019ba8df-e180-7073-8e05-75a666dc49db
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 33008 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 33009 | proxy.resolve | complete | 1 / 3 | 3 months ago |
| 33010 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 33011 | analysis.bundle | complete | 1 / 3 | 3 months ago |
| 33012 | capability.graph | complete | 1 / 3 | 3 months ago |
| 33013 | detector.run | complete | 1 / 3 | 3 months ago |
| 33014 | validation.fork | complete | 1 / 3 | 3 months ago |
{
"status": "etherscan_only",
"etherscan_hint": {
"source": "etherscan",
"etherscan": {
"proxy_flag": true,
"implementation": "0x43506849d7c04f9138d1a2050bbf3a0c054402dd"
}
},
"implementation": "0x43506849d7c04f9138d1a2050bbf3a0c054402dd"
}
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x006d 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 0000002e: SWAP1 0000002f: DIV 00000030: PUSH4 0xffffffff 00000035: AND 00000036: DUP1 00000037: PUSH4 0x3659cfe6 0000003c: EQ 0000003d: PUSH2 0x0077 00000040: JUMPI 00000041: DUP1 00000042: PUSH4 0x4f1ef286 00000047: EQ 00000048: PUSH2 0x00ba 0000004b: JUMPI 0000004c: DUP1 0000004d: PUSH4 0x5c60da1b 00000052: EQ 00000053: PUSH2 0x0108 00000056: JUMPI 00000057: DUP1 00000058: PUSH4 0x8f283970 0000005d: EQ 0000005e: PUSH2 0x015f 00000061: JUMPI 00000062: DUP1 00000063: PUSH4 0xf851a440 00000068: EQ 00000069: PUSH2 0x01a2 0000006c: JUMPI 0000006d: JUMPDEST 0000006e: PUSH2 0x0075 00000071: PUSH2 0x01f9 00000074: JUMP 00000075: JUMPDEST 00000076: STOP 00000077: JUMPDEST 00000078: CALLVALUE 00000079: DUP1 0000007a: ISZERO 0000007b: PUSH2 0x0083 0000007e: JUMPI 0000007f: PUSH1 0x00 00000081: DUP1 00000082: REVERT 00000083: JUMPDEST 00000084: POP 00000085: PUSH2 0x00b8 00000088: PUSH1 0x04 0000008a: DUP1 0000008b: CALLDATASIZE 0000008c: SUB 0000008d: DUP2 0000008e: ADD 0000008f: SWAP1 00000090: DUP1 00000091: DUP1 00000092: CALLDATALOAD 00000093: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000a8: AND 000000a9: SWAP1 000000aa: PUSH1 0x20 000000ac: ADD 000000ad: SWAP1 000000ae: SWAP3 000000af: SWAP2 000000b0: SWAP1 000000b1: POP 000000b2: POP 000000b3: POP 000000b4: PUSH2 0x0213 000000b7: JUMP 000000b8: JUMPDEST 000000b9: STOP 000000ba: JUMPDEST 000000bb: PUSH2 0x0106 000000be: PUSH1 0x04 000000c0: DUP1 000000c1: CALLDATASIZE 000000c2: SUB 000000c3: DUP2 000000c4: ADD 000000c5: SWAP1 000000c6: DUP1 000000c7: DUP1 000000c8: CALLDATALOAD 000000c9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000de: AND 000000df: SWAP1 000000e0: PUSH1 0x20 000000e2: ADD 000000e3: SWAP1 000000e4: SWAP3 000000e5: SWAP2 000000e6: SWAP1 000000e7: DUP1 000000e8: CALLDATALOAD 000000e9: SWAP1 000000ea: PUSH1 0x20 000000ec: ADD 000000ed: SWAP1 000000ee: DUP3 000000ef: ADD 000000f0: DUP1 000000f1: CALLDATALOAD 000000f2: SWAP1 000000f3: PUSH1 0x20 000000f5: ADD 000000f6: SWAP2 000000f7: SWAP1 000000f8: SWAP2 000000f9: SWAP3 000000fa: SWAP4 000000fb: SWAP2 000000fc: SWAP3 000000fd: SWAP4 000000fe: SWAP1 000000ff: POP 00000100: POP 00000101: POP 00000102: PUSH2 0x0268 00000105: JUMP 00000106: JUMPDEST 00000107: STOP 00000108: JUMPDEST 00000109: CALLVALUE 0000010a: DUP1 0000010b: ISZERO 0000010c: PUSH2 0x0114 0000010f: JUMPI 00000110: PUSH1 0x00 00000112: DUP1 00000113: REVERT 00000114: JUMPDEST 00000115: POP 00000116: PUSH2 0x011d 00000119: PUSH2 0x0308 0000011c: JUMP 0000011d: JUMPDEST 0000011e: PUSH1 0x40 00000120: MLOAD 00000121: DUP1 00000122: DUP3 00000123: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000138: AND 00000139: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000014e: AND 0000014f: DUP2 00000150: MSTORE 00000151: PUSH1 0x20 00000153: ADD 00000154: SWAP2 00000155: POP 00000156: POP 00000157: PUSH1 0x40 00000159: MLOAD 0000015a: DUP1 0000015b: SWAP2 0000015c: SUB 0000015d: SWAP1 0000015e: RETURN 0000015f: JUMPDEST 00000160: CALLVALUE 00000161: DUP1 00000162: ISZERO 00000163: PUSH2 0x016b 00000166: JUMPI 00000167: PUSH1 0x00 00000169: DUP1 0000016a: REVERT 0000016b: JUMPDEST 0000016c: POP 0000016d: PUSH2 0x01a0 00000170: PUSH1 0x04 00000172: DUP1 00000173: CALLDATASIZE 00000174: SUB 00000175: DUP2 00000176: ADD 00000177: SWAP1 00000178: DUP1 00000179: DUP1 0000017a: CALLDATALOAD 0000017b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000190: AND 00000191: SWAP1 00000192: PUSH1 0x20 00000194: ADD 00000195: SWAP1 00000196: SWAP3 00000197: SWAP2 00000198: SWAP1 00000199: POP 0000019a: POP 0000019b: POP 0000019c: PUSH2 0x0360 0000019f: JUMP 000001a0: JUMPDEST 000001a1: STOP 000001a2: JUMPDEST 000001a3: CALLVALUE 000001a4: DUP1 000001a5: ISZERO 000001a6: PUSH2 0x01ae 000001a9: JUMPI 000001aa: PUSH1 0x00 000001ac: DUP1 000001ad: REVERT 000001ae: JUMPDEST 000001af: POP 000001b0: PUSH2 0x01b7 000001b3: PUSH2 0x051e 000001b6: JUMP 000001b7: JUMPDEST 000001b8: PUSH1 0x40 000001ba: MLOAD 000001bb: DUP1 000001bc: DUP3 000001bd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001d2: AND 000001d3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001e8: AND 000001e9: DUP2 000001ea: MSTORE 000001eb: PUSH1 0x20 000001ed: ADD 000001ee: SWAP2 000001ef: POP 000001f0: POP 000001f1: PUSH1 0x40 000001f3: MLOAD 000001f4: DUP1 000001f5: SWAP2 000001f6: SUB 000001f7: SWAP1 000001f8: RETURN 000001f9: JUMPDEST 000001fa: PUSH2 0x0201 000001fd: PUSH2 0x0576 00000200: JUMP 00000201: JUMPDEST 00000202: PUSH2 0x0211 00000205: PUSH2 0x020c 00000208: PUSH2 0x0651 0000020b: JUMP 0000020c: JUMPDEST 0000020d: PUSH2 0x0682 00000210: JUMP 00000211: JUMPDEST 00000212: JUMP 00000213: JUMPDEST 00000214: PUSH2 0x021b 00000217: PUSH2 0x06a8 0000021a: JUMP 0000021b: JUMPDEST 0000021c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000231: AND 00000232: CALLER 00000233: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000248: AND 00000249: EQ 0000024a: ISZERO 0000024b: PUSH2 0x025c 0000024e: JUMPI 0000024f: PUSH2 0x0257 00000252: DUP2 00000253: PUSH2 0x06d9 00000256: JUMP 00000257: JUMPDEST 00000258: PUSH2 0x0265 0000025b: JUMP 0000025c: JUMPDEST 0000025d: PUSH2 0x0264 00000260: PUSH2 0x01f9 00000263: JUMP 00000264: JUMPDEST 00000265: JUMPDEST 00000266: POP 00000267: JUMP 00000268: JUMPDEST 00000269: PUSH2 0x0270 0000026c: PUSH2 0x06a8 0000026f: JUMP 00000270: JUMPDEST 00000271: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000286: AND 00000287: CALLER 00000288: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000029d: AND 0000029e: EQ 0000029f: ISZERO 000002a0: PUSH2 0x02fa 000002a3: JUMPI 000002a4: PUSH2 0x02ac 000002a7: DUP4 000002a8: PUSH2 0x06d9 000002ab: JUMP 000002ac: JUMPDEST 000002ad: ADDRESS 000002ae: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000002c3: AND 000002c4: CALLVALUE 000002c5: DUP4 000002c6: DUP4 000002c7: PUSH1 0x40 000002c9: MLOAD 000002ca: DUP1 000002cb: DUP4 000002cc: DUP4 000002cd: DUP1 000002ce: DUP3 000002cf: DUP5 000002d0: CALLDATACOPY 000002d1: DUP3 000002d2: ADD 000002d3: SWAP2 000002d4: POP 000002d5: POP 000002d6: SWAP3 000002d7: POP 000002d8: POP 000002d9: POP 000002da: PUSH1 0x00 000002dc: PUSH1 0x40 000002de: MLOAD 000002df: DUP1 000002e0: DUP4 000002e1: SUB 000002e2: DUP2 000002e3: DUP6 000002e4: DUP8 000002e5: GAS 000002e6: CALL 000002e7: SWAP3 000002e8: POP 000002e9: POP 000002ea: POP 000002eb: ISZERO 000002ec: ISZERO 000002ed: PUSH2 0x02f5 000002f0: JUMPI 000002f1: PUSH1 0x00 000002f3: DUP1 000002f4: REVERT 000002f5: JUMPDEST 000002f6: PUSH2 0x0303 000002f9: JUMP 000002fa: JUMPDEST 000002fb: PUSH2 0x0302 000002fe: PUSH2 0x01f9 00000301: JUMP 00000302: JUMPDEST 00000303: JUMPDEST 00000304: POP 00000305: POP 00000306: POP 00000307: JUMP 00000308: JUMPDEST 00000309: PUSH1 0x00 0000030b: PUSH2 0x0312 0000030e: PUSH2 0x06a8 00000311: JUMP 00000312: JUMPDEST 00000313: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000328: AND 00000329: CALLER 0000032a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000033f: AND 00000340: EQ 00000341: ISZERO 00000342: PUSH2 0x0354 00000345: JUMPI 00000346: PUSH2 0x034d 00000349: PUSH2 0x0651 0000034c: JUMP 0000034d: JUMPDEST 0000034e: SWAP1 0000034f: POP 00000350: PUSH2 0x035d 00000353: JUMP 00000354: JUMPDEST 00000355: PUSH2 0x035c 00000358: PUSH2 0x01f9 0000035b: JUMP 0000035c: JUMPDEST 0000035d: JUMPDEST 0000035e: SWAP1 0000035f: JUMP 00000360: JUMPDEST 00000361: PUSH2 0x0368 00000364: PUSH2 0x06a8 00000367: JUMP 00000368: JUMPDEST 00000369: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000037e: AND 0000037f: CALLER 00000380: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000395: AND 00000396: EQ 00000397: ISZERO 00000398: PUSH2 0x0512 0000039b: JUMPI 0000039c: PUSH1 0x00 0000039e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003b3: AND 000003b4: DUP2 000003b5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003ca: AND 000003cb: EQ 000003cc: ISZERO 000003cd: ISZERO 000003ce: ISZERO 000003cf: PUSH2 0x0466 000003d2: JUMPI 000003d3: PUSH1 0x40 000003d5: MLOAD 000003d6: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 000003f7: DUP2 000003f8: MSTORE 000003f9: PUSH1 0x04 000003fb: ADD 000003fc: DUP1 000003fd: DUP1 000003fe: PUSH1 0x20 00000400: ADD 00000401: DUP3 00000402: DUP2 00000403: SUB 00000404: DUP3 00000405: MSTORE 00000406: PUSH1 0x36 00000408: DUP2 00000409: MSTORE 0000040a: PUSH1 0x20 0000040c: ADD 0000040d: DUP1 0000040e: PUSH32 0x43616e6e6f74206368616e6765207468652061646d696e206f6620612070726f 0000042f: DUP2 00000430: MSTORE 00000431: PUSH1 0x20 00000433: ADD 00000434: PUSH32 0x787920746f20746865207a65726f206164647265737300000000000000000000 00000455: DUP2 00000456: MSTORE 00000457: POP 00000458: PUSH1 0x40 0000045a: ADD 0000045b: SWAP2 0000045c: POP 0000045d: POP 0000045e: PUSH1 0x40 00000460: MLOAD 00000461: DUP1 00000462: SWAP2 00000463: SUB 00000464: SWAP1 00000465: REVERT 00000466: JUMPDEST 00000467: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f 00000488: PUSH2 0x048f 0000048b: PUSH2 0x06a8 0000048e: JUMP 0000048f: JUMPDEST 00000490: DUP3 00000491: PUSH1 0x40 00000493: MLOAD 00000494: DUP1 00000495: DUP4 00000496: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004ab: AND 000004ac: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004c1: AND 000004c2: DUP2 000004c3: MSTORE 000004c4: PUSH1 0x20 000004c6: ADD 000004c7: DUP3 000004c8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004dd: AND 000004de: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004f3: AND 000004f4: DUP2 000004f5: MSTORE 000004f6: PUSH1 0x20 000004f8: ADD 000004f9: SWAP3 000004fa: POP 000004fb: POP 000004fc: POP 000004fd: PUSH1 0x40 000004ff: MLOAD 00000500: DUP1 00000501: SWAP2 00000502: SUB 00000503: SWAP1 00000504: LOG1 00000505: PUSH2 0x050d 00000508: DUP2 00000509: PUSH2 0x0748 0000050c: JUMP 0000050d: JUMPDEST 0000050e: PUSH2 0x051b 00000511: JUMP 00000512: JUMPDEST 00000513: PUSH2 0x051a 00000516: PUSH2 0x01f9 00000519: JUMP 0000051a: JUMPDEST 0000051b: JUMPDEST 0000051c: POP 0000051d: JUMP 0000051e: JUMPDEST 0000051f: PUSH1 0x00 00000521: PUSH2 0x0528 00000524: PUSH2 0x06a8 00000527: JUMP 00000528: JUMPDEST 00000529: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000053e: AND 0000053f: CALLER 00000540: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000555: AND 00000556: EQ 00000557: ISZERO 00000558: PUSH2 0x056a 0000055b: JUMPI 0000055c: PUSH2 0x0563 0000055f: PUSH2 0x06a8 00000562: JUMP 00000563: JUMPDEST 00000564: SWAP1 00000565: POP 00000566: PUSH2 0x0573 00000569: JUMP 0000056a: JUMPDEST 0000056b: PUSH2 0x0572 0000056e: PUSH2 0x01f9 00000571: JUMP 00000572: JUMPDEST 00000573: JUMPDEST 00000574: SWAP1 00000575: JUMP 00000576: JUMPDEST 00000577: PUSH2 0x057e 0000057a: PUSH2 0x06a8 0000057d: JUMP 0000057e: JUMPDEST 0000057f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000594: AND 00000595: CALLER 00000596: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000005ab: AND 000005ac: EQ 000005ad: ISZERO 000005ae: ISZERO 000005af: ISZERO 000005b0: PUSH2 0x0647 000005b3: JUMPI 000005b4: PUSH1 0x40 000005b6: MLOAD 000005b7: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 000005d8: DUP2 000005d9: MSTORE 000005da: PUSH1 0x04 000005dc: ADD 000005dd: DUP1 000005de: DUP1 000005df: PUSH1 0x20 000005e1: ADD 000005e2: DUP3 000005e3: DUP2 000005e4: SUB 000005e5: DUP3 000005e6: MSTORE 000005e7: PUSH1 0x32 000005e9: DUP2 000005ea: MSTORE 000005eb: PUSH1 0x20 000005ed: ADD 000005ee: DUP1 000005ef: PUSH32 0x43616e6e6f742063616c6c2066616c6c6261636b2066756e6374696f6e206672 00000610: DUP2 00000611: MSTORE 00000612: PUSH1 0x20 00000614: ADD 00000615: PUSH32 0x6f6d207468652070726f78792061646d696e0000000000000000000000000000 00000636: DUP2 00000637: MSTORE 00000638: POP 00000639: PUSH1 0x40 0000063b: ADD 0000063c: SWAP2 0000063d: POP 0000063e: POP 0000063f: PUSH1 0x40 00000641: MLOAD 00000642: DUP1 00000643: SWAP2 00000644: SUB 00000645: SWAP1 00000646: REVERT 00000647: JUMPDEST 00000648: PUSH2 0x064f 0000064b: PUSH2 0x0777 0000064e: JUMP 0000064f: JUMPDEST 00000650: JUMP 00000651: JUMPDEST 00000652: PUSH1 0x00 00000654: DUP1 00000655: PUSH32 0x7050c9e0f4ca769c69bd3a8ef740bc37934f8e2c036e5a723fd8ee048ed3f8c3 00000676: PUSH1 0x01 00000678: MUL 00000679: SWAP1 0000067a: POP 0000067b: DUP1 0000067c: SLOAD 0000067d: SWAP2 0000067e: POP 0000067f: POP 00000680: SWAP1 00000681: JUMP 00000682: JUMPDEST 00000683: CALLDATASIZE 00000684: PUSH1 0x00 00000686: DUP1 00000687: CALLDATACOPY 00000688: PUSH1 0x00 0000068a: DUP1 0000068b: CALLDATASIZE 0000068c: PUSH1 0x00 0000068e: DUP5 0000068f: GAS 00000690: DELEGATECALL 00000691: RETURNDATASIZE 00000692: PUSH1 0x00 00000694: DUP1 00000695: RETURNDATACOPY 00000696: DUP1 00000697: PUSH1 0x00 00000699: DUP2 0000069a: EQ 0000069b: PUSH2 0x06a3 0000069e: JUMPI 0000069f: RETURNDATASIZE 000006a0: PUSH1 0x00 000006a2: RETURN 000006a3: JUMPDEST 000006a4: RETURNDATASIZE 000006a5: PUSH1 0x00 000006a7: REVERT 000006a8: JUMPDEST 000006a9: PUSH1 0x00 000006ab: DUP1 000006ac: PUSH32 0x10d6a54a4754c8869d6886b5f5d7fbfa5b4522237ea5c60d11bc4e7a1ff9390b 000006cd: PUSH1 0x01 000006cf: MUL 000006d0: SWAP1 000006d1: POP 000006d2: DUP1 000006d3: SLOAD 000006d4: SWAP2 000006d5: POP 000006d6: POP 000006d7: SWAP1 000006d8: JUMP 000006d9: JUMPDEST 000006da: PUSH2 0x06e2 000006dd: DUP2 000006de: PUSH2 0x0779 000006e1: JUMP 000006e2: JUMPDEST 000006e3: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b 00000704: DUP2 00000705: PUSH1 0x40 00000707: MLOAD 00000708: DUP1 00000709: DUP3 0000070a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000071f: AND 00000720: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000735: AND 00000736: DUP2 00000737: MSTORE 00000738: PUSH1 0x20 0000073a: ADD 0000073b: SWAP2 0000073c: POP 0000073d: POP 0000073e: PUSH1 0x40 00000740: MLOAD 00000741: DUP1 00000742: SWAP2 00000743: SUB 00000744: SWAP1 00000745: LOG1 00000746: POP 00000747: JUMP 00000748: JUMPDEST 00000749: PUSH1 0x00 0000074b: PUSH32 0x10d6a54a4754c8869d6886b5f5d7fbfa5b4522237ea5c60d11bc4e7a1ff9390b 0000076c: PUSH1 0x01 0000076e: MUL 0000076f: SWAP1 00000770: POP 00000771: DUP2 00000772: DUP2 00000773: SSTORE 00000774: POP 00000775: POP 00000776: JUMP 00000777: JUMPDEST 00000778: JUMP 00000779: JUMPDEST 0000077a: PUSH1 0x00 0000077c: PUSH2 0x0784 0000077f: DUP3 00000780: PUSH2 0x084b 00000783: JUMP 00000784: JUMPDEST 00000785: ISZERO 00000786: ISZERO 00000787: PUSH2 0x081e 0000078a: JUMPI 0000078b: PUSH1 0x40 0000078d: MLOAD 0000078e: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 000007af: DUP2 000007b0: MSTORE 000007b1: PUSH1 0x04 000007b3: ADD 000007b4: DUP1 000007b5: DUP1 000007b6: PUSH1 0x20 000007b8: ADD 000007b9: DUP3 000007ba: DUP2 000007bb: SUB 000007bc: DUP3 000007bd: MSTORE 000007be: PUSH1 0x3b 000007c0: DUP2 000007c1: MSTORE 000007c2: PUSH1 0x20 000007c4: ADD 000007c5: DUP1 000007c6: PUSH32 0x43616e6e6f742073657420612070726f787920696d706c656d656e746174696f 000007e7: DUP2 000007e8: MSTORE 000007e9: PUSH1 0x20 000007eb: ADD 000007ec: PUSH32 0x6e20746f2061206e6f6e2d636f6e747261637420616464726573730000000000 0000080d: DUP2 0000080e: MSTORE 0000080f: POP 00000810: PUSH1 0x40 00000812: ADD 00000813: SWAP2 00000814: POP 00000815: POP 00000816: PUSH1 0x40 00000818: MLOAD 00000819: DUP1 0000081a: SWAP2 0000081b: SUB 0000081c: SWAP1 0000081d: REVERT 0000081e: JUMPDEST 0000081f: PUSH32 0x7050c9e0f4ca769c69bd3a8ef740bc37934f8e2c036e5a723fd8ee048ed3f8c3 00000840: PUSH1 0x01 00000842: MUL 00000843: SWAP1 00000844: POP 00000845: DUP2 00000846: DUP2 00000847: SSTORE 00000848: POP 00000849: POP 0000084a: JUMP 0000084b: JUMPDEST 0000084c: PUSH1 0x00 0000084e: DUP1 0000084f: DUP3 00000850: EXTCODESIZE 00000851: SWAP1 00000852: POP 00000853: PUSH1 0x00 00000855: DUP2 00000856: GT 00000857: SWAP2 00000858: POP 00000859: POP 0000085a: SWAP2 0000085b: SWAP1 0000085c: POP 0000085d: JUMP 0000085e: STOP 0000085f: LOG1 00000860: PUSH6 0x627a7a723058 00000867: KECCAK256 00000868: LOG4 00000869: UNKNOWN(0xA5) 0000086a: SELFBALANCE 0000086b: UNKNOWN(0xCF) 0000086c: UNKNOWN(0xC7) 0000086d: KECCAK256 0000086e: UNKNOWN(0x2C) 0000086f: GAS 00000870: UNKNOWN(0xCA) 00000871: UNKNOWN(0xAA) 00000872: UNKNOWN(0xE7) 00000873: UNKNOWN(0x4D) 00000874: TIMESTAMP 00000875: DUP15 00000876: SWAP9 00000877: DUP12 00000878: UNKNOWN(0xC6) 00000879: UNKNOWN(0x2A) 0000087a: UNKNOWN(0xD5) 0000087b: MUL 0000087c: UNKNOWN(0x4E) 0000087d: UNKNOWN(0xB0) 0000087e: AND 0000087f: SSTORE 00000880: ORIGIN 00000881: UNKNOWN(0xD3) 00000882: UNKNOWN(0xA8) 00000883: UNKNOWN(0xF9) 00000884: SAR 00000885: UNKNOWN(0xB4) 00000886: UNKNOWN(0xED) 00000887: UNKNOWN(0x24) 00000888: STOP 00000889: UNKNOWN(0x29)
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | upgradeability | detector | Untrusted DELEGATECALL target reachable | 55 | no | no |
viewtrace_id: 0x289cf51163392999d8dafb7bde25891a81f570f61416763421e85e45efe159c6
call_targets:
0x43506849d7c04f9138d1a2050bbf3a0c054402dd
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x289cf51163392999d8dafb7bde25891a81f570f61416763421e85e45efe159c6",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x43506849d7c04f9138d1a2050bbf3a0c054402dd"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3659cfe6",
"selector": "0x3659cfe6",
"calldata_variants": [
"0x3659cfe6",
"0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4f1ef286",
"selector": "0x4f1ef286",
"calldata_variants": [
"0x4f1ef286",
"0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8f283970",
"selector": "0x8f283970",
"calldata_variants": [
"0x8f283970",
"0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf851a440",
"selector": "0xf851a440",
"calldata_variants": [
"0xf851a440",
"0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1680,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [
{
"pc": 562,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 647,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 809,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 895,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1343,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1429,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 2176,
"type": "tx_origin_used"
}
],
"delegatecall_count": 1,
"untrusted_delegatecall_count": 1
}
|
| high | auth | detector | Authorization based on tx.origin | 70 | no | — |
viewvalidation_json{
"reason": "missing sink mapping",
"status": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3659cfe6",
"selector": "0x3659cfe6",
"calldata_variants": [
"0x3659cfe6",
"0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4f1ef286",
"selector": "0x4f1ef286",
"calldata_variants": [
"0x4f1ef286",
"0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8f283970",
"selector": "0x8f283970",
"calldata_variants": [
"0x8f283970",
"0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf851a440",
"selector": "0xf851a440",
"calldata_variants": [
"0xf851a440",
"0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [
{
"pc": 562,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 647,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 809,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 895,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1343,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1429,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 2176,
"type": "tx_origin_used"
}
]
}
|
| medium | upgradeability | cast | DELEGATECALL present | 80 | no | — |
viewevidence_json{
"notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
"delegatecall_count": 1
}
|
| medium | other | detector | Untrusted CALL target/value reachable | 45 | no | no |
viewtrace_id: 0x289cf51163392999d8dafb7bde25891a81f570f61416763421e85e45efe159c6
call_targets:
0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x289cf51163392999d8dafb7bde25891a81f570f61416763421e85e45efe159c6",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3659cfe6",
"selector": "0x3659cfe6",
"calldata_variants": [
"0x3659cfe6",
"0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4f1ef286",
"selector": "0x4f1ef286",
"calldata_variants": [
"0x4f1ef286",
"0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8f283970",
"selector": "0x8f283970",
"calldata_variants": [
"0x8f283970",
"0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf851a440",
"selector": "0xf851a440",
"calldata_variants": [
"0xf851a440",
"0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 742,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [
{
"pc": 562,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 647,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 809,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 895,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1343,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1429,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 2176,
"type": "tx_origin_used"
}
],
"untrusted_call_count": 1
}
|
| medium | other | detector | ETH value transfer possible | 40 | no | no |
viewtrace_id: 0x289cf51163392999d8dafb7bde25891a81f570f61416763421e85e45efe159c6
call_targets:
0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x289cf51163392999d8dafb7bde25891a81f570f61416763421e85e45efe159c6",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3659cfe6",
"selector": "0x3659cfe6",
"calldata_variants": [
"0x3659cfe6",
"0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x4f1ef286",
"selector": "0x4f1ef286",
"calldata_variants": [
"0x4f1ef286",
"0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8f283970",
"selector": "0x8f283970",
"calldata_variants": [
"0x8f283970",
"0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf851a440",
"selector": "0xf851a440",
"calldata_variants": [
"0xf851a440",
"0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 742,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": [
{
"pc": 562,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 647,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 809,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 895,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1343,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1429,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 2176,
"type": "tx_origin_used"
}
]
}
|