019b477e-da0d-717d-95a6-c15f4139b02a
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 29405 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 29406 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 108197 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 108198 | capability.graph | complete | 1 / 3 | 1 week ago |
| 108199 | detector.run | complete | 1 / 3 | 1 week ago |
| 108200 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x0294 0000000c: JUMPI 0000000d: PUSH0 0000000e: CALLDATALOAD 0000000f: PUSH1 0xe0 00000011: SHR 00000012: PUSH4 0x63833f29 00000017: SUB 00000018: PUSH2 0x0294 0000001b: JUMPI 0000001c: CALLVALUE 0000001d: PUSH2 0x009f 00000020: JUMPI 00000021: PUSH1 0x40 00000023: CALLDATASIZE 00000024: PUSH1 0x03 00000026: NOT 00000027: ADD 00000028: SLT 00000029: PUSH2 0x009f 0000002c: JUMPI 0000002d: PUSH1 0x04 0000002f: CALLDATALOAD 00000030: PUSH1 0x01 00000032: PUSH1 0x01 00000034: PUSH1 0xa0 00000036: SHL 00000037: SUB 00000038: DUP2 00000039: AND 0000003a: DUP2 0000003b: SUB 0000003c: PUSH2 0x009f 0000003f: JUMPI 00000040: PUSH1 0x24 00000042: CALLDATALOAD 00000043: SWAP1 00000044: PUSH8 0xffffffffffffffff 0000004d: DUP3 0000004e: GT 0000004f: PUSH2 0x009f 00000052: JUMPI 00000053: CALLDATASIZE 00000054: PUSH1 0x23 00000056: DUP4 00000057: ADD 00000058: SLT 00000059: ISZERO 0000005a: PUSH2 0x009f 0000005d: JUMPI 0000005e: DUP2 0000005f: PUSH1 0x04 00000061: ADD 00000062: CALLDATALOAD 00000063: SWAP1 00000064: PUSH2 0x0074 00000067: PUSH2 0x006f 0000006a: DUP4 0000006b: PUSH2 0x00e2 0000006e: JUMP 0000006f: JUMPDEST 00000070: PUSH2 0x00b7 00000073: JUMP 00000074: JUMPDEST 00000075: SWAP2 00000076: DUP1 00000077: DUP4 00000078: MSTORE 00000079: CALLDATASIZE 0000007a: PUSH1 0x24 0000007c: DUP3 0000007d: DUP7 0000007e: ADD 0000007f: ADD 00000080: GT 00000081: PUSH2 0x009f 00000084: JUMPI 00000085: PUSH1 0x20 00000087: DUP2 00000088: PUSH0 00000089: SWAP3 0000008a: PUSH1 0x24 0000008c: PUSH2 0x009d 0000008f: SWAP8 00000090: ADD 00000091: DUP4 00000092: DUP8 00000093: ADD 00000094: CALLDATACOPY 00000095: DUP5 00000096: ADD 00000097: ADD 00000098: MSTORE 00000099: PUSH2 0x00fe 0000009c: JUMP 0000009d: JUMPDEST 0000009e: STOP 0000009f: JUMPDEST 000000a0: PUSH0 000000a1: DUP1 000000a2: REVERT 000000a3: JUMPDEST 000000a4: PUSH4 0x4e487b71 000000a9: PUSH1 0xe0 000000ab: SHL 000000ac: PUSH0 000000ad: MSTORE 000000ae: PUSH1 0x41 000000b0: PUSH1 0x04 000000b2: MSTORE 000000b3: PUSH1 0x24 000000b5: PUSH0 000000b6: REVERT 000000b7: JUMPDEST 000000b8: PUSH1 0x40 000000ba: MLOAD 000000bb: SWAP2 000000bc: SWAP1 000000bd: PUSH1 0x1f 000000bf: ADD 000000c0: PUSH1 0x1f 000000c2: NOT 000000c3: AND 000000c4: DUP3 000000c5: ADD 000000c6: PUSH8 0xffffffffffffffff 000000cf: DUP2 000000d0: GT 000000d1: DUP4 000000d2: DUP3 000000d3: LT 000000d4: OR 000000d5: PUSH2 0x00dd 000000d8: JUMPI 000000d9: PUSH1 0x40 000000db: MSTORE 000000dc: JUMP 000000dd: JUMPDEST 000000de: PUSH2 0x00a3 000000e1: JUMP 000000e2: JUMPDEST 000000e3: PUSH8 0xffffffffffffffff 000000ec: DUP2 000000ed: GT 000000ee: PUSH2 0x00dd 000000f1: JUMPI 000000f2: PUSH1 0x1f 000000f4: ADD 000000f5: PUSH1 0x1f 000000f7: NOT 000000f8: AND 000000f9: PUSH1 0x20 000000fb: ADD 000000fc: SWAP1 000000fd: JUMP 000000fe: JUMPDEST 000000ff: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000120: SLOAD 00000121: SWAP1 00000122: SWAP2 00000123: SWAP1 00000124: PUSH1 0x01 00000126: PUSH1 0x01 00000128: PUSH1 0xa0 0000012a: SHL 0000012b: SUB 0000012c: AND 0000012d: PUSH2 0x019a 00000130: JUMPI 00000131: PUSH1 0x01 00000133: PUSH1 0x01 00000135: PUSH1 0xa0 00000137: SHL 00000138: SUB 00000139: DUP3 0000013a: AND 0000013b: ISZERO 0000013c: PUSH2 0x014a 0000013f: JUMPI 00000140: PUSH2 0x0148 00000143: SWAP2 00000144: PUSH2 0x01df 00000147: JUMP 00000148: JUMPDEST 00000149: JUMP 0000014a: JUMPDEST 0000014b: PUSH1 0x40 0000014d: MLOAD 0000014e: PUSH3 0x461bcd 00000152: PUSH1 0xe5 00000154: SHL 00000155: DUP2 00000156: MSTORE 00000157: PUSH1 0x20 00000159: PUSH1 0x04 0000015b: DUP3 0000015c: ADD 0000015d: MSTORE 0000015e: PUSH1 0x22 00000160: PUSH1 0x24 00000162: DUP3 00000163: ADD 00000164: MSTORE 00000165: PUSH32 0x43616e6e6f7420696e697420746f207a65726f20696d706c656d656e74617469 00000186: PUSH1 0x44 00000188: DUP3 00000189: ADD 0000018a: MSTORE 0000018b: PUSH2 0x37b7 0000018e: PUSH1 0xf1 00000190: SHL 00000191: PUSH1 0x64 00000193: DUP3 00000194: ADD 00000195: MSTORE 00000196: PUSH1 0x84 00000198: SWAP1 00000199: REVERT 0000019a: JUMPDEST 0000019b: PUSH1 0x40 0000019d: MLOAD 0000019e: PUSH3 0x461bcd 000001a2: PUSH1 0xe5 000001a4: SHL 000001a5: DUP2 000001a6: MSTORE 000001a7: PUSH1 0x20 000001a9: PUSH1 0x04 000001ab: DUP3 000001ac: ADD 000001ad: MSTORE 000001ae: PUSH1 0x1d 000001b0: PUSH1 0x24 000001b2: DUP3 000001b3: ADD 000001b4: MSTORE 000001b5: PUSH32 0x416c72656164792068617320616e20696d706c656d656e746174696f6e000000 000001d6: PUSH1 0x44 000001d8: DUP3 000001d9: ADD 000001da: MSTORE 000001db: PUSH1 0x64 000001dd: SWAP1 000001de: REVERT 000001df: JUMPDEST 000001e0: SWAP1 000001e1: DUP2 000001e2: EXTCODESIZE 000001e3: ISZERO 000001e4: PUSH2 0x0273 000001e7: JUMPI 000001e8: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000209: DUP1 0000020a: SLOAD 0000020b: PUSH1 0x01 0000020d: PUSH1 0x01 0000020f: PUSH1 0xa0 00000211: SHL 00000212: SUB 00000213: NOT 00000214: AND 00000215: PUSH1 0x01 00000217: PUSH1 0x01 00000219: PUSH1 0xa0 0000021b: SHL 0000021c: SUB 0000021d: DUP5 0000021e: AND 0000021f: SWAP1 00000220: DUP2 00000221: OR 00000222: SWAP1 00000223: SWAP2 00000224: SSTORE 00000225: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b 00000246: PUSH0 00000247: DUP1 00000248: LOG2 00000249: DUP1 0000024a: MLOAD 0000024b: ISZERO 0000024c: PUSH2 0x025b 0000024f: JUMPI 00000250: PUSH2 0x0258 00000253: SWAP2 00000254: PUSH2 0x02dd 00000257: JUMP 00000258: JUMPDEST 00000259: POP 0000025a: JUMP 0000025b: JUMPDEST 0000025c: POP 0000025d: POP 0000025e: CALLVALUE 0000025f: PUSH2 0x0264 00000262: JUMPI 00000263: JUMP 00000264: JUMPDEST 00000265: PUSH4 0xb398979f 0000026a: PUSH1 0xe0 0000026c: SHL 0000026d: PUSH0 0000026e: MSTORE 0000026f: PUSH1 0x04 00000271: PUSH0 00000272: REVERT 00000273: JUMPDEST 00000274: POP 00000275: PUSH4 0x4c9c8ce3 0000027a: PUSH1 0xe0 0000027c: SHL 0000027d: PUSH0 0000027e: SWAP1 0000027f: DUP2 00000280: MSTORE 00000281: PUSH1 0x01 00000283: PUSH1 0x01 00000285: PUSH1 0xa0 00000287: SHL 00000288: SUB 00000289: SWAP2 0000028a: SWAP1 0000028b: SWAP2 0000028c: AND 0000028d: PUSH1 0x04 0000028f: MSTORE 00000290: PUSH1 0x24 00000292: SWAP1 00000293: REVERT 00000294: JUMPDEST 00000295: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000002b6: SLOAD 000002b7: PUSH0 000002b8: SWAP1 000002b9: DUP2 000002ba: SWAP1 000002bb: PUSH1 0x01 000002bd: PUSH1 0x01 000002bf: PUSH1 0xa0 000002c1: SHL 000002c2: SUB 000002c3: AND 000002c4: CALLDATASIZE 000002c5: DUP3 000002c6: DUP1 000002c7: CALLDATACOPY 000002c8: DUP2 000002c9: CALLDATASIZE 000002ca: SWAP2 000002cb: GAS 000002cc: DELEGATECALL 000002cd: RETURNDATASIZE 000002ce: PUSH0 000002cf: DUP1 000002d0: RETURNDATACOPY 000002d1: ISZERO 000002d2: PUSH2 0x02d9 000002d5: JUMPI 000002d6: RETURNDATASIZE 000002d7: PUSH0 000002d8: RETURN 000002d9: JUMPDEST 000002da: RETURNDATASIZE 000002db: PUSH0 000002dc: REVERT 000002dd: JUMPDEST 000002de: PUSH0 000002df: DUP1 000002e0: PUSH2 0x030f 000002e3: SWAP4 000002e4: PUSH1 0x20 000002e6: DUP2 000002e7: MLOAD 000002e8: SWAP2 000002e9: ADD 000002ea: DUP5 000002eb: GAS 000002ec: DELEGATECALL 000002ed: RETURNDATASIZE 000002ee: ISZERO 000002ef: PUSH2 0x0312 000002f2: JUMPI 000002f3: RETURNDATASIZE 000002f4: SWAP2 000002f5: PUSH2 0x0300 000002f8: PUSH2 0x006f 000002fb: DUP5 000002fc: PUSH2 0x00e2 000002ff: JUMP 00000300: JUMPDEST 00000301: SWAP3 00000302: DUP4 00000303: MSTORE 00000304: RETURNDATASIZE 00000305: PUSH0 00000306: PUSH1 0x20 00000308: DUP6 00000309: ADD 0000030a: RETURNDATACOPY 0000030b: PUSH2 0x0316 0000030e: JUMP 0000030f: JUMPDEST 00000310: SWAP1 00000311: JUMP 00000312: JUMPDEST 00000313: PUSH1 0x60 00000315: SWAP2 00000316: JUMPDEST 00000317: SWAP1 00000318: PUSH2 0x033a 0000031b: JUMPI 0000031c: POP 0000031d: DUP1 0000031e: MLOAD 0000031f: ISZERO 00000320: PUSH2 0x032b 00000323: JUMPI 00000324: DUP1 00000325: MLOAD 00000326: SWAP1 00000327: PUSH1 0x20 00000329: ADD 0000032a: REVERT 0000032b: JUMPDEST 0000032c: PUSH4 0xd6bda275 00000331: PUSH1 0xe0 00000333: SHL 00000334: PUSH0 00000335: MSTORE 00000336: PUSH1 0x04 00000338: PUSH0 00000339: REVERT 0000033a: JUMPDEST 0000033b: DUP2 0000033c: MLOAD 0000033d: ISZERO 0000033e: DUP1 0000033f: PUSH2 0x036b 00000342: JUMPI 00000343: JUMPDEST 00000344: PUSH2 0x034b 00000347: JUMPI 00000348: POP 00000349: SWAP1 0000034a: JUMP 0000034b: JUMPDEST 0000034c: PUSH4 0x9996b315 00000351: PUSH1 0xe0 00000353: SHL 00000354: PUSH0 00000355: SWAP1 00000356: DUP2 00000357: MSTORE 00000358: PUSH1 0x01 0000035a: PUSH1 0x01 0000035c: PUSH1 0xa0 0000035e: SHL 0000035f: SUB 00000360: SWAP2 00000361: SWAP1 00000362: SWAP2 00000363: AND 00000364: PUSH1 0x04 00000366: MSTORE 00000367: PUSH1 0x24 00000369: SWAP1 0000036a: REVERT 0000036b: JUMPDEST 0000036c: POP 0000036d: DUP1 0000036e: EXTCODESIZE 0000036f: ISZERO 00000370: PUSH2 0x0343 00000373: JUMP 00000374: INVALID 00000375: LOG1 00000376: PUSH5 0x736f6c6343 0000037c: STOP 0000037d: ADDMOD 0000037e: SHR 0000037f: STOP 00000380: EXP
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0x47f192f71daa258265d62ffb78b5ba3d98a96d55ca41b4434b33b03a52f0d9ad
call_targets:
0x7bea5af5539090597c1c921be2bb85287c5e909a
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x47f192f71daa258265d62ffb78b5ba3d98a96d55ca41b4434b33b03a52f0d9ad",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x7bea5af5539090597c1c921be2bb85287c5e909a"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 716,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 748,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|