TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-dc38-70d3-a723-8c2c914d345a

complete
Chain ID
1
Address
Block Number
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
29759 artifact.fetch complete 1 / 3 3 months ago
29760 tool.cast_disasm complete 1 / 3 3 months ago
72640 analysis.bundle complete 1 / 3 1 week ago
72641 capability.graph complete 1 / 3 1 week ago
72642 detector.run complete 1 / 3 1 week ago
72643 validation.fork complete 1 / 3 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
2
Total opcodes
1063
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x005e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x5c60da1b
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x5c60da1b
00000024: EQ
00000025: PUSH2 0x00a8
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8f283970
0000002f: EQ
00000030: PUSH2 0x00e6
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf851a440
0000003a: EQ
0000003b: PUSH2 0x0106
0000003e: JUMPI
0000003f: PUSH2 0x006d
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x3659cfe6
0000004a: EQ
0000004b: PUSH2 0x0075
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x4f1ef286
00000055: EQ
00000056: PUSH2 0x0095
00000059: JUMPI
0000005a: PUSH2 0x006d
0000005d: JUMP
0000005e: JUMPDEST
0000005f: CALLDATASIZE
00000060: PUSH2 0x006d
00000063: JUMPI
00000064: PUSH2 0x006b
00000067: PUSH2 0x011b
0000006a: JUMP
0000006b: JUMPDEST
0000006c: STOP
0000006d: JUMPDEST
0000006e: PUSH2 0x006b
00000071: PUSH2 0x011b
00000074: JUMP
00000075: JUMPDEST
00000076: CALLVALUE
00000077: DUP1
00000078: ISZERO
00000079: PUSH2 0x0081
0000007c: JUMPI
0000007d: PUSH1 0x00
0000007f: DUP1
00000080: REVERT
00000081: JUMPDEST
00000082: POP
00000083: PUSH2 0x006b
00000086: PUSH2 0x0090
00000089: CALLDATASIZE
0000008a: PUSH1 0x04
0000008c: PUSH2 0x086f
0000008f: JUMP
00000090: JUMPDEST
00000091: PUSH2 0x0135
00000094: JUMP
00000095: JUMPDEST
00000096: PUSH2 0x006b
00000099: PUSH2 0x00a3
0000009c: CALLDATASIZE
0000009d: PUSH1 0x04
0000009f: PUSH2 0x088a
000000a2: JUMP
000000a3: JUMPDEST
000000a4: PUSH2 0x017f
000000a7: JUMP
000000a8: JUMPDEST
000000a9: CALLVALUE
000000aa: DUP1
000000ab: ISZERO
000000ac: PUSH2 0x00b4
000000af: JUMPI
000000b0: PUSH1 0x00
000000b2: DUP1
000000b3: REVERT
000000b4: JUMPDEST
000000b5: POP
000000b6: PUSH2 0x00bd
000000b9: PUSH2 0x01f3
000000bc: JUMP
000000bd: JUMPDEST
000000be: PUSH1 0x40
000000c0: MLOAD
000000c1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000d6: SWAP1
000000d7: SWAP2
000000d8: AND
000000d9: DUP2
000000da: MSTORE
000000db: PUSH1 0x20
000000dd: ADD
000000de: PUSH1 0x40
000000e0: MLOAD
000000e1: DUP1
000000e2: SWAP2
000000e3: SUB
000000e4: SWAP1
000000e5: RETURN
000000e6: JUMPDEST
000000e7: CALLVALUE
000000e8: DUP1
000000e9: ISZERO
000000ea: PUSH2 0x00f2
000000ed: JUMPI
000000ee: PUSH1 0x00
000000f0: DUP1
000000f1: REVERT
000000f2: JUMPDEST
000000f3: POP
000000f4: PUSH2 0x006b
000000f7: PUSH2 0x0101
000000fa: CALLDATASIZE
000000fb: PUSH1 0x04
000000fd: PUSH2 0x086f
00000100: JUMP
00000101: JUMPDEST
00000102: PUSH2 0x0231
00000105: JUMP
00000106: JUMPDEST
00000107: CALLVALUE
00000108: DUP1
00000109: ISZERO
0000010a: PUSH2 0x0112
0000010d: JUMPI
0000010e: PUSH1 0x00
00000110: DUP1
00000111: REVERT
00000112: JUMPDEST
00000113: POP
00000114: PUSH2 0x00bd
00000117: PUSH2 0x025e
0000011a: JUMP
0000011b: JUMPDEST
0000011c: PUSH2 0x0123
0000011f: PUSH2 0x028c
00000122: JUMP
00000123: JUMPDEST
00000124: PUSH2 0x0133
00000127: PUSH2 0x012e
0000012a: PUSH2 0x0363
0000012d: JUMP
0000012e: JUMPDEST
0000012f: PUSH2 0x036d
00000132: JUMP
00000133: JUMPDEST
00000134: JUMP
00000135: JUMPDEST
00000136: PUSH2 0x013d
00000139: PUSH2 0x0391
0000013c: JUMP
0000013d: JUMPDEST
0000013e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000153: AND
00000154: CALLER
00000155: SUB
00000156: PUSH2 0x0177
00000159: JUMPI
0000015a: PUSH2 0x0174
0000015d: DUP2
0000015e: PUSH1 0x40
00000160: MLOAD
00000161: DUP1
00000162: PUSH1 0x20
00000164: ADD
00000165: PUSH1 0x40
00000167: MSTORE
00000168: DUP1
00000169: PUSH1 0x00
0000016b: DUP2
0000016c: MSTORE
0000016d: POP
0000016e: PUSH1 0x00
00000170: PUSH2 0x03d1
00000173: JUMP
00000174: JUMPDEST
00000175: POP
00000176: JUMP
00000177: JUMPDEST
00000178: PUSH2 0x0174
0000017b: PUSH2 0x011b
0000017e: JUMP
0000017f: JUMPDEST
00000180: PUSH2 0x0187
00000183: PUSH2 0x0391
00000186: JUMP
00000187: JUMPDEST
00000188: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000019d: AND
0000019e: CALLER
0000019f: SUB
000001a0: PUSH2 0x01eb
000001a3: JUMPI
000001a4: PUSH2 0x01e6
000001a7: DUP4
000001a8: DUP4
000001a9: DUP4
000001aa: DUP1
000001ab: DUP1
000001ac: PUSH1 0x1f
000001ae: ADD
000001af: PUSH1 0x20
000001b1: DUP1
000001b2: SWAP2
000001b3: DIV
000001b4: MUL
000001b5: PUSH1 0x20
000001b7: ADD
000001b8: PUSH1 0x40
000001ba: MLOAD
000001bb: SWAP1
000001bc: DUP2
000001bd: ADD
000001be: PUSH1 0x40
000001c0: MSTORE
000001c1: DUP1
000001c2: SWAP4
000001c3: SWAP3
000001c4: SWAP2
000001c5: SWAP1
000001c6: DUP2
000001c7: DUP2
000001c8: MSTORE
000001c9: PUSH1 0x20
000001cb: ADD
000001cc: DUP4
000001cd: DUP4
000001ce: DUP1
000001cf: DUP3
000001d0: DUP5
000001d1: CALLDATACOPY
000001d2: PUSH1 0x00
000001d4: SWAP3
000001d5: ADD
000001d6: SWAP2
000001d7: SWAP1
000001d8: SWAP2
000001d9: MSTORE
000001da: POP
000001db: PUSH1 0x01
000001dd: SWAP3
000001de: POP
000001df: PUSH2 0x03d1
000001e2: SWAP2
000001e3: POP
000001e4: POP
000001e5: JUMP
000001e6: JUMPDEST
000001e7: POP
000001e8: POP
000001e9: POP
000001ea: JUMP
000001eb: JUMPDEST
000001ec: PUSH2 0x01e6
000001ef: PUSH2 0x011b
000001f2: JUMP
000001f3: JUMPDEST
000001f4: PUSH1 0x00
000001f6: PUSH2 0x01fd
000001f9: PUSH2 0x0391
000001fc: JUMP
000001fd: JUMPDEST
000001fe: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000213: AND
00000214: CALLER
00000215: SUB
00000216: PUSH2 0x0226
00000219: JUMPI
0000021a: PUSH2 0x0221
0000021d: PUSH2 0x0363
00000220: JUMP
00000221: JUMPDEST
00000222: SWAP1
00000223: POP
00000224: SWAP1
00000225: JUMP
00000226: JUMPDEST
00000227: PUSH2 0x022e
0000022a: PUSH2 0x011b
0000022d: JUMP
0000022e: JUMPDEST
0000022f: SWAP1
00000230: JUMP
00000231: JUMPDEST
00000232: PUSH2 0x0239
00000235: PUSH2 0x0391
00000238: JUMP
00000239: JUMPDEST
0000023a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000024f: AND
00000250: CALLER
00000251: SUB
00000252: PUSH2 0x0177
00000255: JUMPI
00000256: PUSH2 0x0174
00000259: DUP2
0000025a: PUSH2 0x03fc
0000025d: JUMP
0000025e: JUMPDEST
0000025f: PUSH1 0x00
00000261: PUSH2 0x0268
00000264: PUSH2 0x0391
00000267: JUMP
00000268: JUMPDEST
00000269: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000027e: AND
0000027f: CALLER
00000280: SUB
00000281: PUSH2 0x0226
00000284: JUMPI
00000285: PUSH2 0x0221
00000288: PUSH2 0x0391
0000028b: JUMP
0000028c: JUMPDEST
0000028d: PUSH2 0x0294
00000290: PUSH2 0x0391
00000293: JUMP
00000294: JUMPDEST
00000295: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002aa: AND
000002ab: CALLER
000002ac: SUB
000002ad: PUSH2 0x0133
000002b0: JUMPI
000002b1: PUSH1 0x40
000002b3: MLOAD
000002b4: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000002d5: DUP2
000002d6: MSTORE
000002d7: PUSH1 0x20
000002d9: PUSH1 0x04
000002db: DUP3
000002dc: ADD
000002dd: MSTORE
000002de: PUSH1 0x42
000002e0: PUSH1 0x24
000002e2: DUP3
000002e3: ADD
000002e4: MSTORE
000002e5: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
00000306: PUSH1 0x44
00000308: DUP3
00000309: ADD
0000030a: MSTORE
0000030b: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
0000032c: PUSH1 0x64
0000032e: DUP3
0000032f: ADD
00000330: MSTORE
00000331: PUSH32 0x6574000000000000000000000000000000000000000000000000000000000000
00000352: PUSH1 0x84
00000354: DUP3
00000355: ADD
00000356: MSTORE
00000357: PUSH1 0xa4
00000359: ADD
0000035a: JUMPDEST
0000035b: PUSH1 0x40
0000035d: MLOAD
0000035e: DUP1
0000035f: SWAP2
00000360: SUB
00000361: SWAP1
00000362: REVERT
00000363: JUMPDEST
00000364: PUSH1 0x00
00000366: PUSH2 0x0221
00000369: PUSH2 0x045d
0000036c: JUMP
0000036d: JUMPDEST
0000036e: CALLDATASIZE
0000036f: PUSH1 0x00
00000371: DUP1
00000372: CALLDATACOPY
00000373: PUSH1 0x00
00000375: DUP1
00000376: CALLDATASIZE
00000377: PUSH1 0x00
00000379: DUP5
0000037a: GAS
0000037b: DELEGATECALL
0000037c: RETURNDATASIZE
0000037d: PUSH1 0x00
0000037f: DUP1
00000380: RETURNDATACOPY
00000381: DUP1
00000382: DUP1
00000383: ISZERO
00000384: PUSH2 0x038c
00000387: JUMPI
00000388: RETURNDATASIZE
00000389: PUSH1 0x00
0000038b: RETURN
0000038c: JUMPDEST
0000038d: RETURNDATASIZE
0000038e: PUSH1 0x00
00000390: REVERT
00000391: JUMPDEST
00000392: PUSH1 0x00
00000394: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000003b5: JUMPDEST
000003b6: SLOAD
000003b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003cc: AND
000003cd: SWAP2
000003ce: SWAP1
000003cf: POP
000003d0: JUMP
000003d1: JUMPDEST
000003d2: PUSH2 0x03da
000003d5: DUP4
000003d6: PUSH2 0x0485
000003d9: JUMP
000003da: JUMPDEST
000003db: PUSH1 0x00
000003dd: DUP3
000003de: MLOAD
000003df: GT
000003e0: DUP1
000003e1: PUSH2 0x03e7
000003e4: JUMPI
000003e5: POP
000003e6: DUP1
000003e7: JUMPDEST
000003e8: ISZERO
000003e9: PUSH2 0x01e6
000003ec: JUMPI
000003ed: PUSH2 0x03f6
000003f0: DUP4
000003f1: DUP4
000003f2: PUSH2 0x04d2
000003f5: JUMP
000003f6: JUMPDEST
000003f7: POP
000003f8: POP
000003f9: POP
000003fa: POP
000003fb: JUMP
000003fc: JUMPDEST
000003fd: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
0000041e: PUSH2 0x0425
00000421: PUSH2 0x0391
00000424: JUMP
00000425: JUMPDEST
00000426: PUSH1 0x40
00000428: DUP1
00000429: MLOAD
0000042a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000043f: SWAP3
00000440: DUP4
00000441: AND
00000442: DUP2
00000443: MSTORE
00000444: SWAP2
00000445: DUP5
00000446: AND
00000447: PUSH1 0x20
00000449: DUP4
0000044a: ADD
0000044b: MSTORE
0000044c: ADD
0000044d: PUSH1 0x40
0000044f: MLOAD
00000450: DUP1
00000451: SWAP2
00000452: SUB
00000453: SWAP1
00000454: LOG1
00000455: PUSH2 0x0174
00000458: DUP2
00000459: PUSH2 0x04fe
0000045c: JUMP
0000045d: JUMPDEST
0000045e: PUSH1 0x00
00000460: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000481: PUSH2 0x03b5
00000484: JUMP
00000485: JUMPDEST
00000486: PUSH2 0x048e
00000489: DUP2
0000048a: PUSH2 0x060a
0000048d: JUMP
0000048e: JUMPDEST
0000048f: PUSH1 0x40
00000491: MLOAD
00000492: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004a7: DUP3
000004a8: AND
000004a9: SWAP1
000004aa: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
000004cb: SWAP1
000004cc: PUSH1 0x00
000004ce: SWAP1
000004cf: LOG2
000004d0: POP
000004d1: JUMP
000004d2: JUMPDEST
000004d3: PUSH1 0x60
000004d5: PUSH2 0x04f7
000004d8: DUP4
000004d9: DUP4
000004da: PUSH1 0x40
000004dc: MLOAD
000004dd: DUP1
000004de: PUSH1 0x60
000004e0: ADD
000004e1: PUSH1 0x40
000004e3: MSTORE
000004e4: DUP1
000004e5: PUSH1 0x27
000004e7: DUP2
000004e8: MSTORE
000004e9: PUSH1 0x20
000004eb: ADD
000004ec: PUSH2 0x099f
000004ef: PUSH1 0x27
000004f1: SWAP2
000004f2: CODECOPY
000004f3: PUSH2 0x06d5
000004f6: JUMP
000004f7: JUMPDEST
000004f8: SWAP4
000004f9: SWAP3
000004fa: POP
000004fb: POP
000004fc: POP
000004fd: JUMP
000004fe: JUMPDEST
000004ff: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000514: DUP2
00000515: AND
00000516: PUSH2 0x05a1
00000519: JUMPI
0000051a: PUSH1 0x40
0000051c: MLOAD
0000051d: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000053e: DUP2
0000053f: MSTORE
00000540: PUSH1 0x20
00000542: PUSH1 0x04
00000544: DUP3
00000545: ADD
00000546: MSTORE
00000547: PUSH1 0x26
00000549: PUSH1 0x24
0000054b: DUP3
0000054c: ADD
0000054d: MSTORE
0000054e: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
0000056f: PUSH1 0x44
00000571: DUP3
00000572: ADD
00000573: MSTORE
00000574: PUSH32 0x6464726573730000000000000000000000000000000000000000000000000000
00000595: PUSH1 0x64
00000597: DUP3
00000598: ADD
00000599: MSTORE
0000059a: PUSH1 0x84
0000059c: ADD
0000059d: PUSH2 0x035a
000005a0: JUMP
000005a1: JUMPDEST
000005a2: DUP1
000005a3: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000005c4: JUMPDEST
000005c5: DUP1
000005c6: SLOAD
000005c7: PUSH32 0xffffffffffffffffffffffff0000000000000000000000000000000000000000
000005e8: AND
000005e9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005fe: SWAP3
000005ff: SWAP1
00000600: SWAP3
00000601: AND
00000602: SWAP2
00000603: SWAP1
00000604: SWAP2
00000605: OR
00000606: SWAP1
00000607: SSTORE
00000608: POP
00000609: JUMP
0000060a: JUMPDEST
0000060b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000620: DUP2
00000621: AND
00000622: EXTCODESIZE
00000623: PUSH2 0x06ae
00000626: JUMPI
00000627: PUSH1 0x40
00000629: MLOAD
0000062a: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000064b: DUP2
0000064c: MSTORE
0000064d: PUSH1 0x20
0000064f: PUSH1 0x04
00000651: DUP3
00000652: ADD
00000653: MSTORE
00000654: PUSH1 0x2d
00000656: PUSH1 0x24
00000658: DUP3
00000659: ADD
0000065a: MSTORE
0000065b: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
0000067c: PUSH1 0x44
0000067e: DUP3
0000067f: ADD
00000680: MSTORE
00000681: PUSH32 0x6f74206120636f6e747261637400000000000000000000000000000000000000
000006a2: PUSH1 0x64
000006a4: DUP3
000006a5: ADD
000006a6: MSTORE
000006a7: PUSH1 0x84
000006a9: ADD
000006aa: PUSH2 0x035a
000006ad: JUMP
000006ae: JUMPDEST
000006af: DUP1
000006b0: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000006d1: PUSH2 0x05c4
000006d4: JUMP
000006d5: JUMPDEST
000006d6: PUSH1 0x60
000006d8: PUSH1 0x00
000006da: DUP1
000006db: DUP6
000006dc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006f1: AND
000006f2: DUP6
000006f3: PUSH1 0x40
000006f5: MLOAD
000006f6: PUSH2 0x06ff
000006f9: SWAP2
000006fa: SWAP1
000006fb: PUSH2 0x0931
000006fe: JUMP
000006ff: JUMPDEST
00000700: PUSH1 0x00
00000702: PUSH1 0x40
00000704: MLOAD
00000705: DUP1
00000706: DUP4
00000707: SUB
00000708: DUP2
00000709: DUP6
0000070a: GAS
0000070b: DELEGATECALL
0000070c: SWAP2
0000070d: POP
0000070e: POP
0000070f: RETURNDATASIZE
00000710: DUP1
00000711: PUSH1 0x00
00000713: DUP2
00000714: EQ
00000715: PUSH2 0x073a
00000718: JUMPI
00000719: PUSH1 0x40
0000071b: MLOAD
0000071c: SWAP2
0000071d: POP
0000071e: PUSH1 0x1f
00000720: NOT
00000721: PUSH1 0x3f
00000723: RETURNDATASIZE
00000724: ADD
00000725: AND
00000726: DUP3
00000727: ADD
00000728: PUSH1 0x40
0000072a: MSTORE
0000072b: RETURNDATASIZE
0000072c: DUP3
0000072d: MSTORE
0000072e: RETURNDATASIZE
0000072f: PUSH1 0x00
00000731: PUSH1 0x20
00000733: DUP5
00000734: ADD
00000735: RETURNDATACOPY
00000736: PUSH2 0x073f
00000739: JUMP
0000073a: JUMPDEST
0000073b: PUSH1 0x60
0000073d: SWAP2
0000073e: POP
0000073f: JUMPDEST
00000740: POP
00000741: SWAP2
00000742: POP
00000743: SWAP2
00000744: POP
00000745: PUSH2 0x0750
00000748: DUP7
00000749: DUP4
0000074a: DUP4
0000074b: DUP8
0000074c: PUSH2 0x075a
0000074f: JUMP
00000750: JUMPDEST
00000751: SWAP7
00000752: SWAP6
00000753: POP
00000754: POP
00000755: POP
00000756: POP
00000757: POP
00000758: POP
00000759: JUMP
0000075a: JUMPDEST
0000075b: PUSH1 0x60
0000075d: DUP4
0000075e: ISZERO
0000075f: PUSH2 0x07f0
00000762: JUMPI
00000763: DUP3
00000764: MLOAD
00000765: PUSH1 0x00
00000767: SUB
00000768: PUSH2 0x07e9
0000076b: JUMPI
0000076c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000781: DUP6
00000782: AND
00000783: EXTCODESIZE
00000784: PUSH2 0x07e9
00000787: JUMPI
00000788: PUSH1 0x40
0000078a: MLOAD
0000078b: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000007ac: DUP2
000007ad: MSTORE
000007ae: PUSH1 0x20
000007b0: PUSH1 0x04
000007b2: DUP3
000007b3: ADD
000007b4: MSTORE
000007b5: PUSH1 0x1d
000007b7: PUSH1 0x24
000007b9: DUP3
000007ba: ADD
000007bb: MSTORE
000007bc: PUSH32 0x416464726573733a2063616c6c20746f206e6f6e2d636f6e7472616374000000
000007dd: PUSH1 0x44
000007df: DUP3
000007e0: ADD
000007e1: MSTORE
000007e2: PUSH1 0x64
000007e4: ADD
000007e5: PUSH2 0x035a
000007e8: JUMP
000007e9: JUMPDEST
000007ea: POP
000007eb: DUP2
000007ec: PUSH2 0x07fa
000007ef: JUMP
000007f0: JUMPDEST
000007f1: PUSH2 0x07fa
000007f4: DUP4
000007f5: DUP4
000007f6: PUSH2 0x0802
000007f9: JUMP
000007fa: JUMPDEST
000007fb: SWAP5
000007fc: SWAP4
000007fd: POP
000007fe: POP
000007ff: POP
00000800: POP
00000801: JUMP
00000802: JUMPDEST
00000803: DUP2
00000804: MLOAD
00000805: ISZERO
00000806: PUSH2 0x0812
00000809: JUMPI
0000080a: DUP2
0000080b: MLOAD
0000080c: DUP1
0000080d: DUP4
0000080e: PUSH1 0x20
00000810: ADD
00000811: REVERT
00000812: JUMPDEST
00000813: DUP1
00000814: PUSH1 0x40
00000816: MLOAD
00000817: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000838: DUP2
00000839: MSTORE
0000083a: PUSH1 0x04
0000083c: ADD
0000083d: PUSH2 0x035a
00000840: SWAP2
00000841: SWAP1
00000842: PUSH2 0x094d
00000845: JUMP
00000846: JUMPDEST
00000847: DUP1
00000848: CALLDATALOAD
00000849: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000085e: DUP2
0000085f: AND
00000860: DUP2
00000861: EQ
00000862: PUSH2 0x086a
00000865: JUMPI
00000866: PUSH1 0x00
00000868: DUP1
00000869: REVERT
0000086a: JUMPDEST
0000086b: SWAP2
0000086c: SWAP1
0000086d: POP
0000086e: JUMP
0000086f: JUMPDEST
00000870: PUSH1 0x00
00000872: PUSH1 0x20
00000874: DUP3
00000875: DUP5
00000876: SUB
00000877: SLT
00000878: ISZERO
00000879: PUSH2 0x0881
0000087c: JUMPI
0000087d: PUSH1 0x00
0000087f: DUP1
00000880: REVERT
00000881: JUMPDEST
00000882: PUSH2 0x04f7
00000885: DUP3
00000886: PUSH2 0x0846
00000889: JUMP
0000088a: JUMPDEST
0000088b: PUSH1 0x00
0000088d: DUP1
0000088e: PUSH1 0x00
00000890: PUSH1 0x40
00000892: DUP5
00000893: DUP7
00000894: SUB
00000895: SLT
00000896: ISZERO
00000897: PUSH2 0x089f
0000089a: JUMPI
0000089b: PUSH1 0x00
0000089d: DUP1
0000089e: REVERT
0000089f: JUMPDEST
000008a0: PUSH2 0x08a8
000008a3: DUP5
000008a4: PUSH2 0x0846
000008a7: JUMP
000008a8: JUMPDEST
000008a9: SWAP3
000008aa: POP
000008ab: PUSH1 0x20
000008ad: DUP5
000008ae: ADD
000008af: CALLDATALOAD
000008b0: PUSH8 0xffffffffffffffff
000008b9: DUP1
000008ba: DUP3
000008bb: GT
000008bc: ISZERO
000008bd: PUSH2 0x08c5
000008c0: JUMPI
000008c1: PUSH1 0x00
000008c3: DUP1
000008c4: REVERT
000008c5: JUMPDEST
000008c6: DUP2
000008c7: DUP7
000008c8: ADD
000008c9: SWAP2
000008ca: POP
000008cb: DUP7
000008cc: PUSH1 0x1f
000008ce: DUP4
000008cf: ADD
000008d0: SLT
000008d1: PUSH2 0x08d9
000008d4: JUMPI
000008d5: PUSH1 0x00
000008d7: DUP1
000008d8: REVERT
000008d9: JUMPDEST
000008da: DUP2
000008db: CALLDATALOAD
000008dc: DUP2
000008dd: DUP2
000008de: GT
000008df: ISZERO
000008e0: PUSH2 0x08e8
000008e3: JUMPI
000008e4: PUSH1 0x00
000008e6: DUP1
000008e7: REVERT
000008e8: JUMPDEST
000008e9: DUP8
000008ea: PUSH1 0x20
000008ec: DUP3
000008ed: DUP6
000008ee: ADD
000008ef: ADD
000008f0: GT
000008f1: ISZERO
000008f2: PUSH2 0x08fa
000008f5: JUMPI
000008f6: PUSH1 0x00
000008f8: DUP1
000008f9: REVERT
000008fa: JUMPDEST
000008fb: PUSH1 0x20
000008fd: DUP4
000008fe: ADD
000008ff: SWAP5
00000900: POP
00000901: DUP1
00000902: SWAP4
00000903: POP
00000904: POP
00000905: POP
00000906: POP
00000907: SWAP3
00000908: POP
00000909: SWAP3
0000090a: POP
0000090b: SWAP3
0000090c: JUMP
0000090d: JUMPDEST
0000090e: PUSH1 0x00
00000910: JUMPDEST
00000911: DUP4
00000912: DUP2
00000913: LT
00000914: ISZERO
00000915: PUSH2 0x0928
00000918: JUMPI
00000919: DUP2
0000091a: DUP2
0000091b: ADD
0000091c: MLOAD
0000091d: DUP4
0000091e: DUP3
0000091f: ADD
00000920: MSTORE
00000921: PUSH1 0x20
00000923: ADD
00000924: PUSH2 0x0910
00000927: JUMP
00000928: JUMPDEST
00000929: POP
0000092a: POP
0000092b: PUSH1 0x00
0000092d: SWAP2
0000092e: ADD
0000092f: MSTORE
00000930: JUMP
00000931: JUMPDEST
00000932: PUSH1 0x00
00000934: DUP3
00000935: MLOAD
00000936: PUSH2 0x0943
00000939: DUP2
0000093a: DUP5
0000093b: PUSH1 0x20
0000093d: DUP8
0000093e: ADD
0000093f: PUSH2 0x090d
00000942: JUMP
00000943: JUMPDEST
00000944: SWAP2
00000945: SWAP1
00000946: SWAP2
00000947: ADD
00000948: SWAP3
00000949: SWAP2
0000094a: POP
0000094b: POP
0000094c: JUMP
0000094d: JUMPDEST
0000094e: PUSH1 0x20
00000950: DUP2
00000951: MSTORE
00000952: PUSH1 0x00
00000954: DUP3
00000955: MLOAD
00000956: DUP1
00000957: PUSH1 0x20
00000959: DUP5
0000095a: ADD
0000095b: MSTORE
0000095c: PUSH2 0x096c
0000095f: DUP2
00000960: PUSH1 0x40
00000962: DUP6
00000963: ADD
00000964: PUSH1 0x20
00000966: DUP8
00000967: ADD
00000968: PUSH2 0x090d
0000096b: JUMP
0000096c: JUMPDEST
0000096d: PUSH1 0x1f
0000096f: ADD
00000970: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
00000991: AND
00000992: SWAP2
00000993: SWAP1
00000994: SWAP2
00000995: ADD
00000996: PUSH1 0x40
00000998: ADD
00000999: SWAP3
0000099a: SWAP2
0000099b: POP
0000099c: POP
0000099d: JUMP
0000099e: INVALID
0000099f: COINBASE
000009a0: PUSH5 0x6472657373
000009a6: GASPRICE
000009a7: KECCAK256
000009a8: PUSH13 0x6f772d6c6576656c2064656c65
000009b6: PUSH8 0x6174652063616c6c
000009bf: KECCAK256
000009c0: PUSH7 0x61696c6564a264
000009c8: PUSH10 0x706673582212203b1915
000009d3: SELFBALANCE
000009d4: PUSH22 0x1ce57f2e8855b472044316e5de0e2e4e1bd7d7518362
000009eb: SWAP8
000009ec: DUP3
000009ed: UNKNOWN(0x29)
000009ee: LOG4
000009ef: PUSH3 0x64736f
000009f3: PUSH13

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0xe0399cb0e220111e9c55981c3a2d909b20f53af43764d36a60e0c617c75a2678
call_targets: 0xb4fd48038f0ad22155497f182052c94ab851c596
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xe0399cb0e220111e9c55981c3a2d909b20f53af43764d36a60e0c617c75a2678",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xb4fd48038f0ad22155497f182052c94ab851c596"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 891,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1803,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}