019ba8b4-4ed3-7010-911a-cda3b03cdee0
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 32594 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 32595 | proxy.resolve | complete | 1 / 3 | 3 months ago |
| 32596 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 32597 | analysis.bundle | complete | 1 / 3 | 3 months ago |
| 32598 | capability.graph | complete | 1 / 3 | 3 months ago |
| 32599 | detector.run | complete | 1 / 3 | 3 months ago |
| 32600 | validation.fork | complete | 1 / 3 | 3 months ago |
{
"method": "etherscan+onchain",
"status": "confirmed",
"etherscan_hint": {
"source": "etherscan",
"etherscan": {
"proxy_flag": true,
"implementation": "0x8bfac9422a23a53e32ec37c0fd16389fd03f739a"
}
},
"implementation": "0x8bfac9422a23a53e32ec37c0fd16389fd03f739a",
"onchain_method": "eip1967"
}
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x005e 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH1 0xe0 00000012: SHR 00000013: DUP1 00000014: PUSH4 0x4f1ef286 00000019: GT 0000001a: PUSH2 0x0043 0000001d: JUMPI 0000001e: DUP1 0000001f: PUSH4 0x4f1ef286 00000024: EQ 00000025: PUSH2 0x0129 00000028: JUMPI 00000029: DUP1 0000002a: PUSH4 0x8da5cb5b 0000002f: EQ 00000030: PUSH2 0x013c 00000033: JUMPI 00000034: DUP1 00000035: PUSH4 0xf2fde38b 0000003a: EQ 0000003b: PUSH2 0x0176 0000003e: JUMPI 0000003f: PUSH2 0x00ca 00000042: JUMP 00000043: JUMPDEST 00000044: DUP1 00000045: PUSH4 0x01ffc9a7 0000004a: EQ 0000004b: PUSH2 0x00d4 0000004e: JUMPI 0000004f: DUP1 00000050: PUSH4 0x3659cfe6 00000055: EQ 00000056: PUSH2 0x0109 00000059: JUMPI 0000005a: PUSH2 0x00ca 0000005d: JUMP 0000005e: JUMPDEST 0000005f: CALLDATASIZE 00000060: PUSH2 0x00ca 00000063: JUMPI 00000064: PUSH1 0x40 00000066: MLOAD 00000067: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 00000088: DUP2 00000089: MSTORE 0000008a: PUSH1 0x20 0000008c: PUSH1 0x04 0000008e: DUP3 0000008f: ADD 00000090: MSTORE 00000091: PUSH1 0x0e 00000093: PUSH1 0x24 00000095: DUP3 00000096: ADD 00000097: MSTORE 00000098: PUSH32 0x45544845525f52454a4543544544000000000000000000000000000000000000 000000b9: PUSH1 0x44 000000bb: DUP3 000000bc: ADD 000000bd: MSTORE 000000be: PUSH1 0x64 000000c0: ADD 000000c1: JUMPDEST 000000c2: PUSH1 0x40 000000c4: MLOAD 000000c5: DUP1 000000c6: SWAP2 000000c7: SUB 000000c8: SWAP1 000000c9: REVERT 000000ca: JUMPDEST 000000cb: PUSH2 0x00d2 000000ce: PUSH2 0x0196 000000d1: JUMP 000000d2: JUMPDEST 000000d3: STOP 000000d4: JUMPDEST 000000d5: CALLVALUE 000000d6: DUP1 000000d7: ISZERO 000000d8: PUSH2 0x00e0 000000db: JUMPI 000000dc: PUSH1 0x00 000000de: DUP1 000000df: REVERT 000000e0: JUMPDEST 000000e1: POP 000000e2: PUSH2 0x00f4 000000e5: PUSH2 0x00ef 000000e8: CALLDATASIZE 000000e9: PUSH1 0x04 000000eb: PUSH2 0x0806 000000ee: JUMP 000000ef: JUMPDEST 000000f0: PUSH2 0x01e1 000000f3: JUMP 000000f4: JUMPDEST 000000f5: PUSH1 0x40 000000f7: MLOAD 000000f8: SWAP1 000000f9: ISZERO 000000fa: ISZERO 000000fb: DUP2 000000fc: MSTORE 000000fd: PUSH1 0x20 000000ff: ADD 00000100: JUMPDEST 00000101: PUSH1 0x40 00000103: MLOAD 00000104: DUP1 00000105: SWAP2 00000106: SUB 00000107: SWAP1 00000108: RETURN 00000109: JUMPDEST 0000010a: CALLVALUE 0000010b: DUP1 0000010c: ISZERO 0000010d: PUSH2 0x0115 00000110: JUMPI 00000111: PUSH1 0x00 00000113: DUP1 00000114: REVERT 00000115: JUMPDEST 00000116: POP 00000117: PUSH2 0x00d2 0000011a: PUSH2 0x0124 0000011d: CALLDATASIZE 0000011e: PUSH1 0x04 00000120: PUSH2 0x0871 00000123: JUMP 00000124: JUMPDEST 00000125: PUSH2 0x03af 00000128: JUMP 00000129: JUMPDEST 0000012a: PUSH2 0x00d2 0000012d: PUSH2 0x0137 00000130: CALLDATASIZE 00000131: PUSH1 0x04 00000133: PUSH2 0x088c 00000136: JUMP 00000137: JUMPDEST 00000138: PUSH2 0x0481 0000013b: JUMP 0000013c: JUMPDEST 0000013d: CALLVALUE 0000013e: DUP1 0000013f: ISZERO 00000140: PUSH2 0x0148 00000143: JUMPI 00000144: PUSH1 0x00 00000146: DUP1 00000147: REVERT 00000148: JUMPDEST 00000149: POP 0000014a: PUSH2 0x0151 0000014d: PUSH2 0x057c 00000150: JUMP 00000151: JUMPDEST 00000152: PUSH1 0x40 00000154: MLOAD 00000155: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000016a: SWAP1 0000016b: SWAP2 0000016c: AND 0000016d: DUP2 0000016e: MSTORE 0000016f: PUSH1 0x20 00000171: ADD 00000172: PUSH2 0x0100 00000175: JUMP 00000176: JUMPDEST 00000177: CALLVALUE 00000178: DUP1 00000179: ISZERO 0000017a: PUSH2 0x0182 0000017d: JUMPI 0000017e: PUSH1 0x00 00000180: DUP1 00000181: REVERT 00000182: JUMPDEST 00000183: POP 00000184: PUSH2 0x00d2 00000187: PUSH2 0x0191 0000018a: CALLDATASIZE 0000018b: PUSH1 0x04 0000018d: PUSH2 0x0871 00000190: JUMP 00000191: JUMPDEST 00000192: PUSH2 0x05ab 00000195: JUMP 00000196: JUMPDEST 00000197: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000001b8: SLOAD 000001b9: PUSH1 0x00 000001bb: CALLDATASIZE 000001bc: DUP2 000001bd: DUP3 000001be: CALLDATACOPY 000001bf: DUP1 000001c0: DUP2 000001c1: CALLDATASIZE 000001c2: DUP4 000001c3: DUP6 000001c4: GAS 000001c5: DELEGATECALL 000001c6: SWAP2 000001c7: POP 000001c8: RETURNDATASIZE 000001c9: DUP1 000001ca: DUP3 000001cb: DUP4 000001cc: RETURNDATACOPY 000001cd: DUP3 000001ce: DUP1 000001cf: ISZERO 000001d0: PUSH2 0x01d7 000001d3: JUMPI 000001d4: DUP2 000001d5: DUP4 000001d6: RETURN 000001d7: JUMPDEST 000001d8: DUP2 000001d9: DUP4 000001da: REVERT 000001db: JUMPDEST 000001dc: POP 000001dd: POP 000001de: POP 000001df: POP 000001e0: JUMP 000001e1: JUMPDEST 000001e2: PUSH1 0x00 000001e4: PUSH32 0x01ffc9a700000000000000000000000000000000000000000000000000000000 00000205: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000 00000226: DUP4 00000227: AND 00000228: EQ 00000229: DUP1 0000022a: PUSH2 0x0274 0000022d: JUMPI 0000022e: POP 0000022f: PUSH32 0x7f5828d000000000000000000000000000000000000000000000000000000000 00000250: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000 00000271: DUP4 00000272: AND 00000273: EQ 00000274: JUMPDEST 00000275: ISZERO 00000276: PUSH2 0x0281 00000279: JUMPI 0000027a: POP 0000027b: PUSH1 0x01 0000027d: SWAP2 0000027e: SWAP1 0000027f: POP 00000280: JUMP 00000281: JUMPDEST 00000282: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000 000002a3: DUP1 000002a4: DUP4 000002a5: AND 000002a6: EQ 000002a7: ISZERO 000002a8: PUSH2 0x02b3 000002ab: JUMPI 000002ac: POP 000002ad: PUSH1 0x00 000002af: SWAP2 000002b0: SWAP1 000002b1: POP 000002b2: JUMP 000002b3: JUMPDEST 000002b4: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000002d5: SLOAD 000002d6: PUSH1 0x40 000002d8: MLOAD 000002d9: PUSH32 0x01ffc9a700000000000000000000000000000000000000000000000000000000 000002fa: DUP2 000002fb: MSTORE 000002fc: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000 0000031d: DUP5 0000031e: AND 0000031f: PUSH1 0x04 00000321: DUP3 00000322: ADD 00000323: MSTORE 00000324: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000339: DUP3 0000033a: AND 0000033b: SWAP1 0000033c: PUSH4 0x01ffc9a7 00000341: SWAP1 00000342: PUSH1 0x24 00000344: ADD 00000345: PUSH1 0x20 00000347: PUSH1 0x40 00000349: MLOAD 0000034a: DUP1 0000034b: DUP4 0000034c: SUB 0000034d: DUP2 0000034e: DUP7 0000034f: GAS 00000350: STATICCALL 00000351: SWAP3 00000352: POP 00000353: POP 00000354: POP 00000355: DUP1 00000356: ISZERO 00000357: PUSH2 0x039b 0000035a: JUMPI 0000035b: POP 0000035c: PUSH1 0x40 0000035e: DUP1 0000035f: MLOAD 00000360: PUSH1 0x1f 00000362: RETURNDATASIZE 00000363: SWAP1 00000364: DUP2 00000365: ADD 00000366: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0 00000387: AND 00000388: DUP3 00000389: ADD 0000038a: SWAP1 0000038b: SWAP3 0000038c: MSTORE 0000038d: PUSH2 0x0398 00000390: SWAP2 00000391: DUP2 00000392: ADD 00000393: SWAP1 00000394: PUSH2 0x090f 00000397: JUMP 00000398: JUMPDEST 00000399: PUSH1 0x01 0000039b: JUMPDEST 0000039c: PUSH2 0x03a8 0000039f: JUMPI 000003a0: POP 000003a1: PUSH1 0x00 000003a3: SWAP3 000003a4: SWAP2 000003a5: POP 000003a6: POP 000003a7: JUMP 000003a8: JUMPDEST 000003a9: SWAP4 000003aa: SWAP3 000003ab: POP 000003ac: POP 000003ad: POP 000003ae: JUMP 000003af: JUMPDEST 000003b0: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 000003d1: SLOAD 000003d2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003e7: AND 000003e8: CALLER 000003e9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003fe: AND 000003ff: EQ 00000400: PUSH2 0x0465 00000403: JUMPI 00000404: PUSH1 0x40 00000406: MLOAD 00000407: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 00000428: DUP2 00000429: MSTORE 0000042a: PUSH1 0x20 0000042c: PUSH1 0x04 0000042e: DUP3 0000042f: ADD 00000430: MSTORE 00000431: PUSH1 0x0e 00000433: PUSH1 0x24 00000435: DUP3 00000436: ADD 00000437: MSTORE 00000438: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000 00000459: PUSH1 0x44 0000045b: DUP3 0000045c: ADD 0000045d: MSTORE 0000045e: PUSH1 0x64 00000460: ADD 00000461: PUSH2 0x00c1 00000464: JUMP 00000465: JUMPDEST 00000466: PUSH2 0x047e 00000469: DUP2 0000046a: PUSH1 0x40 0000046c: MLOAD 0000046d: DUP1 0000046e: PUSH1 0x20 00000470: ADD 00000471: PUSH1 0x40 00000473: MSTORE 00000474: DUP1 00000475: PUSH1 0x00 00000477: DUP2 00000478: MSTORE 00000479: POP 0000047a: PUSH2 0x066a 0000047d: JUMP 0000047e: JUMPDEST 0000047f: POP 00000480: JUMP 00000481: JUMPDEST 00000482: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 000004a3: SLOAD 000004a4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004b9: AND 000004ba: CALLER 000004bb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004d0: AND 000004d1: EQ 000004d2: PUSH2 0x0537 000004d5: JUMPI 000004d6: PUSH1 0x40 000004d8: MLOAD 000004d9: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 000004fa: DUP2 000004fb: MSTORE 000004fc: PUSH1 0x20 000004fe: PUSH1 0x04 00000500: DUP3 00000501: ADD 00000502: MSTORE 00000503: PUSH1 0x0e 00000505: PUSH1 0x24 00000507: DUP3 00000508: ADD 00000509: MSTORE 0000050a: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000 0000052b: PUSH1 0x44 0000052d: DUP3 0000052e: ADD 0000052f: MSTORE 00000530: PUSH1 0x64 00000532: ADD 00000533: PUSH2 0x00c1 00000536: JUMP 00000537: JUMPDEST 00000538: PUSH2 0x0577 0000053b: DUP4 0000053c: DUP4 0000053d: DUP4 0000053e: DUP1 0000053f: DUP1 00000540: PUSH1 0x1f 00000542: ADD 00000543: PUSH1 0x20 00000545: DUP1 00000546: SWAP2 00000547: DIV 00000548: MUL 00000549: PUSH1 0x20 0000054b: ADD 0000054c: PUSH1 0x40 0000054e: MLOAD 0000054f: SWAP1 00000550: DUP2 00000551: ADD 00000552: PUSH1 0x40 00000554: MSTORE 00000555: DUP1 00000556: SWAP4 00000557: SWAP3 00000558: SWAP2 00000559: SWAP1 0000055a: DUP2 0000055b: DUP2 0000055c: MSTORE 0000055d: PUSH1 0x20 0000055f: ADD 00000560: DUP4 00000561: DUP4 00000562: DUP1 00000563: DUP3 00000564: DUP5 00000565: CALLDATACOPY 00000566: PUSH1 0x00 00000568: SWAP3 00000569: ADD 0000056a: SWAP2 0000056b: SWAP1 0000056c: SWAP2 0000056d: MSTORE 0000056e: POP 0000056f: PUSH2 0x066a 00000572: SWAP3 00000573: POP 00000574: POP 00000575: POP 00000576: JUMP 00000577: JUMPDEST 00000578: POP 00000579: POP 0000057a: POP 0000057b: JUMP 0000057c: JUMPDEST 0000057d: PUSH1 0x00 0000057f: PUSH2 0x05a6 00000582: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 000005a3: SLOAD 000005a4: SWAP1 000005a5: JUMP 000005a6: JUMPDEST 000005a7: SWAP1 000005a8: POP 000005a9: SWAP1 000005aa: JUMP 000005ab: JUMPDEST 000005ac: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 000005cd: SLOAD 000005ce: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000005e3: AND 000005e4: CALLER 000005e5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000005fa: AND 000005fb: EQ 000005fc: PUSH2 0x0661 000005ff: JUMPI 00000600: PUSH1 0x40 00000602: MLOAD 00000603: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 00000624: DUP2 00000625: MSTORE 00000626: PUSH1 0x20 00000628: PUSH1 0x04 0000062a: DUP3 0000062b: ADD 0000062c: MSTORE 0000062d: PUSH1 0x0e 0000062f: PUSH1 0x24 00000631: DUP3 00000632: ADD 00000633: MSTORE 00000634: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000 00000655: PUSH1 0x44 00000657: DUP3 00000658: ADD 00000659: MSTORE 0000065a: PUSH1 0x64 0000065c: ADD 0000065d: PUSH2 0x00c1 00000660: JUMP 00000661: JUMPDEST 00000662: PUSH2 0x047e 00000665: DUP2 00000666: PUSH2 0x0759 00000669: JUMP 0000066a: JUMPDEST 0000066b: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 0000068c: DUP1 0000068d: SLOAD 0000068e: SWAP1 0000068f: DUP4 00000690: SWAP1 00000691: SSTORE 00000692: PUSH1 0x40 00000694: MLOAD 00000695: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000006aa: DUP1 000006ab: DUP6 000006ac: AND 000006ad: SWAP2 000006ae: SWAP1 000006af: DUP4 000006b0: AND 000006b1: SWAP1 000006b2: PUSH32 0x5570d70a002632a7b0b3c9304cc89efb62d8da9eca0dbd7752c83b7379068296 000006d3: SWAP1 000006d4: PUSH1 0x00 000006d6: SWAP1 000006d7: LOG3 000006d8: DUP2 000006d9: MLOAD 000006da: ISZERO 000006db: PUSH2 0x0577 000006de: JUMPI 000006df: PUSH1 0x00 000006e1: DUP4 000006e2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000006f7: AND 000006f8: DUP4 000006f9: PUSH1 0x40 000006fb: MLOAD 000006fc: PUSH2 0x0705 000006ff: SWAP2 00000700: SWAP1 00000701: PUSH2 0x0931 00000704: JUMP 00000705: JUMPDEST 00000706: PUSH1 0x00 00000708: PUSH1 0x40 0000070a: MLOAD 0000070b: DUP1 0000070c: DUP4 0000070d: SUB 0000070e: DUP2 0000070f: DUP6 00000710: GAS 00000711: DELEGATECALL 00000712: SWAP2 00000713: POP 00000714: POP 00000715: RETURNDATASIZE 00000716: DUP1 00000717: PUSH1 0x00 00000719: DUP2 0000071a: EQ 0000071b: PUSH2 0x0740 0000071e: JUMPI 0000071f: PUSH1 0x40 00000721: MLOAD 00000722: SWAP2 00000723: POP 00000724: PUSH1 0x1f 00000726: NOT 00000727: PUSH1 0x3f 00000729: RETURNDATASIZE 0000072a: ADD 0000072b: AND 0000072c: DUP3 0000072d: ADD 0000072e: PUSH1 0x40 00000730: MSTORE 00000731: RETURNDATASIZE 00000732: DUP3 00000733: MSTORE 00000734: RETURNDATASIZE 00000735: PUSH1 0x00 00000737: PUSH1 0x20 00000739: DUP5 0000073a: ADD 0000073b: RETURNDATACOPY 0000073c: PUSH2 0x0745 0000073f: JUMP 00000740: JUMPDEST 00000741: PUSH1 0x60 00000743: SWAP2 00000744: POP 00000745: JUMPDEST 00000746: POP 00000747: POP 00000748: SWAP1 00000749: POP 0000074a: DUP1 0000074b: PUSH2 0x01db 0000074e: JUMPI 0000074f: RETURNDATASIZE 00000750: DUP1 00000751: PUSH1 0x00 00000753: DUP1 00000754: RETURNDATACOPY 00000755: DUP1 00000756: PUSH1 0x00 00000758: REVERT 00000759: JUMPDEST 0000075a: PUSH1 0x00 0000075c: PUSH2 0x0783 0000075f: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 00000780: SLOAD 00000781: SWAP1 00000782: JUMP 00000783: JUMPDEST 00000784: SWAP1 00000785: POP 00000786: DUP2 00000787: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 000007a8: SSTORE 000007a9: DUP2 000007aa: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000007bf: AND 000007c0: DUP2 000007c1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000007d6: AND 000007d7: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0 000007f8: PUSH1 0x40 000007fa: MLOAD 000007fb: PUSH1 0x40 000007fd: MLOAD 000007fe: DUP1 000007ff: SWAP2 00000800: SUB 00000801: SWAP1 00000802: LOG3 00000803: POP 00000804: POP 00000805: JUMP 00000806: JUMPDEST 00000807: PUSH1 0x00 00000809: PUSH1 0x20 0000080b: DUP3 0000080c: DUP5 0000080d: SUB 0000080e: SLT 0000080f: ISZERO 00000810: PUSH2 0x0818 00000813: JUMPI 00000814: PUSH1 0x00 00000816: DUP1 00000817: REVERT 00000818: JUMPDEST 00000819: DUP2 0000081a: CALLDATALOAD 0000081b: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000 0000083c: DUP2 0000083d: AND 0000083e: DUP2 0000083f: EQ 00000840: PUSH2 0x03a8 00000843: JUMPI 00000844: PUSH1 0x00 00000846: DUP1 00000847: REVERT 00000848: JUMPDEST 00000849: DUP1 0000084a: CALLDATALOAD 0000084b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000860: DUP2 00000861: AND 00000862: DUP2 00000863: EQ 00000864: PUSH2 0x086c 00000867: JUMPI 00000868: PUSH1 0x00 0000086a: DUP1 0000086b: REVERT 0000086c: JUMPDEST 0000086d: SWAP2 0000086e: SWAP1 0000086f: POP 00000870: JUMP 00000871: JUMPDEST 00000872: PUSH1 0x00 00000874: PUSH1 0x20 00000876: DUP3 00000877: DUP5 00000878: SUB 00000879: SLT 0000087a: ISZERO 0000087b: PUSH2 0x0883 0000087e: JUMPI 0000087f: PUSH1 0x00 00000881: DUP1 00000882: REVERT 00000883: JUMPDEST 00000884: PUSH2 0x03a8 00000887: DUP3 00000888: PUSH2 0x0848 0000088b: JUMP 0000088c: JUMPDEST 0000088d: PUSH1 0x00 0000088f: DUP1 00000890: PUSH1 0x00 00000892: PUSH1 0x40 00000894: DUP5 00000895: DUP7 00000896: SUB 00000897: SLT 00000898: ISZERO 00000899: PUSH2 0x08a1 0000089c: JUMPI 0000089d: PUSH1 0x00 0000089f: DUP1 000008a0: REVERT 000008a1: JUMPDEST 000008a2: PUSH2 0x08aa 000008a5: DUP5 000008a6: PUSH2 0x0848 000008a9: JUMP 000008aa: JUMPDEST 000008ab: SWAP3 000008ac: POP 000008ad: PUSH1 0x20 000008af: DUP5 000008b0: ADD 000008b1: CALLDATALOAD 000008b2: PUSH8 0xffffffffffffffff 000008bb: DUP1 000008bc: DUP3 000008bd: GT 000008be: ISZERO 000008bf: PUSH2 0x08c7 000008c2: JUMPI 000008c3: PUSH1 0x00 000008c5: DUP1 000008c6: REVERT 000008c7: JUMPDEST 000008c8: DUP2 000008c9: DUP7 000008ca: ADD 000008cb: SWAP2 000008cc: POP 000008cd: DUP7 000008ce: PUSH1 0x1f 000008d0: DUP4 000008d1: ADD 000008d2: SLT 000008d3: PUSH2 0x08db 000008d6: JUMPI 000008d7: PUSH1 0x00 000008d9: DUP1 000008da: REVERT 000008db: JUMPDEST 000008dc: DUP2 000008dd: CALLDATALOAD 000008de: DUP2 000008df: DUP2 000008e0: GT 000008e1: ISZERO 000008e2: PUSH2 0x08ea 000008e5: JUMPI 000008e6: PUSH1 0x00 000008e8: DUP1 000008e9: REVERT 000008ea: JUMPDEST 000008eb: DUP8 000008ec: PUSH1 0x20 000008ee: DUP3 000008ef: DUP6 000008f0: ADD 000008f1: ADD 000008f2: GT 000008f3: ISZERO 000008f4: PUSH2 0x08fc 000008f7: JUMPI 000008f8: PUSH1 0x00 000008fa: DUP1 000008fb: REVERT 000008fc: JUMPDEST 000008fd: PUSH1 0x20 000008ff: DUP4 00000900: ADD 00000901: SWAP5 00000902: POP 00000903: DUP1 00000904: SWAP4 00000905: POP 00000906: POP 00000907: POP 00000908: POP 00000909: SWAP3 0000090a: POP 0000090b: SWAP3 0000090c: POP 0000090d: SWAP3 0000090e: JUMP 0000090f: JUMPDEST 00000910: PUSH1 0x00 00000912: PUSH1 0x20 00000914: DUP3 00000915: DUP5 00000916: SUB 00000917: SLT 00000918: ISZERO 00000919: PUSH2 0x0921 0000091c: JUMPI 0000091d: PUSH1 0x00 0000091f: DUP1 00000920: REVERT 00000921: JUMPDEST 00000922: DUP2 00000923: MLOAD 00000924: DUP1 00000925: ISZERO 00000926: ISZERO 00000927: DUP2 00000928: EQ 00000929: PUSH2 0x03a8 0000092c: JUMPI 0000092d: PUSH1 0x00 0000092f: DUP1 00000930: REVERT 00000931: JUMPDEST 00000932: PUSH1 0x00 00000934: DUP3 00000935: MLOAD 00000936: PUSH1 0x00 00000938: JUMPDEST 00000939: DUP2 0000093a: DUP2 0000093b: LT 0000093c: ISZERO 0000093d: PUSH2 0x0952 00000940: JUMPI 00000941: PUSH1 0x20 00000943: DUP2 00000944: DUP7 00000945: ADD 00000946: DUP2 00000947: ADD 00000948: MLOAD 00000949: DUP6 0000094a: DUP4 0000094b: ADD 0000094c: MSTORE 0000094d: ADD 0000094e: PUSH2 0x0938 00000951: JUMP 00000952: JUMPDEST 00000953: DUP2 00000954: DUP2 00000955: GT 00000956: ISZERO 00000957: PUSH2 0x0961 0000095a: JUMPI 0000095b: PUSH1 0x00 0000095d: DUP3 0000095e: DUP6 0000095f: ADD 00000960: MSTORE 00000961: JUMPDEST 00000962: POP 00000963: SWAP2 00000964: SWAP1 00000965: SWAP2 00000966: ADD 00000967: SWAP3 00000968: SWAP2 00000969: POP 0000096a: POP 0000096b: JUMP 0000096c: INVALID 0000096d: LOG2 0000096e: PUSH5 0x6970667358 00000974: UNKNOWN(0x22) 00000975: SLT 00000976: KECCAK256 00000977: UNKNOWN(0xD2) 00000978: UNKNOWN(0xEC) 00000979: CALLDATALOAD 0000097a: PUSH23 0x59da93a66b21590e3c56e508e51e4de5703da4d1f7ba0b 00000992: SWAP9 00000993: UNKNOWN(0xD9) 00000994: UNKNOWN(0xE0) 00000995: SELFBALANCE 00000996: UNKNOWN(0xF9) 00000997: PUSH5 0x736f6c6343 0000099d: STOP 0000099e: ADDMOD 0000099f: EXP 000009a0: STOP 000009a1: CALLER
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | upgradeability | detector | Untrusted DELEGATECALL target reachable | 55 | no | no |
viewtrace_id: 0x0a316b3701fcbaab21cfffaf076075a3996b2b63dbacd21adc28b4024e22f4c7
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "unknown",
"attempts": 60,
"trace_id": "0x0a316b3701fcbaab21cfffaf076075a3996b2b63dbacd21adc28b4024e22f4c7",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x4f1ef286",
"selector": "0x4f1ef286",
"calldata_variants": [
"0x4f1ef286",
"0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf2fde38b",
"selector": "0xf2fde38b",
"calldata_variants": [
"0xf2fde38b",
"0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x01ffc9a7",
"selector": "0x01ffc9a7",
"calldata_variants": [
"0x01ffc9a7",
"0x01ffc9a70000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3659cfe6",
"selector": "0x3659cfe6",
"calldata_variants": [
"0x3659cfe6",
"0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 453,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
},
{
"pc": 1809,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [
{
"pc": 1000,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1210,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1508,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
],
"delegatecall_count": 2,
"untrusted_delegatecall_count": 2
}
|
| medium | upgradeability | cast | DELEGATECALL present | 80 | no | — |
viewevidence_json{
"notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
"delegatecall_count": 2
}
|