019b477e-d172-73e2-99d2-4bbbf204a4dc
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 27761 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 27762 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 103289 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 103290 | capability.graph | complete | 1 / 3 | 1 week ago |
| 103291 | detector.run | complete | 1 / 3 | 1 week ago |
| 103292 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x03 00000002: CALLDATASIZE 00000003: GT 00000004: PUSH2 0x000c 00000007: JUMPI 00000008: PUSH2 0x045f 0000000b: JUMP 0000000c: JUMPDEST 0000000d: PUSH0 0000000e: CALLDATALOAD 0000000f: PUSH1 0xe0 00000011: SHR 00000012: PUSH4 0xfc0c546a 00000017: DUP2 00000018: XOR 00000019: PUSH2 0x002c 0000001c: JUMPI 0000001d: CALLVALUE 0000001e: PUSH2 0x0461 00000021: JUMPI 00000022: PUSH0 00000023: SLOAD 00000024: PUSH1 0x40 00000026: MSTORE 00000027: PUSH1 0x20 00000029: PUSH1 0x40 0000002b: RETURN 0000002c: JUMPDEST 0000002d: PUSH4 0xbe040fb0 00000032: DUP2 00000033: XOR 00000034: PUSH2 0x0040 00000037: JUMPI 00000038: PUSH0 00000039: PUSH1 0x40 0000003b: MSTORE 0000003c: PUSH2 0x005a 0000003f: JUMP 00000040: JUMPDEST 00000041: PUSH4 0xdb006a75 00000046: DUP2 00000047: XOR 00000048: PUSH2 0x03a4 0000004b: JUMPI 0000004c: PUSH1 0x24 0000004e: CALLDATASIZE 0000004f: LT 00000050: PUSH2 0x0461 00000053: JUMPI 00000054: PUSH1 0x04 00000056: CALLDATALOAD 00000057: PUSH1 0x40 00000059: MSTORE 0000005a: JUMPDEST 0000005b: CALLVALUE 0000005c: PUSH2 0x0461 0000005f: JUMPI 00000060: PUSH0 00000061: SLOAD 00000062: PUSH4 0x18160ddd 00000067: PUSH1 0x80 00000069: MSTORE 0000006a: PUSH1 0x20 0000006c: PUSH1 0x80 0000006e: PUSH1 0x04 00000070: PUSH1 0x9c 00000072: DUP5 00000073: GAS 00000074: STATICCALL 00000075: PUSH2 0x0080 00000078: JUMPI 00000079: RETURNDATASIZE 0000007a: PUSH0 0000007b: PUSH0 0000007c: RETURNDATACOPY 0000007d: RETURNDATASIZE 0000007e: PUSH0 0000007f: REVERT 00000080: JUMPDEST 00000081: PUSH1 0x20 00000083: RETURNDATASIZE 00000084: LT 00000085: PUSH2 0x0461 00000088: JUMPI 00000089: PUSH1 0x80 0000008b: SWAP1 0000008c: POP 0000008d: MLOAD 0000008e: PUSH1 0x60 00000090: MSTORE 00000091: PUSH1 0x40 00000093: MLOAD 00000094: PUSH1 0x80 00000096: MSTORE 00000097: PUSH1 0x80 00000099: MLOAD 0000009a: PUSH2 0x00d3 0000009d: JUMPI 0000009e: PUSH0 0000009f: SLOAD 000000a0: PUSH4 0x70a08231 000000a5: PUSH1 0xa0 000000a7: MSTORE 000000a8: CALLER 000000a9: PUSH1 0xc0 000000ab: MSTORE 000000ac: PUSH1 0x20 000000ae: PUSH1 0xa0 000000b0: PUSH1 0x24 000000b2: PUSH1 0xbc 000000b4: DUP5 000000b5: GAS 000000b6: STATICCALL 000000b7: PUSH2 0x00c2 000000ba: JUMPI 000000bb: RETURNDATASIZE 000000bc: PUSH0 000000bd: PUSH0 000000be: RETURNDATACOPY 000000bf: RETURNDATASIZE 000000c0: PUSH0 000000c1: REVERT 000000c2: JUMPDEST 000000c3: PUSH1 0x20 000000c5: RETURNDATASIZE 000000c6: LT 000000c7: PUSH2 0x0461 000000ca: JUMPI 000000cb: PUSH1 0xa0 000000cd: SWAP1 000000ce: POP 000000cf: MLOAD 000000d0: PUSH1 0x80 000000d2: MSTORE 000000d3: JUMPDEST 000000d4: SELFBALANCE 000000d5: PUSH1 0x80 000000d7: MLOAD 000000d8: DUP1 000000d9: DUP3 000000da: MUL 000000db: DUP2 000000dc: ISZERO 000000dd: DUP4 000000de: DUP4 000000df: DUP4 000000e0: DIV 000000e1: EQ 000000e2: OR 000000e3: ISZERO 000000e4: PUSH2 0x0461 000000e7: JUMPI 000000e8: SWAP1 000000e9: POP 000000ea: SWAP1 000000eb: POP 000000ec: PUSH1 0x60 000000ee: MLOAD 000000ef: DUP1 000000f0: ISZERO 000000f1: PUSH2 0x0461 000000f4: JUMPI 000000f5: DUP1 000000f6: DUP3 000000f7: DIV 000000f8: SWAP1 000000f9: POP 000000fa: SWAP1 000000fb: POP 000000fc: PUSH1 0xa0 000000fe: MSTORE 000000ff: PUSH1 0x80 00000101: MLOAD 00000102: PUSH0 00000103: SLOAD 00000104: PUSH4 0xdd62ed3e 00000109: PUSH1 0xc0 0000010b: MSTORE 0000010c: CALLER 0000010d: PUSH1 0xe0 0000010f: MSTORE 00000110: ADDRESS 00000111: PUSH2 0x0100 00000114: MSTORE 00000115: PUSH1 0x20 00000117: PUSH1 0xc0 00000119: PUSH1 0x44 0000011b: PUSH1 0xdc 0000011d: DUP5 0000011e: GAS 0000011f: STATICCALL 00000120: PUSH2 0x012b 00000123: JUMPI 00000124: RETURNDATASIZE 00000125: PUSH0 00000126: PUSH0 00000127: RETURNDATACOPY 00000128: RETURNDATASIZE 00000129: PUSH0 0000012a: REVERT 0000012b: JUMPDEST 0000012c: PUSH1 0x20 0000012e: RETURNDATASIZE 0000012f: LT 00000130: PUSH2 0x0461 00000133: JUMPI 00000134: PUSH1 0xc0 00000136: SWAP1 00000137: POP 00000138: MLOAD 00000139: LT 0000013a: ISZERO 0000013b: PUSH2 0x01a1 0000013e: JUMPI 0000013f: PUSH1 0x14 00000141: PUSH2 0x0120 00000144: MSTORE 00000145: PUSH32 0x4e6f7420656e6f75676820616c6c6f77616e6365000000000000000000000000 00000166: PUSH2 0x0140 00000169: MSTORE 0000016a: PUSH2 0x0120 0000016d: POP 0000016e: PUSH2 0x0120 00000171: MLOAD 00000172: DUP1 00000173: PUSH2 0x0140 00000176: ADD 00000177: PUSH1 0x1f 00000179: DUP3 0000017a: PUSH0 0000017b: SUB 0000017c: AND 0000017d: CALLDATASIZE 0000017e: DUP3 0000017f: CALLDATACOPY 00000180: POP 00000181: POP 00000182: PUSH4 0x08c379a0 00000187: PUSH1 0xe0 00000189: MSTORE 0000018a: PUSH1 0x20 0000018c: PUSH2 0x0100 0000018f: MSTORE 00000190: PUSH1 0x1f 00000192: NOT 00000193: PUSH1 0x1f 00000195: PUSH2 0x0120 00000198: MLOAD 00000199: ADD 0000019a: AND 0000019b: PUSH1 0x44 0000019d: ADD 0000019e: PUSH1 0xfc 000001a0: REVERT 000001a1: JUMPDEST 000001a2: PUSH1 0x80 000001a4: MLOAD 000001a5: PUSH0 000001a6: SLOAD 000001a7: PUSH4 0x70a08231 000001ac: PUSH1 0xc0 000001ae: MSTORE 000001af: CALLER 000001b0: PUSH1 0xe0 000001b2: MSTORE 000001b3: PUSH1 0x20 000001b5: PUSH1 0xc0 000001b7: PUSH1 0x24 000001b9: PUSH1 0xdc 000001bb: DUP5 000001bc: GAS 000001bd: STATICCALL 000001be: PUSH2 0x01c9 000001c1: JUMPI 000001c2: RETURNDATASIZE 000001c3: PUSH0 000001c4: PUSH0 000001c5: RETURNDATACOPY 000001c6: RETURNDATASIZE 000001c7: PUSH0 000001c8: REVERT 000001c9: JUMPDEST 000001ca: PUSH1 0x20 000001cc: RETURNDATASIZE 000001cd: LT 000001ce: PUSH2 0x0461 000001d1: JUMPI 000001d2: PUSH1 0xc0 000001d4: SWAP1 000001d5: POP 000001d6: MLOAD 000001d7: LT 000001d8: ISZERO 000001d9: PUSH2 0x023e 000001dc: JUMPI 000001dd: PUSH1 0x12 000001df: PUSH2 0x0100 000001e2: MSTORE 000001e3: PUSH32 0x4e6f7420656e6f7567682062616c616e63650000000000000000000000000000 00000204: PUSH2 0x0120 00000207: MSTORE 00000208: PUSH2 0x0100 0000020b: POP 0000020c: PUSH2 0x0100 0000020f: MLOAD 00000210: DUP1 00000211: PUSH2 0x0120 00000214: ADD 00000215: PUSH1 0x1f 00000217: DUP3 00000218: PUSH0 00000219: SUB 0000021a: AND 0000021b: CALLDATASIZE 0000021c: DUP3 0000021d: CALLDATACOPY 0000021e: POP 0000021f: POP 00000220: PUSH4 0x08c379a0 00000225: PUSH1 0xc0 00000227: MSTORE 00000228: PUSH1 0x20 0000022a: PUSH1 0xe0 0000022c: MSTORE 0000022d: PUSH1 0x1f 0000022f: NOT 00000230: PUSH1 0x1f 00000232: PUSH2 0x0100 00000235: MLOAD 00000236: ADD 00000237: AND 00000238: PUSH1 0x44 0000023a: ADD 0000023b: PUSH1 0xdc 0000023d: REVERT 0000023e: JUMPDEST 0000023f: CALLER 00000240: PUSH32 0xb281156836deb382d925e5f0c190a92e9c5205deb970f205783680737fddd27a 00000261: PUSH1 0x80 00000263: MLOAD 00000264: PUSH2 0x0160 00000267: MSTORE 00000268: PUSH0 00000269: SLOAD 0000026a: PUSH4 0xdd62ed3e 0000026f: PUSH1 0xc0 00000271: MSTORE 00000272: CALLER 00000273: PUSH1 0xe0 00000275: MSTORE 00000276: ADDRESS 00000277: PUSH2 0x0100 0000027a: MSTORE 0000027b: PUSH1 0x20 0000027d: PUSH1 0xc0 0000027f: PUSH1 0x44 00000281: PUSH1 0xdc 00000283: DUP5 00000284: GAS 00000285: STATICCALL 00000286: PUSH2 0x0291 00000289: JUMPI 0000028a: RETURNDATASIZE 0000028b: PUSH0 0000028c: PUSH0 0000028d: RETURNDATACOPY 0000028e: RETURNDATASIZE 0000028f: PUSH0 00000290: REVERT 00000291: JUMPDEST 00000292: PUSH1 0x20 00000294: RETURNDATASIZE 00000295: LT 00000296: PUSH2 0x0461 00000299: JUMPI 0000029a: PUSH1 0xc0 0000029c: SWAP1 0000029d: POP 0000029e: MLOAD 0000029f: PUSH2 0x0180 000002a2: MSTORE 000002a3: PUSH0 000002a4: SLOAD 000002a5: PUSH4 0x70a08231 000002aa: PUSH2 0x0120 000002ad: MSTORE 000002ae: CALLER 000002af: PUSH2 0x0140 000002b2: MSTORE 000002b3: PUSH1 0x20 000002b5: PUSH2 0x0120 000002b8: PUSH1 0x24 000002ba: PUSH2 0x013c 000002bd: DUP5 000002be: GAS 000002bf: STATICCALL 000002c0: PUSH2 0x02cb 000002c3: JUMPI 000002c4: RETURNDATASIZE 000002c5: PUSH0 000002c6: PUSH0 000002c7: RETURNDATACOPY 000002c8: RETURNDATASIZE 000002c9: PUSH0 000002ca: REVERT 000002cb: JUMPDEST 000002cc: PUSH1 0x20 000002ce: RETURNDATASIZE 000002cf: LT 000002d0: PUSH2 0x0461 000002d3: JUMPI 000002d4: PUSH2 0x0120 000002d7: SWAP1 000002d8: POP 000002d9: MLOAD 000002da: PUSH2 0x01a0 000002dd: MSTORE 000002de: PUSH1 0x60 000002e0: PUSH2 0x0160 000002e3: LOG2 000002e4: PUSH0 000002e5: SLOAD 000002e6: PUSH4 0x23b872dd 000002eb: PUSH1 0xc0 000002ed: MSTORE 000002ee: CALLER 000002ef: PUSH1 0xe0 000002f1: MSTORE 000002f2: ADDRESS 000002f3: PUSH2 0x0100 000002f6: MSTORE 000002f7: PUSH1 0x80 000002f9: MLOAD 000002fa: PUSH2 0x0120 000002fd: MSTORE 000002fe: PUSH1 0x20 00000300: PUSH1 0xc0 00000302: PUSH1 0x64 00000304: PUSH1 0xdc 00000306: PUSH0 00000307: DUP6 00000308: GAS 00000309: CALL 0000030a: PUSH2 0x0315 0000030d: JUMPI 0000030e: RETURNDATASIZE 0000030f: PUSH0 00000310: PUSH0 00000311: RETURNDATACOPY 00000312: RETURNDATASIZE 00000313: PUSH0 00000314: REVERT 00000315: JUMPDEST 00000316: PUSH1 0x20 00000318: RETURNDATASIZE 00000319: LT 0000031a: PUSH2 0x0461 0000031d: JUMPI 0000031e: PUSH1 0xc0 00000320: MLOAD 00000321: DUP1 00000322: PUSH1 0x01 00000324: SHR 00000325: PUSH2 0x0461 00000328: JUMPI 00000329: PUSH2 0x0140 0000032c: MSTORE 0000032d: PUSH2 0x0140 00000330: POP 00000331: POP 00000332: PUSH0 00000333: PUSH0 00000334: PUSH0 00000335: PUSH0 00000336: PUSH1 0xa0 00000338: MLOAD 00000339: CALLER 0000033a: PUSH0 0000033b: CALL 0000033c: ISZERO 0000033d: PUSH2 0x0461 00000340: JUMPI 00000341: PUSH0 00000342: SLOAD 00000343: PUSH4 0x42966c68 00000348: PUSH1 0xc0 0000034a: MSTORE 0000034b: PUSH1 0x80 0000034d: MLOAD 0000034e: PUSH1 0xe0 00000350: MSTORE 00000351: DUP1 00000352: EXTCODESIZE 00000353: ISZERO 00000354: PUSH2 0x0461 00000357: JUMPI 00000358: PUSH0 00000359: PUSH1 0xc0 0000035b: PUSH1 0x24 0000035d: PUSH1 0xdc 0000035f: PUSH0 00000360: DUP6 00000361: GAS 00000362: CALL 00000363: PUSH2 0x036e 00000366: JUMPI 00000367: RETURNDATASIZE 00000368: PUSH0 00000369: PUSH0 0000036a: RETURNDATACOPY 0000036b: RETURNDATASIZE 0000036c: PUSH0 0000036d: REVERT 0000036e: JUMPDEST 0000036f: POP 00000370: CALLER 00000371: PUSH32 0xf3a670cd3af7d64b488926880889d08a8585a138ff455227af6737339a1ec262 00000392: PUSH1 0xa0 00000394: MLOAD 00000395: PUSH1 0xc0 00000397: MSTORE 00000398: PUSH1 0x80 0000039a: MLOAD 0000039b: PUSH1 0xe0 0000039d: MSTORE 0000039e: PUSH1 0x40 000003a0: PUSH1 0xc0 000003a2: LOG2 000003a3: STOP 000003a4: JUMPDEST 000003a5: PUSH4 0xcef1a1a3 000003aa: DUP2 000003ab: XOR 000003ac: PUSH2 0x045d 000003af: JUMPI 000003b0: PUSH1 0x24 000003b2: CALLDATASIZE 000003b3: LT 000003b4: PUSH2 0x0461 000003b7: JUMPI 000003b8: PUSH1 0x04 000003ba: CALLDATALOAD 000003bb: DUP1 000003bc: PUSH1 0xa0 000003be: SHR 000003bf: PUSH2 0x0461 000003c2: JUMPI 000003c3: PUSH1 0x40 000003c5: MSTORE 000003c6: CALLVALUE 000003c7: PUSH2 0x0461 000003ca: JUMPI 000003cb: PUSH0 000003cc: SLOAD 000003cd: PUSH4 0x18160ddd 000003d2: PUSH1 0x80 000003d4: MSTORE 000003d5: PUSH1 0x20 000003d7: PUSH1 0x80 000003d9: PUSH1 0x04 000003db: PUSH1 0x9c 000003dd: DUP5 000003de: GAS 000003df: STATICCALL 000003e0: PUSH2 0x03eb 000003e3: JUMPI 000003e4: RETURNDATASIZE 000003e5: PUSH0 000003e6: PUSH0 000003e7: RETURNDATACOPY 000003e8: RETURNDATASIZE 000003e9: PUSH0 000003ea: REVERT 000003eb: JUMPDEST 000003ec: PUSH1 0x20 000003ee: RETURNDATASIZE 000003ef: LT 000003f0: PUSH2 0x0461 000003f3: JUMPI 000003f4: PUSH1 0x80 000003f6: SWAP1 000003f7: POP 000003f8: MLOAD 000003f9: PUSH1 0x60 000003fb: MSTORE 000003fc: SELFBALANCE 000003fd: PUSH0 000003fe: SLOAD 000003ff: PUSH4 0x70a08231 00000404: PUSH1 0x80 00000406: MSTORE 00000407: PUSH1 0x40 00000409: MLOAD 0000040a: PUSH1 0xa0 0000040c: MSTORE 0000040d: PUSH1 0x20 0000040f: PUSH1 0x80 00000411: PUSH1 0x24 00000413: PUSH1 0x9c 00000415: DUP5 00000416: GAS 00000417: STATICCALL 00000418: PUSH2 0x0423 0000041b: JUMPI 0000041c: RETURNDATASIZE 0000041d: PUSH0 0000041e: PUSH0 0000041f: RETURNDATACOPY 00000420: RETURNDATASIZE 00000421: PUSH0 00000422: REVERT 00000423: JUMPDEST 00000424: PUSH1 0x20 00000426: RETURNDATASIZE 00000427: LT 00000428: PUSH2 0x0461 0000042b: JUMPI 0000042c: PUSH1 0x80 0000042e: SWAP1 0000042f: POP 00000430: MLOAD 00000431: DUP1 00000432: DUP3 00000433: MUL 00000434: DUP2 00000435: ISZERO 00000436: DUP4 00000437: DUP4 00000438: DUP4 00000439: DIV 0000043a: EQ 0000043b: OR 0000043c: ISZERO 0000043d: PUSH2 0x0461 00000440: JUMPI 00000441: SWAP1 00000442: POP 00000443: SWAP1 00000444: POP 00000445: PUSH1 0x60 00000447: MLOAD 00000448: DUP1 00000449: ISZERO 0000044a: PUSH2 0x0461 0000044d: JUMPI 0000044e: DUP1 0000044f: DUP3 00000450: DIV 00000451: SWAP1 00000452: POP 00000453: SWAP1 00000454: POP 00000455: PUSH1 0xc0 00000457: MSTORE 00000458: PUSH1 0x20 0000045a: PUSH1 0xc0 0000045c: RETURN 0000045d: JUMPDEST 0000045e: POP 0000045f: JUMPDEST 00000460: STOP 00000461: JUMPDEST 00000462: PUSH0 00000463: DUP1 00000464: REVERT 00000465: LOG1 00000466: PUSH6 0x767970657283 0000046d: STOP 0000046e: SUB 0000046f: MULMOD 00000470: STOP 00000471: SIGNEXTEND
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x19e659668e855a086e7dc77e437de6a2d1792bc2e6834d6a67ee539b4d65e83b
call_targets:
0x055d0f4ab9922c006220e32b75cf02083c955e93
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x19e659668e855a086e7dc77e437de6a2d1792bc2e6834d6a67ee539b4d65e83b",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x055d0f4ab9922c006220e32b75cf02083c955e93"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 866,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "constant_zero",
"target_expression_category": "computed"
}
],
"call_count": 3,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x19e659668e855a086e7dc77e437de6a2d1792bc2e6834d6a67ee539b4d65e83b
call_targets:
0x055d0f4ab9922c006220e32b75cf02083c955e93
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x19e659668e855a086e7dc77e437de6a2d1792bc2e6834d6a67ee539b4d65e83b",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x055d0f4ab9922c006220e32b75cf02083c955e93"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 777,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "constant",
"target_expression_category": "constant"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|