019b477e-dae5-7041-93f6-59372da571ed
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 29545 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 29546 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 108553 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 108554 | capability.graph | complete | 1 / 3 | 1 week ago |
| 108555 | detector.run | complete | 1 / 3 | 1 week ago |
| 108556 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH2 0x000c 00000008: PUSH2 0x000e 0000000b: JUMP 0000000c: JUMPDEST 0000000d: STOP 0000000e: JUMPDEST 0000000f: PUSH32 0x0000000000000000000000000a7f1de2568211c2af9c8e6cfb63b854445bb1a0 00000030: PUSH1 0x01 00000032: PUSH1 0x01 00000034: PUSH1 0xa0 00000036: SHL 00000037: SUB 00000038: AND 00000039: CALLER 0000003a: SUB 0000003b: PUSH2 0x007b 0000003e: JUMPI 0000003f: PUSH1 0x00 00000041: CALLDATALOAD 00000042: PUSH1 0x01 00000044: PUSH1 0x01 00000046: PUSH1 0xe0 00000048: SHL 00000049: SUB 0000004a: NOT 0000004b: AND 0000004c: PUSH4 0x278f7943 00000051: PUSH1 0xe1 00000053: SHL 00000054: EQ 00000055: PUSH2 0x0071 00000058: JUMPI 00000059: PUSH1 0x40 0000005b: MLOAD 0000005c: PUSH4 0x34ad5dbb 00000061: PUSH1 0xe2 00000063: SHL 00000064: DUP2 00000065: MSTORE 00000066: PUSH1 0x04 00000068: ADD 00000069: PUSH1 0x40 0000006b: MLOAD 0000006c: DUP1 0000006d: SWAP2 0000006e: SUB 0000006f: SWAP1 00000070: REVERT 00000071: JUMPDEST 00000072: PUSH2 0x0079 00000075: PUSH2 0x0083 00000078: JUMP 00000079: JUMPDEST 0000007a: JUMP 0000007b: JUMPDEST 0000007c: PUSH2 0x0079 0000007f: PUSH2 0x00b2 00000082: JUMP 00000083: JUMPDEST 00000084: PUSH1 0x00 00000086: DUP1 00000087: PUSH2 0x0093 0000008a: CALLDATASIZE 0000008b: PUSH1 0x04 0000008d: DUP2 0000008e: DUP5 0000008f: PUSH2 0x0312 00000092: JUMP 00000093: JUMPDEST 00000094: DUP2 00000095: ADD 00000096: SWAP1 00000097: PUSH2 0x00a0 0000009a: SWAP2 0000009b: SWAP1 0000009c: PUSH2 0x0352 0000009f: JUMP 000000a0: JUMPDEST 000000a1: SWAP2 000000a2: POP 000000a3: SWAP2 000000a4: POP 000000a5: PUSH2 0x00ae 000000a8: DUP3 000000a9: DUP3 000000aa: PUSH2 0x00c2 000000ad: JUMP 000000ae: JUMPDEST 000000af: POP 000000b0: POP 000000b1: JUMP 000000b2: JUMPDEST 000000b3: PUSH2 0x0079 000000b6: PUSH2 0x00bd 000000b9: PUSH2 0x011d 000000bc: JUMP 000000bd: JUMPDEST 000000be: PUSH2 0x0155 000000c1: JUMP 000000c2: JUMPDEST 000000c3: PUSH2 0x00cb 000000c6: DUP3 000000c7: PUSH2 0x0179 000000ca: JUMP 000000cb: JUMPDEST 000000cc: PUSH1 0x40 000000ce: MLOAD 000000cf: PUSH1 0x01 000000d1: PUSH1 0x01 000000d3: PUSH1 0xa0 000000d5: SHL 000000d6: SUB 000000d7: DUP4 000000d8: AND 000000d9: SWAP1 000000da: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b 000000fb: SWAP1 000000fc: PUSH1 0x00 000000fe: SWAP1 000000ff: LOG2 00000100: DUP1 00000101: MLOAD 00000102: ISZERO 00000103: PUSH2 0x0115 00000106: JUMPI 00000107: PUSH2 0x0110 0000010a: DUP3 0000010b: DUP3 0000010c: PUSH2 0x01f5 0000010f: JUMP 00000110: JUMPDEST 00000111: POP 00000112: POP 00000113: POP 00000114: JUMP 00000115: JUMPDEST 00000116: PUSH2 0x00ae 00000119: PUSH2 0x026b 0000011c: JUMP 0000011d: JUMPDEST 0000011e: PUSH1 0x00 00000120: PUSH2 0x0150 00000123: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000144: SLOAD 00000145: PUSH1 0x01 00000147: PUSH1 0x01 00000149: PUSH1 0xa0 0000014b: SHL 0000014c: SUB 0000014d: AND 0000014e: SWAP1 0000014f: JUMP 00000150: JUMPDEST 00000151: SWAP1 00000152: POP 00000153: SWAP1 00000154: JUMP 00000155: JUMPDEST 00000156: CALLDATASIZE 00000157: PUSH1 0x00 00000159: DUP1 0000015a: CALLDATACOPY 0000015b: PUSH1 0x00 0000015d: DUP1 0000015e: CALLDATASIZE 0000015f: PUSH1 0x00 00000161: DUP5 00000162: GAS 00000163: DELEGATECALL 00000164: RETURNDATASIZE 00000165: PUSH1 0x00 00000167: DUP1 00000168: RETURNDATACOPY 00000169: DUP1 0000016a: DUP1 0000016b: ISZERO 0000016c: PUSH2 0x0174 0000016f: JUMPI 00000170: RETURNDATASIZE 00000171: PUSH1 0x00 00000173: RETURN 00000174: JUMPDEST 00000175: RETURNDATASIZE 00000176: PUSH1 0x00 00000178: REVERT 00000179: JUMPDEST 0000017a: DUP1 0000017b: PUSH1 0x01 0000017d: PUSH1 0x01 0000017f: PUSH1 0xa0 00000181: SHL 00000182: SUB 00000183: AND 00000184: EXTCODESIZE 00000185: PUSH1 0x00 00000187: SUB 00000188: PUSH2 0x01b4 0000018b: JUMPI 0000018c: PUSH1 0x40 0000018e: MLOAD 0000018f: PUSH4 0x4c9c8ce3 00000194: PUSH1 0xe0 00000196: SHL 00000197: DUP2 00000198: MSTORE 00000199: PUSH1 0x01 0000019b: PUSH1 0x01 0000019d: PUSH1 0xa0 0000019f: SHL 000001a0: SUB 000001a1: DUP3 000001a2: AND 000001a3: PUSH1 0x04 000001a5: DUP3 000001a6: ADD 000001a7: MSTORE 000001a8: PUSH1 0x24 000001aa: ADD 000001ab: JUMPDEST 000001ac: PUSH1 0x40 000001ae: MLOAD 000001af: DUP1 000001b0: SWAP2 000001b1: SUB 000001b2: SWAP1 000001b3: REVERT 000001b4: JUMPDEST 000001b5: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000001d6: DUP1 000001d7: SLOAD 000001d8: PUSH1 0x01 000001da: PUSH1 0x01 000001dc: PUSH1 0xa0 000001de: SHL 000001df: SUB 000001e0: NOT 000001e1: AND 000001e2: PUSH1 0x01 000001e4: PUSH1 0x01 000001e6: PUSH1 0xa0 000001e8: SHL 000001e9: SUB 000001ea: SWAP3 000001eb: SWAP1 000001ec: SWAP3 000001ed: AND 000001ee: SWAP2 000001ef: SWAP1 000001f0: SWAP2 000001f1: OR 000001f2: SWAP1 000001f3: SSTORE 000001f4: JUMP 000001f5: JUMPDEST 000001f6: PUSH1 0x60 000001f8: PUSH1 0x00 000001fa: DUP1 000001fb: DUP5 000001fc: PUSH1 0x01 000001fe: PUSH1 0x01 00000200: PUSH1 0xa0 00000202: SHL 00000203: SUB 00000204: AND 00000205: DUP5 00000206: PUSH1 0x40 00000208: MLOAD 00000209: PUSH2 0x0212 0000020c: SWAP2 0000020d: SWAP1 0000020e: PUSH2 0x0422 00000211: JUMP 00000212: JUMPDEST 00000213: PUSH1 0x00 00000215: PUSH1 0x40 00000217: MLOAD 00000218: DUP1 00000219: DUP4 0000021a: SUB 0000021b: DUP2 0000021c: DUP6 0000021d: GAS 0000021e: DELEGATECALL 0000021f: SWAP2 00000220: POP 00000221: POP 00000222: RETURNDATASIZE 00000223: DUP1 00000224: PUSH1 0x00 00000226: DUP2 00000227: EQ 00000228: PUSH2 0x024d 0000022b: JUMPI 0000022c: PUSH1 0x40 0000022e: MLOAD 0000022f: SWAP2 00000230: POP 00000231: PUSH1 0x1f 00000233: NOT 00000234: PUSH1 0x3f 00000236: RETURNDATASIZE 00000237: ADD 00000238: AND 00000239: DUP3 0000023a: ADD 0000023b: PUSH1 0x40 0000023d: MSTORE 0000023e: RETURNDATASIZE 0000023f: DUP3 00000240: MSTORE 00000241: RETURNDATASIZE 00000242: PUSH1 0x00 00000244: PUSH1 0x20 00000246: DUP5 00000247: ADD 00000248: RETURNDATACOPY 00000249: PUSH2 0x0252 0000024c: JUMP 0000024d: JUMPDEST 0000024e: PUSH1 0x60 00000250: SWAP2 00000251: POP 00000252: JUMPDEST 00000253: POP 00000254: SWAP2 00000255: POP 00000256: SWAP2 00000257: POP 00000258: PUSH2 0x0262 0000025b: DUP6 0000025c: DUP4 0000025d: DUP4 0000025e: PUSH2 0x028a 00000261: JUMP 00000262: JUMPDEST 00000263: SWAP6 00000264: SWAP5 00000265: POP 00000266: POP 00000267: POP 00000268: POP 00000269: POP 0000026a: JUMP 0000026b: JUMPDEST 0000026c: CALLVALUE 0000026d: ISZERO 0000026e: PUSH2 0x0079 00000271: JUMPI 00000272: PUSH1 0x40 00000274: MLOAD 00000275: PUSH4 0xb398979f 0000027a: PUSH1 0xe0 0000027c: SHL 0000027d: DUP2 0000027e: MSTORE 0000027f: PUSH1 0x04 00000281: ADD 00000282: PUSH1 0x40 00000284: MLOAD 00000285: DUP1 00000286: SWAP2 00000287: SUB 00000288: SWAP1 00000289: REVERT 0000028a: JUMPDEST 0000028b: PUSH1 0x60 0000028d: DUP3 0000028e: PUSH2 0x029f 00000291: JUMPI 00000292: PUSH2 0x029a 00000295: DUP3 00000296: PUSH2 0x02e9 00000299: JUMP 0000029a: JUMPDEST 0000029b: PUSH2 0x02e2 0000029e: JUMP 0000029f: JUMPDEST 000002a0: DUP2 000002a1: MLOAD 000002a2: ISZERO 000002a3: DUP1 000002a4: ISZERO 000002a5: PUSH2 0x02b6 000002a8: JUMPI 000002a9: POP 000002aa: PUSH1 0x01 000002ac: PUSH1 0x01 000002ae: PUSH1 0xa0 000002b0: SHL 000002b1: SUB 000002b2: DUP5 000002b3: AND 000002b4: EXTCODESIZE 000002b5: ISZERO 000002b6: JUMPDEST 000002b7: ISZERO 000002b8: PUSH2 0x02df 000002bb: JUMPI 000002bc: PUSH1 0x40 000002be: MLOAD 000002bf: PUSH4 0x9996b315 000002c4: PUSH1 0xe0 000002c6: SHL 000002c7: DUP2 000002c8: MSTORE 000002c9: PUSH1 0x01 000002cb: PUSH1 0x01 000002cd: PUSH1 0xa0 000002cf: SHL 000002d0: SUB 000002d1: DUP6 000002d2: AND 000002d3: PUSH1 0x04 000002d5: DUP3 000002d6: ADD 000002d7: MSTORE 000002d8: PUSH1 0x24 000002da: ADD 000002db: PUSH2 0x01ab 000002de: JUMP 000002df: JUMPDEST 000002e0: POP 000002e1: DUP1 000002e2: JUMPDEST 000002e3: SWAP4 000002e4: SWAP3 000002e5: POP 000002e6: POP 000002e7: POP 000002e8: JUMP 000002e9: JUMPDEST 000002ea: DUP1 000002eb: MLOAD 000002ec: ISZERO 000002ed: PUSH2 0x02f9 000002f0: JUMPI 000002f1: DUP1 000002f2: MLOAD 000002f3: DUP1 000002f4: DUP3 000002f5: PUSH1 0x20 000002f7: ADD 000002f8: REVERT 000002f9: JUMPDEST 000002fa: PUSH1 0x40 000002fc: MLOAD 000002fd: PUSH4 0x0a12f521 00000302: PUSH1 0xe1 00000304: SHL 00000305: DUP2 00000306: MSTORE 00000307: PUSH1 0x04 00000309: ADD 0000030a: PUSH1 0x40 0000030c: MLOAD 0000030d: DUP1 0000030e: SWAP2 0000030f: SUB 00000310: SWAP1 00000311: REVERT 00000312: JUMPDEST 00000313: PUSH1 0x00 00000315: DUP1 00000316: DUP6 00000317: DUP6 00000318: GT 00000319: ISZERO 0000031a: PUSH2 0x0322 0000031d: JUMPI 0000031e: PUSH1 0x00 00000320: DUP1 00000321: REVERT 00000322: JUMPDEST 00000323: DUP4 00000324: DUP7 00000325: GT 00000326: ISZERO 00000327: PUSH2 0x032f 0000032a: JUMPI 0000032b: PUSH1 0x00 0000032d: DUP1 0000032e: REVERT 0000032f: JUMPDEST 00000330: POP 00000331: POP 00000332: DUP3 00000333: ADD 00000334: SWAP4 00000335: SWAP2 00000336: SWAP1 00000337: SWAP3 00000338: SUB 00000339: SWAP2 0000033a: POP 0000033b: JUMP 0000033c: JUMPDEST 0000033d: PUSH4 0x4e487b71 00000342: PUSH1 0xe0 00000344: SHL 00000345: PUSH1 0x00 00000347: MSTORE 00000348: PUSH1 0x41 0000034a: PUSH1 0x04 0000034c: MSTORE 0000034d: PUSH1 0x24 0000034f: PUSH1 0x00 00000351: REVERT 00000352: JUMPDEST 00000353: PUSH1 0x00 00000355: DUP1 00000356: PUSH1 0x40 00000358: DUP4 00000359: DUP6 0000035a: SUB 0000035b: SLT 0000035c: ISZERO 0000035d: PUSH2 0x0365 00000360: JUMPI 00000361: PUSH1 0x00 00000363: DUP1 00000364: REVERT 00000365: JUMPDEST 00000366: DUP3 00000367: CALLDATALOAD 00000368: PUSH1 0x01 0000036a: PUSH1 0x01 0000036c: PUSH1 0xa0 0000036e: SHL 0000036f: SUB 00000370: DUP2 00000371: AND 00000372: DUP2 00000373: EQ 00000374: PUSH2 0x037c 00000377: JUMPI 00000378: PUSH1 0x00 0000037a: DUP1 0000037b: REVERT 0000037c: JUMPDEST 0000037d: SWAP2 0000037e: POP 0000037f: PUSH1 0x20 00000381: DUP4 00000382: ADD 00000383: CALLDATALOAD 00000384: PUSH8 0xffffffffffffffff 0000038d: DUP1 0000038e: DUP3 0000038f: GT 00000390: ISZERO 00000391: PUSH2 0x0399 00000394: JUMPI 00000395: PUSH1 0x00 00000397: DUP1 00000398: REVERT 00000399: JUMPDEST 0000039a: DUP2 0000039b: DUP6 0000039c: ADD 0000039d: SWAP2 0000039e: POP 0000039f: DUP6 000003a0: PUSH1 0x1f 000003a2: DUP4 000003a3: ADD 000003a4: SLT 000003a5: PUSH2 0x03ad 000003a8: JUMPI 000003a9: PUSH1 0x00 000003ab: DUP1 000003ac: REVERT 000003ad: JUMPDEST 000003ae: DUP2 000003af: CALLDATALOAD 000003b0: DUP2 000003b1: DUP2 000003b2: GT 000003b3: ISZERO 000003b4: PUSH2 0x03bf 000003b7: JUMPI 000003b8: PUSH2 0x03bf 000003bb: PUSH2 0x033c 000003be: JUMP 000003bf: JUMPDEST 000003c0: PUSH1 0x40 000003c2: MLOAD 000003c3: PUSH1 0x1f 000003c5: DUP3 000003c6: ADD 000003c7: PUSH1 0x1f 000003c9: NOT 000003ca: SWAP1 000003cb: DUP2 000003cc: AND 000003cd: PUSH1 0x3f 000003cf: ADD 000003d0: AND 000003d1: DUP2 000003d2: ADD 000003d3: SWAP1 000003d4: DUP4 000003d5: DUP3 000003d6: GT 000003d7: DUP2 000003d8: DUP4 000003d9: LT 000003da: OR 000003db: ISZERO 000003dc: PUSH2 0x03e7 000003df: JUMPI 000003e0: PUSH2 0x03e7 000003e3: PUSH2 0x033c 000003e6: JUMP 000003e7: JUMPDEST 000003e8: DUP2 000003e9: PUSH1 0x40 000003eb: MSTORE 000003ec: DUP3 000003ed: DUP2 000003ee: MSTORE 000003ef: DUP9 000003f0: PUSH1 0x20 000003f2: DUP5 000003f3: DUP8 000003f4: ADD 000003f5: ADD 000003f6: GT 000003f7: ISZERO 000003f8: PUSH2 0x0400 000003fb: JUMPI 000003fc: PUSH1 0x00 000003fe: DUP1 000003ff: REVERT 00000400: JUMPDEST 00000401: DUP3 00000402: PUSH1 0x20 00000404: DUP7 00000405: ADD 00000406: PUSH1 0x20 00000408: DUP4 00000409: ADD 0000040a: CALLDATACOPY 0000040b: PUSH1 0x00 0000040d: PUSH1 0x20 0000040f: DUP5 00000410: DUP4 00000411: ADD 00000412: ADD 00000413: MSTORE 00000414: DUP1 00000415: SWAP6 00000416: POP 00000417: POP 00000418: POP 00000419: POP 0000041a: POP 0000041b: POP 0000041c: SWAP3 0000041d: POP 0000041e: SWAP3 0000041f: SWAP1 00000420: POP 00000421: JUMP 00000422: JUMPDEST 00000423: PUSH1 0x00 00000425: DUP3 00000426: MLOAD 00000427: PUSH1 0x00 00000429: JUMPDEST 0000042a: DUP2 0000042b: DUP2 0000042c: LT 0000042d: ISZERO 0000042e: PUSH2 0x0443 00000431: JUMPI 00000432: PUSH1 0x20 00000434: DUP2 00000435: DUP7 00000436: ADD 00000437: DUP2 00000438: ADD 00000439: MLOAD 0000043a: DUP6 0000043b: DUP4 0000043c: ADD 0000043d: MSTORE 0000043e: ADD 0000043f: PUSH2 0x0429 00000442: JUMP 00000443: JUMPDEST 00000444: POP 00000445: PUSH1 0x00 00000447: SWAP3 00000448: ADD 00000449: SWAP2 0000044a: DUP3 0000044b: MSTORE 0000044c: POP 0000044d: SWAP2 0000044e: SWAP1 0000044f: POP 00000450: JUMP 00000451: INVALID 00000452: LOG2 00000453: PUSH5 0x6970667358 00000459: UNKNOWN(0x22) 0000045a: SLT 0000045b: KECCAK256 0000045c: UNKNOWN(0xC5) 0000045d: UNKNOWN(0xD4) 0000045e: UNKNOWN(0xEC) 0000045f: UNKNOWN(0xFB) 00000460: PUSH16 0x7088e95e01e6b7d8d383ea96bf752e2f 00000471: SIGNEXTEND 00000472: UNKNOWN(0xE6) 00000473: PUSH6 0x22221c6b82ae 0000047a: UNKNOWN(0xBD) 0000047b: MSIZE 0000047c: PUSH5 0x736f6c6343 00000482: STOP 00000483: ADDMOD 00000484: XOR 00000485: STOP 00000486: CALLER
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0xbff3df5f7184bbfa110bb20c35157a51a6668e0afec0767616080b97d296d430
call_targets:
0x4d8fd1b16b2dede04726e9e417f4400cff44cf36
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xbff3df5f7184bbfa110bb20c35157a51a6668e0afec0767616080b97d296d430",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x4d8fd1b16b2dede04726e9e417f4400cff44cf36"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x278f7943",
"selector": "0x278f7943",
"calldata_variants": [
"0x278f7943",
"0x278f79430000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 355,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 542,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|