019b477e-d37c-7236-b3f5-6f0f1b01fd22
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 28157 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 28158 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 103245 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 103246 | capability.graph | complete | 1 / 3 | 1 week ago |
| 103247 | detector.run | complete | 1 / 3 | 1 week ago |
| 103248 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x0043 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH1 0xe0 00000012: SHR 00000013: DUP1 00000014: PUSH4 0x64a197f3 00000019: EQ 0000001a: PUSH2 0x004f 0000001d: JUMPI 0000001e: DUP1 0000001f: PUSH4 0x8da5cb5b 00000024: EQ 00000025: PUSH2 0x0071 00000028: JUMPI 00000029: DUP1 0000002a: PUSH4 0x8f975a64 0000002f: EQ 00000030: PUSH2 0x00ad 00000033: JUMPI 00000034: DUP1 00000035: PUSH4 0xf2fde38b 0000003a: EQ 0000003b: PUSH2 0x00cd 0000003e: JUMPI 0000003f: PUSH1 0x00 00000041: DUP1 00000042: REVERT 00000043: JUMPDEST 00000044: CALLDATASIZE 00000045: PUSH2 0x004a 00000048: JUMPI 00000049: STOP 0000004a: JUMPDEST 0000004b: PUSH1 0x00 0000004d: DUP1 0000004e: REVERT 0000004f: JUMPDEST 00000050: CALLVALUE 00000051: DUP1 00000052: ISZERO 00000053: PUSH2 0x005b 00000056: JUMPI 00000057: PUSH1 0x00 00000059: DUP1 0000005a: REVERT 0000005b: JUMPDEST 0000005c: POP 0000005d: PUSH2 0x006f 00000060: PUSH2 0x006a 00000063: CALLDATASIZE 00000064: PUSH1 0x04 00000066: PUSH2 0x02df 00000069: JUMP 0000006a: JUMPDEST 0000006b: PUSH2 0x00ed 0000006e: JUMP 0000006f: JUMPDEST 00000070: STOP 00000071: JUMPDEST 00000072: CALLVALUE 00000073: DUP1 00000074: ISZERO 00000075: PUSH2 0x007d 00000078: JUMPI 00000079: PUSH1 0x00 0000007b: DUP1 0000007c: REVERT 0000007d: JUMPDEST 0000007e: POP 0000007f: PUSH1 0x00 00000081: SLOAD 00000082: PUSH2 0x0091 00000085: SWAP1 00000086: PUSH1 0x01 00000088: PUSH1 0x01 0000008a: PUSH1 0xa0 0000008c: SHL 0000008d: SUB 0000008e: AND 0000008f: DUP2 00000090: JUMP 00000091: JUMPDEST 00000092: PUSH1 0x40 00000094: MLOAD 00000095: PUSH1 0x01 00000097: PUSH1 0x01 00000099: PUSH1 0xa0 0000009b: SHL 0000009c: SUB 0000009d: SWAP1 0000009e: SWAP2 0000009f: AND 000000a0: DUP2 000000a1: MSTORE 000000a2: PUSH1 0x20 000000a4: ADD 000000a5: PUSH1 0x40 000000a7: MLOAD 000000a8: DUP1 000000a9: SWAP2 000000aa: SUB 000000ab: SWAP1 000000ac: RETURN 000000ad: JUMPDEST 000000ae: CALLVALUE 000000af: DUP1 000000b0: ISZERO 000000b1: PUSH2 0x00b9 000000b4: JUMPI 000000b5: PUSH1 0x00 000000b7: DUP1 000000b8: REVERT 000000b9: JUMPDEST 000000ba: POP 000000bb: PUSH2 0x006f 000000be: PUSH2 0x00c8 000000c1: CALLDATASIZE 000000c2: PUSH1 0x04 000000c4: PUSH2 0x030b 000000c7: JUMP 000000c8: JUMPDEST 000000c9: PUSH2 0x0137 000000cc: JUMP 000000cd: JUMPDEST 000000ce: CALLVALUE 000000cf: DUP1 000000d0: ISZERO 000000d1: PUSH2 0x00d9 000000d4: JUMPI 000000d5: PUSH1 0x00 000000d7: DUP1 000000d8: REVERT 000000d9: JUMPDEST 000000da: POP 000000db: PUSH2 0x006f 000000de: PUSH2 0x00e8 000000e1: CALLDATASIZE 000000e2: PUSH1 0x04 000000e4: PUSH2 0x034c 000000e7: JUMP 000000e8: JUMPDEST 000000e9: PUSH2 0x017a 000000ec: JUMP 000000ed: JUMPDEST 000000ee: PUSH1 0x00 000000f0: SLOAD 000000f1: PUSH1 0x01 000000f3: PUSH1 0x01 000000f5: PUSH1 0xa0 000000f7: SHL 000000f8: SUB 000000f9: AND 000000fa: CALLER 000000fb: EQ 000000fc: PUSH2 0x0120 000000ff: JUMPI 00000100: PUSH1 0x40 00000102: MLOAD 00000103: PUSH3 0x461bcd 00000107: PUSH1 0xe5 00000109: SHL 0000010a: DUP2 0000010b: MSTORE 0000010c: PUSH1 0x04 0000010e: ADD 0000010f: PUSH2 0x0117 00000112: SWAP1 00000113: PUSH2 0x0370 00000116: JUMP 00000117: JUMPDEST 00000118: PUSH1 0x40 0000011a: MLOAD 0000011b: DUP1 0000011c: SWAP2 0000011d: SUB 0000011e: SWAP1 0000011f: REVERT 00000120: JUMPDEST 00000121: PUSH2 0x0133 00000124: PUSH1 0x01 00000126: PUSH1 0x01 00000128: PUSH1 0xa0 0000012a: SHL 0000012b: SUB 0000012c: DUP4 0000012d: AND 0000012e: DUP3 0000012f: PUSH2 0x01ef 00000132: JUMP 00000133: JUMPDEST 00000134: POP 00000135: POP 00000136: JUMP 00000137: JUMPDEST 00000138: PUSH1 0x00 0000013a: SLOAD 0000013b: PUSH1 0x01 0000013d: PUSH1 0x01 0000013f: PUSH1 0xa0 00000141: SHL 00000142: SUB 00000143: AND 00000144: CALLER 00000145: EQ 00000146: PUSH2 0x0161 00000149: JUMPI 0000014a: PUSH1 0x40 0000014c: MLOAD 0000014d: PUSH3 0x461bcd 00000151: PUSH1 0xe5 00000153: SHL 00000154: DUP2 00000155: MSTORE 00000156: PUSH1 0x04 00000158: ADD 00000159: PUSH2 0x0117 0000015c: SWAP1 0000015d: PUSH2 0x0370 00000160: JUMP 00000161: JUMPDEST 00000162: PUSH2 0x0175 00000165: PUSH1 0x01 00000167: PUSH1 0x01 00000169: PUSH1 0xa0 0000016b: SHL 0000016c: SUB 0000016d: DUP4 0000016e: AND 0000016f: DUP5 00000170: DUP4 00000171: PUSH2 0x0240 00000174: JUMP 00000175: JUMPDEST 00000176: POP 00000177: POP 00000178: POP 00000179: JUMP 0000017a: JUMPDEST 0000017b: PUSH1 0x00 0000017d: SLOAD 0000017e: PUSH1 0x01 00000180: PUSH1 0x01 00000182: PUSH1 0xa0 00000184: SHL 00000185: SUB 00000186: AND 00000187: CALLER 00000188: EQ 00000189: PUSH2 0x01a4 0000018c: JUMPI 0000018d: PUSH1 0x40 0000018f: MLOAD 00000190: PUSH3 0x461bcd 00000194: PUSH1 0xe5 00000196: SHL 00000197: DUP2 00000198: MSTORE 00000199: PUSH1 0x04 0000019b: ADD 0000019c: PUSH2 0x0117 0000019f: SWAP1 000001a0: PUSH2 0x0370 000001a3: JUMP 000001a4: JUMPDEST 000001a5: PUSH1 0x00 000001a7: DUP1 000001a8: SLOAD 000001a9: PUSH1 0x01 000001ab: PUSH1 0x01 000001ad: PUSH1 0xa0 000001af: SHL 000001b0: SUB 000001b1: NOT 000001b2: AND 000001b3: PUSH1 0x01 000001b5: PUSH1 0x01 000001b7: PUSH1 0xa0 000001b9: SHL 000001ba: SUB 000001bb: DUP4 000001bc: AND 000001bd: SWAP1 000001be: DUP2 000001bf: OR 000001c0: DUP3 000001c1: SSTORE 000001c2: PUSH1 0x40 000001c4: MLOAD 000001c5: SWAP1 000001c6: SWAP2 000001c7: CALLER 000001c8: SWAP2 000001c9: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0 000001ea: SWAP2 000001eb: SWAP1 000001ec: LOG3 000001ed: POP 000001ee: JUMP 000001ef: JUMPDEST 000001f0: PUSH1 0x00 000001f2: DUP1 000001f3: PUSH1 0x00 000001f5: DUP1 000001f6: PUSH1 0x00 000001f8: DUP6 000001f9: DUP8 000001fa: GAS 000001fb: CALL 000001fc: SWAP1 000001fd: POP 000001fe: DUP1 000001ff: PUSH2 0x0175 00000202: JUMPI 00000203: PUSH1 0x40 00000205: MLOAD 00000206: PUSH3 0x461bcd 0000020a: PUSH1 0xe5 0000020c: SHL 0000020d: DUP2 0000020e: MSTORE 0000020f: PUSH1 0x20 00000211: PUSH1 0x04 00000213: DUP3 00000214: ADD 00000215: MSTORE 00000216: PUSH1 0x13 00000218: PUSH1 0x24 0000021a: DUP3 0000021b: ADD 0000021c: MSTORE 0000021d: PUSH19 0x11551217d514905394d1915497d19052531151 00000231: PUSH1 0x6a 00000233: SHL 00000234: PUSH1 0x44 00000236: DUP3 00000237: ADD 00000238: MSTORE 00000239: PUSH1 0x64 0000023b: ADD 0000023c: PUSH2 0x0117 0000023f: JUMP 00000240: JUMPDEST 00000241: PUSH1 0x00 00000243: PUSH1 0x40 00000245: MLOAD 00000246: PUSH4 0xa9059cbb 0000024b: PUSH1 0xe0 0000024d: SHL 0000024e: DUP2 0000024f: MSTORE 00000250: PUSH1 0x01 00000252: PUSH1 0x01 00000254: PUSH1 0xa0 00000256: SHL 00000257: SUB 00000258: DUP5 00000259: AND 0000025a: PUSH1 0x04 0000025c: DUP3 0000025d: ADD 0000025e: MSTORE 0000025f: DUP3 00000260: PUSH1 0x24 00000262: DUP3 00000263: ADD 00000264: MSTORE 00000265: PUSH1 0x20 00000267: PUSH1 0x00 00000269: PUSH1 0x44 0000026b: DUP4 0000026c: PUSH1 0x00 0000026e: DUP10 0000026f: GAS 00000270: CALL 00000271: RETURNDATASIZE 00000272: ISZERO 00000273: PUSH1 0x1f 00000275: RETURNDATASIZE 00000276: GT 00000277: PUSH1 0x01 00000279: PUSH1 0x00 0000027b: MLOAD 0000027c: EQ 0000027d: AND 0000027e: OR 0000027f: AND 00000280: SWAP2 00000281: POP 00000282: POP 00000283: DUP1 00000284: PUSH2 0x02c1 00000287: JUMPI 00000288: PUSH1 0x40 0000028a: MLOAD 0000028b: PUSH3 0x461bcd 0000028f: PUSH1 0xe5 00000291: SHL 00000292: DUP2 00000293: MSTORE 00000294: PUSH1 0x20 00000296: PUSH1 0x04 00000298: DUP3 00000299: ADD 0000029a: MSTORE 0000029b: PUSH1 0x0f 0000029d: PUSH1 0x24 0000029f: DUP3 000002a0: ADD 000002a1: MSTORE 000002a2: PUSH15 0x1514905394d1915497d19052531151 000002b2: PUSH1 0x8a 000002b4: SHL 000002b5: PUSH1 0x44 000002b7: DUP3 000002b8: ADD 000002b9: MSTORE 000002ba: PUSH1 0x64 000002bc: ADD 000002bd: PUSH2 0x0117 000002c0: JUMP 000002c1: JUMPDEST 000002c2: POP 000002c3: POP 000002c4: POP 000002c5: POP 000002c6: JUMP 000002c7: JUMPDEST 000002c8: PUSH1 0x01 000002ca: PUSH1 0x01 000002cc: PUSH1 0xa0 000002ce: SHL 000002cf: SUB 000002d0: DUP2 000002d1: AND 000002d2: DUP2 000002d3: EQ 000002d4: PUSH2 0x02dc 000002d7: JUMPI 000002d8: PUSH1 0x00 000002da: DUP1 000002db: REVERT 000002dc: JUMPDEST 000002dd: POP 000002de: JUMP 000002df: JUMPDEST 000002e0: PUSH1 0x00 000002e2: DUP1 000002e3: PUSH1 0x40 000002e5: DUP4 000002e6: DUP6 000002e7: SUB 000002e8: SLT 000002e9: ISZERO 000002ea: PUSH2 0x02f2 000002ed: JUMPI 000002ee: PUSH1 0x00 000002f0: DUP1 000002f1: REVERT 000002f2: JUMPDEST 000002f3: DUP3 000002f4: CALLDATALOAD 000002f5: PUSH2 0x02fd 000002f8: DUP2 000002f9: PUSH2 0x02c7 000002fc: JUMP 000002fd: JUMPDEST 000002fe: SWAP5 000002ff: PUSH1 0x20 00000301: SWAP4 00000302: SWAP1 00000303: SWAP4 00000304: ADD 00000305: CALLDATALOAD 00000306: SWAP4 00000307: POP 00000308: POP 00000309: POP 0000030a: JUMP 0000030b: JUMPDEST 0000030c: PUSH1 0x00 0000030e: DUP1 0000030f: PUSH1 0x00 00000311: PUSH1 0x60 00000313: DUP5 00000314: DUP7 00000315: SUB 00000316: SLT 00000317: ISZERO 00000318: PUSH2 0x0320 0000031b: JUMPI 0000031c: PUSH1 0x00 0000031e: DUP1 0000031f: REVERT 00000320: JUMPDEST 00000321: DUP4 00000322: CALLDATALOAD 00000323: PUSH2 0x032b 00000326: DUP2 00000327: PUSH2 0x02c7 0000032a: JUMP 0000032b: JUMPDEST 0000032c: SWAP3 0000032d: POP 0000032e: PUSH1 0x20 00000330: DUP5 00000331: ADD 00000332: CALLDATALOAD 00000333: PUSH2 0x033b 00000336: DUP2 00000337: PUSH2 0x02c7 0000033a: JUMP 0000033b: JUMPDEST 0000033c: SWAP3 0000033d: SWAP6 0000033e: SWAP3 0000033f: SWAP5 00000340: POP 00000341: POP 00000342: POP 00000343: PUSH1 0x40 00000345: SWAP2 00000346: SWAP1 00000347: SWAP2 00000348: ADD 00000349: CALLDATALOAD 0000034a: SWAP1 0000034b: JUMP 0000034c: JUMPDEST 0000034d: PUSH1 0x00 0000034f: PUSH1 0x20 00000351: DUP3 00000352: DUP5 00000353: SUB 00000354: SLT 00000355: ISZERO 00000356: PUSH2 0x035e 00000359: JUMPI 0000035a: PUSH1 0x00 0000035c: DUP1 0000035d: REVERT 0000035e: JUMPDEST 0000035f: DUP2 00000360: CALLDATALOAD 00000361: PUSH2 0x0369 00000364: DUP2 00000365: PUSH2 0x02c7 00000368: JUMP 00000369: JUMPDEST 0000036a: SWAP4 0000036b: SWAP3 0000036c: POP 0000036d: POP 0000036e: POP 0000036f: JUMP 00000370: JUMPDEST 00000371: PUSH1 0x20 00000373: DUP1 00000374: DUP3 00000375: MSTORE 00000376: PUSH1 0x0c 00000378: SWAP1 00000379: DUP3 0000037a: ADD 0000037b: MSTORE 0000037c: PUSH12 0x15539055551213d492569151 00000389: PUSH1 0xa2 0000038b: SHL 0000038c: PUSH1 0x40 0000038e: DUP3 0000038f: ADD 00000390: MSTORE 00000391: PUSH1 0x60 00000393: ADD 00000394: SWAP1 00000395: JUMP 00000396: INVALID 00000397: LOG2 00000398: PUSH5 0x6970667358 0000039e: UNKNOWN(0x22) 0000039f: SLT 000003a0: KECCAK256 000003a1: UNKNOWN(0xF6) 000003a2: SWAP11 000003a3: UNKNOWN(0x0C) 000003a4: PUSH29 0x1200f108e1172c5c9c1b986a21d96b2fd0ae3aeeb690bf3227d0fd0564 000003c2: PUSH20
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x28568a0f29da227d19650c43ba1b92a72cd9dc6bf3cfb52d5b3b0a62f9fe52f3
call_targets:
0xfd74138815ced52e05b0988d3aba3235545c2ff9
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x28568a0f29da227d19650c43ba1b92a72cd9dc6bf3cfb52d5b3b0a62f9fe52f3",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xfd74138815ced52e05b0988d3aba3235545c2ff9"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x64a197f3",
"selector": "0x64a197f3",
"calldata_variants": [
"0x64a197f3",
"0x64a197f30000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8f975a64",
"selector": "0x8f975a64",
"calldata_variants": [
"0x8f975a64",
"0x8f975a640000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf2fde38b",
"selector": "0xf2fde38b",
"calldata_variants": [
"0xf2fde38b",
"0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 507,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 624,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 2,
"guards_detected": [],
"untrusted_call_count": 2
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x28568a0f29da227d19650c43ba1b92a72cd9dc6bf3cfb52d5b3b0a62f9fe52f3
call_targets:
0xfd74138815ced52e05b0988d3aba3235545c2ff9
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x28568a0f29da227d19650c43ba1b92a72cd9dc6bf3cfb52d5b3b0a62f9fe52f3",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xfd74138815ced52e05b0988d3aba3235545c2ff9"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x64a197f3",
"selector": "0x64a197f3",
"calldata_variants": [
"0x64a197f3",
"0x64a197f30000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8f975a64",
"selector": "0x8f975a64",
"calldata_variants": [
"0x8f975a64",
"0x8f975a640000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf2fde38b",
"selector": "0xf2fde38b",
"calldata_variants": [
"0xf2fde38b",
"0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 507,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
},
{
"pc": 624,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 2,
"guards_detected": []
}
|