TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba8df-e195-7002-b176-07495bcc6f37

complete
Chain ID
1
Address
Block Number
Created
Sat, Jan 10, 2026 5:06 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 proxy context implementation known
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
33029 artifact.fetch complete 1 / 3 3 months ago
33030 proxy.resolve complete 1 / 3 3 months ago
33031 tool.cast_disasm complete 1 / 3 3 months ago
33032 analysis.bundle complete 1 / 3 3 months ago
33033 capability.graph complete 1 / 3 3 months ago
33034 detector.run complete 1 / 3 3 months ago
33035 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: yes etherscan_only
Verified Source: yes
Proxy evidence
{
    "status": "etherscan_only",
    "etherscan_hint": {
        "source": "etherscan",
        "etherscan": {
            "proxy_flag": true,
            "implementation": "0xa5407eae9ba41422680e2e00537571bcc53efbfd"
        }
    },
    "implementation": "0xa5407eae9ba41422680e2e00537571bcc53efbfd"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
0
EXT*/BALANCE
0
Total opcodes
1239
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x00f7
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0xb71fdd37
00000019: GT
0000001a: PUSH2 0x008a
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0xe0a0b586
00000024: GT
00000025: PUSH2 0x0059
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0xe0a0b586
0000002f: EQ
00000030: PUSH2 0x03c0
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xe3824462
0000003a: EQ
0000003b: PUSH2 0x03eb
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf446c1d0
00000045: EQ
00000046: PUSH2 0x0416
00000049: JUMPI
0000004a: DUP1
0000004b: PUSH4 0xfee3f7f9
00000050: EQ
00000051: PUSH2 0x0441
00000054: JUMPI
00000055: PUSH2 0x00f8
00000058: JUMP
00000059: JUMPDEST
0000005a: DUP1
0000005b: PUSH4 0xb71fdd37
00000060: EQ
00000061: PUSH2 0x02de
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0xb739953e
0000006b: EQ
0000006c: PUSH2 0x031b
0000006f: JUMPI
00000070: DUP1
00000071: PUSH4 0xc296c84f
00000076: EQ
00000077: PUSH2 0x0358
0000007a: JUMPI
0000007b: DUP1
0000007c: PUSH4 0xddca3f43
00000081: EQ
00000082: PUSH2 0x0395
00000085: JUMPI
00000086: PUSH2 0x00f8
00000089: JUMP
0000008a: JUMPDEST
0000008b: DUP1
0000008c: PUSH4 0x405e28f8
00000091: GT
00000092: PUSH2 0x00c6
00000095: JUMPI
00000096: DUP1
00000097: PUSH4 0x405e28f8
0000009c: EQ
0000009d: PUSH2 0x0232
000000a0: JUMPI
000000a1: DUP1
000000a2: PUSH4 0x58680d0b
000000a7: EQ
000000a8: PUSH2 0x025d
000000ab: JUMPI
000000ac: DUP1
000000ad: PUSH4 0x8da5cb5b
000000b2: EQ
000000b3: PUSH2 0x0288
000000b6: JUMPI
000000b7: DUP1
000000b8: PUSH4 0xb4b577ad
000000bd: EQ
000000be: PUSH2 0x02b3
000000c1: JUMPI
000000c2: PUSH2 0x00f8
000000c5: JUMP
000000c6: JUMPDEST
000000c7: DUP1
000000c8: PUSH4 0x065a80d8
000000cd: EQ
000000ce: PUSH2 0x0150
000000d1: JUMPI
000000d2: DUP1
000000d3: PUSH4 0x1ec0cdc1
000000d8: EQ
000000d9: PUSH2 0x018d
000000dc: JUMPI
000000dd: DUP1
000000de: PUSH4 0x23746eb8
000000e3: EQ
000000e4: PUSH2 0x01b8
000000e7: JUMPI
000000e8: DUP1
000000e9: PUSH4 0x3d24a36b
000000ee: EQ
000000ef: PUSH2 0x01f5
000000f2: JUMPI
000000f3: PUSH2 0x00f8
000000f6: JUMP
000000f7: JUMPDEST
000000f8: JUMPDEST
000000f9: PUSH1 0x00
000000fb: PUSH20 0xa5407eae9ba41422680e2e00537571bcc53efbfd
00000110: SWAP1
00000111: POP
00000112: PUSH1 0x40
00000114: MLOAD
00000115: CALLDATASIZE
00000116: PUSH1 0x1f
00000118: NOT
00000119: PUSH1 0x1f
0000011b: DUP3
0000011c: ADD
0000011d: AND
0000011e: DUP1
0000011f: DUP4
00000120: ADD
00000121: PUSH1 0x40
00000123: MSTORE
00000124: DUP2
00000125: PUSH1 0x00
00000127: DUP5
00000128: CALLDATACOPY
00000129: PUSH1 0x00
0000012b: DUP1
0000012c: DUP4
0000012d: DUP6
0000012e: DUP8
0000012f: GAS
00000130: DELEGATECALL
00000131: DUP1
00000132: PUSH1 0x00
00000134: DUP2
00000135: EQ
00000136: PUSH2 0x014b
00000139: JUMPI
0000013a: PUSH1 0x40
0000013c: MLOAD
0000013d: RETURNDATASIZE
0000013e: DUP2
0000013f: ADD
00000140: PUSH1 0x40
00000142: MSTORE
00000143: RETURNDATASIZE
00000144: PUSH1 0x00
00000146: DUP3
00000147: RETURNDATACOPY
00000148: RETURNDATASIZE
00000149: DUP2
0000014a: RETURN
0000014b: JUMPDEST
0000014c: PUSH1 0x00
0000014e: DUP1
0000014f: REVERT
00000150: JUMPDEST
00000151: CALLVALUE
00000152: DUP1
00000153: ISZERO
00000154: PUSH2 0x015c
00000157: JUMPI
00000158: PUSH1 0x00
0000015a: DUP1
0000015b: REVERT
0000015c: JUMPDEST
0000015d: POP
0000015e: PUSH2 0x0177
00000161: PUSH1 0x04
00000163: DUP1
00000164: CALLDATASIZE
00000165: SUB
00000166: DUP2
00000167: ADD
00000168: SWAP1
00000169: PUSH2 0x0172
0000016c: SWAP2
0000016d: SWAP1
0000016e: PUSH2 0x0656
00000171: JUMP
00000172: JUMPDEST
00000173: PUSH2 0x046c
00000176: JUMP
00000177: JUMPDEST
00000178: PUSH1 0x40
0000017a: MLOAD
0000017b: PUSH2 0x0184
0000017e: SWAP2
0000017f: SWAP1
00000180: PUSH2 0x06e1
00000183: JUMP
00000184: JUMPDEST
00000185: PUSH1 0x40
00000187: MLOAD
00000188: DUP1
00000189: SWAP2
0000018a: SUB
0000018b: SWAP1
0000018c: RETURN
0000018d: JUMPDEST
0000018e: CALLVALUE
0000018f: DUP1
00000190: ISZERO
00000191: PUSH2 0x0199
00000194: JUMPI
00000195: PUSH1 0x00
00000197: DUP1
00000198: REVERT
00000199: JUMPDEST
0000019a: POP
0000019b: PUSH2 0x01a2
0000019e: PUSH2 0x0490
000001a1: JUMP
000001a2: JUMPDEST
000001a3: PUSH1 0x40
000001a5: MLOAD
000001a6: PUSH2 0x01af
000001a9: SWAP2
000001aa: SWAP1
000001ab: PUSH2 0x06c6
000001ae: JUMP
000001af: JUMPDEST
000001b0: PUSH1 0x40
000001b2: MLOAD
000001b3: DUP1
000001b4: SWAP2
000001b5: SUB
000001b6: SWAP1
000001b7: RETURN
000001b8: JUMPDEST
000001b9: CALLVALUE
000001ba: DUP1
000001bb: ISZERO
000001bc: PUSH2 0x01c4
000001bf: JUMPI
000001c0: PUSH1 0x00
000001c2: DUP1
000001c3: REVERT
000001c4: JUMPDEST
000001c5: POP
000001c6: PUSH2 0x01df
000001c9: PUSH1 0x04
000001cb: DUP1
000001cc: CALLDATASIZE
000001cd: SUB
000001ce: DUP2
000001cf: ADD
000001d0: SWAP1
000001d1: PUSH2 0x01da
000001d4: SWAP2
000001d5: SWAP1
000001d6: PUSH2 0x0656
000001d9: JUMP
000001da: JUMPDEST
000001db: PUSH2 0x04b6
000001de: JUMP
000001df: JUMPDEST
000001e0: PUSH1 0x40
000001e2: MLOAD
000001e3: PUSH2 0x01ec
000001e6: SWAP2
000001e7: SWAP1
000001e8: PUSH2 0x06c6
000001eb: JUMP
000001ec: JUMPDEST
000001ed: PUSH1 0x40
000001ef: MLOAD
000001f0: DUP1
000001f1: SWAP2
000001f2: SUB
000001f3: SWAP1
000001f4: RETURN
000001f5: JUMPDEST
000001f6: CALLVALUE
000001f7: DUP1
000001f8: ISZERO
000001f9: PUSH2 0x0201
000001fc: JUMPI
000001fd: PUSH1 0x00
000001ff: DUP1
00000200: REVERT
00000201: JUMPDEST
00000202: POP
00000203: PUSH2 0x021c
00000206: PUSH1 0x04
00000208: DUP1
00000209: CALLDATASIZE
0000020a: SUB
0000020b: DUP2
0000020c: ADD
0000020d: SWAP1
0000020e: PUSH2 0x0217
00000211: SWAP2
00000212: SWAP1
00000213: PUSH2 0x067f
00000216: JUMP
00000217: JUMPDEST
00000218: PUSH2 0x04f9
0000021b: JUMP
0000021c: JUMPDEST
0000021d: PUSH1 0x40
0000021f: MLOAD
00000220: PUSH2 0x0229
00000223: SWAP2
00000224: SWAP1
00000225: PUSH2 0x06e1
00000228: JUMP
00000229: JUMPDEST
0000022a: PUSH1 0x40
0000022c: MLOAD
0000022d: DUP1
0000022e: SWAP2
0000022f: SUB
00000230: SWAP1
00000231: RETURN
00000232: JUMPDEST
00000233: CALLVALUE
00000234: DUP1
00000235: ISZERO
00000236: PUSH2 0x023e
00000239: JUMPI
0000023a: PUSH1 0x00
0000023c: DUP1
0000023d: REVERT
0000023e: JUMPDEST
0000023f: POP
00000240: PUSH2 0x0247
00000243: PUSH2 0x051a
00000246: JUMP
00000247: JUMPDEST
00000248: PUSH1 0x40
0000024a: MLOAD
0000024b: PUSH2 0x0254
0000024e: SWAP2
0000024f: SWAP1
00000250: PUSH2 0x06e1
00000253: JUMP
00000254: JUMPDEST
00000255: PUSH1 0x40
00000257: MLOAD
00000258: DUP1
00000259: SWAP2
0000025a: SUB
0000025b: SWAP1
0000025c: RETURN
0000025d: JUMPDEST
0000025e: CALLVALUE
0000025f: DUP1
00000260: ISZERO
00000261: PUSH2 0x0269
00000264: JUMPI
00000265: PUSH1 0x00
00000267: DUP1
00000268: REVERT
00000269: JUMPDEST
0000026a: POP
0000026b: PUSH2 0x0272
0000026e: PUSH2 0x0520
00000271: JUMP
00000272: JUMPDEST
00000273: PUSH1 0x40
00000275: MLOAD
00000276: PUSH2 0x027f
00000279: SWAP2
0000027a: SWAP1
0000027b: PUSH2 0x06e1
0000027e: JUMP
0000027f: JUMPDEST
00000280: PUSH1 0x40
00000282: MLOAD
00000283: DUP1
00000284: SWAP2
00000285: SUB
00000286: SWAP1
00000287: RETURN
00000288: JUMPDEST
00000289: CALLVALUE
0000028a: DUP1
0000028b: ISZERO
0000028c: PUSH2 0x0294
0000028f: JUMPI
00000290: PUSH1 0x00
00000292: DUP1
00000293: REVERT
00000294: JUMPDEST
00000295: POP
00000296: PUSH2 0x029d
00000299: PUSH2 0x0526
0000029c: JUMP
0000029d: JUMPDEST
0000029e: PUSH1 0x40
000002a0: MLOAD
000002a1: PUSH2 0x02aa
000002a4: SWAP2
000002a5: SWAP1
000002a6: PUSH2 0x06c6
000002a9: JUMP
000002aa: JUMPDEST
000002ab: PUSH1 0x40
000002ad: MLOAD
000002ae: DUP1
000002af: SWAP2
000002b0: SUB
000002b1: SWAP1
000002b2: RETURN
000002b3: JUMPDEST
000002b4: CALLVALUE
000002b5: DUP1
000002b6: ISZERO
000002b7: PUSH2 0x02bf
000002ba: JUMPI
000002bb: PUSH1 0x00
000002bd: DUP1
000002be: REVERT
000002bf: JUMPDEST
000002c0: POP
000002c1: PUSH2 0x02c8
000002c4: PUSH2 0x054c
000002c7: JUMP
000002c8: JUMPDEST
000002c9: PUSH1 0x40
000002cb: MLOAD
000002cc: PUSH2 0x02d5
000002cf: SWAP2
000002d0: SWAP1
000002d1: PUSH2 0x06e1
000002d4: JUMP
000002d5: JUMPDEST
000002d6: PUSH1 0x40
000002d8: MLOAD
000002d9: DUP1
000002da: SWAP2
000002db: SUB
000002dc: SWAP1
000002dd: RETURN
000002de: JUMPDEST
000002df: CALLVALUE
000002e0: DUP1
000002e1: ISZERO
000002e2: PUSH2 0x02ea
000002e5: JUMPI
000002e6: PUSH1 0x00
000002e8: DUP1
000002e9: REVERT
000002ea: JUMPDEST
000002eb: POP
000002ec: PUSH2 0x0305
000002ef: PUSH1 0x04
000002f1: DUP1
000002f2: CALLDATASIZE
000002f3: SUB
000002f4: DUP2
000002f5: ADD
000002f6: SWAP1
000002f7: PUSH2 0x0300
000002fa: SWAP2
000002fb: SWAP1
000002fc: PUSH2 0x067f
000002ff: JUMP
00000300: JUMPDEST
00000301: PUSH2 0x0552
00000304: JUMP
00000305: JUMPDEST
00000306: PUSH1 0x40
00000308: MLOAD
00000309: PUSH2 0x0312
0000030c: SWAP2
0000030d: SWAP1
0000030e: PUSH2 0x06c6
00000311: JUMP
00000312: JUMPDEST
00000313: PUSH1 0x40
00000315: MLOAD
00000316: DUP1
00000317: SWAP2
00000318: SUB
00000319: SWAP1
0000031a: RETURN
0000031b: JUMPDEST
0000031c: CALLVALUE
0000031d: DUP1
0000031e: ISZERO
0000031f: PUSH2 0x0327
00000322: JUMPI
00000323: PUSH1 0x00
00000325: DUP1
00000326: REVERT
00000327: JUMPDEST
00000328: POP
00000329: PUSH2 0x0342
0000032c: PUSH1 0x04
0000032e: DUP1
0000032f: CALLDATASIZE
00000330: SUB
00000331: DUP2
00000332: ADD
00000333: SWAP1
00000334: PUSH2 0x033d
00000337: SWAP2
00000338: SWAP1
00000339: PUSH2 0x0656
0000033c: JUMP
0000033d: JUMPDEST
0000033e: PUSH2 0x058e
00000341: JUMP
00000342: JUMPDEST
00000343: PUSH1 0x40
00000345: MLOAD
00000346: PUSH2 0x034f
00000349: SWAP2
0000034a: SWAP1
0000034b: PUSH2 0x06c6
0000034e: JUMP
0000034f: JUMPDEST
00000350: PUSH1 0x40
00000352: MLOAD
00000353: DUP1
00000354: SWAP2
00000355: SUB
00000356: SWAP1
00000357: RETURN
00000358: JUMPDEST
00000359: CALLVALUE
0000035a: DUP1
0000035b: ISZERO
0000035c: PUSH2 0x0364
0000035f: JUMPI
00000360: PUSH1 0x00
00000362: DUP1
00000363: REVERT
00000364: JUMPDEST
00000365: POP
00000366: PUSH2 0x037f
00000369: PUSH1 0x04
0000036b: DUP1
0000036c: CALLDATASIZE
0000036d: SUB
0000036e: DUP2
0000036f: ADD
00000370: SWAP1
00000371: PUSH2 0x037a
00000374: SWAP2
00000375: SWAP1
00000376: PUSH2 0x067f
00000379: JUMP
0000037a: JUMPDEST
0000037b: PUSH2 0x05d2
0000037e: JUMP
0000037f: JUMPDEST
00000380: PUSH1 0x40
00000382: MLOAD
00000383: PUSH2 0x038c
00000386: SWAP2
00000387: SWAP1
00000388: PUSH2 0x06c6
0000038b: JUMP
0000038c: JUMPDEST
0000038d: PUSH1 0x40
0000038f: MLOAD
00000390: DUP1
00000391: SWAP2
00000392: SUB
00000393: SWAP1
00000394: RETURN
00000395: JUMPDEST
00000396: CALLVALUE
00000397: DUP1
00000398: ISZERO
00000399: PUSH2 0x03a1
0000039c: JUMPI
0000039d: PUSH1 0x00
0000039f: DUP1
000003a0: REVERT
000003a1: JUMPDEST
000003a2: POP
000003a3: PUSH2 0x03aa
000003a6: PUSH2 0x060e
000003a9: JUMP
000003aa: JUMPDEST
000003ab: PUSH1 0x40
000003ad: MLOAD
000003ae: PUSH2 0x03b7
000003b1: SWAP2
000003b2: SWAP1
000003b3: PUSH2 0x06e1
000003b6: JUMP
000003b7: JUMPDEST
000003b8: PUSH1 0x40
000003ba: MLOAD
000003bb: DUP1
000003bc: SWAP2
000003bd: SUB
000003be: SWAP1
000003bf: RETURN
000003c0: JUMPDEST
000003c1: CALLVALUE
000003c2: DUP1
000003c3: ISZERO
000003c4: PUSH2 0x03cc
000003c7: JUMPI
000003c8: PUSH1 0x00
000003ca: DUP1
000003cb: REVERT
000003cc: JUMPDEST
000003cd: POP
000003ce: PUSH2 0x03d5
000003d1: PUSH2 0x0614
000003d4: JUMP
000003d5: JUMPDEST
000003d6: PUSH1 0x40
000003d8: MLOAD
000003d9: PUSH2 0x03e2
000003dc: SWAP2
000003dd: SWAP1
000003de: PUSH2 0x06e1
000003e1: JUMP
000003e2: JUMPDEST
000003e3: PUSH1 0x40
000003e5: MLOAD
000003e6: DUP1
000003e7: SWAP2
000003e8: SUB
000003e9: SWAP1
000003ea: RETURN
000003eb: JUMPDEST
000003ec: CALLVALUE
000003ed: DUP1
000003ee: ISZERO
000003ef: PUSH2 0x03f7
000003f2: JUMPI
000003f3: PUSH1 0x00
000003f5: DUP1
000003f6: REVERT
000003f7: JUMPDEST
000003f8: POP
000003f9: PUSH2 0x0400
000003fc: PUSH2 0x061a
000003ff: JUMP
00000400: JUMPDEST
00000401: PUSH1 0x40
00000403: MLOAD
00000404: PUSH2 0x040d
00000407: SWAP2
00000408: SWAP1
00000409: PUSH2 0x06e1
0000040c: JUMP
0000040d: JUMPDEST
0000040e: PUSH1 0x40
00000410: MLOAD
00000411: DUP1
00000412: SWAP2
00000413: SUB
00000414: SWAP1
00000415: RETURN
00000416: JUMPDEST
00000417: CALLVALUE
00000418: DUP1
00000419: ISZERO
0000041a: PUSH2 0x0422
0000041d: JUMPI
0000041e: PUSH1 0x00
00000420: DUP1
00000421: REVERT
00000422: JUMPDEST
00000423: POP
00000424: PUSH2 0x042b
00000427: PUSH2 0x0620
0000042a: JUMP
0000042b: JUMPDEST
0000042c: PUSH1 0x40
0000042e: MLOAD
0000042f: PUSH2 0x0438
00000432: SWAP2
00000433: SWAP1
00000434: PUSH2 0x06e1
00000437: JUMP
00000438: JUMPDEST
00000439: PUSH1 0x40
0000043b: MLOAD
0000043c: DUP1
0000043d: SWAP2
0000043e: SUB
0000043f: SWAP1
00000440: RETURN
00000441: JUMPDEST
00000442: CALLVALUE
00000443: DUP1
00000444: ISZERO
00000445: PUSH2 0x044d
00000448: JUMPI
00000449: PUSH1 0x00
0000044b: DUP1
0000044c: REVERT
0000044d: JUMPDEST
0000044e: POP
0000044f: PUSH2 0x0456
00000452: PUSH2 0x0626
00000455: JUMP
00000456: JUMPDEST
00000457: PUSH1 0x40
00000459: MLOAD
0000045a: PUSH2 0x0463
0000045d: SWAP2
0000045e: SWAP1
0000045f: PUSH2 0x06e1
00000462: JUMP
00000463: JUMPDEST
00000464: PUSH1 0x40
00000466: MLOAD
00000467: DUP1
00000468: SWAP2
00000469: SUB
0000046a: SWAP1
0000046b: RETURN
0000046c: JUMPDEST
0000046d: PUSH1 0x00
0000046f: PUSH1 0x02
00000471: DUP3
00000472: PUSH1 0x0f
00000474: SIGNEXTEND
00000475: DUP2
00000476: SLOAD
00000477: DUP2
00000478: LT
00000479: PUSH2 0x047e
0000047c: JUMPI
0000047d: INVALID
0000047e: JUMPDEST
0000047f: SWAP1
00000480: PUSH1 0x00
00000482: MSTORE
00000483: PUSH1 0x20
00000485: PUSH1 0x00
00000487: KECCAK256
00000488: ADD
00000489: SLOAD
0000048a: SWAP1
0000048b: POP
0000048c: SWAP2
0000048d: SWAP1
0000048e: POP
0000048f: JUMP
00000490: JUMPDEST
00000491: PUSH1 0x0d
00000493: PUSH1 0x00
00000495: SWAP1
00000496: SLOAD
00000497: SWAP1
00000498: PUSH2 0x0100
0000049b: EXP
0000049c: SWAP1
0000049d: DIV
0000049e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004b3: AND
000004b4: DUP2
000004b5: JUMP
000004b6: JUMPDEST
000004b7: PUSH1 0x00
000004b9: DUP1
000004ba: DUP3
000004bb: PUSH1 0x0f
000004bd: SIGNEXTEND
000004be: DUP2
000004bf: SLOAD
000004c0: DUP2
000004c1: LT
000004c2: PUSH2 0x04c7
000004c5: JUMPI
000004c6: INVALID
000004c7: JUMPDEST
000004c8: SWAP1
000004c9: PUSH1 0x00
000004cb: MSTORE
000004cc: PUSH1 0x20
000004ce: PUSH1 0x00
000004d0: KECCAK256
000004d1: ADD
000004d2: PUSH1 0x00
000004d4: SWAP1
000004d5: SLOAD
000004d6: SWAP1
000004d7: PUSH2 0x0100
000004da: EXP
000004db: SWAP1
000004dc: DIV
000004dd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004f2: AND
000004f3: SWAP1
000004f4: POP
000004f5: SWAP2
000004f6: SWAP1
000004f7: POP
000004f8: JUMP
000004f9: JUMPDEST
000004fa: PUSH1 0x02
000004fc: DUP2
000004fd: DUP2
000004fe: SLOAD
000004ff: DUP2
00000500: LT
00000501: PUSH2 0x0506
00000504: JUMPI
00000505: INVALID
00000506: JUMPDEST
00000507: SWAP1
00000508: PUSH1 0x00
0000050a: MSTORE
0000050b: PUSH1 0x20
0000050d: PUSH1 0x00
0000050f: KECCAK256
00000510: ADD
00000511: PUSH1 0x00
00000513: SWAP2
00000514: POP
00000515: SWAP1
00000516: POP
00000517: SLOAD
00000518: DUP2
00000519: JUMP
0000051a: JUMPDEST
0000051b: PUSH1 0x08
0000051d: SLOAD
0000051e: DUP2
0000051f: JUMP
00000520: JUMPDEST
00000521: PUSH1 0x0b
00000523: SLOAD
00000524: DUP2
00000525: JUMP
00000526: JUMPDEST
00000527: PUSH1 0x06
00000529: PUSH1 0x00
0000052b: SWAP1
0000052c: SLOAD
0000052d: SWAP1
0000052e: PUSH2 0x0100
00000531: EXP
00000532: SWAP1
00000533: DIV
00000534: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000549: AND
0000054a: DUP2
0000054b: JUMP
0000054c: JUMPDEST
0000054d: PUSH1 0x0a
0000054f: SLOAD
00000550: DUP2
00000551: JUMP
00000552: JUMPDEST
00000553: PUSH1 0x01
00000555: DUP2
00000556: DUP2
00000557: SLOAD
00000558: DUP2
00000559: LT
0000055a: PUSH2 0x055f
0000055d: JUMPI
0000055e: INVALID
0000055f: JUMPDEST
00000560: SWAP1
00000561: PUSH1 0x00
00000563: MSTORE
00000564: PUSH1 0x20
00000566: PUSH1 0x00
00000568: KECCAK256
00000569: ADD
0000056a: PUSH1 0x00
0000056c: SWAP2
0000056d: POP
0000056e: SLOAD
0000056f: SWAP1
00000570: PUSH2 0x0100
00000573: EXP
00000574: SWAP1
00000575: DIV
00000576: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000058b: AND
0000058c: DUP2
0000058d: JUMP
0000058e: JUMPDEST
0000058f: PUSH1 0x00
00000591: PUSH1 0x01
00000593: DUP3
00000594: PUSH1 0x0f
00000596: SIGNEXTEND
00000597: DUP2
00000598: SLOAD
00000599: DUP2
0000059a: LT
0000059b: PUSH2 0x05a0
0000059e: JUMPI
0000059f: INVALID
000005a0: JUMPDEST
000005a1: SWAP1
000005a2: PUSH1 0x00
000005a4: MSTORE
000005a5: PUSH1 0x20
000005a7: PUSH1 0x00
000005a9: KECCAK256
000005aa: ADD
000005ab: PUSH1 0x00
000005ad: SWAP1
000005ae: SLOAD
000005af: SWAP1
000005b0: PUSH2 0x0100
000005b3: EXP
000005b4: SWAP1
000005b5: DIV
000005b6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005cb: AND
000005cc: SWAP1
000005cd: POP
000005ce: SWAP2
000005cf: SWAP1
000005d0: POP
000005d1: JUMP
000005d2: JUMPDEST
000005d3: PUSH1 0x00
000005d5: DUP2
000005d6: DUP2
000005d7: SLOAD
000005d8: DUP2
000005d9: LT
000005da: PUSH2 0x05df
000005dd: JUMPI
000005de: INVALID
000005df: JUMPDEST
000005e0: SWAP1
000005e1: PUSH1 0x00
000005e3: MSTORE
000005e4: PUSH1 0x20
000005e6: PUSH1 0x00
000005e8: KECCAK256
000005e9: ADD
000005ea: PUSH1 0x00
000005ec: SWAP2
000005ed: POP
000005ee: SLOAD
000005ef: SWAP1
000005f0: PUSH2 0x0100
000005f3: EXP
000005f4: SWAP1
000005f5: DIV
000005f6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000060b: AND
0000060c: DUP2
0000060d: JUMP
0000060e: JUMPDEST
0000060f: PUSH1 0x04
00000611: SLOAD
00000612: DUP2
00000613: JUMP
00000614: JUMPDEST
00000615: PUSH1 0x09
00000617: SLOAD
00000618: DUP2
00000619: JUMP
0000061a: JUMPDEST
0000061b: PUSH1 0x0c
0000061d: SLOAD
0000061e: DUP2
0000061f: JUMP
00000620: JUMPDEST
00000621: PUSH1 0x03
00000623: SLOAD
00000624: DUP2
00000625: JUMP
00000626: JUMPDEST
00000627: PUSH1 0x05
00000629: SLOAD
0000062a: DUP2
0000062b: JUMP
0000062c: JUMPDEST
0000062d: PUSH1 0x00
0000062f: DUP2
00000630: CALLDATALOAD
00000631: SWAP1
00000632: POP
00000633: PUSH2 0x063b
00000636: DUP2
00000637: PUSH2 0x0745
0000063a: JUMP
0000063b: JUMPDEST
0000063c: SWAP3
0000063d: SWAP2
0000063e: POP
0000063f: POP
00000640: JUMP
00000641: JUMPDEST
00000642: PUSH1 0x00
00000644: DUP2
00000645: CALLDATALOAD
00000646: SWAP1
00000647: POP
00000648: PUSH2 0x0650
0000064b: DUP2
0000064c: PUSH2 0x075c
0000064f: JUMP
00000650: JUMPDEST
00000651: SWAP3
00000652: SWAP2
00000653: POP
00000654: POP
00000655: JUMP
00000656: JUMPDEST
00000657: PUSH1 0x00
00000659: PUSH1 0x20
0000065b: DUP3
0000065c: DUP5
0000065d: SUB
0000065e: SLT
0000065f: ISZERO
00000660: PUSH2 0x0668
00000663: JUMPI
00000664: PUSH1 0x00
00000666: DUP1
00000667: REVERT
00000668: JUMPDEST
00000669: PUSH1 0x00
0000066b: PUSH2 0x0676
0000066e: DUP5
0000066f: DUP3
00000670: DUP6
00000671: ADD
00000672: PUSH2 0x062c
00000675: JUMP
00000676: JUMPDEST
00000677: SWAP2
00000678: POP
00000679: POP
0000067a: SWAP3
0000067b: SWAP2
0000067c: POP
0000067d: POP
0000067e: JUMP
0000067f: JUMPDEST
00000680: PUSH1 0x00
00000682: PUSH1 0x20
00000684: DUP3
00000685: DUP5
00000686: SUB
00000687: SLT
00000688: ISZERO
00000689: PUSH2 0x0691
0000068c: JUMPI
0000068d: PUSH1 0x00
0000068f: DUP1
00000690: REVERT
00000691: JUMPDEST
00000692: PUSH1 0x00
00000694: PUSH2 0x069f
00000697: DUP5
00000698: DUP3
00000699: DUP6
0000069a: ADD
0000069b: PUSH2 0x0641
0000069e: JUMP
0000069f: JUMPDEST
000006a0: SWAP2
000006a1: POP
000006a2: POP
000006a3: SWAP3
000006a4: SWAP2
000006a5: POP
000006a6: POP
000006a7: JUMP
000006a8: JUMPDEST
000006a9: PUSH2 0x06b1
000006ac: DUP2
000006ad: PUSH2 0x06fc
000006b0: JUMP
000006b1: JUMPDEST
000006b2: DUP3
000006b3: MSTORE
000006b4: POP
000006b5: POP
000006b6: JUMP
000006b7: JUMPDEST
000006b8: PUSH2 0x06c0
000006bb: DUP2
000006bc: PUSH2 0x073b
000006bf: JUMP
000006c0: JUMPDEST
000006c1: DUP3
000006c2: MSTORE
000006c3: POP
000006c4: POP
000006c5: JUMP
000006c6: JUMPDEST
000006c7: PUSH1 0x00
000006c9: PUSH1 0x20
000006cb: DUP3
000006cc: ADD
000006cd: SWAP1
000006ce: POP
000006cf: PUSH2 0x06db
000006d2: PUSH1 0x00
000006d4: DUP4
000006d5: ADD
000006d6: DUP5
000006d7: PUSH2 0x06a8
000006da: JUMP
000006db: JUMPDEST
000006dc: SWAP3
000006dd: SWAP2
000006de: POP
000006df: POP
000006e0: JUMP
000006e1: JUMPDEST
000006e2: PUSH1 0x00
000006e4: PUSH1 0x20
000006e6: DUP3
000006e7: ADD
000006e8: SWAP1
000006e9: POP
000006ea: PUSH2 0x06f6
000006ed: PUSH1 0x00
000006ef: DUP4
000006f0: ADD
000006f1: DUP5
000006f2: PUSH2 0x06b7
000006f5: JUMP
000006f6: JUMPDEST
000006f7: SWAP3
000006f8: SWAP2
000006f9: POP
000006fa: POP
000006fb: JUMP
000006fc: JUMPDEST
000006fd: PUSH1 0x00
000006ff: PUSH2 0x0707
00000702: DUP3
00000703: PUSH2 0x071b
00000706: JUMP
00000707: JUMPDEST
00000708: SWAP1
00000709: POP
0000070a: SWAP2
0000070b: SWAP1
0000070c: POP
0000070d: JUMP
0000070e: JUMPDEST
0000070f: PUSH1 0x00
00000711: DUP2
00000712: PUSH1 0x0f
00000714: SIGNEXTEND
00000715: SWAP1
00000716: POP
00000717: SWAP2
00000718: SWAP1
00000719: POP
0000071a: JUMP
0000071b: JUMPDEST
0000071c: PUSH1 0x00
0000071e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000733: DUP3
00000734: AND
00000735: SWAP1
00000736: POP
00000737: SWAP2
00000738: SWAP1
00000739: POP
0000073a: JUMP
0000073b: JUMPDEST
0000073c: PUSH1 0x00
0000073e: DUP2
0000073f: SWAP1
00000740: POP
00000741: SWAP2
00000742: SWAP1
00000743: POP
00000744: JUMP
00000745: JUMPDEST
00000746: PUSH2 0x074e
00000749: DUP2
0000074a: PUSH2 0x070e
0000074d: JUMP
0000074e: JUMPDEST
0000074f: DUP2
00000750: EQ
00000751: PUSH2 0x0759
00000754: JUMPI
00000755: PUSH1 0x00
00000757: DUP1
00000758: REVERT
00000759: JUMPDEST
0000075a: POP
0000075b: JUMP
0000075c: JUMPDEST
0000075d: PUSH2 0x0765
00000760: DUP2
00000761: PUSH2 0x073b
00000764: JUMP
00000765: JUMPDEST
00000766: DUP2
00000767: EQ
00000768: PUSH2 0x0770
0000076b: JUMPI
0000076c: PUSH1 0x00
0000076e: DUP1
0000076f: REVERT
00000770: JUMPDEST
00000771: POP
00000772: JUMP
00000773: INVALID
00000774: LOG2
00000775: PUSH5 0x6970667358
0000077b: UNKNOWN(0x22)
0000077c: SLT
0000077d: KECCAK256
0000077e: UNKNOWN(0xC1)
0000077f: UNKNOWN(0xA6)
00000780: DUP10
00000781: ADDMOD
00000782: UNKNOWN(0xBD)
00000783: UNKNOWN(0xEC)
00000784: UNKNOWN(0xDD)
00000785: UNKNOWN(0x27)
00000786: DUP1
00000787: DUP11
00000788: UNKNOWN(0x24)
00000789: PUSH32

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0x638c044a7eee2b4919d0cdb46974d327be8ffd2a559a7a4976ab3391295d27e9
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 192,
    "trace_id": "0x638c044a7eee2b4919d0cdb46974d327be8ffd2a559a7a4976ab3391295d27e9",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0xe0a0b586",
            "selector": "0xe0a0b586",
            "calldata_variants": [
                "0xe0a0b586",
                "0xe0a0b5860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xe3824462",
            "selector": "0xe3824462",
            "calldata_variants": [
                "0xe3824462",
                "0xe38244620000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf446c1d0",
            "selector": "0xf446c1d0",
            "calldata_variants": [
                "0xf446c1d0",
                "0xf446c1d00000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xfee3f7f9",
            "selector": "0xfee3f7f9",
            "calldata_variants": [
                "0xfee3f7f9",
                "0xfee3f7f90000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb71fdd37",
            "selector": "0xb71fdd37",
            "calldata_variants": [
                "0xb71fdd37",
                "0xb71fdd370000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb739953e",
            "selector": "0xb739953e",
            "calldata_variants": [
                "0xb739953e",
                "0xb739953e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xc296c84f",
            "selector": "0xc296c84f",
            "calldata_variants": [
                "0xc296c84f",
                "0xc296c84f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xddca3f43",
            "selector": "0xddca3f43",
            "calldata_variants": [
                "0xddca3f43",
                "0xddca3f430000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 304,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}
medium upgradeability cast DELEGATECALL present 80 no
view
evidence_json
{
    "notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
    "delegatecall_count": 1
}