019b477e-dd2b-71d8-8e03-b6bc9892c1eb
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 29923 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 29924 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 93105 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 93106 | capability.graph | complete | 1 / 3 | 1 week ago |
| 93107 | detector.run | complete | 1 / 3 | 1 week ago |
| 93108 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH2 0x000c 00000008: PUSH2 0x000e 0000000b: JUMP 0000000c: JUMPDEST 0000000d: STOP 0000000e: JUMPDEST 0000000f: PUSH32 0x00000000000000000000000009e841aa00967b987fe45491c8885176a0a1fa82 00000030: PUSH1 0x01 00000032: PUSH1 0x01 00000034: PUSH1 0xa0 00000036: SHL 00000037: SUB 00000038: AND 00000039: CALLER 0000003a: SUB 0000003b: PUSH2 0x007a 0000003e: JUMPI 0000003f: PUSH0 00000040: CALLDATALOAD 00000041: PUSH1 0x01 00000043: PUSH1 0x01 00000045: PUSH1 0xe0 00000047: SHL 00000048: SUB 00000049: NOT 0000004a: AND 0000004b: PUSH4 0x278f7943 00000050: PUSH1 0xe1 00000052: SHL 00000053: EQ 00000054: PUSH2 0x0070 00000057: JUMPI 00000058: PUSH1 0x40 0000005a: MLOAD 0000005b: PUSH4 0x34ad5dbb 00000060: PUSH1 0xe2 00000062: SHL 00000063: DUP2 00000064: MSTORE 00000065: PUSH1 0x04 00000067: ADD 00000068: PUSH1 0x40 0000006a: MLOAD 0000006b: DUP1 0000006c: SWAP2 0000006d: SUB 0000006e: SWAP1 0000006f: REVERT 00000070: JUMPDEST 00000071: PUSH2 0x0078 00000074: PUSH2 0x0082 00000077: JUMP 00000078: JUMPDEST 00000079: JUMP 0000007a: JUMPDEST 0000007b: PUSH2 0x0078 0000007e: PUSH2 0x00b0 00000081: JUMP 00000082: JUMPDEST 00000083: PUSH0 00000084: DUP1 00000085: PUSH2 0x0091 00000088: CALLDATASIZE 00000089: PUSH1 0x04 0000008b: DUP2 0000008c: DUP5 0000008d: PUSH2 0x0303 00000090: JUMP 00000091: JUMPDEST 00000092: DUP2 00000093: ADD 00000094: SWAP1 00000095: PUSH2 0x009e 00000098: SWAP2 00000099: SWAP1 0000009a: PUSH2 0x033e 0000009d: JUMP 0000009e: JUMPDEST 0000009f: SWAP2 000000a0: POP 000000a1: SWAP2 000000a2: POP 000000a3: PUSH2 0x00ac 000000a6: DUP3 000000a7: DUP3 000000a8: PUSH2 0x00c0 000000ab: JUMP 000000ac: JUMPDEST 000000ad: POP 000000ae: POP 000000af: JUMP 000000b0: JUMPDEST 000000b1: PUSH2 0x0078 000000b4: PUSH2 0x00bb 000000b7: PUSH2 0x011a 000000ba: JUMP 000000bb: JUMPDEST 000000bc: PUSH2 0x0151 000000bf: JUMP 000000c0: JUMPDEST 000000c1: PUSH2 0x00c9 000000c4: DUP3 000000c5: PUSH2 0x016f 000000c8: JUMP 000000c9: JUMPDEST 000000ca: PUSH1 0x40 000000cc: MLOAD 000000cd: PUSH1 0x01 000000cf: PUSH1 0x01 000000d1: PUSH1 0xa0 000000d3: SHL 000000d4: SUB 000000d5: DUP4 000000d6: AND 000000d7: SWAP1 000000d8: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b 000000f9: SWAP1 000000fa: PUSH0 000000fb: SWAP1 000000fc: LOG2 000000fd: DUP1 000000fe: MLOAD 000000ff: ISZERO 00000100: PUSH2 0x0112 00000103: JUMPI 00000104: PUSH2 0x010d 00000107: DUP3 00000108: DUP3 00000109: PUSH2 0x01ea 0000010c: JUMP 0000010d: JUMPDEST 0000010e: POP 0000010f: POP 00000110: POP 00000111: JUMP 00000112: JUMPDEST 00000113: PUSH2 0x00ac 00000116: PUSH2 0x025c 00000119: JUMP 0000011a: JUMPDEST 0000011b: PUSH0 0000011c: PUSH2 0x014c 0000011f: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000140: SLOAD 00000141: PUSH1 0x01 00000143: PUSH1 0x01 00000145: PUSH1 0xa0 00000147: SHL 00000148: SUB 00000149: AND 0000014a: SWAP1 0000014b: JUMP 0000014c: JUMPDEST 0000014d: SWAP1 0000014e: POP 0000014f: SWAP1 00000150: JUMP 00000151: JUMPDEST 00000152: CALLDATASIZE 00000153: PUSH0 00000154: PUSH0 00000155: CALLDATACOPY 00000156: PUSH0 00000157: PUSH0 00000158: CALLDATASIZE 00000159: PUSH0 0000015a: DUP5 0000015b: GAS 0000015c: DELEGATECALL 0000015d: RETURNDATASIZE 0000015e: PUSH0 0000015f: PUSH0 00000160: RETURNDATACOPY 00000161: DUP1 00000162: DUP1 00000163: ISZERO 00000164: PUSH2 0x016b 00000167: JUMPI 00000168: RETURNDATASIZE 00000169: PUSH0 0000016a: RETURN 0000016b: JUMPDEST 0000016c: RETURNDATASIZE 0000016d: PUSH0 0000016e: REVERT 0000016f: JUMPDEST 00000170: DUP1 00000171: PUSH1 0x01 00000173: PUSH1 0x01 00000175: PUSH1 0xa0 00000177: SHL 00000178: SUB 00000179: AND 0000017a: EXTCODESIZE 0000017b: PUSH0 0000017c: SUB 0000017d: PUSH2 0x01a9 00000180: JUMPI 00000181: PUSH1 0x40 00000183: MLOAD 00000184: PUSH4 0x4c9c8ce3 00000189: PUSH1 0xe0 0000018b: SHL 0000018c: DUP2 0000018d: MSTORE 0000018e: PUSH1 0x01 00000190: PUSH1 0x01 00000192: PUSH1 0xa0 00000194: SHL 00000195: SUB 00000196: DUP3 00000197: AND 00000198: PUSH1 0x04 0000019a: DUP3 0000019b: ADD 0000019c: MSTORE 0000019d: PUSH1 0x24 0000019f: ADD 000001a0: JUMPDEST 000001a1: PUSH1 0x40 000001a3: MLOAD 000001a4: DUP1 000001a5: SWAP2 000001a6: SUB 000001a7: SWAP1 000001a8: REVERT 000001a9: JUMPDEST 000001aa: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000001cb: DUP1 000001cc: SLOAD 000001cd: PUSH1 0x01 000001cf: PUSH1 0x01 000001d1: PUSH1 0xa0 000001d3: SHL 000001d4: SUB 000001d5: NOT 000001d6: AND 000001d7: PUSH1 0x01 000001d9: PUSH1 0x01 000001db: PUSH1 0xa0 000001dd: SHL 000001de: SUB 000001df: SWAP3 000001e0: SWAP1 000001e1: SWAP3 000001e2: AND 000001e3: SWAP2 000001e4: SWAP1 000001e5: SWAP2 000001e6: OR 000001e7: SWAP1 000001e8: SSTORE 000001e9: JUMP 000001ea: JUMPDEST 000001eb: PUSH1 0x60 000001ed: PUSH0 000001ee: PUSH0 000001ef: DUP5 000001f0: PUSH1 0x01 000001f2: PUSH1 0x01 000001f4: PUSH1 0xa0 000001f6: SHL 000001f7: SUB 000001f8: AND 000001f9: DUP5 000001fa: PUSH1 0x40 000001fc: MLOAD 000001fd: PUSH2 0x0206 00000200: SWAP2 00000201: SWAP1 00000202: PUSH2 0x040f 00000205: JUMP 00000206: JUMPDEST 00000207: PUSH0 00000208: PUSH1 0x40 0000020a: MLOAD 0000020b: DUP1 0000020c: DUP4 0000020d: SUB 0000020e: DUP2 0000020f: DUP6 00000210: GAS 00000211: DELEGATECALL 00000212: SWAP2 00000213: POP 00000214: POP 00000215: RETURNDATASIZE 00000216: DUP1 00000217: PUSH0 00000218: DUP2 00000219: EQ 0000021a: PUSH2 0x023e 0000021d: JUMPI 0000021e: PUSH1 0x40 00000220: MLOAD 00000221: SWAP2 00000222: POP 00000223: PUSH1 0x1f 00000225: NOT 00000226: PUSH1 0x3f 00000228: RETURNDATASIZE 00000229: ADD 0000022a: AND 0000022b: DUP3 0000022c: ADD 0000022d: PUSH1 0x40 0000022f: MSTORE 00000230: RETURNDATASIZE 00000231: DUP3 00000232: MSTORE 00000233: RETURNDATASIZE 00000234: PUSH0 00000235: PUSH1 0x20 00000237: DUP5 00000238: ADD 00000239: RETURNDATACOPY 0000023a: PUSH2 0x0243 0000023d: JUMP 0000023e: JUMPDEST 0000023f: PUSH1 0x60 00000241: SWAP2 00000242: POP 00000243: JUMPDEST 00000244: POP 00000245: SWAP2 00000246: POP 00000247: SWAP2 00000248: POP 00000249: PUSH2 0x0253 0000024c: DUP6 0000024d: DUP4 0000024e: DUP4 0000024f: PUSH2 0x027b 00000252: JUMP 00000253: JUMPDEST 00000254: SWAP6 00000255: SWAP5 00000256: POP 00000257: POP 00000258: POP 00000259: POP 0000025a: POP 0000025b: JUMP 0000025c: JUMPDEST 0000025d: CALLVALUE 0000025e: ISZERO 0000025f: PUSH2 0x0078 00000262: JUMPI 00000263: PUSH1 0x40 00000265: MLOAD 00000266: PUSH4 0xb398979f 0000026b: PUSH1 0xe0 0000026d: SHL 0000026e: DUP2 0000026f: MSTORE 00000270: PUSH1 0x04 00000272: ADD 00000273: PUSH1 0x40 00000275: MLOAD 00000276: DUP1 00000277: SWAP2 00000278: SUB 00000279: SWAP1 0000027a: REVERT 0000027b: JUMPDEST 0000027c: PUSH1 0x60 0000027e: DUP3 0000027f: PUSH2 0x0290 00000282: JUMPI 00000283: PUSH2 0x028b 00000286: DUP3 00000287: PUSH2 0x02da 0000028a: JUMP 0000028b: JUMPDEST 0000028c: PUSH2 0x02d3 0000028f: JUMP 00000290: JUMPDEST 00000291: DUP2 00000292: MLOAD 00000293: ISZERO 00000294: DUP1 00000295: ISZERO 00000296: PUSH2 0x02a7 00000299: JUMPI 0000029a: POP 0000029b: PUSH1 0x01 0000029d: PUSH1 0x01 0000029f: PUSH1 0xa0 000002a1: SHL 000002a2: SUB 000002a3: DUP5 000002a4: AND 000002a5: EXTCODESIZE 000002a6: ISZERO 000002a7: JUMPDEST 000002a8: ISZERO 000002a9: PUSH2 0x02d0 000002ac: JUMPI 000002ad: PUSH1 0x40 000002af: MLOAD 000002b0: PUSH4 0x9996b315 000002b5: PUSH1 0xe0 000002b7: SHL 000002b8: DUP2 000002b9: MSTORE 000002ba: PUSH1 0x01 000002bc: PUSH1 0x01 000002be: PUSH1 0xa0 000002c0: SHL 000002c1: SUB 000002c2: DUP6 000002c3: AND 000002c4: PUSH1 0x04 000002c6: DUP3 000002c7: ADD 000002c8: MSTORE 000002c9: PUSH1 0x24 000002cb: ADD 000002cc: PUSH2 0x01a0 000002cf: JUMP 000002d0: JUMPDEST 000002d1: POP 000002d2: DUP1 000002d3: JUMPDEST 000002d4: SWAP4 000002d5: SWAP3 000002d6: POP 000002d7: POP 000002d8: POP 000002d9: JUMP 000002da: JUMPDEST 000002db: DUP1 000002dc: MLOAD 000002dd: ISZERO 000002de: PUSH2 0x02ea 000002e1: JUMPI 000002e2: DUP1 000002e3: MLOAD 000002e4: DUP1 000002e5: DUP3 000002e6: PUSH1 0x20 000002e8: ADD 000002e9: REVERT 000002ea: JUMPDEST 000002eb: PUSH1 0x40 000002ed: MLOAD 000002ee: PUSH4 0xd6bda275 000002f3: PUSH1 0xe0 000002f5: SHL 000002f6: DUP2 000002f7: MSTORE 000002f8: PUSH1 0x04 000002fa: ADD 000002fb: PUSH1 0x40 000002fd: MLOAD 000002fe: DUP1 000002ff: SWAP2 00000300: SUB 00000301: SWAP1 00000302: REVERT 00000303: JUMPDEST 00000304: PUSH0 00000305: PUSH0 00000306: DUP6 00000307: DUP6 00000308: GT 00000309: ISZERO 0000030a: PUSH2 0x0311 0000030d: JUMPI 0000030e: PUSH0 0000030f: PUSH0 00000310: REVERT 00000311: JUMPDEST 00000312: DUP4 00000313: DUP7 00000314: GT 00000315: ISZERO 00000316: PUSH2 0x031d 00000319: JUMPI 0000031a: PUSH0 0000031b: PUSH0 0000031c: REVERT 0000031d: JUMPDEST 0000031e: POP 0000031f: POP 00000320: DUP3 00000321: ADD 00000322: SWAP4 00000323: SWAP2 00000324: SWAP1 00000325: SWAP3 00000326: SUB 00000327: SWAP2 00000328: POP 00000329: JUMP 0000032a: JUMPDEST 0000032b: PUSH4 0x4e487b71 00000330: PUSH1 0xe0 00000332: SHL 00000333: PUSH0 00000334: MSTORE 00000335: PUSH1 0x41 00000337: PUSH1 0x04 00000339: MSTORE 0000033a: PUSH1 0x24 0000033c: PUSH0 0000033d: REVERT 0000033e: JUMPDEST 0000033f: PUSH0 00000340: PUSH0 00000341: PUSH1 0x40 00000343: DUP4 00000344: DUP6 00000345: SUB 00000346: SLT 00000347: ISZERO 00000348: PUSH2 0x034f 0000034b: JUMPI 0000034c: PUSH0 0000034d: PUSH0 0000034e: REVERT 0000034f: JUMPDEST 00000350: DUP3 00000351: CALLDATALOAD 00000352: PUSH1 0x01 00000354: PUSH1 0x01 00000356: PUSH1 0xa0 00000358: SHL 00000359: SUB 0000035a: DUP2 0000035b: AND 0000035c: DUP2 0000035d: EQ 0000035e: PUSH2 0x0365 00000361: JUMPI 00000362: PUSH0 00000363: PUSH0 00000364: REVERT 00000365: JUMPDEST 00000366: SWAP2 00000367: POP 00000368: PUSH1 0x20 0000036a: DUP4 0000036b: ADD 0000036c: CALLDATALOAD 0000036d: PUSH8 0xffffffffffffffff 00000376: DUP2 00000377: GT 00000378: ISZERO 00000379: PUSH2 0x0380 0000037c: JUMPI 0000037d: PUSH0 0000037e: PUSH0 0000037f: REVERT 00000380: JUMPDEST 00000381: DUP4 00000382: ADD 00000383: PUSH1 0x1f 00000385: DUP2 00000386: ADD 00000387: DUP6 00000388: SGT 00000389: PUSH2 0x0390 0000038c: JUMPI 0000038d: PUSH0 0000038e: PUSH0 0000038f: REVERT 00000390: JUMPDEST 00000391: DUP1 00000392: CALLDATALOAD 00000393: PUSH8 0xffffffffffffffff 0000039c: DUP2 0000039d: GT 0000039e: ISZERO 0000039f: PUSH2 0x03aa 000003a2: JUMPI 000003a3: PUSH2 0x03aa 000003a6: PUSH2 0x032a 000003a9: JUMP 000003aa: JUMPDEST 000003ab: PUSH1 0x40 000003ad: MLOAD 000003ae: PUSH1 0x1f 000003b0: DUP3 000003b1: ADD 000003b2: PUSH1 0x1f 000003b4: NOT 000003b5: SWAP1 000003b6: DUP2 000003b7: AND 000003b8: PUSH1 0x3f 000003ba: ADD 000003bb: AND 000003bc: DUP2 000003bd: ADD 000003be: PUSH8 0xffffffffffffffff 000003c7: DUP2 000003c8: GT 000003c9: DUP3 000003ca: DUP3 000003cb: LT 000003cc: OR 000003cd: ISZERO 000003ce: PUSH2 0x03d9 000003d1: JUMPI 000003d2: PUSH2 0x03d9 000003d5: PUSH2 0x032a 000003d8: JUMP 000003d9: JUMPDEST 000003da: PUSH1 0x40 000003dc: MSTORE 000003dd: DUP2 000003de: DUP2 000003df: MSTORE 000003e0: DUP3 000003e1: DUP3 000003e2: ADD 000003e3: PUSH1 0x20 000003e5: ADD 000003e6: DUP8 000003e7: LT 000003e8: ISZERO 000003e9: PUSH2 0x03f0 000003ec: JUMPI 000003ed: PUSH0 000003ee: PUSH0 000003ef: REVERT 000003f0: JUMPDEST 000003f1: DUP2 000003f2: PUSH1 0x20 000003f4: DUP5 000003f5: ADD 000003f6: PUSH1 0x20 000003f8: DUP4 000003f9: ADD 000003fa: CALLDATACOPY 000003fb: PUSH0 000003fc: PUSH1 0x20 000003fe: DUP4 000003ff: DUP4 00000400: ADD 00000401: ADD 00000402: MSTORE 00000403: DUP1 00000404: SWAP4 00000405: POP 00000406: POP 00000407: POP 00000408: POP 00000409: SWAP3 0000040a: POP 0000040b: SWAP3 0000040c: SWAP1 0000040d: POP 0000040e: JUMP 0000040f: JUMPDEST 00000410: PUSH0 00000411: DUP3 00000412: MLOAD 00000413: DUP1 00000414: PUSH1 0x20 00000416: DUP6 00000417: ADD 00000418: DUP5 00000419: MCOPY 0000041a: PUSH0 0000041b: SWAP3 0000041c: ADD 0000041d: SWAP2 0000041e: DUP3 0000041f: MSTORE 00000420: POP 00000421: SWAP2 00000422: SWAP1 00000423: POP 00000424: JUMP 00000425: INVALID 00000426: LOG2 00000427: PUSH5 0x6970667358 0000042d: UNKNOWN(0x22) 0000042e: SLT 0000042f: KECCAK256 00000430: UNKNOWN(0x4B) 00000431: JUMPDEST 00000432: PUSH0 00000433: SWAP4 00000434: SLT 00000435: LOG0 00000436: CALLER 00000437: UNKNOWN(0xA6) 00000438: MSTORE8 00000439: DUP4 0000043a: UNKNOWN(0xE1) 0000043b: UNKNOWN(0x29) 0000043c: POP 0000043d: GASLIMIT 0000043e: SMOD 0000043f: UNKNOWN(0xDC) 00000440: CODECOPY 00000441: MLOAD 00000442: CALLDATALOAD 00000443: UNKNOWN(0x4B) 00000444: UNKNOWN(0x28) 00000445: JUMPDEST 00000446: UNKNOWN(0x4B) 00000447: UNKNOWN(0x26) 00000448: PUSH28
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0x9bf85dee492bddaf2628e196d3be5e6465cf3e3bb799d496912dc1195c5a3530
call_targets:
0x3e8ca096504bcccc3c89045e3666bcf01637ba71
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x9bf85dee492bddaf2628e196d3be5e6465cf3e3bb799d496912dc1195c5a3530",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x3e8ca096504bcccc3c89045e3666bcf01637ba71"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x278f7943",
"selector": "0x278f7943",
"calldata_variants": [
"0x278f7943",
"0x278f79430000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 348,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 529,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|