TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019b477e-dcb6-716c-9376-5c712f5a3dd3

complete
Chain ID
1
Address
0x1537a83d1f37f7be38ace5a8009c1800d25389c0
Block Number
—
Created
Mon, Dec 22, 2025 7:17 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
29843 artifact.fetch complete 1 / 3 3 months ago
29844 tool.cast_disasm complete 1 / 3 3 months ago
93257 analysis.bundle complete 1 / 3 2 weeks ago
93258 capability.graph complete 1 / 3 2 weeks ago
93259 detector.run complete 1 / 3 2 weeks ago
93260 validation.fork complete 1 / 3 2 weeks ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: no
Implementation:
—
Verified Source: yes

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
0
Total opcodes
1244
Flags
create_opcodes_present
View cast disassembly output 
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0058
0000000c: JUMPI
0000000d: PUSH0
0000000e: CALLDATALOAD
0000000f: PUSH1 0xe0
00000011: SHR
00000012: DUP1
00000013: PUSH4 0x16c38b3c
00000018: EQ
00000019: PUSH2 0x006b
0000001c: JUMPI
0000001d: DUP1
0000001e: PUSH4 0x27e235e3
00000023: EQ
00000024: PUSH2 0x0093
00000027: JUMPI
00000028: DUP1
00000029: PUSH4 0x5c975abb
0000002e: EQ
0000002f: PUSH2 0x00cf
00000032: JUMPI
00000033: DUP1
00000034: PUSH4 0x8da5cb5b
00000039: EQ
0000003a: PUSH2 0x00f9
0000003d: JUMPI
0000003e: DUP1
0000003f: PUSH4 0xd0e30db0
00000044: EQ
00000045: PUSH2 0x0123
00000048: JUMPI
00000049: DUP1
0000004a: PUSH4 0xf2fde38b
0000004f: EQ
00000050: PUSH2 0x012d
00000053: JUMPI
00000054: PUSH2 0x0067
00000057: JUMP
00000058: JUMPDEST
00000059: CALLDATASIZE
0000005a: PUSH2 0x0067
0000005d: JUMPI
0000005e: PUSH2 0x0065
00000061: PUSH2 0x0155
00000064: JUMP
00000065: JUMPDEST
00000066: STOP
00000067: JUMPDEST
00000068: PUSH0
00000069: PUSH0
0000006a: REVERT
0000006b: JUMPDEST
0000006c: CALLVALUE
0000006d: DUP1
0000006e: ISZERO
0000006f: PUSH2 0x0076
00000072: JUMPI
00000073: PUSH0
00000074: PUSH0
00000075: REVERT
00000076: JUMPDEST
00000077: POP
00000078: PUSH2 0x0091
0000007b: PUSH1 0x04
0000007d: DUP1
0000007e: CALLDATASIZE
0000007f: SUB
00000080: DUP2
00000081: ADD
00000082: SWAP1
00000083: PUSH2 0x008c
00000086: SWAP2
00000087: SWAP1
00000088: PUSH2 0x0643
0000008b: JUMP
0000008c: JUMPDEST
0000008d: PUSH2 0x0289
00000090: JUMP
00000091: JUMPDEST
00000092: STOP
00000093: JUMPDEST
00000094: CALLVALUE
00000095: DUP1
00000096: ISZERO
00000097: PUSH2 0x009e
0000009a: JUMPI
0000009b: PUSH0
0000009c: PUSH0
0000009d: REVERT
0000009e: JUMPDEST
0000009f: POP
000000a0: PUSH2 0x00b9
000000a3: PUSH1 0x04
000000a5: DUP1
000000a6: CALLDATASIZE
000000a7: SUB
000000a8: DUP2
000000a9: ADD
000000aa: SWAP1
000000ab: PUSH2 0x00b4
000000ae: SWAP2
000000af: SWAP1
000000b0: PUSH2 0x06c8
000000b3: JUMP
000000b4: JUMPDEST
000000b5: PUSH2 0x036a
000000b8: JUMP
000000b9: JUMPDEST
000000ba: PUSH1 0x40
000000bc: MLOAD
000000bd: PUSH2 0x00c6
000000c0: SWAP2
000000c1: SWAP1
000000c2: PUSH2 0x070b
000000c5: JUMP
000000c6: JUMPDEST
000000c7: PUSH1 0x40
000000c9: MLOAD
000000ca: DUP1
000000cb: SWAP2
000000cc: SUB
000000cd: SWAP1
000000ce: RETURN
000000cf: JUMPDEST
000000d0: CALLVALUE
000000d1: DUP1
000000d2: ISZERO
000000d3: PUSH2 0x00da
000000d6: JUMPI
000000d7: PUSH0
000000d8: PUSH0
000000d9: REVERT
000000da: JUMPDEST
000000db: POP
000000dc: PUSH2 0x00e3
000000df: PUSH2 0x037f
000000e2: JUMP
000000e3: JUMPDEST
000000e4: PUSH1 0x40
000000e6: MLOAD
000000e7: PUSH2 0x00f0
000000ea: SWAP2
000000eb: SWAP1
000000ec: PUSH2 0x0733
000000ef: JUMP
000000f0: JUMPDEST
000000f1: PUSH1 0x40
000000f3: MLOAD
000000f4: DUP1
000000f5: SWAP2
000000f6: SUB
000000f7: SWAP1
000000f8: RETURN
000000f9: JUMPDEST
000000fa: CALLVALUE
000000fb: DUP1
000000fc: ISZERO
000000fd: PUSH2 0x0104
00000100: JUMPI
00000101: PUSH0
00000102: PUSH0
00000103: REVERT
00000104: JUMPDEST
00000105: POP
00000106: PUSH2 0x010d
00000109: PUSH2 0x0391
0000010c: JUMP
0000010d: JUMPDEST
0000010e: PUSH1 0x40
00000110: MLOAD
00000111: PUSH2 0x011a
00000114: SWAP2
00000115: SWAP1
00000116: PUSH2 0x075b
00000119: JUMP
0000011a: JUMPDEST
0000011b: PUSH1 0x40
0000011d: MLOAD
0000011e: DUP1
0000011f: SWAP2
00000120: SUB
00000121: SWAP1
00000122: RETURN
00000123: JUMPDEST
00000124: PUSH2 0x012b
00000127: PUSH2 0x03b5
0000012a: JUMP
0000012b: JUMPDEST
0000012c: STOP
0000012d: JUMPDEST
0000012e: CALLVALUE
0000012f: DUP1
00000130: ISZERO
00000131: PUSH2 0x0138
00000134: JUMPI
00000135: PUSH0
00000136: PUSH0
00000137: REVERT
00000138: JUMPDEST
00000139: POP
0000013a: PUSH2 0x0153
0000013d: PUSH1 0x04
0000013f: DUP1
00000140: CALLDATASIZE
00000141: SUB
00000142: DUP2
00000143: ADD
00000144: SWAP1
00000145: PUSH2 0x014e
00000148: SWAP2
00000149: SWAP1
0000014a: PUSH2 0x06c8
0000014d: JUMP
0000014e: JUMPDEST
0000014f: PUSH2 0x040e
00000152: JUMP
00000153: JUMPDEST
00000154: STOP
00000155: JUMPDEST
00000156: PUSH0
00000157: PUSH1 0x14
00000159: SWAP1
0000015a: SLOAD
0000015b: SWAP1
0000015c: PUSH2 0x0100
0000015f: EXP
00000160: SWAP1
00000161: DIV
00000162: PUSH1 0xff
00000164: AND
00000165: ISZERO
00000166: PUSH2 0x01a4
00000169: JUMPI
0000016a: PUSH1 0x40
0000016c: MLOAD
0000016d: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000018e: DUP2
0000018f: MSTORE
00000190: PUSH1 0x04
00000192: ADD
00000193: PUSH2 0x019b
00000196: SWAP1
00000197: PUSH2 0x07ce
0000019a: JUMP
0000019b: JUMPDEST
0000019c: PUSH1 0x40
0000019e: MLOAD
0000019f: DUP1
000001a0: SWAP2
000001a1: SUB
000001a2: SWAP1
000001a3: REVERT
000001a4: JUMPDEST
000001a5: PUSH0
000001a6: CALLVALUE
000001a7: GT
000001a8: PUSH2 0x01e6
000001ab: JUMPI
000001ac: PUSH1 0x40
000001ae: MLOAD
000001af: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000001d0: DUP2
000001d1: MSTORE
000001d2: PUSH1 0x04
000001d4: ADD
000001d5: PUSH2 0x01dd
000001d8: SWAP1
000001d9: PUSH2 0x0836
000001dc: JUMP
000001dd: JUMPDEST
000001de: PUSH1 0x40
000001e0: MLOAD
000001e1: DUP1
000001e2: SWAP2
000001e3: SUB
000001e4: SWAP1
000001e5: REVERT
000001e6: JUMPDEST
000001e7: CALLVALUE
000001e8: PUSH1 0x01
000001ea: PUSH0
000001eb: CALLER
000001ec: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000201: AND
00000202: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000217: AND
00000218: DUP2
00000219: MSTORE
0000021a: PUSH1 0x20
0000021c: ADD
0000021d: SWAP1
0000021e: DUP2
0000021f: MSTORE
00000220: PUSH1 0x20
00000222: ADD
00000223: PUSH0
00000224: KECCAK256
00000225: PUSH0
00000226: DUP3
00000227: DUP3
00000228: SLOAD
00000229: PUSH2 0x0232
0000022c: SWAP2
0000022d: SWAP1
0000022e: PUSH2 0x0881
00000231: JUMP
00000232: JUMPDEST
00000233: SWAP3
00000234: POP
00000235: POP
00000236: DUP2
00000237: SWAP1
00000238: SSTORE
00000239: POP
0000023a: CALLER
0000023b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000250: AND
00000251: PUSH32 0x2da466a7b24304f47e87fa2e1e5a81b9831ce54fec19055ce277ca2f39ba42c4
00000272: CALLVALUE
00000273: PUSH1 0x40
00000275: MLOAD
00000276: PUSH2 0x027f
00000279: SWAP2
0000027a: SWAP1
0000027b: PUSH2 0x070b
0000027e: JUMP
0000027f: JUMPDEST
00000280: PUSH1 0x40
00000282: MLOAD
00000283: DUP1
00000284: SWAP2
00000285: SUB
00000286: SWAP1
00000287: LOG2
00000288: JUMP
00000289: JUMPDEST
0000028a: PUSH0
0000028b: PUSH0
0000028c: SWAP1
0000028d: SLOAD
0000028e: SWAP1
0000028f: PUSH2 0x0100
00000292: EXP
00000293: SWAP1
00000294: DIV
00000295: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002aa: AND
000002ab: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002c0: AND
000002c1: CALLER
000002c2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002d7: AND
000002d8: EQ
000002d9: PUSH2 0x0317
000002dc: JUMPI
000002dd: PUSH1 0x40
000002df: MLOAD
000002e0: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000301: DUP2
00000302: MSTORE
00000303: PUSH1 0x04
00000305: ADD
00000306: PUSH2 0x030e
00000309: SWAP1
0000030a: PUSH2 0x08fe
0000030d: JUMP
0000030e: JUMPDEST
0000030f: PUSH1 0x40
00000311: MLOAD
00000312: DUP1
00000313: SWAP2
00000314: SUB
00000315: SWAP1
00000316: REVERT
00000317: JUMPDEST
00000318: DUP1
00000319: PUSH0
0000031a: PUSH1 0x14
0000031c: PUSH2 0x0100
0000031f: EXP
00000320: DUP2
00000321: SLOAD
00000322: DUP2
00000323: PUSH1 0xff
00000325: MUL
00000326: NOT
00000327: AND
00000328: SWAP1
00000329: DUP4
0000032a: ISZERO
0000032b: ISZERO
0000032c: MUL
0000032d: OR
0000032e: SWAP1
0000032f: SSTORE
00000330: POP
00000331: PUSH32 0x0e2fb031ee032dc02d8011dc50b816eb450cf856abd8261680dac74f72165bd2
00000352: DUP2
00000353: PUSH1 0x40
00000355: MLOAD
00000356: PUSH2 0x035f
00000359: SWAP2
0000035a: SWAP1
0000035b: PUSH2 0x0733
0000035e: JUMP
0000035f: JUMPDEST
00000360: PUSH1 0x40
00000362: MLOAD
00000363: DUP1
00000364: SWAP2
00000365: SUB
00000366: SWAP1
00000367: LOG1
00000368: POP
00000369: JUMP
0000036a: JUMPDEST
0000036b: PUSH1 0x01
0000036d: PUSH1 0x20
0000036f: MSTORE
00000370: DUP1
00000371: PUSH0
00000372: MSTORE
00000373: PUSH1 0x40
00000375: PUSH0
00000376: KECCAK256
00000377: PUSH0
00000378: SWAP2
00000379: POP
0000037a: SWAP1
0000037b: POP
0000037c: SLOAD
0000037d: DUP2
0000037e: JUMP
0000037f: JUMPDEST
00000380: PUSH0
00000381: PUSH1 0x14
00000383: SWAP1
00000384: SLOAD
00000385: SWAP1
00000386: PUSH2 0x0100
00000389: EXP
0000038a: SWAP1
0000038b: DIV
0000038c: PUSH1 0xff
0000038e: AND
0000038f: DUP2
00000390: JUMP
00000391: JUMPDEST
00000392: PUSH0
00000393: PUSH0
00000394: SWAP1
00000395: SLOAD
00000396: SWAP1
00000397: PUSH2 0x0100
0000039a: EXP
0000039b: SWAP1
0000039c: DIV
0000039d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003b2: AND
000003b3: DUP2
000003b4: JUMP
000003b5: JUMPDEST
000003b6: PUSH0
000003b7: PUSH1 0x14
000003b9: SWAP1
000003ba: SLOAD
000003bb: SWAP1
000003bc: PUSH2 0x0100
000003bf: EXP
000003c0: SWAP1
000003c1: DIV
000003c2: PUSH1 0xff
000003c4: AND
000003c5: ISZERO
000003c6: PUSH2 0x0404
000003c9: JUMPI
000003ca: PUSH1 0x40
000003cc: MLOAD
000003cd: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000003ee: DUP2
000003ef: MSTORE
000003f0: PUSH1 0x04
000003f2: ADD
000003f3: PUSH2 0x03fb
000003f6: SWAP1
000003f7: PUSH2 0x07ce
000003fa: JUMP
000003fb: JUMPDEST
000003fc: PUSH1 0x40
000003fe: MLOAD
000003ff: DUP1
00000400: SWAP2
00000401: SUB
00000402: SWAP1
00000403: REVERT
00000404: JUMPDEST
00000405: PUSH2 0x040c
00000408: PUSH2 0x0155
0000040b: JUMP
0000040c: JUMPDEST
0000040d: JUMP
0000040e: JUMPDEST
0000040f: PUSH0
00000410: PUSH0
00000411: SWAP1
00000412: SLOAD
00000413: SWAP1
00000414: PUSH2 0x0100
00000417: EXP
00000418: SWAP1
00000419: DIV
0000041a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000042f: AND
00000430: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000445: AND
00000446: CALLER
00000447: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000045c: AND
0000045d: EQ
0000045e: PUSH2 0x049c
00000461: JUMPI
00000462: PUSH1 0x40
00000464: MLOAD
00000465: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000486: DUP2
00000487: MSTORE
00000488: PUSH1 0x04
0000048a: ADD
0000048b: PUSH2 0x0493
0000048e: SWAP1
0000048f: PUSH2 0x08fe
00000492: JUMP
00000493: JUMPDEST
00000494: PUSH1 0x40
00000496: MLOAD
00000497: DUP1
00000498: SWAP2
00000499: SUB
0000049a: SWAP1
0000049b: REVERT
0000049c: JUMPDEST
0000049d: PUSH0
0000049e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004b3: AND
000004b4: DUP2
000004b5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004ca: AND
000004cb: SUB
000004cc: PUSH2 0x050a
000004cf: JUMPI
000004d0: PUSH1 0x40
000004d2: MLOAD
000004d3: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000004f4: DUP2
000004f5: MSTORE
000004f6: PUSH1 0x04
000004f8: ADD
000004f9: PUSH2 0x0501
000004fc: SWAP1
000004fd: PUSH2 0x0966
00000500: JUMP
00000501: JUMPDEST
00000502: PUSH1 0x40
00000504: MLOAD
00000505: DUP1
00000506: SWAP2
00000507: SUB
00000508: SWAP1
00000509: REVERT
0000050a: JUMPDEST
0000050b: CALLER
0000050c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000521: AND
00000522: PUSH2 0x08fc
00000525: SELFBALANCE
00000526: SWAP1
00000527: DUP2
00000528: ISZERO
00000529: MUL
0000052a: SWAP1
0000052b: PUSH1 0x40
0000052d: MLOAD
0000052e: PUSH0
0000052f: PUSH1 0x40
00000531: MLOAD
00000532: DUP1
00000533: DUP4
00000534: SUB
00000535: DUP2
00000536: DUP6
00000537: DUP9
00000538: DUP9
00000539: CALL
0000053a: SWAP4
0000053b: POP
0000053c: POP
0000053d: POP
0000053e: POP
0000053f: ISZERO
00000540: DUP1
00000541: ISZERO
00000542: PUSH2 0x054d
00000545: JUMPI
00000546: RETURNDATASIZE
00000547: PUSH0
00000548: PUSH0
00000549: RETURNDATACOPY
0000054a: RETURNDATASIZE
0000054b: PUSH0
0000054c: REVERT
0000054d: JUMPDEST
0000054e: POP
0000054f: DUP1
00000550: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000565: AND
00000566: PUSH0
00000567: PUSH0
00000568: SWAP1
00000569: SLOAD
0000056a: SWAP1
0000056b: PUSH2 0x0100
0000056e: EXP
0000056f: SWAP1
00000570: DIV
00000571: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000586: AND
00000587: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000059c: AND
0000059d: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
000005be: PUSH1 0x40
000005c0: MLOAD
000005c1: PUSH1 0x40
000005c3: MLOAD
000005c4: DUP1
000005c5: SWAP2
000005c6: SUB
000005c7: SWAP1
000005c8: LOG3
000005c9: DUP1
000005ca: PUSH0
000005cb: PUSH0
000005cc: PUSH2 0x0100
000005cf: EXP
000005d0: DUP2
000005d1: SLOAD
000005d2: DUP2
000005d3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005e8: MUL
000005e9: NOT
000005ea: AND
000005eb: SWAP1
000005ec: DUP4
000005ed: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000602: AND
00000603: MUL
00000604: OR
00000605: SWAP1
00000606: SSTORE
00000607: POP
00000608: POP
00000609: JUMP
0000060a: JUMPDEST
0000060b: PUSH0
0000060c: PUSH0
0000060d: REVERT
0000060e: JUMPDEST
0000060f: PUSH0
00000610: DUP2
00000611: ISZERO
00000612: ISZERO
00000613: SWAP1
00000614: POP
00000615: SWAP2
00000616: SWAP1
00000617: POP
00000618: JUMP
00000619: JUMPDEST
0000061a: PUSH2 0x0622
0000061d: DUP2
0000061e: PUSH2 0x060e
00000621: JUMP
00000622: JUMPDEST
00000623: DUP2
00000624: EQ
00000625: PUSH2 0x062c
00000628: JUMPI
00000629: PUSH0
0000062a: PUSH0
0000062b: REVERT
0000062c: JUMPDEST
0000062d: POP
0000062e: JUMP
0000062f: JUMPDEST
00000630: PUSH0
00000631: DUP2
00000632: CALLDATALOAD
00000633: SWAP1
00000634: POP
00000635: PUSH2 0x063d
00000638: DUP2
00000639: PUSH2 0x0619
0000063c: JUMP
0000063d: JUMPDEST
0000063e: SWAP3
0000063f: SWAP2
00000640: POP
00000641: POP
00000642: JUMP
00000643: JUMPDEST
00000644: PUSH0
00000645: PUSH1 0x20
00000647: DUP3
00000648: DUP5
00000649: SUB
0000064a: SLT
0000064b: ISZERO
0000064c: PUSH2 0x0658
0000064f: JUMPI
00000650: PUSH2 0x0657
00000653: PUSH2 0x060a
00000656: JUMP
00000657: JUMPDEST
00000658: JUMPDEST
00000659: PUSH0
0000065a: PUSH2 0x0665
0000065d: DUP5
0000065e: DUP3
0000065f: DUP6
00000660: ADD
00000661: PUSH2 0x062f
00000664: JUMP
00000665: JUMPDEST
00000666: SWAP2
00000667: POP
00000668: POP
00000669: SWAP3
0000066a: SWAP2
0000066b: POP
0000066c: POP
0000066d: JUMP
0000066e: JUMPDEST
0000066f: PUSH0
00000670: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000685: DUP3
00000686: AND
00000687: SWAP1
00000688: POP
00000689: SWAP2
0000068a: SWAP1
0000068b: POP
0000068c: JUMP
0000068d: JUMPDEST
0000068e: PUSH0
0000068f: PUSH2 0x0697
00000692: DUP3
00000693: PUSH2 0x066e
00000696: JUMP
00000697: JUMPDEST
00000698: SWAP1
00000699: POP
0000069a: SWAP2
0000069b: SWAP1
0000069c: POP
0000069d: JUMP
0000069e: JUMPDEST
0000069f: PUSH2 0x06a7
000006a2: DUP2
000006a3: PUSH2 0x068d
000006a6: JUMP
000006a7: JUMPDEST
000006a8: DUP2
000006a9: EQ
000006aa: PUSH2 0x06b1
000006ad: JUMPI
000006ae: PUSH0
000006af: PUSH0
000006b0: REVERT
000006b1: JUMPDEST
000006b2: POP
000006b3: JUMP
000006b4: JUMPDEST
000006b5: PUSH0
000006b6: DUP2
000006b7: CALLDATALOAD
000006b8: SWAP1
000006b9: POP
000006ba: PUSH2 0x06c2
000006bd: DUP2
000006be: PUSH2 0x069e
000006c1: JUMP
000006c2: JUMPDEST
000006c3: SWAP3
000006c4: SWAP2
000006c5: POP
000006c6: POP
000006c7: JUMP
000006c8: JUMPDEST
000006c9: PUSH0
000006ca: PUSH1 0x20
000006cc: DUP3
000006cd: DUP5
000006ce: SUB
000006cf: SLT
000006d0: ISZERO
000006d1: PUSH2 0x06dd
000006d4: JUMPI
000006d5: PUSH2 0x06dc
000006d8: PUSH2 0x060a
000006db: JUMP
000006dc: JUMPDEST
000006dd: JUMPDEST
000006de: PUSH0
000006df: PUSH2 0x06ea
000006e2: DUP5
000006e3: DUP3
000006e4: DUP6
000006e5: ADD
000006e6: PUSH2 0x06b4
000006e9: JUMP
000006ea: JUMPDEST
000006eb: SWAP2
000006ec: POP
000006ed: POP
000006ee: SWAP3
000006ef: SWAP2
000006f0: POP
000006f1: POP
000006f2: JUMP
000006f3: JUMPDEST
000006f4: PUSH0
000006f5: DUP2
000006f6: SWAP1
000006f7: POP
000006f8: SWAP2
000006f9: SWAP1
000006fa: POP
000006fb: JUMP
000006fc: JUMPDEST
000006fd: PUSH2 0x0705
00000700: DUP2
00000701: PUSH2 0x06f3
00000704: JUMP
00000705: JUMPDEST
00000706: DUP3
00000707: MSTORE
00000708: POP
00000709: POP
0000070a: JUMP
0000070b: JUMPDEST
0000070c: PUSH0
0000070d: PUSH1 0x20
0000070f: DUP3
00000710: ADD
00000711: SWAP1
00000712: POP
00000713: PUSH2 0x071e
00000716: PUSH0
00000717: DUP4
00000718: ADD
00000719: DUP5
0000071a: PUSH2 0x06fc
0000071d: JUMP
0000071e: JUMPDEST
0000071f: SWAP3
00000720: SWAP2
00000721: POP
00000722: POP
00000723: JUMP
00000724: JUMPDEST
00000725: PUSH2 0x072d
00000728: DUP2
00000729: PUSH2 0x060e
0000072c: JUMP
0000072d: JUMPDEST
0000072e: DUP3
0000072f: MSTORE
00000730: POP
00000731: POP
00000732: JUMP
00000733: JUMPDEST
00000734: PUSH0
00000735: PUSH1 0x20
00000737: DUP3
00000738: ADD
00000739: SWAP1
0000073a: POP
0000073b: PUSH2 0x0746
0000073e: PUSH0
0000073f: DUP4
00000740: ADD
00000741: DUP5
00000742: PUSH2 0x0724
00000745: JUMP
00000746: JUMPDEST
00000747: SWAP3
00000748: SWAP2
00000749: POP
0000074a: POP
0000074b: JUMP
0000074c: JUMPDEST
0000074d: PUSH2 0x0755
00000750: DUP2
00000751: PUSH2 0x068d
00000754: JUMP
00000755: JUMPDEST
00000756: DUP3
00000757: MSTORE
00000758: POP
00000759: POP
0000075a: JUMP
0000075b: JUMPDEST
0000075c: PUSH0
0000075d: PUSH1 0x20
0000075f: DUP3
00000760: ADD
00000761: SWAP1
00000762: POP
00000763: PUSH2 0x076e
00000766: PUSH0
00000767: DUP4
00000768: ADD
00000769: DUP5
0000076a: PUSH2 0x074c
0000076d: JUMP
0000076e: JUMPDEST
0000076f: SWAP3
00000770: SWAP2
00000771: POP
00000772: POP
00000773: JUMP
00000774: JUMPDEST
00000775: PUSH0
00000776: DUP3
00000777: DUP3
00000778: MSTORE
00000779: PUSH1 0x20
0000077b: DUP3
0000077c: ADD
0000077d: SWAP1
0000077e: POP
0000077f: SWAP3
00000780: SWAP2
00000781: POP
00000782: POP
00000783: JUMP
00000784: JUMPDEST
00000785: PUSH32 0x5061757365640000000000000000000000000000000000000000000000000000
000007a6: PUSH0
000007a7: DUP3
000007a8: ADD
000007a9: MSTORE
000007aa: POP
000007ab: JUMP
000007ac: JUMPDEST
000007ad: PUSH0
000007ae: PUSH2 0x07b8
000007b1: PUSH1 0x06
000007b3: DUP4
000007b4: PUSH2 0x0774
000007b7: JUMP
000007b8: JUMPDEST
000007b9: SWAP2
000007ba: POP
000007bb: PUSH2 0x07c3
000007be: DUP3
000007bf: PUSH2 0x0784
000007c2: JUMP
000007c3: JUMPDEST
000007c4: PUSH1 0x20
000007c6: DUP3
000007c7: ADD
000007c8: SWAP1
000007c9: POP
000007ca: SWAP2
000007cb: SWAP1
000007cc: POP
000007cd: JUMP
000007ce: JUMPDEST
000007cf: PUSH0
000007d0: PUSH1 0x20
000007d2: DUP3
000007d3: ADD
000007d4: SWAP1
000007d5: POP
000007d6: DUP2
000007d7: DUP2
000007d8: SUB
000007d9: PUSH0
000007da: DUP4
000007db: ADD
000007dc: MSTORE
000007dd: PUSH2 0x07e5
000007e0: DUP2
000007e1: PUSH2 0x07ac
000007e4: JUMP
000007e5: JUMPDEST
000007e6: SWAP1
000007e7: POP
000007e8: SWAP2
000007e9: SWAP1
000007ea: POP
000007eb: JUMP
000007ec: JUMPDEST
000007ed: PUSH32 0x4e6f2076616c75652073656e7400000000000000000000000000000000000000
0000080e: PUSH0
0000080f: DUP3
00000810: ADD
00000811: MSTORE
00000812: POP
00000813: JUMP
00000814: JUMPDEST
00000815: PUSH0
00000816: PUSH2 0x0820
00000819: PUSH1 0x0d
0000081b: DUP4
0000081c: PUSH2 0x0774
0000081f: JUMP
00000820: JUMPDEST
00000821: SWAP2
00000822: POP
00000823: PUSH2 0x082b
00000826: DUP3
00000827: PUSH2 0x07ec
0000082a: JUMP
0000082b: JUMPDEST
0000082c: PUSH1 0x20
0000082e: DUP3
0000082f: ADD
00000830: SWAP1
00000831: POP
00000832: SWAP2
00000833: SWAP1
00000834: POP
00000835: JUMP
00000836: JUMPDEST
00000837: PUSH0
00000838: PUSH1 0x20
0000083a: DUP3
0000083b: ADD
0000083c: SWAP1
0000083d: POP
0000083e: DUP2
0000083f: DUP2
00000840: SUB
00000841: PUSH0
00000842: DUP4
00000843: ADD
00000844: MSTORE
00000845: PUSH2 0x084d
00000848: DUP2
00000849: PUSH2 0x0814
0000084c: JUMP
0000084d: JUMPDEST
0000084e: SWAP1
0000084f: POP
00000850: SWAP2
00000851: SWAP1
00000852: POP
00000853: JUMP
00000854: JUMPDEST
00000855: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
00000876: PUSH0
00000877: MSTORE
00000878: PUSH1 0x11
0000087a: PUSH1 0x04
0000087c: MSTORE
0000087d: PUSH1 0x24
0000087f: PUSH0
00000880: REVERT
00000881: JUMPDEST
00000882: PUSH0
00000883: PUSH2 0x088b
00000886: DUP3
00000887: PUSH2 0x06f3
0000088a: JUMP
0000088b: JUMPDEST
0000088c: SWAP2
0000088d: POP
0000088e: PUSH2 0x0896
00000891: DUP4
00000892: PUSH2 0x06f3
00000895: JUMP
00000896: JUMPDEST
00000897: SWAP3
00000898: POP
00000899: DUP3
0000089a: DUP3
0000089b: ADD
0000089c: SWAP1
0000089d: POP
0000089e: DUP1
0000089f: DUP3
000008a0: GT
000008a1: ISZERO
000008a2: PUSH2 0x08ae
000008a5: JUMPI
000008a6: PUSH2 0x08ad
000008a9: PUSH2 0x0854
000008ac: JUMP
000008ad: JUMPDEST
000008ae: JUMPDEST
000008af: SWAP3
000008b0: SWAP2
000008b1: POP
000008b2: POP
000008b3: JUMP
000008b4: JUMPDEST
000008b5: PUSH32 0x4e6f74206f776e65720000000000000000000000000000000000000000000000
000008d6: PUSH0
000008d7: DUP3
000008d8: ADD
000008d9: MSTORE
000008da: POP
000008db: JUMP
000008dc: JUMPDEST
000008dd: PUSH0
000008de: PUSH2 0x08e8
000008e1: PUSH1 0x09
000008e3: DUP4
000008e4: PUSH2 0x0774
000008e7: JUMP
000008e8: JUMPDEST
000008e9: SWAP2
000008ea: POP
000008eb: PUSH2 0x08f3
000008ee: DUP3
000008ef: PUSH2 0x08b4
000008f2: JUMP
000008f3: JUMPDEST
000008f4: PUSH1 0x20
000008f6: DUP3
000008f7: ADD
000008f8: SWAP1
000008f9: POP
000008fa: SWAP2
000008fb: SWAP1
000008fc: POP
000008fd: JUMP
000008fe: JUMPDEST
000008ff: PUSH0
00000900: PUSH1 0x20
00000902: DUP3
00000903: ADD
00000904: SWAP1
00000905: POP
00000906: DUP2
00000907: DUP2
00000908: SUB
00000909: PUSH0
0000090a: DUP4
0000090b: ADD
0000090c: MSTORE
0000090d: PUSH2 0x0915
00000910: DUP2
00000911: PUSH2 0x08dc
00000914: JUMP
00000915: JUMPDEST
00000916: SWAP1
00000917: POP
00000918: SWAP2
00000919: SWAP1
0000091a: POP
0000091b: JUMP
0000091c: JUMPDEST
0000091d: PUSH32 0x5a65726f20616464726573730000000000000000000000000000000000000000
0000093e: PUSH0
0000093f: DUP3
00000940: ADD
00000941: MSTORE
00000942: POP
00000943: JUMP
00000944: JUMPDEST
00000945: PUSH0
00000946: PUSH2 0x0950
00000949: PUSH1 0x0c
0000094b: DUP4
0000094c: PUSH2 0x0774
0000094f: JUMP
00000950: JUMPDEST
00000951: SWAP2
00000952: POP
00000953: PUSH2 0x095b
00000956: DUP3
00000957: PUSH2 0x091c
0000095a: JUMP
0000095b: JUMPDEST
0000095c: PUSH1 0x20
0000095e: DUP3
0000095f: ADD
00000960: SWAP1
00000961: POP
00000962: SWAP2
00000963: SWAP1
00000964: POP
00000965: JUMP
00000966: JUMPDEST
00000967: PUSH0
00000968: PUSH1 0x20
0000096a: DUP3
0000096b: ADD
0000096c: SWAP1
0000096d: POP
0000096e: DUP2
0000096f: DUP2
00000970: SUB
00000971: PUSH0
00000972: DUP4
00000973: ADD
00000974: MSTORE
00000975: PUSH2 0x097d
00000978: DUP2
00000979: PUSH2 0x0944
0000097c: JUMP
0000097d: JUMPDEST
0000097e: SWAP1
0000097f: POP
00000980: SWAP2
00000981: SWAP1
00000982: POP
00000983: JUMP
00000984: INVALID
00000985: LOG2
00000986: PUSH5 0x6970667358
0000098c: UNKNOWN(0x22)
0000098d: SLT
0000098e: KECCAK256
0000098f: SWAP7
00000990: MSIZE
00000991: CREATE
00000992: UNKNOWN(0xCC)
00000993: AND
00000994: PUSH26 0x9c1a55673ab01b6b932844ef06aa681c476a203f95bc7cfcdf6d
000009af: PUSH5 0x736f6c6343
000009b5: STOP
000009b6: ADDMOD
000009b7: CLZ
000009b8: STOP
000009b9: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
medium other detector Untrusted CALL target/value reachable 45 no no
view
trace_id: 0x5f76247489062695d426bdf1cab28bab3097c84528ca225da2288892c05409e6
call_targets: 0x1537a83d1f37f7be38ace5a8009c1800d25389c0
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x5f76247489062695d426bdf1cab28bab3097c84528ca225da2288892c05409e6",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x1537a83d1f37f7be38ace5a8009c1800d25389c0"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x16c38b3c",
            "selector": "0x16c38b3c",
            "calldata_variants": [
                "0x16c38b3c",
                "0x16c38b3c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c975abb",
            "selector": "0x5c975abb",
            "calldata_variants": [
                "0x5c975abb",
                "0x5c975abb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd0e30db0",
            "selector": "0xd0e30db0",
            "calldata_variants": [
                "0xd0e30db0",
                "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf2fde38b",
            "selector": "0xf2fde38b",
            "calldata_variants": [
                "0xf2fde38b",
                "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 1337,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [
        {
            "pc": 705,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1094,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 1
}
medium other detector ETH value transfer possible 40 no no
view
trace_id: 0x5f76247489062695d426bdf1cab28bab3097c84528ca225da2288892c05409e6
call_targets: 0x1537a83d1f37f7be38ace5a8009c1800d25389c0
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x5f76247489062695d426bdf1cab28bab3097c84528ca225da2288892c05409e6",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x1537a83d1f37f7be38ace5a8009c1800d25389c0"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x16c38b3c",
            "selector": "0x16c38b3c",
            "calldata_variants": [
                "0x16c38b3c",
                "0x16c38b3c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c975abb",
            "selector": "0x5c975abb",
            "calldata_variants": [
                "0x5c975abb",
                "0x5c975abb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd0e30db0",
            "selector": "0xd0e30db0",
            "calldata_variants": [
                "0xd0e30db0",
                "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf2fde38b",
            "selector": "0xf2fde38b",
            "calldata_variants": [
                "0xf2fde38b",
                "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 1337,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": [
        {
            "pc": 705,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1094,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ]
}
medium other detector CREATE/CREATE2 reachable 45 no no
view
trace_id: 0x80ef3383540bc8114050cf857a9b3de7dcbe05deffdb165f459846a503b3012d
validation_json 
{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 12,
    "trace_id": "0x80ef3383540bc8114050cf857a9b3de7dcbe05deffdb165f459846a503b3012d",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x16c38b3c",
            "selector": "0x16c38b3c",
            "calldata_variants": [
                "0x16c38b3c",
                "0x16c38b3c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x27e235e3",
            "selector": "0x27e235e3",
            "calldata_variants": [
                "0x27e235e3",
                "0x27e235e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c975abb",
            "selector": "0x5c975abb",
            "calldata_variants": [
                "0x5c975abb",
                "0x5c975abb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd0e30db0",
            "selector": "0xd0e30db0",
            "calldata_variants": [
                "0xd0e30db0",
                "0xd0e30db00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf2fde38b",
            "selector": "0xf2fde38b",
            "calldata_variants": [
                "0xf2fde38b",
                "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "create_count": 1,
    "create2_count": 0
}