TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-d3a1-7262-970d-809ee6ca3ea3

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
28185 artifact.fetch complete 1 / 3 3 months ago
28186 tool.cast_disasm complete 1 / 3 3 months ago
71071 analysis.bundle complete 1 / 3 1 week ago
71072 capability.graph complete 1 / 3 1 week ago
71073 detector.run complete 1 / 3 1 week ago
71074 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
0
Total opcodes
1004
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0069
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x6fc49140
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x6fc49140
00000024: EQ
00000025: PUSH2 0x0106
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0xc3f59687
0000002f: EQ
00000030: PUSH2 0x0126
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf00e6a2a
0000003a: EQ
0000003b: PUSH2 0x0146
0000003e: JUMPI
0000003f: PUSH2 0x0078
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x25394645
0000004a: EQ
0000004b: PUSH2 0x0080
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x439fab91
00000055: EQ
00000056: PUSH2 0x00a0
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0x5a99719e
00000060: EQ
00000061: PUSH2 0x00c0
00000064: JUMPI
00000065: PUSH2 0x0078
00000068: JUMP
00000069: JUMPDEST
0000006a: CALLDATASIZE
0000006b: PUSH2 0x0078
0000006e: JUMPI
0000006f: PUSH2 0x0076
00000072: PUSH2 0x017a
00000075: JUMP
00000076: JUMPDEST
00000077: STOP
00000078: JUMPDEST
00000079: PUSH2 0x0076
0000007c: PUSH2 0x017a
0000007f: JUMP
00000080: JUMPDEST
00000081: CALLVALUE
00000082: DUP1
00000083: ISZERO
00000084: PUSH2 0x008c
00000087: JUMPI
00000088: PUSH1 0x00
0000008a: DUP1
0000008b: REVERT
0000008c: JUMPDEST
0000008d: POP
0000008e: PUSH2 0x0076
00000091: PUSH2 0x009b
00000094: CALLDATASIZE
00000095: PUSH1 0x04
00000097: PUSH2 0x042a
0000009a: JUMP
0000009b: JUMPDEST
0000009c: PUSH2 0x01cb
0000009f: JUMP
000000a0: JUMPDEST
000000a1: CALLVALUE
000000a2: DUP1
000000a3: ISZERO
000000a4: PUSH2 0x00ac
000000a7: JUMPI
000000a8: PUSH1 0x00
000000aa: DUP1
000000ab: REVERT
000000ac: JUMPDEST
000000ad: POP
000000ae: PUSH2 0x0076
000000b1: PUSH2 0x00bb
000000b4: CALLDATASIZE
000000b5: PUSH1 0x04
000000b7: PUSH2 0x042a
000000ba: JUMP
000000bb: JUMPDEST
000000bc: PUSH2 0x01ec
000000bf: JUMP
000000c0: JUMPDEST
000000c1: CALLVALUE
000000c2: DUP1
000000c3: ISZERO
000000c4: PUSH2 0x00cc
000000c7: JUMPI
000000c8: PUSH1 0x00
000000ca: DUP1
000000cb: REVERT
000000cc: JUMPDEST
000000cd: POP
000000ce: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000000ef: SLOAD
000000f0: JUMPDEST
000000f1: PUSH1 0x40
000000f3: MLOAD
000000f4: PUSH2 0x00fd
000000f7: SWAP2
000000f8: SWAP1
000000f9: PUSH2 0x0494
000000fc: JUMP
000000fd: JUMPDEST
000000fe: PUSH1 0x40
00000100: MLOAD
00000101: DUP1
00000102: SWAP2
00000103: SUB
00000104: SWAP1
00000105: RETURN
00000106: JUMPDEST
00000107: CALLVALUE
00000108: DUP1
00000109: ISZERO
0000010a: PUSH2 0x0112
0000010d: JUMPI
0000010e: PUSH1 0x00
00000110: DUP1
00000111: REVERT
00000112: JUMPDEST
00000113: POP
00000114: PUSH2 0x0076
00000117: PUSH2 0x0121
0000011a: CALLDATASIZE
0000011b: PUSH1 0x04
0000011d: PUSH2 0x04c1
00000120: JUMP
00000121: JUMPDEST
00000122: PUSH2 0x0204
00000125: JUMP
00000126: JUMPDEST
00000127: CALLVALUE
00000128: DUP1
00000129: ISZERO
0000012a: PUSH2 0x0132
0000012d: JUMPI
0000012e: PUSH1 0x00
00000130: DUP1
00000131: REVERT
00000132: JUMPDEST
00000133: POP
00000134: PUSH2 0x0076
00000137: PUSH2 0x0141
0000013a: CALLDATASIZE
0000013b: PUSH1 0x04
0000013d: PUSH2 0x051d
00000140: JUMP
00000141: JUMPDEST
00000142: PUSH2 0x032c
00000145: JUMP
00000146: JUMPDEST
00000147: CALLVALUE
00000148: DUP1
00000149: ISZERO
0000014a: PUSH2 0x0152
0000014d: JUMPI
0000014e: PUSH1 0x00
00000150: DUP1
00000151: REVERT
00000152: JUMPDEST
00000153: POP
00000154: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000175: SLOAD
00000176: PUSH2 0x00f0
00000179: JUMP
0000017a: JUMPDEST
0000017b: PUSH1 0x00
0000017d: PUSH2 0x01a4
00000180: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000001a1: SLOAD
000001a2: SWAP1
000001a3: JUMP
000001a4: JUMPDEST
000001a5: SWAP1
000001a6: POP
000001a7: PUSH1 0x40
000001a9: MLOAD
000001aa: CALLDATASIZE
000001ab: PUSH1 0x00
000001ad: DUP3
000001ae: CALLDATACOPY
000001af: PUSH1 0x00
000001b1: DUP1
000001b2: CALLDATASIZE
000001b3: DUP4
000001b4: DUP6
000001b5: GAS
000001b6: DELEGATECALL
000001b7: RETURNDATASIZE
000001b8: DUP1
000001b9: PUSH1 0x00
000001bb: DUP5
000001bc: RETURNDATACOPY
000001bd: DUP2
000001be: DUP1
000001bf: ISZERO
000001c0: PUSH2 0x01c7
000001c3: JUMPI
000001c4: DUP2
000001c5: DUP5
000001c6: RETURN
000001c7: JUMPDEST
000001c8: DUP2
000001c9: DUP5
000001ca: REVERT
000001cb: JUMPDEST
000001cc: PUSH1 0x40
000001ce: MLOAD
000001cf: PUSH3 0x461bcd
000001d3: PUSH1 0xe5
000001d5: SHL
000001d6: DUP2
000001d7: MSTORE
000001d8: PUSH1 0x04
000001da: ADD
000001db: PUSH2 0x01e3
000001de: SWAP1
000001df: PUSH2 0x0562
000001e2: JUMP
000001e3: JUMPDEST
000001e4: PUSH1 0x40
000001e6: MLOAD
000001e7: DUP1
000001e8: SWAP2
000001e9: SUB
000001ea: SWAP1
000001eb: REVERT
000001ec: JUMPDEST
000001ed: PUSH1 0x40
000001ef: MLOAD
000001f0: PUSH3 0x461bcd
000001f4: PUSH1 0xe5
000001f6: SHL
000001f7: DUP2
000001f8: MSTORE
000001f9: PUSH1 0x04
000001fb: ADD
000001fc: PUSH2 0x01e3
000001ff: SWAP1
00000200: PUSH2 0x058c
00000203: JUMP
00000204: JUMPDEST
00000205: PUSH2 0x020d
00000208: CALLER
00000209: PUSH2 0x0386
0000020c: JUMP
0000020d: JUMPDEST
0000020e: PUSH2 0x0235
00000211: DUP4
00000212: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000233: SSTORE
00000234: JUMP
00000235: JUMPDEST
00000236: PUSH1 0x00
00000238: PUSH2 0x025f
0000023b: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000025c: SLOAD
0000025d: SWAP1
0000025e: JUMP
0000025f: JUMPDEST
00000260: PUSH1 0x01
00000262: PUSH1 0x01
00000264: PUSH1 0xa0
00000266: SHL
00000267: SUB
00000268: AND
00000269: DUP4
0000026a: DUP4
0000026b: PUSH1 0x40
0000026d: MLOAD
0000026e: PUSH1 0x24
00000270: ADD
00000271: PUSH2 0x027b
00000274: SWAP3
00000275: SWAP2
00000276: SWAP1
00000277: PUSH2 0x05c8
0000027a: JUMP
0000027b: JUMPDEST
0000027c: PUSH1 0x40
0000027e: DUP1
0000027f: MLOAD
00000280: PUSH1 0x1f
00000282: NOT
00000283: DUP2
00000284: DUP5
00000285: SUB
00000286: ADD
00000287: DUP2
00000288: MSTORE
00000289: SWAP2
0000028a: DUP2
0000028b: MSTORE
0000028c: PUSH1 0x20
0000028e: DUP3
0000028f: ADD
00000290: DUP1
00000291: MLOAD
00000292: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
000002af: AND
000002b0: PUSH4 0x25394645
000002b5: PUSH1 0xe0
000002b7: SHL
000002b8: OR
000002b9: SWAP1
000002ba: MSTORE
000002bb: MLOAD
000002bc: PUSH2 0x02c5
000002bf: SWAP2
000002c0: SWAP1
000002c1: PUSH2 0x0620
000002c4: JUMP
000002c5: JUMPDEST
000002c6: PUSH1 0x00
000002c8: PUSH1 0x40
000002ca: MLOAD
000002cb: DUP1
000002cc: DUP4
000002cd: SUB
000002ce: DUP2
000002cf: DUP6
000002d0: GAS
000002d1: DELEGATECALL
000002d2: SWAP2
000002d3: POP
000002d4: POP
000002d5: RETURNDATASIZE
000002d6: DUP1
000002d7: PUSH1 0x00
000002d9: DUP2
000002da: EQ
000002db: PUSH2 0x0300
000002de: JUMPI
000002df: PUSH1 0x40
000002e1: MLOAD
000002e2: SWAP2
000002e3: POP
000002e4: PUSH1 0x1f
000002e6: NOT
000002e7: PUSH1 0x3f
000002e9: RETURNDATASIZE
000002ea: ADD
000002eb: AND
000002ec: DUP3
000002ed: ADD
000002ee: PUSH1 0x40
000002f0: MSTORE
000002f1: RETURNDATASIZE
000002f2: DUP3
000002f3: MSTORE
000002f4: RETURNDATASIZE
000002f5: PUSH1 0x00
000002f7: PUSH1 0x20
000002f9: DUP5
000002fa: ADD
000002fb: RETURNDATACOPY
000002fc: PUSH2 0x0305
000002ff: JUMP
00000300: JUMPDEST
00000301: PUSH1 0x60
00000303: SWAP2
00000304: POP
00000305: JUMPDEST
00000306: POP
00000307: POP
00000308: SWAP1
00000309: POP
0000030a: DUP1
0000030b: PUSH2 0x0326
0000030e: JUMPI
0000030f: PUSH1 0x40
00000311: MLOAD
00000312: PUSH3 0x461bcd
00000316: PUSH1 0xe5
00000318: SHL
00000319: DUP2
0000031a: MSTORE
0000031b: PUSH1 0x04
0000031d: ADD
0000031e: PUSH2 0x01e3
00000321: SWAP1
00000322: PUSH2 0x0644
00000325: JUMP
00000326: JUMPDEST
00000327: POP
00000328: POP
00000329: POP
0000032a: POP
0000032b: JUMP
0000032c: JUMPDEST
0000032d: PUSH2 0x0335
00000330: CALLER
00000331: PUSH2 0x0386
00000334: JUMP
00000335: JUMPDEST
00000336: PUSH1 0x01
00000338: PUSH1 0x01
0000033a: PUSH1 0xa0
0000033c: SHL
0000033d: SUB
0000033e: DUP2
0000033f: AND
00000340: PUSH2 0x035b
00000343: JUMPI
00000344: PUSH1 0x40
00000346: MLOAD
00000347: PUSH3 0x461bcd
0000034b: PUSH1 0xe5
0000034d: SHL
0000034e: DUP2
0000034f: MSTORE
00000350: PUSH1 0x04
00000352: ADD
00000353: PUSH2 0x01e3
00000356: SWAP1
00000357: PUSH2 0x066b
0000035a: JUMP
0000035b: JUMPDEST
0000035c: PUSH2 0x0383
0000035f: DUP2
00000360: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000381: SSTORE
00000382: JUMP
00000383: JUMPDEST
00000384: POP
00000385: JUMP
00000386: JUMPDEST
00000387: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000003a8: SLOAD
000003a9: PUSH1 0x01
000003ab: PUSH1 0x01
000003ad: PUSH1 0xa0
000003af: SHL
000003b0: SUB
000003b1: AND
000003b2: DUP2
000003b3: PUSH1 0x01
000003b5: PUSH1 0x01
000003b7: PUSH1 0xa0
000003b9: SHL
000003ba: SUB
000003bb: AND
000003bc: EQ
000003bd: PUSH2 0x0383
000003c0: JUMPI
000003c1: PUSH1 0x40
000003c3: MLOAD
000003c4: PUSH3 0x461bcd
000003c8: PUSH1 0xe5
000003ca: SHL
000003cb: DUP2
000003cc: MSTORE
000003cd: PUSH1 0x04
000003cf: ADD
000003d0: PUSH2 0x01e3
000003d3: SWAP1
000003d4: PUSH2 0x0692
000003d7: JUMP
000003d8: JUMPDEST
000003d9: PUSH1 0x00
000003db: DUP1
000003dc: DUP4
000003dd: PUSH1 0x1f
000003df: DUP5
000003e0: ADD
000003e1: SLT
000003e2: PUSH2 0x03ed
000003e5: JUMPI
000003e6: PUSH2 0x03ed
000003e9: PUSH1 0x00
000003eb: DUP1
000003ec: REVERT
000003ed: JUMPDEST
000003ee: POP
000003ef: DUP2
000003f0: CALLDATALOAD
000003f1: PUSH8 0xffffffffffffffff
000003fa: DUP2
000003fb: GT
000003fc: ISZERO
000003fd: PUSH2 0x0408
00000400: JUMPI
00000401: PUSH2 0x0408
00000404: PUSH1 0x00
00000406: DUP1
00000407: REVERT
00000408: JUMPDEST
00000409: PUSH1 0x20
0000040b: DUP4
0000040c: ADD
0000040d: SWAP2
0000040e: POP
0000040f: DUP4
00000410: PUSH1 0x01
00000412: DUP3
00000413: MUL
00000414: DUP4
00000415: ADD
00000416: GT
00000417: ISZERO
00000418: PUSH2 0x0423
0000041b: JUMPI
0000041c: PUSH2 0x0423
0000041f: PUSH1 0x00
00000421: DUP1
00000422: REVERT
00000423: JUMPDEST
00000424: SWAP3
00000425: POP
00000426: SWAP3
00000427: SWAP1
00000428: POP
00000429: JUMP
0000042a: JUMPDEST
0000042b: PUSH1 0x00
0000042d: DUP1
0000042e: PUSH1 0x20
00000430: DUP4
00000431: DUP6
00000432: SUB
00000433: SLT
00000434: ISZERO
00000435: PUSH2 0x0440
00000438: JUMPI
00000439: PUSH2 0x0440
0000043c: PUSH1 0x00
0000043e: DUP1
0000043f: REVERT
00000440: JUMPDEST
00000441: DUP3
00000442: CALLDATALOAD
00000443: PUSH8 0xffffffffffffffff
0000044c: DUP2
0000044d: GT
0000044e: ISZERO
0000044f: PUSH2 0x045a
00000452: JUMPI
00000453: PUSH2 0x045a
00000456: PUSH1 0x00
00000458: DUP1
00000459: REVERT
0000045a: JUMPDEST
0000045b: PUSH2 0x0466
0000045e: DUP6
0000045f: DUP3
00000460: DUP7
00000461: ADD
00000462: PUSH2 0x03d8
00000465: JUMP
00000466: JUMPDEST
00000467: SWAP3
00000468: POP
00000469: SWAP3
0000046a: POP
0000046b: POP
0000046c: SWAP3
0000046d: POP
0000046e: SWAP3
0000046f: SWAP1
00000470: POP
00000471: JUMP
00000472: JUMPDEST
00000473: PUSH1 0x00
00000475: PUSH1 0x01
00000477: PUSH1 0x01
00000479: PUSH1 0xa0
0000047b: SHL
0000047c: SUB
0000047d: DUP3
0000047e: AND
0000047f: JUMPDEST
00000480: SWAP3
00000481: SWAP2
00000482: POP
00000483: POP
00000484: JUMP
00000485: JUMPDEST
00000486: PUSH2 0x048e
00000489: DUP2
0000048a: PUSH2 0x0472
0000048d: JUMP
0000048e: JUMPDEST
0000048f: DUP3
00000490: MSTORE
00000491: POP
00000492: POP
00000493: JUMP
00000494: JUMPDEST
00000495: PUSH1 0x20
00000497: DUP2
00000498: ADD
00000499: PUSH2 0x047f
0000049c: DUP3
0000049d: DUP5
0000049e: PUSH2 0x0485
000004a1: JUMP
000004a2: JUMPDEST
000004a3: PUSH2 0x04ab
000004a6: DUP2
000004a7: PUSH2 0x0472
000004aa: JUMP
000004ab: JUMPDEST
000004ac: DUP2
000004ad: EQ
000004ae: PUSH2 0x0383
000004b1: JUMPI
000004b2: PUSH1 0x00
000004b4: DUP1
000004b5: REVERT
000004b6: JUMPDEST
000004b7: DUP1
000004b8: CALLDATALOAD
000004b9: PUSH2 0x047f
000004bc: DUP2
000004bd: PUSH2 0x04a2
000004c0: JUMP
000004c1: JUMPDEST
000004c2: PUSH1 0x00
000004c4: DUP1
000004c5: PUSH1 0x00
000004c7: PUSH1 0x40
000004c9: DUP5
000004ca: DUP7
000004cb: SUB
000004cc: SLT
000004cd: ISZERO
000004ce: PUSH2 0x04d9
000004d1: JUMPI
000004d2: PUSH2 0x04d9
000004d5: PUSH1 0x00
000004d7: DUP1
000004d8: REVERT
000004d9: JUMPDEST
000004da: PUSH1 0x00
000004dc: PUSH2 0x04e5
000004df: DUP7
000004e0: DUP7
000004e1: PUSH2 0x04b6
000004e4: JUMP
000004e5: JUMPDEST
000004e6: SWAP4
000004e7: POP
000004e8: POP
000004e9: PUSH1 0x20
000004eb: DUP5
000004ec: ADD
000004ed: CALLDATALOAD
000004ee: PUSH8 0xffffffffffffffff
000004f7: DUP2
000004f8: GT
000004f9: ISZERO
000004fa: PUSH2 0x0505
000004fd: JUMPI
000004fe: PUSH2 0x0505
00000501: PUSH1 0x00
00000503: DUP1
00000504: REVERT
00000505: JUMPDEST
00000506: PUSH2 0x0511
00000509: DUP7
0000050a: DUP3
0000050b: DUP8
0000050c: ADD
0000050d: PUSH2 0x03d8
00000510: JUMP
00000511: JUMPDEST
00000512: SWAP3
00000513: POP
00000514: SWAP3
00000515: POP
00000516: POP
00000517: SWAP3
00000518: POP
00000519: SWAP3
0000051a: POP
0000051b: SWAP3
0000051c: JUMP
0000051d: JUMPDEST
0000051e: PUSH1 0x00
00000520: PUSH1 0x20
00000522: DUP3
00000523: DUP5
00000524: SUB
00000525: SLT
00000526: ISZERO
00000527: PUSH2 0x0532
0000052a: JUMPI
0000052b: PUSH2 0x0532
0000052e: PUSH1 0x00
00000530: DUP1
00000531: REVERT
00000532: JUMPDEST
00000533: PUSH1 0x00
00000535: PUSH2 0x053e
00000538: DUP5
00000539: DUP5
0000053a: PUSH2 0x04b6
0000053d: JUMP
0000053e: JUMPDEST
0000053f: SWAP5
00000540: SWAP4
00000541: POP
00000542: POP
00000543: POP
00000544: POP
00000545: JUMP
00000546: JUMPDEST
00000547: PUSH1 0x05
00000549: DUP2
0000054a: MSTORE
0000054b: PUSH1 0x20
0000054d: DUP2
0000054e: ADD
0000054f: PUSH5 0x7570673131
00000555: PUSH1 0xd8
00000557: SHL
00000558: DUP2
00000559: MSTORE
0000055a: SWAP1
0000055b: POP
0000055c: JUMPDEST
0000055d: PUSH1 0x20
0000055f: ADD
00000560: SWAP1
00000561: JUMP
00000562: JUMPDEST
00000563: PUSH1 0x20
00000565: DUP1
00000566: DUP3
00000567: MSTORE
00000568: DUP2
00000569: ADD
0000056a: PUSH2 0x047f
0000056d: DUP2
0000056e: PUSH2 0x0546
00000571: JUMP
00000572: JUMPDEST
00000573: PUSH1 0x05
00000575: DUP2
00000576: MSTORE
00000577: PUSH1 0x20
00000579: DUP2
0000057a: ADD
0000057b: PUSH5 0x7569693131
00000581: PUSH1 0xd8
00000583: SHL
00000584: DUP2
00000585: MSTORE
00000586: SWAP1
00000587: POP
00000588: PUSH2 0x055c
0000058b: JUMP
0000058c: JUMPDEST
0000058d: PUSH1 0x20
0000058f: DUP1
00000590: DUP3
00000591: MSTORE
00000592: DUP2
00000593: ADD
00000594: PUSH2 0x047f
00000597: DUP2
00000598: PUSH2 0x0572
0000059b: JUMP
0000059c: JUMPDEST
0000059d: DUP3
0000059e: DUP2
0000059f: DUP4
000005a0: CALLDATACOPY
000005a1: POP
000005a2: PUSH1 0x00
000005a4: SWAP2
000005a5: ADD
000005a6: MSTORE
000005a7: JUMP
000005a8: JUMPDEST
000005a9: DUP2
000005aa: DUP4
000005ab: MSTORE
000005ac: PUSH1 0x20
000005ae: DUP4
000005af: ADD
000005b0: SWAP3
000005b1: POP
000005b2: PUSH2 0x05bc
000005b5: DUP3
000005b6: DUP5
000005b7: DUP4
000005b8: PUSH2 0x059c
000005bb: JUMP
000005bc: JUMPDEST
000005bd: POP
000005be: PUSH1 0x1f
000005c0: ADD
000005c1: PUSH1 0x1f
000005c3: NOT
000005c4: AND
000005c5: ADD
000005c6: SWAP1
000005c7: JUMP
000005c8: JUMPDEST
000005c9: PUSH1 0x20
000005cb: DUP1
000005cc: DUP3
000005cd: MSTORE
000005ce: DUP2
000005cf: ADD
000005d0: PUSH2 0x053e
000005d3: DUP2
000005d4: DUP5
000005d5: DUP7
000005d6: PUSH2 0x05a8
000005d9: JUMP
000005da: JUMPDEST
000005db: PUSH1 0x00
000005dd: JUMPDEST
000005de: DUP4
000005df: DUP2
000005e0: LT
000005e1: ISZERO
000005e2: PUSH2 0x05f5
000005e5: JUMPI
000005e6: DUP2
000005e7: DUP2
000005e8: ADD
000005e9: MLOAD
000005ea: DUP4
000005eb: DUP3
000005ec: ADD
000005ed: MSTORE
000005ee: PUSH1 0x20
000005f0: ADD
000005f1: PUSH2 0x05dd
000005f4: JUMP
000005f5: JUMPDEST
000005f6: POP
000005f7: POP
000005f8: PUSH1 0x00
000005fa: SWAP2
000005fb: ADD
000005fc: MSTORE
000005fd: JUMP
000005fe: JUMPDEST
000005ff: PUSH1 0x00
00000601: PUSH2 0x0608
00000604: DUP3
00000605: MLOAD
00000606: SWAP1
00000607: JUMP
00000608: JUMPDEST
00000609: PUSH2 0x0616
0000060c: DUP2
0000060d: DUP6
0000060e: PUSH1 0x20
00000610: DUP7
00000611: ADD
00000612: PUSH2 0x05da
00000615: JUMP
00000616: JUMPDEST
00000617: SWAP3
00000618: SWAP1
00000619: SWAP3
0000061a: ADD
0000061b: SWAP3
0000061c: SWAP2
0000061d: POP
0000061e: POP
0000061f: JUMP
00000620: JUMPDEST
00000621: PUSH2 0x047f
00000624: DUP2
00000625: DUP4
00000626: PUSH2 0x05fe
00000629: JUMP
0000062a: JUMPDEST
0000062b: PUSH1 0x05
0000062d: DUP2
0000062e: MSTORE
0000062f: PUSH1 0x20
00000631: DUP2
00000632: ADD
00000633: PUSH5 0x7566753131
00000639: PUSH1 0xd8
0000063b: SHL
0000063c: DUP2
0000063d: MSTORE
0000063e: SWAP1
0000063f: POP
00000640: PUSH2 0x055c
00000643: JUMP
00000644: JUMPDEST
00000645: PUSH1 0x20
00000647: DUP1
00000648: DUP3
00000649: MSTORE
0000064a: DUP2
0000064b: ADD
0000064c: PUSH2 0x047f
0000064f: DUP2
00000650: PUSH2 0x062a
00000653: JUMP
00000654: JUMPDEST
00000655: PUSH1 0x02
00000657: DUP2
00000658: MSTORE
00000659: PUSH1 0x20
0000065b: DUP2
0000065c: ADD
0000065d: PUSH2 0x0c59
00000660: PUSH1 0xf2
00000662: SHL
00000663: DUP2
00000664: MSTORE
00000665: SWAP1
00000666: POP
00000667: PUSH2 0x055c
0000066a: JUMP
0000066b: JUMPDEST
0000066c: PUSH1 0x20
0000066e: DUP1
0000066f: DUP3
00000670: MSTORE
00000671: DUP2
00000672: ADD
00000673: PUSH2 0x047f
00000676: DUP2
00000677: PUSH2 0x0654
0000067a: JUMP
0000067b: JUMPDEST
0000067c: PUSH1 0x02
0000067e: DUP2
0000067f: MSTORE
00000680: PUSH1 0x20
00000682: DUP2
00000683: ADD
00000684: PUSH2 0x3163
00000687: PUSH1 0xf0
00000689: SHL
0000068a: DUP2
0000068b: MSTORE
0000068c: SWAP1
0000068d: POP
0000068e: PUSH2 0x055c
00000691: JUMP
00000692: JUMPDEST
00000693: PUSH1 0x20
00000695: DUP1
00000696: DUP3
00000697: MSTORE
00000698: DUP2
00000699: ADD
0000069a: PUSH2 0x047f
0000069d: DUP2
0000069e: PUSH2 0x067b
000006a1: JUMP
000006a2: INVALID
000006a3: LOG2
000006a4: PUSH5 0x6970667358
000006aa: UNKNOWN(0x22)
000006ab: SLT
000006ac: KECCAK256
000006ad: SWAP16
000006ae: UNKNOWN(0xC0)
000006af: UNKNOWN(0xD7)
000006b0: SWAP11
000006b1: UNKNOWN(0x2D)
000006b2: UNKNOWN(0xC5)
000006b3: MOD
000006b4: PUSH1 0x2f
000006b6: UNKNOWN(0x22)
000006b7: CALLDATASIZE
000006b8: BLOBHASH
000006b9: UNKNOWN(0xF9)
000006ba: UNKNOWN(0x27)
000006bb: UNKNOWN(0xB4)
000006bc: SWAP8
000006bd: DUP11
000006be: UNKNOWN(0xBB)
000006bf: PUSH8 0xef8509b300bec537
000006c8: TLOAD
000006c9: PUSH20

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0xd3e18e55dcd68201420ab2c27a8ea8b3b27f48c72787ab47f2bcce75eb74b741
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 72,
    "trace_id": "0xd3e18e55dcd68201420ab2c27a8ea8b3b27f48c72787ab47f2bcce75eb74b741",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x6fc49140",
            "selector": "0x6fc49140",
            "calldata_variants": [
                "0x6fc49140",
                "0x6fc491400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc3f59687",
            "selector": "0xc3f59687",
            "calldata_variants": [
                "0xc3f59687",
                "0xc3f596870000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf00e6a2a",
            "selector": "0xf00e6a2a",
            "calldata_variants": [
                "0xf00e6a2a",
                "0xf00e6a2a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x25394645",
            "selector": "0x25394645",
            "calldata_variants": [
                "0x25394645",
                "0x253946450000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x439fab91",
            "selector": "0x439fab91",
            "calldata_variants": [
                "0x439fab91",
                "0x439fab910000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5a99719e",
            "selector": "0x5a99719e",
            "calldata_variants": [
                "0x5a99719e",
                "0x5a99719e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 438,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 721,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}