TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-d510-7399-9628-f2ab7f6ffa95

complete
Chain ID
1
Address
0xcac964bf34f0643f8bbba2e6a0e2750f8b436f65
Block Number
—
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
ETH value transfer possible
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
28465 artifact.fetch complete 1 / 3 3 months ago
28466 tool.cast_disasm complete 1 / 3 3 months ago
92513 analysis.bundle complete 1 / 3 2 weeks ago
92514 capability.graph complete 1 / 3 2 weeks ago
92515 detector.run complete 1 / 3 2 weeks ago
92516 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
2
EXT*/BALANCE
0
Total opcodes
86
Flags
No heuristic flags raised.
View cast disassembly output 
00000000: PUSH0
00000001: CALLDATALOAD
00000002: PUSH0
00000003: BYTE
00000004: DUP1
00000005: PUSH1 0x01
00000007: EQ
00000008: PUSH1 0x41
0000000a: JUMPI
0000000b: DUP1
0000000c: PUSH1 0x02
0000000e: EQ
0000000f: PUSH1 0x26
00000011: JUMPI
00000012: PUSH1 0x03
00000014: EQ
00000015: PUSH1 0x19
00000017: JUMPI
00000018: STOP
00000019: JUMPDEST
0000001a: PUSH1 0x1f
0000001c: PUSH1 0x74
0000001e: JUMP
0000001f: JUMPDEST
00000020: PUSH1 0x01
00000022: CALLDATALOAD
00000023: PUSH0
00000024: SSTORE
00000025: STOP
00000026: JUMPDEST
00000027: POP
00000028: PUSH1 0x2d
0000002a: PUSH1 0x74
0000002c: JUMP
0000002d: JUMPDEST
0000002e: PUSH0
0000002f: DUP1
00000030: DUP1
00000031: DUP1
00000032: PUSH1 0x01
00000034: CALLDATALOAD
00000035: CALLER
00000036: GAS
00000037: CALL
00000038: ISZERO
00000039: PUSH1 0x3d
0000003b: JUMPI
0000003c: STOP
0000003d: JUMPDEST
0000003e: PUSH0
0000003f: DUP1
00000040: REVERT
00000041: JUMPDEST
00000042: POP
00000043: PUSH20 0x15d6bd16d24a81abad7351c11a380f05918f428f
00000058: CALLER
00000059: SUB
0000005a: PUSH1 0x3d
0000005c: JUMPI
0000005d: TIMESTAMP
0000005e: PUSH1 0x01
00000060: CALLDATALOAD
00000061: SUB
00000062: PUSH1 0x3d
00000064: JUMPI
00000065: PUSH0
00000066: DUP1
00000067: DUP1
00000068: DUP1
00000069: PUSH1 0x21
0000006b: CALLDATALOAD
0000006c: COINBASE
0000006d: GAS
0000006e: CALL
0000006f: ISZERO
00000070: PUSH1 0x3d
00000072: JUMPI
00000073: STOP
00000074: JUMPDEST
00000075: PUSH0
00000076: SLOAD
00000077: CALLER
00000078: SUB
00000079: PUSH1 0x3d
0000007b: JUMPI
0000007c: JUMP

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x4e0117f15cbecd79fca385575ccc5cb6367420cf6d43a9e76e3ef33b66f0ebb0
call_targets: 0xcac964bf34f0643f8bbba2e6a0e2750f8b436f65
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x4e0117f15cbecd79fca385575ccc5cb6367420cf6d43a9e76e3ef33b66f0ebb0",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xcac964bf34f0643f8bbba2e6a0e2750f8b436f65"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x",
            "selector": "fallback",
            "calldata_variants": [
                "0x"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 55,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 110,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 2,
    "guards_detected": []
}
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x4e0117f15cbecd79fca385575ccc5cb6367420cf6d43a9e76e3ef33b66f0ebb0
call_targets: 0xcac964bf34f0643f8bbba2e6a0e2750f8b436f65
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x4e0117f15cbecd79fca385575ccc5cb6367420cf6d43a9e76e3ef33b66f0ebb0",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xcac964bf34f0643f8bbba2e6a0e2750f8b436f65"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x",
            "selector": "fallback",
            "calldata_variants": [
                "0x"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 55,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 110,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}