019b477e-da7f-70c7-8df9-13c3ed5ecec0
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 29481 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 29482 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 108233 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 108234 | capability.graph | complete | 1 / 3 | 1 week ago |
| 108235 | detector.run | complete | 1 / 3 | 1 week ago |
| 108236 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: CALLDATASIZE 00000001: PUSH1 0x2c 00000003: JUMPI 00000004: CALLVALUE 00000005: RETURNDATASIZE 00000006: MSTORE 00000007: PUSH32 0x9e4ac34f21c619cefc926c8bd93b54bf5a39c7ab2127a895af1cc0691d7e3dff 00000028: MSIZE 00000029: RETURNDATASIZE 0000002a: LOG1 0000002b: STOP 0000002c: JUMPDEST 0000002d: RETURNDATASIZE 0000002e: RETURNDATASIZE 0000002f: RETURNDATASIZE 00000030: RETURNDATASIZE 00000031: CALLDATASIZE 00000032: RETURNDATASIZE 00000033: RETURNDATASIZE 00000034: CALLDATACOPY 00000035: CALLDATASIZE 00000036: RETURNDATASIZE 00000037: PUSH20 0xf9c25250523df26343222fc46de932355b850c97 0000004c: GAS 0000004d: DELEGATECALL 0000004e: RETURNDATASIZE 0000004f: RETURNDATASIZE 00000050: SWAP4 00000051: DUP1 00000052: RETURNDATACOPY 00000053: PUSH1 0x57 00000055: JUMPI 00000056: REVERT 00000057: JUMPDEST 00000058: RETURN
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewvalidation_json{
"sink": "DELEGATECALL",
"errors": 10,
"status": "unknown",
"attempts": 11,
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 77,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 1,
"untrusted_delegatecall_count": 1
}
|