TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-d428-73f5-a23e-c0f6c094ecc4

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
28285 artifact.fetch complete 1 / 3 3 months ago
28286 tool.cast_disasm complete 1 / 3 3 months ago
71259 analysis.bundle complete 1 / 3 1 week ago
71260 capability.graph complete 1 / 3 1 week ago
71261 detector.run complete 1 / 3 1 week ago
71262 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
5
Total opcodes
1094
Flags
delegatecall_present heavy_ext_balance_usage
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x005e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x5c60da1b
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x5c60da1b
00000024: EQ
00000025: PUSH2 0x00a8
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8f283970
0000002f: EQ
00000030: PUSH2 0x00e6
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf851a440
0000003a: EQ
0000003b: PUSH2 0x0106
0000003e: JUMPI
0000003f: PUSH2 0x006d
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x3659cfe6
0000004a: EQ
0000004b: PUSH2 0x0075
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x4f1ef286
00000055: EQ
00000056: PUSH2 0x0095
00000059: JUMPI
0000005a: PUSH2 0x006d
0000005d: JUMP
0000005e: JUMPDEST
0000005f: CALLDATASIZE
00000060: PUSH2 0x006d
00000063: JUMPI
00000064: PUSH2 0x006b
00000067: PUSH2 0x011b
0000006a: JUMP
0000006b: JUMPDEST
0000006c: STOP
0000006d: JUMPDEST
0000006e: PUSH2 0x006b
00000071: PUSH2 0x011b
00000074: JUMP
00000075: JUMPDEST
00000076: CALLVALUE
00000077: DUP1
00000078: ISZERO
00000079: PUSH2 0x0081
0000007c: JUMPI
0000007d: PUSH1 0x00
0000007f: DUP1
00000080: REVERT
00000081: JUMPDEST
00000082: POP
00000083: PUSH2 0x006b
00000086: PUSH2 0x0090
00000089: CALLDATASIZE
0000008a: PUSH1 0x04
0000008c: PUSH2 0x091f
0000008f: JUMP
00000090: JUMPDEST
00000091: PUSH2 0x0135
00000094: JUMP
00000095: JUMPDEST
00000096: PUSH2 0x006b
00000099: PUSH2 0x00a3
0000009c: CALLDATASIZE
0000009d: PUSH1 0x04
0000009f: PUSH2 0x093a
000000a2: JUMP
000000a3: JUMPDEST
000000a4: PUSH2 0x0196
000000a7: JUMP
000000a8: JUMPDEST
000000a9: CALLVALUE
000000aa: DUP1
000000ab: ISZERO
000000ac: PUSH2 0x00b4
000000af: JUMPI
000000b0: PUSH1 0x00
000000b2: DUP1
000000b3: REVERT
000000b4: JUMPDEST
000000b5: POP
000000b6: PUSH2 0x00bd
000000b9: PUSH2 0x0221
000000bc: JUMP
000000bd: JUMPDEST
000000be: PUSH1 0x40
000000c0: MLOAD
000000c1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000d6: SWAP1
000000d7: SWAP2
000000d8: AND
000000d9: DUP2
000000da: MSTORE
000000db: PUSH1 0x20
000000dd: ADD
000000de: PUSH1 0x40
000000e0: MLOAD
000000e1: DUP1
000000e2: SWAP2
000000e3: SUB
000000e4: SWAP1
000000e5: RETURN
000000e6: JUMPDEST
000000e7: CALLVALUE
000000e8: DUP1
000000e9: ISZERO
000000ea: PUSH2 0x00f2
000000ed: JUMPI
000000ee: PUSH1 0x00
000000f0: DUP1
000000f1: REVERT
000000f2: JUMPDEST
000000f3: POP
000000f4: PUSH2 0x006b
000000f7: PUSH2 0x0101
000000fa: CALLDATASIZE
000000fb: PUSH1 0x04
000000fd: PUSH2 0x091f
00000100: JUMP
00000101: JUMPDEST
00000102: PUSH2 0x0276
00000105: JUMP
00000106: JUMPDEST
00000107: CALLVALUE
00000108: DUP1
00000109: ISZERO
0000010a: PUSH2 0x0112
0000010d: JUMPI
0000010e: PUSH1 0x00
00000110: DUP1
00000111: REVERT
00000112: JUMPDEST
00000113: POP
00000114: PUSH2 0x00bd
00000117: PUSH2 0x02ba
0000011a: JUMP
0000011b: JUMPDEST
0000011c: PUSH2 0x0123
0000011f: PUSH2 0x0347
00000122: JUMP
00000123: JUMPDEST
00000124: PUSH2 0x0133
00000127: PUSH2 0x012e
0000012a: PUSH2 0x0435
0000012d: JUMP
0000012e: JUMPDEST
0000012f: PUSH2 0x043f
00000132: JUMP
00000133: JUMPDEST
00000134: JUMP
00000135: JUMPDEST
00000136: PUSH2 0x013d
00000139: PUSH2 0x0463
0000013c: JUMP
0000013d: JUMPDEST
0000013e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000153: AND
00000154: CALLER
00000155: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000016a: AND
0000016b: EQ
0000016c: ISZERO
0000016d: PUSH2 0x018e
00000170: JUMPI
00000171: PUSH2 0x018b
00000174: DUP2
00000175: PUSH1 0x40
00000177: MLOAD
00000178: DUP1
00000179: PUSH1 0x20
0000017b: ADD
0000017c: PUSH1 0x40
0000017e: MSTORE
0000017f: DUP1
00000180: PUSH1 0x00
00000182: DUP2
00000183: MSTORE
00000184: POP
00000185: PUSH1 0x00
00000187: PUSH2 0x04a3
0000018a: JUMP
0000018b: JUMPDEST
0000018c: POP
0000018d: JUMP
0000018e: JUMPDEST
0000018f: PUSH2 0x018b
00000192: PUSH2 0x011b
00000195: JUMP
00000196: JUMPDEST
00000197: PUSH2 0x019e
0000019a: PUSH2 0x0463
0000019d: JUMP
0000019e: JUMPDEST
0000019f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001b4: AND
000001b5: CALLER
000001b6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001cb: AND
000001cc: EQ
000001cd: ISZERO
000001ce: PUSH2 0x0219
000001d1: JUMPI
000001d2: PUSH2 0x0214
000001d5: DUP4
000001d6: DUP4
000001d7: DUP4
000001d8: DUP1
000001d9: DUP1
000001da: PUSH1 0x1f
000001dc: ADD
000001dd: PUSH1 0x20
000001df: DUP1
000001e0: SWAP2
000001e1: DIV
000001e2: MUL
000001e3: PUSH1 0x20
000001e5: ADD
000001e6: PUSH1 0x40
000001e8: MLOAD
000001e9: SWAP1
000001ea: DUP2
000001eb: ADD
000001ec: PUSH1 0x40
000001ee: MSTORE
000001ef: DUP1
000001f0: SWAP4
000001f1: SWAP3
000001f2: SWAP2
000001f3: SWAP1
000001f4: DUP2
000001f5: DUP2
000001f6: MSTORE
000001f7: PUSH1 0x20
000001f9: ADD
000001fa: DUP4
000001fb: DUP4
000001fc: DUP1
000001fd: DUP3
000001fe: DUP5
000001ff: CALLDATACOPY
00000200: PUSH1 0x00
00000202: SWAP3
00000203: ADD
00000204: SWAP2
00000205: SWAP1
00000206: SWAP2
00000207: MSTORE
00000208: POP
00000209: PUSH1 0x01
0000020b: SWAP3
0000020c: POP
0000020d: PUSH2 0x04a3
00000210: SWAP2
00000211: POP
00000212: POP
00000213: JUMP
00000214: JUMPDEST
00000215: POP
00000216: POP
00000217: POP
00000218: JUMP
00000219: JUMPDEST
0000021a: PUSH2 0x0214
0000021d: PUSH2 0x011b
00000220: JUMP
00000221: JUMPDEST
00000222: PUSH1 0x00
00000224: PUSH2 0x022b
00000227: PUSH2 0x0463
0000022a: JUMP
0000022b: JUMPDEST
0000022c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000241: AND
00000242: CALLER
00000243: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000258: AND
00000259: EQ
0000025a: ISZERO
0000025b: PUSH2 0x026b
0000025e: JUMPI
0000025f: PUSH2 0x0266
00000262: PUSH2 0x0435
00000265: JUMP
00000266: JUMPDEST
00000267: SWAP1
00000268: POP
00000269: SWAP1
0000026a: JUMP
0000026b: JUMPDEST
0000026c: PUSH2 0x0273
0000026f: PUSH2 0x011b
00000272: JUMP
00000273: JUMPDEST
00000274: SWAP1
00000275: JUMP
00000276: JUMPDEST
00000277: PUSH2 0x027e
0000027a: PUSH2 0x0463
0000027d: JUMP
0000027e: JUMPDEST
0000027f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000294: AND
00000295: CALLER
00000296: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002ab: AND
000002ac: EQ
000002ad: ISZERO
000002ae: PUSH2 0x018e
000002b1: JUMPI
000002b2: PUSH2 0x018b
000002b5: DUP2
000002b6: PUSH2 0x04ce
000002b9: JUMP
000002ba: JUMPDEST
000002bb: PUSH1 0x00
000002bd: PUSH2 0x02c4
000002c0: PUSH2 0x0463
000002c3: JUMP
000002c4: JUMPDEST
000002c5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002da: AND
000002db: CALLER
000002dc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002f1: AND
000002f2: EQ
000002f3: ISZERO
000002f4: PUSH2 0x026b
000002f7: JUMPI
000002f8: PUSH2 0x0266
000002fb: PUSH2 0x0463
000002fe: JUMP
000002ff: JUMPDEST
00000300: PUSH1 0x60
00000302: PUSH2 0x0324
00000305: DUP4
00000306: DUP4
00000307: PUSH1 0x40
00000309: MLOAD
0000030a: DUP1
0000030b: PUSH1 0x60
0000030d: ADD
0000030e: PUSH1 0x40
00000310: MSTORE
00000311: DUP1
00000312: PUSH1 0x27
00000314: DUP2
00000315: MSTORE
00000316: PUSH1 0x20
00000318: ADD
00000319: PUSH2 0x0a57
0000031c: PUSH1 0x27
0000031e: SWAP2
0000031f: CODECOPY
00000320: PUSH2 0x052f
00000323: JUMP
00000324: JUMPDEST
00000325: SWAP4
00000326: SWAP3
00000327: POP
00000328: POP
00000329: POP
0000032a: JUMP
0000032b: JUMPDEST
0000032c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000341: AND
00000342: EXTCODESIZE
00000343: ISZERO
00000344: ISZERO
00000345: SWAP1
00000346: JUMP
00000347: JUMPDEST
00000348: PUSH2 0x034f
0000034b: PUSH2 0x0463
0000034e: JUMP
0000034f: JUMPDEST
00000350: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000365: AND
00000366: CALLER
00000367: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000037c: AND
0000037d: EQ
0000037e: ISZERO
0000037f: PUSH2 0x0133
00000382: JUMPI
00000383: PUSH1 0x40
00000385: MLOAD
00000386: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000003a7: DUP2
000003a8: MSTORE
000003a9: PUSH1 0x20
000003ab: PUSH1 0x04
000003ad: DUP3
000003ae: ADD
000003af: MSTORE
000003b0: PUSH1 0x42
000003b2: PUSH1 0x24
000003b4: DUP3
000003b5: ADD
000003b6: MSTORE
000003b7: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
000003d8: PUSH1 0x44
000003da: DUP3
000003db: ADD
000003dc: MSTORE
000003dd: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
000003fe: PUSH1 0x64
00000400: DUP3
00000401: ADD
00000402: MSTORE
00000403: PUSH32 0x6574000000000000000000000000000000000000000000000000000000000000
00000424: PUSH1 0x84
00000426: DUP3
00000427: ADD
00000428: MSTORE
00000429: PUSH1 0xa4
0000042b: ADD
0000042c: JUMPDEST
0000042d: PUSH1 0x40
0000042f: MLOAD
00000430: DUP1
00000431: SWAP2
00000432: SUB
00000433: SWAP1
00000434: REVERT
00000435: JUMPDEST
00000436: PUSH1 0x00
00000438: PUSH2 0x0266
0000043b: PUSH2 0x0657
0000043e: JUMP
0000043f: JUMPDEST
00000440: CALLDATASIZE
00000441: PUSH1 0x00
00000443: DUP1
00000444: CALLDATACOPY
00000445: PUSH1 0x00
00000447: DUP1
00000448: CALLDATASIZE
00000449: PUSH1 0x00
0000044b: DUP5
0000044c: GAS
0000044d: DELEGATECALL
0000044e: RETURNDATASIZE
0000044f: PUSH1 0x00
00000451: DUP1
00000452: RETURNDATACOPY
00000453: DUP1
00000454: DUP1
00000455: ISZERO
00000456: PUSH2 0x045e
00000459: JUMPI
0000045a: RETURNDATASIZE
0000045b: PUSH1 0x00
0000045d: RETURN
0000045e: JUMPDEST
0000045f: RETURNDATASIZE
00000460: PUSH1 0x00
00000462: REVERT
00000463: JUMPDEST
00000464: PUSH1 0x00
00000466: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000487: JUMPDEST
00000488: SLOAD
00000489: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000049e: AND
0000049f: SWAP2
000004a0: SWAP1
000004a1: POP
000004a2: JUMP
000004a3: JUMPDEST
000004a4: PUSH2 0x04ac
000004a7: DUP4
000004a8: PUSH2 0x067f
000004ab: JUMP
000004ac: JUMPDEST
000004ad: PUSH1 0x00
000004af: DUP3
000004b0: MLOAD
000004b1: GT
000004b2: DUP1
000004b3: PUSH2 0x04b9
000004b6: JUMPI
000004b7: POP
000004b8: DUP1
000004b9: JUMPDEST
000004ba: ISZERO
000004bb: PUSH2 0x0214
000004be: JUMPI
000004bf: PUSH2 0x04c8
000004c2: DUP4
000004c3: DUP4
000004c4: PUSH2 0x02ff
000004c7: JUMP
000004c8: JUMPDEST
000004c9: POP
000004ca: POP
000004cb: POP
000004cc: POP
000004cd: JUMP
000004ce: JUMPDEST
000004cf: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
000004f0: PUSH2 0x04f7
000004f3: PUSH2 0x0463
000004f6: JUMP
000004f7: JUMPDEST
000004f8: PUSH1 0x40
000004fa: DUP1
000004fb: MLOAD
000004fc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000511: SWAP3
00000512: DUP4
00000513: AND
00000514: DUP2
00000515: MSTORE
00000516: SWAP2
00000517: DUP5
00000518: AND
00000519: PUSH1 0x20
0000051b: DUP4
0000051c: ADD
0000051d: MSTORE
0000051e: ADD
0000051f: PUSH1 0x40
00000521: MLOAD
00000522: DUP1
00000523: SWAP2
00000524: SUB
00000525: SWAP1
00000526: LOG1
00000527: PUSH2 0x018b
0000052a: DUP2
0000052b: PUSH2 0x06cc
0000052e: JUMP
0000052f: JUMPDEST
00000530: PUSH1 0x60
00000532: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000547: DUP5
00000548: AND
00000549: EXTCODESIZE
0000054a: PUSH2 0x05d5
0000054d: JUMPI
0000054e: PUSH1 0x40
00000550: MLOAD
00000551: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000572: DUP2
00000573: MSTORE
00000574: PUSH1 0x20
00000576: PUSH1 0x04
00000578: DUP3
00000579: ADD
0000057a: MSTORE
0000057b: PUSH1 0x26
0000057d: PUSH1 0x24
0000057f: DUP3
00000580: ADD
00000581: MSTORE
00000582: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f
000005a3: PUSH1 0x44
000005a5: DUP3
000005a6: ADD
000005a7: MSTORE
000005a8: PUSH32 0x6e74726163740000000000000000000000000000000000000000000000000000
000005c9: PUSH1 0x64
000005cb: DUP3
000005cc: ADD
000005cd: MSTORE
000005ce: PUSH1 0x84
000005d0: ADD
000005d1: PUSH2 0x042c
000005d4: JUMP
000005d5: JUMPDEST
000005d6: PUSH1 0x00
000005d8: DUP1
000005d9: DUP6
000005da: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005ef: AND
000005f0: DUP6
000005f1: PUSH1 0x40
000005f3: MLOAD
000005f4: PUSH2 0x05fd
000005f7: SWAP2
000005f8: SWAP1
000005f9: PUSH2 0x09e9
000005fc: JUMP
000005fd: JUMPDEST
000005fe: PUSH1 0x00
00000600: PUSH1 0x40
00000602: MLOAD
00000603: DUP1
00000604: DUP4
00000605: SUB
00000606: DUP2
00000607: DUP6
00000608: GAS
00000609: DELEGATECALL
0000060a: SWAP2
0000060b: POP
0000060c: POP
0000060d: RETURNDATASIZE
0000060e: DUP1
0000060f: PUSH1 0x00
00000611: DUP2
00000612: EQ
00000613: PUSH2 0x0638
00000616: JUMPI
00000617: PUSH1 0x40
00000619: MLOAD
0000061a: SWAP2
0000061b: POP
0000061c: PUSH1 0x1f
0000061e: NOT
0000061f: PUSH1 0x3f
00000621: RETURNDATASIZE
00000622: ADD
00000623: AND
00000624: DUP3
00000625: ADD
00000626: PUSH1 0x40
00000628: MSTORE
00000629: RETURNDATASIZE
0000062a: DUP3
0000062b: MSTORE
0000062c: RETURNDATASIZE
0000062d: PUSH1 0x00
0000062f: PUSH1 0x20
00000631: DUP5
00000632: ADD
00000633: RETURNDATACOPY
00000634: PUSH2 0x063d
00000637: JUMP
00000638: JUMPDEST
00000639: PUSH1 0x60
0000063b: SWAP2
0000063c: POP
0000063d: JUMPDEST
0000063e: POP
0000063f: SWAP2
00000640: POP
00000641: SWAP2
00000642: POP
00000643: PUSH2 0x064d
00000646: DUP3
00000647: DUP3
00000648: DUP7
00000649: PUSH2 0x07d8
0000064c: JUMP
0000064d: JUMPDEST
0000064e: SWAP7
0000064f: SWAP6
00000650: POP
00000651: POP
00000652: POP
00000653: POP
00000654: POP
00000655: POP
00000656: JUMP
00000657: JUMPDEST
00000658: PUSH1 0x00
0000065a: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000067b: PUSH2 0x0487
0000067e: JUMP
0000067f: JUMPDEST
00000680: PUSH2 0x0688
00000683: DUP2
00000684: PUSH2 0x082b
00000687: JUMP
00000688: JUMPDEST
00000689: PUSH1 0x40
0000068b: MLOAD
0000068c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006a1: DUP3
000006a2: AND
000006a3: SWAP1
000006a4: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
000006c5: SWAP1
000006c6: PUSH1 0x00
000006c8: SWAP1
000006c9: LOG2
000006ca: POP
000006cb: JUMP
000006cc: JUMPDEST
000006cd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006e2: DUP2
000006e3: AND
000006e4: PUSH2 0x076f
000006e7: JUMPI
000006e8: PUSH1 0x40
000006ea: MLOAD
000006eb: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000070c: DUP2
0000070d: MSTORE
0000070e: PUSH1 0x20
00000710: PUSH1 0x04
00000712: DUP3
00000713: ADD
00000714: MSTORE
00000715: PUSH1 0x26
00000717: PUSH1 0x24
00000719: DUP3
0000071a: ADD
0000071b: MSTORE
0000071c: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
0000073d: PUSH1 0x44
0000073f: DUP3
00000740: ADD
00000741: MSTORE
00000742: PUSH32 0x6464726573730000000000000000000000000000000000000000000000000000
00000763: PUSH1 0x64
00000765: DUP3
00000766: ADD
00000767: MSTORE
00000768: PUSH1 0x84
0000076a: ADD
0000076b: PUSH2 0x042c
0000076e: JUMP
0000076f: JUMPDEST
00000770: DUP1
00000771: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000792: JUMPDEST
00000793: DUP1
00000794: SLOAD
00000795: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000
000007b6: AND
000007b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007cc: SWAP3
000007cd: SWAP1
000007ce: SWAP3
000007cf: AND
000007d0: SWAP2
000007d1: SWAP1
000007d2: SWAP2
000007d3: OR
000007d4: SWAP1
000007d5: SSTORE
000007d6: POP
000007d7: JUMP
000007d8: JUMPDEST
000007d9: PUSH1 0x60
000007db: DUP4
000007dc: ISZERO
000007dd: PUSH2 0x07e7
000007e0: JUMPI
000007e1: POP
000007e2: DUP2
000007e3: PUSH2 0x0324
000007e6: JUMP
000007e7: JUMPDEST
000007e8: DUP3
000007e9: MLOAD
000007ea: ISZERO
000007eb: PUSH2 0x07f7
000007ee: JUMPI
000007ef: DUP3
000007f0: MLOAD
000007f1: DUP1
000007f2: DUP5
000007f3: PUSH1 0x20
000007f5: ADD
000007f6: REVERT
000007f7: JUMPDEST
000007f8: DUP2
000007f9: PUSH1 0x40
000007fb: MLOAD
000007fc: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000081d: DUP2
0000081e: MSTORE
0000081f: PUSH1 0x04
00000821: ADD
00000822: PUSH2 0x042c
00000825: SWAP2
00000826: SWAP1
00000827: PUSH2 0x0a05
0000082a: JUMP
0000082b: JUMPDEST
0000082c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000841: DUP2
00000842: AND
00000843: EXTCODESIZE
00000844: PUSH2 0x08cf
00000847: JUMPI
00000848: PUSH1 0x40
0000084a: MLOAD
0000084b: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000086c: DUP2
0000086d: MSTORE
0000086e: PUSH1 0x20
00000870: PUSH1 0x04
00000872: DUP3
00000873: ADD
00000874: MSTORE
00000875: PUSH1 0x2d
00000877: PUSH1 0x24
00000879: DUP3
0000087a: ADD
0000087b: MSTORE
0000087c: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
0000089d: PUSH1 0x44
0000089f: DUP3
000008a0: ADD
000008a1: MSTORE
000008a2: PUSH32 0x6f74206120636f6e747261637400000000000000000000000000000000000000
000008c3: PUSH1 0x64
000008c5: DUP3
000008c6: ADD
000008c7: MSTORE
000008c8: PUSH1 0x84
000008ca: ADD
000008cb: PUSH2 0x042c
000008ce: JUMP
000008cf: JUMPDEST
000008d0: DUP1
000008d1: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000008f2: PUSH2 0x0792
000008f5: JUMP
000008f6: JUMPDEST
000008f7: DUP1
000008f8: CALLDATALOAD
000008f9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000090e: DUP2
0000090f: AND
00000910: DUP2
00000911: EQ
00000912: PUSH2 0x091a
00000915: JUMPI
00000916: PUSH1 0x00
00000918: DUP1
00000919: REVERT
0000091a: JUMPDEST
0000091b: SWAP2
0000091c: SWAP1
0000091d: POP
0000091e: JUMP
0000091f: JUMPDEST
00000920: PUSH1 0x00
00000922: PUSH1 0x20
00000924: DUP3
00000925: DUP5
00000926: SUB
00000927: SLT
00000928: ISZERO
00000929: PUSH2 0x0931
0000092c: JUMPI
0000092d: PUSH1 0x00
0000092f: DUP1
00000930: REVERT
00000931: JUMPDEST
00000932: PUSH2 0x0324
00000935: DUP3
00000936: PUSH2 0x08f6
00000939: JUMP
0000093a: JUMPDEST
0000093b: PUSH1 0x00
0000093d: DUP1
0000093e: PUSH1 0x00
00000940: PUSH1 0x40
00000942: DUP5
00000943: DUP7
00000944: SUB
00000945: SLT
00000946: ISZERO
00000947: PUSH2 0x094f
0000094a: JUMPI
0000094b: PUSH1 0x00
0000094d: DUP1
0000094e: REVERT
0000094f: JUMPDEST
00000950: PUSH2 0x0958
00000953: DUP5
00000954: PUSH2 0x08f6
00000957: JUMP
00000958: JUMPDEST
00000959: SWAP3
0000095a: POP
0000095b: PUSH1 0x20
0000095d: DUP5
0000095e: ADD
0000095f: CALLDATALOAD
00000960: PUSH8 0xffffffffffffffff
00000969: DUP1
0000096a: DUP3
0000096b: GT
0000096c: ISZERO
0000096d: PUSH2 0x0975
00000970: JUMPI
00000971: PUSH1 0x00
00000973: DUP1
00000974: REVERT
00000975: JUMPDEST
00000976: DUP2
00000977: DUP7
00000978: ADD
00000979: SWAP2
0000097a: POP
0000097b: DUP7
0000097c: PUSH1 0x1f
0000097e: DUP4
0000097f: ADD
00000980: SLT
00000981: PUSH2 0x0989
00000984: JUMPI
00000985: PUSH1 0x00
00000987: DUP1
00000988: REVERT
00000989: JUMPDEST
0000098a: DUP2
0000098b: CALLDATALOAD
0000098c: DUP2
0000098d: DUP2
0000098e: GT
0000098f: ISZERO
00000990: PUSH2 0x0998
00000993: JUMPI
00000994: PUSH1 0x00
00000996: DUP1
00000997: REVERT
00000998: JUMPDEST
00000999: DUP8
0000099a: PUSH1 0x20
0000099c: DUP3
0000099d: DUP6
0000099e: ADD
0000099f: ADD
000009a0: GT
000009a1: ISZERO
000009a2: PUSH2 0x09aa
000009a5: JUMPI
000009a6: PUSH1 0x00
000009a8: DUP1
000009a9: REVERT
000009aa: JUMPDEST
000009ab: PUSH1 0x20
000009ad: DUP4
000009ae: ADD
000009af: SWAP5
000009b0: POP
000009b1: DUP1
000009b2: SWAP4
000009b3: POP
000009b4: POP
000009b5: POP
000009b6: POP
000009b7: SWAP3
000009b8: POP
000009b9: SWAP3
000009ba: POP
000009bb: SWAP3
000009bc: JUMP
000009bd: JUMPDEST
000009be: PUSH1 0x00
000009c0: JUMPDEST
000009c1: DUP4
000009c2: DUP2
000009c3: LT
000009c4: ISZERO
000009c5: PUSH2 0x09d8
000009c8: JUMPI
000009c9: DUP2
000009ca: DUP2
000009cb: ADD
000009cc: MLOAD
000009cd: DUP4
000009ce: DUP3
000009cf: ADD
000009d0: MSTORE
000009d1: PUSH1 0x20
000009d3: ADD
000009d4: PUSH2 0x09c0
000009d7: JUMP
000009d8: JUMPDEST
000009d9: DUP4
000009da: DUP2
000009db: GT
000009dc: ISZERO
000009dd: PUSH2 0x04c8
000009e0: JUMPI
000009e1: POP
000009e2: POP
000009e3: PUSH1 0x00
000009e5: SWAP2
000009e6: ADD
000009e7: MSTORE
000009e8: JUMP
000009e9: JUMPDEST
000009ea: PUSH1 0x00
000009ec: DUP3
000009ed: MLOAD
000009ee: PUSH2 0x09fb
000009f1: DUP2
000009f2: DUP5
000009f3: PUSH1 0x20
000009f5: DUP8
000009f6: ADD
000009f7: PUSH2 0x09bd
000009fa: JUMP
000009fb: JUMPDEST
000009fc: SWAP2
000009fd: SWAP1
000009fe: SWAP2
000009ff: ADD
00000a00: SWAP3
00000a01: SWAP2
00000a02: POP
00000a03: POP
00000a04: JUMP
00000a05: JUMPDEST
00000a06: PUSH1 0x20
00000a08: DUP2
00000a09: MSTORE
00000a0a: PUSH1 0x00
00000a0c: DUP3
00000a0d: MLOAD
00000a0e: DUP1
00000a0f: PUSH1 0x20
00000a11: DUP5
00000a12: ADD
00000a13: MSTORE
00000a14: PUSH2 0x0a24
00000a17: DUP2
00000a18: PUSH1 0x40
00000a1a: DUP6
00000a1b: ADD
00000a1c: PUSH1 0x20
00000a1e: DUP8
00000a1f: ADD
00000a20: PUSH2 0x09bd
00000a23: JUMP
00000a24: JUMPDEST
00000a25: PUSH1 0x1f
00000a27: ADD
00000a28: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
00000a49: AND
00000a4a: SWAP2
00000a4b: SWAP1
00000a4c: SWAP2
00000a4d: ADD
00000a4e: PUSH1 0x40
00000a50: ADD
00000a51: SWAP3
00000a52: SWAP2
00000a53: POP
00000a54: POP
00000a55: JUMP
00000a56: INVALID
00000a57: COINBASE
00000a58: PUSH5 0x6472657373
00000a5e: GASPRICE
00000a5f: KECCAK256
00000a60: PUSH13 0x6f772d6c6576656c2064656c65
00000a6e: PUSH8 0x6174652063616c6c
00000a77: KECCAK256
00000a78: PUSH7 0x61696c6564a264
00000a80: PUSH10 0x70667358221220b29caa
00000a8b: SLOAD
00000a8c: CALLER
00000a8d: PUSH12 0x3ee836679675e9732ec5e526
00000a9a: UNKNOWN(0xFB)
00000a9b: EXTCODEHASH
00000a9c: DUP1
00000a9d: EXTCODECOPY
00000a9e: UNKNOWN(0xCA)
00000a9f: UNKNOWN(0x2F)
00000aa0: UNKNOWN(0xE3)
00000aa1: CALLDATASIZE
00000aa2: UNKNOWN(0xCC)
00000aa3: CALLDATALOAD
00000aa4: SSTORE
00000aa5: UNKNOWN(0xAB)
00000aa6: UNKNOWN(0xA6)
00000aa7: UNKNOWN(0x22)
00000aa8: PUSH5 0x736f6c6343
00000aae: STOP
00000aaf: ADDMOD
00000ab0: EXP
00000ab1: STOP
00000ab2: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0xd86227c2d4a5e8fc2d9a0822944c312395fe739bf98b472b1245c369caa4db8e
call_targets: 0x24aa958c90b7973dc16c63c9992f69e1767377ae
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xd86227c2d4a5e8fc2d9a0822944c312395fe739bf98b472b1245c369caa4db8e",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x24aa958c90b7973dc16c63c9992f69e1767377ae"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1101,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1545,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 340,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 437,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 578,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 661,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 731,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 870,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}