Analysis Run

019b477e-cfc5-7084-a410-33f02b56e623

complete

Chain ID

1

Address

0x889edc2edab5f40e902b864ad4d7ade8e412f9b1

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Verified

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
27443	artifact.fetch	complete	1 / 3	3 months ago
27444	tool.cast_disasm	complete	1 / 3	3 months ago
70983	analysis.bundle	complete	1 / 3	1 week ago
70984	capability.graph	complete	1 / 3	1 week ago
70985	detector.run	complete	1 / 3	1 week ago
70986	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

2

Selfdestruct

1

CREATE2

0

CALL-family (heavy)

0

EXT*/BALANCE

3

Total opcodes

1421

Flags

delegatecall_present selfdestruct_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0074
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x916f1fd7
00000019: GT
0000001a: PUSH2 0x004e
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x916f1fd7
00000024: EQ
00000025: PUSH2 0x00f5
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0xad729a71
0000002f: EQ
00000030: PUSH2 0x0122
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xadcbc237
0000003a: EQ
0000003b: PUSH2 0x0137
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xd2f6ed4d
00000045: EQ
00000046: PUSH2 0x014c
00000049: JUMPI
0000004a: PUSH2 0x0083
0000004d: JUMP
0000004e: JUMPDEST
0000004f: DUP1
00000050: PUSH4 0x13351258
00000055: EQ
00000056: PUSH2 0x008b
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0x3ebdd0eb
00000060: EQ
00000061: PUSH2 0x00b5
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0x773f5be8
0000006b: EQ
0000006c: PUSH2 0x00d5
0000006f: JUMPI
00000070: PUSH2 0x0083
00000073: JUMP
00000074: JUMPDEST
00000075: CALLDATASIZE
00000076: PUSH2 0x0083
00000079: JUMPI
0000007a: PUSH2 0x0081
0000007d: PUSH2 0x016c
00000080: JUMP
00000081: JUMPDEST
00000082: STOP
00000083: JUMPDEST
00000084: PUSH2 0x0081
00000087: PUSH2 0x016c
0000008a: JUMP
0000008b: JUMPDEST
0000008c: CALLVALUE
0000008d: DUP1
0000008e: ISZERO
0000008f: PUSH2 0x0097
00000092: JUMPI
00000093: PUSH1 0x00
00000095: DUP1
00000096: REVERT
00000097: JUMPDEST
00000098: POP
00000099: PUSH2 0x00a0
0000009c: PUSH2 0x017e
0000009f: JUMP
000000a0: JUMPDEST
000000a1: PUSH1 0x40
000000a3: MLOAD
000000a4: SWAP1
000000a5: ISZERO
000000a6: ISZERO
000000a7: DUP2
000000a8: MSTORE
000000a9: PUSH1 0x20
000000ab: ADD
000000ac: JUMPDEST
000000ad: PUSH1 0x40
000000af: MLOAD
000000b0: DUP1
000000b1: SWAP2
000000b2: SUB
000000b3: SWAP1
000000b4: RETURN
000000b5: JUMPDEST
000000b6: CALLVALUE
000000b7: DUP1
000000b8: ISZERO
000000b9: PUSH2 0x00c1
000000bc: JUMPI
000000bd: PUSH1 0x00
000000bf: DUP1
000000c0: REVERT
000000c1: JUMPDEST
000000c2: POP
000000c3: PUSH2 0x0081
000000c6: PUSH2 0x00d0
000000c9: CALLDATASIZE
000000ca: PUSH1 0x04
000000cc: PUSH2 0x07d6
000000cf: JUMP
000000d0: JUMPDEST
000000d1: PUSH2 0x0198
000000d4: JUMP
000000d5: JUMPDEST
000000d6: CALLVALUE
000000d7: DUP1
000000d8: ISZERO
000000d9: PUSH2 0x00e1
000000dc: JUMPI
000000dd: PUSH1 0x00
000000df: DUP1
000000e0: REVERT
000000e1: JUMPDEST
000000e2: POP
000000e3: PUSH2 0x0081
000000e6: PUSH2 0x00f0
000000e9: CALLDATASIZE
000000ea: PUSH1 0x04
000000ec: PUSH2 0x07d6
000000ef: JUMP
000000f0: JUMPDEST
000000f1: PUSH2 0x0201
000000f4: JUMP
000000f5: JUMPDEST
000000f6: CALLVALUE
000000f7: DUP1
000000f8: ISZERO
000000f9: PUSH2 0x0101
000000fc: JUMPI
000000fd: PUSH1 0x00
000000ff: DUP1
00000100: REVERT
00000101: JUMPDEST
00000102: POP
00000103: PUSH2 0x010a
00000106: PUSH2 0x0266
00000109: JUMP
0000010a: JUMPDEST
0000010b: PUSH1 0x40
0000010d: MLOAD
0000010e: PUSH1 0x01
00000110: PUSH1 0x01
00000112: PUSH1 0xa0
00000114: SHL
00000115: SUB
00000116: SWAP1
00000117: SWAP2
00000118: AND
00000119: DUP2
0000011a: MSTORE
0000011b: PUSH1 0x20
0000011d: ADD
0000011e: PUSH2 0x00ac
00000121: JUMP
00000122: JUMPDEST
00000123: CALLVALUE
00000124: DUP1
00000125: ISZERO
00000126: PUSH2 0x012e
00000129: JUMPI
0000012a: PUSH1 0x00
0000012c: DUP1
0000012d: REVERT
0000012e: JUMPDEST
0000012f: POP
00000130: PUSH2 0x010a
00000133: PUSH2 0x0275
00000136: JUMP
00000137: JUMPDEST
00000138: CALLVALUE
00000139: DUP1
0000013a: ISZERO
0000013b: PUSH2 0x0143
0000013e: JUMPI
0000013f: PUSH1 0x00
00000141: DUP1
00000142: REVERT
00000143: JUMPDEST
00000144: POP
00000145: PUSH2 0x0081
00000148: PUSH2 0x027f
0000014b: JUMP
0000014c: JUMPDEST
0000014d: CALLVALUE
0000014e: DUP1
0000014f: ISZERO
00000150: PUSH2 0x0158
00000153: JUMPI
00000154: PUSH1 0x00
00000156: DUP1
00000157: REVERT
00000158: JUMPDEST
00000159: POP
0000015a: PUSH2 0x0081
0000015d: PUSH2 0x0167
00000160: CALLDATASIZE
00000161: PUSH1 0x04
00000163: PUSH2 0x0817
00000166: JUMP
00000167: JUMPDEST
00000168: PUSH2 0x0388
0000016b: JUMP
0000016c: JUMPDEST
0000016d: PUSH2 0x017c
00000170: PUSH2 0x0177
00000173: PUSH2 0x042a
00000176: JUMP
00000177: JUMPDEST
00000178: PUSH2 0x0434
0000017b: JUMP
0000017c: JUMPDEST
0000017d: JUMP
0000017e: JUMPDEST
0000017f: PUSH1 0x00
00000181: DUP1
00000182: PUSH2 0x0189
00000185: PUSH2 0x045d
00000188: JUMP
00000189: JUMPDEST
0000018a: PUSH1 0x01
0000018c: PUSH1 0x01
0000018e: PUSH1 0xa0
00000190: SHL
00000191: SUB
00000192: AND
00000193: EQ
00000194: SWAP1
00000195: POP
00000196: SWAP1
00000197: JUMP
00000198: JUMPDEST
00000199: PUSH1 0x00
0000019b: PUSH2 0x01a2
0000019e: PUSH2 0x045d
000001a1: JUMP
000001a2: JUMPDEST
000001a3: SWAP1
000001a4: POP
000001a5: PUSH1 0x01
000001a7: PUSH1 0x01
000001a9: PUSH1 0xa0
000001ab: SHL
000001ac: SUB
000001ad: DUP2
000001ae: AND
000001af: PUSH2 0x01cb
000001b2: JUMPI
000001b3: PUSH1 0x40
000001b5: MLOAD
000001b6: PUSH4 0xb83646a9
000001bb: PUSH1 0xe0
000001bd: SHL
000001be: DUP2
000001bf: MSTORE
000001c0: PUSH1 0x04
000001c2: ADD
000001c3: PUSH1 0x40
000001c5: MLOAD
000001c6: DUP1
000001c7: SWAP2
000001c8: SUB
000001c9: SWAP1
000001ca: REVERT
000001cb: JUMPDEST
000001cc: PUSH1 0x01
000001ce: PUSH1 0x01
000001d0: PUSH1 0xa0
000001d2: SHL
000001d3: SUB
000001d4: DUP2
000001d5: AND
000001d6: CALLER
000001d7: EQ
000001d8: PUSH2 0x01f4
000001db: JUMPI
000001dc: PUSH1 0x40
000001de: MLOAD
000001df: PUSH4 0x7bfa4b9f
000001e4: PUSH1 0xe0
000001e6: SHL
000001e7: DUP2
000001e8: MSTORE
000001e9: PUSH1 0x04
000001eb: ADD
000001ec: PUSH1 0x40
000001ee: MLOAD
000001ef: DUP1
000001f0: SWAP2
000001f1: SUB
000001f2: SWAP1
000001f3: REVERT
000001f4: JUMPDEST
000001f5: PUSH2 0x01fd
000001f8: DUP3
000001f9: PUSH2 0x0490
000001fc: JUMP
000001fd: JUMPDEST
000001fe: POP
000001ff: POP
00000200: JUMP
00000201: JUMPDEST
00000202: PUSH1 0x00
00000204: PUSH2 0x020b
00000207: PUSH2 0x045d
0000020a: JUMP
0000020b: JUMPDEST
0000020c: SWAP1
0000020d: POP
0000020e: PUSH1 0x01
00000210: PUSH1 0x01
00000212: PUSH1 0xa0
00000214: SHL
00000215: SUB
00000216: DUP2
00000217: AND
00000218: PUSH2 0x0234
0000021b: JUMPI
0000021c: PUSH1 0x40
0000021e: MLOAD
0000021f: PUSH4 0xb83646a9
00000224: PUSH1 0xe0
00000226: SHL
00000227: DUP2
00000228: MSTORE
00000229: PUSH1 0x04
0000022b: ADD
0000022c: PUSH1 0x40
0000022e: MLOAD
0000022f: DUP1
00000230: SWAP2
00000231: SUB
00000232: SWAP1
00000233: REVERT
00000234: JUMPDEST
00000235: PUSH1 0x01
00000237: PUSH1 0x01
00000239: PUSH1 0xa0
0000023b: SHL
0000023c: SUB
0000023d: DUP2
0000023e: AND
0000023f: CALLER
00000240: EQ
00000241: PUSH2 0x025d
00000244: JUMPI
00000245: PUSH1 0x40
00000247: MLOAD
00000248: PUSH4 0x7bfa4b9f
0000024d: PUSH1 0xe0
0000024f: SHL
00000250: DUP2
00000251: MSTORE
00000252: PUSH1 0x04
00000254: ADD
00000255: PUSH1 0x40
00000257: MLOAD
00000258: DUP1
00000259: SWAP2
0000025a: SUB
0000025b: SWAP1
0000025c: REVERT
0000025d: JUMPDEST
0000025e: PUSH2 0x01fd
00000261: DUP3
00000262: PUSH2 0x04d0
00000265: JUMP
00000266: JUMPDEST
00000267: PUSH1 0x00
00000269: PUSH2 0x0270
0000026c: PUSH2 0x045d
0000026f: JUMP
00000270: JUMPDEST
00000271: SWAP1
00000272: POP
00000273: SWAP1
00000274: JUMP
00000275: JUMPDEST
00000276: PUSH1 0x00
00000278: PUSH2 0x0270
0000027b: PUSH2 0x042a
0000027e: JUMP
0000027f: JUMPDEST
00000280: PUSH1 0x00
00000282: PUSH2 0x0289
00000285: PUSH2 0x045d
00000288: JUMP
00000289: JUMPDEST
0000028a: SWAP1
0000028b: POP
0000028c: PUSH1 0x01
0000028e: PUSH1 0x01
00000290: PUSH1 0xa0
00000292: SHL
00000293: SUB
00000294: DUP2
00000295: AND
00000296: PUSH2 0x02b2
00000299: JUMPI
0000029a: PUSH1 0x40
0000029c: MLOAD
0000029d: PUSH4 0xb83646a9
000002a2: PUSH1 0xe0
000002a4: SHL
000002a5: DUP2
000002a6: MSTORE
000002a7: PUSH1 0x04
000002a9: ADD
000002aa: PUSH1 0x40
000002ac: MLOAD
000002ad: DUP1
000002ae: SWAP2
000002af: SUB
000002b0: SWAP1
000002b1: REVERT
000002b2: JUMPDEST
000002b3: PUSH1 0x01
000002b5: PUSH1 0x01
000002b7: PUSH1 0xa0
000002b9: SHL
000002ba: SUB
000002bb: DUP2
000002bc: AND
000002bd: CALLER
000002be: EQ
000002bf: PUSH2 0x02db
000002c2: JUMPI
000002c3: PUSH1 0x40
000002c5: MLOAD
000002c6: PUSH4 0x7bfa4b9f
000002cb: PUSH1 0xe0
000002cd: SHL
000002ce: DUP2
000002cf: MSTORE
000002d0: PUSH1 0x04
000002d2: ADD
000002d3: PUSH1 0x40
000002d5: MLOAD
000002d6: DUP1
000002d7: SWAP2
000002d8: SUB
000002d9: SWAP1
000002da: REVERT
000002db: JUMPDEST
000002dc: PUSH1 0x00
000002de: PUSH2 0x02e5
000002e1: PUSH2 0x045d
000002e4: JUMP
000002e5: JUMPDEST
000002e6: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000307: DUP1
00000308: SLOAD
00000309: PUSH1 0x01
0000030b: PUSH1 0x01
0000030d: PUSH1 0xa0
0000030f: SHL
00000310: SUB
00000311: NOT
00000312: AND
00000313: SWAP1
00000314: SSTORE
00000315: PUSH1 0x40
00000317: DUP1
00000318: MLOAD
00000319: PUSH1 0x01
0000031b: PUSH1 0x01
0000031d: PUSH1 0xa0
0000031f: SHL
00000320: SUB
00000321: DUP4
00000322: AND
00000323: DUP2
00000324: MSTORE
00000325: PUSH1 0x00
00000327: PUSH1 0x20
00000329: DUP3
0000032a: ADD
0000032b: MSTORE
0000032c: DUP2
0000032d: MLOAD
0000032e: SWAP3
0000032f: SWAP4
00000330: POP
00000331: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
00000352: SWAP3
00000353: SWAP1
00000354: DUP2
00000355: SWAP1
00000356: SUB
00000357: SWAP1
00000358: SWAP2
00000359: ADD
0000035a: SWAP1
0000035b: LOG1
0000035c: PUSH1 0x40
0000035e: MLOAD
0000035f: PUSH32 0x158b204828f9326d9bb3c2be9336986c14911b4a72b93d1801f207aac3c68b9f
00000380: SWAP1
00000381: PUSH1 0x00
00000383: SWAP1
00000384: LOG1
00000385: POP
00000386: POP
00000387: JUMP
00000388: JUMPDEST
00000389: PUSH1 0x00
0000038b: PUSH2 0x0392
0000038e: PUSH2 0x045d
00000391: JUMP
00000392: JUMPDEST
00000393: SWAP1
00000394: POP
00000395: PUSH1 0x01
00000397: PUSH1 0x01
00000399: PUSH1 0xa0
0000039b: SHL
0000039c: SUB
0000039d: DUP2
0000039e: AND
0000039f: PUSH2 0x03bb
000003a2: JUMPI
000003a3: PUSH1 0x40
000003a5: MLOAD
000003a6: PUSH4 0xb83646a9
000003ab: PUSH1 0xe0
000003ad: SHL
000003ae: DUP2
000003af: MSTORE
000003b0: PUSH1 0x04
000003b2: ADD
000003b3: PUSH1 0x40
000003b5: MLOAD
000003b6: DUP1
000003b7: SWAP2
000003b8: SUB
000003b9: SWAP1
000003ba: REVERT
000003bb: JUMPDEST
000003bc: PUSH1 0x01
000003be: PUSH1 0x01
000003c0: PUSH1 0xa0
000003c2: SHL
000003c3: SUB
000003c4: DUP2
000003c5: AND
000003c6: CALLER
000003c7: EQ
000003c8: PUSH2 0x03e4
000003cb: JUMPI
000003cc: PUSH1 0x40
000003ce: MLOAD
000003cf: PUSH4 0x7bfa4b9f
000003d4: PUSH1 0xe0
000003d6: SHL
000003d7: DUP2
000003d8: MSTORE
000003d9: PUSH1 0x04
000003db: ADD
000003dc: PUSH1 0x40
000003de: MLOAD
000003df: DUP1
000003e0: SWAP2
000003e1: SUB
000003e2: SWAP1
000003e3: REVERT
000003e4: JUMPDEST
000003e5: PUSH2 0x03ef
000003e8: DUP5
000003e9: DUP5
000003ea: DUP5
000003eb: PUSH2 0x0527
000003ee: JUMP
000003ef: JUMPDEST
000003f0: POP
000003f1: POP
000003f2: POP
000003f3: POP
000003f4: JUMP
000003f5: JUMPDEST
000003f6: PUSH1 0x60
000003f8: PUSH2 0x041a
000003fb: DUP4
000003fc: DUP4
000003fd: PUSH1 0x40
000003ff: MLOAD
00000400: DUP1
00000401: PUSH1 0x60
00000403: ADD
00000404: PUSH1 0x40
00000406: MSTORE
00000407: DUP1
00000408: PUSH1 0x27
0000040a: DUP2
0000040b: MSTORE
0000040c: PUSH1 0x20
0000040e: ADD
0000040f: PUSH2 0x0965
00000412: PUSH1 0x27
00000414: SWAP2
00000415: CODECOPY
00000416: PUSH2 0x054c
00000419: JUMP
0000041a: JUMPDEST
0000041b: SWAP4
0000041c: SWAP3
0000041d: POP
0000041e: POP
0000041f: POP
00000420: JUMP
00000421: JUMPDEST
00000422: SWAP1
00000423: JUMP
00000424: JUMPDEST
00000425: EXTCODESIZE
00000426: ISZERO
00000427: ISZERO
00000428: SWAP1
00000429: JUMP
0000042a: JUMPDEST
0000042b: PUSH1 0x00
0000042d: PUSH2 0x0270
00000430: PUSH2 0x0625
00000433: JUMP
00000434: JUMPDEST
00000435: CALLDATASIZE
00000436: PUSH1 0x00
00000438: DUP1
00000439: CALLDATACOPY
0000043a: PUSH1 0x00
0000043c: DUP1
0000043d: CALLDATASIZE
0000043e: PUSH1 0x00
00000440: DUP5
00000441: GAS
00000442: DELEGATECALL
00000443: RETURNDATASIZE
00000444: PUSH1 0x00
00000446: DUP1
00000447: RETURNDATACOPY
00000448: DUP1
00000449: DUP1
0000044a: ISZERO
0000044b: PUSH2 0x0453
0000044e: JUMPI
0000044f: RETURNDATASIZE
00000450: PUSH1 0x00
00000452: RETURN
00000453: JUMPDEST
00000454: RETURNDATASIZE
00000455: PUSH1 0x00
00000457: REVERT
00000458: JUMPDEST
00000459: POP
0000045a: POP
0000045b: POP
0000045c: JUMP
0000045d: JUMPDEST
0000045e: PUSH1 0x00
00000460: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000481: JUMPDEST
00000482: SLOAD
00000483: PUSH1 0x01
00000485: PUSH1 0x01
00000487: PUSH1 0xa0
00000489: SHL
0000048a: SUB
0000048b: AND
0000048c: SWAP2
0000048d: SWAP1
0000048e: POP
0000048f: JUMP
00000490: JUMPDEST
00000491: PUSH2 0x0499
00000494: DUP2
00000495: PUSH2 0x064d
00000498: JUMP
00000499: JUMPDEST
0000049a: PUSH1 0x40
0000049c: MLOAD
0000049d: PUSH1 0x01
0000049f: PUSH1 0x01
000004a1: PUSH1 0xa0
000004a3: SHL
000004a4: SUB
000004a5: DUP3
000004a6: AND
000004a7: SWAP1
000004a8: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
000004c9: SWAP1
000004ca: PUSH1 0x00
000004cc: SWAP1
000004cd: LOG2
000004ce: POP
000004cf: JUMP
000004d0: JUMPDEST
000004d1: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
000004f2: PUSH2 0x04f9
000004f5: PUSH2 0x045d
000004f8: JUMP
000004f9: JUMPDEST
000004fa: PUSH1 0x40
000004fc: DUP1
000004fd: MLOAD
000004fe: PUSH1 0x01
00000500: PUSH1 0x01
00000502: PUSH1 0xa0
00000504: SHL
00000505: SUB
00000506: SWAP3
00000507: DUP4
00000508: AND
00000509: DUP2
0000050a: MSTORE
0000050b: SWAP2
0000050c: DUP5
0000050d: AND
0000050e: PUSH1 0x20
00000510: DUP4
00000511: ADD
00000512: MSTORE
00000513: ADD
00000514: PUSH1 0x40
00000516: MLOAD
00000517: DUP1
00000518: SWAP2
00000519: SUB
0000051a: SWAP1
0000051b: LOG1
0000051c: PUSH2 0x0524
0000051f: DUP2
00000520: PUSH2 0x06f5
00000523: JUMP
00000524: JUMPDEST
00000525: POP
00000526: JUMP
00000527: JUMPDEST
00000528: PUSH2 0x0530
0000052b: DUP4
0000052c: PUSH2 0x0490
0000052f: JUMP
00000530: JUMPDEST
00000531: PUSH1 0x00
00000533: DUP3
00000534: MLOAD
00000535: GT
00000536: DUP1
00000537: PUSH2 0x053d
0000053a: JUMPI
0000053b: POP
0000053c: DUP1
0000053d: JUMPDEST
0000053e: ISZERO
0000053f: PUSH2 0x0458
00000542: JUMPI
00000543: PUSH2 0x03ef
00000546: DUP4
00000547: DUP4
00000548: PUSH2 0x03f5
0000054b: JUMP
0000054c: JUMPDEST
0000054d: PUSH1 0x60
0000054f: DUP4
00000550: EXTCODESIZE
00000551: PUSH2 0x05b0
00000554: JUMPI
00000555: PUSH1 0x40
00000557: MLOAD
00000558: PUSH3 0x461bcd
0000055c: PUSH1 0xe5
0000055e: SHL
0000055f: DUP2
00000560: MSTORE
00000561: PUSH1 0x20
00000563: PUSH1 0x04
00000565: DUP3
00000566: ADD
00000567: MSTORE
00000568: PUSH1 0x26
0000056a: PUSH1 0x24
0000056c: DUP3
0000056d: ADD
0000056e: MSTORE
0000056f: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f
00000590: PUSH1 0x44
00000592: DUP3
00000593: ADD
00000594: MSTORE
00000595: PUSH6 0x1b9d1c9858dd
0000059c: PUSH1 0xd2
0000059e: SHL
0000059f: PUSH1 0x64
000005a1: DUP3
000005a2: ADD
000005a3: MSTORE
000005a4: PUSH1 0x84
000005a6: ADD
000005a7: JUMPDEST
000005a8: PUSH1 0x40
000005aa: MLOAD
000005ab: DUP1
000005ac: SWAP2
000005ad: SUB
000005ae: SWAP1
000005af: REVERT
000005b0: JUMPDEST
000005b1: PUSH1 0x00
000005b3: DUP1
000005b4: DUP6
000005b5: PUSH1 0x01
000005b7: PUSH1 0x01
000005b9: PUSH1 0xa0
000005bb: SHL
000005bc: SUB
000005bd: AND
000005be: DUP6
000005bf: PUSH1 0x40
000005c1: MLOAD
000005c2: PUSH2 0x05cb
000005c5: SWAP2
000005c6: SWAP1
000005c7: PUSH2 0x0915
000005ca: JUMP
000005cb: JUMPDEST
000005cc: PUSH1 0x00
000005ce: PUSH1 0x40
000005d0: MLOAD
000005d1: DUP1
000005d2: DUP4
000005d3: SUB
000005d4: DUP2
000005d5: DUP6
000005d6: GAS
000005d7: DELEGATECALL
000005d8: SWAP2
000005d9: POP
000005da: POP
000005db: RETURNDATASIZE
000005dc: DUP1
000005dd: PUSH1 0x00
000005df: DUP2
000005e0: EQ
000005e1: PUSH2 0x0606
000005e4: JUMPI
000005e5: PUSH1 0x40
000005e7: MLOAD
000005e8: SWAP2
000005e9: POP
000005ea: PUSH1 0x1f
000005ec: NOT
000005ed: PUSH1 0x3f
000005ef: RETURNDATASIZE
000005f0: ADD
000005f1: AND
000005f2: DUP3
000005f3: ADD
000005f4: PUSH1 0x40
000005f6: MSTORE
000005f7: RETURNDATASIZE
000005f8: DUP3
000005f9: MSTORE
000005fa: RETURNDATASIZE
000005fb: PUSH1 0x00
000005fd: PUSH1 0x20
000005ff: DUP5
00000600: ADD
00000601: RETURNDATACOPY
00000602: PUSH2 0x060b
00000605: JUMP
00000606: JUMPDEST
00000607: PUSH1 0x60
00000609: SWAP2
0000060a: POP
0000060b: JUMPDEST
0000060c: POP
0000060d: SWAP2
0000060e: POP
0000060f: SWAP2
00000610: POP
00000611: PUSH2 0x061b
00000614: DUP3
00000615: DUP3
00000616: DUP7
00000617: PUSH2 0x0781
0000061a: JUMP
0000061b: JUMPDEST
0000061c: SWAP7
0000061d: SWAP6
0000061e: POP
0000061f: POP
00000620: POP
00000621: POP
00000622: POP
00000623: POP
00000624: JUMP
00000625: JUMPDEST
00000626: PUSH1 0x00
00000628: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000649: PUSH2 0x0481
0000064c: JUMP
0000064d: JUMPDEST
0000064e: DUP1
0000064f: EXTCODESIZE
00000650: PUSH2 0x06b1
00000653: JUMPI
00000654: PUSH1 0x40
00000656: MLOAD
00000657: PUSH3 0x461bcd
0000065b: PUSH1 0xe5
0000065d: SHL
0000065e: DUP2
0000065f: MSTORE
00000660: PUSH1 0x20
00000662: PUSH1 0x04
00000664: DUP3
00000665: ADD
00000666: MSTORE
00000667: PUSH1 0x2d
00000669: PUSH1 0x24
0000066b: DUP3
0000066c: ADD
0000066d: MSTORE
0000066e: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
0000068f: PUSH1 0x44
00000691: DUP3
00000692: ADD
00000693: MSTORE
00000694: PUSH13 0x1bdd08184818dbdb9d1c9858dd
000006a2: PUSH1 0x9a
000006a4: SHL
000006a5: PUSH1 0x64
000006a7: DUP3
000006a8: ADD
000006a9: MSTORE
000006aa: PUSH1 0x84
000006ac: ADD
000006ad: PUSH2 0x05a7
000006b0: JUMP
000006b1: JUMPDEST
000006b2: DUP1
000006b3: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000006d4: JUMPDEST
000006d5: DUP1
000006d6: SLOAD
000006d7: PUSH1 0x01
000006d9: PUSH1 0x01
000006db: PUSH1 0xa0
000006dd: SHL
000006de: SUB
000006df: NOT
000006e0: AND
000006e1: PUSH1 0x01
000006e3: PUSH1 0x01
000006e5: PUSH1 0xa0
000006e7: SHL
000006e8: SUB
000006e9: SWAP3
000006ea: SWAP1
000006eb: SWAP3
000006ec: AND
000006ed: SWAP2
000006ee: SWAP1
000006ef: SWAP2
000006f0: OR
000006f1: SWAP1
000006f2: SSTORE
000006f3: POP
000006f4: JUMP
000006f5: JUMPDEST
000006f6: PUSH1 0x01
000006f8: PUSH1 0x01
000006fa: PUSH1 0xa0
000006fc: SHL
000006fd: SUB
000006fe: DUP2
000006ff: AND
00000700: PUSH2 0x075a
00000703: JUMPI
00000704: PUSH1 0x40
00000706: MLOAD
00000707: PUSH3 0x461bcd
0000070b: PUSH1 0xe5
0000070d: SHL
0000070e: DUP2
0000070f: MSTORE
00000710: PUSH1 0x20
00000712: PUSH1 0x04
00000714: DUP3
00000715: ADD
00000716: MSTORE
00000717: PUSH1 0x26
00000719: PUSH1 0x24
0000071b: DUP3
0000071c: ADD
0000071d: MSTORE
0000071e: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
0000073f: PUSH1 0x44
00000741: DUP3
00000742: ADD
00000743: MSTORE
00000744: PUSH6 0x646472657373
0000074b: PUSH1 0xd0
0000074d: SHL
0000074e: PUSH1 0x64
00000750: DUP3
00000751: ADD
00000752: MSTORE
00000753: PUSH1 0x84
00000755: ADD
00000756: PUSH2 0x05a7
00000759: JUMP
0000075a: JUMPDEST
0000075b: DUP1
0000075c: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000077d: PUSH2 0x06d4
00000780: JUMP
00000781: JUMPDEST
00000782: PUSH1 0x60
00000784: DUP4
00000785: ISZERO
00000786: PUSH2 0x0790
00000789: JUMPI
0000078a: POP
0000078b: DUP2
0000078c: PUSH2 0x041a
0000078f: JUMP
00000790: JUMPDEST
00000791: DUP3
00000792: MLOAD
00000793: ISZERO
00000794: PUSH2 0x07a0
00000797: JUMPI
00000798: DUP3
00000799: MLOAD
0000079a: DUP1
0000079b: DUP5
0000079c: PUSH1 0x20
0000079e: ADD
0000079f: REVERT
000007a0: JUMPDEST
000007a1: DUP2
000007a2: PUSH1 0x40
000007a4: MLOAD
000007a5: PUSH3 0x461bcd
000007a9: PUSH1 0xe5
000007ab: SHL
000007ac: DUP2
000007ad: MSTORE
000007ae: PUSH1 0x04
000007b0: ADD
000007b1: PUSH2 0x05a7
000007b4: SWAP2
000007b5: SWAP1
000007b6: PUSH2 0x0931
000007b9: JUMP
000007ba: JUMPDEST
000007bb: DUP1
000007bc: CALLDATALOAD
000007bd: PUSH1 0x01
000007bf: PUSH1 0x01
000007c1: PUSH1 0xa0
000007c3: SHL
000007c4: SUB
000007c5: DUP2
000007c6: AND
000007c7: DUP2
000007c8: EQ
000007c9: PUSH2 0x07d1
000007cc: JUMPI
000007cd: PUSH1 0x00
000007cf: DUP1
000007d0: REVERT
000007d1: JUMPDEST
000007d2: SWAP2
000007d3: SWAP1
000007d4: POP
000007d5: JUMP
000007d6: JUMPDEST
000007d7: PUSH1 0x00
000007d9: PUSH1 0x20
000007db: DUP3
000007dc: DUP5
000007dd: SUB
000007de: SLT
000007df: ISZERO
000007e0: PUSH2 0x07e8
000007e3: JUMPI
000007e4: PUSH1 0x00
000007e6: DUP1
000007e7: REVERT
000007e8: JUMPDEST
000007e9: PUSH2 0x041a
000007ec: DUP3
000007ed: PUSH2 0x07ba
000007f0: JUMP
000007f1: JUMPDEST
000007f2: PUSH4 0x4e487b71
000007f7: PUSH1 0xe0
000007f9: SHL
000007fa: PUSH1 0x00
000007fc: MSTORE
000007fd: PUSH1 0x41
000007ff: PUSH1 0x04
00000801: MSTORE
00000802: PUSH1 0x24
00000804: PUSH1 0x00
00000806: REVERT
00000807: JUMPDEST
00000808: DUP1
00000809: CALLDATALOAD
0000080a: DUP1
0000080b: ISZERO
0000080c: ISZERO
0000080d: DUP2
0000080e: EQ
0000080f: PUSH2 0x07d1
00000812: JUMPI
00000813: PUSH1 0x00
00000815: DUP1
00000816: REVERT
00000817: JUMPDEST
00000818: PUSH1 0x00
0000081a: DUP1
0000081b: PUSH1 0x00
0000081d: PUSH1 0x60
0000081f: DUP5
00000820: DUP7
00000821: SUB
00000822: SLT
00000823: ISZERO
00000824: PUSH2 0x082c
00000827: JUMPI
00000828: PUSH1 0x00
0000082a: DUP1
0000082b: REVERT
0000082c: JUMPDEST
0000082d: PUSH2 0x0835
00000830: DUP5
00000831: PUSH2 0x07ba
00000834: JUMP
00000835: JUMPDEST
00000836: SWAP3
00000837: POP
00000838: PUSH1 0x20
0000083a: DUP5
0000083b: ADD
0000083c: CALLDATALOAD
0000083d: PUSH8 0xffffffffffffffff
00000846: DUP1
00000847: DUP3
00000848: GT
00000849: ISZERO
0000084a: PUSH2 0x0852
0000084d: JUMPI
0000084e: PUSH1 0x00
00000850: DUP1
00000851: REVERT
00000852: JUMPDEST
00000853: DUP2
00000854: DUP7
00000855: ADD
00000856: SWAP2
00000857: POP
00000858: DUP7
00000859: PUSH1 0x1f
0000085b: DUP4
0000085c: ADD
0000085d: SLT
0000085e: PUSH2 0x0866
00000861: JUMPI
00000862: PUSH1 0x00
00000864: DUP1
00000865: REVERT
00000866: JUMPDEST
00000867: DUP2
00000868: CALLDATALOAD
00000869: DUP2
0000086a: DUP2
0000086b: GT
0000086c: ISZERO
0000086d: PUSH2 0x0878
00000870: JUMPI
00000871: PUSH2 0x0878
00000874: PUSH2 0x07f1
00000877: JUMP
00000878: JUMPDEST
00000879: PUSH1 0x40
0000087b: MLOAD
0000087c: PUSH1 0x1f
0000087e: DUP3
0000087f: ADD
00000880: PUSH1 0x1f
00000882: NOT
00000883: SWAP1
00000884: DUP2
00000885: AND
00000886: PUSH1 0x3f
00000888: ADD
00000889: AND
0000088a: DUP2
0000088b: ADD
0000088c: SWAP1
0000088d: DUP4
0000088e: DUP3
0000088f: GT
00000890: DUP2
00000891: DUP4
00000892: LT
00000893: OR
00000894: ISZERO
00000895: PUSH2 0x08a0
00000898: JUMPI
00000899: PUSH2 0x08a0
0000089c: PUSH2 0x07f1
0000089f: JUMP
000008a0: JUMPDEST
000008a1: DUP2
000008a2: PUSH1 0x40
000008a4: MSTORE
000008a5: DUP3
000008a6: DUP2
000008a7: MSTORE
000008a8: DUP10
000008a9: PUSH1 0x20
000008ab: DUP5
000008ac: DUP8
000008ad: ADD
000008ae: ADD
000008af: GT
000008b0: ISZERO
000008b1: PUSH2 0x08b9
000008b4: JUMPI
000008b5: PUSH1 0x00
000008b7: DUP1
000008b8: REVERT
000008b9: JUMPDEST
000008ba: DUP3
000008bb: PUSH1 0x20
000008bd: DUP7
000008be: ADD
000008bf: PUSH1 0x20
000008c1: DUP4
000008c2: ADD
000008c3: CALLDATACOPY
000008c4: PUSH1 0x00
000008c6: PUSH1 0x20
000008c8: DUP5
000008c9: DUP4
000008ca: ADD
000008cb: ADD
000008cc: MSTORE
000008cd: DUP1
000008ce: SWAP7
000008cf: POP
000008d0: POP
000008d1: POP
000008d2: POP
000008d3: POP
000008d4: POP
000008d5: PUSH2 0x08e0
000008d8: PUSH1 0x40
000008da: DUP6
000008db: ADD
000008dc: PUSH2 0x0807
000008df: JUMP
000008e0: JUMPDEST
000008e1: SWAP1
000008e2: POP
000008e3: SWAP3
000008e4: POP
000008e5: SWAP3
000008e6: POP
000008e7: SWAP3
000008e8: JUMP
000008e9: JUMPDEST
000008ea: PUSH1 0x00
000008ec: JUMPDEST
000008ed: DUP4
000008ee: DUP2
000008ef: LT
000008f0: ISZERO
000008f1: PUSH2 0x0904
000008f4: JUMPI
000008f5: DUP2
000008f6: DUP2
000008f7: ADD
000008f8: MLOAD
000008f9: DUP4
000008fa: DUP3
000008fb: ADD
000008fc: MSTORE
000008fd: PUSH1 0x20
000008ff: ADD
00000900: PUSH2 0x08ec
00000903: JUMP
00000904: JUMPDEST
00000905: DUP4
00000906: DUP2
00000907: GT
00000908: ISZERO
00000909: PUSH2 0x03ef
0000090c: JUMPI
0000090d: POP
0000090e: POP
0000090f: PUSH1 0x00
00000911: SWAP2
00000912: ADD
00000913: MSTORE
00000914: JUMP
00000915: JUMPDEST
00000916: PUSH1 0x00
00000918: DUP3
00000919: MLOAD
0000091a: PUSH2 0x0927
0000091d: DUP2
0000091e: DUP5
0000091f: PUSH1 0x20
00000921: DUP8
00000922: ADD
00000923: PUSH2 0x08e9
00000926: JUMP
00000927: JUMPDEST
00000928: SWAP2
00000929: SWAP1
0000092a: SWAP2
0000092b: ADD
0000092c: SWAP3
0000092d: SWAP2
0000092e: POP
0000092f: POP
00000930: JUMP
00000931: JUMPDEST
00000932: PUSH1 0x20
00000934: DUP2
00000935: MSTORE
00000936: PUSH1 0x00
00000938: DUP3
00000939: MLOAD
0000093a: DUP1
0000093b: PUSH1 0x20
0000093d: DUP5
0000093e: ADD
0000093f: MSTORE
00000940: PUSH2 0x0950
00000943: DUP2
00000944: PUSH1 0x40
00000946: DUP6
00000947: ADD
00000948: PUSH1 0x20
0000094a: DUP8
0000094b: ADD
0000094c: PUSH2 0x08e9
0000094f: JUMP
00000950: JUMPDEST
00000951: PUSH1 0x1f
00000953: ADD
00000954: PUSH1 0x1f
00000956: NOT
00000957: AND
00000958: SWAP2
00000959: SWAP1
0000095a: SWAP2
0000095b: ADD
0000095c: PUSH1 0x40
0000095e: ADD
0000095f: SWAP3
00000960: SWAP2
00000961: POP
00000962: POP
00000963: JUMP
00000964: INVALID
00000965: COINBASE
00000966: PUSH5 0x6472657373
0000096c: GASPRICE
0000096d: KECCAK256
0000096e: PUSH13 0x6f772d6c6576656c2064656c65
0000097c: PUSH8 0x6174652063616c6c
00000985: KECCAK256
00000986: PUSH7 0x61696c6564a264
0000098e: PUSH10 0x70667358221220ade03c
00000999: SELFDESTRUCT
0000099a: SHR
0000099b: SWAP14
0000099c: UNKNOWN(0x24)
0000099d: UNKNOWN(0x4E)
0000099e: ADDMOD
0000099f: UNKNOWN(0xE7)
000009a0: UNKNOWN(0x0C)
000009a1: JUMPDEST
000009a2: UNKNOWN(0x2D)
000009a3: MCOPY
000009a4: DUP8
000009a5: ADDRESS
000009a6: UNKNOWN(0xAC)
000009a7: DUP16
000009a8: CHAINID
000009a9: LOG2
000009aa: STOP
000009ab: DUP9
000009ac: EQ
000009ad: SWAP2
000009ae: UNKNOWN(0xC3)
000009af: UNKNOWN(0xDE)
000009b0: PUSH17

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0xd679f74f38966518ba857a864edfe0c1502ec22b008106b228bae53c3bf07753 validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "unknown", "attempts": 84, "trace_id": "0xd679f74f38966518ba857a864edfe0c1502ec22b008106b228bae53c3bf07753", "confirmed": false, "trace_mode": "callTracer", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x916f1fd7", "selector": "0x916f1fd7", "calldata_variants": [ "0x916f1fd7", "0x916f1fd70000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xad729a71", "selector": "0xad729a71", "calldata_variants": [ "0xad729a71", "0xad729a710000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xadcbc237", "selector": "0xadcbc237", "calldata_variants": [ "0xadcbc237", "0xadcbc2370000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd2f6ed4d", "selector": "0xd2f6ed4d", "calldata_variants": [ "0xd2f6ed4d", "0xd2f6ed4d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x13351258", "selector": "0x13351258", "calldata_variants": [ "0x13351258", "0x133512580000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x3ebdd0eb", "selector": "0x3ebdd0eb", "calldata_variants": [ "0x3ebdd0eb", "0x3ebdd0eb0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x773f5be8", "selector": "0x773f5be8", "calldata_variants": [ "0x773f5be8", "0x773f5be80000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 1090, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" }, { "pc": 1495, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 2, "untrusted_delegatecall_count": 2 }
high	other	detector	SELFDESTRUCT reachable	65	no	no	view trace_id: 0xfc6659c2eac78477af925aa5e8847215e6dcd352f58acc4a03883ec7458fc160 validation_json { "sink": "SELFDESTRUCT", "errors": 0, "status": "unknown", "attempts": 14, "trace_id": "0xfc6659c2eac78477af925aa5e8847215e6dcd352f58acc4a03883ec7458fc160", "confirmed": false, "trace_mode": "structLogs", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x916f1fd7", "selector": "0x916f1fd7", "calldata_variants": [ "0x916f1fd7", "0x916f1fd70000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xad729a71", "selector": "0xad729a71", "calldata_variants": [ "0xad729a71", "0xad729a710000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xadcbc237", "selector": "0xadcbc237", "calldata_variants": [ "0xadcbc237", "0xadcbc2370000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xd2f6ed4d", "selector": "0xd2f6ed4d", "calldata_variants": [ "0xd2f6ed4d", "0xd2f6ed4d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x13351258", "selector": "0x13351258", "calldata_variants": [ "0x13351258", "0x133512580000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x3ebdd0eb", "selector": "0x3ebdd0eb", "calldata_variants": [ "0x3ebdd0eb", "0x3ebdd0eb0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x773f5be8", "selector": "0x773f5be8", "calldata_variants": [ "0x773f5be8", "0x773f5be80000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "guards_detected": [], "selfdestruct_count": 1 }

Severity