019ba5f9-b6df-7139-8f45-dabd43077c6f
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 31994 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 31995 | proxy.resolve | complete | 1 / 3 | 3 months ago |
| 31996 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 31997 | analysis.bundle | complete | 1 / 3 | 3 months ago |
| 31998 | capability.graph | complete | 1 / 3 | 3 months ago |
| 31999 | detector.run | complete | 1 / 3 | 3 months ago |
| 32000 | validation.fork | complete | 1 / 3 | 3 months ago |
{
"method": "etherscan+onchain",
"status": "confirmed",
"etherscan_hint": {
"source": "etherscan",
"etherscan": {
"proxy_flag": true,
"implementation": "0x8efba8af37af48d2e0a04b0aae60f0e9bc8de007"
}
},
"implementation": "0x8efba8af37af48d2e0a04b0aae60f0e9bc8de007",
"onchain_method": "eip1967"
}
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH2 0x000c 00000008: PUSH2 0x000e 0000000b: JUMP 0000000c: JUMPDEST 0000000d: STOP 0000000e: JUMPDEST 0000000f: PUSH32 0x000000000000000000000000caba8c12873fffed13431d98bf6b836dff08e869 00000030: PUSH1 0x01 00000032: PUSH1 0x01 00000034: PUSH1 0xa0 00000036: SHL 00000037: SUB 00000038: AND 00000039: CALLER 0000003a: SUB 0000003b: PUSH2 0x007b 0000003e: JUMPI 0000003f: PUSH1 0x00 00000041: CALLDATALOAD 00000042: PUSH1 0x01 00000044: PUSH1 0x01 00000046: PUSH1 0xe0 00000048: SHL 00000049: SUB 0000004a: NOT 0000004b: AND 0000004c: PUSH4 0x278f7943 00000051: PUSH1 0xe1 00000053: SHL 00000054: EQ 00000055: PUSH2 0x0071 00000058: JUMPI 00000059: PUSH1 0x40 0000005b: MLOAD 0000005c: PUSH4 0x34ad5dbb 00000061: PUSH1 0xe2 00000063: SHL 00000064: DUP2 00000065: MSTORE 00000066: PUSH1 0x04 00000068: ADD 00000069: PUSH1 0x40 0000006b: MLOAD 0000006c: DUP1 0000006d: SWAP2 0000006e: SUB 0000006f: SWAP1 00000070: REVERT 00000071: JUMPDEST 00000072: PUSH2 0x0079 00000075: PUSH2 0x0083 00000078: JUMP 00000079: JUMPDEST 0000007a: JUMP 0000007b: JUMPDEST 0000007c: PUSH2 0x0079 0000007f: PUSH2 0x00b2 00000082: JUMP 00000083: JUMPDEST 00000084: PUSH1 0x00 00000086: DUP1 00000087: PUSH2 0x0093 0000008a: CALLDATASIZE 0000008b: PUSH1 0x04 0000008d: DUP2 0000008e: DUP5 0000008f: PUSH2 0x0312 00000092: JUMP 00000093: JUMPDEST 00000094: DUP2 00000095: ADD 00000096: SWAP1 00000097: PUSH2 0x00a0 0000009a: SWAP2 0000009b: SWAP1 0000009c: PUSH2 0x0352 0000009f: JUMP 000000a0: JUMPDEST 000000a1: SWAP2 000000a2: POP 000000a3: SWAP2 000000a4: POP 000000a5: PUSH2 0x00ae 000000a8: DUP3 000000a9: DUP3 000000aa: PUSH2 0x00c2 000000ad: JUMP 000000ae: JUMPDEST 000000af: POP 000000b0: POP 000000b1: JUMP 000000b2: JUMPDEST 000000b3: PUSH2 0x0079 000000b6: PUSH2 0x00bd 000000b9: PUSH2 0x011d 000000bc: JUMP 000000bd: JUMPDEST 000000be: PUSH2 0x0155 000000c1: JUMP 000000c2: JUMPDEST 000000c3: PUSH2 0x00cb 000000c6: DUP3 000000c7: PUSH2 0x0179 000000ca: JUMP 000000cb: JUMPDEST 000000cc: PUSH1 0x40 000000ce: MLOAD 000000cf: PUSH1 0x01 000000d1: PUSH1 0x01 000000d3: PUSH1 0xa0 000000d5: SHL 000000d6: SUB 000000d7: DUP4 000000d8: AND 000000d9: SWAP1 000000da: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b 000000fb: SWAP1 000000fc: PUSH1 0x00 000000fe: SWAP1 000000ff: LOG2 00000100: DUP1 00000101: MLOAD 00000102: ISZERO 00000103: PUSH2 0x0115 00000106: JUMPI 00000107: PUSH2 0x0110 0000010a: DUP3 0000010b: DUP3 0000010c: PUSH2 0x01f5 0000010f: JUMP 00000110: JUMPDEST 00000111: POP 00000112: POP 00000113: POP 00000114: JUMP 00000115: JUMPDEST 00000116: PUSH2 0x00ae 00000119: PUSH2 0x026b 0000011c: JUMP 0000011d: JUMPDEST 0000011e: PUSH1 0x00 00000120: PUSH2 0x0150 00000123: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000144: SLOAD 00000145: PUSH1 0x01 00000147: PUSH1 0x01 00000149: PUSH1 0xa0 0000014b: SHL 0000014c: SUB 0000014d: AND 0000014e: SWAP1 0000014f: JUMP 00000150: JUMPDEST 00000151: SWAP1 00000152: POP 00000153: SWAP1 00000154: JUMP 00000155: JUMPDEST 00000156: CALLDATASIZE 00000157: PUSH1 0x00 00000159: DUP1 0000015a: CALLDATACOPY 0000015b: PUSH1 0x00 0000015d: DUP1 0000015e: CALLDATASIZE 0000015f: PUSH1 0x00 00000161: DUP5 00000162: GAS 00000163: DELEGATECALL 00000164: RETURNDATASIZE 00000165: PUSH1 0x00 00000167: DUP1 00000168: RETURNDATACOPY 00000169: DUP1 0000016a: DUP1 0000016b: ISZERO 0000016c: PUSH2 0x0174 0000016f: JUMPI 00000170: RETURNDATASIZE 00000171: PUSH1 0x00 00000173: RETURN 00000174: JUMPDEST 00000175: RETURNDATASIZE 00000176: PUSH1 0x00 00000178: REVERT 00000179: JUMPDEST 0000017a: DUP1 0000017b: PUSH1 0x01 0000017d: PUSH1 0x01 0000017f: PUSH1 0xa0 00000181: SHL 00000182: SUB 00000183: AND 00000184: EXTCODESIZE 00000185: PUSH1 0x00 00000187: SUB 00000188: PUSH2 0x01b4 0000018b: JUMPI 0000018c: PUSH1 0x40 0000018e: MLOAD 0000018f: PUSH4 0x4c9c8ce3 00000194: PUSH1 0xe0 00000196: SHL 00000197: DUP2 00000198: MSTORE 00000199: PUSH1 0x01 0000019b: PUSH1 0x01 0000019d: PUSH1 0xa0 0000019f: SHL 000001a0: SUB 000001a1: DUP3 000001a2: AND 000001a3: PUSH1 0x04 000001a5: DUP3 000001a6: ADD 000001a7: MSTORE 000001a8: PUSH1 0x24 000001aa: ADD 000001ab: JUMPDEST 000001ac: PUSH1 0x40 000001ae: MLOAD 000001af: DUP1 000001b0: SWAP2 000001b1: SUB 000001b2: SWAP1 000001b3: REVERT 000001b4: JUMPDEST 000001b5: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000001d6: DUP1 000001d7: SLOAD 000001d8: PUSH1 0x01 000001da: PUSH1 0x01 000001dc: PUSH1 0xa0 000001de: SHL 000001df: SUB 000001e0: NOT 000001e1: AND 000001e2: PUSH1 0x01 000001e4: PUSH1 0x01 000001e6: PUSH1 0xa0 000001e8: SHL 000001e9: SUB 000001ea: SWAP3 000001eb: SWAP1 000001ec: SWAP3 000001ed: AND 000001ee: SWAP2 000001ef: SWAP1 000001f0: SWAP2 000001f1: OR 000001f2: SWAP1 000001f3: SSTORE 000001f4: JUMP 000001f5: JUMPDEST 000001f6: PUSH1 0x60 000001f8: PUSH1 0x00 000001fa: DUP1 000001fb: DUP5 000001fc: PUSH1 0x01 000001fe: PUSH1 0x01 00000200: PUSH1 0xa0 00000202: SHL 00000203: SUB 00000204: AND 00000205: DUP5 00000206: PUSH1 0x40 00000208: MLOAD 00000209: PUSH2 0x0212 0000020c: SWAP2 0000020d: SWAP1 0000020e: PUSH2 0x042a 00000211: JUMP 00000212: JUMPDEST 00000213: PUSH1 0x00 00000215: PUSH1 0x40 00000217: MLOAD 00000218: DUP1 00000219: DUP4 0000021a: SUB 0000021b: DUP2 0000021c: DUP6 0000021d: GAS 0000021e: DELEGATECALL 0000021f: SWAP2 00000220: POP 00000221: POP 00000222: RETURNDATASIZE 00000223: DUP1 00000224: PUSH1 0x00 00000226: DUP2 00000227: EQ 00000228: PUSH2 0x024d 0000022b: JUMPI 0000022c: PUSH1 0x40 0000022e: MLOAD 0000022f: SWAP2 00000230: POP 00000231: PUSH1 0x1f 00000233: NOT 00000234: PUSH1 0x3f 00000236: RETURNDATASIZE 00000237: ADD 00000238: AND 00000239: DUP3 0000023a: ADD 0000023b: PUSH1 0x40 0000023d: MSTORE 0000023e: RETURNDATASIZE 0000023f: DUP3 00000240: MSTORE 00000241: RETURNDATASIZE 00000242: PUSH1 0x00 00000244: PUSH1 0x20 00000246: DUP5 00000247: ADD 00000248: RETURNDATACOPY 00000249: PUSH2 0x0252 0000024c: JUMP 0000024d: JUMPDEST 0000024e: PUSH1 0x60 00000250: SWAP2 00000251: POP 00000252: JUMPDEST 00000253: POP 00000254: SWAP2 00000255: POP 00000256: SWAP2 00000257: POP 00000258: PUSH2 0x0262 0000025b: DUP6 0000025c: DUP4 0000025d: DUP4 0000025e: PUSH2 0x028a 00000261: JUMP 00000262: JUMPDEST 00000263: SWAP6 00000264: SWAP5 00000265: POP 00000266: POP 00000267: POP 00000268: POP 00000269: POP 0000026a: JUMP 0000026b: JUMPDEST 0000026c: CALLVALUE 0000026d: ISZERO 0000026e: PUSH2 0x0079 00000271: JUMPI 00000272: PUSH1 0x40 00000274: MLOAD 00000275: PUSH4 0xb398979f 0000027a: PUSH1 0xe0 0000027c: SHL 0000027d: DUP2 0000027e: MSTORE 0000027f: PUSH1 0x04 00000281: ADD 00000282: PUSH1 0x40 00000284: MLOAD 00000285: DUP1 00000286: SWAP2 00000287: SUB 00000288: SWAP1 00000289: REVERT 0000028a: JUMPDEST 0000028b: PUSH1 0x60 0000028d: DUP3 0000028e: PUSH2 0x029f 00000291: JUMPI 00000292: PUSH2 0x029a 00000295: DUP3 00000296: PUSH2 0x02e9 00000299: JUMP 0000029a: JUMPDEST 0000029b: PUSH2 0x02e2 0000029e: JUMP 0000029f: JUMPDEST 000002a0: DUP2 000002a1: MLOAD 000002a2: ISZERO 000002a3: DUP1 000002a4: ISZERO 000002a5: PUSH2 0x02b6 000002a8: JUMPI 000002a9: POP 000002aa: PUSH1 0x01 000002ac: PUSH1 0x01 000002ae: PUSH1 0xa0 000002b0: SHL 000002b1: SUB 000002b2: DUP5 000002b3: AND 000002b4: EXTCODESIZE 000002b5: ISZERO 000002b6: JUMPDEST 000002b7: ISZERO 000002b8: PUSH2 0x02df 000002bb: JUMPI 000002bc: PUSH1 0x40 000002be: MLOAD 000002bf: PUSH4 0x9996b315 000002c4: PUSH1 0xe0 000002c6: SHL 000002c7: DUP2 000002c8: MSTORE 000002c9: PUSH1 0x01 000002cb: PUSH1 0x01 000002cd: PUSH1 0xa0 000002cf: SHL 000002d0: SUB 000002d1: DUP6 000002d2: AND 000002d3: PUSH1 0x04 000002d5: DUP3 000002d6: ADD 000002d7: MSTORE 000002d8: PUSH1 0x24 000002da: ADD 000002db: PUSH2 0x01ab 000002de: JUMP 000002df: JUMPDEST 000002e0: POP 000002e1: DUP1 000002e2: JUMPDEST 000002e3: SWAP4 000002e4: SWAP3 000002e5: POP 000002e6: POP 000002e7: POP 000002e8: JUMP 000002e9: JUMPDEST 000002ea: DUP1 000002eb: MLOAD 000002ec: ISZERO 000002ed: PUSH2 0x02f9 000002f0: JUMPI 000002f1: DUP1 000002f2: MLOAD 000002f3: DUP1 000002f4: DUP3 000002f5: PUSH1 0x20 000002f7: ADD 000002f8: REVERT 000002f9: JUMPDEST 000002fa: PUSH1 0x40 000002fc: MLOAD 000002fd: PUSH4 0xd6bda275 00000302: PUSH1 0xe0 00000304: SHL 00000305: DUP2 00000306: MSTORE 00000307: PUSH1 0x04 00000309: ADD 0000030a: PUSH1 0x40 0000030c: MLOAD 0000030d: DUP1 0000030e: SWAP2 0000030f: SUB 00000310: SWAP1 00000311: REVERT 00000312: JUMPDEST 00000313: PUSH1 0x00 00000315: DUP1 00000316: DUP6 00000317: DUP6 00000318: GT 00000319: ISZERO 0000031a: PUSH2 0x0322 0000031d: JUMPI 0000031e: PUSH1 0x00 00000320: DUP1 00000321: REVERT 00000322: JUMPDEST 00000323: DUP4 00000324: DUP7 00000325: GT 00000326: ISZERO 00000327: PUSH2 0x032f 0000032a: JUMPI 0000032b: PUSH1 0x00 0000032d: DUP1 0000032e: REVERT 0000032f: JUMPDEST 00000330: POP 00000331: POP 00000332: DUP3 00000333: ADD 00000334: SWAP4 00000335: SWAP2 00000336: SWAP1 00000337: SWAP3 00000338: SUB 00000339: SWAP2 0000033a: POP 0000033b: JUMP 0000033c: JUMPDEST 0000033d: PUSH4 0x4e487b71 00000342: PUSH1 0xe0 00000344: SHL 00000345: PUSH1 0x00 00000347: MSTORE 00000348: PUSH1 0x41 0000034a: PUSH1 0x04 0000034c: MSTORE 0000034d: PUSH1 0x24 0000034f: PUSH1 0x00 00000351: REVERT 00000352: JUMPDEST 00000353: PUSH1 0x00 00000355: DUP1 00000356: PUSH1 0x40 00000358: DUP4 00000359: DUP6 0000035a: SUB 0000035b: SLT 0000035c: ISZERO 0000035d: PUSH2 0x0365 00000360: JUMPI 00000361: PUSH1 0x00 00000363: DUP1 00000364: REVERT 00000365: JUMPDEST 00000366: DUP3 00000367: CALLDATALOAD 00000368: PUSH1 0x01 0000036a: PUSH1 0x01 0000036c: PUSH1 0xa0 0000036e: SHL 0000036f: SUB 00000370: DUP2 00000371: AND 00000372: DUP2 00000373: EQ 00000374: PUSH2 0x037c 00000377: JUMPI 00000378: PUSH1 0x00 0000037a: DUP1 0000037b: REVERT 0000037c: JUMPDEST 0000037d: SWAP2 0000037e: POP 0000037f: PUSH1 0x20 00000381: DUP4 00000382: ADD 00000383: CALLDATALOAD 00000384: PUSH8 0xffffffffffffffff 0000038d: DUP2 0000038e: GT 0000038f: ISZERO 00000390: PUSH2 0x0398 00000393: JUMPI 00000394: PUSH1 0x00 00000396: DUP1 00000397: REVERT 00000398: JUMPDEST 00000399: DUP4 0000039a: ADD 0000039b: PUSH1 0x1f 0000039d: DUP2 0000039e: ADD 0000039f: DUP6 000003a0: SGT 000003a1: PUSH2 0x03a9 000003a4: JUMPI 000003a5: PUSH1 0x00 000003a7: DUP1 000003a8: REVERT 000003a9: JUMPDEST 000003aa: DUP1 000003ab: CALLDATALOAD 000003ac: PUSH8 0xffffffffffffffff 000003b5: DUP2 000003b6: GT 000003b7: ISZERO 000003b8: PUSH2 0x03c3 000003bb: JUMPI 000003bc: PUSH2 0x03c3 000003bf: PUSH2 0x033c 000003c2: JUMP 000003c3: JUMPDEST 000003c4: PUSH1 0x40 000003c6: MLOAD 000003c7: PUSH1 0x1f 000003c9: DUP3 000003ca: ADD 000003cb: PUSH1 0x1f 000003cd: NOT 000003ce: SWAP1 000003cf: DUP2 000003d0: AND 000003d1: PUSH1 0x3f 000003d3: ADD 000003d4: AND 000003d5: DUP2 000003d6: ADD 000003d7: PUSH8 0xffffffffffffffff 000003e0: DUP2 000003e1: GT 000003e2: DUP3 000003e3: DUP3 000003e4: LT 000003e5: OR 000003e6: ISZERO 000003e7: PUSH2 0x03f2 000003ea: JUMPI 000003eb: PUSH2 0x03f2 000003ee: PUSH2 0x033c 000003f1: JUMP 000003f2: JUMPDEST 000003f3: PUSH1 0x40 000003f5: MSTORE 000003f6: DUP2 000003f7: DUP2 000003f8: MSTORE 000003f9: DUP3 000003fa: DUP3 000003fb: ADD 000003fc: PUSH1 0x20 000003fe: ADD 000003ff: DUP8 00000400: LT 00000401: ISZERO 00000402: PUSH2 0x040a 00000405: JUMPI 00000406: PUSH1 0x00 00000408: DUP1 00000409: REVERT 0000040a: JUMPDEST 0000040b: DUP2 0000040c: PUSH1 0x20 0000040e: DUP5 0000040f: ADD 00000410: PUSH1 0x20 00000412: DUP4 00000413: ADD 00000414: CALLDATACOPY 00000415: PUSH1 0x00 00000417: PUSH1 0x20 00000419: DUP4 0000041a: DUP4 0000041b: ADD 0000041c: ADD 0000041d: MSTORE 0000041e: DUP1 0000041f: SWAP4 00000420: POP 00000421: POP 00000422: POP 00000423: POP 00000424: SWAP3 00000425: POP 00000426: SWAP3 00000427: SWAP1 00000428: POP 00000429: JUMP 0000042a: JUMPDEST 0000042b: PUSH1 0x00 0000042d: DUP3 0000042e: MLOAD 0000042f: PUSH1 0x00 00000431: JUMPDEST 00000432: DUP2 00000433: DUP2 00000434: LT 00000435: ISZERO 00000436: PUSH2 0x044b 00000439: JUMPI 0000043a: PUSH1 0x20 0000043c: DUP2 0000043d: DUP7 0000043e: ADD 0000043f: DUP2 00000440: ADD 00000441: MLOAD 00000442: DUP6 00000443: DUP4 00000444: ADD 00000445: MSTORE 00000446: ADD 00000447: PUSH2 0x0431 0000044a: JUMP 0000044b: JUMPDEST 0000044c: POP 0000044d: PUSH1 0x00 0000044f: SWAP3 00000450: ADD 00000451: SWAP2 00000452: DUP3 00000453: MSTORE 00000454: POP 00000455: SWAP2 00000456: SWAP1 00000457: POP 00000458: JUMP 00000459: INVALID 0000045a: LOG2 0000045b: PUSH5 0x6970667358 00000461: UNKNOWN(0x22) 00000462: SLT 00000463: KECCAK256 00000464: UNKNOWN(0xE3) 00000465: UNKNOWN(0x2E) 00000466: PUSH1 0xdd 00000468: PUSH5 0x74be4517f2 0000046e: PUSH32 0xd7fa9cf19d86a0618938abebac73646b76941946c364736f6c634300081c0033
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0xf0a805e0a465559b642616180bbad17d794ae570e31e7dfd5bb256746a6dedbf
call_targets:
0x8efba8af37af48d2e0a04b0aae60f0e9bc8de007
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0xf0a805e0a465559b642616180bbad17d794ae570e31e7dfd5bb256746a6dedbf",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x8efba8af37af48d2e0a04b0aae60f0e9bc8de007"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x278f7943",
"selector": "0x278f7943",
"calldata_variants": [
"0x278f7943",
"0x278f79430000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 355,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 542,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|
| medium | upgradeability | cast | DELEGATECALL present | 80 | no | — |
viewevidence_json{
"notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
"delegatecall_count": 2
}
|