019b477e-cfa4-73d8-b81d-f8eece2d5f59
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 27419 | artifact.fetch | complete | 1 / 3 | 4 months ago |
| 27420 | tool.cast_disasm | complete | 1 / 3 | 4 months ago |
| 70939 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 70940 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 70941 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 70942 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x0022 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH1 0xe0 00000012: SHR 00000013: DUP1 00000014: PUSH4 0x77cae758 00000019: EQ 0000001a: PUSH2 0x002e 0000001d: JUMPI 0000001e: PUSH2 0x0029 00000021: JUMP 00000022: JUMPDEST 00000023: CALLDATASIZE 00000024: PUSH2 0x0029 00000027: JUMPI 00000028: STOP 00000029: JUMPDEST 0000002a: PUSH1 0x00 0000002c: DUP1 0000002d: REVERT 0000002e: JUMPDEST 0000002f: PUSH2 0x0048 00000032: PUSH1 0x04 00000034: DUP1 00000035: CALLDATASIZE 00000036: SUB 00000037: DUP2 00000038: ADD 00000039: SWAP1 0000003a: PUSH2 0x0043 0000003d: SWAP2 0000003e: SWAP1 0000003f: PUSH2 0x0238 00000042: JUMP 00000043: JUMPDEST 00000044: PUSH2 0x005e 00000047: JUMP 00000048: JUMPDEST 00000049: PUSH1 0x40 0000004b: MLOAD 0000004c: PUSH2 0x0055 0000004f: SWAP2 00000050: SWAP1 00000051: PUSH2 0x032f 00000054: JUMP 00000055: JUMPDEST 00000056: PUSH1 0x40 00000058: MLOAD 00000059: DUP1 0000005a: SWAP2 0000005b: SUB 0000005c: SWAP1 0000005d: RETURN 0000005e: JUMPDEST 0000005f: PUSH1 0x60 00000061: PUSH32 0x0000000000000000000000000ba48b0aea8f86423254b787461ca35c2496f2d0 00000082: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000097: AND 00000098: CALLER 00000099: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000ae: AND 000000af: EQ 000000b0: PUSH2 0x00b8 000000b3: JUMPI 000000b4: PUSH1 0x00 000000b6: DUP1 000000b7: REVERT 000000b8: JUMPDEST 000000b9: PUSH1 0x00 000000bb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000d0: AND 000000d1: DUP6 000000d2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000e7: AND 000000e8: EQ 000000e9: ISZERO 000000ea: PUSH2 0x00f2 000000ed: JUMPI 000000ee: PUSH1 0x00 000000f0: DUP1 000000f1: REVERT 000000f2: JUMPDEST 000000f3: PUSH1 0x00 000000f5: PUSH1 0x60 000000f7: DUP7 000000f8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000010d: AND 0000010e: DUP9 0000010f: DUP7 00000110: DUP7 00000111: PUSH1 0x40 00000113: MLOAD 00000114: PUSH2 0x011e 00000117: SWAP3 00000118: SWAP2 00000119: SWAP1 0000011a: PUSH2 0x0316 0000011d: JUMP 0000011e: JUMPDEST 0000011f: PUSH1 0x00 00000121: PUSH1 0x40 00000123: MLOAD 00000124: DUP1 00000125: DUP4 00000126: SUB 00000127: DUP2 00000128: DUP6 00000129: DUP8 0000012a: GAS 0000012b: CALL 0000012c: SWAP3 0000012d: POP 0000012e: POP 0000012f: POP 00000130: RETURNDATASIZE 00000131: DUP1 00000132: PUSH1 0x00 00000134: DUP2 00000135: EQ 00000136: PUSH2 0x015b 00000139: JUMPI 0000013a: PUSH1 0x40 0000013c: MLOAD 0000013d: SWAP2 0000013e: POP 0000013f: PUSH1 0x1f 00000141: NOT 00000142: PUSH1 0x3f 00000144: RETURNDATASIZE 00000145: ADD 00000146: AND 00000147: DUP3 00000148: ADD 00000149: PUSH1 0x40 0000014b: MSTORE 0000014c: RETURNDATASIZE 0000014d: DUP3 0000014e: MSTORE 0000014f: RETURNDATASIZE 00000150: PUSH1 0x00 00000152: PUSH1 0x20 00000154: DUP5 00000155: ADD 00000156: RETURNDATACOPY 00000157: PUSH2 0x0160 0000015a: JUMP 0000015b: JUMPDEST 0000015c: PUSH1 0x60 0000015e: SWAP2 0000015f: POP 00000160: JUMPDEST 00000161: POP 00000162: SWAP2 00000163: POP 00000164: SWAP2 00000165: POP 00000166: DUP2 00000167: PUSH2 0x016f 0000016a: JUMPI 0000016b: PUSH1 0x00 0000016d: DUP1 0000016e: REVERT 0000016f: JUMPDEST 00000170: COINBASE 00000171: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000186: AND 00000187: PUSH2 0x08fc 0000018a: DUP8 0000018b: SWAP1 0000018c: DUP2 0000018d: ISZERO 0000018e: MUL 0000018f: SWAP1 00000190: PUSH1 0x40 00000192: MLOAD 00000193: PUSH1 0x00 00000195: PUSH1 0x40 00000197: MLOAD 00000198: DUP1 00000199: DUP4 0000019a: SUB 0000019b: DUP2 0000019c: DUP6 0000019d: DUP9 0000019e: DUP9 0000019f: CALL 000001a0: SWAP4 000001a1: POP 000001a2: POP 000001a3: POP 000001a4: POP 000001a5: ISZERO 000001a6: DUP1 000001a7: ISZERO 000001a8: PUSH2 0x01b5 000001ab: JUMPI 000001ac: RETURNDATASIZE 000001ad: PUSH1 0x00 000001af: DUP1 000001b0: RETURNDATACOPY 000001b1: RETURNDATASIZE 000001b2: PUSH1 0x00 000001b4: REVERT 000001b5: JUMPDEST 000001b6: POP 000001b7: DUP1 000001b8: SWAP3 000001b9: POP 000001ba: POP 000001bb: POP 000001bc: SWAP6 000001bd: SWAP5 000001be: POP 000001bf: POP 000001c0: POP 000001c1: POP 000001c2: POP 000001c3: JUMP 000001c4: JUMPDEST 000001c5: PUSH1 0x00 000001c7: DUP2 000001c8: CALLDATALOAD 000001c9: SWAP1 000001ca: POP 000001cb: PUSH2 0x01d3 000001ce: DUP2 000001cf: PUSH2 0x0407 000001d2: JUMP 000001d3: JUMPDEST 000001d4: SWAP3 000001d5: SWAP2 000001d6: POP 000001d7: POP 000001d8: JUMP 000001d9: JUMPDEST 000001da: PUSH1 0x00 000001dc: DUP1 000001dd: DUP4 000001de: PUSH1 0x1f 000001e0: DUP5 000001e1: ADD 000001e2: SLT 000001e3: PUSH2 0x01eb 000001e6: JUMPI 000001e7: PUSH1 0x00 000001e9: DUP1 000001ea: REVERT 000001eb: JUMPDEST 000001ec: DUP3 000001ed: CALLDATALOAD 000001ee: SWAP1 000001ef: POP 000001f0: PUSH8 0xffffffffffffffff 000001f9: DUP2 000001fa: GT 000001fb: ISZERO 000001fc: PUSH2 0x0204 000001ff: JUMPI 00000200: PUSH1 0x00 00000202: DUP1 00000203: REVERT 00000204: JUMPDEST 00000205: PUSH1 0x20 00000207: DUP4 00000208: ADD 00000209: SWAP2 0000020a: POP 0000020b: DUP4 0000020c: PUSH1 0x01 0000020e: DUP3 0000020f: MUL 00000210: DUP4 00000211: ADD 00000212: GT 00000213: ISZERO 00000214: PUSH2 0x021c 00000217: JUMPI 00000218: PUSH1 0x00 0000021a: DUP1 0000021b: REVERT 0000021c: JUMPDEST 0000021d: SWAP3 0000021e: POP 0000021f: SWAP3 00000220: SWAP1 00000221: POP 00000222: JUMP 00000223: JUMPDEST 00000224: PUSH1 0x00 00000226: DUP2 00000227: CALLDATALOAD 00000228: SWAP1 00000229: POP 0000022a: PUSH2 0x0232 0000022d: DUP2 0000022e: PUSH2 0x041e 00000231: JUMP 00000232: JUMPDEST 00000233: SWAP3 00000234: SWAP2 00000235: POP 00000236: POP 00000237: JUMP 00000238: JUMPDEST 00000239: PUSH1 0x00 0000023b: DUP1 0000023c: PUSH1 0x00 0000023e: DUP1 0000023f: PUSH1 0x00 00000241: PUSH1 0x80 00000243: DUP7 00000244: DUP9 00000245: SUB 00000246: SLT 00000247: ISZERO 00000248: PUSH2 0x0250 0000024b: JUMPI 0000024c: PUSH1 0x00 0000024e: DUP1 0000024f: REVERT 00000250: JUMPDEST 00000251: PUSH1 0x00 00000253: PUSH2 0x025e 00000256: DUP9 00000257: DUP3 00000258: DUP10 00000259: ADD 0000025a: PUSH2 0x0223 0000025d: JUMP 0000025e: JUMPDEST 0000025f: SWAP6 00000260: POP 00000261: POP 00000262: PUSH1 0x20 00000264: PUSH2 0x026f 00000267: DUP9 00000268: DUP3 00000269: DUP10 0000026a: ADD 0000026b: PUSH2 0x01c4 0000026e: JUMP 0000026f: JUMPDEST 00000270: SWAP5 00000271: POP 00000272: POP 00000273: PUSH1 0x40 00000275: PUSH2 0x0280 00000278: DUP9 00000279: DUP3 0000027a: DUP10 0000027b: ADD 0000027c: PUSH2 0x0223 0000027f: JUMP 00000280: JUMPDEST 00000281: SWAP4 00000282: POP 00000283: POP 00000284: PUSH1 0x60 00000286: DUP7 00000287: ADD 00000288: CALLDATALOAD 00000289: PUSH8 0xffffffffffffffff 00000292: DUP2 00000293: GT 00000294: ISZERO 00000295: PUSH2 0x029d 00000298: JUMPI 00000299: PUSH1 0x00 0000029b: DUP1 0000029c: REVERT 0000029d: JUMPDEST 0000029e: PUSH2 0x02a9 000002a1: DUP9 000002a2: DUP3 000002a3: DUP10 000002a4: ADD 000002a5: PUSH2 0x01d9 000002a8: JUMP 000002a9: JUMPDEST 000002aa: SWAP3 000002ab: POP 000002ac: SWAP3 000002ad: POP 000002ae: POP 000002af: SWAP3 000002b0: SWAP6 000002b1: POP 000002b2: SWAP3 000002b3: SWAP6 000002b4: SWAP1 000002b5: SWAP4 000002b6: POP 000002b7: JUMP 000002b8: JUMPDEST 000002b9: PUSH1 0x00 000002bb: PUSH2 0x02c4 000002be: DUP4 000002bf: DUP6 000002c0: PUSH2 0x036d 000002c3: JUMP 000002c4: JUMPDEST 000002c5: SWAP4 000002c6: POP 000002c7: PUSH2 0x02d1 000002ca: DUP4 000002cb: DUP6 000002cc: DUP5 000002cd: PUSH2 0x03b4 000002d0: JUMP 000002d1: JUMPDEST 000002d2: DUP3 000002d3: DUP5 000002d4: ADD 000002d5: SWAP1 000002d6: POP 000002d7: SWAP4 000002d8: SWAP3 000002d9: POP 000002da: POP 000002db: POP 000002dc: JUMP 000002dd: JUMPDEST 000002de: PUSH1 0x00 000002e0: PUSH2 0x02e8 000002e3: DUP3 000002e4: PUSH2 0x0351 000002e7: JUMP 000002e8: JUMPDEST 000002e9: PUSH2 0x02f2 000002ec: DUP2 000002ed: DUP6 000002ee: PUSH2 0x035c 000002f1: JUMP 000002f2: JUMPDEST 000002f3: SWAP4 000002f4: POP 000002f5: PUSH2 0x0302 000002f8: DUP2 000002f9: DUP6 000002fa: PUSH1 0x20 000002fc: DUP7 000002fd: ADD 000002fe: PUSH2 0x03c3 00000301: JUMP 00000302: JUMPDEST 00000303: PUSH2 0x030b 00000306: DUP2 00000307: PUSH2 0x03f6 0000030a: JUMP 0000030b: JUMPDEST 0000030c: DUP5 0000030d: ADD 0000030e: SWAP2 0000030f: POP 00000310: POP 00000311: SWAP3 00000312: SWAP2 00000313: POP 00000314: POP 00000315: JUMP 00000316: JUMPDEST 00000317: PUSH1 0x00 00000319: PUSH2 0x0323 0000031c: DUP3 0000031d: DUP5 0000031e: DUP7 0000031f: PUSH2 0x02b8 00000322: JUMP 00000323: JUMPDEST 00000324: SWAP2 00000325: POP 00000326: DUP2 00000327: SWAP1 00000328: POP 00000329: SWAP4 0000032a: SWAP3 0000032b: POP 0000032c: POP 0000032d: POP 0000032e: JUMP 0000032f: JUMPDEST 00000330: PUSH1 0x00 00000332: PUSH1 0x20 00000334: DUP3 00000335: ADD 00000336: SWAP1 00000337: POP 00000338: DUP2 00000339: DUP2 0000033a: SUB 0000033b: PUSH1 0x00 0000033d: DUP4 0000033e: ADD 0000033f: MSTORE 00000340: PUSH2 0x0349 00000343: DUP2 00000344: DUP5 00000345: PUSH2 0x02dd 00000348: JUMP 00000349: JUMPDEST 0000034a: SWAP1 0000034b: POP 0000034c: SWAP3 0000034d: SWAP2 0000034e: POP 0000034f: POP 00000350: JUMP 00000351: JUMPDEST 00000352: PUSH1 0x00 00000354: DUP2 00000355: MLOAD 00000356: SWAP1 00000357: POP 00000358: SWAP2 00000359: SWAP1 0000035a: POP 0000035b: JUMP 0000035c: JUMPDEST 0000035d: PUSH1 0x00 0000035f: DUP3 00000360: DUP3 00000361: MSTORE 00000362: PUSH1 0x20 00000364: DUP3 00000365: ADD 00000366: SWAP1 00000367: POP 00000368: SWAP3 00000369: SWAP2 0000036a: POP 0000036b: POP 0000036c: JUMP 0000036d: JUMPDEST 0000036e: PUSH1 0x00 00000370: DUP2 00000371: SWAP1 00000372: POP 00000373: SWAP3 00000374: SWAP2 00000375: POP 00000376: POP 00000377: JUMP 00000378: JUMPDEST 00000379: PUSH1 0x00 0000037b: PUSH2 0x0383 0000037e: DUP3 0000037f: PUSH2 0x038a 00000382: JUMP 00000383: JUMPDEST 00000384: SWAP1 00000385: POP 00000386: SWAP2 00000387: SWAP1 00000388: POP 00000389: JUMP 0000038a: JUMPDEST 0000038b: PUSH1 0x00 0000038d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003a2: DUP3 000003a3: AND 000003a4: SWAP1 000003a5: POP 000003a6: SWAP2 000003a7: SWAP1 000003a8: POP 000003a9: JUMP 000003aa: JUMPDEST 000003ab: PUSH1 0x00 000003ad: DUP2 000003ae: SWAP1 000003af: POP 000003b0: SWAP2 000003b1: SWAP1 000003b2: POP 000003b3: JUMP 000003b4: JUMPDEST 000003b5: DUP3 000003b6: DUP2 000003b7: DUP4 000003b8: CALLDATACOPY 000003b9: PUSH1 0x00 000003bb: DUP4 000003bc: DUP4 000003bd: ADD 000003be: MSTORE 000003bf: POP 000003c0: POP 000003c1: POP 000003c2: JUMP 000003c3: JUMPDEST 000003c4: PUSH1 0x00 000003c6: JUMPDEST 000003c7: DUP4 000003c8: DUP2 000003c9: LT 000003ca: ISZERO 000003cb: PUSH2 0x03e1 000003ce: JUMPI 000003cf: DUP1 000003d0: DUP3 000003d1: ADD 000003d2: MLOAD 000003d3: DUP2 000003d4: DUP5 000003d5: ADD 000003d6: MSTORE 000003d7: PUSH1 0x20 000003d9: DUP2 000003da: ADD 000003db: SWAP1 000003dc: POP 000003dd: PUSH2 0x03c6 000003e0: JUMP 000003e1: JUMPDEST 000003e2: DUP4 000003e3: DUP2 000003e4: GT 000003e5: ISZERO 000003e6: PUSH2 0x03f0 000003e9: JUMPI 000003ea: PUSH1 0x00 000003ec: DUP5 000003ed: DUP5 000003ee: ADD 000003ef: MSTORE 000003f0: JUMPDEST 000003f1: POP 000003f2: POP 000003f3: POP 000003f4: POP 000003f5: JUMP 000003f6: JUMPDEST 000003f7: PUSH1 0x00 000003f9: PUSH1 0x1f 000003fb: NOT 000003fc: PUSH1 0x1f 000003fe: DUP4 000003ff: ADD 00000400: AND 00000401: SWAP1 00000402: POP 00000403: SWAP2 00000404: SWAP1 00000405: POP 00000406: JUMP 00000407: JUMPDEST 00000408: PUSH2 0x0410 0000040b: DUP2 0000040c: PUSH2 0x0378 0000040f: JUMP 00000410: JUMPDEST 00000411: DUP2 00000412: EQ 00000413: PUSH2 0x041b 00000416: JUMPI 00000417: PUSH1 0x00 00000419: DUP1 0000041a: REVERT 0000041b: JUMPDEST 0000041c: POP 0000041d: JUMP 0000041e: JUMPDEST 0000041f: PUSH2 0x0427 00000422: DUP2 00000423: PUSH2 0x03aa 00000426: JUMP 00000427: JUMPDEST 00000428: DUP2 00000429: EQ 0000042a: PUSH2 0x0432 0000042d: JUMPI 0000042e: PUSH1 0x00 00000430: DUP1 00000431: REVERT 00000432: JUMPDEST 00000433: POP 00000434: JUMP 00000435: INVALID 00000436: LOG2 00000437: PUSH5 0x6970667358 0000043d: UNKNOWN(0x22) 0000043e: SLT 0000043f: KECCAK256 00000440: UNKNOWN(0x28) 00000441: AND 00000442: MULMOD 00000443: AND 00000444: UNKNOWN(0xCF) 00000445: DUP14 00000446: UNKNOWN(0x4C) 00000447: DUP8 00000448: UNKNOWN(0x2E) 00000449: UNKNOWN(0xBD) 0000044a: DUP7 0000044b: PUSH27 0xabb57e70d17a84379cada5f22aa6e560185904d164736f6c634300 00000467: MOD 00000468: UNKNOWN(0x0C) 00000469: STOP 0000046a: CALLER
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| medium | other | detector | Untrusted CALL target/value reachable | 45 | no | no |
viewtrace_id: 0x2d50def8457ff5c09a9807bc89a59b6e4768bbecc75a43f40b0a492b9ef008c9
call_targets:
0x8f213ffb671fa2f1986c8709166d6a590aae57a5
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x2d50def8457ff5c09a9807bc89a59b6e4768bbecc75a43f40b0a492b9ef008c9",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x8f213ffb671fa2f1986c8709166d6a590aae57a5"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x77cae758",
"selector": "0x77cae758",
"calldata_variants": [
"0x77cae758",
"0x77cae7580000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 299,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 415,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 2,
"guards_detected": [
{
"pc": 152,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
],
"untrusted_call_count": 2
}
|
| medium | other | detector | ETH value transfer possible | 40 | no | no |
viewtrace_id: 0x2d50def8457ff5c09a9807bc89a59b6e4768bbecc75a43f40b0a492b9ef008c9
call_targets:
0x8f213ffb671fa2f1986c8709166d6a590aae57a5
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x2d50def8457ff5c09a9807bc89a59b6e4768bbecc75a43f40b0a492b9ef008c9",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x8f213ffb671fa2f1986c8709166d6a590aae57a5"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x77cae758",
"selector": "0x77cae758",
"calldata_variants": [
"0x77cae758",
"0x77cae7580000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 299,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 415,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 2,
"guards_detected": [
{
"pc": 152,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
]
}
|