TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba5f9-b749-72bd-944b-500fd4dcfcbe

complete
Chain ID
1
Address
Block Number
Created
Sat, Jan 10, 2026 3:36 AM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 proxy context implementation known
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
32113 artifact.fetch complete 1 / 3 3 months ago
32114 proxy.resolve complete 1 / 3 3 months ago
32115 tool.cast_disasm complete 1 / 3 3 months ago
32116 analysis.bundle complete 1 / 3 3 months ago
32117 capability.graph complete 1 / 3 3 months ago
32118 detector.run complete 1 / 3 3 months ago
32119 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: yes confirmed
Verified Source: yes
Proxy evidence
{
    "method": "etherscan+onchain",
    "status": "confirmed",
    "etherscan_hint": {
        "source": "etherscan",
        "etherscan": {
            "proxy_flag": true,
            "implementation": "0x9f29f9bda2052884d39f0f032b68aaa14fc363d8"
        }
    },
    "implementation": "0x9f29f9bda2052884d39f0f032b68aaa14fc363d8",
    "onchain_method": "eip1967"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
2
Total opcodes
919
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x004a
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x3659cfe6
00000019: EQ
0000001a: PUSH2 0x0054
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x4f1ef286
00000024: EQ
00000025: PUSH2 0x00a5
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x5c60da1b
0000002f: EQ
00000030: PUSH2 0x013e
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0x8f283970
0000003a: EQ
0000003b: PUSH2 0x0195
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf851a440
00000045: EQ
00000046: PUSH2 0x01e6
00000049: JUMPI
0000004a: JUMPDEST
0000004b: PUSH2 0x0052
0000004e: PUSH2 0x023d
00000051: JUMP
00000052: JUMPDEST
00000053: STOP
00000054: JUMPDEST
00000055: CALLVALUE
00000056: DUP1
00000057: ISZERO
00000058: PUSH2 0x0060
0000005b: JUMPI
0000005c: PUSH1 0x00
0000005e: DUP1
0000005f: REVERT
00000060: JUMPDEST
00000061: POP
00000062: PUSH2 0x00a3
00000065: PUSH1 0x04
00000067: DUP1
00000068: CALLDATASIZE
00000069: SUB
0000006a: PUSH1 0x20
0000006c: DUP2
0000006d: LT
0000006e: ISZERO
0000006f: PUSH2 0x0077
00000072: JUMPI
00000073: PUSH1 0x00
00000075: DUP1
00000076: REVERT
00000077: JUMPDEST
00000078: DUP2
00000079: ADD
0000007a: SWAP1
0000007b: DUP1
0000007c: DUP1
0000007d: CALLDATALOAD
0000007e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000093: AND
00000094: SWAP1
00000095: PUSH1 0x20
00000097: ADD
00000098: SWAP1
00000099: SWAP3
0000009a: SWAP2
0000009b: SWAP1
0000009c: POP
0000009d: POP
0000009e: POP
0000009f: PUSH2 0x0257
000000a2: JUMP
000000a3: JUMPDEST
000000a4: STOP
000000a5: JUMPDEST
000000a6: PUSH2 0x013c
000000a9: PUSH1 0x04
000000ab: DUP1
000000ac: CALLDATASIZE
000000ad: SUB
000000ae: PUSH1 0x40
000000b0: DUP2
000000b1: LT
000000b2: ISZERO
000000b3: PUSH2 0x00bb
000000b6: JUMPI
000000b7: PUSH1 0x00
000000b9: DUP1
000000ba: REVERT
000000bb: JUMPDEST
000000bc: DUP2
000000bd: ADD
000000be: SWAP1
000000bf: DUP1
000000c0: DUP1
000000c1: CALLDATALOAD
000000c2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000d7: AND
000000d8: SWAP1
000000d9: PUSH1 0x20
000000db: ADD
000000dc: SWAP1
000000dd: SWAP3
000000de: SWAP2
000000df: SWAP1
000000e0: DUP1
000000e1: CALLDATALOAD
000000e2: SWAP1
000000e3: PUSH1 0x20
000000e5: ADD
000000e6: SWAP1
000000e7: PUSH5 0x0100000000
000000ed: DUP2
000000ee: GT
000000ef: ISZERO
000000f0: PUSH2 0x00f8
000000f3: JUMPI
000000f4: PUSH1 0x00
000000f6: DUP1
000000f7: REVERT
000000f8: JUMPDEST
000000f9: DUP3
000000fa: ADD
000000fb: DUP4
000000fc: PUSH1 0x20
000000fe: DUP3
000000ff: ADD
00000100: GT
00000101: ISZERO
00000102: PUSH2 0x010a
00000105: JUMPI
00000106: PUSH1 0x00
00000108: DUP1
00000109: REVERT
0000010a: JUMPDEST
0000010b: DUP1
0000010c: CALLDATALOAD
0000010d: SWAP1
0000010e: PUSH1 0x20
00000110: ADD
00000111: SWAP2
00000112: DUP5
00000113: PUSH1 0x01
00000115: DUP4
00000116: MUL
00000117: DUP5
00000118: ADD
00000119: GT
0000011a: PUSH5 0x0100000000
00000120: DUP4
00000121: GT
00000122: OR
00000123: ISZERO
00000124: PUSH2 0x012c
00000127: JUMPI
00000128: PUSH1 0x00
0000012a: DUP1
0000012b: REVERT
0000012c: JUMPDEST
0000012d: SWAP1
0000012e: SWAP2
0000012f: SWAP3
00000130: SWAP4
00000131: SWAP2
00000132: SWAP3
00000133: SWAP4
00000134: SWAP1
00000135: POP
00000136: POP
00000137: POP
00000138: PUSH2 0x02ac
0000013b: JUMP
0000013c: JUMPDEST
0000013d: STOP
0000013e: JUMPDEST
0000013f: CALLVALUE
00000140: DUP1
00000141: ISZERO
00000142: PUSH2 0x014a
00000145: JUMPI
00000146: PUSH1 0x00
00000148: DUP1
00000149: REVERT
0000014a: JUMPDEST
0000014b: POP
0000014c: PUSH2 0x0153
0000014f: PUSH2 0x0384
00000152: JUMP
00000153: JUMPDEST
00000154: PUSH1 0x40
00000156: MLOAD
00000157: DUP1
00000158: DUP3
00000159: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000016e: AND
0000016f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000184: AND
00000185: DUP2
00000186: MSTORE
00000187: PUSH1 0x20
00000189: ADD
0000018a: SWAP2
0000018b: POP
0000018c: POP
0000018d: PUSH1 0x40
0000018f: MLOAD
00000190: DUP1
00000191: SWAP2
00000192: SUB
00000193: SWAP1
00000194: RETURN
00000195: JUMPDEST
00000196: CALLVALUE
00000197: DUP1
00000198: ISZERO
00000199: PUSH2 0x01a1
0000019c: JUMPI
0000019d: PUSH1 0x00
0000019f: DUP1
000001a0: REVERT
000001a1: JUMPDEST
000001a2: POP
000001a3: PUSH2 0x01e4
000001a6: PUSH1 0x04
000001a8: DUP1
000001a9: CALLDATASIZE
000001aa: SUB
000001ab: PUSH1 0x20
000001ad: DUP2
000001ae: LT
000001af: ISZERO
000001b0: PUSH2 0x01b8
000001b3: JUMPI
000001b4: PUSH1 0x00
000001b6: DUP1
000001b7: REVERT
000001b8: JUMPDEST
000001b9: DUP2
000001ba: ADD
000001bb: SWAP1
000001bc: DUP1
000001bd: DUP1
000001be: CALLDATALOAD
000001bf: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001d4: AND
000001d5: SWAP1
000001d6: PUSH1 0x20
000001d8: ADD
000001d9: SWAP1
000001da: SWAP3
000001db: SWAP2
000001dc: SWAP1
000001dd: POP
000001de: POP
000001df: POP
000001e0: PUSH2 0x03dc
000001e3: JUMP
000001e4: JUMPDEST
000001e5: STOP
000001e6: JUMPDEST
000001e7: CALLVALUE
000001e8: DUP1
000001e9: ISZERO
000001ea: PUSH2 0x01f2
000001ed: JUMPI
000001ee: PUSH1 0x00
000001f0: DUP1
000001f1: REVERT
000001f2: JUMPDEST
000001f3: POP
000001f4: PUSH2 0x01fb
000001f7: PUSH2 0x0557
000001fa: JUMP
000001fb: JUMPDEST
000001fc: PUSH1 0x40
000001fe: MLOAD
000001ff: DUP1
00000200: DUP3
00000201: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000216: AND
00000217: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000022c: AND
0000022d: DUP2
0000022e: MSTORE
0000022f: PUSH1 0x20
00000231: ADD
00000232: SWAP2
00000233: POP
00000234: POP
00000235: PUSH1 0x40
00000237: MLOAD
00000238: DUP1
00000239: SWAP2
0000023a: SUB
0000023b: SWAP1
0000023c: RETURN
0000023d: JUMPDEST
0000023e: PUSH2 0x0245
00000241: PUSH2 0x05af
00000244: JUMP
00000245: JUMPDEST
00000246: PUSH2 0x0255
00000249: PUSH2 0x0250
0000024c: PUSH2 0x0647
0000024f: JUMP
00000250: JUMPDEST
00000251: PUSH2 0x0678
00000254: JUMP
00000255: JUMPDEST
00000256: JUMP
00000257: JUMPDEST
00000258: PUSH2 0x025f
0000025b: PUSH2 0x069e
0000025e: JUMP
0000025f: JUMPDEST
00000260: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000275: AND
00000276: CALLER
00000277: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000028c: AND
0000028d: EQ
0000028e: ISZERO
0000028f: PUSH2 0x02a0
00000292: JUMPI
00000293: PUSH2 0x029b
00000296: DUP2
00000297: PUSH2 0x06cf
0000029a: JUMP
0000029b: JUMPDEST
0000029c: PUSH2 0x02a9
0000029f: JUMP
000002a0: JUMPDEST
000002a1: PUSH2 0x02a8
000002a4: PUSH2 0x023d
000002a7: JUMP
000002a8: JUMPDEST
000002a9: JUMPDEST
000002aa: POP
000002ab: JUMP
000002ac: JUMPDEST
000002ad: PUSH2 0x02b4
000002b0: PUSH2 0x069e
000002b3: JUMP
000002b4: JUMPDEST
000002b5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002ca: AND
000002cb: CALLER
000002cc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002e1: AND
000002e2: EQ
000002e3: ISZERO
000002e4: PUSH2 0x0376
000002e7: JUMPI
000002e8: PUSH2 0x02f0
000002eb: DUP4
000002ec: PUSH2 0x06cf
000002ef: JUMP
000002f0: JUMPDEST
000002f1: PUSH1 0x00
000002f3: DUP4
000002f4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000309: AND
0000030a: DUP4
0000030b: DUP4
0000030c: PUSH1 0x40
0000030e: MLOAD
0000030f: DUP1
00000310: DUP4
00000311: DUP4
00000312: DUP1
00000313: DUP3
00000314: DUP5
00000315: CALLDATACOPY
00000316: DUP1
00000317: DUP4
00000318: ADD
00000319: SWAP3
0000031a: POP
0000031b: POP
0000031c: POP
0000031d: SWAP3
0000031e: POP
0000031f: POP
00000320: POP
00000321: PUSH1 0x00
00000323: PUSH1 0x40
00000325: MLOAD
00000326: DUP1
00000327: DUP4
00000328: SUB
00000329: DUP2
0000032a: DUP6
0000032b: GAS
0000032c: DELEGATECALL
0000032d: SWAP2
0000032e: POP
0000032f: POP
00000330: RETURNDATASIZE
00000331: DUP1
00000332: PUSH1 0x00
00000334: DUP2
00000335: EQ
00000336: PUSH2 0x035b
00000339: JUMPI
0000033a: PUSH1 0x40
0000033c: MLOAD
0000033d: SWAP2
0000033e: POP
0000033f: PUSH1 0x1f
00000341: NOT
00000342: PUSH1 0x3f
00000344: RETURNDATASIZE
00000345: ADD
00000346: AND
00000347: DUP3
00000348: ADD
00000349: PUSH1 0x40
0000034b: MSTORE
0000034c: RETURNDATASIZE
0000034d: DUP3
0000034e: MSTORE
0000034f: RETURNDATASIZE
00000350: PUSH1 0x00
00000352: PUSH1 0x20
00000354: DUP5
00000355: ADD
00000356: RETURNDATACOPY
00000357: PUSH2 0x0360
0000035a: JUMP
0000035b: JUMPDEST
0000035c: PUSH1 0x60
0000035e: SWAP2
0000035f: POP
00000360: JUMPDEST
00000361: POP
00000362: POP
00000363: SWAP1
00000364: POP
00000365: DUP1
00000366: ISZERO
00000367: ISZERO
00000368: PUSH2 0x0370
0000036b: JUMPI
0000036c: PUSH1 0x00
0000036e: DUP1
0000036f: REVERT
00000370: JUMPDEST
00000371: POP
00000372: PUSH2 0x037f
00000375: JUMP
00000376: JUMPDEST
00000377: PUSH2 0x037e
0000037a: PUSH2 0x023d
0000037d: JUMP
0000037e: JUMPDEST
0000037f: JUMPDEST
00000380: POP
00000381: POP
00000382: POP
00000383: JUMP
00000384: JUMPDEST
00000385: PUSH1 0x00
00000387: PUSH2 0x038e
0000038a: PUSH2 0x069e
0000038d: JUMP
0000038e: JUMPDEST
0000038f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003a4: AND
000003a5: CALLER
000003a6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003bb: AND
000003bc: EQ
000003bd: ISZERO
000003be: PUSH2 0x03d0
000003c1: JUMPI
000003c2: PUSH2 0x03c9
000003c5: PUSH2 0x0647
000003c8: JUMP
000003c9: JUMPDEST
000003ca: SWAP1
000003cb: POP
000003cc: PUSH2 0x03d9
000003cf: JUMP
000003d0: JUMPDEST
000003d1: PUSH2 0x03d8
000003d4: PUSH2 0x023d
000003d7: JUMP
000003d8: JUMPDEST
000003d9: JUMPDEST
000003da: SWAP1
000003db: JUMP
000003dc: JUMPDEST
000003dd: PUSH2 0x03e4
000003e0: PUSH2 0x069e
000003e3: JUMP
000003e4: JUMPDEST
000003e5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003fa: AND
000003fb: CALLER
000003fc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000411: AND
00000412: EQ
00000413: ISZERO
00000414: PUSH2 0x054b
00000417: JUMPI
00000418: PUSH1 0x00
0000041a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000042f: AND
00000430: DUP2
00000431: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000446: AND
00000447: EQ
00000448: ISZERO
00000449: ISZERO
0000044a: ISZERO
0000044b: PUSH2 0x049f
0000044e: JUMPI
0000044f: PUSH1 0x40
00000451: MLOAD
00000452: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000473: DUP2
00000474: MSTORE
00000475: PUSH1 0x04
00000477: ADD
00000478: DUP1
00000479: DUP1
0000047a: PUSH1 0x20
0000047c: ADD
0000047d: DUP3
0000047e: DUP2
0000047f: SUB
00000480: DUP3
00000481: MSTORE
00000482: PUSH1 0x36
00000484: DUP2
00000485: MSTORE
00000486: PUSH1 0x20
00000488: ADD
00000489: DUP1
0000048a: PUSH2 0x0824
0000048d: PUSH1 0x36
0000048f: SWAP2
00000490: CODECOPY
00000491: PUSH1 0x40
00000493: ADD
00000494: SWAP2
00000495: POP
00000496: POP
00000497: PUSH1 0x40
00000499: MLOAD
0000049a: DUP1
0000049b: SWAP2
0000049c: SUB
0000049d: SWAP1
0000049e: REVERT
0000049f: JUMPDEST
000004a0: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
000004c1: PUSH2 0x04c8
000004c4: PUSH2 0x069e
000004c7: JUMP
000004c8: JUMPDEST
000004c9: DUP3
000004ca: PUSH1 0x40
000004cc: MLOAD
000004cd: DUP1
000004ce: DUP4
000004cf: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004e4: AND
000004e5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004fa: AND
000004fb: DUP2
000004fc: MSTORE
000004fd: PUSH1 0x20
000004ff: ADD
00000500: DUP3
00000501: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000516: AND
00000517: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000052c: AND
0000052d: DUP2
0000052e: MSTORE
0000052f: PUSH1 0x20
00000531: ADD
00000532: SWAP3
00000533: POP
00000534: POP
00000535: POP
00000536: PUSH1 0x40
00000538: MLOAD
00000539: DUP1
0000053a: SWAP2
0000053b: SUB
0000053c: SWAP1
0000053d: LOG1
0000053e: PUSH2 0x0546
00000541: DUP2
00000542: PUSH2 0x071e
00000545: JUMP
00000546: JUMPDEST
00000547: PUSH2 0x0554
0000054a: JUMP
0000054b: JUMPDEST
0000054c: PUSH2 0x0553
0000054f: PUSH2 0x023d
00000552: JUMP
00000553: JUMPDEST
00000554: JUMPDEST
00000555: POP
00000556: JUMP
00000557: JUMPDEST
00000558: PUSH1 0x00
0000055a: PUSH2 0x0561
0000055d: PUSH2 0x069e
00000560: JUMP
00000561: JUMPDEST
00000562: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000577: AND
00000578: CALLER
00000579: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000058e: AND
0000058f: EQ
00000590: ISZERO
00000591: PUSH2 0x05a3
00000594: JUMPI
00000595: PUSH2 0x059c
00000598: PUSH2 0x069e
0000059b: JUMP
0000059c: JUMPDEST
0000059d: SWAP1
0000059e: POP
0000059f: PUSH2 0x05ac
000005a2: JUMP
000005a3: JUMPDEST
000005a4: PUSH2 0x05ab
000005a7: PUSH2 0x023d
000005aa: JUMP
000005ab: JUMPDEST
000005ac: JUMPDEST
000005ad: SWAP1
000005ae: JUMP
000005af: JUMPDEST
000005b0: PUSH2 0x05b7
000005b3: PUSH2 0x069e
000005b6: JUMP
000005b7: JUMPDEST
000005b8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005cd: AND
000005ce: CALLER
000005cf: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005e4: AND
000005e5: EQ
000005e6: ISZERO
000005e7: ISZERO
000005e8: ISZERO
000005e9: PUSH2 0x063d
000005ec: JUMPI
000005ed: PUSH1 0x40
000005ef: MLOAD
000005f0: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000611: DUP2
00000612: MSTORE
00000613: PUSH1 0x04
00000615: ADD
00000616: DUP1
00000617: DUP1
00000618: PUSH1 0x20
0000061a: ADD
0000061b: DUP3
0000061c: DUP2
0000061d: SUB
0000061e: DUP3
0000061f: MSTORE
00000620: PUSH1 0x32
00000622: DUP2
00000623: MSTORE
00000624: PUSH1 0x20
00000626: ADD
00000627: DUP1
00000628: PUSH2 0x07f2
0000062b: PUSH1 0x32
0000062d: SWAP2
0000062e: CODECOPY
0000062f: PUSH1 0x40
00000631: ADD
00000632: SWAP2
00000633: POP
00000634: POP
00000635: PUSH1 0x40
00000637: MLOAD
00000638: DUP1
00000639: SWAP2
0000063a: SUB
0000063b: SWAP1
0000063c: REVERT
0000063d: JUMPDEST
0000063e: PUSH2 0x0645
00000641: PUSH2 0x074d
00000644: JUMP
00000645: JUMPDEST
00000646: JUMP
00000647: JUMPDEST
00000648: PUSH1 0x00
0000064a: DUP1
0000064b: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000066c: PUSH1 0x00
0000066e: SHL
0000066f: SWAP1
00000670: POP
00000671: DUP1
00000672: SLOAD
00000673: SWAP2
00000674: POP
00000675: POP
00000676: SWAP1
00000677: JUMP
00000678: JUMPDEST
00000679: CALLDATASIZE
0000067a: PUSH1 0x00
0000067c: DUP1
0000067d: CALLDATACOPY
0000067e: PUSH1 0x00
00000680: DUP1
00000681: CALLDATASIZE
00000682: PUSH1 0x00
00000684: DUP5
00000685: GAS
00000686: DELEGATECALL
00000687: RETURNDATASIZE
00000688: PUSH1 0x00
0000068a: DUP1
0000068b: RETURNDATACOPY
0000068c: DUP1
0000068d: PUSH1 0x00
0000068f: DUP2
00000690: EQ
00000691: PUSH2 0x0699
00000694: JUMPI
00000695: RETURNDATASIZE
00000696: PUSH1 0x00
00000698: RETURN
00000699: JUMPDEST
0000069a: RETURNDATASIZE
0000069b: PUSH1 0x00
0000069d: REVERT
0000069e: JUMPDEST
0000069f: PUSH1 0x00
000006a1: DUP1
000006a2: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000006c3: PUSH1 0x00
000006c5: SHL
000006c6: SWAP1
000006c7: POP
000006c8: DUP1
000006c9: SLOAD
000006ca: SWAP2
000006cb: POP
000006cc: POP
000006cd: SWAP1
000006ce: JUMP
000006cf: JUMPDEST
000006d0: PUSH2 0x06d8
000006d3: DUP2
000006d4: PUSH2 0x074f
000006d7: JUMP
000006d8: JUMPDEST
000006d9: DUP1
000006da: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006ef: AND
000006f0: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
00000711: PUSH1 0x40
00000713: MLOAD
00000714: PUSH1 0x40
00000716: MLOAD
00000717: DUP1
00000718: SWAP2
00000719: SUB
0000071a: SWAP1
0000071b: LOG2
0000071c: POP
0000071d: JUMP
0000071e: JUMPDEST
0000071f: PUSH1 0x00
00000721: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000742: PUSH1 0x00
00000744: SHL
00000745: SWAP1
00000746: POP
00000747: DUP2
00000748: DUP2
00000749: SSTORE
0000074a: POP
0000074b: POP
0000074c: JUMP
0000074d: JUMPDEST
0000074e: JUMP
0000074f: JUMPDEST
00000750: PUSH2 0x0758
00000753: DUP2
00000754: PUSH2 0x07de
00000757: JUMP
00000758: JUMPDEST
00000759: ISZERO
0000075a: ISZERO
0000075b: PUSH2 0x07af
0000075e: JUMPI
0000075f: PUSH1 0x40
00000761: MLOAD
00000762: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000783: DUP2
00000784: MSTORE
00000785: PUSH1 0x04
00000787: ADD
00000788: DUP1
00000789: DUP1
0000078a: PUSH1 0x20
0000078c: ADD
0000078d: DUP3
0000078e: DUP2
0000078f: SUB
00000790: DUP3
00000791: MSTORE
00000792: PUSH1 0x3b
00000794: DUP2
00000795: MSTORE
00000796: PUSH1 0x20
00000798: ADD
00000799: DUP1
0000079a: PUSH2 0x085a
0000079d: PUSH1 0x3b
0000079f: SWAP2
000007a0: CODECOPY
000007a1: PUSH1 0x40
000007a3: ADD
000007a4: SWAP2
000007a5: POP
000007a6: POP
000007a7: PUSH1 0x40
000007a9: MLOAD
000007aa: DUP1
000007ab: SWAP2
000007ac: SUB
000007ad: SWAP1
000007ae: REVERT
000007af: JUMPDEST
000007b0: PUSH1 0x00
000007b2: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000007d3: PUSH1 0x00
000007d5: SHL
000007d6: SWAP1
000007d7: POP
000007d8: DUP2
000007d9: DUP2
000007da: SSTORE
000007db: POP
000007dc: POP
000007dd: JUMP
000007de: JUMPDEST
000007df: PUSH1 0x00
000007e1: DUP1
000007e2: DUP3
000007e3: EXTCODESIZE
000007e4: SWAP1
000007e5: POP
000007e6: PUSH1 0x00
000007e8: DUP2
000007e9: GT
000007ea: SWAP2
000007eb: POP
000007ec: POP
000007ed: SWAP2
000007ee: SWAP1
000007ef: POP
000007f0: JUMP
000007f1: INVALID
000007f2: NUMBER
000007f3: PUSH2 0x6e6e
000007f6: PUSH16 0x742063616c6c2066616c6c6261636b20
00000807: PUSH7 0x756e6374696f6e
0000080f: KECCAK256
00000810: PUSH7 0x726f6d20746865
00000818: KECCAK256
00000819: PUSH17 0x726f78792061646d696e43616e6e6f7420
0000082b: PUSH4 0x68616e67
00000830: PUSH6 0x207468652061
00000837: PUSH5 0x6d696e206f
0000083d: PUSH7 0x20612070726f78
00000845: PUSH26 0x20746f20746865207a65726f206164647265737343616e6e6f74
00000860: KECCAK256
00000861: PUSH20 0x657420612070726f787920696d706c656d656e74
00000876: PUSH2 0x7469
00000879: PUSH16 0x6e20746f2061206e6f6e2d636f6e7472
0000088a: PUSH2 0x6374
0000088d: KECCAK256
0000088e: PUSH2 0x6464
00000891: PUSH19 0x657373a165627a7a72305820adf8c17398ce08
000008a5: EXTCODEHASH
000008a6: STATICCALL
000008a7: SWAP11
000008a8: PUSH20 0x3da2dcd461b486b63dd696d1399d917884e2dd19
000008bd: UNKNOWN(0x2E)
000008be: STOP
000008bf: UNKNOWN(0x29)

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0xbae0ebd79db9b2cef0bae399fd282e493ed76bdcc792885217eb6cfcb40d2e3e
call_targets: 0x9f29f9bda2052884d39f0f032b68aaa14fc363d8
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 2,
    "trace_id": "0xbae0ebd79db9b2cef0bae399fd282e493ed76bdcc792885217eb6cfcb40d2e3e",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x9f29f9bda2052884d39f0f032b68aaa14fc363d8"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 812,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1670,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 630,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 715,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 933,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1019,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1400,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1486,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}
medium upgradeability cast DELEGATECALL present 80 no
view
evidence_json
{
    "notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
    "delegatecall_count": 2
}