Analysis Run

019ba5f9-b6c5-71b1-91e7-5cc62b5367ce

complete

Chain ID

1

Address

0xf2d4766ad705e3a5c9ba5b0436b473085f82f82f

Block Number

—

Created

Sat, Jan 10, 2026 3:36 AM

Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract

Confirmed

0

Validated

0

Source

Verified

Review Backing

Not yet

Best current signal

Untrusted DELEGATECALL target reachable

crit 0 high 0 direct contract

Review Checklist

1. Read the findings table first. Ignore raw jobs until the result looks real.

2. Confirm attacker control, not just the existence of a sink.

3. Confirm money or privilege impact.

4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts

ID	Type	Status	Attempts	Heartbeat
31973	artifact.fetch	complete	1 / 3	3 months ago
31974	proxy.resolve	complete	1 / 3	3 months ago
31975	tool.cast_disasm	complete	1 / 3	3 months ago
31976	analysis.bundle	complete	1 / 3	3 months ago
31977	capability.graph	complete	1 / 3	3 months ago
31978	detector.run	complete	1 / 3	3 months ago
31979	validation.fork	complete	1 / 3	3 months ago

Artifact

Runtime bytecode: available

Creation TX: —

Deployer: —

Proxy: no not_proxy

Implementation:

—

Verified Source: yes

Proxy evidence

{
    "status": "not_proxy"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm

Delegatecall

1

Selfdestruct

0

CREATE2

0

CALL-family (heavy)

1

EXT*/BALANCE

0

Total opcodes

1540

Flags

delegatecall_present

View cast disassembly output

00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x00c4
0000000c: JUMPI
0000000d: PUSH4 0xffffffff
00000012: PUSH29 0x0100000000000000000000000000000000000000000000000000000000
00000030: PUSH1 0x00
00000032: CALLDATALOAD
00000033: DIV
00000034: AND
00000035: PUSH4 0x3c18d318
0000003a: DUP2
0000003b: EQ
0000003c: PUSH2 0x021a
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x4a5db3b5
00000046: EQ
00000047: PUSH2 0x0257
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x5cadd08d
00000051: EQ
00000052: PUSH2 0x027a
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x66f40931
0000005c: EQ
0000005d: PUSH2 0x029b
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x8da5cb5b
00000067: EQ
00000068: PUSH2 0x02bf
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x8dd9596a
00000072: EQ
00000073: PUSH2 0x02d4
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xaaaae342
0000007d: EQ
0000007e: PUSH2 0x02f5
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xb48028e3
00000088: EQ
00000089: PUSH2 0x032a
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xd288034f
00000093: EQ
00000094: PUSH2 0x034b
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0xd3107f4d
0000009e: EQ
0000009f: PUSH2 0x0372
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xd78e830c
000000a9: EQ
000000aa: PUSH2 0x0408
000000ad: JUMPI
000000ae: DUP1
000000af: PUSH4 0xf2fde38b
000000b4: EQ
000000b5: PUSH2 0x0420
000000b8: JUMPI
000000b9: DUP1
000000ba: PUSH4 0xfe9fbb80
000000bf: EQ
000000c0: PUSH2 0x0441
000000c3: JUMPI
000000c4: JUMPDEST
000000c5: PUSH1 0x00
000000c7: DUP1
000000c8: DUP1
000000c9: PUSH1 0x60
000000cb: CALLVALUE
000000cc: ISZERO
000000cd: DUP1
000000ce: ISZERO
000000cf: PUSH2 0x00ec
000000d2: JUMPI
000000d3: POP
000000d4: CALLER
000000d5: PUSH1 0x00
000000d7: SWAP1
000000d8: DUP2
000000d9: MSTORE
000000da: PUSH1 0x03
000000dc: PUSH1 0x20
000000de: MSTORE
000000df: PUSH1 0x40
000000e1: SWAP1
000000e2: KECCAK256
000000e3: SLOAD
000000e4: PUSH1 0xff
000000e6: AND
000000e7: ISZERO
000000e8: ISZERO
000000e9: PUSH1 0x01
000000eb: EQ
000000ec: JUMPDEST
000000ed: ISZERO
000000ee: PUSH2 0x0214
000000f1: JUMPI
000000f2: PUSH2 0x012e
000000f5: PUSH1 0x00
000000f7: CALLDATASIZE
000000f8: DUP1
000000f9: DUP1
000000fa: PUSH1 0x1f
000000fc: ADD
000000fd: PUSH1 0x20
000000ff: DUP1
00000100: SWAP2
00000101: DIV
00000102: MUL
00000103: PUSH1 0x20
00000105: ADD
00000106: PUSH1 0x40
00000108: MLOAD
00000109: SWAP1
0000010a: DUP2
0000010b: ADD
0000010c: PUSH1 0x40
0000010e: MSTORE
0000010f: DUP1
00000110: SWAP4
00000111: SWAP3
00000112: SWAP2
00000113: SWAP1
00000114: DUP2
00000115: DUP2
00000116: MSTORE
00000117: PUSH1 0x20
00000119: ADD
0000011a: DUP4
0000011b: DUP4
0000011c: DUP1
0000011d: DUP3
0000011e: DUP5
0000011f: CALLDATACOPY
00000120: POP
00000121: PUSH1 0x02
00000123: SWAP5
00000124: POP
00000125: PUSH2 0x0462
00000128: SWAP4
00000129: POP
0000012a: POP
0000012b: POP
0000012c: POP
0000012d: JUMP
0000012e: JUMPDEST
0000012f: PUSH1 0x01
00000131: PUSH1 0xa0
00000133: PUSH1 0x02
00000135: EXP
00000136: SUB
00000137: DUP2
00000138: AND
00000139: PUSH1 0x00
0000013b: SWAP1
0000013c: DUP2
0000013d: MSTORE
0000013e: PUSH1 0x04
00000140: PUSH1 0x20
00000142: MSTORE
00000143: PUSH1 0x40
00000145: SWAP1
00000146: KECCAK256
00000147: SLOAD
00000148: SWAP1
00000149: SWAP5
0000014a: POP
0000014b: PUSH1 0xff
0000014d: AND
0000014e: ISZERO
0000014f: ISZERO
00000150: PUSH1 0x01
00000152: EQ
00000153: PUSH2 0x015b
00000156: JUMPI
00000157: PUSH1 0x00
00000159: DUP1
0000015a: REVERT
0000015b: JUMPDEST
0000015c: PUSH2 0x0198
0000015f: PUSH1 0x00
00000161: CALLDATASIZE
00000162: DUP1
00000163: DUP1
00000164: PUSH1 0x1f
00000166: ADD
00000167: PUSH1 0x20
00000169: DUP1
0000016a: SWAP2
0000016b: DIV
0000016c: MUL
0000016d: PUSH1 0x20
0000016f: ADD
00000170: PUSH1 0x40
00000172: MLOAD
00000173: SWAP1
00000174: DUP2
00000175: ADD
00000176: PUSH1 0x40
00000178: MSTORE
00000179: DUP1
0000017a: SWAP4
0000017b: SWAP3
0000017c: SWAP2
0000017d: SWAP1
0000017e: DUP2
0000017f: DUP2
00000180: MSTORE
00000181: PUSH1 0x20
00000183: ADD
00000184: DUP4
00000185: DUP4
00000186: DUP1
00000187: DUP3
00000188: DUP5
00000189: CALLDATACOPY
0000018a: POP
0000018b: PUSH1 0x01
0000018d: SWAP5
0000018e: POP
0000018f: PUSH2 0x0462
00000192: SWAP4
00000193: POP
00000194: POP
00000195: POP
00000196: POP
00000197: JUMP
00000198: JUMPDEST
00000199: SWAP3
0000019a: POP
0000019b: PUSH2 0x01a3
0000019e: DUP4
0000019f: PUSH2 0x046d
000001a2: JUMP
000001a3: JUMPDEST
000001a4: SWAP2
000001a5: POP
000001a6: PUSH1 0x01
000001a8: PUSH1 0xa0
000001aa: PUSH1 0x02
000001ac: EXP
000001ad: SUB
000001ae: DUP3
000001af: AND
000001b0: ISZERO
000001b1: ISZERO
000001b2: PUSH2 0x01ba
000001b5: JUMPI
000001b6: PUSH1 0x00
000001b8: DUP1
000001b9: REVERT
000001ba: JUMPDEST
000001bb: PUSH1 0x00
000001bd: CALLDATASIZE
000001be: DUP1
000001bf: DUP1
000001c0: PUSH1 0x1f
000001c2: ADD
000001c3: PUSH1 0x20
000001c5: DUP1
000001c6: SWAP2
000001c7: DIV
000001c8: MUL
000001c9: PUSH1 0x20
000001cb: ADD
000001cc: PUSH1 0x40
000001ce: MLOAD
000001cf: SWAP1
000001d0: DUP2
000001d1: ADD
000001d2: PUSH1 0x40
000001d4: MSTORE
000001d5: DUP1
000001d6: SWAP4
000001d7: SWAP3
000001d8: SWAP2
000001d9: SWAP1
000001da: DUP2
000001db: DUP2
000001dc: MSTORE
000001dd: PUSH1 0x20
000001df: ADD
000001e0: DUP4
000001e1: DUP4
000001e2: DUP1
000001e3: DUP3
000001e4: DUP5
000001e5: CALLDATACOPY
000001e6: DUP3
000001e7: ADD
000001e8: SWAP2
000001e9: POP
000001ea: POP
000001eb: POP
000001ec: POP
000001ed: POP
000001ee: POP
000001ef: SWAP1
000001f0: POP
000001f1: PUSH1 0x00
000001f3: DUP1
000001f4: DUP3
000001f5: MLOAD
000001f6: PUSH1 0x20
000001f8: DUP5
000001f9: ADD
000001fa: DUP6
000001fb: GAS
000001fc: DELEGATECALL
000001fd: RETURNDATASIZE
000001fe: PUSH1 0x40
00000200: MLOAD
00000201: DUP2
00000202: PUSH1 0x00
00000204: DUP3
00000205: RETURNDATACOPY
00000206: DUP3
00000207: DUP1
00000208: ISZERO
00000209: PUSH2 0x0210
0000020c: JUMPI
0000020d: DUP3
0000020e: DUP3
0000020f: RETURN
00000210: JUMPDEST
00000211: DUP3
00000212: DUP3
00000213: REVERT
00000214: JUMPDEST
00000215: POP
00000216: POP
00000217: POP
00000218: POP
00000219: STOP
0000021a: JUMPDEST
0000021b: CALLVALUE
0000021c: DUP1
0000021d: ISZERO
0000021e: PUSH2 0x0226
00000221: JUMPI
00000222: PUSH1 0x00
00000224: DUP1
00000225: REVERT
00000226: JUMPDEST
00000227: POP
00000228: PUSH2 0x023b
0000022b: PUSH1 0x01
0000022d: PUSH1 0xa0
0000022f: PUSH1 0x02
00000231: EXP
00000232: SUB
00000233: PUSH1 0x04
00000235: CALLDATALOAD
00000236: AND
00000237: PUSH2 0x046d
0000023a: JUMP
0000023b: JUMPDEST
0000023c: PUSH1 0x40
0000023e: DUP1
0000023f: MLOAD
00000240: PUSH1 0x01
00000242: PUSH1 0xa0
00000244: PUSH1 0x02
00000246: EXP
00000247: SUB
00000248: SWAP1
00000249: SWAP3
0000024a: AND
0000024b: DUP3
0000024c: MSTORE
0000024d: MLOAD
0000024e: SWAP1
0000024f: DUP2
00000250: SWAP1
00000251: SUB
00000252: PUSH1 0x20
00000254: ADD
00000255: SWAP1
00000256: RETURN
00000257: JUMPDEST
00000258: CALLVALUE
00000259: DUP1
0000025a: ISZERO
0000025b: PUSH2 0x0263
0000025e: JUMPI
0000025f: PUSH1 0x00
00000261: DUP1
00000262: REVERT
00000263: JUMPDEST
00000264: POP
00000265: PUSH2 0x0278
00000268: PUSH1 0x01
0000026a: PUSH1 0xa0
0000026c: PUSH1 0x02
0000026e: EXP
0000026f: SUB
00000270: PUSH1 0x04
00000272: CALLDATALOAD
00000273: AND
00000274: PUSH2 0x04c4
00000277: JUMP
00000278: JUMPDEST
00000279: STOP
0000027a: JUMPDEST
0000027b: CALLVALUE
0000027c: DUP1
0000027d: ISZERO
0000027e: PUSH2 0x0286
00000281: JUMPI
00000282: PUSH1 0x00
00000284: DUP1
00000285: REVERT
00000286: JUMPDEST
00000287: POP
00000288: PUSH2 0x0278
0000028b: PUSH1 0x01
0000028d: PUSH1 0xa0
0000028f: PUSH1 0x02
00000291: EXP
00000292: SUB
00000293: PUSH1 0x04
00000295: CALLDATALOAD
00000296: AND
00000297: PUSH2 0x04ff
0000029a: JUMP
0000029b: JUMPDEST
0000029c: CALLVALUE
0000029d: DUP1
0000029e: ISZERO
0000029f: PUSH2 0x02a7
000002a2: JUMPI
000002a3: PUSH1 0x00
000002a5: DUP1
000002a6: REVERT
000002a7: JUMPDEST
000002a8: POP
000002a9: PUSH2 0x0278
000002ac: PUSH1 0x01
000002ae: PUSH1 0xa0
000002b0: PUSH1 0x02
000002b2: EXP
000002b3: SUB
000002b4: PUSH1 0x04
000002b6: CALLDATALOAD
000002b7: AND
000002b8: PUSH1 0x24
000002ba: CALLDATALOAD
000002bb: PUSH2 0x05c8
000002be: JUMP
000002bf: JUMPDEST
000002c0: CALLVALUE
000002c1: DUP1
000002c2: ISZERO
000002c3: PUSH2 0x02cb
000002c6: JUMPI
000002c7: PUSH1 0x00
000002c9: DUP1
000002ca: REVERT
000002cb: JUMPDEST
000002cc: POP
000002cd: PUSH2 0x023b
000002d0: PUSH2 0x068c
000002d3: JUMP
000002d4: JUMPDEST
000002d5: CALLVALUE
000002d6: DUP1
000002d7: ISZERO
000002d8: PUSH2 0x02e0
000002db: JUMPI
000002dc: PUSH1 0x00
000002de: DUP1
000002df: REVERT
000002e0: JUMPDEST
000002e1: POP
000002e2: PUSH2 0x0278
000002e5: PUSH1 0x01
000002e7: PUSH1 0xa0
000002e9: PUSH1 0x02
000002eb: EXP
000002ec: SUB
000002ed: PUSH1 0x04
000002ef: CALLDATALOAD
000002f0: AND
000002f1: PUSH2 0x069b
000002f4: JUMP
000002f5: JUMPDEST
000002f6: CALLVALUE
000002f7: DUP1
000002f8: ISZERO
000002f9: PUSH2 0x0301
000002fc: JUMPI
000002fd: PUSH1 0x00
000002ff: DUP1
00000300: REVERT
00000301: JUMPDEST
00000302: POP
00000303: PUSH2 0x0316
00000306: PUSH1 0x01
00000308: PUSH1 0xa0
0000030a: PUSH1 0x02
0000030c: EXP
0000030d: SUB
0000030e: PUSH1 0x04
00000310: CALLDATALOAD
00000311: AND
00000312: PUSH2 0x06e1
00000315: JUMP
00000316: JUMPDEST
00000317: PUSH1 0x40
00000319: DUP1
0000031a: MLOAD
0000031b: SWAP2
0000031c: ISZERO
0000031d: ISZERO
0000031e: DUP3
0000031f: MSTORE
00000320: MLOAD
00000321: SWAP1
00000322: DUP2
00000323: SWAP1
00000324: SUB
00000325: PUSH1 0x20
00000327: ADD
00000328: SWAP1
00000329: RETURN
0000032a: JUMPDEST
0000032b: CALLVALUE
0000032c: DUP1
0000032d: ISZERO
0000032e: PUSH2 0x0336
00000331: JUMPI
00000332: PUSH1 0x00
00000334: DUP1
00000335: REVERT
00000336: JUMPDEST
00000337: POP
00000338: PUSH2 0x0278
0000033b: PUSH1 0x01
0000033d: PUSH1 0xa0
0000033f: PUSH1 0x02
00000341: EXP
00000342: SUB
00000343: PUSH1 0x04
00000345: CALLDATALOAD
00000346: AND
00000347: PUSH2 0x06ff
0000034a: JUMP
0000034b: JUMPDEST
0000034c: CALLVALUE
0000034d: DUP1
0000034e: ISZERO
0000034f: PUSH2 0x0357
00000352: JUMPI
00000353: PUSH1 0x00
00000355: DUP1
00000356: REVERT
00000357: JUMPDEST
00000358: POP
00000359: PUSH2 0x0278
0000035c: PUSH1 0x01
0000035e: PUSH1 0xa0
00000360: PUSH1 0x02
00000362: EXP
00000363: SUB
00000364: PUSH1 0x04
00000366: CALLDATALOAD
00000367: DUP2
00000368: AND
00000369: SWAP1
0000036a: PUSH1 0x24
0000036c: CALLDATALOAD
0000036d: AND
0000036e: PUSH2 0x0737
00000371: JUMP
00000372: JUMPDEST
00000373: CALLVALUE
00000374: DUP1
00000375: ISZERO
00000376: PUSH2 0x037e
00000379: JUMPI
0000037a: PUSH1 0x00
0000037c: DUP1
0000037d: REVERT
0000037e: JUMPDEST
0000037f: POP
00000380: PUSH2 0x0393
00000383: PUSH1 0x01
00000385: PUSH1 0xa0
00000387: PUSH1 0x02
00000389: EXP
0000038a: SUB
0000038b: PUSH1 0x04
0000038d: CALLDATALOAD
0000038e: AND
0000038f: PUSH2 0x0789
00000392: JUMP
00000393: JUMPDEST
00000394: PUSH1 0x40
00000396: DUP1
00000397: MLOAD
00000398: PUSH1 0x20
0000039a: DUP1
0000039b: DUP3
0000039c: MSTORE
0000039d: DUP4
0000039e: MLOAD
0000039f: DUP2
000003a0: DUP4
000003a1: ADD
000003a2: MSTORE
000003a3: DUP4
000003a4: MLOAD
000003a5: SWAP2
000003a6: SWAP3
000003a7: DUP4
000003a8: SWAP3
000003a9: SWAP1
000003aa: DUP4
000003ab: ADD
000003ac: SWAP2
000003ad: DUP6
000003ae: ADD
000003af: SWAP1
000003b0: DUP1
000003b1: DUP4
000003b2: DUP4
000003b3: PUSH1 0x00
000003b5: JUMPDEST
000003b6: DUP4
000003b7: DUP2
000003b8: LT
000003b9: ISZERO
000003ba: PUSH2 0x03cd
000003bd: JUMPI
000003be: DUP2
000003bf: DUP2
000003c0: ADD
000003c1: MLOAD
000003c2: DUP4
000003c3: DUP3
000003c4: ADD
000003c5: MSTORE
000003c6: PUSH1 0x20
000003c8: ADD
000003c9: PUSH2 0x03b5
000003cc: JUMP
000003cd: JUMPDEST
000003ce: POP
000003cf: POP
000003d0: POP
000003d1: POP
000003d2: SWAP1
000003d3: POP
000003d4: SWAP1
000003d5: DUP2
000003d6: ADD
000003d7: SWAP1
000003d8: PUSH1 0x1f
000003da: AND
000003db: DUP1
000003dc: ISZERO
000003dd: PUSH2 0x03fa
000003e0: JUMPI
000003e1: DUP1
000003e2: DUP3
000003e3: SUB
000003e4: DUP1
000003e5: MLOAD
000003e6: PUSH1 0x01
000003e8: DUP4
000003e9: PUSH1 0x20
000003eb: SUB
000003ec: PUSH2 0x0100
000003ef: EXP
000003f0: SUB
000003f1: NOT
000003f2: AND
000003f3: DUP2
000003f4: MSTORE
000003f5: PUSH1 0x20
000003f7: ADD
000003f8: SWAP2
000003f9: POP
000003fa: JUMPDEST
000003fb: POP
000003fc: SWAP3
000003fd: POP
000003fe: POP
000003ff: POP
00000400: PUSH1 0x40
00000402: MLOAD
00000403: DUP1
00000404: SWAP2
00000405: SUB
00000406: SWAP1
00000407: RETURN
00000408: JUMPDEST
00000409: CALLVALUE
0000040a: DUP1
0000040b: ISZERO
0000040c: PUSH2 0x0414
0000040f: JUMPI
00000410: PUSH1 0x00
00000412: DUP1
00000413: REVERT
00000414: JUMPDEST
00000415: POP
00000416: PUSH2 0x023b
00000419: PUSH1 0x04
0000041b: CALLDATALOAD
0000041c: PUSH2 0x0851
0000041f: JUMP
00000420: JUMPDEST
00000421: CALLVALUE
00000422: DUP1
00000423: ISZERO
00000424: PUSH2 0x042c
00000427: JUMPI
00000428: PUSH1 0x00
0000042a: DUP1
0000042b: REVERT
0000042c: JUMPDEST
0000042d: POP
0000042e: PUSH2 0x0278
00000431: PUSH1 0x01
00000433: PUSH1 0xa0
00000435: PUSH1 0x02
00000437: EXP
00000438: SUB
00000439: PUSH1 0x04
0000043b: CALLDATALOAD
0000043c: AND
0000043d: PUSH2 0x0879
00000440: JUMP
00000441: JUMPDEST
00000442: CALLVALUE
00000443: DUP1
00000444: ISZERO
00000445: PUSH2 0x044d
00000448: JUMPI
00000449: PUSH1 0x00
0000044b: DUP1
0000044c: REVERT
0000044d: JUMPDEST
0000044e: POP
0000044f: PUSH2 0x0316
00000452: PUSH1 0x01
00000454: PUSH1 0xa0
00000456: PUSH1 0x02
00000458: EXP
00000459: SUB
0000045a: PUSH1 0x04
0000045c: CALLDATALOAD
0000045d: AND
0000045e: PUSH2 0x08d4
00000461: JUMP
00000462: JUMPDEST
00000463: PUSH1 0x20
00000465: MUL
00000466: ADD
00000467: PUSH1 0x04
00000469: ADD
0000046a: MLOAD
0000046b: SWAP1
0000046c: JUMP
0000046d: JUMPDEST
0000046e: PUSH1 0x01
00000470: PUSH1 0xa0
00000472: PUSH1 0x02
00000474: EXP
00000475: SUB
00000476: DUP1
00000477: DUP3
00000478: AND
00000479: PUSH1 0x00
0000047b: SWAP1
0000047c: DUP2
0000047d: MSTORE
0000047e: PUSH1 0x02
00000480: PUSH1 0x20
00000482: MSTORE
00000483: PUSH1 0x40
00000485: DUP2
00000486: KECCAK256
00000487: SLOAD
00000488: SWAP1
00000489: SWAP2
0000048a: AND
0000048b: ISZERO
0000048c: ISZERO
0000048d: PUSH2 0x04a2
00000490: JUMPI
00000491: POP
00000492: PUSH1 0x01
00000494: SLOAD
00000495: PUSH1 0x01
00000497: PUSH1 0xa0
00000499: PUSH1 0x02
0000049b: EXP
0000049c: SUB
0000049d: AND
0000049e: PUSH2 0x04bf
000004a1: JUMP
000004a2: JUMPDEST
000004a3: POP
000004a4: PUSH1 0x01
000004a6: PUSH1 0xa0
000004a8: PUSH1 0x02
000004aa: EXP
000004ab: SUB
000004ac: DUP1
000004ad: DUP3
000004ae: AND
000004af: PUSH1 0x00
000004b1: SWAP1
000004b2: DUP2
000004b3: MSTORE
000004b4: PUSH1 0x02
000004b6: PUSH1 0x20
000004b8: MSTORE
000004b9: PUSH1 0x40
000004bb: SWAP1
000004bc: KECCAK256
000004bd: SLOAD
000004be: AND
000004bf: JUMPDEST
000004c0: SWAP2
000004c1: SWAP1
000004c2: POP
000004c3: JUMP
000004c4: JUMPDEST
000004c5: PUSH1 0x00
000004c7: SLOAD
000004c8: PUSH1 0x01
000004ca: PUSH1 0xa0
000004cc: PUSH1 0x02
000004ce: EXP
000004cf: SUB
000004d0: AND
000004d1: CALLER
000004d2: EQ
000004d3: PUSH2 0x04db
000004d6: JUMPI
000004d7: PUSH1 0x00
000004d9: DUP1
000004da: REVERT
000004db: JUMPDEST
000004dc: PUSH1 0x01
000004de: PUSH1 0xa0
000004e0: PUSH1 0x02
000004e2: EXP
000004e3: SUB
000004e4: AND
000004e5: PUSH1 0x00
000004e7: SWAP1
000004e8: DUP2
000004e9: MSTORE
000004ea: PUSH1 0x03
000004ec: PUSH1 0x20
000004ee: MSTORE
000004ef: PUSH1 0x40
000004f1: SWAP1
000004f2: KECCAK256
000004f3: DUP1
000004f4: SLOAD
000004f5: PUSH1 0xff
000004f7: NOT
000004f8: AND
000004f9: PUSH1 0x01
000004fb: OR
000004fc: SWAP1
000004fd: SSTORE
000004fe: JUMP
000004ff: JUMPDEST
00000500: PUSH1 0x00
00000502: DUP1
00000503: SLOAD
00000504: PUSH1 0x01
00000506: PUSH1 0xa0
00000508: PUSH1 0x02
0000050a: EXP
0000050b: SUB
0000050c: AND
0000050d: CALLER
0000050e: EQ
0000050f: PUSH2 0x0517
00000512: JUMPI
00000513: PUSH1 0x00
00000515: DUP1
00000516: REVERT
00000517: JUMPDEST
00000518: PUSH1 0x01
0000051a: PUSH1 0xa0
0000051c: PUSH1 0x02
0000051e: EXP
0000051f: SUB
00000520: DUP3
00000521: AND
00000522: PUSH1 0x00
00000524: SWAP1
00000525: DUP2
00000526: MSTORE
00000527: PUSH1 0x04
00000529: PUSH1 0x20
0000052b: MSTORE
0000052c: PUSH1 0x40
0000052e: SWAP1
0000052f: KECCAK256
00000530: SLOAD
00000531: PUSH1 0xff
00000533: AND
00000534: ISZERO
00000535: ISZERO
00000536: PUSH1 0x01
00000538: EQ
00000539: PUSH2 0x0541
0000053c: JUMPI
0000053d: PUSH1 0x00
0000053f: DUP1
00000540: REVERT
00000541: JUMPDEST
00000542: POP
00000543: PUSH1 0x01
00000545: PUSH1 0xa0
00000547: PUSH1 0x02
00000549: EXP
0000054a: SUB
0000054b: DUP2
0000054c: AND
0000054d: PUSH1 0x00
0000054f: SWAP1
00000550: DUP2
00000551: MSTORE
00000552: PUSH1 0x04
00000554: PUSH1 0x20
00000556: SWAP1
00000557: DUP2
00000558: MSTORE
00000559: PUSH1 0x40
0000055b: DUP1
0000055c: DUP4
0000055d: KECCAK256
0000055e: DUP1
0000055f: SLOAD
00000560: PUSH1 0xff
00000562: NOT
00000563: AND
00000564: SWAP1
00000565: SSTORE
00000566: PUSH1 0x05
00000568: DUP3
00000569: MSTORE
0000056a: DUP1
0000056b: DUP4
0000056c: KECCAK256
0000056d: DUP4
0000056e: SWAP1
0000056f: SSTORE
00000570: PUSH1 0x06
00000572: SWAP1
00000573: SWAP2
00000574: MSTORE
00000575: SWAP1
00000576: KECCAK256
00000577: SLOAD
00000578: PUSH1 0x07
0000057a: DUP1
0000057b: SLOAD
0000057c: DUP3
0000057d: SWAP1
0000057e: DUP2
0000057f: LT
00000580: PUSH2 0x0585
00000583: JUMPI
00000584: INVALID
00000585: JUMPDEST
00000586: PUSH1 0x00
00000588: SWAP2
00000589: DUP3
0000058a: MSTORE
0000058b: PUSH1 0x20
0000058d: DUP1
0000058e: DUP4
0000058f: KECCAK256
00000590: SWAP1
00000591: SWAP2
00000592: ADD
00000593: DUP1
00000594: SLOAD
00000595: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005aa: NOT
000005ab: AND
000005ac: SWAP1
000005ad: SSTORE
000005ae: PUSH1 0x01
000005b0: PUSH1 0xa0
000005b2: PUSH1 0x02
000005b4: EXP
000005b5: SUB
000005b6: SWAP4
000005b7: SWAP1
000005b8: SWAP4
000005b9: AND
000005ba: DUP2
000005bb: MSTORE
000005bc: PUSH1 0x06
000005be: SWAP1
000005bf: SWAP3
000005c0: MSTORE
000005c1: POP
000005c2: PUSH1 0x40
000005c4: DUP2
000005c5: KECCAK256
000005c6: SSTORE
000005c7: JUMP
000005c8: JUMPDEST
000005c9: PUSH1 0x00
000005cb: SLOAD
000005cc: PUSH1 0x01
000005ce: PUSH1 0xa0
000005d0: PUSH1 0x02
000005d2: EXP
000005d3: SUB
000005d4: AND
000005d5: CALLER
000005d6: EQ
000005d7: PUSH2 0x05df
000005da: JUMPI
000005db: PUSH1 0x00
000005dd: DUP1
000005de: REVERT
000005df: JUMPDEST
000005e0: PUSH1 0x01
000005e2: PUSH1 0xa0
000005e4: PUSH1 0x02
000005e6: EXP
000005e7: SUB
000005e8: DUP3
000005e9: AND
000005ea: PUSH1 0x00
000005ec: SWAP1
000005ed: DUP2
000005ee: MSTORE
000005ef: PUSH1 0x04
000005f1: PUSH1 0x20
000005f3: MSTORE
000005f4: PUSH1 0x40
000005f6: SWAP1
000005f7: KECCAK256
000005f8: SLOAD
000005f9: PUSH1 0xff
000005fb: AND
000005fc: ISZERO
000005fd: PUSH2 0x0605
00000600: JUMPI
00000601: PUSH1 0x00
00000603: DUP1
00000604: REVERT
00000605: JUMPDEST
00000606: PUSH1 0x01
00000608: PUSH1 0xa0
0000060a: PUSH1 0x02
0000060c: EXP
0000060d: SUB
0000060e: SWAP1
0000060f: SWAP2
00000610: AND
00000611: PUSH1 0x00
00000613: DUP2
00000614: DUP2
00000615: MSTORE
00000616: PUSH1 0x04
00000618: PUSH1 0x20
0000061a: SWAP1
0000061b: DUP2
0000061c: MSTORE
0000061d: PUSH1 0x40
0000061f: DUP1
00000620: DUP4
00000621: KECCAK256
00000622: DUP1
00000623: SLOAD
00000624: PUSH1 0xff
00000626: NOT
00000627: AND
00000628: PUSH1 0x01
0000062a: SWAP1
0000062b: DUP2
0000062c: OR
0000062d: SWAP1
0000062e: SWAP2
0000062f: SSTORE
00000630: PUSH1 0x07
00000632: DUP1
00000633: SLOAD
00000634: PUSH1 0x06
00000636: DUP6
00000637: MSTORE
00000638: DUP4
00000639: DUP7
0000063a: KECCAK256
0000063b: DUP2
0000063c: SWAP1
0000063d: SSTORE
0000063e: SWAP2
0000063f: DUP3
00000640: ADD
00000641: SWAP1
00000642: SSTORE
00000643: PUSH32 0xa66cc928b5edb82af9bd49922954155ab7b0942694bea4ce44661d9a8736c688
00000664: ADD
00000665: DUP1
00000666: SLOAD
00000667: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000067c: NOT
0000067d: AND
0000067e: DUP6
0000067f: OR
00000680: SWAP1
00000681: SSTORE
00000682: SWAP3
00000683: DUP3
00000684: MSTORE
00000685: PUSH1 0x05
00000687: SWAP1
00000688: MSTORE
00000689: KECCAK256
0000068a: SSTORE
0000068b: JUMP
0000068c: JUMPDEST
0000068d: PUSH1 0x00
0000068f: SLOAD
00000690: PUSH1 0x01
00000692: PUSH1 0xa0
00000694: PUSH1 0x02
00000696: EXP
00000697: SUB
00000698: AND
00000699: DUP2
0000069a: JUMP
0000069b: JUMPDEST
0000069c: PUSH1 0x00
0000069e: SLOAD
0000069f: PUSH1 0x01
000006a1: PUSH1 0xa0
000006a3: PUSH1 0x02
000006a5: EXP
000006a6: SUB
000006a7: AND
000006a8: CALLER
000006a9: EQ
000006aa: PUSH2 0x06b2
000006ad: JUMPI
000006ae: PUSH1 0x00
000006b0: DUP1
000006b1: REVERT
000006b2: JUMPDEST
000006b3: PUSH1 0x01
000006b5: DUP1
000006b6: SLOAD
000006b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006cc: NOT
000006cd: AND
000006ce: PUSH1 0x01
000006d0: PUSH1 0xa0
000006d2: PUSH1 0x02
000006d4: EXP
000006d5: SUB
000006d6: SWAP3
000006d7: SWAP1
000006d8: SWAP3
000006d9: AND
000006da: SWAP2
000006db: SWAP1
000006dc: SWAP2
000006dd: OR
000006de: SWAP1
000006df: SSTORE
000006e0: JUMP
000006e1: JUMPDEST
000006e2: PUSH1 0x01
000006e4: PUSH1 0xa0
000006e6: PUSH1 0x02
000006e8: EXP
000006e9: SUB
000006ea: AND
000006eb: PUSH1 0x00
000006ed: SWAP1
000006ee: DUP2
000006ef: MSTORE
000006f0: PUSH1 0x04
000006f2: PUSH1 0x20
000006f4: MSTORE
000006f5: PUSH1 0x40
000006f7: SWAP1
000006f8: KECCAK256
000006f9: SLOAD
000006fa: PUSH1 0xff
000006fc: AND
000006fd: SWAP1
000006fe: JUMP
000006ff: JUMPDEST
00000700: PUSH1 0x00
00000702: SLOAD
00000703: PUSH1 0x01
00000705: PUSH1 0xa0
00000707: PUSH1 0x02
00000709: EXP
0000070a: SUB
0000070b: AND
0000070c: CALLER
0000070d: EQ
0000070e: PUSH2 0x0716
00000711: JUMPI
00000712: PUSH1 0x00
00000714: DUP1
00000715: REVERT
00000716: JUMPDEST
00000717: PUSH1 0x01
00000719: PUSH1 0xa0
0000071b: PUSH1 0x02
0000071d: EXP
0000071e: SUB
0000071f: AND
00000720: PUSH1 0x00
00000722: SWAP1
00000723: DUP2
00000724: MSTORE
00000725: PUSH1 0x03
00000727: PUSH1 0x20
00000729: MSTORE
0000072a: PUSH1 0x40
0000072c: SWAP1
0000072d: KECCAK256
0000072e: DUP1
0000072f: SLOAD
00000730: PUSH1 0xff
00000732: NOT
00000733: AND
00000734: SWAP1
00000735: SSTORE
00000736: JUMP
00000737: JUMPDEST
00000738: PUSH1 0x00
0000073a: SLOAD
0000073b: PUSH1 0x01
0000073d: PUSH1 0xa0
0000073f: PUSH1 0x02
00000741: EXP
00000742: SUB
00000743: AND
00000744: CALLER
00000745: EQ
00000746: PUSH2 0x074e
00000749: JUMPI
0000074a: PUSH1 0x00
0000074c: DUP1
0000074d: REVERT
0000074e: JUMPDEST
0000074f: PUSH1 0x01
00000751: PUSH1 0xa0
00000753: PUSH1 0x02
00000755: EXP
00000756: SUB
00000757: SWAP2
00000758: DUP3
00000759: AND
0000075a: PUSH1 0x00
0000075c: SWAP1
0000075d: DUP2
0000075e: MSTORE
0000075f: PUSH1 0x02
00000761: PUSH1 0x20
00000763: MSTORE
00000764: PUSH1 0x40
00000766: SWAP1
00000767: KECCAK256
00000768: DUP1
00000769: SLOAD
0000076a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000077f: NOT
00000780: AND
00000781: SWAP2
00000782: SWAP1
00000783: SWAP3
00000784: AND
00000785: OR
00000786: SWAP1
00000787: SSTORE
00000788: JUMP
00000789: JUMPDEST
0000078a: PUSH1 0x40
0000078c: DUP1
0000078d: MLOAD
0000078e: PUSH1 0x20
00000790: DUP1
00000791: DUP3
00000792: MSTORE
00000793: DUP2
00000794: DUP4
00000795: ADD
00000796: SWAP1
00000797: SWAP3
00000798: MSTORE
00000799: PUSH1 0x60
0000079b: SWAP2
0000079c: DUP3
0000079d: SWAP2
0000079e: PUSH1 0x00
000007a0: SWAP2
000007a1: DUP1
000007a2: DUP3
000007a3: ADD
000007a4: PUSH2 0x0400
000007a7: DUP1
000007a8: CODESIZE
000007a9: DUP4
000007aa: CODECOPY
000007ab: ADD
000007ac: SWAP1
000007ad: POP
000007ae: POP
000007af: SWAP2
000007b0: POP
000007b1: JUMPDEST
000007b2: PUSH1 0x20
000007b4: DUP2
000007b5: LT
000007b6: ISZERO
000007b7: PUSH2 0x084a
000007ba: JUMPI
000007bb: PUSH1 0x01
000007bd: PUSH1 0xa0
000007bf: PUSH1 0x02
000007c1: EXP
000007c2: SUB
000007c3: DUP5
000007c4: AND
000007c5: PUSH1 0x00
000007c7: SWAP1
000007c8: DUP2
000007c9: MSTORE
000007ca: PUSH1 0x05
000007cc: PUSH1 0x20
000007ce: SWAP1
000007cf: DUP2
000007d0: MSTORE
000007d1: PUSH1 0x40
000007d3: SWAP1
000007d4: SWAP2
000007d5: KECCAK256
000007d6: SLOAD
000007d7: SWAP1
000007d8: DUP3
000007d9: SWAP1
000007da: DUP2
000007db: LT
000007dc: PUSH2 0x07e1
000007df: JUMPI
000007e0: INVALID
000007e1: JUMPDEST
000007e2: BYTE
000007e3: PUSH32 0x0100000000000000000000000000000000000000000000000000000000000000
00000804: MUL
00000805: DUP3
00000806: DUP3
00000807: DUP2
00000808: MLOAD
00000809: DUP2
0000080a: LT
0000080b: ISZERO
0000080c: ISZERO
0000080d: PUSH2 0x0812
00000810: JUMPI
00000811: INVALID
00000812: JUMPDEST
00000813: SWAP1
00000814: PUSH1 0x20
00000816: ADD
00000817: ADD
00000818: SWAP1
00000819: PUSH31 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
00000839: NOT
0000083a: AND
0000083b: SWAP1
0000083c: DUP2
0000083d: PUSH1 0x00
0000083f: BYTE
00000840: SWAP1
00000841: MSTORE8
00000842: POP
00000843: PUSH1 0x01
00000845: ADD
00000846: PUSH2 0x07b1
00000849: JUMP
0000084a: JUMPDEST
0000084b: POP
0000084c: SWAP3
0000084d: SWAP2
0000084e: POP
0000084f: POP
00000850: JUMP
00000851: JUMPDEST
00000852: PUSH1 0x07
00000854: DUP1
00000855: SLOAD
00000856: DUP3
00000857: SWAP1
00000858: DUP2
00000859: LT
0000085a: PUSH2 0x085f
0000085d: JUMPI
0000085e: INVALID
0000085f: JUMPDEST
00000860: PUSH1 0x00
00000862: SWAP2
00000863: DUP3
00000864: MSTORE
00000865: PUSH1 0x20
00000867: SWAP1
00000868: SWAP2
00000869: KECCAK256
0000086a: ADD
0000086b: SLOAD
0000086c: PUSH1 0x01
0000086e: PUSH1 0xa0
00000870: PUSH1 0x02
00000872: EXP
00000873: SUB
00000874: AND
00000875: SWAP1
00000876: POP
00000877: DUP2
00000878: JUMP
00000879: JUMPDEST
0000087a: PUSH1 0x00
0000087c: SLOAD
0000087d: PUSH1 0x01
0000087f: PUSH1 0xa0
00000881: PUSH1 0x02
00000883: EXP
00000884: SUB
00000885: AND
00000886: CALLER
00000887: EQ
00000888: PUSH2 0x0890
0000088b: JUMPI
0000088c: PUSH1 0x00
0000088e: DUP1
0000088f: REVERT
00000890: JUMPDEST
00000891: PUSH1 0x01
00000893: PUSH1 0xa0
00000895: PUSH1 0x02
00000897: EXP
00000898: SUB
00000899: DUP2
0000089a: AND
0000089b: ISZERO
0000089c: ISZERO
0000089d: PUSH2 0x08a5
000008a0: JUMPI
000008a1: PUSH1 0x00
000008a3: DUP1
000008a4: REVERT
000008a5: JUMPDEST
000008a6: PUSH1 0x00
000008a8: DUP1
000008a9: SLOAD
000008aa: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000008bf: NOT
000008c0: AND
000008c1: PUSH1 0x01
000008c3: PUSH1 0xa0
000008c5: PUSH1 0x02
000008c7: EXP
000008c8: SUB
000008c9: SWAP3
000008ca: SWAP1
000008cb: SWAP3
000008cc: AND
000008cd: SWAP2
000008ce: SWAP1
000008cf: SWAP2
000008d0: OR
000008d1: SWAP1
000008d2: SSTORE
000008d3: JUMP
000008d4: JUMPDEST
000008d5: PUSH1 0x01
000008d7: PUSH1 0xa0
000008d9: PUSH1 0x02
000008db: EXP
000008dc: SUB
000008dd: AND
000008de: PUSH1 0x00
000008e0: SWAP1
000008e1: DUP2
000008e2: MSTORE
000008e3: PUSH1 0x03
000008e5: PUSH1 0x20
000008e7: MSTORE
000008e8: PUSH1 0x40
000008ea: SWAP1
000008eb: KECCAK256
000008ec: SLOAD
000008ed: PUSH1 0xff
000008ef: AND
000008f0: SWAP1
000008f1: JUMP
000008f2: STOP
000008f3: LOG1
000008f4: PUSH6 0x627a7a723058
000008fb: KECCAK256
000008fc: UNKNOWN(0x0D)
000008fd: SELFBALANCE
000008fe: LT
000008ff: UNKNOWN(0x4C)
00000900: UNKNOWN(0xF6)
00000901: UNKNOWN(0xC0)
00000902: PUSH14 0x2cd5c750a774443b78dbf7fdd001
00000911: STATICCALL
00000912: DUP1
00000913: PUSH29

Findings

validated = confirmed for call sinks; sink observed for others

Severity	Category	Tool	Title	Confidence	Validated	Confirmed	Details
critical	upgradeability	detector	Untrusted DELEGATECALL target reachable	70	no	no	view trace_id: 0xce056cd31fa348c1f2b15d9561e3c4727fc3d9bcc44d7faadb0289d9e0facede validation_json { "sink": "DELEGATECALL", "errors": 0, "status": "unknown", "attempts": 156, "trace_id": "0xce056cd31fa348c1f2b15d9561e3c4727fc3d9bcc44d7faadb0289d9e0facede", "confirmed": false, "trace_mode": "callTracer", "call_targets": null, "matched_probe": null, "target_varies": null, "classification": "no_sink" } witness_json { "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata", "constraints": [], "entrypoints": [ { "calldata": "0x3c18d318", "selector": "0x3c18d318", "calldata_variants": [ "0x3c18d318", "0x3c18d3180000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x4a5db3b5", "selector": "0x4a5db3b5", "calldata_variants": [ "0x4a5db3b5", "0x4a5db3b50000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x5cadd08d", "selector": "0x5cadd08d", "calldata_variants": [ "0x5cadd08d", "0x5cadd08d0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x66f40931", "selector": "0x66f40931", "calldata_variants": [ "0x66f40931", "0x66f409310000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8da5cb5b", "selector": "0x8da5cb5b", "calldata_variants": [ "0x8da5cb5b", "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0x8dd9596a", "selector": "0x8dd9596a", "calldata_variants": [ "0x8dd9596a", "0x8dd9596a0000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xaaaae342", "selector": "0xaaaae342", "calldata_variants": [ "0xaaaae342", "0xaaaae3420000000000000000000000000000000000000000000000000000000000000000" ] }, { "calldata": "0xb48028e3", "selector": "0xb48028e3", "calldata_variants": [ "0xb48028e3", "0xb48028e30000000000000000000000000000000000000000000000000000000000000000" ] } ] } evidence_json { "examples": [ { "pc": 508, "opcode": "DELEGATECALL", "returndata_checked": null, "value_expression_category": "n/a", "target_expression_category": "computed" } ], "guards_detected": [], "delegatecall_count": 1, "untrusted_delegatecall_count": 1 }
medium	upgradeability	cast	DELEGATECALL present	80	no	—	view evidence_json { "notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns", "delegatecall_count": 1 }

Severity