TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-d172-73e2-99d2-4bbbf204a4dc

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
27761 artifact.fetch complete 1 / 3 3 months ago
27762 tool.cast_disasm complete 1 / 3 3 months ago
103289 analysis.bundle complete 1 / 3 1 week ago
103290 capability.graph complete 1 / 3 1 week ago
103291 detector.run complete 1 / 3 1 week ago
103292 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
11
EXT*/BALANCE
1
Total opcodes
672
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x03
00000002: CALLDATASIZE
00000003: GT
00000004: PUSH2 0x000c
00000007: JUMPI
00000008: PUSH2 0x045f
0000000b: JUMP
0000000c: JUMPDEST
0000000d: PUSH0
0000000e: CALLDATALOAD
0000000f: PUSH1 0xe0
00000011: SHR
00000012: PUSH4 0xfc0c546a
00000017: DUP2
00000018: XOR
00000019: PUSH2 0x002c
0000001c: JUMPI
0000001d: CALLVALUE
0000001e: PUSH2 0x0461
00000021: JUMPI
00000022: PUSH0
00000023: SLOAD
00000024: PUSH1 0x40
00000026: MSTORE
00000027: PUSH1 0x20
00000029: PUSH1 0x40
0000002b: RETURN
0000002c: JUMPDEST
0000002d: PUSH4 0xbe040fb0
00000032: DUP2
00000033: XOR
00000034: PUSH2 0x0040
00000037: JUMPI
00000038: PUSH0
00000039: PUSH1 0x40
0000003b: MSTORE
0000003c: PUSH2 0x005a
0000003f: JUMP
00000040: JUMPDEST
00000041: PUSH4 0xdb006a75
00000046: DUP2
00000047: XOR
00000048: PUSH2 0x03a4
0000004b: JUMPI
0000004c: PUSH1 0x24
0000004e: CALLDATASIZE
0000004f: LT
00000050: PUSH2 0x0461
00000053: JUMPI
00000054: PUSH1 0x04
00000056: CALLDATALOAD
00000057: PUSH1 0x40
00000059: MSTORE
0000005a: JUMPDEST
0000005b: CALLVALUE
0000005c: PUSH2 0x0461
0000005f: JUMPI
00000060: PUSH0
00000061: SLOAD
00000062: PUSH4 0x18160ddd
00000067: PUSH1 0x80
00000069: MSTORE
0000006a: PUSH1 0x20
0000006c: PUSH1 0x80
0000006e: PUSH1 0x04
00000070: PUSH1 0x9c
00000072: DUP5
00000073: GAS
00000074: STATICCALL
00000075: PUSH2 0x0080
00000078: JUMPI
00000079: RETURNDATASIZE
0000007a: PUSH0
0000007b: PUSH0
0000007c: RETURNDATACOPY
0000007d: RETURNDATASIZE
0000007e: PUSH0
0000007f: REVERT
00000080: JUMPDEST
00000081: PUSH1 0x20
00000083: RETURNDATASIZE
00000084: LT
00000085: PUSH2 0x0461
00000088: JUMPI
00000089: PUSH1 0x80
0000008b: SWAP1
0000008c: POP
0000008d: MLOAD
0000008e: PUSH1 0x60
00000090: MSTORE
00000091: PUSH1 0x40
00000093: MLOAD
00000094: PUSH1 0x80
00000096: MSTORE
00000097: PUSH1 0x80
00000099: MLOAD
0000009a: PUSH2 0x00d3
0000009d: JUMPI
0000009e: PUSH0
0000009f: SLOAD
000000a0: PUSH4 0x70a08231
000000a5: PUSH1 0xa0
000000a7: MSTORE
000000a8: CALLER
000000a9: PUSH1 0xc0
000000ab: MSTORE
000000ac: PUSH1 0x20
000000ae: PUSH1 0xa0
000000b0: PUSH1 0x24
000000b2: PUSH1 0xbc
000000b4: DUP5
000000b5: GAS
000000b6: STATICCALL
000000b7: PUSH2 0x00c2
000000ba: JUMPI
000000bb: RETURNDATASIZE
000000bc: PUSH0
000000bd: PUSH0
000000be: RETURNDATACOPY
000000bf: RETURNDATASIZE
000000c0: PUSH0
000000c1: REVERT
000000c2: JUMPDEST
000000c3: PUSH1 0x20
000000c5: RETURNDATASIZE
000000c6: LT
000000c7: PUSH2 0x0461
000000ca: JUMPI
000000cb: PUSH1 0xa0
000000cd: SWAP1
000000ce: POP
000000cf: MLOAD
000000d0: PUSH1 0x80
000000d2: MSTORE
000000d3: JUMPDEST
000000d4: SELFBALANCE
000000d5: PUSH1 0x80
000000d7: MLOAD
000000d8: DUP1
000000d9: DUP3
000000da: MUL
000000db: DUP2
000000dc: ISZERO
000000dd: DUP4
000000de: DUP4
000000df: DUP4
000000e0: DIV
000000e1: EQ
000000e2: OR
000000e3: ISZERO
000000e4: PUSH2 0x0461
000000e7: JUMPI
000000e8: SWAP1
000000e9: POP
000000ea: SWAP1
000000eb: POP
000000ec: PUSH1 0x60
000000ee: MLOAD
000000ef: DUP1
000000f0: ISZERO
000000f1: PUSH2 0x0461
000000f4: JUMPI
000000f5: DUP1
000000f6: DUP3
000000f7: DIV
000000f8: SWAP1
000000f9: POP
000000fa: SWAP1
000000fb: POP
000000fc: PUSH1 0xa0
000000fe: MSTORE
000000ff: PUSH1 0x80
00000101: MLOAD
00000102: PUSH0
00000103: SLOAD
00000104: PUSH4 0xdd62ed3e
00000109: PUSH1 0xc0
0000010b: MSTORE
0000010c: CALLER
0000010d: PUSH1 0xe0
0000010f: MSTORE
00000110: ADDRESS
00000111: PUSH2 0x0100
00000114: MSTORE
00000115: PUSH1 0x20
00000117: PUSH1 0xc0
00000119: PUSH1 0x44
0000011b: PUSH1 0xdc
0000011d: DUP5
0000011e: GAS
0000011f: STATICCALL
00000120: PUSH2 0x012b
00000123: JUMPI
00000124: RETURNDATASIZE
00000125: PUSH0
00000126: PUSH0
00000127: RETURNDATACOPY
00000128: RETURNDATASIZE
00000129: PUSH0
0000012a: REVERT
0000012b: JUMPDEST
0000012c: PUSH1 0x20
0000012e: RETURNDATASIZE
0000012f: LT
00000130: PUSH2 0x0461
00000133: JUMPI
00000134: PUSH1 0xc0
00000136: SWAP1
00000137: POP
00000138: MLOAD
00000139: LT
0000013a: ISZERO
0000013b: PUSH2 0x01a1
0000013e: JUMPI
0000013f: PUSH1 0x14
00000141: PUSH2 0x0120
00000144: MSTORE
00000145: PUSH32 0x4e6f7420656e6f75676820616c6c6f77616e6365000000000000000000000000
00000166: PUSH2 0x0140
00000169: MSTORE
0000016a: PUSH2 0x0120
0000016d: POP
0000016e: PUSH2 0x0120
00000171: MLOAD
00000172: DUP1
00000173: PUSH2 0x0140
00000176: ADD
00000177: PUSH1 0x1f
00000179: DUP3
0000017a: PUSH0
0000017b: SUB
0000017c: AND
0000017d: CALLDATASIZE
0000017e: DUP3
0000017f: CALLDATACOPY
00000180: POP
00000181: POP
00000182: PUSH4 0x08c379a0
00000187: PUSH1 0xe0
00000189: MSTORE
0000018a: PUSH1 0x20
0000018c: PUSH2 0x0100
0000018f: MSTORE
00000190: PUSH1 0x1f
00000192: NOT
00000193: PUSH1 0x1f
00000195: PUSH2 0x0120
00000198: MLOAD
00000199: ADD
0000019a: AND
0000019b: PUSH1 0x44
0000019d: ADD
0000019e: PUSH1 0xfc
000001a0: REVERT
000001a1: JUMPDEST
000001a2: PUSH1 0x80
000001a4: MLOAD
000001a5: PUSH0
000001a6: SLOAD
000001a7: PUSH4 0x70a08231
000001ac: PUSH1 0xc0
000001ae: MSTORE
000001af: CALLER
000001b0: PUSH1 0xe0
000001b2: MSTORE
000001b3: PUSH1 0x20
000001b5: PUSH1 0xc0
000001b7: PUSH1 0x24
000001b9: PUSH1 0xdc
000001bb: DUP5
000001bc: GAS
000001bd: STATICCALL
000001be: PUSH2 0x01c9
000001c1: JUMPI
000001c2: RETURNDATASIZE
000001c3: PUSH0
000001c4: PUSH0
000001c5: RETURNDATACOPY
000001c6: RETURNDATASIZE
000001c7: PUSH0
000001c8: REVERT
000001c9: JUMPDEST
000001ca: PUSH1 0x20
000001cc: RETURNDATASIZE
000001cd: LT
000001ce: PUSH2 0x0461
000001d1: JUMPI
000001d2: PUSH1 0xc0
000001d4: SWAP1
000001d5: POP
000001d6: MLOAD
000001d7: LT
000001d8: ISZERO
000001d9: PUSH2 0x023e
000001dc: JUMPI
000001dd: PUSH1 0x12
000001df: PUSH2 0x0100
000001e2: MSTORE
000001e3: PUSH32 0x4e6f7420656e6f7567682062616c616e63650000000000000000000000000000
00000204: PUSH2 0x0120
00000207: MSTORE
00000208: PUSH2 0x0100
0000020b: POP
0000020c: PUSH2 0x0100
0000020f: MLOAD
00000210: DUP1
00000211: PUSH2 0x0120
00000214: ADD
00000215: PUSH1 0x1f
00000217: DUP3
00000218: PUSH0
00000219: SUB
0000021a: AND
0000021b: CALLDATASIZE
0000021c: DUP3
0000021d: CALLDATACOPY
0000021e: POP
0000021f: POP
00000220: PUSH4 0x08c379a0
00000225: PUSH1 0xc0
00000227: MSTORE
00000228: PUSH1 0x20
0000022a: PUSH1 0xe0
0000022c: MSTORE
0000022d: PUSH1 0x1f
0000022f: NOT
00000230: PUSH1 0x1f
00000232: PUSH2 0x0100
00000235: MLOAD
00000236: ADD
00000237: AND
00000238: PUSH1 0x44
0000023a: ADD
0000023b: PUSH1 0xdc
0000023d: REVERT
0000023e: JUMPDEST
0000023f: CALLER
00000240: PUSH32 0xb281156836deb382d925e5f0c190a92e9c5205deb970f205783680737fddd27a
00000261: PUSH1 0x80
00000263: MLOAD
00000264: PUSH2 0x0160
00000267: MSTORE
00000268: PUSH0
00000269: SLOAD
0000026a: PUSH4 0xdd62ed3e
0000026f: PUSH1 0xc0
00000271: MSTORE
00000272: CALLER
00000273: PUSH1 0xe0
00000275: MSTORE
00000276: ADDRESS
00000277: PUSH2 0x0100
0000027a: MSTORE
0000027b: PUSH1 0x20
0000027d: PUSH1 0xc0
0000027f: PUSH1 0x44
00000281: PUSH1 0xdc
00000283: DUP5
00000284: GAS
00000285: STATICCALL
00000286: PUSH2 0x0291
00000289: JUMPI
0000028a: RETURNDATASIZE
0000028b: PUSH0
0000028c: PUSH0
0000028d: RETURNDATACOPY
0000028e: RETURNDATASIZE
0000028f: PUSH0
00000290: REVERT
00000291: JUMPDEST
00000292: PUSH1 0x20
00000294: RETURNDATASIZE
00000295: LT
00000296: PUSH2 0x0461
00000299: JUMPI
0000029a: PUSH1 0xc0
0000029c: SWAP1
0000029d: POP
0000029e: MLOAD
0000029f: PUSH2 0x0180
000002a2: MSTORE
000002a3: PUSH0
000002a4: SLOAD
000002a5: PUSH4 0x70a08231
000002aa: PUSH2 0x0120
000002ad: MSTORE
000002ae: CALLER
000002af: PUSH2 0x0140
000002b2: MSTORE
000002b3: PUSH1 0x20
000002b5: PUSH2 0x0120
000002b8: PUSH1 0x24
000002ba: PUSH2 0x013c
000002bd: DUP5
000002be: GAS
000002bf: STATICCALL
000002c0: PUSH2 0x02cb
000002c3: JUMPI
000002c4: RETURNDATASIZE
000002c5: PUSH0
000002c6: PUSH0
000002c7: RETURNDATACOPY
000002c8: RETURNDATASIZE
000002c9: PUSH0
000002ca: REVERT
000002cb: JUMPDEST
000002cc: PUSH1 0x20
000002ce: RETURNDATASIZE
000002cf: LT
000002d0: PUSH2 0x0461
000002d3: JUMPI
000002d4: PUSH2 0x0120
000002d7: SWAP1
000002d8: POP
000002d9: MLOAD
000002da: PUSH2 0x01a0
000002dd: MSTORE
000002de: PUSH1 0x60
000002e0: PUSH2 0x0160
000002e3: LOG2
000002e4: PUSH0
000002e5: SLOAD
000002e6: PUSH4 0x23b872dd
000002eb: PUSH1 0xc0
000002ed: MSTORE
000002ee: CALLER
000002ef: PUSH1 0xe0
000002f1: MSTORE
000002f2: ADDRESS
000002f3: PUSH2 0x0100
000002f6: MSTORE
000002f7: PUSH1 0x80
000002f9: MLOAD
000002fa: PUSH2 0x0120
000002fd: MSTORE
000002fe: PUSH1 0x20
00000300: PUSH1 0xc0
00000302: PUSH1 0x64
00000304: PUSH1 0xdc
00000306: PUSH0
00000307: DUP6
00000308: GAS
00000309: CALL
0000030a: PUSH2 0x0315
0000030d: JUMPI
0000030e: RETURNDATASIZE
0000030f: PUSH0
00000310: PUSH0
00000311: RETURNDATACOPY
00000312: RETURNDATASIZE
00000313: PUSH0
00000314: REVERT
00000315: JUMPDEST
00000316: PUSH1 0x20
00000318: RETURNDATASIZE
00000319: LT
0000031a: PUSH2 0x0461
0000031d: JUMPI
0000031e: PUSH1 0xc0
00000320: MLOAD
00000321: DUP1
00000322: PUSH1 0x01
00000324: SHR
00000325: PUSH2 0x0461
00000328: JUMPI
00000329: PUSH2 0x0140
0000032c: MSTORE
0000032d: PUSH2 0x0140
00000330: POP
00000331: POP
00000332: PUSH0
00000333: PUSH0
00000334: PUSH0
00000335: PUSH0
00000336: PUSH1 0xa0
00000338: MLOAD
00000339: CALLER
0000033a: PUSH0
0000033b: CALL
0000033c: ISZERO
0000033d: PUSH2 0x0461
00000340: JUMPI
00000341: PUSH0
00000342: SLOAD
00000343: PUSH4 0x42966c68
00000348: PUSH1 0xc0
0000034a: MSTORE
0000034b: PUSH1 0x80
0000034d: MLOAD
0000034e: PUSH1 0xe0
00000350: MSTORE
00000351: DUP1
00000352: EXTCODESIZE
00000353: ISZERO
00000354: PUSH2 0x0461
00000357: JUMPI
00000358: PUSH0
00000359: PUSH1 0xc0
0000035b: PUSH1 0x24
0000035d: PUSH1 0xdc
0000035f: PUSH0
00000360: DUP6
00000361: GAS
00000362: CALL
00000363: PUSH2 0x036e
00000366: JUMPI
00000367: RETURNDATASIZE
00000368: PUSH0
00000369: PUSH0
0000036a: RETURNDATACOPY
0000036b: RETURNDATASIZE
0000036c: PUSH0
0000036d: REVERT
0000036e: JUMPDEST
0000036f: POP
00000370: CALLER
00000371: PUSH32 0xf3a670cd3af7d64b488926880889d08a8585a138ff455227af6737339a1ec262
00000392: PUSH1 0xa0
00000394: MLOAD
00000395: PUSH1 0xc0
00000397: MSTORE
00000398: PUSH1 0x80
0000039a: MLOAD
0000039b: PUSH1 0xe0
0000039d: MSTORE
0000039e: PUSH1 0x40
000003a0: PUSH1 0xc0
000003a2: LOG2
000003a3: STOP
000003a4: JUMPDEST
000003a5: PUSH4 0xcef1a1a3
000003aa: DUP2
000003ab: XOR
000003ac: PUSH2 0x045d
000003af: JUMPI
000003b0: PUSH1 0x24
000003b2: CALLDATASIZE
000003b3: LT
000003b4: PUSH2 0x0461
000003b7: JUMPI
000003b8: PUSH1 0x04
000003ba: CALLDATALOAD
000003bb: DUP1
000003bc: PUSH1 0xa0
000003be: SHR
000003bf: PUSH2 0x0461
000003c2: JUMPI
000003c3: PUSH1 0x40
000003c5: MSTORE
000003c6: CALLVALUE
000003c7: PUSH2 0x0461
000003ca: JUMPI
000003cb: PUSH0
000003cc: SLOAD
000003cd: PUSH4 0x18160ddd
000003d2: PUSH1 0x80
000003d4: MSTORE
000003d5: PUSH1 0x20
000003d7: PUSH1 0x80
000003d9: PUSH1 0x04
000003db: PUSH1 0x9c
000003dd: DUP5
000003de: GAS
000003df: STATICCALL
000003e0: PUSH2 0x03eb
000003e3: JUMPI
000003e4: RETURNDATASIZE
000003e5: PUSH0
000003e6: PUSH0
000003e7: RETURNDATACOPY
000003e8: RETURNDATASIZE
000003e9: PUSH0
000003ea: REVERT
000003eb: JUMPDEST
000003ec: PUSH1 0x20
000003ee: RETURNDATASIZE
000003ef: LT
000003f0: PUSH2 0x0461
000003f3: JUMPI
000003f4: PUSH1 0x80
000003f6: SWAP1
000003f7: POP
000003f8: MLOAD
000003f9: PUSH1 0x60
000003fb: MSTORE
000003fc: SELFBALANCE
000003fd: PUSH0
000003fe: SLOAD
000003ff: PUSH4 0x70a08231
00000404: PUSH1 0x80
00000406: MSTORE
00000407: PUSH1 0x40
00000409: MLOAD
0000040a: PUSH1 0xa0
0000040c: MSTORE
0000040d: PUSH1 0x20
0000040f: PUSH1 0x80
00000411: PUSH1 0x24
00000413: PUSH1 0x9c
00000415: DUP5
00000416: GAS
00000417: STATICCALL
00000418: PUSH2 0x0423
0000041b: JUMPI
0000041c: RETURNDATASIZE
0000041d: PUSH0
0000041e: PUSH0
0000041f: RETURNDATACOPY
00000420: RETURNDATASIZE
00000421: PUSH0
00000422: REVERT
00000423: JUMPDEST
00000424: PUSH1 0x20
00000426: RETURNDATASIZE
00000427: LT
00000428: PUSH2 0x0461
0000042b: JUMPI
0000042c: PUSH1 0x80
0000042e: SWAP1
0000042f: POP
00000430: MLOAD
00000431: DUP1
00000432: DUP3
00000433: MUL
00000434: DUP2
00000435: ISZERO
00000436: DUP4
00000437: DUP4
00000438: DUP4
00000439: DIV
0000043a: EQ
0000043b: OR
0000043c: ISZERO
0000043d: PUSH2 0x0461
00000440: JUMPI
00000441: SWAP1
00000442: POP
00000443: SWAP1
00000444: POP
00000445: PUSH1 0x60
00000447: MLOAD
00000448: DUP1
00000449: ISZERO
0000044a: PUSH2 0x0461
0000044d: JUMPI
0000044e: DUP1
0000044f: DUP3
00000450: DIV
00000451: SWAP1
00000452: POP
00000453: SWAP1
00000454: POP
00000455: PUSH1 0xc0
00000457: MSTORE
00000458: PUSH1 0x20
0000045a: PUSH1 0xc0
0000045c: RETURN
0000045d: JUMPDEST
0000045e: POP
0000045f: JUMPDEST
00000460: STOP
00000461: JUMPDEST
00000462: PUSH0
00000463: DUP1
00000464: REVERT
00000465: LOG1
00000466: PUSH6 0x767970657283
0000046d: STOP
0000046e: SUB
0000046f: MULMOD
00000470: STOP
00000471: SIGNEXTEND

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x19e659668e855a086e7dc77e437de6a2d1792bc2e6834d6a67ee539b4d65e83b
call_targets: 0x055d0f4ab9922c006220e32b75cf02083c955e93
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x19e659668e855a086e7dc77e437de6a2d1792bc2e6834d6a67ee539b4d65e83b",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x055d0f4ab9922c006220e32b75cf02083c955e93"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x",
            "selector": "fallback",
            "calldata_variants": [
                "0x"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 866,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "constant_zero",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 1
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x19e659668e855a086e7dc77e437de6a2d1792bc2e6834d6a67ee539b4d65e83b
call_targets: 0x055d0f4ab9922c006220e32b75cf02083c955e93
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x19e659668e855a086e7dc77e437de6a2d1792bc2e6834d6a67ee539b4d65e83b",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x055d0f4ab9922c006220e32b75cf02083c955e93"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x",
            "selector": "fallback",
            "calldata_variants": [
                "0x"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 777,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "constant",
            "target_expression_category": "constant"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": []
}