019b477e-db62-70a3-b7f4-4c9eb26500f9
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 29625 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 29626 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 108373 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 108374 | capability.graph | complete | 1 / 3 | 1 week ago |
| 108375 | detector.run | complete | 1 / 3 | 1 week ago |
| 108376 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLDATASIZE 00000006: PUSH2 0x0013 00000009: JUMPI 0000000a: PUSH2 0x0011 0000000d: PUSH2 0x001d 00000010: JUMP 00000011: JUMPDEST 00000012: STOP 00000013: JUMPDEST 00000014: PUSH2 0x001b 00000017: PUSH2 0x001d 0000001a: JUMP 0000001b: JUMPDEST 0000001c: STOP 0000001d: JUMPDEST 0000001e: PUSH2 0x0025 00000021: PUSH2 0x0037 00000024: JUMP 00000025: JUMPDEST 00000026: PUSH2 0x0035 00000029: PUSH2 0x0030 0000002c: PUSH2 0x0039 0000002f: JUMP 00000030: JUMPDEST 00000031: PUSH2 0x00b6 00000034: JUMP 00000035: JUMPDEST 00000036: JUMP 00000037: JUMPDEST 00000038: JUMP 00000039: JUMPDEST 0000003a: PUSH1 0x00 0000003c: PUSH2 0x0043 0000003f: PUSH2 0x00dc 00000042: JUMP 00000043: JUMPDEST 00000044: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000059: AND 0000005a: PUSH4 0x5c60da1b 0000005f: PUSH1 0x40 00000061: MLOAD 00000062: DUP2 00000063: PUSH4 0xffffffff 00000068: AND 00000069: PUSH1 0xe0 0000006b: SHL 0000006c: DUP2 0000006d: MSTORE 0000006e: PUSH1 0x04 00000070: ADD 00000071: PUSH1 0x20 00000073: PUSH1 0x40 00000075: MLOAD 00000076: DUP1 00000077: DUP4 00000078: SUB 00000079: DUP2 0000007a: DUP7 0000007b: GAS 0000007c: STATICCALL 0000007d: ISZERO 0000007e: DUP1 0000007f: ISZERO 00000080: PUSH2 0x008d 00000083: JUMPI 00000084: RETURNDATASIZE 00000085: PUSH1 0x00 00000087: DUP1 00000088: RETURNDATACOPY 00000089: RETURNDATASIZE 0000008a: PUSH1 0x00 0000008c: REVERT 0000008d: JUMPDEST 0000008e: POP 0000008f: POP 00000090: POP 00000091: POP 00000092: PUSH1 0x40 00000094: MLOAD 00000095: RETURNDATASIZE 00000096: PUSH1 0x1f 00000098: NOT 00000099: PUSH1 0x1f 0000009b: DUP3 0000009c: ADD 0000009d: AND 0000009e: DUP3 0000009f: ADD 000000a0: DUP1 000000a1: PUSH1 0x40 000000a3: MSTORE 000000a4: POP 000000a5: DUP2 000000a6: ADD 000000a7: SWAP1 000000a8: PUSH2 0x00b1 000000ab: SWAP2 000000ac: SWAP1 000000ad: PUSH2 0x01a0 000000b0: JUMP 000000b1: JUMPDEST 000000b2: SWAP1 000000b3: POP 000000b4: SWAP1 000000b5: JUMP 000000b6: JUMPDEST 000000b7: CALLDATASIZE 000000b8: PUSH1 0x00 000000ba: DUP1 000000bb: CALLDATACOPY 000000bc: PUSH1 0x00 000000be: DUP1 000000bf: CALLDATASIZE 000000c0: PUSH1 0x00 000000c2: DUP5 000000c3: GAS 000000c4: DELEGATECALL 000000c5: RETURNDATASIZE 000000c6: PUSH1 0x00 000000c8: DUP1 000000c9: RETURNDATACOPY 000000ca: DUP1 000000cb: PUSH1 0x00 000000cd: DUP2 000000ce: EQ 000000cf: PUSH2 0x00d7 000000d2: JUMPI 000000d3: RETURNDATASIZE 000000d4: PUSH1 0x00 000000d6: RETURN 000000d7: JUMPDEST 000000d8: RETURNDATASIZE 000000d9: PUSH1 0x00 000000db: REVERT 000000dc: JUMPDEST 000000dd: PUSH1 0x00 000000df: PUSH2 0x010a 000000e2: PUSH32 0xa3f0ad74e5423aebfd80d3ef4346578335a9a72aeaee59ff6cb3582b35133d50 00000103: PUSH1 0x00 00000105: SHL 00000106: PUSH2 0x0133 00000109: JUMP 0000010a: JUMPDEST 0000010b: PUSH1 0x00 0000010d: ADD 0000010e: PUSH1 0x00 00000110: SWAP1 00000111: SLOAD 00000112: SWAP1 00000113: PUSH2 0x0100 00000116: EXP 00000117: SWAP1 00000118: DIV 00000119: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000012e: AND 0000012f: SWAP1 00000130: POP 00000131: SWAP1 00000132: JUMP 00000133: JUMPDEST 00000134: PUSH1 0x00 00000136: DUP2 00000137: SWAP1 00000138: POP 00000139: SWAP2 0000013a: SWAP1 0000013b: POP 0000013c: JUMP 0000013d: JUMPDEST 0000013e: PUSH1 0x00 00000140: DUP1 00000141: REVERT 00000142: JUMPDEST 00000143: PUSH1 0x00 00000145: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000015a: DUP3 0000015b: AND 0000015c: SWAP1 0000015d: POP 0000015e: SWAP2 0000015f: SWAP1 00000160: POP 00000161: JUMP 00000162: JUMPDEST 00000163: PUSH1 0x00 00000165: PUSH2 0x016d 00000168: DUP3 00000169: PUSH2 0x0142 0000016c: JUMP 0000016d: JUMPDEST 0000016e: SWAP1 0000016f: POP 00000170: SWAP2 00000171: SWAP1 00000172: POP 00000173: JUMP 00000174: JUMPDEST 00000175: PUSH2 0x017d 00000178: DUP2 00000179: PUSH2 0x0162 0000017c: JUMP 0000017d: JUMPDEST 0000017e: DUP2 0000017f: EQ 00000180: PUSH2 0x0188 00000183: JUMPI 00000184: PUSH1 0x00 00000186: DUP1 00000187: REVERT 00000188: JUMPDEST 00000189: POP 0000018a: JUMP 0000018b: JUMPDEST 0000018c: PUSH1 0x00 0000018e: DUP2 0000018f: MLOAD 00000190: SWAP1 00000191: POP 00000192: PUSH2 0x019a 00000195: DUP2 00000196: PUSH2 0x0174 00000199: JUMP 0000019a: JUMPDEST 0000019b: SWAP3 0000019c: SWAP2 0000019d: POP 0000019e: POP 0000019f: JUMP 000001a0: JUMPDEST 000001a1: PUSH1 0x00 000001a3: PUSH1 0x20 000001a5: DUP3 000001a6: DUP5 000001a7: SUB 000001a8: SLT 000001a9: ISZERO 000001aa: PUSH2 0x01b6 000001ad: JUMPI 000001ae: PUSH2 0x01b5 000001b1: PUSH2 0x013d 000001b4: JUMP 000001b5: JUMPDEST 000001b6: JUMPDEST 000001b7: PUSH1 0x00 000001b9: PUSH2 0x01c4 000001bc: DUP5 000001bd: DUP3 000001be: DUP6 000001bf: ADD 000001c0: PUSH2 0x018b 000001c3: JUMP 000001c4: JUMPDEST 000001c5: SWAP2 000001c6: POP 000001c7: POP 000001c8: SWAP3 000001c9: SWAP2 000001ca: POP 000001cb: POP 000001cc: JUMP 000001cd: INVALID 000001ce: LOG2 000001cf: PUSH5 0x6970667358 000001d5: UNKNOWN(0x22) 000001d6: SLT 000001d7: KECCAK256 000001d8: UNKNOWN(0xC0) 000001d9: LOG1 000001da: SLT 000001db: UNKNOWN(0x0E) 000001dc: UNKNOWN(0x2C) 000001dd: SELFBALANCE 000001de: UNKNOWN(0xC1) 000001df: DUP15 000001e0: CALL 000001e1: SWAP10 000001e2: DUP12 000001e3: UNKNOWN(0x0E) 000001e4: UNKNOWN(0xD8) 000001e5: UNKNOWN(0x0D) 000001e6: UNKNOWN(0xF9) 000001e7: MUL 000001e8: UNKNOWN(0xEE) 000001e9: PUSH18 0x87bf8f379f83bf02a851cb9257a764736f6c 000001fc: PUSH4 0x43000813 00000201: STOP 00000202: CALLER
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0xc81e1bd2687b92403219dd93fcd37e6097ca91dacf35fd1d218f8e292dd82995
call_targets:
0x5018cc0d628fb322b2a040cfcd269a36c60b1538
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xc81e1bd2687b92403219dd93fcd37e6097ca91dacf35fd1d218f8e292dd82995",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x5018cc0d628fb322b2a040cfcd269a36c60b1538"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 196,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 1,
"untrusted_delegatecall_count": 1
}
|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0xc81e1bd2687b92403219dd93fcd37e6097ca91dacf35fd1d218f8e292dd82995
call_targets:
0x2cb52d16de1462ba53d71d14eeb2b77da54deb09
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xc81e1bd2687b92403219dd93fcd37e6097ca91dacf35fd1d218f8e292dd82995",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x2cb52d16de1462ba53d71d14eeb2b77da54deb09"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 480,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0xc81e1bd2687b92403219dd93fcd37e6097ca91dacf35fd1d218f8e292dd82995
call_targets:
0x2cb52d16de1462ba53d71d14eeb2b77da54deb09
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xc81e1bd2687b92403219dd93fcd37e6097ca91dacf35fd1d218f8e292dd82995",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x2cb52d16de1462ba53d71d14eeb2b77da54deb09"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x",
"selector": "fallback",
"calldata_variants": [
"0x"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 480,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|