TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-d95d-70fd-b601-436f90ec4143

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
29249 artifact.fetch complete 1 / 3 4 months ago
29250 tool.cast_disasm complete 1 / 3 4 months ago
73024 analysis.bundle complete 1 / 3 2 weeks ago
73025 capability.graph complete 1 / 3 2 weeks ago
73026 detector.run complete 1 / 3 2 weeks ago
73027 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: no

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
5
Total opcodes
1160
Flags
delegatecall_present heavy_ext_balance_usage
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: PUSH2 0x012e
00000009: JUMPI
0000000a: PUSH1 0x00
0000000c: DUP1
0000000d: MLOAD
0000000e: PUSH1 0x20
00000010: PUSH2 0x078b
00000013: DUP4
00000014: CODECOPY
00000015: DUP2
00000016: MLOAD
00000017: SWAP2
00000018: MSTORE
00000019: SLOAD
0000001a: PUSH1 0x01
0000001c: PUSH1 0x01
0000001e: PUSH1 0xa0
00000020: SHL
00000021: SUB
00000022: AND
00000023: CALLER
00000024: SUB
00000025: PUSH2 0x0129
00000028: JUMPI
00000029: PUSH1 0x00
0000002b: CALLDATALOAD
0000002c: PUSH1 0x01
0000002e: PUSH1 0x01
00000030: PUSH1 0xe0
00000032: SHL
00000033: SUB
00000034: NOT
00000035: AND
00000036: PUSH4 0x1b2ce7f3
0000003b: PUSH1 0xe1
0000003d: SHL
0000003e: DUP2
0000003f: SUB
00000040: PUSH2 0x0054
00000043: JUMPI
00000044: POP
00000045: PUSH2 0x004c
00000048: PUSH2 0x03d1
0000004b: JUMP
0000004c: JUMPDEST
0000004d: PUSH1 0x20
0000004f: DUP2
00000050: MLOAD
00000051: SWAP2
00000052: ADD
00000053: RETURN
00000054: JUMPDEST
00000055: PUSH4 0x278f7943
0000005a: PUSH1 0xe1
0000005c: SHL
0000005d: DUP2
0000005e: SUB
0000005f: PUSH2 0x0070
00000062: JUMPI
00000063: POP
00000064: PUSH2 0x006b
00000067: PUSH2 0x0573
0000006a: JUMP
0000006b: JUMPDEST
0000006c: PUSH2 0x004c
0000006f: JUMP
00000070: JUMPDEST
00000071: PUSH4 0x08f28397
00000076: PUSH1 0xe4
00000078: SHL
00000079: DUP2
0000007a: SUB
0000007b: PUSH2 0x0087
0000007e: JUMPI
0000007f: POP
00000080: PUSH2 0x006b
00000083: PUSH2 0x02fb
00000086: JUMP
00000087: JUMPDEST
00000088: PUSH4 0x03e14691
0000008d: PUSH1 0xe6
0000008f: SHL
00000090: DUP2
00000091: SUB
00000092: PUSH2 0x009e
00000095: JUMPI
00000096: POP
00000097: PUSH2 0x006b
0000009a: PUSH2 0x0220
0000009d: JUMP
0000009e: JUMPDEST
0000009f: PUSH4 0x5c60da1b
000000a4: PUSH1 0xe0
000000a6: SHL
000000a7: SUB
000000a8: PUSH2 0x00b3
000000ab: JUMPI
000000ac: PUSH2 0x006b
000000af: PUSH2 0x0259
000000b2: JUMP
000000b3: JUMPDEST
000000b4: PUSH1 0x40
000000b6: MLOAD
000000b7: PUSH3 0x461bcd
000000bb: PUSH1 0xe5
000000bd: SHL
000000be: DUP2
000000bf: MSTORE
000000c0: PUSH1 0x20
000000c2: PUSH1 0x04
000000c4: DUP3
000000c5: ADD
000000c6: MSTORE
000000c7: PUSH1 0x42
000000c9: PUSH1 0x24
000000cb: DUP3
000000cc: ADD
000000cd: MSTORE
000000ce: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
000000ef: PUSH1 0x44
000000f1: DUP3
000000f2: ADD
000000f3: MSTORE
000000f4: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
00000115: PUSH1 0x64
00000117: DUP3
00000118: ADD
00000119: MSTORE
0000011a: PUSH2 0x195d
0000011d: PUSH1 0xf2
0000011f: SHL
00000120: PUSH1 0x84
00000122: DUP3
00000123: ADD
00000124: MSTORE
00000125: PUSH1 0xa4
00000127: SWAP1
00000128: REVERT
00000129: JUMPDEST
0000012a: PUSH2 0x0171
0000012d: JUMP
0000012e: JUMPDEST
0000012f: PUSH1 0x00
00000131: DUP1
00000132: MLOAD
00000133: PUSH1 0x20
00000135: PUSH2 0x078b
00000138: DUP4
00000139: CODECOPY
0000013a: DUP2
0000013b: MLOAD
0000013c: SWAP2
0000013d: MSTORE
0000013e: SLOAD
0000013f: PUSH1 0x01
00000141: PUSH1 0x01
00000143: PUSH1 0xa0
00000145: SHL
00000146: SUB
00000147: AND
00000148: CALLER
00000149: SUB
0000014a: PUSH2 0x0171
0000014d: JUMPI
0000014e: PUSH1 0x00
00000150: CALLDATALOAD
00000151: PUSH1 0x01
00000153: PUSH1 0x01
00000155: PUSH1 0xe0
00000157: SHL
00000158: SUB
00000159: NOT
0000015a: AND
0000015b: PUSH4 0x1b2ce7f3
00000160: PUSH1 0xe1
00000162: SHL
00000163: DUP2
00000164: SUB
00000165: PUSH2 0x0054
00000168: JUMPI
00000169: POP
0000016a: PUSH2 0x004c
0000016d: PUSH2 0x03d1
00000170: JUMP
00000171: JUMPDEST
00000172: PUSH1 0x00
00000174: DUP1
00000175: MLOAD
00000176: PUSH1 0x20
00000178: PUSH2 0x07ab
0000017b: DUP4
0000017c: CODECOPY
0000017d: DUP2
0000017e: MLOAD
0000017f: SWAP2
00000180: MSTORE
00000181: SLOAD
00000182: PUSH1 0x00
00000184: SWAP1
00000185: DUP2
00000186: SWAP1
00000187: DUP2
00000188: SWAP1
00000189: PUSH1 0x01
0000018b: PUSH1 0x01
0000018d: PUSH1 0xa0
0000018f: SHL
00000190: SUB
00000191: AND
00000192: CALLDATASIZE
00000193: DUP3
00000194: DUP1
00000195: CALLDATACOPY
00000196: DUP2
00000197: CALLDATASIZE
00000198: SWAP2
00000199: GAS
0000019a: DELEGATECALL
0000019b: RETURNDATASIZE
0000019c: DUP3
0000019d: DUP1
0000019e: RETURNDATACOPY
0000019f: ISZERO
000001a0: PUSH2 0x01a7
000001a3: JUMPI
000001a4: RETURNDATASIZE
000001a5: SWAP1
000001a6: RETURN
000001a7: JUMPDEST
000001a8: RETURNDATASIZE
000001a9: SWAP1
000001aa: REVERT
000001ab: JUMPDEST
000001ac: PUSH4 0x4e487b71
000001b1: PUSH1 0xe0
000001b3: SHL
000001b4: PUSH1 0x00
000001b6: MSTORE
000001b7: PUSH1 0x41
000001b9: PUSH1 0x04
000001bb: MSTORE
000001bc: PUSH1 0x24
000001be: PUSH1 0x00
000001c0: REVERT
000001c1: JUMPDEST
000001c2: PUSH1 0x40
000001c4: DUP2
000001c5: ADD
000001c6: SWAP1
000001c7: DUP2
000001c8: LT
000001c9: PUSH8 0xffffffffffffffff
000001d2: DUP3
000001d3: GT
000001d4: OR
000001d5: PUSH2 0x01dd
000001d8: JUMPI
000001d9: PUSH1 0x40
000001db: MSTORE
000001dc: JUMP
000001dd: JUMPDEST
000001de: PUSH2 0x01ab
000001e1: JUMP
000001e2: JUMPDEST
000001e3: PUSH1 0x20
000001e5: DUP2
000001e6: ADD
000001e7: SWAP1
000001e8: DUP2
000001e9: LT
000001ea: PUSH8 0xffffffffffffffff
000001f3: DUP3
000001f4: GT
000001f5: OR
000001f6: PUSH2 0x01dd
000001f9: JUMPI
000001fa: PUSH1 0x40
000001fc: MSTORE
000001fd: JUMP
000001fe: JUMPDEST
000001ff: SWAP1
00000200: PUSH1 0x1f
00000202: DUP1
00000203: NOT
00000204: SWAP2
00000205: ADD
00000206: AND
00000207: DUP2
00000208: ADD
00000209: SWAP1
0000020a: DUP2
0000020b: LT
0000020c: PUSH8 0xffffffffffffffff
00000215: DUP3
00000216: GT
00000217: OR
00000218: PUSH2 0x01dd
0000021b: JUMPI
0000021c: PUSH1 0x40
0000021e: MSTORE
0000021f: JUMP
00000220: JUMPDEST
00000221: PUSH2 0x0228
00000224: PUSH2 0x0604
00000227: JUMP
00000228: JUMPDEST
00000229: PUSH1 0x01
0000022b: DUP1
0000022c: PUSH1 0xa0
0000022e: SHL
0000022f: SUB
00000230: PUSH1 0x00
00000232: DUP1
00000233: MLOAD
00000234: PUSH1 0x20
00000236: PUSH2 0x078b
00000239: DUP4
0000023a: CODECOPY
0000023b: DUP2
0000023c: MLOAD
0000023d: SWAP2
0000023e: MSTORE
0000023f: SLOAD
00000240: AND
00000241: PUSH1 0x40
00000243: MLOAD
00000244: SWAP1
00000245: PUSH1 0x20
00000247: DUP3
00000248: ADD
00000249: MSTORE
0000024a: PUSH1 0x20
0000024c: DUP2
0000024d: MSTORE
0000024e: PUSH2 0x0256
00000251: DUP2
00000252: PUSH2 0x01c1
00000255: JUMP
00000256: JUMPDEST
00000257: SWAP1
00000258: JUMP
00000259: JUMPDEST
0000025a: PUSH2 0x0261
0000025d: PUSH2 0x0604
00000260: JUMP
00000261: JUMPDEST
00000262: PUSH1 0x01
00000264: DUP1
00000265: PUSH1 0xa0
00000267: SHL
00000268: SUB
00000269: PUSH1 0x00
0000026b: DUP1
0000026c: MLOAD
0000026d: PUSH1 0x20
0000026f: PUSH2 0x07ab
00000272: DUP4
00000273: CODECOPY
00000274: DUP2
00000275: MLOAD
00000276: SWAP2
00000277: MSTORE
00000278: SLOAD
00000279: AND
0000027a: PUSH1 0x40
0000027c: MLOAD
0000027d: SWAP1
0000027e: PUSH1 0x20
00000280: DUP3
00000281: ADD
00000282: MSTORE
00000283: PUSH1 0x20
00000285: DUP2
00000286: MSTORE
00000287: PUSH2 0x0256
0000028a: DUP2
0000028b: PUSH2 0x01c1
0000028e: JUMP
0000028f: JUMPDEST
00000290: PUSH1 0x04
00000292: CALLDATALOAD
00000293: SWAP1
00000294: PUSH1 0x01
00000296: PUSH1 0x01
00000298: PUSH1 0xa0
0000029a: SHL
0000029b: SUB
0000029c: DUP3
0000029d: AND
0000029e: DUP3
0000029f: SUB
000002a0: PUSH2 0x02a5
000002a3: JUMPI
000002a4: JUMP
000002a5: JUMPDEST
000002a6: PUSH1 0x00
000002a8: DUP1
000002a9: REVERT
000002aa: JUMPDEST
000002ab: PUSH1 0x20
000002ad: SWAP1
000002ae: PUSH1 0x03
000002b0: NOT
000002b1: ADD
000002b2: SLT
000002b3: PUSH2 0x02a5
000002b6: JUMPI
000002b7: PUSH1 0x04
000002b9: CALLDATALOAD
000002ba: PUSH1 0x01
000002bc: PUSH1 0x01
000002be: PUSH1 0xa0
000002c0: SHL
000002c1: SUB
000002c2: DUP2
000002c3: AND
000002c4: DUP2
000002c5: SUB
000002c6: PUSH2 0x02a5
000002c9: JUMPI
000002ca: SWAP1
000002cb: JUMP
000002cc: JUMPDEST
000002cd: PUSH8 0xffffffffffffffff
000002d6: DUP2
000002d7: GT
000002d8: PUSH2 0x01dd
000002db: JUMPI
000002dc: PUSH1 0x1f
000002de: ADD
000002df: PUSH1 0x1f
000002e1: NOT
000002e2: AND
000002e3: PUSH1 0x20
000002e5: ADD
000002e6: SWAP1
000002e7: JUMP
000002e8: JUMPDEST
000002e9: PUSH1 0x40
000002eb: MLOAD
000002ec: SWAP1
000002ed: PUSH2 0x02f5
000002f0: DUP3
000002f1: PUSH2 0x01e2
000002f4: JUMP
000002f5: JUMPDEST
000002f6: PUSH1 0x00
000002f8: DUP3
000002f9: MSTORE
000002fa: JUMP
000002fb: JUMPDEST
000002fc: PUSH2 0x0303
000002ff: PUSH2 0x0604
00000302: JUMP
00000303: JUMPDEST
00000304: CALLDATASIZE
00000305: PUSH1 0x04
00000307: GT
00000308: PUSH2 0x02a5
0000030b: JUMPI
0000030c: PUSH1 0x01
0000030e: PUSH1 0x01
00000310: PUSH1 0xa0
00000312: SHL
00000313: SUB
00000314: DUP1
00000315: PUSH2 0x031d
00000318: CALLDATASIZE
00000319: PUSH2 0x02aa
0000031c: JUMP
0000031d: JUMPDEST
0000031e: AND
0000031f: PUSH1 0x00
00000321: DUP1
00000322: MLOAD
00000323: PUSH1 0x20
00000325: PUSH2 0x078b
00000328: DUP4
00000329: CODECOPY
0000032a: DUP2
0000032b: MLOAD
0000032c: SWAP2
0000032d: MSTORE
0000032e: SWAP2
0000032f: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
00000350: PUSH1 0x40
00000352: DUP5
00000353: SLOAD
00000354: SWAP3
00000355: DUP2
00000356: MLOAD
00000357: SWAP1
00000358: DUP5
00000359: AND
0000035a: DUP2
0000035b: MSTORE
0000035c: DUP5
0000035d: PUSH1 0x20
0000035f: DUP3
00000360: ADD
00000361: MSTORE
00000362: LOG1
00000363: DUP2
00000364: ISZERO
00000365: PUSH2 0x037d
00000368: JUMPI
00000369: PUSH1 0x01
0000036b: PUSH1 0x01
0000036d: PUSH1 0xa0
0000036f: SHL
00000370: SUB
00000371: NOT
00000372: AND
00000373: OR
00000374: SWAP1
00000375: SSTORE
00000376: PUSH2 0x0256
00000379: PUSH2 0x02e8
0000037c: JUMP
0000037d: JUMPDEST
0000037e: PUSH1 0x40
00000380: MLOAD
00000381: PUSH3 0x461bcd
00000385: PUSH1 0xe5
00000387: SHL
00000388: DUP2
00000389: MSTORE
0000038a: PUSH1 0x20
0000038c: PUSH1 0x04
0000038e: DUP3
0000038f: ADD
00000390: MSTORE
00000391: PUSH1 0x26
00000393: PUSH1 0x24
00000395: DUP3
00000396: ADD
00000397: MSTORE
00000398: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
000003b9: PUSH1 0x44
000003bb: DUP3
000003bc: ADD
000003bd: MSTORE
000003be: PUSH6 0x646472657373
000003c5: PUSH1 0xd0
000003c7: SHL
000003c8: PUSH1 0x64
000003ca: DUP3
000003cb: ADD
000003cc: MSTORE
000003cd: PUSH1 0x84
000003cf: SWAP1
000003d0: REVERT
000003d1: JUMPDEST
000003d2: PUSH2 0x03d9
000003d5: PUSH2 0x0604
000003d8: JUMP
000003d9: JUMPDEST
000003da: CALLDATASIZE
000003db: PUSH1 0x04
000003dd: GT
000003de: PUSH2 0x02a5
000003e1: JUMPI
000003e2: PUSH1 0x01
000003e4: PUSH1 0x01
000003e6: PUSH1 0xa0
000003e8: SHL
000003e9: SUB
000003ea: PUSH2 0x03f2
000003ed: CALLDATASIZE
000003ee: PUSH2 0x02aa
000003f1: JUMP
000003f2: JUMPDEST
000003f3: AND
000003f4: PUSH1 0x40
000003f6: MLOAD
000003f7: SWAP1
000003f8: PUSH2 0x0400
000003fb: DUP3
000003fc: PUSH2 0x01e2
000003ff: JUMP
00000400: JUMPDEST
00000401: PUSH1 0x00
00000403: DUP3
00000404: MSTORE
00000405: DUP1
00000406: EXTCODESIZE
00000407: ISZERO
00000408: PUSH2 0x0497
0000040b: JUMPI
0000040c: PUSH1 0x00
0000040e: DUP1
0000040f: MLOAD
00000410: PUSH1 0x20
00000412: PUSH2 0x07ab
00000415: DUP4
00000416: CODECOPY
00000417: DUP2
00000418: MLOAD
00000419: SWAP2
0000041a: MSTORE
0000041b: DUP1
0000041c: SLOAD
0000041d: PUSH1 0x01
0000041f: PUSH1 0x01
00000421: PUSH1 0xa0
00000423: SHL
00000424: SUB
00000425: NOT
00000426: AND
00000427: DUP3
00000428: OR
00000429: SWAP1
0000042a: SSTORE
0000042b: DUP1
0000042c: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
0000044d: PUSH1 0x00
0000044f: DUP1
00000450: LOG2
00000451: DUP2
00000452: MLOAD
00000453: ISZERO
00000454: DUP1
00000455: ISZERO
00000456: SWAP1
00000457: PUSH2 0x048f
0000045a: JUMPI
0000045b: JUMPDEST
0000045c: PUSH2 0x0475
0000045f: JUMPI
00000460: JUMPDEST
00000461: POP
00000462: POP
00000463: PUSH1 0x40
00000465: MLOAD
00000466: PUSH2 0x046e
00000469: DUP2
0000046a: PUSH2 0x01e2
0000046d: JUMP
0000046e: JUMPDEST
0000046f: PUSH1 0x00
00000471: DUP2
00000472: MSTORE
00000473: SWAP1
00000474: JUMP
00000475: JUMPDEST
00000476: PUSH2 0x0487
00000479: SWAP2
0000047a: PUSH2 0x0481
0000047d: PUSH2 0x060b
00000480: JUMP
00000481: JUMPDEST
00000482: SWAP2
00000483: PUSH2 0x0665
00000486: JUMP
00000487: JUMPDEST
00000488: POP
00000489: CODESIZE
0000048a: DUP1
0000048b: PUSH2 0x0460
0000048e: JUMP
0000048f: JUMPDEST
00000490: POP
00000491: PUSH1 0x00
00000493: PUSH2 0x045b
00000496: JUMP
00000497: JUMPDEST
00000498: PUSH1 0x40
0000049a: MLOAD
0000049b: PUSH3 0x461bcd
0000049f: PUSH1 0xe5
000004a1: SHL
000004a2: DUP2
000004a3: MSTORE
000004a4: PUSH1 0x20
000004a6: PUSH1 0x04
000004a8: DUP3
000004a9: ADD
000004aa: MSTORE
000004ab: PUSH1 0x2d
000004ad: PUSH1 0x24
000004af: DUP3
000004b0: ADD
000004b1: MSTORE
000004b2: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
000004d3: PUSH1 0x44
000004d5: DUP3
000004d6: ADD
000004d7: MSTORE
000004d8: PUSH13 0x1bdd08184818dbdb9d1c9858dd
000004e6: PUSH1 0x9a
000004e8: SHL
000004e9: PUSH1 0x64
000004eb: DUP3
000004ec: ADD
000004ed: MSTORE
000004ee: PUSH1 0x84
000004f0: SWAP1
000004f1: REVERT
000004f2: JUMPDEST
000004f3: DUP1
000004f4: EXTCODESIZE
000004f5: ISZERO
000004f6: PUSH2 0x0497
000004f9: JUMPI
000004fa: PUSH1 0x00
000004fc: DUP1
000004fd: MLOAD
000004fe: PUSH1 0x20
00000500: PUSH2 0x07ab
00000503: DUP4
00000504: CODECOPY
00000505: DUP2
00000506: MLOAD
00000507: SWAP2
00000508: MSTORE
00000509: DUP1
0000050a: SLOAD
0000050b: PUSH1 0x01
0000050d: PUSH1 0x01
0000050f: PUSH1 0xa0
00000511: SHL
00000512: SUB
00000513: NOT
00000514: AND
00000515: PUSH1 0x01
00000517: PUSH1 0x01
00000519: PUSH1 0xa0
0000051b: SHL
0000051c: SUB
0000051d: DUP4
0000051e: AND
0000051f: SWAP1
00000520: DUP2
00000521: OR
00000522: SWAP1
00000523: SWAP2
00000524: SSTORE
00000525: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
00000546: PUSH1 0x00
00000548: DUP1
00000549: LOG2
0000054a: DUP2
0000054b: MLOAD
0000054c: ISZERO
0000054d: DUP1
0000054e: ISZERO
0000054f: SWAP1
00000550: PUSH2 0x056b
00000553: JUMPI
00000554: JUMPDEST
00000555: PUSH2 0x055c
00000558: JUMPI
00000559: POP
0000055a: POP
0000055b: JUMP
0000055c: JUMPDEST
0000055d: PUSH2 0x0568
00000560: SWAP2
00000561: PUSH2 0x0481
00000564: PUSH2 0x060b
00000567: JUMP
00000568: JUMPDEST
00000569: POP
0000056a: JUMP
0000056b: JUMPDEST
0000056c: POP
0000056d: PUSH1 0x01
0000056f: PUSH2 0x0554
00000572: JUMP
00000573: JUMPDEST
00000574: CALLDATASIZE
00000575: PUSH1 0x04
00000577: GT
00000578: PUSH2 0x02a5
0000057b: JUMPI
0000057c: PUSH1 0x40
0000057e: CALLDATASIZE
0000057f: PUSH1 0x03
00000581: NOT
00000582: ADD
00000583: SLT
00000584: PUSH2 0x02a5
00000587: JUMPI
00000588: PUSH2 0x058f
0000058b: PUSH2 0x028f
0000058e: JUMP
0000058f: JUMPDEST
00000590: PUSH1 0x24
00000592: CALLDATALOAD
00000593: SWAP1
00000594: PUSH8 0xffffffffffffffff
0000059d: DUP3
0000059e: GT
0000059f: PUSH2 0x02a5
000005a2: JUMPI
000005a3: CALLDATASIZE
000005a4: PUSH1 0x23
000005a6: DUP4
000005a7: ADD
000005a8: SLT
000005a9: ISZERO
000005aa: PUSH2 0x02a5
000005ad: JUMPI
000005ae: DUP2
000005af: PUSH1 0x04
000005b1: ADD
000005b2: CALLDATALOAD
000005b3: SWAP1
000005b4: PUSH2 0x05bc
000005b7: DUP3
000005b8: PUSH2 0x02cc
000005bb: JUMP
000005bc: JUMPDEST
000005bd: SWAP2
000005be: PUSH2 0x05ca
000005c1: PUSH1 0x40
000005c3: MLOAD
000005c4: SWAP4
000005c5: DUP5
000005c6: PUSH2 0x01fe
000005c9: JUMP
000005ca: JUMPDEST
000005cb: DUP1
000005cc: DUP4
000005cd: MSTORE
000005ce: CALLDATASIZE
000005cf: PUSH1 0x24
000005d1: DUP3
000005d2: DUP7
000005d3: ADD
000005d4: ADD
000005d5: GT
000005d6: PUSH2 0x02a5
000005d9: JUMPI
000005da: PUSH1 0x20
000005dc: DUP2
000005dd: PUSH1 0x00
000005df: SWAP3
000005e0: PUSH1 0x24
000005e2: PUSH2 0x05fc
000005e5: SWAP8
000005e6: ADD
000005e7: DUP4
000005e8: DUP8
000005e9: ADD
000005ea: CALLDATACOPY
000005eb: DUP5
000005ec: ADD
000005ed: ADD
000005ee: MSTORE
000005ef: PUSH1 0x01
000005f1: PUSH1 0x01
000005f3: PUSH1 0xa0
000005f5: SHL
000005f6: SUB
000005f7: AND
000005f8: PUSH2 0x04f2
000005fb: JUMP
000005fc: JUMPDEST
000005fd: PUSH2 0x0256
00000600: PUSH2 0x02e8
00000603: JUMP
00000604: JUMPDEST
00000605: CALLVALUE
00000606: PUSH2 0x02a5
00000609: JUMPI
0000060a: JUMP
0000060b: JUMPDEST
0000060c: PUSH1 0x40
0000060e: MLOAD
0000060f: SWAP1
00000610: PUSH1 0x60
00000612: DUP3
00000613: ADD
00000614: DUP3
00000615: DUP2
00000616: LT
00000617: PUSH8 0xffffffffffffffff
00000620: DUP3
00000621: GT
00000622: OR
00000623: PUSH2 0x01dd
00000626: JUMPI
00000627: PUSH1 0x40
00000629: MSTORE
0000062a: PUSH1 0x27
0000062c: DUP3
0000062d: MSTORE
0000062e: PUSH7 0x0819985a5b1959
00000636: PUSH1 0xca
00000638: SHL
00000639: PUSH1 0x40
0000063b: DUP4
0000063c: PUSH32 0x416464726573733a206c6f772d6c6576656c2064656c65676174652063616c6c
0000065d: PUSH1 0x20
0000065f: DUP3
00000660: ADD
00000661: MSTORE
00000662: ADD
00000663: MSTORE
00000664: JUMP
00000665: JUMPDEST
00000666: PUSH1 0x00
00000668: DUP1
00000669: PUSH2 0x0256
0000066c: SWAP5
0000066d: SWAP4
0000066e: PUSH1 0x20
00000670: DUP2
00000671: MLOAD
00000672: SWAP2
00000673: ADD
00000674: DUP5
00000675: GAS
00000676: DELEGATECALL
00000677: RETURNDATASIZE
00000678: ISZERO
00000679: PUSH2 0x06a4
0000067c: JUMPI
0000067d: RETURNDATASIZE
0000067e: SWAP2
0000067f: PUSH2 0x0687
00000682: DUP4
00000683: PUSH2 0x02cc
00000686: JUMP
00000687: JUMPDEST
00000688: SWAP3
00000689: PUSH2 0x0695
0000068c: PUSH1 0x40
0000068e: MLOAD
0000068f: SWAP5
00000690: DUP6
00000691: PUSH2 0x01fe
00000694: JUMP
00000695: JUMPDEST
00000696: DUP4
00000697: MSTORE
00000698: RETURNDATASIZE
00000699: PUSH1 0x00
0000069b: PUSH1 0x20
0000069d: DUP6
0000069e: ADD
0000069f: RETURNDATACOPY
000006a0: PUSH2 0x06f8
000006a3: JUMP
000006a4: JUMPDEST
000006a5: PUSH1 0x60
000006a7: SWAP2
000006a8: PUSH2 0x06f8
000006ab: JUMP
000006ac: JUMPDEST
000006ad: ISZERO
000006ae: PUSH2 0x06b3
000006b1: JUMPI
000006b2: JUMP
000006b3: JUMPDEST
000006b4: PUSH1 0x40
000006b6: MLOAD
000006b7: PUSH3 0x461bcd
000006bb: PUSH1 0xe5
000006bd: SHL
000006be: DUP2
000006bf: MSTORE
000006c0: PUSH1 0x20
000006c2: PUSH1 0x04
000006c4: DUP3
000006c5: ADD
000006c6: MSTORE
000006c7: PUSH1 0x1d
000006c9: PUSH1 0x24
000006cb: DUP3
000006cc: ADD
000006cd: MSTORE
000006ce: PUSH32 0x416464726573733a2063616c6c20746f206e6f6e2d636f6e7472616374000000
000006ef: PUSH1 0x44
000006f1: DUP3
000006f2: ADD
000006f3: MSTORE
000006f4: PUSH1 0x64
000006f6: SWAP1
000006f7: REVERT
000006f8: JUMPDEST
000006f9: SWAP2
000006fa: SWAP3
000006fb: SWAP1
000006fc: ISZERO
000006fd: PUSH2 0x0718
00000700: JUMPI
00000701: POP
00000702: DUP2
00000703: MLOAD
00000704: ISZERO
00000705: PUSH2 0x070c
00000708: JUMPI
00000709: POP
0000070a: SWAP1
0000070b: JUMP
0000070c: JUMPDEST
0000070d: PUSH2 0x0256
00000710: SWAP1
00000711: EXTCODESIZE
00000712: ISZERO
00000713: ISZERO
00000714: PUSH2 0x06ac
00000717: JUMP
00000718: JUMPDEST
00000719: DUP3
0000071a: MLOAD
0000071b: SWAP1
0000071c: SWAP2
0000071d: POP
0000071e: ISZERO
0000071f: PUSH2 0x072b
00000722: JUMPI
00000723: POP
00000724: DUP1
00000725: MLOAD
00000726: SWAP1
00000727: PUSH1 0x20
00000729: ADD
0000072a: REVERT
0000072b: JUMPDEST
0000072c: PUSH1 0x40
0000072e: MLOAD
0000072f: SWAP1
00000730: PUSH3 0x461bcd
00000734: PUSH1 0xe5
00000736: SHL
00000737: DUP3
00000738: MSTORE
00000739: DUP2
0000073a: PUSH1 0x20
0000073c: DUP1
0000073d: PUSH1 0x04
0000073f: DUP4
00000740: ADD
00000741: MSTORE
00000742: DUP3
00000743: MLOAD
00000744: SWAP1
00000745: DUP2
00000746: PUSH1 0x24
00000748: DUP5
00000749: ADD
0000074a: MSTORE
0000074b: PUSH1 0x00
0000074d: SWAP4
0000074e: JUMPDEST
0000074f: DUP3
00000750: DUP6
00000751: LT
00000752: PUSH2 0x0771
00000755: JUMPI
00000756: POP
00000757: POP
00000758: PUSH1 0x44
0000075a: SWAP3
0000075b: POP
0000075c: PUSH1 0x00
0000075e: DUP4
0000075f: DUP3
00000760: DUP5
00000761: ADD
00000762: ADD
00000763: MSTORE
00000764: PUSH1 0x1f
00000766: DUP1
00000767: NOT
00000768: SWAP2
00000769: ADD
0000076a: AND
0000076b: DUP2
0000076c: ADD
0000076d: SUB
0000076e: ADD
0000076f: SWAP1
00000770: REVERT
00000771: JUMPDEST
00000772: DUP5
00000773: DUP2
00000774: ADD
00000775: DUP3
00000776: ADD
00000777: MLOAD
00000778: DUP7
00000779: DUP7
0000077a: ADD
0000077b: PUSH1 0x44
0000077d: ADD
0000077e: MSTORE
0000077f: SWAP4
00000780: DUP2
00000781: ADD
00000782: SWAP4
00000783: DUP6
00000784: SWAP4
00000785: POP
00000786: PUSH2 0x074e
00000789: JUMP
0000078a: INVALID
0000078b: UNKNOWN(0xB5)
0000078c: BALANCE
0000078d: UNKNOWN(0x27)
0000078e: PUSH9 0x4a568b3173ae13b9f8
00000798: UNKNOWN(0xA6)
00000799: ADD
0000079a: PUSH15 0x243e63b6e8ee1178d6a717850b5d61
000007aa: SUB
000007ab: CALLDATASIZE
000007ac: ADDMOD
000007ad: SWAP5
000007ae: LOG1
000007af: EXTCODESIZE
000007b0: LOG1
000007b1: LOG3
000007b2: UNKNOWN(0x21)
000007b3: MOD
000007b4: PUSH8 0xc828492db98dca3e
000007bd: KECCAK256
000007be: PUSH23 0xcc3735a920a3ca505d382bbca264697066735822122038
000007d6: DUP7
000007d7: CALLDATALOAD
000007d8: ORIGIN
000007d9: UNKNOWN(0x4E)
000007da: UNKNOWN(0x22)
000007db: UNKNOWN(0xE3)
000007dc: UNKNOWN(0x4C)
000007dd: UNKNOWN(0xBF)
000007de: UNKNOWN(0xDD)
000007df: DUP16
000007e0: CALLDATALOAD
000007e1: PUSH1 0xc1
000007e3: CHAINID
000007e4: UNKNOWN(0xDD)
000007e5: PC
000007e6: UNKNOWN(0xCB)
000007e7: UNKNOWN(0xAC)
000007e8: UNKNOWN(0xD5)
000007e9: SWAP8
000007ea: EQ
000007eb: GASLIMIT
000007ec: UNKNOWN(0xD9)
000007ed: DUP16
000007ee: CLZ
000007ef: SHL
000007f0: SHL
000007f1: UNKNOWN(0xBE)
000007f2: SLOAD
000007f3: UNKNOWN(0xCB)
000007f4: MULMOD
000007f5: PUSH5 0x736f6c6343
000007fb: STOP
000007fc: ADDMOD
000007fd: SGT
000007fe: STOP
000007ff: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0x2e13a61c5ac71f8dd384a3a9f5494e3cde707cab8ebdca50ef14c0e47b795444
call_targets: 0x7766bb54720d674dde2c69f0a59bb073e93449cd
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x2e13a61c5ac71f8dd384a3a9f5494e3cde707cab8ebdca50ef14c0e47b795444",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x7766bb54720d674dde2c69f0a59bb073e93449cd"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x",
            "selector": "fallback",
            "calldata_variants": [
                "0x"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 410,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1654,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 2008,
            "type": "tx_origin_used"
        }
    ],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}
high auth detector Authorization based on tx.origin 70 no
view
validation_json
{
    "reason": "missing sink mapping",
    "status": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x",
            "selector": "fallback",
            "calldata_variants": [
                "0x"
            ]
        }
    ]
}
evidence_json
{
    "guards_detected": [
        {
            "pc": 2008,
            "type": "tx_origin_used"
        }
    ]
}