Analysis Run

019b477e-da2c-7015-9ebf-d3e6316b60f9

complete

Chain ID

1

Address

0xbf78a530633244fd4b4b189001073613d8aea16f

Block Number

—

Created

Mon, Dec 22, 2025 7:17 PM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Verified

Review Backing

Not yet

Best current signal

Untrusted CALL target/value reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
29429	artifact.fetch	complete	1 / 3	3 months ago
29430	tool.cast_disasm	complete	1 / 3	3 months ago
108149	analysis.bundle	complete	1 / 3	1 week ago
108150	capability.graph	complete	1 / 3	1 week ago
108151	detector.run	complete	1 / 3	1 week ago
108152	validation.fork	complete	1 / 3	1 week ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no

Implementation:

—

Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

0

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

3

EXT*/BALANCE

1

Total opcodes

732

Flags

No heuristic flags raised.

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0043
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x51cff8d9
00000019: EQ
0000001a: PUSH2 0x004f
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x715018a6
00000024: EQ
00000025: PUSH2 0x0071
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8da5cb5b
0000002f: EQ
00000030: PUSH2 0x0086
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf2fde38b
0000003a: EQ
0000003b: PUSH2 0x00b2
0000003e: JUMPI
0000003f: PUSH1 0x00
00000041: DUP1
00000042: REVERT
00000043: JUMPDEST
00000044: CALLDATASIZE
00000045: PUSH2 0x004a
00000048: JUMPI
00000049: STOP
0000004a: JUMPDEST
0000004b: PUSH1 0x00
0000004d: DUP1
0000004e: REVERT
0000004f: JUMPDEST
00000050: CALLVALUE
00000051: DUP1
00000052: ISZERO
00000053: PUSH2 0x005b
00000056: JUMPI
00000057: PUSH1 0x00
00000059: DUP1
0000005a: REVERT
0000005b: JUMPDEST
0000005c: POP
0000005d: PUSH2 0x006f
00000060: PUSH2 0x006a
00000063: CALLDATASIZE
00000064: PUSH1 0x04
00000066: PUSH2 0x037f
00000069: JUMP
0000006a: JUMPDEST
0000006b: PUSH2 0x00d2
0000006e: JUMP
0000006f: JUMPDEST
00000070: STOP
00000071: JUMPDEST
00000072: CALLVALUE
00000073: DUP1
00000074: ISZERO
00000075: PUSH2 0x007d
00000078: JUMPI
00000079: PUSH1 0x00
0000007b: DUP1
0000007c: REVERT
0000007d: JUMPDEST
0000007e: POP
0000007f: PUSH2 0x006f
00000082: PUSH2 0x01e8
00000085: JUMP
00000086: JUMPDEST
00000087: CALLVALUE
00000088: DUP1
00000089: ISZERO
0000008a: PUSH2 0x0092
0000008d: JUMPI
0000008e: PUSH1 0x00
00000090: DUP1
00000091: REVERT
00000092: JUMPDEST
00000093: POP
00000094: PUSH1 0x00
00000096: SLOAD
00000097: PUSH1 0x40
00000099: DUP1
0000009a: MLOAD
0000009b: PUSH1 0x01
0000009d: PUSH1 0x01
0000009f: PUSH1 0xa0
000000a1: SHL
000000a2: SUB
000000a3: SWAP1
000000a4: SWAP3
000000a5: AND
000000a6: DUP3
000000a7: MSTORE
000000a8: MLOAD
000000a9: SWAP1
000000aa: DUP2
000000ab: SWAP1
000000ac: SUB
000000ad: PUSH1 0x20
000000af: ADD
000000b0: SWAP1
000000b1: RETURN
000000b2: JUMPDEST
000000b3: CALLVALUE
000000b4: DUP1
000000b5: ISZERO
000000b6: PUSH2 0x00be
000000b9: JUMPI
000000ba: PUSH1 0x00
000000bc: DUP1
000000bd: REVERT
000000be: JUMPDEST
000000bf: POP
000000c0: PUSH2 0x006f
000000c3: PUSH2 0x00cd
000000c6: CALLDATASIZE
000000c7: PUSH1 0x04
000000c9: PUSH2 0x037f
000000cc: JUMP
000000cd: JUMPDEST
000000ce: PUSH2 0x01fc
000000d1: JUMP
000000d2: JUMPDEST
000000d3: PUSH2 0x00da
000000d6: PUSH2 0x0237
000000d9: JUMP
000000da: JUMPDEST
000000db: PUSH1 0x01
000000dd: PUSH1 0x01
000000df: PUSH1 0xa0
000000e1: SHL
000000e2: SUB
000000e3: DUP2
000000e4: AND
000000e5: PUSH2 0x0166
000000e8: JUMPI
000000e9: PUSH1 0x40
000000eb: MLOAD
000000ec: PUSH1 0x00
000000ee: SWAP1
000000ef: DUP2
000000f0: SWAP1
000000f1: CALLER
000000f2: SWAP1
000000f3: SELFBALANCE
000000f4: SWAP1
000000f5: DUP4
000000f6: DUP2
000000f7: DUP2
000000f8: DUP2
000000f9: DUP6
000000fa: DUP8
000000fb: GAS
000000fc: CALL
000000fd: SWAP3
000000fe: POP
000000ff: POP
00000100: POP
00000101: RETURNDATASIZE
00000102: DUP1
00000103: PUSH1 0x00
00000105: DUP2
00000106: EQ
00000107: PUSH2 0x012c
0000010a: JUMPI
0000010b: PUSH1 0x40
0000010d: MLOAD
0000010e: SWAP2
0000010f: POP
00000110: PUSH1 0x1f
00000112: NOT
00000113: PUSH1 0x3f
00000115: RETURNDATASIZE
00000116: ADD
00000117: AND
00000118: DUP3
00000119: ADD
0000011a: PUSH1 0x40
0000011c: MSTORE
0000011d: RETURNDATASIZE
0000011e: DUP3
0000011f: MSTORE
00000120: RETURNDATASIZE
00000121: PUSH1 0x00
00000123: PUSH1 0x20
00000125: DUP5
00000126: ADD
00000127: RETURNDATACOPY
00000128: PUSH2 0x0131
0000012b: JUMP
0000012c: JUMPDEST
0000012d: PUSH1 0x60
0000012f: SWAP2
00000130: POP
00000131: JUMPDEST
00000132: POP
00000133: SWAP2
00000134: POP
00000135: SWAP2
00000136: POP
00000137: DUP2
00000138: DUP2
00000139: SWAP1
0000013a: PUSH2 0x0160
0000013d: JUMPI
0000013e: PUSH1 0x40
00000140: MLOAD
00000141: PUSH4 0xda7bca8f
00000146: PUSH1 0xe0
00000148: SHL
00000149: DUP2
0000014a: MSTORE
0000014b: PUSH1 0x04
0000014d: ADD
0000014e: PUSH2 0x0157
00000151: SWAP2
00000152: SWAP1
00000153: PUSH2 0x03af
00000156: JUMP
00000157: JUMPDEST
00000158: PUSH1 0x40
0000015a: MLOAD
0000015b: DUP1
0000015c: SWAP2
0000015d: SUB
0000015e: SWAP1
0000015f: REVERT
00000160: JUMPDEST
00000161: POP
00000162: POP
00000163: POP
00000164: POP
00000165: JUMP
00000166: JUMPDEST
00000167: PUSH2 0x01e5
0000016a: ADDRESS
0000016b: CALLER
0000016c: PUSH1 0x40
0000016e: MLOAD
0000016f: PUSH4 0x70a08231
00000174: PUSH1 0xe0
00000176: SHL
00000177: DUP2
00000178: MSTORE
00000179: ADDRESS
0000017a: PUSH1 0x04
0000017c: DUP3
0000017d: ADD
0000017e: MSTORE
0000017f: PUSH1 0x01
00000181: PUSH1 0x01
00000183: PUSH1 0xa0
00000185: SHL
00000186: SUB
00000187: DUP6
00000188: AND
00000189: SWAP1
0000018a: PUSH4 0x70a08231
0000018f: SWAP1
00000190: PUSH1 0x24
00000192: ADD
00000193: PUSH1 0x20
00000195: PUSH1 0x40
00000197: MLOAD
00000198: DUP1
00000199: DUP4
0000019a: SUB
0000019b: DUP2
0000019c: DUP7
0000019d: GAS
0000019e: STATICCALL
0000019f: ISZERO
000001a0: DUP1
000001a1: ISZERO
000001a2: PUSH2 0x01af
000001a5: JUMPI
000001a6: RETURNDATASIZE
000001a7: PUSH1 0x00
000001a9: DUP1
000001aa: RETURNDATACOPY
000001ab: RETURNDATASIZE
000001ac: PUSH1 0x00
000001ae: REVERT
000001af: JUMPDEST
000001b0: POP
000001b1: POP
000001b2: POP
000001b3: POP
000001b4: PUSH1 0x40
000001b6: MLOAD
000001b7: RETURNDATASIZE
000001b8: PUSH1 0x1f
000001ba: NOT
000001bb: PUSH1 0x1f
000001bd: DUP3
000001be: ADD
000001bf: AND
000001c0: DUP3
000001c1: ADD
000001c2: DUP1
000001c3: PUSH1 0x40
000001c5: MSTORE
000001c6: POP
000001c7: DUP2
000001c8: ADD
000001c9: SWAP1
000001ca: PUSH2 0x01d3
000001cd: SWAP2
000001ce: SWAP1
000001cf: PUSH2 0x03fd
000001d2: JUMP
000001d3: JUMPDEST
000001d4: PUSH1 0x01
000001d6: PUSH1 0x01
000001d8: PUSH1 0xa0
000001da: SHL
000001db: SUB
000001dc: DUP6
000001dd: AND
000001de: SWAP3
000001df: SWAP2
000001e0: SWAP1
000001e1: PUSH2 0x0264
000001e4: JUMP
000001e5: JUMPDEST
000001e6: POP
000001e7: JUMP
000001e8: JUMPDEST
000001e9: PUSH2 0x01f0
000001ec: PUSH2 0x0237
000001ef: JUMP
000001f0: JUMPDEST
000001f1: PUSH2 0x01fa
000001f4: PUSH1 0x00
000001f6: PUSH2 0x02be
000001f9: JUMP
000001fa: JUMPDEST
000001fb: JUMP
000001fc: JUMPDEST
000001fd: PUSH2 0x0204
00000200: PUSH2 0x0237
00000203: JUMP
00000204: JUMPDEST
00000205: PUSH1 0x01
00000207: PUSH1 0x01
00000209: PUSH1 0xa0
0000020b: SHL
0000020c: SUB
0000020d: DUP2
0000020e: AND
0000020f: PUSH2 0x022e
00000212: JUMPI
00000213: PUSH1 0x40
00000215: MLOAD
00000216: PUSH4 0x1e4fbdf7
0000021b: PUSH1 0xe0
0000021d: SHL
0000021e: DUP2
0000021f: MSTORE
00000220: PUSH1 0x00
00000222: PUSH1 0x04
00000224: DUP3
00000225: ADD
00000226: MSTORE
00000227: PUSH1 0x24
00000229: ADD
0000022a: PUSH2 0x0157
0000022d: JUMP
0000022e: JUMPDEST
0000022f: PUSH2 0x01e5
00000232: DUP2
00000233: PUSH2 0x02be
00000236: JUMP
00000237: JUMPDEST
00000238: PUSH1 0x00
0000023a: SLOAD
0000023b: PUSH1 0x01
0000023d: PUSH1 0x01
0000023f: PUSH1 0xa0
00000241: SHL
00000242: SUB
00000243: AND
00000244: CALLER
00000245: EQ
00000246: PUSH2 0x01fa
00000249: JUMPI
0000024a: PUSH1 0x40
0000024c: MLOAD
0000024d: PUSH4 0x118cdaa7
00000252: PUSH1 0xe0
00000254: SHL
00000255: DUP2
00000256: MSTORE
00000257: CALLER
00000258: PUSH1 0x04
0000025a: DUP3
0000025b: ADD
0000025c: MSTORE
0000025d: PUSH1 0x24
0000025f: ADD
00000260: PUSH2 0x0157
00000263: JUMP
00000264: JUMPDEST
00000265: PUSH1 0x40
00000267: DUP1
00000268: MLOAD
00000269: PUSH1 0x01
0000026b: PUSH1 0x01
0000026d: PUSH1 0xa0
0000026f: SHL
00000270: SUB
00000271: DUP6
00000272: DUP2
00000273: AND
00000274: PUSH1 0x24
00000276: DUP4
00000277: ADD
00000278: MSTORE
00000279: DUP5
0000027a: AND
0000027b: PUSH1 0x44
0000027d: DUP3
0000027e: ADD
0000027f: MSTORE
00000280: PUSH1 0x64
00000282: DUP1
00000283: DUP3
00000284: ADD
00000285: DUP5
00000286: SWAP1
00000287: MSTORE
00000288: DUP3
00000289: MLOAD
0000028a: DUP1
0000028b: DUP4
0000028c: SUB
0000028d: SWAP1
0000028e: SWAP2
0000028f: ADD
00000290: DUP2
00000291: MSTORE
00000292: PUSH1 0x84
00000294: SWAP1
00000295: SWAP2
00000296: ADD
00000297: SWAP1
00000298: SWAP2
00000299: MSTORE
0000029a: PUSH1 0x20
0000029c: DUP2
0000029d: ADD
0000029e: DUP1
0000029f: MLOAD
000002a0: PUSH1 0x01
000002a2: PUSH1 0x01
000002a4: PUSH1 0xe0
000002a6: SHL
000002a7: SUB
000002a8: AND
000002a9: PUSH4 0x23b872dd
000002ae: PUSH1 0xe0
000002b0: SHL
000002b1: OR
000002b2: SWAP1
000002b3: MSTORE
000002b4: PUSH2 0x0160
000002b7: SWAP1
000002b8: DUP6
000002b9: SWAP1
000002ba: PUSH2 0x030e
000002bd: JUMP
000002be: JUMPDEST
000002bf: PUSH1 0x00
000002c1: DUP1
000002c2: SLOAD
000002c3: PUSH1 0x01
000002c5: PUSH1 0x01
000002c7: PUSH1 0xa0
000002c9: SHL
000002ca: SUB
000002cb: DUP4
000002cc: DUP2
000002cd: AND
000002ce: PUSH1 0x01
000002d0: PUSH1 0x01
000002d2: PUSH1 0xa0
000002d4: SHL
000002d5: SUB
000002d6: NOT
000002d7: DUP4
000002d8: AND
000002d9: DUP2
000002da: OR
000002db: DUP5
000002dc: SSTORE
000002dd: PUSH1 0x40
000002df: MLOAD
000002e0: SWAP2
000002e1: SWAP1
000002e2: SWAP3
000002e3: AND
000002e4: SWAP3
000002e5: DUP4
000002e6: SWAP2
000002e7: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
00000308: SWAP2
00000309: SWAP1
0000030a: LOG3
0000030b: POP
0000030c: POP
0000030d: JUMP
0000030e: JUMPDEST
0000030f: PUSH1 0x00
00000311: DUP1
00000312: PUSH1 0x20
00000314: PUSH1 0x00
00000316: DUP5
00000317: MLOAD
00000318: PUSH1 0x20
0000031a: DUP7
0000031b: ADD
0000031c: PUSH1 0x00
0000031e: DUP9
0000031f: GAS
00000320: CALL
00000321: DUP1
00000322: PUSH2 0x0331
00000325: JUMPI
00000326: PUSH1 0x40
00000328: MLOAD
00000329: RETURNDATASIZE
0000032a: PUSH1 0x00
0000032c: DUP3
0000032d: RETURNDATACOPY
0000032e: RETURNDATASIZE
0000032f: DUP2
00000330: REVERT
00000331: JUMPDEST
00000332: POP
00000333: POP
00000334: PUSH1 0x00
00000336: MLOAD
00000337: RETURNDATASIZE
00000338: SWAP2
00000339: POP
0000033a: DUP2
0000033b: ISZERO
0000033c: PUSH2 0x0349
0000033f: JUMPI
00000340: DUP1
00000341: PUSH1 0x01
00000343: EQ
00000344: ISZERO
00000345: PUSH2 0x0356
00000348: JUMP
00000349: JUMPDEST
0000034a: PUSH1 0x01
0000034c: PUSH1 0x01
0000034e: PUSH1 0xa0
00000350: SHL
00000351: SUB
00000352: DUP5
00000353: AND
00000354: EXTCODESIZE
00000355: ISZERO
00000356: JUMPDEST
00000357: ISZERO
00000358: PUSH2 0x0160
0000035b: JUMPI
0000035c: PUSH1 0x40
0000035e: MLOAD
0000035f: PUSH4 0x5274afe7
00000364: PUSH1 0xe0
00000366: SHL
00000367: DUP2
00000368: MSTORE
00000369: PUSH1 0x01
0000036b: PUSH1 0x01
0000036d: PUSH1 0xa0
0000036f: SHL
00000370: SUB
00000371: DUP6
00000372: AND
00000373: PUSH1 0x04
00000375: DUP3
00000376: ADD
00000377: MSTORE
00000378: PUSH1 0x24
0000037a: ADD
0000037b: PUSH2 0x0157
0000037e: JUMP
0000037f: JUMPDEST
00000380: PUSH1 0x00
00000382: PUSH1 0x20
00000384: DUP3
00000385: DUP5
00000386: SUB
00000387: SLT
00000388: ISZERO
00000389: PUSH2 0x0391
0000038c: JUMPI
0000038d: PUSH1 0x00
0000038f: DUP1
00000390: REVERT
00000391: JUMPDEST
00000392: DUP2
00000393: CALLDATALOAD
00000394: PUSH1 0x01
00000396: PUSH1 0x01
00000398: PUSH1 0xa0
0000039a: SHL
0000039b: SUB
0000039c: DUP2
0000039d: AND
0000039e: DUP2
0000039f: EQ
000003a0: PUSH2 0x03a8
000003a3: JUMPI
000003a4: PUSH1 0x00
000003a6: DUP1
000003a7: REVERT
000003a8: JUMPDEST
000003a9: SWAP4
000003aa: SWAP3
000003ab: POP
000003ac: POP
000003ad: POP
000003ae: JUMP
000003af: JUMPDEST
000003b0: PUSH1 0x20
000003b2: DUP2
000003b3: MSTORE
000003b4: PUSH1 0x00
000003b6: DUP3
000003b7: MLOAD
000003b8: DUP1
000003b9: PUSH1 0x20
000003bb: DUP5
000003bc: ADD
000003bd: MSTORE
000003be: PUSH1 0x00
000003c0: JUMPDEST
000003c1: DUP2
000003c2: DUP2
000003c3: LT
000003c4: ISZERO
000003c5: PUSH2 0x03dd
000003c8: JUMPI
000003c9: PUSH1 0x20
000003cb: DUP2
000003cc: DUP7
000003cd: ADD
000003ce: DUP2
000003cf: ADD
000003d0: MLOAD
000003d1: PUSH1 0x40
000003d3: DUP7
000003d4: DUP5
000003d5: ADD
000003d6: ADD
000003d7: MSTORE
000003d8: ADD
000003d9: PUSH2 0x03c0
000003dc: JUMP
000003dd: JUMPDEST
000003de: POP
000003df: PUSH1 0x00
000003e1: PUSH1 0x40
000003e3: DUP3
000003e4: DUP6
000003e5: ADD
000003e6: ADD
000003e7: MSTORE
000003e8: PUSH1 0x40
000003ea: PUSH1 0x1f
000003ec: NOT
000003ed: PUSH1 0x1f
000003ef: DUP4
000003f0: ADD
000003f1: AND
000003f2: DUP5
000003f3: ADD
000003f4: ADD
000003f5: SWAP2
000003f6: POP
000003f7: POP
000003f8: SWAP3
000003f9: SWAP2
000003fa: POP
000003fb: POP
000003fc: JUMP
000003fd: JUMPDEST
000003fe: PUSH1 0x00
00000400: PUSH1 0x20
00000402: DUP3
00000403: DUP5
00000404: SUB
00000405: SLT
00000406: ISZERO
00000407: PUSH2 0x040f
0000040a: JUMPI
0000040b: PUSH1 0x00
0000040d: DUP1
0000040e: REVERT
0000040f: JUMPDEST
00000410: POP
00000411: MLOAD
00000412: SWAP2
00000413: SWAP1
00000414: POP
00000415: JUMP
00000416: INVALID
00000417: LOG1
00000418: PUSH5 0x736f6c6343
0000041e: STOP
0000041f: ADDMOD
00000420: SHR
00000421: STOP
00000422: EXP

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
high	other	detector	Untrusted CALL target/value reachable	60	no	no	view trace_id: 0x87a5e3630cfc270be6ad03d24deafe2d9ab5127dab6a20c181ef3967ba5a16f1 call_targets: 0xbf78a530633244fd4b4b189001073613d8aea16f target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x87a5e3630cfc270be6ad03d24deafe2d9ab5127dab6a20c181ef3967ba5a16f1", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xbf78a530633244fd4b4b189001073613d8aea16f" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x51cff8d9", "selector": "0x51cff8d9", "calldata_variants": [ "0x51cff8d9", "0x51cff8d90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf2fde38b", "selector": "0xf2fde38b", "calldata_variants": [ "0xf2fde38b", "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 252, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 800, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "call_count": 2, "guards_detected": [], "untrusted_call_count": 2 }
high	other	detector	ETH value transfer possible	55	no	no	view trace_id: 0x87a5e3630cfc270be6ad03d24deafe2d9ab5127dab6a20c181ef3967ba5a16f1 call_targets: 0xbf78a530633244fd4b4b189001073613d8aea16f target_varies: no classification: constant_target validation_json { "sink": "CALL", "errors": 0, "status": "sink_reached", "attempts": 1, "trace_id": "0x87a5e3630cfc270be6ad03d24deafe2d9ab5127dab6a20c181ef3967ba5a16f1", "confirmed": false, "trace_mode": "callTracer", "call_targets": [ "0xbf78a530633244fd4b4b189001073613d8aea16f" ], "matched_probe": null, "target_varies": false, "classification": "constant_target" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x51cff8d9", "selector": "0x51cff8d9", "calldata_variants": [ "0x51cff8d9", "0x51cff8d90000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x715018a6", "selector": "0x715018a6", "calldata_variants": [ "0x715018a6", "0x715018a60000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xf2fde38b", "selector": "0xf2fde38b", "calldata_variants": [ "0xf2fde38b", "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 252, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" }, { "pc": 800, "opcode": "CALL", "returndata_checked": null, "value_expression_category": "computed", "target_expression_category": "computed" } ], "eth_value_calls": 2, "guards_detected": [] }

Severity

Category

Tool

Title

Confidence

Validated

Confirmed

Details

high

other

detector

Untrusted CALL target/value reachable

60

no

view

trace_id: 0x87a5e3630cfc270be6ad03d24deafe2d9ab5127dab6a20c181ef3967ba5a16f1

call_targets: 0xbf78a530633244fd4b4b189001073613d8aea16f

target_varies: no

classification: constant_target

validation_json

{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x87a5e3630cfc270be6ad03d24deafe2d9ab5127dab6a20c181ef3967ba5a16f1",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xbf78a530633244fd4b4b189001073613d8aea16f"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}

witness_json

{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x51cff8d9",
            "selector": "0x51cff8d9",
            "calldata_variants": [
                "0x51cff8d9",
                "0x51cff8d90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x715018a6",
            "selector": "0x715018a6",
            "calldata_variants": [
                "0x715018a6",
                "0x715018a60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf2fde38b",
            "selector": "0xf2fde38b",
            "calldata_variants": [
                "0xf2fde38b",
                "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}

evidence_json

{
    "examples": [
        {
            "pc": 252,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 800,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 2,
    "guards_detected": [],
    "untrusted_call_count": 2
}