019b477e-d9d2-73ad-b17b-1c1bd011bcf4
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 29353 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 29354 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 73232 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 73233 | capability.graph | complete | 1 / 3 | 1 week ago |
| 73234 | detector.run | complete | 1 / 3 | 1 week ago |
| 73235 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLER 00000006: PUSH32 0x0000000000000000000000009ed617ab46318e58281cc6a0314ac2559d327c7b 00000027: PUSH1 0x01 00000029: PUSH1 0x01 0000002b: PUSH1 0xa0 0000002d: SHL 0000002e: SUB 0000002f: AND 00000030: SUB 00000031: PUSH2 0x0066 00000034: JUMPI 00000035: PUSH0 00000036: CALLDATALOAD 00000037: PUSH1 0x01 00000039: PUSH1 0x01 0000003b: PUSH1 0xe0 0000003d: SHL 0000003e: SUB 0000003f: NOT 00000040: AND 00000041: PUSH4 0x278f7943 00000046: PUSH1 0xe1 00000048: SHL 00000049: EQ 0000004a: PUSH2 0x005c 0000004d: JUMPI 0000004e: PUSH4 0x34ad5dbb 00000053: PUSH1 0xe2 00000055: SHL 00000056: PUSH0 00000057: MSTORE 00000058: PUSH1 0x04 0000005a: PUSH0 0000005b: REVERT 0000005c: JUMPDEST 0000005d: PUSH2 0x0064 00000060: PUSH2 0x010a 00000063: JUMP 00000064: JUMPDEST 00000065: STOP 00000066: JUMPDEST 00000067: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000088: SLOAD 00000089: PUSH0 0000008a: SWAP1 0000008b: DUP2 0000008c: SWAP1 0000008d: PUSH1 0x01 0000008f: PUSH1 0x01 00000091: PUSH1 0xa0 00000093: SHL 00000094: SUB 00000095: AND 00000096: CALLDATASIZE 00000097: DUP3 00000098: DUP1 00000099: CALLDATACOPY 0000009a: DUP2 0000009b: CALLDATASIZE 0000009c: SWAP2 0000009d: GAS 0000009e: DELEGATECALL 0000009f: RETURNDATASIZE 000000a0: PUSH0 000000a1: DUP1 000000a2: RETURNDATACOPY 000000a3: ISZERO 000000a4: PUSH2 0x00ab 000000a7: JUMPI 000000a8: RETURNDATASIZE 000000a9: PUSH0 000000aa: RETURN 000000ab: JUMPDEST 000000ac: RETURNDATASIZE 000000ad: PUSH0 000000ae: REVERT 000000af: JUMPDEST 000000b0: PUSH4 0x4e487b71 000000b5: PUSH1 0xe0 000000b7: SHL 000000b8: PUSH0 000000b9: MSTORE 000000ba: PUSH1 0x41 000000bc: PUSH1 0x04 000000be: MSTORE 000000bf: PUSH1 0x24 000000c1: PUSH0 000000c2: REVERT 000000c3: JUMPDEST 000000c4: PUSH1 0x40 000000c6: MLOAD 000000c7: SWAP2 000000c8: SWAP1 000000c9: PUSH1 0x1f 000000cb: ADD 000000cc: PUSH1 0x1f 000000ce: NOT 000000cf: AND 000000d0: DUP3 000000d1: ADD 000000d2: PUSH8 0xffffffffffffffff 000000db: DUP2 000000dc: GT 000000dd: DUP4 000000de: DUP3 000000df: LT 000000e0: OR 000000e1: PUSH2 0x00e9 000000e4: JUMPI 000000e5: PUSH1 0x40 000000e7: MSTORE 000000e8: JUMP 000000e9: JUMPDEST 000000ea: PUSH2 0x00af 000000ed: JUMP 000000ee: JUMPDEST 000000ef: PUSH8 0xffffffffffffffff 000000f8: DUP2 000000f9: GT 000000fa: PUSH2 0x00e9 000000fd: JUMPI 000000fe: PUSH1 0x1f 00000100: ADD 00000101: PUSH1 0x1f 00000103: NOT 00000104: AND 00000105: PUSH1 0x20 00000107: ADD 00000108: SWAP1 00000109: JUMP 0000010a: JUMPDEST 0000010b: CALLDATASIZE 0000010c: PUSH1 0x04 0000010e: GT 0000010f: PUSH2 0x0193 00000112: JUMPI 00000113: PUSH1 0x40 00000115: CALLDATASIZE 00000116: PUSH1 0x03 00000118: NOT 00000119: ADD 0000011a: SLT 0000011b: PUSH2 0x0193 0000011e: JUMPI 0000011f: PUSH1 0x04 00000121: CALLDATALOAD 00000122: PUSH1 0x01 00000124: PUSH1 0x01 00000126: PUSH1 0xa0 00000128: SHL 00000129: SUB 0000012a: DUP2 0000012b: AND 0000012c: SWAP1 0000012d: DUP2 0000012e: SWAP1 0000012f: SUB 00000130: PUSH2 0x0193 00000133: JUMPI 00000134: PUSH1 0x24 00000136: CALLDATALOAD 00000137: SWAP1 00000138: PUSH8 0xffffffffffffffff 00000141: DUP3 00000142: GT 00000143: PUSH2 0x0193 00000146: JUMPI 00000147: CALLDATASIZE 00000148: PUSH1 0x23 0000014a: DUP4 0000014b: ADD 0000014c: SLT 0000014d: ISZERO 0000014e: PUSH2 0x0193 00000151: JUMPI 00000152: DUP2 00000153: PUSH1 0x04 00000155: ADD 00000156: CALLDATALOAD 00000157: SWAP1 00000158: PUSH2 0x0168 0000015b: PUSH2 0x0163 0000015e: DUP4 0000015f: PUSH2 0x00ee 00000162: JUMP 00000163: JUMPDEST 00000164: PUSH2 0x00c3 00000167: JUMP 00000168: JUMPDEST 00000169: SWAP2 0000016a: DUP1 0000016b: DUP4 0000016c: MSTORE 0000016d: CALLDATASIZE 0000016e: PUSH1 0x24 00000170: DUP3 00000171: DUP7 00000172: ADD 00000173: ADD 00000174: GT 00000175: PUSH2 0x0193 00000178: JUMPI 00000179: PUSH1 0x20 0000017b: DUP2 0000017c: PUSH0 0000017d: SWAP3 0000017e: PUSH1 0x24 00000180: PUSH2 0x0191 00000183: SWAP8 00000184: ADD 00000185: DUP4 00000186: DUP8 00000187: ADD 00000188: CALLDATACOPY 00000189: DUP5 0000018a: ADD 0000018b: ADD 0000018c: MSTORE 0000018d: PUSH2 0x0197 00000190: JUMP 00000191: JUMPDEST 00000192: JUMP 00000193: JUMPDEST 00000194: PUSH0 00000195: DUP1 00000196: REVERT 00000197: JUMPDEST 00000198: SWAP1 00000199: DUP2 0000019a: EXTCODESIZE 0000019b: ISZERO 0000019c: PUSH2 0x022b 0000019f: JUMPI 000001a0: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000001c1: DUP1 000001c2: SLOAD 000001c3: PUSH1 0x01 000001c5: PUSH1 0x01 000001c7: PUSH1 0xa0 000001c9: SHL 000001ca: SUB 000001cb: NOT 000001cc: AND 000001cd: PUSH1 0x01 000001cf: PUSH1 0x01 000001d1: PUSH1 0xa0 000001d3: SHL 000001d4: SUB 000001d5: DUP5 000001d6: AND 000001d7: SWAP1 000001d8: DUP2 000001d9: OR 000001da: SWAP1 000001db: SWAP2 000001dc: SSTORE 000001dd: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b 000001fe: PUSH0 000001ff: DUP1 00000200: LOG2 00000201: DUP1 00000202: MLOAD 00000203: ISZERO 00000204: PUSH2 0x0213 00000207: JUMPI 00000208: PUSH2 0x0210 0000020b: SWAP2 0000020c: PUSH2 0x024c 0000020f: JUMP 00000210: JUMPDEST 00000211: POP 00000212: JUMP 00000213: JUMPDEST 00000214: POP 00000215: POP 00000216: CALLVALUE 00000217: PUSH2 0x021c 0000021a: JUMPI 0000021b: JUMP 0000021c: JUMPDEST 0000021d: PUSH4 0xb398979f 00000222: PUSH1 0xe0 00000224: SHL 00000225: PUSH0 00000226: MSTORE 00000227: PUSH1 0x04 00000229: PUSH0 0000022a: REVERT 0000022b: JUMPDEST 0000022c: POP 0000022d: PUSH4 0x4c9c8ce3 00000232: PUSH1 0xe0 00000234: SHL 00000235: PUSH0 00000236: SWAP1 00000237: DUP2 00000238: MSTORE 00000239: PUSH1 0x01 0000023b: PUSH1 0x01 0000023d: PUSH1 0xa0 0000023f: SHL 00000240: SUB 00000241: SWAP2 00000242: SWAP1 00000243: SWAP2 00000244: AND 00000245: PUSH1 0x04 00000247: MSTORE 00000248: PUSH1 0x24 0000024a: SWAP1 0000024b: REVERT 0000024c: JUMPDEST 0000024d: PUSH0 0000024e: DUP1 0000024f: PUSH2 0x027e 00000252: SWAP4 00000253: PUSH1 0x20 00000255: DUP2 00000256: MLOAD 00000257: SWAP2 00000258: ADD 00000259: DUP5 0000025a: GAS 0000025b: DELEGATECALL 0000025c: RETURNDATASIZE 0000025d: ISZERO 0000025e: PUSH2 0x0281 00000261: JUMPI 00000262: RETURNDATASIZE 00000263: SWAP2 00000264: PUSH2 0x026f 00000267: PUSH2 0x0163 0000026a: DUP5 0000026b: PUSH2 0x00ee 0000026e: JUMP 0000026f: JUMPDEST 00000270: SWAP3 00000271: DUP4 00000272: MSTORE 00000273: RETURNDATASIZE 00000274: PUSH0 00000275: PUSH1 0x20 00000277: DUP6 00000278: ADD 00000279: RETURNDATACOPY 0000027a: PUSH2 0x0285 0000027d: JUMP 0000027e: JUMPDEST 0000027f: SWAP1 00000280: JUMP 00000281: JUMPDEST 00000282: PUSH1 0x60 00000284: SWAP2 00000285: JUMPDEST 00000286: SWAP1 00000287: PUSH2 0x02a9 0000028a: JUMPI 0000028b: POP 0000028c: DUP1 0000028d: MLOAD 0000028e: ISZERO 0000028f: PUSH2 0x029a 00000292: JUMPI 00000293: DUP1 00000294: MLOAD 00000295: SWAP1 00000296: PUSH1 0x20 00000298: ADD 00000299: REVERT 0000029a: JUMPDEST 0000029b: PUSH4 0xd6bda275 000002a0: PUSH1 0xe0 000002a2: SHL 000002a3: PUSH0 000002a4: MSTORE 000002a5: PUSH1 0x04 000002a7: PUSH0 000002a8: REVERT 000002a9: JUMPDEST 000002aa: DUP2 000002ab: MLOAD 000002ac: ISZERO 000002ad: DUP1 000002ae: PUSH2 0x02da 000002b1: JUMPI 000002b2: JUMPDEST 000002b3: PUSH2 0x02ba 000002b6: JUMPI 000002b7: POP 000002b8: SWAP1 000002b9: JUMP 000002ba: JUMPDEST 000002bb: PUSH4 0x9996b315 000002c0: PUSH1 0xe0 000002c2: SHL 000002c3: PUSH0 000002c4: SWAP1 000002c5: DUP2 000002c6: MSTORE 000002c7: PUSH1 0x01 000002c9: PUSH1 0x01 000002cb: PUSH1 0xa0 000002cd: SHL 000002ce: SUB 000002cf: SWAP2 000002d0: SWAP1 000002d1: SWAP2 000002d2: AND 000002d3: PUSH1 0x04 000002d5: MSTORE 000002d6: PUSH1 0x24 000002d8: SWAP1 000002d9: REVERT 000002da: JUMPDEST 000002db: POP 000002dc: DUP1 000002dd: EXTCODESIZE 000002de: ISZERO 000002df: PUSH2 0x02b2 000002e2: JUMP 000002e3: INVALID 000002e4: LOG2 000002e5: PUSH5 0x6970667358 000002eb: UNKNOWN(0x22) 000002ec: SLT 000002ed: KECCAK256 000002ee: MOD 000002ef: UNKNOWN(0xC9) 000002f0: JUMP 000002f1: PUSH1 0x48 000002f3: PUSH11 0x2cf9ed77b018fffe2cf41e 000002ff: UNKNOWN(0xFB) 00000300: CHAINID 00000301: CALLER 00000302: UNKNOWN(0xFC) 00000303: UNKNOWN(0x25) 00000304: CALLVALUE 00000305: UNKNOWN(0xDA) 00000306: PUSH24
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0xf9bb99d43549179c2b3035dfb815abecc4ff60f3a51a6a590a1dbbb161610328
call_targets:
0x506a5e9bf853a9a0e482f6412833e00b71998b78
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xf9bb99d43549179c2b3035dfb815abecc4ff60f3a51a6a590a1dbbb161610328",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x506a5e9bf853a9a0e482f6412833e00b71998b78"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x278f7943",
"selector": "0x278f7943",
"calldata_variants": [
"0x278f7943",
"0x278f79430000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 158,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 603,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|