: REVERT
00000097: JUMPDEST
00000098: POP
00000099: PUSH2 0x0081
0000009c: PUSH2 0x00a6
0000009f: CALLDATASIZE
000000a0: PUSH1 0x04
000000a2: PUSH2 0x07d0
000000a5: JUMP
000000a6: JUMPDEST
000000a7: PUSH2 0x0168
000000aa: JUMP
000000ab: JUMPDEST
000000ac: PUSH2 0x0081
000000af: PUSH2 0x00b9
000000b2: CALLDATASIZE
000000b3: PUSH1 0x04
000000b5: PUSH2 0x07eb
000000b8: JUMP
000000b9: JUMPDEST
000000ba: PUSH2 0x01af
000000bd: JUMP
000000be: JUMPDEST
000000bf: CALLVALUE
000000c0: DUP1
000000c1: ISZERO
000000c2: PUSH2 0x00ca
000000c5: JUMPI
000000c6: PUSH1 0x00
000000c8: DUP1
000000c9: REVERT
000000ca: JUMPDEST
000000cb: POP
000000cc: PUSH2 0x00d3
000000cf: PUSH2 0x0220
000000d2: JUMP
000000d3: JUMPDEST
000000d4: PUSH1 0x40
000000d6: MLOAD
000000d7: PUSH1 0x01
000000d9: PUSH1 0x01
000000db: PUSH1 0xa0
000000dd: SHL
000000de: SUB
000000df: SWAP1
000000e0: SWAP2
000000e1: AND
000000e2: DUP2
000000e3: MSTORE
000000e4: PUSH1 0x20
000000e6: ADD
000000e7: PUSH1 0x40
000000e9: MLOAD
000000ea: DUP1
000000eb: SWAP2
000000ec: SUB
000000ed: SWAP1
000000ee: RETURN
000000ef: JUMPDEST
000000f0: CALLVALUE
000000f1: DUP1
000000f2: ISZERO
000000f3: PUSH2 0x00fb
000000f6: JUMPI
000000f7: PUSH1 0x00
000000f9: DUP1
000000fa: REVERT
000000fb: JUMPDEST
000000fc: POP
000000fd: PUSH2 0x00d3
00000100: PUSH2 0x025b
00000103: JUMP
00000104: JUMPDEST
00000105: CALLVALUE
00000106: DUP1
00000107: ISZERO
00000108: PUSH2 0x0110
0000010b: JUMPI
0000010c: PUSH1 0x00
0000010e: DUP1
0000010f: REVERT
00000110: JUMPDEST
00000111: POP
00000112: PUSH2 0x0081
00000115: PUSH2 0x011f
00000118: CALLDATASIZE
00000119: PUSH1 0x04
0000011b: PUSH2 0x07d0
0000011e: JUMP
0000011f: JUMPDEST
00000120: PUSH2 0x0265
00000123: JUMP
00000124: JUMPDEST
00000125: CALLVALUE
00000126: DUP1
00000127: ISZERO
00000128: PUSH2 0x0130
0000012b: JUMPI
0000012c: PUSH1 0x00
0000012e: DUP1
0000012f: REVERT
00000130: JUMPDEST
00000131: POP
00000132: PUSH2 0x00d3
00000135: PUSH2 0x028f
00000138: JUMP
00000139: JUMPDEST
0000013a: CALLVALUE
0000013b: DUP1
0000013c: ISZERO
0000013d: PUSH2 0x0145
00000140: JUMPI
00000141: PUSH1 0x00
00000143: DUP1
00000144: REVERT
00000145: JUMPDEST
00000146: POP
00000147: PUSH2 0x00d3
0000014a: PUSH2 0x0299
0000014d: JUMP
0000014e: JUMPDEST
0000014f: PUSH2 0x0156
00000152: PUSH2 0x02ff
00000155: JUMP
00000156: JUMPDEST
00000157: PUSH2 0x0166
0000015a: PUSH2 0x0161
0000015d: PUSH2 0x03b9
00000160: JUMP
00000161: JUMPDEST
00000162: PUSH2 0x03c3
00000165: JUMP
00000166: JUMPDEST
00000167: JUMP
00000168: JUMPDEST
00000169: PUSH2 0x0170
0000016c: PUSH2 0x03e7
0000016f: JUMP
00000170: JUMPDEST
00000171: PUSH1 0x01
00000173: PUSH1 0x01
00000175: PUSH1 0xa0
00000177: SHL
00000178: SUB
00000179: AND
0000017a: CALLER
0000017b: PUSH1 0x01
0000017d: PUSH1 0x01
0000017f: PUSH1 0xa0
00000181: SHL
00000182: SUB
00000183: AND
00000184: EQ
00000185: ISZERO
00000186: PUSH2 0x01a7
00000189: JUMPI
0000018a: PUSH2 0x01a4
0000018d: DUP2
0000018e: PUSH1 0x40
00000190: MLOAD
00000191: DUP1
00000192: PUSH1 0x20
00000194: ADD
00000195: PUSH1 0x40
00000197: MSTORE
00000198: DUP1
00000199: PUSH1 0x00
0000019b: DUP2
0000019c: MSTORE
0000019d: POP
0000019e: PUSH1 0x00
000001a0: PUSH2 0x041a
000001a3: JUMP
000001a4: JUMPDEST
000001a5: POP
000001a6: JUMP
000001a7: JUMPDEST
000001a8: PUSH2 0x01a4
000001ab: PUSH2 0x014e
000001ae: JUMP
000001af: JUMPDEST
000001b0: PUSH2 0x01b7
000001b3: PUSH2 0x03e7
000001b6: JUMP
000001b7: JUMPDEST
000001b8: PUSH1 0x01
000001ba: PUSH1 0x01
000001bc: PUSH1 0xa0
000001be: SHL
000001bf: SUB
000001c0: AND
000001c1: CALLER
000001c2: PUSH1 0x01
000001c4: PUSH1 0x01
000001c6: PUSH1 0xa0
000001c8: SHL
000001c9: SUB
000001ca: AND
000001cb: EQ
000001cc: ISZERO
000001cd: PUSH2 0x0218
000001d0: JUMPI
000001d1: PUSH2 0x0213
000001d4: DUP4
000001d5: DUP4
000001d6: DUP4
000001d7: DUP1
000001d8: DUP1
000001d9: PUSH1 0x1f
000001db: ADD
000001dc: PUSH1 0x20
000001de: DUP1
000001df: SWAP2
000001e0: DIV
000001e1: MUL
000001e2: PUSH1 0x20
000001e4: ADD
000001e5: PUSH1 0x40
000001e7: MLOAD
000001e8: SWAP1
000001e9: DUP2
000001ea: ADD
000001eb: PUSH1 0x40
000001ed: MSTORE
000001ee: DUP1
000001ef: SWAP4
000001f0: SWAP3
000001f1: SWAP2
000001f2: SWAP1
000001f3: DUP2
000001f4: DUP2
000001f5: MSTORE
000001f6: PUSH1 0x20
000001f8: ADD
000001f9: DUP4
000001fa: DUP4
000001fb: DUP1
000001fc: DUP3
000001fd: DUP5
000001fe: CALLDATACOPY
000001ff: PUSH1 0x00
00000201: SWAP3
00000202: ADD
00000203: SWAP2
00000204: SWAP1
00000205: SWAP2
00000206: MSTORE
00000207: POP
00000208: PUSH1 0x01
0000020a: SWAP3
0000020b: POP
0000020c: PUSH2 0x041a
0000020f: SWAP2
00000210: POP
00000211: POP
00000212: JUMP
00000213: JUMPDEST
00000214: POP
00000215: POP
00000216: POP
00000217: JUMP
00000218: JUMPDEST
00000219: PUSH2 0x0213
0000021c: PUSH2 0x014e
0000021f: JUMP
00000220: JUMPDEST
00000221: PUSH1 0x00
00000223: PUSH2 0x022a
00000226: PUSH2 0x03e7
00000229: JUMP
0000022a: JUMPDEST
0000022b: PUSH1 0x01
0000022d: PUSH1 0x01
0000022f: PUSH1 0xa0
00000231: SHL
00000232: SUB
00000233: AND
00000234: CALLER
00000235: PUSH1 0x01
00000237: PUSH1 0x01
00000239: PUSH1 0xa0
0000023b: SHL
0000023c: SUB
0000023d: AND
0000023e: EQ
0000023f: ISZERO
00000240: PUSH2 0x0250
00000243: JUMPI
00000244: PUSH2 0x024b
00000247: PUSH2 0x03b9
0000024a: JUMP
0000024b: JUMPDEST
0000024c: SWAP1
0000024d: POP
0000024e: SWAP1
0000024f: JUMP
00000250: JUMPDEST
00000251: PUSH2 0x0258
00000254: PUSH2 0x014e
00000257: JUMP
00000258: JUMPDEST
00000259: SWAP1
0000025a: JUMP
0000025b: JUMPDEST
0000025c: PUSH1 0x00
0000025e: PUSH2 0x024b
00000261: PUSH2 0x0445
00000264: JUMP
00000265: JUMPDEST
00000266: PUSH2 0x026d
00000269: PUSH2 0x03e7
0000026c: JUMP
0000026d: JUMPDEST
0000026e: PUSH1 0x01
00000270: PUSH1 0x01
00000272: PUSH1 0xa0
00000274: SHL
00000275: SUB
00000276: AND
00000277: CALLER
00000278: PUSH1 0x01
0000027a: PUSH1 0x01
0000027c: PUSH1 0xa0
0000027e: SHL
0000027f: SUB
00000280: AND
00000281: EQ
00000282: ISZERO
00000283: PUSH2 0x01a7
00000286: JUMPI
00000287: PUSH2 0x01a4
0000028a: DUP2
0000028b: PUSH2 0x044f
0000028e: JUMP
0000028f: JUMPDEST
00000290: PUSH1 0x00
00000292: PUSH2 0x024b
00000295: PUSH2 0x03b9
00000298: JUMP
00000299: JUMPDEST
0000029a: PUSH1 0x00
0000029c: PUSH2 0x02a3
0000029f: PUSH2 0x03e7
000002a2: JUMP
000002a3: JUMPDEST
000002a4: PUSH1 0x01
000002a6: PUSH1 0x01
000002a8: PUSH1 0xa0
000002aa: SHL
000002ab: SUB
000002ac: AND
000002ad: CALLER
000002ae: PUSH1 0x01
000002b0: PUSH1 0x01
000002b2: PUSH1 0xa0
000002b4: SHL
000002b5: SUB
000002b6: AND
000002b7: EQ
000002b8: ISZERO
000002b9: PUSH2 0x0250
000002bc: JUMPI
000002bd: PUSH2 0x024b
000002c0: PUSH2 0x03e7
000002c3: JUMP
000002c4: JUMPDEST
000002c5: PUSH1 0x60
000002c7: PUSH2 0x02e9
000002ca: DUP4
000002cb: DUP4
000002cc: PUSH1 0x40
000002ce: MLOAD
000002cf: DUP1
000002d0: PUSH1 0x60
000002d2: ADD
000002d3: PUSH1 0x40
000002d5: MSTORE
000002d6: DUP1
000002d7: PUSH1 0x27
000002d9: DUP2
000002da: MSTORE
000002db: PUSH1 0x20
000002dd: ADD
000002de: PUSH2 0x08ea
000002e1: PUSH1 0x27
000002e3: SWAP2
000002e4: CODECOPY
000002e5: PUSH2 0x04a3
000002e8: JUMP
000002e9: JUMPDEST
000002ea: SWAP4
000002eb: SWAP3
000002ec: POP
000002ed: POP
000002ee: POP
000002ef: JUMP
000002f0: JUMPDEST
000002f1: PUSH1 0x01
000002f3: PUSH1 0x01
000002f5: PUSH1 0xa0
000002f7: SHL
000002f8: SUB
000002f9: AND
000002fa: EXTCODESIZE
000002fb: ISZERO
000002fc: ISZERO
000002fd: SWAP1
000002fe: JUMP
000002ff: JUMPDEST
00000300: PUSH2 0x0307
00000303: PUSH2 0x03e7
00000306: JUMP
00000307: JUMPDEST
00000308: PUSH1 0x01
0000030a: PUSH1 0x01
0000030c: PUSH1 0xa0
0000030e: SHL
0000030f: SUB
00000310: AND
00000311: CALLER
00000312: PUSH1 0x01
00000314: PUSH1 0x01
00000316: PUSH1 0xa0
00000318: SHL
00000319: SUB
0000031a: AND
0000031b: EQ
0000031c: ISZERO
0000031d: PUSH2 0x0166
00000320: JUMPI
00000321: PUSH1 0x40
00000323: MLOAD
00000324: PUSH3 0x461bcd
00000328: PUSH1 0xe5
0000032a: SHL
0000032b: DUP2
0000032c: MSTORE
0000032d: PUSH1 0x20
0000032f: PUSH1 0x04
00000331: DUP3
00000332: ADD
00000333: MSTORE
00000334: PUSH1 0x42
00000336: PUSH1 0x24
00000338: DUP3
00000339: ADD
0000033a: MSTORE
0000033b: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
0000035c: PUSH1 0x44
0000035e: DUP3
0000035f: ADD
00000360: MSTORE
00000361: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
00000382: PUSH1 0x64
00000384: DUP3
00000385: ADD
00000386: MSTORE
00000387: PUSH32 0x6574000000000000000000000000000000000000000000000000000000000000
000003a8: PUSH1 0x84
000003aa: DUP3
000003ab: ADD
000003ac: MSTORE
000003ad: PUSH1 0xa4
000003af: ADD
000003b0: JUMPDEST
000003b1: PUSH1 0x40
000003b3: MLOAD
000003b4: DUP1
000003b5: SWAP2
000003b6: SUB
000003b7: SWAP1
000003b8: REVERT
000003b9: JUMPDEST
000003ba: PUSH1 0x00
000003bc: PUSH2 0x024b
000003bf: PUSH2 0x0597
000003c2: JUMP
000003c3: JUMPDEST
000003c4: CALLDATASIZE
000003c5: PUSH1 0x00
000003c7: DUP1
000003c8: CALLDATACOPY
000003c9: PUSH1 0x00
000003cb: DUP1
000003cc: CALLDATASIZE
000003cd: PUSH1 0x00
000003cf: DUP5
000003d0: GAS
000003d1: DELEGATECALL
000003d2: RETURNDATASIZE
000003d3: PUSH1 0x00
000003d5: DUP1
000003d6: RETURNDATACOPY
000003d7: DUP1
000003d8: DUP1
000003d9: ISZERO
000003da: PUSH2 0x03e2
000003dd: JUMPI
000003de: RETURNDATASIZE
000003df: PUSH1 0x00
000003e1: RETURN
000003e2: JUMPDEST
000003e3: RETURNDATASIZE
000003e4: PUSH1 0x00
000003e6: REVERT
000003e7: JUMPDEST
000003e8: PUSH1 0x00
000003ea: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000040b: JUMPDEST
0000040c: SLOAD
0000040d: PUSH1 0x01
0000040f: PUSH1 0x01
00000411: PUSH1 0xa0
00000413: SHL
00000414: SUB
00000415: AND
00000416: SWAP2
00000417: SWAP1
00000418: POP
00000419: JUMP
0000041a: JUMPDEST
0000041b: PUSH2 0x0423
0000041e: DUP4
0000041f: PUSH2 0x05bf
00000422: JUMP
00000423: JUMPDEST
00000424: PUSH1 0x00
00000426: DUP3
00000427: MLOAD
00000428: GT
00000429: DUP1
0000042a: PUSH2 0x0430
0000042d: JUMPI
0000042e: POP
0000042f: DUP1
00000430: JUMPDEST
00000431: ISZERO
00000432: PUSH2 0x0213
00000435: JUMPI
00000436: PUSH2 0x043f
00000439: DUP4
0000043a: DUP4
0000043b: PUSH2 0x02c4
0000043e: JUMP
0000043f: JUMPDEST
00000440: POP
00000441: POP
00000442: POP
00000443: POP
00000444: JUMP
00000445: JUMPDEST
00000446: PUSH1 0x00
00000448: PUSH2 0x024b
0000044b: PUSH2 0x03e7
0000044e: JUMP
0000044f: JUMPDEST
00000450: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
00000471: PUSH2 0x0478
00000474: PUSH2 0x03e7
00000477: JUMP
00000478: JUMPDEST
00000479: PUSH1 0x40
0000047b: DUP1
0000047c: MLOAD
0000047d: PUSH1 0x01
0000047f: PUSH1 0x01
00000481: PUSH1 0xa0
00000483: SHL
00000484: SUB
00000485: SWAP3
00000486: DUP4
00000487: AND
00000488: DUP2
00000489: MSTORE
0000048a: SWAP2
0000048b: DUP5
0000048c: AND
0000048d: PUSH1 0x20
0000048f: DUP4
00000490: ADD
00000491: MSTORE
00000492: ADD
00000493: PUSH1 0x40
00000495: MLOAD
00000496: DUP1
00000497: SWAP2
00000498: SUB
00000499: SWAP1
0000049a: LOG1
0000049b: PUSH2 0x01a4
0000049e: DUP2
0000049f: PUSH2 0x05ff
000004a2: JUMP
000004a3: JUMPDEST
000004a4: PUSH1 0x60
000004a6: PUSH1 0x01
000004a8: PUSH1 0x01
000004aa: PUSH1 0xa0
000004ac: SHL
000004ad: SUB
000004ae: DUP5
000004af: AND
000004b0: EXTCODESIZE
000004b1: PUSH2 0x0522
000004b4: JUMPI
000004b5: PUSH1 0x40
000004b7: MLOAD
000004b8: PUSH3 0x461bcd
000004bc: PUSH1 0xe5
000004be: SHL
000004bf: DUP2
000004c0: MSTORE
000004c1: PUSH1 0x20
000004c3: PUSH1 0x04
000004c5: DUP3
000004c6: ADD
000004c7: MSTORE
000004c8: PUSH1 0x26
000004ca: PUSH1 0x24
000004cc: DUP3
000004cd: ADD
000004ce: MSTORE
000004cf: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f
000004f0: PUSH1 0x44
000004f2: DUP3
000004f3: ADD
000004f4: MSTORE
000004f5: PUSH32 0x6e74726163740000000000000000000000000000000000000000000000000000
00000516: PUSH1 0x64
00000518: DUP3
00000519: ADD
0000051a: MSTORE
0000051b: PUSH1 0x84
0000051d: ADD
0000051e: PUSH2 0x03b0
00000521: JUMP
00000522: JUMPDEST
00000523: PUSH1 0x00
00000525: DUP1
00000526: DUP6
00000527: PUSH1 0x01
00000529: PUSH1 0x01
0000052b: PUSH1 0xa0
0000052d: SHL
0000052e: SUB
0000052f: AND
00000530: DUP6
00000531: PUSH1 0x40
00000533: MLOAD
00000534: PUSH2 0x053d
00000537: SWAP2
00000538: SWAP1
00000539: PUSH2 0x089a
0000053c: JUMP
0000053d: JUMPDEST
0000053e: PUSH1 0x00
00000540: PUSH1 0x40
00000542: MLOAD
00000543: DUP1
00000544: DUP4
00000545: SUB
00000546: DUP2
00000547: DUP6
00000548: GAS
00000549: DELEGATECALL
0000054a: SWAP2
0000054b: POP
0000054c: POP
0000054d: RETURNDATASIZE
0000054e: DUP1
0000054f: PUSH1 0x00
00000551: DUP2
00000552: EQ
00000553: PUSH2 0x0578
00000556: JUMPI
00000557: PUSH1 0x40
00000559: MLOAD
0000055a: SWAP2
0000055b: POP
0000055c: PUSH1 0x1f
0000055e: NOT
0000055f: PUSH1 0x3f
00000561: RETURNDATASIZE
00000562: ADD
00000563: AND
00000564: DUP3
00000565: ADD
00000566: PUSH1 0x40
00000568: MSTORE
00000569: RETURNDATASIZE
0000056a: DUP3
0000056b: MSTORE
0000056c: RETURNDATASIZE
0000056d: PUSH1 0x00
0000056f: PUSH1 0x20
00000571: DUP5
00000572: ADD
00000573: RETURNDATACOPY
00000574: PUSH2 0x057d
00000577: JUMP
00000578: JUMPDEST
00000579: PUSH1 0x60
0000057b: SWAP2
0000057c: POP
0000057d: JUMPDEST
0000057e: POP
0000057f: SWAP2
00000580: POP
00000581: SWAP2
00000582: POP
00000583: PUSH2 0x058d
00000586: DUP3
00000587: DUP3
00000588: DUP7
00000589: PUSH2 0x06d7
0000058c: JUMP
0000058d: JUMPDEST
0000058e: SWAP7
0000058f: SWAP6
00000590: POP
00000591: POP
00000592: POP
00000593: POP
00000594: POP
00000595: POP
00000596: JUMP
00000597: JUMPDEST
00000598: PUSH1 0x00
0000059a: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000005bb: PUSH2 0x040b
000005be: JUMP
000005bf: JUMPDEST
000005c0: PUSH2 0x05c8
000005c3: DUP2
000005c4: PUSH2 0x0710
000005c7: JUMP
000005c8: JUMPDEST
000005c9: PUSH1 0x40
000005cb: MLOAD
000005cc: PUSH1 0x01
000005ce: PUSH1 0x01
000005d0: PUSH1 0xa0
000005d2: SHL
000005d3: SUB
000005d4: DUP3
000005d5: AND
000005d6: SWAP1
000005d7: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
000005f8: SWAP1
000005f9: PUSH1 0x00
000005fb: SWAP1
000005fc: LOG2
000005fd: POP
000005fe: JUMP
000005ff: JUMPDEST
00000600: PUSH1 0x01
00000602: PUSH1 0x01
00000604: PUSH1 0xa0
00000606: SHL
00000607: SUB
00000608: DUP2
00000609: AND
0000060a: PUSH2 0x067b
0000060d: JUMPI
0000060e: PUSH1 0x40
00000610: MLOAD
00000611: PUSH3 0x461bcd
00000615: PUSH1 0xe5
00000617: SHL
00000618: DUP2
00000619: MSTORE
0000061a: PUSH1 0x20
0000061c: PUSH1 0x04
0000061e: DUP3
0000061f: ADD
00000620: MSTORE
00000621: PUSH1 0x26
00000623: PUSH1 0x24
00000625: DUP3
00000626: ADD
00000627: MSTORE
00000628: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
00000649: PUSH1 0x44
0000064b: DUP3
0000064c: ADD
0000064d: MSTORE
0000064e: PUSH32 0x6464726573730000000000000000000000000000000000000000000000000000
0000066f: PUSH1 0x64
00000671: DUP3
00000672: ADD
00000673: MSTORE
00000674: PUSH1 0x84
00000676: ADD
00000677: PUSH2 0x03b0
0000067a: JUMP
0000067b: JUMPDEST
0000067c: DUP1
0000067d: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000069e: JUMPDEST
0000069f: DUP1
000006a0: SLOAD
000006a1: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000
000006c2: AND
000006c3: PUSH1 0x01
000006c5: PUSH1 0x01
000006c7: PUSH1 0xa0
000006c9: SHL
000006ca: SUB
000006cb: SWAP3
000006cc: SWAP1
000006cd: SWAP3
000006ce: AND
000006cf: SWAP2
000006d0: SWAP1
000006d1: SWAP2
000006d2: OR
000006d3: SWAP1
000006d4: SSTORE
000006d5: POP
000006d6: JUMP
000006d7: JUMPDEST
000006d8: PUSH1 0x60
000006da: DUP4
000006db: ISZERO
000006dc: PUSH2 0x06e6
000006df: JUMPI
000006e0: POP
000006e1: DUP2
000006e2: PUSH2 0x02e9
000006e5: JUMP
000006e6: JUMPDEST
000006e7: DUP3
000006e8: MLOAD
000006e9: ISZERO
000006ea: PUSH2 0x06f6
000006ed: JUMPI
000006ee: DUP3
000006ef: MLOAD
000006f0: DUP1
000006f1: DUP5
000006f2: PUSH1 0x20
000006f4: ADD
000006f5: REVERT
000006f6: JUMPDEST
000006f7: DUP2
000006f8: PUSH1 0x40
000006fa: MLOAD
000006fb: PUSH3 0x461bcd
000006ff: PUSH1 0xe5
00000701: SHL
00000702: DUP2
00000703: MSTORE
00000704: PUSH1 0x04
00000706: ADD
00000707: PUSH2 0x03b0
0000070a: SWAP2
0000070b: SWAP1
0000070c: PUSH2 0x08b6
0000070f: JUMP
00000710: JUMPDEST
00000711: PUSH1 0x01
00000713: PUSH1 0x01
00000715: PUSH1 0xa0
00000717: SHL
00000718: SUB
00000719: DUP2
0000071a: AND
0000071b: EXTCODESIZE
0000071c: PUSH2 0x078d
0000071f: JUMPI
00000720: PUSH1 0x40
00000722: MLOAD
00000723: PUSH3 0x461bcd
00000727: PUSH1 0xe5
00000729: SHL
0000072a: DUP2
0000072b: MSTORE
0000072c: PUSH1 0x20
0000072e: PUSH1 0x04
00000730: DUP3
00000731: ADD
00000732: MSTORE
00000733: PUSH1 0x2d
00000735: PUSH1 0x24
00000737: DUP3
00000738: ADD
00000739: MSTORE
0000073a: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
0000075b: PUSH1 0x44
0000075d: DUP3
0000075e: ADD
0000075f: MSTORE
00000760: PUSH32 0x6f74206120636f6e747261637400000000000000000000000000000000000000
00000781: PUSH1 0x64
00000783: DUP3
00000784: ADD
00000785: MSTORE
00000786: PUSH1 0x84
00000788: ADD
00000789: PUSH2 0x03b0
0000078c: JUMP
0000078d: JUMPDEST
0000078e: DUP1
0000078f: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000007b0: PUSH2 0x069e
000007b3: JUMP
000007b4: JUMPDEST
000007b5: DUP1
000007b6: CALLDATALOAD
000007b7: PUSH1 0x01
000007b9: PUSH1 0x01
000007bb: PUSH1 0xa0
000007bd: SHL
000007be: SUB
000007bf: DUP2
000007c0: AND
000007c1: DUP2
000007c2: EQ
000007c3: PUSH2 0x07cb
000007c6: JUMPI
000007c7: PUSH1 0x00
000007c9: DUP1
000007ca: REVERT
000007cb: JUMPDEST
000007cc: SWAP2
000007cd: SWAP1
000007ce: POP
000007cf: JUMP
000007d0: JUMPDEST
000007d1: PUSH1 0x00
000007d3: PUSH1 0x20
000007d5: DUP3
000007d6: DUP5
000007d7: SUB
000007d8: SLT
000007d9: ISZERO
000007da: PUSH2 0x07e2
000007dd: JUMPI
000007de: PUSH1 0x00
000007e0: DUP1
000007e1: REVERT
000007e2: JUMPDEST
000007e3: PUSH2 0x02e9
000007e6: DUP3
000007e7: PUSH2 0x07b4
000007ea: JUMP
000007eb: JUMPDEST
000007ec: PUSH1 0x00
000007ee: DUP1
000007ef: PUSH1 0x00
000007f1: PUSH1 0x40
000007f3: DUP5
000007f4: DUP7
000007f5: SUB
000007f6: SLT
000007f7: ISZERO
000007f8: PUSH2 0x0800
000007fb: JUMPI
000007fc: PUSH1 0x00
000007fe: DUP1
000007ff: REVERT
00000800: JUMPDEST
00000801: PUSH2 0x0809
00000804: DUP5
00000805: PUSH2 0x07b4
00000808: JUMP
00000809: JUMPDEST
0000080a: SWAP3
0000080b: POP
0000080c: PUSH1 0x20
0000080e: DUP5
0000080f: ADD
00000810: CALLDATALOAD
00000811: PUSH8 0xffffffffffffffff
0000081a: DUP1
0000081b: DUP3
0000081c: GT
0000081d: ISZERO
0000081e: PUSH2 0x0826
00000821: JUMPI
00000822: PUSH1 0x00
00000824: DUP1
00000825: REVERT
00000826: JUMPDEST
00000827: DUP2
00000828: DUP7
00000829: ADD
0000082a: SWAP2
0000082b: POP
0000082c: DUP7
0000082d: PUSH1 0x1f
0000082f: DUP4
00000830: ADD
00000831: SLT
00000832: PUSH2 0x083a
00000835: JUMPI
00000836: PUSH1 0x00
00000838: DUP1
00000839: REVERT
0000083a: JUMPDEST
0000083b: DUP2
0000083c: CALLDATALOAD
0000083d: DUP2
0000083e: DUP2
0000083f: GT
00000840: ISZERO
00000841: PUSH2 0x0849
00000844: JUMPI
00000845: PUSH1 0x00
00000847: DUP1
00000848: REVERT
00000849: JUMPDEST
0000084a: DUP8
0000084b: PUSH1 0x20
0000084d: DUP3
0000084e: DUP6
0000084f: ADD
00000850: ADD
00000851: GT
00000852: ISZERO
00000853: PUSH2 0x085b
00000856: JUMPI
00000857: PUSH1 0x00
00000859: DUP1
0000085a: REVERT
0000085b: JUMPDEST
0000085c: PUSH1 0x20
0000085e: DUP4
0000085f: ADD
00000860: SWAP5
00000861: POP
00000862: DUP1
00000863: SWAP4
00000864: POP
00000865: POP
00000866: POP
00000867: POP
00000868: SWAP3
00000869: POP
0000086a: SWAP3
0000086b: POP
0000086c: SWAP3
0000086d: JUMP
0000086e: JUMPDEST
0000086f: PUSH1 0x00
00000871: JUMPDEST
00000872: DUP4
00000873: DUP2
00000874: LT
00000875: ISZERO
00000876: PUSH2 0x0889
00000879: JUMPI
0000087a: DUP2
0000087b: DUP2
0000087c: ADD
0000087d: MLOAD
0000087e: DUP4
0000087f: DUP3
00000880: ADD
00000881: MSTORE
00000882: PUSH1 0x20
00000884: ADD
00000885: PUSH2 0x0871
00000888: JUMP
00000889: JUMPDEST
0000088a: DUP4
0000088b: DUP2
0000088c: GT
0000088d: ISZERO
0000088e: PUSH2 0x043f
00000891: JUMPI
00000892: POP
00000893: POP
00000894: PUSH1 0x00
00000896: SWAP2
00000897: ADD
00000898: MSTORE
00000899: JUMP
0000089a: JUMPDEST
0000089b: PUSH1 0x00
0000089d: DUP3
0000089e: MLOAD
0000089f: PUSH2 0x08ac
000008a2: DUP2
000008a3: DUP5
000008a4: PUSH1 0x20
000008a6: DUP8
000008a7: ADD
000008a8: PUSH2 0x086e
000008ab: JUMP
000008ac: JUMPDEST
000008ad: SWAP2
000008ae: SWAP1
000008af: SWAP2
000008b0: ADD
000008b1: SWAP3
000008b2: SWAP2
000008b3: POP
000008b4: POP
000008b5: JUMP
000008b6: JUMPDEST
000008b7: PUSH1 0x20
000008b9: DUP2
000008ba: MSTORE
000008bb: PUSH1 0x00
000008bd: DUP3
000008be: MLOAD
000008bf: DUP1
000008c0: PUSH1 0x20
000008c2: DUP5
000008c3: ADD
000008c4: MSTORE
000008c5: PUSH2 0x08d5
000008c8: DUP2
000008c9: PUSH1 0x40
000008cb: DUP6
000008cc: ADD
000008cd: PUSH1 0x20
000008cf: DUP8
000008d0: ADD
000008d1: PUSH2 0x086e
000008d4: JUMP
000008d5: JUMPDEST
000008d6: PUSH1 0x1f
000008d8: ADD
000008d9: PUSH1 0x1f
000008db: NOT
000008dc: AND
000008dd: SWAP2
000008de: SWAP1
000008df: SWAP2
000008e0: ADD
000008e1: PUSH1 0x40
000008e3: ADD
000008e4: SWAP3
000008e5: SWAP2
000008e6: POP
000008e7: POP
000008e8: JUMP
000008e9: INVALID
000008ea: COINBASE
000008eb: PUSH5 0x6472657373
000008f1: GASPRICE
000008f2: KECCAK256
000008f3: PUSH13 0x6f772d6c6576656c2064656c65
00000901: PUSH8 0x6174652063616c6c
0000090a: KECCAK256
0000090b: PUSH7 0x61696c6564a264
00000913: PUSH10 0x7066735822122073cdae
0000091e: UNKNOWN(0xA5)
0000091f: UNKNOWN(0xEA)
00000920: POP
00000921: CODECOPY
00000922: SWAP14
00000923: PUSH30 0xbf7a4f481cd72cfc3e690018e80ec084e48ae180062dbd64736f6c634300
00000942: ADDMOD
00000943: EXP
00000944: STOP
00000945: CALLER

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0x822910915569d68b9432b20478217434dcac80d327996ba4b3c0355af8ad7be4 call_targets: 0x1560f0ffde7baa1fee9ba4118c2799beb4c55507 target_varies: no classification: constant_target validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "sink_reached", "attempts": 14, "trace_id": "0x822910915569d68b9432b20478217434dcac80d327996ba4b3c0355af8ad7be4", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0x1560f0ffde7baa1fee9ba4118c2799beb4c55507" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x6e9960c3", "selector": "0x6e9960c3", "calldata_variants": [ "0x6e9960c3", "0x6e9960c30000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8f283970", "selector": "0x8f283970", "calldata_variants": [ "0x8f283970", "0x8f2839700000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xaaf10f42", "selector": "0xaaf10f42", "calldata_variants": [ "0xaaf10f42", "0xaaf10f420000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf851a440", "selector": "0xf851a440", "calldata_variants": [ "0xf851a440", "0xf851a4400000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x3659cfe6", "selector": "0x3659cfe6", "calldata_variants": [ "0x3659cfe6", "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4f1ef286", "selector": "0x4f1ef286", "calldata_variants": [ "0x4f1ef286", "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x5c60da1b", "selector": "0x5c60da1b", "calldata_variants": [ "0x5c60da1b", "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 977, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1353, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 2, "untrusted_delegatecall_count": 2 }

Severity