TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba909-5439-73b6-bb7e-1693b3e92b07

complete
Chain ID
1
Address
Block Number
Created
Sat, Jan 10, 2026 5:51 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
34239 artifact.fetch complete 1 / 3 3 months ago
34240 proxy.resolve complete 1 / 3 3 months ago
34241 tool.cast_disasm complete 1 / 3 3 months ago
34242 analysis.bundle complete 1 / 3 3 months ago
34243 capability.graph complete 1 / 3 3 months ago
34244 detector.run complete 1 / 3 3 months ago
34245 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no not_proxy
Implementation:
Verified Source: yes
Proxy evidence
{
    "status": "not_proxy"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
4
EXT*/BALANCE
1
Total opcodes
1221
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0042
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH3 0x821de3
00000018: EQ
00000019: PUSH2 0x005b
0000001c: JUMPI
0000001d: DUP1
0000001e: PUSH4 0x19ab453c
00000023: EQ
00000024: PUSH2 0x009c
00000027: JUMPI
00000028: DUP1
00000029: PUSH4 0x3ef13367
0000002e: EQ
0000002f: PUSH2 0x00ed
00000032: JUMPI
00000033: DUP1
00000034: PUSH4 0x6b9f96ea
00000039: EQ
0000003a: PUSH2 0x013e
0000003d: JUMPI
0000003e: PUSH2 0x0051
00000041: JUMP
00000042: JUMPDEST
00000043: CALLDATASIZE
00000044: PUSH2 0x0051
00000047: JUMPI
00000048: PUSH2 0x004f
0000004b: PUSH2 0x0155
0000004e: JUMP
0000004f: JUMPDEST
00000050: STOP
00000051: JUMPDEST
00000052: PUSH2 0x0059
00000055: PUSH2 0x0155
00000058: JUMP
00000059: JUMPDEST
0000005a: STOP
0000005b: JUMPDEST
0000005c: CALLVALUE
0000005d: DUP1
0000005e: ISZERO
0000005f: PUSH2 0x0067
00000062: JUMPI
00000063: PUSH1 0x00
00000065: DUP1
00000066: REVERT
00000067: JUMPDEST
00000068: POP
00000069: PUSH2 0x0070
0000006c: PUSH2 0x02f5
0000006f: JUMP
00000070: JUMPDEST
00000071: PUSH1 0x40
00000073: MLOAD
00000074: DUP1
00000075: DUP3
00000076: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000008b: AND
0000008c: DUP2
0000008d: MSTORE
0000008e: PUSH1 0x20
00000090: ADD
00000091: SWAP2
00000092: POP
00000093: POP
00000094: PUSH1 0x40
00000096: MLOAD
00000097: DUP1
00000098: SWAP2
00000099: SUB
0000009a: SWAP1
0000009b: RETURN
0000009c: JUMPDEST
0000009d: CALLVALUE
0000009e: DUP1
0000009f: ISZERO
000000a0: PUSH2 0x00a8
000000a3: JUMPI
000000a4: PUSH1 0x00
000000a6: DUP1
000000a7: REVERT
000000a8: JUMPDEST
000000a9: POP
000000aa: PUSH2 0x00eb
000000ad: PUSH1 0x04
000000af: DUP1
000000b0: CALLDATASIZE
000000b1: SUB
000000b2: PUSH1 0x20
000000b4: DUP2
000000b5: LT
000000b6: ISZERO
000000b7: PUSH2 0x00bf
000000ba: JUMPI
000000bb: PUSH1 0x00
000000bd: DUP1
000000be: REVERT
000000bf: JUMPDEST
000000c0: DUP2
000000c1: ADD
000000c2: SWAP1
000000c3: DUP1
000000c4: DUP1
000000c5: CALLDATALOAD
000000c6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000db: AND
000000dc: SWAP1
000000dd: PUSH1 0x20
000000df: ADD
000000e0: SWAP1
000000e1: SWAP3
000000e2: SWAP2
000000e3: SWAP1
000000e4: POP
000000e5: POP
000000e6: POP
000000e7: PUSH2 0x0319
000000ea: JUMP
000000eb: JUMPDEST
000000ec: STOP
000000ed: JUMPDEST
000000ee: CALLVALUE
000000ef: DUP1
000000f0: ISZERO
000000f1: PUSH2 0x00f9
000000f4: JUMPI
000000f5: PUSH1 0x00
000000f7: DUP1
000000f8: REVERT
000000f9: JUMPDEST
000000fa: POP
000000fb: PUSH2 0x013c
000000fe: PUSH1 0x04
00000100: DUP1
00000101: CALLDATASIZE
00000102: SUB
00000103: PUSH1 0x20
00000105: DUP2
00000106: LT
00000107: ISZERO
00000108: PUSH2 0x0110
0000010b: JUMPI
0000010c: PUSH1 0x00
0000010e: DUP1
0000010f: REVERT
00000110: JUMPDEST
00000111: DUP2
00000112: ADD
00000113: SWAP1
00000114: DUP1
00000115: DUP1
00000116: CALLDATALOAD
00000117: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000012c: AND
0000012d: SWAP1
0000012e: PUSH1 0x20
00000130: ADD
00000131: SWAP1
00000132: SWAP3
00000133: SWAP2
00000134: SWAP1
00000135: POP
00000136: POP
00000137: POP
00000138: PUSH2 0x05bc
0000013b: JUMP
0000013c: JUMPDEST
0000013d: STOP
0000013e: JUMPDEST
0000013f: CALLVALUE
00000140: DUP1
00000141: ISZERO
00000142: PUSH2 0x014a
00000145: JUMPI
00000146: PUSH1 0x00
00000148: DUP1
00000149: REVERT
0000014a: JUMPDEST
0000014b: POP
0000014c: PUSH2 0x0153
0000014f: PUSH2 0x0155
00000152: JUMP
00000153: JUMPDEST
00000154: STOP
00000155: JUMPDEST
00000156: PUSH1 0x00
00000158: SELFBALANCE
00000159: SWAP1
0000015a: POP
0000015b: PUSH1 0x00
0000015d: DUP2
0000015e: EQ
0000015f: ISZERO
00000160: PUSH2 0x0169
00000163: JUMPI
00000164: POP
00000165: PUSH2 0x02f3
00000168: JUMP
00000169: JUMPDEST
0000016a: PUSH1 0x00
0000016c: DUP1
0000016d: PUSH1 0x00
0000016f: SWAP1
00000170: SLOAD
00000171: SWAP1
00000172: PUSH2 0x0100
00000175: EXP
00000176: SWAP1
00000177: DIV
00000178: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000018d: AND
0000018e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001a3: AND
000001a4: DUP3
000001a5: PUSH1 0x40
000001a7: MLOAD
000001a8: DUP1
000001a9: PUSH1 0x00
000001ab: ADD
000001ac: SWAP1
000001ad: POP
000001ae: PUSH1 0x00
000001b0: PUSH1 0x40
000001b2: MLOAD
000001b3: DUP1
000001b4: DUP4
000001b5: SUB
000001b6: DUP2
000001b7: DUP6
000001b8: DUP8
000001b9: GAS
000001ba: CALL
000001bb: SWAP3
000001bc: POP
000001bd: POP
000001be: POP
000001bf: RETURNDATASIZE
000001c0: DUP1
000001c1: PUSH1 0x00
000001c3: DUP2
000001c4: EQ
000001c5: PUSH2 0x01ea
000001c8: JUMPI
000001c9: PUSH1 0x40
000001cb: MLOAD
000001cc: SWAP2
000001cd: POP
000001ce: PUSH1 0x1f
000001d0: NOT
000001d1: PUSH1 0x3f
000001d3: RETURNDATASIZE
000001d4: ADD
000001d5: AND
000001d6: DUP3
000001d7: ADD
000001d8: PUSH1 0x40
000001da: MSTORE
000001db: RETURNDATASIZE
000001dc: DUP3
000001dd: MSTORE
000001de: RETURNDATASIZE
000001df: PUSH1 0x00
000001e1: PUSH1 0x20
000001e3: DUP5
000001e4: ADD
000001e5: RETURNDATACOPY
000001e6: PUSH2 0x01ef
000001e9: JUMP
000001ea: JUMPDEST
000001eb: PUSH1 0x60
000001ed: SWAP2
000001ee: POP
000001ef: JUMPDEST
000001f0: POP
000001f1: POP
000001f2: SWAP1
000001f3: POP
000001f4: DUP1
000001f5: PUSH2 0x0266
000001f8: JUMPI
000001f9: PUSH1 0x40
000001fb: MLOAD
000001fc: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000021d: DUP2
0000021e: MSTORE
0000021f: PUSH1 0x04
00000221: ADD
00000222: DUP1
00000223: DUP1
00000224: PUSH1 0x20
00000226: ADD
00000227: DUP3
00000228: DUP2
00000229: SUB
0000022a: DUP3
0000022b: MSTORE
0000022c: PUSH1 0x0c
0000022e: DUP2
0000022f: MSTORE
00000230: PUSH1 0x20
00000232: ADD
00000233: DUP1
00000234: PUSH32 0x466c757368206661696c65640000000000000000000000000000000000000000
00000255: DUP2
00000256: MSTORE
00000257: POP
00000258: PUSH1 0x20
0000025a: ADD
0000025b: SWAP2
0000025c: POP
0000025d: POP
0000025e: PUSH1 0x40
00000260: MLOAD
00000261: DUP1
00000262: SWAP2
00000263: SUB
00000264: SWAP1
00000265: REVERT
00000266: JUMPDEST
00000267: PUSH32 0x69b31548dea9b3b707b4dff357d326e3e9348b24e7a6080a218a6edeeec48f9b
00000288: CALLER
00000289: DUP4
0000028a: PUSH1 0x00
0000028c: CALLDATASIZE
0000028d: PUSH1 0x40
0000028f: MLOAD
00000290: DUP1
00000291: DUP6
00000292: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002a7: AND
000002a8: DUP2
000002a9: MSTORE
000002aa: PUSH1 0x20
000002ac: ADD
000002ad: DUP5
000002ae: DUP2
000002af: MSTORE
000002b0: PUSH1 0x20
000002b2: ADD
000002b3: DUP1
000002b4: PUSH1 0x20
000002b6: ADD
000002b7: DUP3
000002b8: DUP2
000002b9: SUB
000002ba: DUP3
000002bb: MSTORE
000002bc: DUP5
000002bd: DUP5
000002be: DUP3
000002bf: DUP2
000002c0: DUP2
000002c1: MSTORE
000002c2: PUSH1 0x20
000002c4: ADD
000002c5: SWAP3
000002c6: POP
000002c7: DUP1
000002c8: DUP3
000002c9: DUP5
000002ca: CALLDATACOPY
000002cb: PUSH1 0x00
000002cd: DUP2
000002ce: DUP5
000002cf: ADD
000002d0: MSTORE
000002d1: PUSH1 0x1f
000002d3: NOT
000002d4: PUSH1 0x1f
000002d6: DUP3
000002d7: ADD
000002d8: AND
000002d9: SWAP1
000002da: POP
000002db: DUP1
000002dc: DUP4
000002dd: ADD
000002de: SWAP3
000002df: POP
000002e0: POP
000002e1: POP
000002e2: SWAP6
000002e3: POP
000002e4: POP
000002e5: POP
000002e6: POP
000002e7: POP
000002e8: POP
000002e9: PUSH1 0x40
000002eb: MLOAD
000002ec: DUP1
000002ed: SWAP2
000002ee: SUB
000002ef: SWAP1
000002f0: LOG1
000002f1: POP
000002f2: POP
000002f3: JUMPDEST
000002f4: JUMP
000002f5: JUMPDEST
000002f6: PUSH1 0x00
000002f8: DUP1
000002f9: SLOAD
000002fa: SWAP1
000002fb: PUSH2 0x0100
000002fe: EXP
000002ff: SWAP1
00000300: DIV
00000301: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000316: AND
00000317: DUP2
00000318: JUMP
00000319: JUMPDEST
0000031a: PUSH1 0x00
0000031c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000331: AND
00000332: PUSH1 0x00
00000334: DUP1
00000335: SLOAD
00000336: SWAP1
00000337: PUSH2 0x0100
0000033a: EXP
0000033b: SWAP1
0000033c: DIV
0000033d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000352: AND
00000353: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000368: AND
00000369: EQ
0000036a: PUSH2 0x03db
0000036d: JUMPI
0000036e: PUSH1 0x40
00000370: MLOAD
00000371: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000392: DUP2
00000393: MSTORE
00000394: PUSH1 0x04
00000396: ADD
00000397: DUP1
00000398: DUP1
00000399: PUSH1 0x20
0000039b: ADD
0000039c: DUP3
0000039d: DUP2
0000039e: SUB
0000039f: DUP3
000003a0: MSTORE
000003a1: PUSH1 0x13
000003a3: DUP2
000003a4: MSTORE
000003a5: PUSH1 0x20
000003a7: ADD
000003a8: DUP1
000003a9: PUSH32 0x416c726561647920696e697469616c697a656400000000000000000000000000
000003ca: DUP2
000003cb: MSTORE
000003cc: POP
000003cd: PUSH1 0x20
000003cf: ADD
000003d0: SWAP2
000003d1: POP
000003d2: POP
000003d3: PUSH1 0x40
000003d5: MLOAD
000003d6: DUP1
000003d7: SWAP2
000003d8: SUB
000003d9: SWAP1
000003da: REVERT
000003db: JUMPDEST
000003dc: DUP1
000003dd: PUSH1 0x00
000003df: DUP1
000003e0: PUSH2 0x0100
000003e3: EXP
000003e4: DUP2
000003e5: SLOAD
000003e6: DUP2
000003e7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000003fc: MUL
000003fd: NOT
000003fe: AND
000003ff: SWAP1
00000400: DUP4
00000401: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000416: AND
00000417: MUL
00000418: OR
00000419: SWAP1
0000041a: SSTORE
0000041b: POP
0000041c: PUSH1 0x00
0000041e: SELFBALANCE
0000041f: SWAP1
00000420: POP
00000421: PUSH1 0x00
00000423: DUP2
00000424: EQ
00000425: ISZERO
00000426: PUSH2 0x042f
00000429: JUMPI
0000042a: POP
0000042b: PUSH2 0x05b9
0000042e: JUMP
0000042f: JUMPDEST
00000430: PUSH1 0x00
00000432: DUP1
00000433: PUSH1 0x00
00000435: SWAP1
00000436: SLOAD
00000437: SWAP1
00000438: PUSH2 0x0100
0000043b: EXP
0000043c: SWAP1
0000043d: DIV
0000043e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000453: AND
00000454: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000469: AND
0000046a: DUP3
0000046b: PUSH1 0x40
0000046d: MLOAD
0000046e: DUP1
0000046f: PUSH1 0x00
00000471: ADD
00000472: SWAP1
00000473: POP
00000474: PUSH1 0x00
00000476: PUSH1 0x40
00000478: MLOAD
00000479: DUP1
0000047a: DUP4
0000047b: SUB
0000047c: DUP2
0000047d: DUP6
0000047e: DUP8
0000047f: GAS
00000480: CALL
00000481: SWAP3
00000482: POP
00000483: POP
00000484: POP
00000485: RETURNDATASIZE
00000486: DUP1
00000487: PUSH1 0x00
00000489: DUP2
0000048a: EQ
0000048b: PUSH2 0x04b0
0000048e: JUMPI
0000048f: PUSH1 0x40
00000491: MLOAD
00000492: SWAP2
00000493: POP
00000494: PUSH1 0x1f
00000496: NOT
00000497: PUSH1 0x3f
00000499: RETURNDATASIZE
0000049a: ADD
0000049b: AND
0000049c: DUP3
0000049d: ADD
0000049e: PUSH1 0x40
000004a0: MSTORE
000004a1: RETURNDATASIZE
000004a2: DUP3
000004a3: MSTORE
000004a4: RETURNDATASIZE
000004a5: PUSH1 0x00
000004a7: PUSH1 0x20
000004a9: DUP5
000004aa: ADD
000004ab: RETURNDATACOPY
000004ac: PUSH2 0x04b5
000004af: JUMP
000004b0: JUMPDEST
000004b1: PUSH1 0x60
000004b3: SWAP2
000004b4: POP
000004b5: JUMPDEST
000004b6: POP
000004b7: POP
000004b8: SWAP1
000004b9: POP
000004ba: DUP1
000004bb: PUSH2 0x052c
000004be: JUMPI
000004bf: PUSH1 0x40
000004c1: MLOAD
000004c2: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000004e3: DUP2
000004e4: MSTORE
000004e5: PUSH1 0x04
000004e7: ADD
000004e8: DUP1
000004e9: DUP1
000004ea: PUSH1 0x20
000004ec: ADD
000004ed: DUP3
000004ee: DUP2
000004ef: SUB
000004f0: DUP3
000004f1: MSTORE
000004f2: PUSH1 0x0c
000004f4: DUP2
000004f5: MSTORE
000004f6: PUSH1 0x20
000004f8: ADD
000004f9: DUP1
000004fa: PUSH32 0x466c757368206661696c65640000000000000000000000000000000000000000
0000051b: DUP2
0000051c: MSTORE
0000051d: POP
0000051e: PUSH1 0x20
00000520: ADD
00000521: SWAP2
00000522: POP
00000523: POP
00000524: PUSH1 0x40
00000526: MLOAD
00000527: DUP1
00000528: SWAP2
00000529: SUB
0000052a: SWAP1
0000052b: REVERT
0000052c: JUMPDEST
0000052d: PUSH32 0x69b31548dea9b3b707b4dff357d326e3e9348b24e7a6080a218a6edeeec48f9b
0000054e: ADDRESS
0000054f: DUP4
00000550: PUSH1 0x00
00000552: CALLDATASIZE
00000553: PUSH1 0x40
00000555: MLOAD
00000556: DUP1
00000557: DUP6
00000558: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000056d: AND
0000056e: DUP2
0000056f: MSTORE
00000570: PUSH1 0x20
00000572: ADD
00000573: DUP5
00000574: DUP2
00000575: MSTORE
00000576: PUSH1 0x20
00000578: ADD
00000579: DUP1
0000057a: PUSH1 0x20
0000057c: ADD
0000057d: DUP3
0000057e: DUP2
0000057f: SUB
00000580: DUP3
00000581: MSTORE
00000582: DUP5
00000583: DUP5
00000584: DUP3
00000585: DUP2
00000586: DUP2
00000587: MSTORE
00000588: PUSH1 0x20
0000058a: ADD
0000058b: SWAP3
0000058c: POP
0000058d: DUP1
0000058e: DUP3
0000058f: DUP5
00000590: CALLDATACOPY
00000591: PUSH1 0x00
00000593: DUP2
00000594: DUP5
00000595: ADD
00000596: MSTORE
00000597: PUSH1 0x1f
00000599: NOT
0000059a: PUSH1 0x1f
0000059c: DUP3
0000059d: ADD
0000059e: AND
0000059f: SWAP1
000005a0: POP
000005a1: DUP1
000005a2: DUP4
000005a3: ADD
000005a4: SWAP3
000005a5: POP
000005a6: POP
000005a7: POP
000005a8: SWAP6
000005a9: POP
000005aa: POP
000005ab: POP
000005ac: POP
000005ad: POP
000005ae: POP
000005af: PUSH1 0x40
000005b1: MLOAD
000005b2: DUP1
000005b3: SWAP2
000005b4: SUB
000005b5: SWAP1
000005b6: LOG1
000005b7: POP
000005b8: POP
000005b9: JUMPDEST
000005ba: POP
000005bb: JUMP
000005bc: JUMPDEST
000005bd: PUSH1 0x00
000005bf: DUP1
000005c0: SLOAD
000005c1: SWAP1
000005c2: PUSH2 0x0100
000005c5: EXP
000005c6: SWAP1
000005c7: DIV
000005c8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005dd: AND
000005de: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000005f3: AND
000005f4: CALLER
000005f5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000060a: AND
0000060b: EQ
0000060c: PUSH2 0x067d
0000060f: JUMPI
00000610: PUSH1 0x40
00000612: MLOAD
00000613: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000634: DUP2
00000635: MSTORE
00000636: PUSH1 0x04
00000638: ADD
00000639: DUP1
0000063a: DUP1
0000063b: PUSH1 0x20
0000063d: ADD
0000063e: DUP3
0000063f: DUP2
00000640: SUB
00000641: DUP3
00000642: MSTORE
00000643: PUSH1 0x0b
00000645: DUP2
00000646: MSTORE
00000647: PUSH1 0x20
00000649: ADD
0000064a: DUP1
0000064b: PUSH32 0x4f6e6c7920506172656e74000000000000000000000000000000000000000000
0000066c: DUP2
0000066d: MSTORE
0000066e: POP
0000066f: PUSH1 0x20
00000671: ADD
00000672: SWAP2
00000673: POP
00000674: POP
00000675: PUSH1 0x40
00000677: MLOAD
00000678: DUP1
00000679: SWAP2
0000067a: SUB
0000067b: SWAP1
0000067c: REVERT
0000067d: JUMPDEST
0000067e: PUSH1 0x00
00000680: DUP2
00000681: SWAP1
00000682: POP
00000683: PUSH1 0x00
00000685: ADDRESS
00000686: SWAP1
00000687: POP
00000688: PUSH1 0x00
0000068a: DUP3
0000068b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006a0: AND
000006a1: PUSH4 0x70a08231
000006a6: DUP4
000006a7: PUSH1 0x40
000006a9: MLOAD
000006aa: DUP3
000006ab: PUSH4 0xffffffff
000006b0: AND
000006b1: PUSH1 0xe0
000006b3: SHL
000006b4: DUP2
000006b5: MSTORE
000006b6: PUSH1 0x04
000006b8: ADD
000006b9: DUP1
000006ba: DUP3
000006bb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006d0: AND
000006d1: DUP2
000006d2: MSTORE
000006d3: PUSH1 0x20
000006d5: ADD
000006d6: SWAP2
000006d7: POP
000006d8: POP
000006d9: PUSH1 0x20
000006db: PUSH1 0x40
000006dd: MLOAD
000006de: DUP1
000006df: DUP4
000006e0: SUB
000006e1: DUP2
000006e2: DUP7
000006e3: DUP1
000006e4: EXTCODESIZE
000006e5: ISZERO
000006e6: DUP1
000006e7: ISZERO
000006e8: PUSH2 0x06f0
000006eb: JUMPI
000006ec: PUSH1 0x00
000006ee: DUP1
000006ef: REVERT
000006f0: JUMPDEST
000006f1: POP
000006f2: GAS
000006f3: STATICCALL
000006f4: ISZERO
000006f5: DUP1
000006f6: ISZERO
000006f7: PUSH2 0x0704
000006fa: JUMPI
000006fb: RETURNDATASIZE
000006fc: PUSH1 0x00
000006fe: DUP1
000006ff: RETURNDATACOPY
00000700: RETURNDATASIZE
00000701: PUSH1 0x00
00000703: REVERT
00000704: JUMPDEST
00000705: POP
00000706: POP
00000707: POP
00000708: POP
00000709: PUSH1 0x40
0000070b: MLOAD
0000070c: RETURNDATASIZE
0000070d: PUSH1 0x20
0000070f: DUP2
00000710: LT
00000711: ISZERO
00000712: PUSH2 0x071a
00000715: JUMPI
00000716: PUSH1 0x00
00000718: DUP1
00000719: REVERT
0000071a: JUMPDEST
0000071b: DUP2
0000071c: ADD
0000071d: SWAP1
0000071e: DUP1
0000071f: DUP1
00000720: MLOAD
00000721: SWAP1
00000722: PUSH1 0x20
00000724: ADD
00000725: SWAP1
00000726: SWAP3
00000727: SWAP2
00000728: SWAP1
00000729: POP
0000072a: POP
0000072b: POP
0000072c: SWAP1
0000072d: POP
0000072e: PUSH1 0x00
00000730: DUP2
00000731: EQ
00000732: ISZERO
00000733: PUSH2 0x073e
00000736: JUMPI
00000737: POP
00000738: POP
00000739: POP
0000073a: PUSH2 0x076d
0000073d: JUMP
0000073e: JUMPDEST
0000073f: PUSH2 0x0769
00000742: DUP5
00000743: PUSH1 0x00
00000745: DUP1
00000746: SLOAD
00000747: SWAP1
00000748: PUSH2 0x0100
0000074b: EXP
0000074c: SWAP1
0000074d: DIV
0000074e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000763: AND
00000764: DUP4
00000765: PUSH2 0x0770
00000768: JUMP
00000769: JUMPDEST
0000076a: POP
0000076b: POP
0000076c: POP
0000076d: JUMPDEST
0000076e: POP
0000076f: JUMP
00000770: JUMPDEST
00000771: PUSH1 0x00
00000773: PUSH1 0x60
00000775: DUP5
00000776: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000078b: AND
0000078c: PUSH4 0xa9059cbb
00000791: DUP6
00000792: DUP6
00000793: PUSH1 0x40
00000795: MLOAD
00000796: PUSH1 0x24
00000798: ADD
00000799: DUP1
0000079a: DUP4
0000079b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007b0: AND
000007b1: DUP2
000007b2: MSTORE
000007b3: PUSH1 0x20
000007b5: ADD
000007b6: DUP3
000007b7: DUP2
000007b8: MSTORE
000007b9: PUSH1 0x20
000007bb: ADD
000007bc: SWAP3
000007bd: POP
000007be: POP
000007bf: POP
000007c0: PUSH1 0x40
000007c2: MLOAD
000007c3: PUSH1 0x20
000007c5: DUP2
000007c6: DUP4
000007c7: SUB
000007c8: SUB
000007c9: DUP2
000007ca: MSTORE
000007cb: SWAP1
000007cc: PUSH1 0x40
000007ce: MSTORE
000007cf: SWAP1
000007d0: PUSH1 0xe0
000007d2: SHL
000007d3: PUSH1 0x20
000007d5: DUP3
000007d6: ADD
000007d7: DUP1
000007d8: MLOAD
000007d9: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
000007f6: DUP4
000007f7: DUP2
000007f8: DUP4
000007f9: AND
000007fa: OR
000007fb: DUP4
000007fc: MSTORE
000007fd: POP
000007fe: POP
000007ff: POP
00000800: POP
00000801: PUSH1 0x40
00000803: MLOAD
00000804: DUP1
00000805: DUP3
00000806: DUP1
00000807: MLOAD
00000808: SWAP1
00000809: PUSH1 0x20
0000080b: ADD
0000080c: SWAP1
0000080d: DUP1
0000080e: DUP4
0000080f: DUP4
00000810: JUMPDEST
00000811: PUSH1 0x20
00000813: DUP4
00000814: LT
00000815: PUSH2 0x0833
00000818: JUMPI
00000819: DUP1
0000081a: MLOAD
0000081b: DUP3
0000081c: MSTORE
0000081d: PUSH1 0x20
0000081f: DUP3
00000820: ADD
00000821: SWAP2
00000822: POP
00000823: PUSH1 0x20
00000825: DUP2
00000826: ADD
00000827: SWAP1
00000828: POP
00000829: PUSH1 0x20
0000082b: DUP4
0000082c: SUB
0000082d: SWAP3
0000082e: POP
0000082f: PUSH2 0x0810
00000832: JUMP
00000833: JUMPDEST
00000834: PUSH1 0x01
00000836: DUP4
00000837: PUSH1 0x20
00000839: SUB
0000083a: PUSH2 0x0100
0000083d: EXP
0000083e: SUB
0000083f: DUP1
00000840: NOT
00000841: DUP3
00000842: MLOAD
00000843: AND
00000844: DUP2
00000845: DUP5
00000846: MLOAD
00000847: AND
00000848: DUP1
00000849: DUP3
0000084a: OR
0000084b: DUP6
0000084c: MSTORE
0000084d: POP
0000084e: POP
0000084f: POP
00000850: POP
00000851: POP
00000852: POP
00000853: SWAP1
00000854: POP
00000855: ADD
00000856: SWAP2
00000857: POP
00000858: POP
00000859: PUSH1 0x00
0000085b: PUSH1 0x40
0000085d: MLOAD
0000085e: DUP1
0000085f: DUP4
00000860: SUB
00000861: DUP2
00000862: PUSH1 0x00
00000864: DUP7
00000865: GAS
00000866: CALL
00000867: SWAP2
00000868: POP
00000869: POP
0000086a: RETURNDATASIZE
0000086b: DUP1
0000086c: PUSH1 0x00
0000086e: DUP2
0000086f: EQ
00000870: PUSH2 0x0895
00000873: JUMPI
00000874: PUSH1 0x40
00000876: MLOAD
00000877: SWAP2
00000878: POP
00000879: PUSH1 0x1f
0000087b: NOT
0000087c: PUSH1 0x3f
0000087e: RETURNDATASIZE
0000087f: ADD
00000880: AND
00000881: DUP3
00000882: ADD
00000883: PUSH1 0x40
00000885: MSTORE
00000886: RETURNDATASIZE
00000887: DUP3
00000888: MSTORE
00000889: RETURNDATASIZE
0000088a: PUSH1 0x00
0000088c: PUSH1 0x20
0000088e: DUP5
0000088f: ADD
00000890: RETURNDATACOPY
00000891: PUSH2 0x089a
00000894: JUMP
00000895: JUMPDEST
00000896: PUSH1 0x60
00000898: SWAP2
00000899: POP
0000089a: JUMPDEST
0000089b: POP
0000089c: SWAP2
0000089d: POP
0000089e: SWAP2
0000089f: POP
000008a0: DUP2
000008a1: DUP1
000008a2: ISZERO
000008a3: PUSH2 0x08da
000008a6: JUMPI
000008a7: POP
000008a8: PUSH1 0x00
000008aa: DUP2
000008ab: MLOAD
000008ac: EQ
000008ad: DUP1
000008ae: PUSH2 0x08d9
000008b1: JUMPI
000008b2: POP
000008b3: DUP1
000008b4: DUP1
000008b5: PUSH1 0x20
000008b7: ADD
000008b8: SWAP1
000008b9: MLOAD
000008ba: PUSH1 0x20
000008bc: DUP2
000008bd: LT
000008be: ISZERO
000008bf: PUSH2 0x08c7
000008c2: JUMPI
000008c3: PUSH1 0x00
000008c5: DUP1
000008c6: REVERT
000008c7: JUMPDEST
000008c8: DUP2
000008c9: ADD
000008ca: SWAP1
000008cb: DUP1
000008cc: DUP1
000008cd: MLOAD
000008ce: SWAP1
000008cf: PUSH1 0x20
000008d1: ADD
000008d2: SWAP1
000008d3: SWAP3
000008d4: SWAP2
000008d5: SWAP1
000008d6: POP
000008d7: POP
000008d8: POP
000008d9: JUMPDEST
000008da: JUMPDEST
000008db: PUSH2 0x092f
000008de: JUMPI
000008df: PUSH1 0x40
000008e1: MLOAD
000008e2: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000903: DUP2
00000904: MSTORE
00000905: PUSH1 0x04
00000907: ADD
00000908: DUP1
00000909: DUP1
0000090a: PUSH1 0x20
0000090c: ADD
0000090d: DUP3
0000090e: DUP2
0000090f: SUB
00000910: DUP3
00000911: MSTORE
00000912: PUSH1 0x2d
00000914: DUP2
00000915: MSTORE
00000916: PUSH1 0x20
00000918: ADD
00000919: DUP1
0000091a: PUSH2 0x0937
0000091d: PUSH1 0x2d
0000091f: SWAP2
00000920: CODECOPY
00000921: PUSH1 0x40
00000923: ADD
00000924: SWAP2
00000925: POP
00000926: POP
00000927: PUSH1 0x40
00000929: MLOAD
0000092a: DUP1
0000092b: SWAP2
0000092c: SUB
0000092d: SWAP1
0000092e: REVERT
0000092f: JUMPDEST
00000930: POP
00000931: POP
00000932: POP
00000933: POP
00000934: POP
00000935: JUMP
00000936: INVALID
00000937: SLOAD
00000938: PUSH19 0x616e7366657248656c7065723a3a7361666554
0000094c: PUSH19 0x616e736665723a207472616e73666572206661
00000960: PUSH10 0x6c6564a2646970667358
0000096b: UNKNOWN(0x22)
0000096c: SLT
0000096d: KECCAK256
0000096e: SWAP4
0000096f: BLOBBASEFEE
00000970: PUSH28 0x5f246917d20f5e049b9344e4f3d923110c9d150ea2a4118848dd414b
0000098d: UNKNOWN(0xC3)
0000098e: PUSH5 0x736f6c6343
00000994: STOP
00000995: SMOD
00000996: SDIV
00000997: STOP
00000998: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
medium other detector Untrusted CALL target/value reachable 45 no no
view
trace_id: 0x79d2ec635087eb910eb3640d3951ca8f5a10fadeb61fd6606950728683057ec8
call_targets: 0x059ffafdc6ef594230de44f824e2bd0a51ca5ded
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x79d2ec635087eb910eb3640d3951ca8f5a10fadeb61fd6606950728683057ec8",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x059ffafdc6ef594230de44f824e2bd0a51ca5ded"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x19ab453c",
            "selector": "0x19ab453c",
            "calldata_variants": [
                "0x19ab453c",
                "0x19ab453c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ef13367",
            "selector": "0x3ef13367",
            "calldata_variants": [
                "0x3ef13367",
                "0x3ef133670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6b9f96ea",
            "selector": "0x6b9f96ea",
            "calldata_variants": [
                "0x6b9f96ea",
                "0x6b9f96ea0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 442,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1152,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2150,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [
        {
            "pc": 1524,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "untrusted_call_count": 3
}
medium other detector ETH value transfer possible 40 no no
view
trace_id: 0x79d2ec635087eb910eb3640d3951ca8f5a10fadeb61fd6606950728683057ec8
call_targets: 0x059ffafdc6ef594230de44f824e2bd0a51ca5ded
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x79d2ec635087eb910eb3640d3951ca8f5a10fadeb61fd6606950728683057ec8",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x059ffafdc6ef594230de44f824e2bd0a51ca5ded"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x19ab453c",
            "selector": "0x19ab453c",
            "calldata_variants": [
                "0x19ab453c",
                "0x19ab453c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ef13367",
            "selector": "0x3ef13367",
            "calldata_variants": [
                "0x3ef13367",
                "0x3ef133670000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6b9f96ea",
            "selector": "0x6b9f96ea",
            "calldata_variants": [
                "0x6b9f96ea",
                "0x6b9f96ea0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 442,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1152,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 2150,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 3,
    "guards_detected": [
        {
            "pc": 1524,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ]
}