TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-d8ee-7265-9aa3-668cbe7b4de4

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
29163 artifact.fetch complete 1 / 3 4 months ago
29164 tool.cast_disasm complete 1 / 3 4 months ago
72856 analysis.bundle complete 1 / 3 2 weeks ago
72857 capability.graph complete 1 / 3 2 weeks ago
72858 detector.run complete 1 / 3 2 weeks ago
72859 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
5
EXT*/BALANCE
0
Total opcodes
973
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0022
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x3ccfd60b
00000019: EQ
0000001a: PUSH2 0x00db
0000001d: JUMPI
0000001e: PUSH2 0x004a
00000021: JUMP
00000022: JUMPDEST
00000023: CALLDATASIZE
00000024: PUSH2 0x004a
00000027: JUMPI
00000028: CALLER
00000029: PUSH18 0xdb5c8b030ae20308ac975898e09741e70000
0000003c: EQ
0000003d: PUSH2 0x0048
00000040: JUMPI
00000041: PUSH2 0x0048
00000044: PUSH2 0x00f0
00000047: JUMP
00000048: JUMPDEST
00000049: STOP
0000004a: JUMPDEST
0000004b: PUSH1 0x00
0000004d: DUP1
0000004e: DUP1
0000004f: PUSH2 0x005b
00000052: CALLDATASIZE
00000053: PUSH1 0x04
00000055: DUP2
00000056: DUP5
00000057: PUSH2 0x0476
0000005a: JUMP
0000005b: JUMPDEST
0000005c: DUP2
0000005d: ADD
0000005e: SWAP1
0000005f: PUSH2 0x0068
00000062: SWAP2
00000063: SWAP1
00000064: PUSH2 0x04b6
00000067: JUMP
00000068: JUMPDEST
00000069: SWAP3
0000006a: POP
0000006b: SWAP3
0000006c: POP
0000006d: SWAP3
0000006e: POP
0000006f: PUSH1 0x00
00000071: PUSH2 0x007c
00000074: DUP5
00000075: CALLER
00000076: DUP6
00000077: DUP6
00000078: PUSH2 0x0273
0000007b: JUMP
0000007c: JUMPDEST
0000007d: SWAP1
0000007e: POP
0000007f: DUP1
00000080: DUP1
00000081: ISZERO
00000082: PUSH2 0x008a
00000085: JUMPI
00000086: POP
00000087: DUP4
00000088: NUMBER
00000089: LT
0000008a: JUMPDEST
0000008b: ISZERO
0000008c: PUSH2 0x00d3
0000008f: JUMPI
00000090: CALLER
00000091: PUSH2 0x009a
00000094: DUP5
00000095: CALLVALUE
00000096: PUSH2 0x057a
00000099: JUMP
0000009a: JUMPDEST
0000009b: PUSH1 0x40
0000009d: MLOAD
0000009e: PUSH1 0x00
000000a0: DUP2
000000a1: DUP2
000000a2: DUP2
000000a3: DUP6
000000a4: DUP8
000000a5: GAS
000000a6: CALL
000000a7: SWAP3
000000a8: POP
000000a9: POP
000000aa: POP
000000ab: RETURNDATASIZE
000000ac: DUP1
000000ad: PUSH1 0x00
000000af: DUP2
000000b0: EQ
000000b1: PUSH2 0x0048
000000b4: JUMPI
000000b5: PUSH1 0x40
000000b7: MLOAD
000000b8: SWAP2
000000b9: POP
000000ba: PUSH1 0x1f
000000bc: NOT
000000bd: PUSH1 0x3f
000000bf: RETURNDATASIZE
000000c0: ADD
000000c1: AND
000000c2: DUP3
000000c3: ADD
000000c4: PUSH1 0x40
000000c6: MSTORE
000000c7: RETURNDATASIZE
000000c8: DUP3
000000c9: MSTORE
000000ca: RETURNDATASIZE
000000cb: PUSH1 0x00
000000cd: PUSH1 0x20
000000cf: DUP5
000000d0: ADD
000000d1: RETURNDATACOPY
000000d2: STOP
000000d3: JUMPDEST
000000d4: PUSH2 0x0048
000000d7: PUSH2 0x00f0
000000da: JUMP
000000db: JUMPDEST
000000dc: CALLVALUE
000000dd: DUP1
000000de: ISZERO
000000df: PUSH2 0x00e7
000000e2: JUMPI
000000e3: PUSH1 0x00
000000e5: DUP1
000000e6: REVERT
000000e7: JUMPDEST
000000e8: POP
000000e9: PUSH2 0x0048
000000ec: PUSH2 0x03b7
000000ef: JUMP
000000f0: JUMPDEST
000000f1: PUSH1 0x00
000000f3: DUP1
000000f4: SLOAD
000000f5: PUSH1 0x40
000000f7: DUP1
000000f8: MLOAD
000000f9: PUSH1 0x04
000000fb: DUP2
000000fc: MSTORE
000000fd: PUSH1 0x24
000000ff: DUP2
00000100: ADD
00000101: DUP3
00000102: MSTORE
00000103: PUSH1 0x20
00000105: DUP2
00000106: ADD
00000107: DUP1
00000108: MLOAD
00000109: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
00000126: AND
00000127: PUSH32 0x9b2d7f6500000000000000000000000000000000000000000000000000000000
00000148: OR
00000149: SWAP1
0000014a: MSTORE
0000014b: SWAP1
0000014c: MLOAD
0000014d: DUP4
0000014e: SWAP3
0000014f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000164: AND
00000165: SWAP2
00000166: PUSH2 0x016e
00000169: SWAP2
0000016a: PUSH2 0x05a1
0000016d: JUMP
0000016e: JUMPDEST
0000016f: PUSH1 0x00
00000171: PUSH1 0x40
00000173: MLOAD
00000174: DUP1
00000175: DUP4
00000176: SUB
00000177: DUP2
00000178: PUSH1 0x00
0000017a: DUP7
0000017b: GAS
0000017c: CALL
0000017d: SWAP2
0000017e: POP
0000017f: POP
00000180: RETURNDATASIZE
00000181: DUP1
00000182: PUSH1 0x00
00000184: DUP2
00000185: EQ
00000186: PUSH2 0x01ab
00000189: JUMPI
0000018a: PUSH1 0x40
0000018c: MLOAD
0000018d: SWAP2
0000018e: POP
0000018f: PUSH1 0x1f
00000191: NOT
00000192: PUSH1 0x3f
00000194: RETURNDATASIZE
00000195: ADD
00000196: AND
00000197: DUP3
00000198: ADD
00000199: PUSH1 0x40
0000019b: MSTORE
0000019c: RETURNDATASIZE
0000019d: DUP3
0000019e: MSTORE
0000019f: RETURNDATASIZE
000001a0: PUSH1 0x00
000001a2: PUSH1 0x20
000001a4: DUP5
000001a5: ADD
000001a6: RETURNDATACOPY
000001a7: PUSH2 0x01b0
000001aa: JUMP
000001ab: JUMPDEST
000001ac: PUSH1 0x60
000001ae: SWAP2
000001af: POP
000001b0: JUMPDEST
000001b1: POP
000001b2: SWAP2
000001b3: POP
000001b4: SWAP2
000001b5: POP
000001b6: PUSH1 0x00
000001b8: DUP2
000001b9: DUP1
000001ba: PUSH1 0x20
000001bc: ADD
000001bd: SWAP1
000001be: MLOAD
000001bf: DUP2
000001c0: ADD
000001c1: SWAP1
000001c2: PUSH2 0x01cb
000001c5: SWAP2
000001c6: SWAP1
000001c7: PUSH2 0x05d0
000001ca: JUMP
000001cb: JUMPDEST
000001cc: SWAP1
000001cd: POP
000001ce: DUP1
000001cf: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001e4: AND
000001e5: CALLVALUE
000001e6: PUSH1 0x40
000001e8: MLOAD
000001e9: PUSH1 0x00
000001eb: PUSH1 0x40
000001ed: MLOAD
000001ee: DUP1
000001ef: DUP4
000001f0: SUB
000001f1: DUP2
000001f2: DUP6
000001f3: DUP8
000001f4: GAS
000001f5: CALL
000001f6: SWAP3
000001f7: POP
000001f8: POP
000001f9: POP
000001fa: RETURNDATASIZE
000001fb: DUP1
000001fc: PUSH1 0x00
000001fe: DUP2
000001ff: EQ
00000200: PUSH2 0x0225
00000203: JUMPI
00000204: PUSH1 0x40
00000206: MLOAD
00000207: SWAP2
00000208: POP
00000209: PUSH1 0x1f
0000020b: NOT
0000020c: PUSH1 0x3f
0000020e: RETURNDATASIZE
0000020f: ADD
00000210: AND
00000211: DUP3
00000212: ADD
00000213: PUSH1 0x40
00000215: MSTORE
00000216: RETURNDATASIZE
00000217: DUP3
00000218: MSTORE
00000219: RETURNDATASIZE
0000021a: PUSH1 0x00
0000021c: PUSH1 0x20
0000021e: DUP5
0000021f: ADD
00000220: RETURNDATACOPY
00000221: PUSH2 0x022a
00000224: JUMP
00000225: JUMPDEST
00000226: PUSH1 0x60
00000228: SWAP2
00000229: POP
0000022a: JUMPDEST
0000022b: POP
0000022c: SWAP1
0000022d: SWAP4
0000022e: POP
0000022f: POP
00000230: DUP3
00000231: ISZERO
00000232: PUSH2 0x026e
00000235: JUMPI
00000236: PUSH1 0x40
00000238: DUP1
00000239: MLOAD
0000023a: CALLER
0000023b: DUP2
0000023c: MSTORE
0000023d: CALLVALUE
0000023e: PUSH1 0x20
00000240: DUP3
00000241: ADD
00000242: MSTORE
00000243: PUSH32 0xfceb437c298f40d64702ac26411b2316e79f3c28ffa60edfc891ad4fc8ab82ca
00000264: SWAP2
00000265: ADD
00000266: PUSH1 0x40
00000268: MLOAD
00000269: DUP1
0000026a: SWAP2
0000026b: SUB
0000026c: SWAP1
0000026d: LOG1
0000026e: JUMPDEST
0000026f: POP
00000270: POP
00000271: POP
00000272: JUMP
00000273: JUMPDEST
00000274: PUSH1 0x40
00000276: DUP1
00000277: MLOAD
00000278: PUSH1 0x20
0000027a: DUP1
0000027b: DUP3
0000027c: ADD
0000027d: DUP8
0000027e: SWAP1
0000027f: MSTORE
00000280: PUSH1 0x60
00000282: DUP7
00000283: DUP2
00000284: SHL
00000285: PUSH12 0xffffffffffffffffffffffff
00000292: NOT
00000293: AND
00000294: DUP4
00000295: DUP6
00000296: ADD
00000297: MSTORE
00000298: PUSH1 0x54
0000029a: DUP4
0000029b: ADD
0000029c: DUP7
0000029d: SWAP1
0000029e: MSTORE
0000029f: CHAINID
000002a0: PUSH1 0x74
000002a2: DUP1
000002a3: DUP6
000002a4: ADD
000002a5: SWAP2
000002a6: SWAP1
000002a7: SWAP2
000002a8: MSTORE
000002a9: DUP5
000002aa: MLOAD
000002ab: DUP1
000002ac: DUP6
000002ad: SUB
000002ae: SWAP1
000002af: SWAP2
000002b0: ADD
000002b1: DUP2
000002b2: MSTORE
000002b3: PUSH1 0x94
000002b5: DUP5
000002b6: ADD
000002b7: DUP6
000002b8: MSTORE
000002b9: DUP1
000002ba: MLOAD
000002bb: SWAP1
000002bc: DUP4
000002bd: ADD
000002be: KECCAK256
000002bf: PUSH32 0x19457468657265756d205369676e6564204d6573736167653a0a333200000000
000002e0: PUSH1 0xb4
000002e2: DUP6
000002e3: ADD
000002e4: MSTORE
000002e5: PUSH1 0xd0
000002e7: DUP1
000002e8: DUP6
000002e9: ADD
000002ea: DUP3
000002eb: SWAP1
000002ec: MSTORE
000002ed: DUP6
000002ee: MLOAD
000002ef: DUP1
000002f0: DUP7
000002f1: SUB
000002f2: SWAP1
000002f3: SWAP2
000002f4: ADD
000002f5: DUP2
000002f6: MSTORE
000002f7: PUSH1 0xf0
000002f9: DUP6
000002fa: ADD
000002fb: DUP1
000002fc: DUP8
000002fd: MSTORE
000002fe: DUP2
000002ff: MLOAD
00000300: SWAP2
00000301: DUP6
00000302: ADD
00000303: SWAP2
00000304: SWAP1
00000305: SWAP2
00000306: KECCAK256
00000307: SWAP4
00000308: DUP8
00000309: ADD
0000030a: MLOAD
0000030b: DUP8
0000030c: DUP8
0000030d: ADD
0000030e: MLOAD
0000030f: SWAP4
00000310: DUP9
00000311: ADD
00000312: MLOAD
00000313: PUSH1 0x00
00000315: SWAP3
00000316: DUP4
00000317: SWAP1
00000318: MSTORE
00000319: PUSH2 0x0110
0000031c: DUP8
0000031d: ADD
0000031e: SWAP8
0000031f: DUP9
00000320: SWAP1
00000321: MSTORE
00000322: SWAP7
00000323: DUP6
00000324: SWAP1
00000325: MSTORE
00000326: SWAP6
00000327: DUP2
00000328: BYTE
00000329: PUSH2 0x0130
0000032c: DUP7
0000032d: ADD
0000032e: DUP2
0000032f: SWAP1
00000330: MSTORE
00000331: PUSH2 0x0150
00000334: DUP7
00000335: ADD
00000336: DUP8
00000337: SWAP1
00000338: MSTORE
00000339: PUSH2 0x0170
0000033c: DUP7
0000033d: ADD
0000033e: DUP5
0000033f: SWAP1
00000340: MSTORE
00000341: SWAP1
00000342: SWAP6
00000343: SWAP2
00000344: SWAP5
00000345: SWAP2
00000346: SWAP3
00000347: SWAP2
00000348: DUP7
00000349: SWAP1
0000034a: PUSH1 0x01
0000034c: SWAP1
0000034d: PUSH2 0x0190
00000350: ADD
00000351: PUSH1 0x20
00000353: PUSH1 0x40
00000355: MLOAD
00000356: PUSH1 0x20
00000358: DUP2
00000359: SUB
0000035a: SWAP1
0000035b: DUP1
0000035c: DUP5
0000035d: SUB
0000035e: SWAP1
0000035f: DUP6
00000360: GAS
00000361: STATICCALL
00000362: ISZERO
00000363: DUP1
00000364: ISZERO
00000365: PUSH2 0x0372
00000368: JUMPI
00000369: RETURNDATASIZE
0000036a: PUSH1 0x00
0000036c: DUP1
0000036d: RETURNDATACOPY
0000036e: RETURNDATASIZE
0000036f: PUSH1 0x00
00000371: REVERT
00000372: JUMPDEST
00000373: POP
00000374: POP
00000375: PUSH1 0x40
00000377: MLOAD
00000378: PUSH1 0x1f
0000037a: NOT
0000037b: ADD
0000037c: MLOAD
0000037d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000392: AND
00000393: PUSH18 0xdb5c8b030ae20308ac975898e09741e70000
000003a6: EQ
000003a7: SWAP8
000003a8: POP
000003a9: POP
000003aa: POP
000003ab: POP
000003ac: POP
000003ad: POP
000003ae: POP
000003af: POP
000003b0: SWAP5
000003b1: SWAP4
000003b2: POP
000003b3: POP
000003b4: POP
000003b5: POP
000003b6: JUMP
000003b7: JUMPDEST
000003b8: CALLER
000003b9: PUSH18 0xdb5c8b030ae20308ac975898e09741e70000
000003cc: EQ
000003cd: PUSH2 0x0436
000003d0: JUMPI
000003d1: PUSH1 0x40
000003d3: MLOAD
000003d4: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000003f5: DUP2
000003f6: MSTORE
000003f7: PUSH1 0x20
000003f9: PUSH1 0x04
000003fb: DUP3
000003fc: ADD
000003fd: MSTORE
000003fe: PUSH1 0x0d
00000400: PUSH1 0x24
00000402: DUP3
00000403: ADD
00000404: MSTORE
00000405: PUSH32 0x696e76616c6964206f776e657200000000000000000000000000000000000000
00000426: PUSH1 0x44
00000428: DUP3
00000429: ADD
0000042a: MSTORE
0000042b: PUSH1 0x64
0000042d: ADD
0000042e: PUSH1 0x40
00000430: MLOAD
00000431: DUP1
00000432: SWAP2
00000433: SUB
00000434: SWAP1
00000435: REVERT
00000436: JUMPDEST
00000437: PUSH1 0x40
00000439: MLOAD
0000043a: CALLER
0000043b: SWAP1
0000043c: SELFBALANCE
0000043d: SWAP1
0000043e: PUSH1 0x00
00000440: DUP2
00000441: DUP2
00000442: DUP2
00000443: DUP6
00000444: DUP8
00000445: GAS
00000446: CALL
00000447: SWAP3
00000448: POP
00000449: POP
0000044a: POP
0000044b: RETURNDATASIZE
0000044c: DUP1
0000044d: PUSH1 0x00
0000044f: DUP2
00000450: EQ
00000451: PUSH2 0x026e
00000454: JUMPI
00000455: PUSH1 0x40
00000457: MLOAD
00000458: SWAP2
00000459: POP
0000045a: PUSH1 0x1f
0000045c: NOT
0000045d: PUSH1 0x3f
0000045f: RETURNDATASIZE
00000460: ADD
00000461: AND
00000462: DUP3
00000463: ADD
00000464: PUSH1 0x40
00000466: MSTORE
00000467: RETURNDATASIZE
00000468: DUP3
00000469: MSTORE
0000046a: RETURNDATASIZE
0000046b: PUSH1 0x00
0000046d: PUSH1 0x20
0000046f: DUP5
00000470: ADD
00000471: RETURNDATACOPY
00000472: POP
00000473: POP
00000474: POP
00000475: JUMP
00000476: JUMPDEST
00000477: PUSH1 0x00
00000479: DUP1
0000047a: DUP6
0000047b: DUP6
0000047c: GT
0000047d: ISZERO
0000047e: PUSH2 0x0486
00000481: JUMPI
00000482: PUSH1 0x00
00000484: DUP1
00000485: REVERT
00000486: JUMPDEST
00000487: DUP4
00000488: DUP7
00000489: GT
0000048a: ISZERO
0000048b: PUSH2 0x0493
0000048e: JUMPI
0000048f: PUSH1 0x00
00000491: DUP1
00000492: REVERT
00000493: JUMPDEST
00000494: POP
00000495: POP
00000496: DUP3
00000497: ADD
00000498: SWAP4
00000499: SWAP2
0000049a: SWAP1
0000049b: SWAP3
0000049c: SUB
0000049d: SWAP2
0000049e: POP
0000049f: JUMP
000004a0: JUMPDEST
000004a1: PUSH4 0x4e487b71
000004a6: PUSH1 0xe0
000004a8: SHL
000004a9: PUSH1 0x00
000004ab: MSTORE
000004ac: PUSH1 0x41
000004ae: PUSH1 0x04
000004b0: MSTORE
000004b1: PUSH1 0x24
000004b3: PUSH1 0x00
000004b5: REVERT
000004b6: JUMPDEST
000004b7: PUSH1 0x00
000004b9: DUP1
000004ba: PUSH1 0x00
000004bc: PUSH1 0x60
000004be: DUP5
000004bf: DUP7
000004c0: SUB
000004c1: SLT
000004c2: ISZERO
000004c3: PUSH2 0x04cb
000004c6: JUMPI
000004c7: PUSH1 0x00
000004c9: DUP1
000004ca: REVERT
000004cb: JUMPDEST
000004cc: DUP4
000004cd: CALLDATALOAD
000004ce: SWAP3
000004cf: POP
000004d0: PUSH1 0x20
000004d2: DUP5
000004d3: ADD
000004d4: CALLDATALOAD
000004d5: SWAP2
000004d6: POP
000004d7: PUSH1 0x40
000004d9: DUP5
000004da: ADD
000004db: CALLDATALOAD
000004dc: PUSH8 0xffffffffffffffff
000004e5: DUP1
000004e6: DUP3
000004e7: GT
000004e8: ISZERO
000004e9: PUSH2 0x04f1
000004ec: JUMPI
000004ed: PUSH1 0x00
000004ef: DUP1
000004f0: REVERT
000004f1: JUMPDEST
000004f2: DUP2
000004f3: DUP7
000004f4: ADD
000004f5: SWAP2
000004f6: POP
000004f7: DUP7
000004f8: PUSH1 0x1f
000004fa: DUP4
000004fb: ADD
000004fc: SLT
000004fd: PUSH2 0x0505
00000500: JUMPI
00000501: PUSH1 0x00
00000503: DUP1
00000504: REVERT
00000505: JUMPDEST
00000506: DUP2
00000507: CALLDATALOAD
00000508: DUP2
00000509: DUP2
0000050a: GT
0000050b: ISZERO
0000050c: PUSH2 0x0517
0000050f: JUMPI
00000510: PUSH2 0x0517
00000513: PUSH2 0x04a0
00000516: JUMP
00000517: JUMPDEST
00000518: PUSH1 0x40
0000051a: MLOAD
0000051b: PUSH1 0x1f
0000051d: DUP3
0000051e: ADD
0000051f: PUSH1 0x1f
00000521: NOT
00000522: SWAP1
00000523: DUP2
00000524: AND
00000525: PUSH1 0x3f
00000527: ADD
00000528: AND
00000529: DUP2
0000052a: ADD
0000052b: SWAP1
0000052c: DUP4
0000052d: DUP3
0000052e: GT
0000052f: DUP2
00000530: DUP4
00000531: LT
00000532: OR
00000533: ISZERO
00000534: PUSH2 0x053f
00000537: JUMPI
00000538: PUSH2 0x053f
0000053b: PUSH2 0x04a0
0000053e: JUMP
0000053f: JUMPDEST
00000540: DUP2
00000541: PUSH1 0x40
00000543: MSTORE
00000544: DUP3
00000545: DUP2
00000546: MSTORE
00000547: DUP10
00000548: PUSH1 0x20
0000054a: DUP5
0000054b: DUP8
0000054c: ADD
0000054d: ADD
0000054e: GT
0000054f: ISZERO
00000550: PUSH2 0x0558
00000553: JUMPI
00000554: PUSH1 0x00
00000556: DUP1
00000557: REVERT
00000558: JUMPDEST
00000559: DUP3
0000055a: PUSH1 0x20
0000055c: DUP7
0000055d: ADD
0000055e: PUSH1 0x20
00000560: DUP4
00000561: ADD
00000562: CALLDATACOPY
00000563: PUSH1 0x00
00000565: PUSH1 0x20
00000567: DUP5
00000568: DUP4
00000569: ADD
0000056a: ADD
0000056b: MSTORE
0000056c: DUP1
0000056d: SWAP6
0000056e: POP
0000056f: POP
00000570: POP
00000571: POP
00000572: POP
00000573: POP
00000574: SWAP3
00000575: POP
00000576: SWAP3
00000577: POP
00000578: SWAP3
00000579: JUMP
0000057a: JUMPDEST
0000057b: DUP1
0000057c: DUP3
0000057d: ADD
0000057e: DUP1
0000057f: DUP3
00000580: GT
00000581: ISZERO
00000582: PUSH2 0x059b
00000585: JUMPI
00000586: PUSH4 0x4e487b71
0000058b: PUSH1 0xe0
0000058d: SHL
0000058e: PUSH1 0x00
00000590: MSTORE
00000591: PUSH1 0x11
00000593: PUSH1 0x04
00000595: MSTORE
00000596: PUSH1 0x24
00000598: PUSH1 0x00
0000059a: REVERT
0000059b: JUMPDEST
0000059c: SWAP3
0000059d: SWAP2
0000059e: POP
0000059f: POP
000005a0: JUMP
000005a1: JUMPDEST
000005a2: PUSH1 0x00
000005a4: DUP3
000005a5: MLOAD
000005a6: PUSH1 0x00
000005a8: JUMPDEST
000005a9: DUP2
000005aa: DUP2
000005ab: LT
000005ac: ISZERO
000005ad: PUSH2 0x05c2
000005b0: JUMPI
000005b1: PUSH1 0x20
000005b3: DUP2
000005b4: DUP7
000005b5: ADD
000005b6: DUP2
000005b7: ADD
000005b8: MLOAD
000005b9: DUP6
000005ba: DUP4
000005bb: ADD
000005bc: MSTORE
000005bd: ADD
000005be: PUSH2 0x05a8
000005c1: JUMP
000005c2: JUMPDEST
000005c3: POP
000005c4: PUSH1 0x00
000005c6: SWAP3
000005c7: ADD
000005c8: SWAP2
000005c9: DUP3
000005ca: MSTORE
000005cb: POP
000005cc: SWAP2
000005cd: SWAP1
000005ce: POP
000005cf: JUMP
000005d0: JUMPDEST
000005d1: PUSH1 0x00
000005d3: PUSH1 0x20
000005d5: DUP3
000005d6: DUP5
000005d7: SUB
000005d8: SLT
000005d9: ISZERO
000005da: PUSH2 0x05e2
000005dd: JUMPI
000005de: PUSH1 0x00
000005e0: DUP1
000005e1: REVERT
000005e2: JUMPDEST
000005e3: DUP2
000005e4: MLOAD
000005e5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005fa: DUP2
000005fb: AND
000005fc: DUP2
000005fd: EQ
000005fe: PUSH2 0x0606
00000601: JUMPI
00000602: PUSH1 0x00
00000604: DUP1
00000605: REVERT
00000606: JUMPDEST
00000607: SWAP4
00000608: SWAP3
00000609: POP
0000060a: POP
0000060b: POP
0000060c: JUMP
0000060d: INVALID
0000060e: LOG2
0000060f: PUSH5 0x6970667358
00000615: UNKNOWN(0x22)
00000616: SLT
00000617: KECCAK256
00000618: PUSH17 0x25d04dc32c94e8c858bbb799346e727d45
0000062a: UNKNOWN(0xF6)
0000062b: DUP4
0000062c: DUP2
0000062d: UNKNOWN(0xD7)
0000062e: DELEGATECALL
0000062f: UNKNOWN(0xEE)
00000630: UNKNOWN(0xD9)
00000631: UNKNOWN(0xD4)
00000632: UNKNOWN(0xBC)
00000633: DUP10
00000634: UNKNOWN(0xAE)
00000635: PUSH5 0xc5dc64736f
0000063b: PUSH13

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0x914f5aea82836f8d41e7b0a522647619abaecc346788f00683814f65a88d0681
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 12,
    "trace_id": "0x914f5aea82836f8d41e7b0a522647619abaecc346788f00683814f65a88d0681",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3ccfd60b",
            "selector": "0x3ccfd60b",
            "calldata_variants": [
                "0x3ccfd60b",
                "0x3ccfd60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1582,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 60,
            "type": "msg_sender_eq_const",
            "value": 1.9109081375301255e+43
        },
        {
            "pc": 972,
            "type": "msg_sender_eq_const",
            "value": 1.9109081375301255e+43
        }
    ],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}
medium other detector Untrusted CALL target/value reachable 45 no no
view
trace_id: 0x3604e2a6632d38c9de21926e0f79ffbeceaf258a8c603fdd18cd52e5cdcc660e
call_targets: 0x53a449540d792dc8f848d8a050e003ef63e348cc
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x3604e2a6632d38c9de21926e0f79ffbeceaf258a8c603fdd18cd52e5cdcc660e",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x53a449540d792dc8f848d8a050e003ef63e348cc"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3ccfd60b",
            "selector": "0x3ccfd60b",
            "calldata_variants": [
                "0x3ccfd60b",
                "0x3ccfd60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 166,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 380,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 501,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 4,
    "guards_detected": [
        {
            "pc": 60,
            "type": "msg_sender_eq_const",
            "value": 1.9109081375301255e+43
        },
        {
            "pc": 972,
            "type": "msg_sender_eq_const",
            "value": 1.9109081375301255e+43
        }
    ],
    "untrusted_call_count": 4
}
medium other detector ETH value transfer possible 40 no no
view
trace_id: 0x3604e2a6632d38c9de21926e0f79ffbeceaf258a8c603fdd18cd52e5cdcc660e
call_targets: 0x53a449540d792dc8f848d8a050e003ef63e348cc
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x3604e2a6632d38c9de21926e0f79ffbeceaf258a8c603fdd18cd52e5cdcc660e",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x53a449540d792dc8f848d8a050e003ef63e348cc"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3ccfd60b",
            "selector": "0x3ccfd60b",
            "calldata_variants": [
                "0x3ccfd60b",
                "0x3ccfd60b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 166,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 380,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 501,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 4,
    "guards_detected": [
        {
            "pc": 60,
            "type": "msg_sender_eq_const",
            "value": 1.9109081375301255e+43
        },
        {
            "pc": 972,
            "type": "msg_sender_eq_const",
            "value": 1.9109081375301255e+43
        }
    ]
}