019b477e-db16-7246-a0f2-c16a551ef3f6
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 29579 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 29580 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 108473 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 108474 | capability.graph | complete | 1 / 3 | 1 week ago |
| 108475 | detector.run | complete | 1 / 3 | 1 week ago |
| 108476 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH2 0x000c 00000008: PUSH2 0x000e 0000000b: JUMP 0000000c: JUMPDEST 0000000d: STOP 0000000e: JUMPDEST 0000000f: PUSH32 0x0000000000000000000000003a14a64e7257da8e9e7ea797f5d45a03556858a2 00000030: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000045: AND 00000046: CALLER 00000047: SUB 00000048: PUSH2 0x00d2 0000004b: JUMPI 0000004c: PUSH1 0x00 0000004e: CALLDATALOAD 0000004f: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000 00000070: AND 00000071: PUSH32 0x4f1ef28600000000000000000000000000000000000000000000000000000000 00000092: EQ 00000093: PUSH2 0x00c8 00000096: JUMPI 00000097: PUSH1 0x40 00000099: MLOAD 0000009a: PUSH32 0xd2b576ec00000000000000000000000000000000000000000000000000000000 000000bb: DUP2 000000bc: MSTORE 000000bd: PUSH1 0x04 000000bf: ADD 000000c0: PUSH1 0x40 000000c2: MLOAD 000000c3: DUP1 000000c4: SWAP2 000000c5: SUB 000000c6: SWAP1 000000c7: REVERT 000000c8: JUMPDEST 000000c9: PUSH2 0x00d0 000000cc: PUSH2 0x00da 000000cf: JUMP 000000d0: JUMPDEST 000000d1: JUMP 000000d2: JUMPDEST 000000d3: PUSH2 0x00d0 000000d6: PUSH2 0x0109 000000d9: JUMP 000000da: JUMPDEST 000000db: PUSH1 0x00 000000dd: DUP1 000000de: PUSH2 0x00ea 000000e1: CALLDATASIZE 000000e2: PUSH1 0x04 000000e4: DUP2 000000e5: DUP5 000000e6: PUSH2 0x044d 000000e9: JUMP 000000ea: JUMPDEST 000000eb: DUP2 000000ec: ADD 000000ed: SWAP1 000000ee: PUSH2 0x00f7 000000f1: SWAP2 000000f2: SWAP1 000000f3: PUSH2 0x04a6 000000f6: JUMP 000000f7: JUMPDEST 000000f8: SWAP2 000000f9: POP 000000fa: SWAP2 000000fb: POP 000000fc: PUSH2 0x0105 000000ff: DUP3 00000100: DUP3 00000101: PUSH2 0x0119 00000104: JUMP 00000105: JUMPDEST 00000106: POP 00000107: POP 00000108: JUMP 00000109: JUMPDEST 0000010a: PUSH2 0x00d0 0000010d: PUSH2 0x0114 00000110: PUSH2 0x0181 00000113: JUMP 00000114: JUMPDEST 00000115: PUSH2 0x01c6 00000118: JUMP 00000119: JUMPDEST 0000011a: PUSH2 0x0122 0000011d: DUP3 0000011e: PUSH2 0x01ea 00000121: JUMP 00000122: JUMPDEST 00000123: PUSH1 0x40 00000125: MLOAD 00000126: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000013b: DUP4 0000013c: AND 0000013d: SWAP1 0000013e: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b 0000015f: SWAP1 00000160: PUSH1 0x00 00000162: SWAP1 00000163: LOG2 00000164: DUP1 00000165: MLOAD 00000166: ISZERO 00000167: PUSH2 0x0179 0000016a: JUMPI 0000016b: PUSH2 0x0174 0000016e: DUP3 0000016f: DUP3 00000170: PUSH2 0x02be 00000173: JUMP 00000174: JUMPDEST 00000175: POP 00000176: POP 00000177: POP 00000178: JUMP 00000179: JUMPDEST 0000017a: PUSH2 0x0105 0000017d: PUSH2 0x0341 00000180: JUMP 00000181: JUMPDEST 00000182: PUSH1 0x00 00000184: PUSH2 0x01c1 00000187: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000001a8: SLOAD 000001a9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001be: AND 000001bf: SWAP1 000001c0: JUMP 000001c1: JUMPDEST 000001c2: SWAP1 000001c3: POP 000001c4: SWAP1 000001c5: JUMP 000001c6: JUMPDEST 000001c7: CALLDATASIZE 000001c8: PUSH1 0x00 000001ca: DUP1 000001cb: CALLDATACOPY 000001cc: PUSH1 0x00 000001ce: DUP1 000001cf: CALLDATASIZE 000001d0: PUSH1 0x00 000001d2: DUP5 000001d3: GAS 000001d4: DELEGATECALL 000001d5: RETURNDATASIZE 000001d6: PUSH1 0x00 000001d8: DUP1 000001d9: RETURNDATACOPY 000001da: DUP1 000001db: DUP1 000001dc: ISZERO 000001dd: PUSH2 0x01e5 000001e0: JUMPI 000001e1: RETURNDATASIZE 000001e2: PUSH1 0x00 000001e4: RETURN 000001e5: JUMPDEST 000001e6: RETURNDATASIZE 000001e7: PUSH1 0x00 000001e9: REVERT 000001ea: JUMPDEST 000001eb: DUP1 000001ec: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000201: AND 00000202: EXTCODESIZE 00000203: PUSH1 0x00 00000205: SUB 00000206: PUSH2 0x0258 00000209: JUMPI 0000020a: PUSH1 0x40 0000020c: MLOAD 0000020d: PUSH32 0x4c9c8ce300000000000000000000000000000000000000000000000000000000 0000022e: DUP2 0000022f: MSTORE 00000230: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000245: DUP3 00000246: AND 00000247: PUSH1 0x04 00000249: DUP3 0000024a: ADD 0000024b: MSTORE 0000024c: PUSH1 0x24 0000024e: ADD 0000024f: JUMPDEST 00000250: PUSH1 0x40 00000252: MLOAD 00000253: DUP1 00000254: SWAP2 00000255: SUB 00000256: SWAP1 00000257: REVERT 00000258: JUMPDEST 00000259: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 0000027a: DUP1 0000027b: SLOAD 0000027c: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000 0000029d: AND 0000029e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000002b3: SWAP3 000002b4: SWAP1 000002b5: SWAP3 000002b6: AND 000002b7: SWAP2 000002b8: SWAP1 000002b9: SWAP2 000002ba: OR 000002bb: SWAP1 000002bc: SSTORE 000002bd: JUMP 000002be: JUMPDEST 000002bf: PUSH1 0x60 000002c1: PUSH1 0x00 000002c3: DUP1 000002c4: DUP5 000002c5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000002da: AND 000002db: DUP5 000002dc: PUSH1 0x40 000002de: MLOAD 000002df: PUSH2 0x02e8 000002e2: SWAP2 000002e3: SWAP1 000002e4: PUSH2 0x05a1 000002e7: JUMP 000002e8: JUMPDEST 000002e9: PUSH1 0x00 000002eb: PUSH1 0x40 000002ed: MLOAD 000002ee: DUP1 000002ef: DUP4 000002f0: SUB 000002f1: DUP2 000002f2: DUP6 000002f3: GAS 000002f4: DELEGATECALL 000002f5: SWAP2 000002f6: POP 000002f7: POP 000002f8: RETURNDATASIZE 000002f9: DUP1 000002fa: PUSH1 0x00 000002fc: DUP2 000002fd: EQ 000002fe: PUSH2 0x0323 00000301: JUMPI 00000302: PUSH1 0x40 00000304: MLOAD 00000305: SWAP2 00000306: POP 00000307: PUSH1 0x1f 00000309: NOT 0000030a: PUSH1 0x3f 0000030c: RETURNDATASIZE 0000030d: ADD 0000030e: AND 0000030f: DUP3 00000310: ADD 00000311: PUSH1 0x40 00000313: MSTORE 00000314: RETURNDATASIZE 00000315: DUP3 00000316: MSTORE 00000317: RETURNDATASIZE 00000318: PUSH1 0x00 0000031a: PUSH1 0x20 0000031c: DUP5 0000031d: ADD 0000031e: RETURNDATACOPY 0000031f: PUSH2 0x0328 00000322: JUMP 00000323: JUMPDEST 00000324: PUSH1 0x60 00000326: SWAP2 00000327: POP 00000328: JUMPDEST 00000329: POP 0000032a: SWAP2 0000032b: POP 0000032c: SWAP2 0000032d: POP 0000032e: PUSH2 0x0338 00000331: DUP6 00000332: DUP4 00000333: DUP4 00000334: PUSH2 0x0379 00000337: JUMP 00000338: JUMPDEST 00000339: SWAP6 0000033a: SWAP5 0000033b: POP 0000033c: POP 0000033d: POP 0000033e: POP 0000033f: POP 00000340: JUMP 00000341: JUMPDEST 00000342: CALLVALUE 00000343: ISZERO 00000344: PUSH2 0x00d0 00000347: JUMPI 00000348: PUSH1 0x40 0000034a: MLOAD 0000034b: PUSH32 0xb398979f00000000000000000000000000000000000000000000000000000000 0000036c: DUP2 0000036d: MSTORE 0000036e: PUSH1 0x04 00000370: ADD 00000371: PUSH1 0x40 00000373: MLOAD 00000374: DUP1 00000375: SWAP2 00000376: SUB 00000377: SWAP1 00000378: REVERT 00000379: JUMPDEST 0000037a: PUSH1 0x60 0000037c: DUP3 0000037d: PUSH2 0x038e 00000380: JUMPI 00000381: PUSH2 0x0389 00000384: DUP3 00000385: PUSH2 0x040b 00000388: JUMP 00000389: JUMPDEST 0000038a: PUSH2 0x0404 0000038d: JUMP 0000038e: JUMPDEST 0000038f: DUP2 00000390: MLOAD 00000391: ISZERO 00000392: DUP1 00000393: ISZERO 00000394: PUSH2 0x03b2 00000397: JUMPI 00000398: POP 00000399: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003ae: DUP5 000003af: AND 000003b0: EXTCODESIZE 000003b1: ISZERO 000003b2: JUMPDEST 000003b3: ISZERO 000003b4: PUSH2 0x0401 000003b7: JUMPI 000003b8: PUSH1 0x40 000003ba: MLOAD 000003bb: PUSH32 0x9996b31500000000000000000000000000000000000000000000000000000000 000003dc: DUP2 000003dd: MSTORE 000003de: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003f3: DUP6 000003f4: AND 000003f5: PUSH1 0x04 000003f7: DUP3 000003f8: ADD 000003f9: MSTORE 000003fa: PUSH1 0x24 000003fc: ADD 000003fd: PUSH2 0x024f 00000400: JUMP 00000401: JUMPDEST 00000402: POP 00000403: DUP1 00000404: JUMPDEST 00000405: SWAP4 00000406: SWAP3 00000407: POP 00000408: POP 00000409: POP 0000040a: JUMP 0000040b: JUMPDEST 0000040c: DUP1 0000040d: MLOAD 0000040e: ISZERO 0000040f: PUSH2 0x041b 00000412: JUMPI 00000413: DUP1 00000414: MLOAD 00000415: DUP1 00000416: DUP3 00000417: PUSH1 0x20 00000419: ADD 0000041a: REVERT 0000041b: JUMPDEST 0000041c: PUSH1 0x40 0000041e: MLOAD 0000041f: PUSH32 0xd6bda27500000000000000000000000000000000000000000000000000000000 00000440: DUP2 00000441: MSTORE 00000442: PUSH1 0x04 00000444: ADD 00000445: PUSH1 0x40 00000447: MLOAD 00000448: DUP1 00000449: SWAP2 0000044a: SUB 0000044b: SWAP1 0000044c: REVERT 0000044d: JUMPDEST 0000044e: PUSH1 0x00 00000450: DUP1 00000451: DUP6 00000452: DUP6 00000453: GT 00000454: ISZERO 00000455: PUSH2 0x045d 00000458: JUMPI 00000459: PUSH1 0x00 0000045b: DUP1 0000045c: REVERT 0000045d: JUMPDEST 0000045e: DUP4 0000045f: DUP7 00000460: GT 00000461: ISZERO 00000462: PUSH2 0x046a 00000465: JUMPI 00000466: PUSH1 0x00 00000468: DUP1 00000469: REVERT 0000046a: JUMPDEST 0000046b: POP 0000046c: POP 0000046d: DUP3 0000046e: ADD 0000046f: SWAP4 00000470: SWAP2 00000471: SWAP1 00000472: SWAP3 00000473: SUB 00000474: SWAP2 00000475: POP 00000476: JUMP 00000477: JUMPDEST 00000478: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000 00000499: PUSH1 0x00 0000049b: MSTORE 0000049c: PUSH1 0x41 0000049e: PUSH1 0x04 000004a0: MSTORE 000004a1: PUSH1 0x24 000004a3: PUSH1 0x00 000004a5: REVERT 000004a6: JUMPDEST 000004a7: PUSH1 0x00 000004a9: DUP1 000004aa: PUSH1 0x40 000004ac: DUP4 000004ad: DUP6 000004ae: SUB 000004af: SLT 000004b0: ISZERO 000004b1: PUSH2 0x04b9 000004b4: JUMPI 000004b5: PUSH1 0x00 000004b7: DUP1 000004b8: REVERT 000004b9: JUMPDEST 000004ba: DUP3 000004bb: CALLDATALOAD 000004bc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004d1: DUP2 000004d2: AND 000004d3: DUP2 000004d4: EQ 000004d5: PUSH2 0x04dd 000004d8: JUMPI 000004d9: PUSH1 0x00 000004db: DUP1 000004dc: REVERT 000004dd: JUMPDEST 000004de: SWAP2 000004df: POP 000004e0: PUSH1 0x20 000004e2: DUP4 000004e3: ADD 000004e4: CALLDATALOAD 000004e5: PUSH8 0xffffffffffffffff 000004ee: DUP1 000004ef: DUP3 000004f0: GT 000004f1: ISZERO 000004f2: PUSH2 0x04fa 000004f5: JUMPI 000004f6: PUSH1 0x00 000004f8: DUP1 000004f9: REVERT 000004fa: JUMPDEST 000004fb: DUP2 000004fc: DUP6 000004fd: ADD 000004fe: SWAP2 000004ff: POP 00000500: DUP6 00000501: PUSH1 0x1f 00000503: DUP4 00000504: ADD 00000505: SLT 00000506: PUSH2 0x050e 00000509: JUMPI 0000050a: PUSH1 0x00 0000050c: DUP1 0000050d: REVERT 0000050e: JUMPDEST 0000050f: DUP2 00000510: CALLDATALOAD 00000511: DUP2 00000512: DUP2 00000513: GT 00000514: ISZERO 00000515: PUSH2 0x0520 00000518: JUMPI 00000519: PUSH2 0x0520 0000051c: PUSH2 0x0477 0000051f: JUMP 00000520: JUMPDEST 00000521: PUSH1 0x40 00000523: MLOAD 00000524: PUSH1 0x1f 00000526: DUP3 00000527: ADD 00000528: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0 00000549: SWAP1 0000054a: DUP2 0000054b: AND 0000054c: PUSH1 0x3f 0000054e: ADD 0000054f: AND 00000550: DUP2 00000551: ADD 00000552: SWAP1 00000553: DUP4 00000554: DUP3 00000555: GT 00000556: DUP2 00000557: DUP4 00000558: LT 00000559: OR 0000055a: ISZERO 0000055b: PUSH2 0x0566 0000055e: JUMPI 0000055f: PUSH2 0x0566 00000562: PUSH2 0x0477 00000565: JUMP 00000566: JUMPDEST 00000567: DUP2 00000568: PUSH1 0x40 0000056a: MSTORE 0000056b: DUP3 0000056c: DUP2 0000056d: MSTORE 0000056e: DUP9 0000056f: PUSH1 0x20 00000571: DUP5 00000572: DUP8 00000573: ADD 00000574: ADD 00000575: GT 00000576: ISZERO 00000577: PUSH2 0x057f 0000057a: JUMPI 0000057b: PUSH1 0x00 0000057d: DUP1 0000057e: REVERT 0000057f: JUMPDEST 00000580: DUP3 00000581: PUSH1 0x20 00000583: DUP7 00000584: ADD 00000585: PUSH1 0x20 00000587: DUP4 00000588: ADD 00000589: CALLDATACOPY 0000058a: PUSH1 0x00 0000058c: PUSH1 0x20 0000058e: DUP5 0000058f: DUP4 00000590: ADD 00000591: ADD 00000592: MSTORE 00000593: DUP1 00000594: SWAP6 00000595: POP 00000596: POP 00000597: POP 00000598: POP 00000599: POP 0000059a: POP 0000059b: SWAP3 0000059c: POP 0000059d: SWAP3 0000059e: SWAP1 0000059f: POP 000005a0: JUMP 000005a1: JUMPDEST 000005a2: PUSH1 0x00 000005a4: DUP3 000005a5: MLOAD 000005a6: PUSH1 0x00 000005a8: JUMPDEST 000005a9: DUP2 000005aa: DUP2 000005ab: LT 000005ac: ISZERO 000005ad: PUSH2 0x05c2 000005b0: JUMPI 000005b1: PUSH1 0x20 000005b3: DUP2 000005b4: DUP7 000005b5: ADD 000005b6: DUP2 000005b7: ADD 000005b8: MLOAD 000005b9: DUP6 000005ba: DUP4 000005bb: ADD 000005bc: MSTORE 000005bd: ADD 000005be: PUSH2 0x05a8 000005c1: JUMP 000005c2: JUMPDEST 000005c3: POP 000005c4: PUSH1 0x00 000005c6: SWAP3 000005c7: ADD 000005c8: SWAP2 000005c9: DUP3 000005ca: MSTORE 000005cb: POP 000005cc: SWAP2 000005cd: SWAP1 000005ce: POP 000005cf: JUMP 000005d0: INVALID 000005d1: LOG2 000005d2: PUSH5 0x6970667358 000005d8: UNKNOWN(0x22) 000005d9: SLT 000005da: KECCAK256 000005db: UNKNOWN(0xCC) 000005dc: PUSH15 0x140ce2fa54584591d0dbcb47bfa03e 000005ec: DUP7 000005ed: UNKNOWN(0xC0) 000005ee: SWAP2 000005ef: PUSH0 000005f0: DUP6 000005f1: CALLCODE 000005f2: SWAP5 000005f3: SWAP13 000005f4: CALLDATALOAD 000005f5: PUSH14 0x21450f758f64736f6c6343000819 00000604: STOP 00000605: CALLER
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0xd6688bf460b8786d6119378839c17cc410feac5ba6478dad67e61ade843d8ca0
call_targets:
0x34a0a70c78c6477a3c721828b7e220a6c3246554
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xd6688bf460b8786d6119378839c17cc410feac5ba6478dad67e61ade843d8ca0",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x34a0a70c78c6477a3c721828b7e220a6c3246554"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 468,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 756,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xd6688bf460b8786d6119378839c17cc410feac5ba6478dad67e61ade843d8ca0
call_targets:
0xe1afed6a61a169638f3a895e0f0506a5218e2bf5
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xd6688bf460b8786d6119378839c17cc410feac5ba6478dad67e61ade843d8ca0",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xe1afed6a61a169638f3a895e0f0506a5218e2bf5"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1521,
"opcode": "CALLCODE",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xd6688bf460b8786d6119378839c17cc410feac5ba6478dad67e61ade843d8ca0
call_targets:
0xe1afed6a61a169638f3a895e0f0506a5218e2bf5
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xd6688bf460b8786d6119378839c17cc410feac5ba6478dad67e61ade843d8ca0",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xe1afed6a61a169638f3a895e0f0506a5218e2bf5"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1521,
"opcode": "CALLCODE",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|