TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba8a4-ffc4-73e2-81f4-35d1207d1e60

complete
Chain ID
1
Address
0x9afb8c1798b93a8e04a18553ee65bafa41a012f1
Block Number
—
Created
Sat, Jan 10, 2026 4:02 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 proxy context implementation known
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
32327 artifact.fetch complete 1 / 3 3 months ago
32328 proxy.resolve complete 1 / 3 3 months ago
32329 tool.cast_disasm complete 1 / 3 3 months ago
32330 analysis.bundle complete 1 / 3 3 months ago
32331 capability.graph complete 1 / 3 3 months ago
32332 detector.run complete 1 / 3 3 months ago
32333 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: yes confirmed
Implementation:
0xc27293043ef9b6c911aef47e4a563bae8a91654f target (child run)
Verified Source: yes
Proxy evidence 
{
    "method": "etherscan+onchain",
    "status": "confirmed",
    "etherscan_hint": {
        "source": "etherscan",
        "etherscan": {
            "proxy_flag": true,
            "implementation": "0xc27293043ef9b6c911aef47e4a563bae8a91654f"
        }
    },
    "implementation": "0xc27293043ef9b6c911aef47e4a563bae8a91654f",
    "onchain_method": "eip1967"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
0
Total opcodes
74
Flags
delegatecall_present proxy_like_runtime
View cast disassembly output 
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: PUSH1 0x10
00000008: JUMPI
00000009: PUSH1 0x0e
0000000b: PUSH1 0x13
0000000d: JUMP
0000000e: JUMPDEST
0000000f: STOP
00000010: JUMPDEST
00000011: PUSH1 0x0e
00000013: JUMPDEST
00000014: PUSH1 0x1f
00000016: PUSH1 0x1b
00000018: PUSH1 0x21
0000001a: JUMP
0000001b: JUMPDEST
0000001c: PUSH1 0x65
0000001e: JUMP
0000001f: JUMPDEST
00000020: JUMP
00000021: JUMPDEST
00000022: PUSH1 0x00
00000024: PUSH1 0x60
00000026: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000047: SLOAD
00000048: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000005d: AND
0000005e: SWAP1
0000005f: JUMP
00000060: JUMPDEST
00000061: SWAP1
00000062: POP
00000063: SWAP1
00000064: JUMP
00000065: JUMPDEST
00000066: CALLDATASIZE
00000067: PUSH1 0x00
00000069: DUP1
0000006a: CALLDATACOPY
0000006b: PUSH1 0x00
0000006d: DUP1
0000006e: CALLDATASIZE
0000006f: PUSH1 0x00
00000071: DUP5
00000072: GAS
00000073: DELEGATECALL
00000074: RETURNDATASIZE
00000075: PUSH1 0x00
00000077: DUP1
00000078: RETURNDATACOPY
00000079: DUP1
0000007a: DUP1
0000007b: ISZERO
0000007c: PUSH1 0x83
0000007e: JUMPI
0000007f: RETURNDATASIZE
00000080: PUSH1 0x00
00000082: RETURN
00000083: JUMPDEST
00000084: RETURNDATASIZE
00000085: PUSH1 0x00
00000087: REVERT
00000088: INVALID
00000089: LOG2
0000008a: PUSH5 0x6970667358
00000090: UNKNOWN(0x22)
00000091: SLT
00000092: KECCAK256
00000093: MCOPY
00000094: PUSH31 0x8c821d4ccf158a644a4de54c9bad33b4baf5a0770bbe4876b267d213654864
000000b4: PUSH20

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0xcadaf3e03932a0fe80af6c557f183b457a31fd6f6c1b819eae9eee5f9930c666
call_targets: 0xc27293043ef9b6c911aef47e4a563bae8a91654f
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xcadaf3e03932a0fe80af6c557f183b457a31fd6f6c1b819eae9eee5f9930c666",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xc27293043ef9b6c911aef47e4a563bae8a91654f"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x",
            "selector": "fallback",
            "calldata_variants": [
                "0x"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 115,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}
medium upgradeability cast DELEGATECALL present 80 no —
view
evidence_json 
{
    "notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
    "delegatecall_count": 1
}
info upgradeability cast Likely proxy-like runtime 60 no —
view
evidence_json 
{
    "notes": "short runtime with SLOAD and DELEGATECALL resembles minimal proxy/upgradeable pattern",
    "sload_count": 1,
    "total_opcodes": 74,
    "delegatecall_count": 1
}