TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba90a-911f-73eb-8cbb-91c2e8cd7092

complete
Chain ID
1
Address
Block Number
Created
Sat, Jan 10, 2026 5:53 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 proxy context implementation known
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
34337 artifact.fetch complete 1 / 3 3 months ago
34338 proxy.resolve complete 1 / 3 3 months ago
34339 tool.cast_disasm complete 1 / 3 3 months ago
34340 analysis.bundle complete 1 / 3 3 months ago
34341 capability.graph complete 1 / 3 3 months ago
34342 detector.run complete 1 / 3 3 months ago
34343 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: yes confirmed
Verified Source: yes
Proxy evidence
{
    "method": "etherscan+onchain",
    "status": "confirmed",
    "etherscan_hint": {
        "source": "etherscan",
        "etherscan": {
            "proxy_flag": true,
            "implementation": "0x22e7170c305298fe6a0132cbad6e3c0691b016de"
        }
    },
    "implementation": "0x22e7170c305298fe6a0132cbad6e3c0691b016de",
    "onchain_method": "eip1967"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
0
Total opcodes
945
Flags
delegatecall_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x005e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x4f1ef286
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x4f1ef286
00000024: EQ
00000025: PUSH2 0x00c4
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x8da5cb5b
0000002f: EQ
00000030: PUSH2 0x00d7
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xf2fde38b
0000003a: EQ
0000003b: PUSH2 0x0111
0000003e: JUMPI
0000003f: PUSH2 0x0065
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x01ffc9a7
0000004a: EQ
0000004b: PUSH2 0x006f
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x3659cfe6
00000055: EQ
00000056: PUSH2 0x00a4
00000059: JUMPI
0000005a: PUSH2 0x0065
0000005d: JUMP
0000005e: JUMPDEST
0000005f: CALLDATASIZE
00000060: PUSH2 0x0065
00000063: JUMPI
00000064: STOP
00000065: JUMPDEST
00000066: PUSH2 0x006d
00000069: PUSH2 0x0131
0000006c: JUMP
0000006d: JUMPDEST
0000006e: STOP
0000006f: JUMPDEST
00000070: CALLVALUE
00000071: DUP1
00000072: ISZERO
00000073: PUSH2 0x007b
00000076: JUMPI
00000077: PUSH1 0x00
00000079: DUP1
0000007a: REVERT
0000007b: JUMPDEST
0000007c: POP
0000007d: PUSH2 0x008f
00000080: PUSH2 0x008a
00000083: CALLDATASIZE
00000084: PUSH1 0x04
00000086: PUSH2 0x07a6
00000089: JUMP
0000008a: JUMPDEST
0000008b: PUSH2 0x017c
0000008e: JUMP
0000008f: JUMPDEST
00000090: PUSH1 0x40
00000092: MLOAD
00000093: SWAP1
00000094: ISZERO
00000095: ISZERO
00000096: DUP2
00000097: MSTORE
00000098: PUSH1 0x20
0000009a: ADD
0000009b: JUMPDEST
0000009c: PUSH1 0x40
0000009e: MLOAD
0000009f: DUP1
000000a0: SWAP2
000000a1: SUB
000000a2: SWAP1
000000a3: RETURN
000000a4: JUMPDEST
000000a5: CALLVALUE
000000a6: DUP1
000000a7: ISZERO
000000a8: PUSH2 0x00b0
000000ab: JUMPI
000000ac: PUSH1 0x00
000000ae: DUP1
000000af: REVERT
000000b0: JUMPDEST
000000b1: POP
000000b2: PUSH2 0x006d
000000b5: PUSH2 0x00bf
000000b8: CALLDATASIZE
000000b9: PUSH1 0x04
000000bb: PUSH2 0x0811
000000be: JUMP
000000bf: JUMPDEST
000000c0: PUSH2 0x034a
000000c3: JUMP
000000c4: JUMPDEST
000000c5: PUSH2 0x006d
000000c8: PUSH2 0x00d2
000000cb: CALLDATASIZE
000000cc: PUSH1 0x04
000000ce: PUSH2 0x082c
000000d1: JUMP
000000d2: JUMPDEST
000000d3: PUSH2 0x0421
000000d6: JUMP
000000d7: JUMPDEST
000000d8: CALLVALUE
000000d9: DUP1
000000da: ISZERO
000000db: PUSH2 0x00e3
000000de: JUMPI
000000df: PUSH1 0x00
000000e1: DUP1
000000e2: REVERT
000000e3: JUMPDEST
000000e4: POP
000000e5: PUSH2 0x00ec
000000e8: PUSH2 0x051c
000000eb: JUMP
000000ec: JUMPDEST
000000ed: PUSH1 0x40
000000ef: MLOAD
000000f0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000105: SWAP1
00000106: SWAP2
00000107: AND
00000108: DUP2
00000109: MSTORE
0000010a: PUSH1 0x20
0000010c: ADD
0000010d: PUSH2 0x009b
00000110: JUMP
00000111: JUMPDEST
00000112: CALLVALUE
00000113: DUP1
00000114: ISZERO
00000115: PUSH2 0x011d
00000118: JUMPI
00000119: PUSH1 0x00
0000011b: DUP1
0000011c: REVERT
0000011d: JUMPDEST
0000011e: POP
0000011f: PUSH2 0x006d
00000122: PUSH2 0x012c
00000125: CALLDATASIZE
00000126: PUSH1 0x04
00000128: PUSH2 0x0811
0000012b: JUMP
0000012c: JUMPDEST
0000012d: PUSH2 0x054b
00000130: JUMP
00000131: JUMPDEST
00000132: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000153: SLOAD
00000154: PUSH1 0x00
00000156: CALLDATASIZE
00000157: DUP2
00000158: DUP3
00000159: CALLDATACOPY
0000015a: DUP1
0000015b: DUP2
0000015c: CALLDATASIZE
0000015d: DUP4
0000015e: DUP6
0000015f: GAS
00000160: DELEGATECALL
00000161: SWAP2
00000162: POP
00000163: RETURNDATASIZE
00000164: DUP1
00000165: DUP3
00000166: DUP4
00000167: RETURNDATACOPY
00000168: DUP3
00000169: DUP1
0000016a: ISZERO
0000016b: PUSH2 0x0172
0000016e: JUMPI
0000016f: DUP2
00000170: DUP4
00000171: RETURN
00000172: JUMPDEST
00000173: DUP2
00000174: DUP4
00000175: REVERT
00000176: JUMPDEST
00000177: POP
00000178: POP
00000179: POP
0000017a: POP
0000017b: JUMP
0000017c: JUMPDEST
0000017d: PUSH1 0x00
0000017f: PUSH32 0x01ffc9a700000000000000000000000000000000000000000000000000000000
000001a0: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
000001c1: DUP4
000001c2: AND
000001c3: EQ
000001c4: DUP1
000001c5: PUSH2 0x020f
000001c8: JUMPI
000001c9: POP
000001ca: PUSH32 0x7f5828d000000000000000000000000000000000000000000000000000000000
000001eb: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
0000020c: DUP4
0000020d: AND
0000020e: EQ
0000020f: JUMPDEST
00000210: ISZERO
00000211: PUSH2 0x021c
00000214: JUMPI
00000215: POP
00000216: PUSH1 0x01
00000218: SWAP2
00000219: SWAP1
0000021a: POP
0000021b: JUMP
0000021c: JUMPDEST
0000021d: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
0000023e: DUP1
0000023f: DUP4
00000240: AND
00000241: EQ
00000242: ISZERO
00000243: PUSH2 0x024e
00000246: JUMPI
00000247: POP
00000248: PUSH1 0x00
0000024a: SWAP2
0000024b: SWAP1
0000024c: POP
0000024d: JUMP
0000024e: JUMPDEST
0000024f: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000270: SLOAD
00000271: PUSH1 0x40
00000273: MLOAD
00000274: PUSH32 0x01ffc9a700000000000000000000000000000000000000000000000000000000
00000295: DUP2
00000296: MSTORE
00000297: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
000002b8: DUP5
000002b9: AND
000002ba: PUSH1 0x04
000002bc: DUP3
000002bd: ADD
000002be: MSTORE
000002bf: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000002d4: DUP3
000002d5: AND
000002d6: SWAP1
000002d7: PUSH4 0x01ffc9a7
000002dc: SWAP1
000002dd: PUSH1 0x24
000002df: ADD
000002e0: PUSH1 0x20
000002e2: PUSH1 0x40
000002e4: MLOAD
000002e5: DUP1
000002e6: DUP4
000002e7: SUB
000002e8: DUP2
000002e9: DUP7
000002ea: GAS
000002eb: STATICCALL
000002ec: SWAP3
000002ed: POP
000002ee: POP
000002ef: POP
000002f0: DUP1
000002f1: ISZERO
000002f2: PUSH2 0x0336
000002f5: JUMPI
000002f6: POP
000002f7: PUSH1 0x40
000002f9: DUP1
000002fa: MLOAD
000002fb: PUSH1 0x1f
000002fd: RETURNDATASIZE
000002fe: SWAP1
000002ff: DUP2
00000300: ADD
00000301: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
00000322: AND
00000323: DUP3
00000324: ADD
00000325: SWAP1
00000326: SWAP3
00000327: MSTORE
00000328: PUSH2 0x0333
0000032b: SWAP2
0000032c: DUP2
0000032d: ADD
0000032e: SWAP1
0000032f: PUSH2 0x08af
00000332: JUMP
00000333: JUMPDEST
00000334: PUSH1 0x01
00000336: JUMPDEST
00000337: PUSH2 0x0343
0000033a: JUMPI
0000033b: POP
0000033c: PUSH1 0x00
0000033e: SWAP3
0000033f: SWAP2
00000340: POP
00000341: POP
00000342: JUMP
00000343: JUMPDEST
00000344: SWAP4
00000345: SWAP3
00000346: POP
00000347: POP
00000348: POP
00000349: JUMP
0000034a: JUMPDEST
0000034b: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000036c: SLOAD
0000036d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000382: AND
00000383: CALLER
00000384: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000399: AND
0000039a: EQ
0000039b: PUSH2 0x0405
0000039e: JUMPI
0000039f: PUSH1 0x40
000003a1: MLOAD
000003a2: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000003c3: DUP2
000003c4: MSTORE
000003c5: PUSH1 0x20
000003c7: PUSH1 0x04
000003c9: DUP3
000003ca: ADD
000003cb: MSTORE
000003cc: PUSH1 0x0e
000003ce: PUSH1 0x24
000003d0: DUP3
000003d1: ADD
000003d2: MSTORE
000003d3: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000
000003f4: PUSH1 0x44
000003f6: DUP3
000003f7: ADD
000003f8: MSTORE
000003f9: PUSH1 0x64
000003fb: ADD
000003fc: JUMPDEST
000003fd: PUSH1 0x40
000003ff: MLOAD
00000400: DUP1
00000401: SWAP2
00000402: SUB
00000403: SWAP1
00000404: REVERT
00000405: JUMPDEST
00000406: PUSH2 0x041e
00000409: DUP2
0000040a: PUSH1 0x40
0000040c: MLOAD
0000040d: DUP1
0000040e: PUSH1 0x20
00000410: ADD
00000411: PUSH1 0x40
00000413: MSTORE
00000414: DUP1
00000415: PUSH1 0x00
00000417: DUP2
00000418: MSTORE
00000419: POP
0000041a: PUSH2 0x060a
0000041d: JUMP
0000041e: JUMPDEST
0000041f: POP
00000420: JUMP
00000421: JUMPDEST
00000422: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000443: SLOAD
00000444: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000459: AND
0000045a: CALLER
0000045b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000470: AND
00000471: EQ
00000472: PUSH2 0x04d7
00000475: JUMPI
00000476: PUSH1 0x40
00000478: MLOAD
00000479: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000049a: DUP2
0000049b: MSTORE
0000049c: PUSH1 0x20
0000049e: PUSH1 0x04
000004a0: DUP3
000004a1: ADD
000004a2: MSTORE
000004a3: PUSH1 0x0e
000004a5: PUSH1 0x24
000004a7: DUP3
000004a8: ADD
000004a9: MSTORE
000004aa: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000
000004cb: PUSH1 0x44
000004cd: DUP3
000004ce: ADD
000004cf: MSTORE
000004d0: PUSH1 0x64
000004d2: ADD
000004d3: PUSH2 0x03fc
000004d6: JUMP
000004d7: JUMPDEST
000004d8: PUSH2 0x0517
000004db: DUP4
000004dc: DUP4
000004dd: DUP4
000004de: DUP1
000004df: DUP1
000004e0: PUSH1 0x1f
000004e2: ADD
000004e3: PUSH1 0x20
000004e5: DUP1
000004e6: SWAP2
000004e7: DIV
000004e8: MUL
000004e9: PUSH1 0x20
000004eb: ADD
000004ec: PUSH1 0x40
000004ee: MLOAD
000004ef: SWAP1
000004f0: DUP2
000004f1: ADD
000004f2: PUSH1 0x40
000004f4: MSTORE
000004f5: DUP1
000004f6: SWAP4
000004f7: SWAP3
000004f8: SWAP2
000004f9: SWAP1
000004fa: DUP2
000004fb: DUP2
000004fc: MSTORE
000004fd: PUSH1 0x20
000004ff: ADD
00000500: DUP4
00000501: DUP4
00000502: DUP1
00000503: DUP3
00000504: DUP5
00000505: CALLDATACOPY
00000506: PUSH1 0x00
00000508: SWAP3
00000509: ADD
0000050a: SWAP2
0000050b: SWAP1
0000050c: SWAP2
0000050d: MSTORE
0000050e: POP
0000050f: PUSH2 0x060a
00000512: SWAP3
00000513: POP
00000514: POP
00000515: POP
00000516: JUMP
00000517: JUMPDEST
00000518: POP
00000519: POP
0000051a: POP
0000051b: JUMP
0000051c: JUMPDEST
0000051d: PUSH1 0x00
0000051f: PUSH2 0x0546
00000522: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000543: SLOAD
00000544: SWAP1
00000545: JUMP
00000546: JUMPDEST
00000547: SWAP1
00000548: POP
00000549: SWAP1
0000054a: JUMP
0000054b: JUMPDEST
0000054c: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000056d: SLOAD
0000056e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000583: AND
00000584: CALLER
00000585: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000059a: AND
0000059b: EQ
0000059c: PUSH2 0x0601
0000059f: JUMPI
000005a0: PUSH1 0x40
000005a2: MLOAD
000005a3: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
000005c4: DUP2
000005c5: MSTORE
000005c6: PUSH1 0x20
000005c8: PUSH1 0x04
000005ca: DUP3
000005cb: ADD
000005cc: MSTORE
000005cd: PUSH1 0x0e
000005cf: PUSH1 0x24
000005d1: DUP3
000005d2: ADD
000005d3: MSTORE
000005d4: PUSH32 0x4e4f545f415554484f52495a4544000000000000000000000000000000000000
000005f5: PUSH1 0x44
000005f7: DUP3
000005f8: ADD
000005f9: MSTORE
000005fa: PUSH1 0x64
000005fc: ADD
000005fd: PUSH2 0x03fc
00000600: JUMP
00000601: JUMPDEST
00000602: PUSH2 0x041e
00000605: DUP2
00000606: PUSH2 0x06f9
00000609: JUMP
0000060a: JUMPDEST
0000060b: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000062c: DUP1
0000062d: SLOAD
0000062e: SWAP1
0000062f: DUP4
00000630: SWAP1
00000631: SSTORE
00000632: PUSH1 0x40
00000634: MLOAD
00000635: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000064a: DUP1
0000064b: DUP6
0000064c: AND
0000064d: SWAP2
0000064e: SWAP1
0000064f: DUP4
00000650: AND
00000651: SWAP1
00000652: PUSH32 0x5570d70a002632a7b0b3c9304cc89efb62d8da9eca0dbd7752c83b7379068296
00000673: SWAP1
00000674: PUSH1 0x00
00000676: SWAP1
00000677: LOG3
00000678: DUP2
00000679: MLOAD
0000067a: ISZERO
0000067b: PUSH2 0x0517
0000067e: JUMPI
0000067f: PUSH1 0x00
00000681: DUP4
00000682: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000697: AND
00000698: DUP4
00000699: PUSH1 0x40
0000069b: MLOAD
0000069c: PUSH2 0x06a5
0000069f: SWAP2
000006a0: SWAP1
000006a1: PUSH2 0x08d1
000006a4: JUMP
000006a5: JUMPDEST
000006a6: PUSH1 0x00
000006a8: PUSH1 0x40
000006aa: MLOAD
000006ab: DUP1
000006ac: DUP4
000006ad: SUB
000006ae: DUP2
000006af: DUP6
000006b0: GAS
000006b1: DELEGATECALL
000006b2: SWAP2
000006b3: POP
000006b4: POP
000006b5: RETURNDATASIZE
000006b6: DUP1
000006b7: PUSH1 0x00
000006b9: DUP2
000006ba: EQ
000006bb: PUSH2 0x06e0
000006be: JUMPI
000006bf: PUSH1 0x40
000006c1: MLOAD
000006c2: SWAP2
000006c3: POP
000006c4: PUSH1 0x1f
000006c6: NOT
000006c7: PUSH1 0x3f
000006c9: RETURNDATASIZE
000006ca: ADD
000006cb: AND
000006cc: DUP3
000006cd: ADD
000006ce: PUSH1 0x40
000006d0: MSTORE
000006d1: RETURNDATASIZE
000006d2: DUP3
000006d3: MSTORE
000006d4: RETURNDATASIZE
000006d5: PUSH1 0x00
000006d7: PUSH1 0x20
000006d9: DUP5
000006da: ADD
000006db: RETURNDATACOPY
000006dc: PUSH2 0x06e5
000006df: JUMP
000006e0: JUMPDEST
000006e1: PUSH1 0x60
000006e3: SWAP2
000006e4: POP
000006e5: JUMPDEST
000006e6: POP
000006e7: POP
000006e8: SWAP1
000006e9: POP
000006ea: DUP1
000006eb: PUSH2 0x0176
000006ee: JUMPI
000006ef: RETURNDATASIZE
000006f0: DUP1
000006f1: PUSH1 0x00
000006f3: DUP1
000006f4: RETURNDATACOPY
000006f5: DUP1
000006f6: PUSH1 0x00
000006f8: REVERT
000006f9: JUMPDEST
000006fa: PUSH1 0x00
000006fc: PUSH2 0x0723
000006ff: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000720: SLOAD
00000721: SWAP1
00000722: JUMP
00000723: JUMPDEST
00000724: SWAP1
00000725: POP
00000726: DUP2
00000727: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000748: SSTORE
00000749: DUP2
0000074a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000075f: AND
00000760: DUP2
00000761: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000776: AND
00000777: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0
00000798: PUSH1 0x40
0000079a: MLOAD
0000079b: PUSH1 0x40
0000079d: MLOAD
0000079e: DUP1
0000079f: SWAP2
000007a0: SUB
000007a1: SWAP1
000007a2: LOG3
000007a3: POP
000007a4: POP
000007a5: JUMP
000007a6: JUMPDEST
000007a7: PUSH1 0x00
000007a9: PUSH1 0x20
000007ab: DUP3
000007ac: DUP5
000007ad: SUB
000007ae: SLT
000007af: ISZERO
000007b0: PUSH2 0x07b8
000007b3: JUMPI
000007b4: PUSH1 0x00
000007b6: DUP1
000007b7: REVERT
000007b8: JUMPDEST
000007b9: DUP2
000007ba: CALLDATALOAD
000007bb: PUSH32 0xffffffff00000000000000000000000000000000000000000000000000000000
000007dc: DUP2
000007dd: AND
000007de: DUP2
000007df: EQ
000007e0: PUSH2 0x0343
000007e3: JUMPI
000007e4: PUSH1 0x00
000007e6: DUP1
000007e7: REVERT
000007e8: JUMPDEST
000007e9: DUP1
000007ea: CALLDATALOAD
000007eb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000800: DUP2
00000801: AND
00000802: DUP2
00000803: EQ
00000804: PUSH2 0x080c
00000807: JUMPI
00000808: PUSH1 0x00
0000080a: DUP1
0000080b: REVERT
0000080c: JUMPDEST
0000080d: SWAP2
0000080e: SWAP1
0000080f: POP
00000810: JUMP
00000811: JUMPDEST
00000812: PUSH1 0x00
00000814: PUSH1 0x20
00000816: DUP3
00000817: DUP5
00000818: SUB
00000819: SLT
0000081a: ISZERO
0000081b: PUSH2 0x0823
0000081e: JUMPI
0000081f: PUSH1 0x00
00000821: DUP1
00000822: REVERT
00000823: JUMPDEST
00000824: PUSH2 0x0343
00000827: DUP3
00000828: PUSH2 0x07e8
0000082b: JUMP
0000082c: JUMPDEST
0000082d: PUSH1 0x00
0000082f: DUP1
00000830: PUSH1 0x00
00000832: PUSH1 0x40
00000834: DUP5
00000835: DUP7
00000836: SUB
00000837: SLT
00000838: ISZERO
00000839: PUSH2 0x0841
0000083c: JUMPI
0000083d: PUSH1 0x00
0000083f: DUP1
00000840: REVERT
00000841: JUMPDEST
00000842: PUSH2 0x084a
00000845: DUP5
00000846: PUSH2 0x07e8
00000849: JUMP
0000084a: JUMPDEST
0000084b: SWAP3
0000084c: POP
0000084d: PUSH1 0x20
0000084f: DUP5
00000850: ADD
00000851: CALLDATALOAD
00000852: PUSH8 0xffffffffffffffff
0000085b: DUP1
0000085c: DUP3
0000085d: GT
0000085e: ISZERO
0000085f: PUSH2 0x0867
00000862: JUMPI
00000863: PUSH1 0x00
00000865: DUP1
00000866: REVERT
00000867: JUMPDEST
00000868: DUP2
00000869: DUP7
0000086a: ADD
0000086b: SWAP2
0000086c: POP
0000086d: DUP7
0000086e: PUSH1 0x1f
00000870: DUP4
00000871: ADD
00000872: SLT
00000873: PUSH2 0x087b
00000876: JUMPI
00000877: PUSH1 0x00
00000879: DUP1
0000087a: REVERT
0000087b: JUMPDEST
0000087c: DUP2
0000087d: CALLDATALOAD
0000087e: DUP2
0000087f: DUP2
00000880: GT
00000881: ISZERO
00000882: PUSH2 0x088a
00000885: JUMPI
00000886: PUSH1 0x00
00000888: DUP1
00000889: REVERT
0000088a: JUMPDEST
0000088b: DUP8
0000088c: PUSH1 0x20
0000088e: DUP3
0000088f: DUP6
00000890: ADD
00000891: ADD
00000892: GT
00000893: ISZERO
00000894: PUSH2 0x089c
00000897: JUMPI
00000898: PUSH1 0x00
0000089a: DUP1
0000089b: REVERT
0000089c: JUMPDEST
0000089d: PUSH1 0x20
0000089f: DUP4
000008a0: ADD
000008a1: SWAP5
000008a2: POP
000008a3: DUP1
000008a4: SWAP4
000008a5: POP
000008a6: POP
000008a7: POP
000008a8: POP
000008a9: SWAP3
000008aa: POP
000008ab: SWAP3
000008ac: POP
000008ad: SWAP3
000008ae: JUMP
000008af: JUMPDEST
000008b0: PUSH1 0x00
000008b2: PUSH1 0x20
000008b4: DUP3
000008b5: DUP5
000008b6: SUB
000008b7: SLT
000008b8: ISZERO
000008b9: PUSH2 0x08c1
000008bc: JUMPI
000008bd: PUSH1 0x00
000008bf: DUP1
000008c0: REVERT
000008c1: JUMPDEST
000008c2: DUP2
000008c3: MLOAD
000008c4: DUP1
000008c5: ISZERO
000008c6: ISZERO
000008c7: DUP2
000008c8: EQ
000008c9: PUSH2 0x0343
000008cc: JUMPI
000008cd: PUSH1 0x00
000008cf: DUP1
000008d0: REVERT
000008d1: JUMPDEST
000008d2: PUSH1 0x00
000008d4: DUP3
000008d5: MLOAD
000008d6: PUSH1 0x00
000008d8: JUMPDEST
000008d9: DUP2
000008da: DUP2
000008db: LT
000008dc: ISZERO
000008dd: PUSH2 0x08f2
000008e0: JUMPI
000008e1: PUSH1 0x20
000008e3: DUP2
000008e4: DUP7
000008e5: ADD
000008e6: DUP2
000008e7: ADD
000008e8: MLOAD
000008e9: DUP6
000008ea: DUP4
000008eb: ADD
000008ec: MSTORE
000008ed: ADD
000008ee: PUSH2 0x08d8
000008f1: JUMP
000008f2: JUMPDEST
000008f3: DUP2
000008f4: DUP2
000008f5: GT
000008f6: ISZERO
000008f7: PUSH2 0x0901
000008fa: JUMPI
000008fb: PUSH1 0x00
000008fd: DUP3
000008fe: DUP6
000008ff: ADD
00000900: MSTORE
00000901: JUMPDEST
00000902: POP
00000903: SWAP2
00000904: SWAP1
00000905: SWAP2
00000906: ADD
00000907: SWAP3
00000908: SWAP2
00000909: POP
0000090a: POP
0000090b: JUMP
0000090c: INVALID
0000090d: LOG2
0000090e: PUSH5 0x6970667358
00000914: UNKNOWN(0x22)
00000915: SLT
00000916: KECCAK256
00000917: MLOAD
00000918: UNKNOWN(0xBC)
00000919: UNKNOWN(0xAA)
0000091a: SWAP5
0000091b: CODESIZE
0000091c: MLOAD
0000091d: SIGNEXTEND
0000091e: BLOBBASEFEE
0000091f: CODECOPY
00000920: POP
00000921: MUL
00000922: EQ
00000923: UNKNOWN(0x4E)
00000924: UNKNOWN(0xBF)
00000925: UNKNOWN(0xC9)
00000926: UNKNOWN(0xC4)
00000927: BLOCKHASH
00000928: DUP10
00000929: UNKNOWN(0x29)
0000092a: PUSH20 0x47bdb504ed9e0aae04634cba64736f6c63430008
0000093f: EXP
00000940: STOP
00000941: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0xe581cc15cb3f450ac417fb0d979ee8851ab7fb326047a9aa90b4a8f4ae03531c
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "unknown",
    "attempts": 60,
    "trace_id": "0xe581cc15cb3f450ac417fb0d979ee8851ab7fb326047a9aa90b4a8f4ae03531c",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf2fde38b",
            "selector": "0xf2fde38b",
            "calldata_variants": [
                "0xf2fde38b",
                "0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x01ffc9a7",
            "selector": "0x01ffc9a7",
            "calldata_variants": [
                "0x01ffc9a7",
                "0x01ffc9a70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 352,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1713,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 899,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1114,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1412,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}
medium upgradeability cast DELEGATECALL present 80 no
view
evidence_json
{
    "notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
    "delegatecall_count": 2
}