TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba90e-29d5-71c1-82c0-2566733ad399

complete
Chain ID
1
Address
Block Number
Created
Sat, Jan 10, 2026 5:57 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
34533 artifact.fetch complete 1 / 3 3 months ago
34534 proxy.resolve complete 1 / 3 3 months ago
34535 tool.cast_disasm complete 1 / 3 3 months ago
34536 analysis.bundle complete 1 / 3 3 months ago
34537 capability.graph complete 1 / 3 3 months ago
34538 detector.run complete 1 / 3 3 months ago
34539 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no not_proxy
Implementation:
Verified Source: no
Proxy evidence
{
    "status": "not_proxy"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
12
EXT*/BALANCE
2
Total opcodes
1415
Flags
call_family_heavy
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x008d
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x0c2f9cfe
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x0095
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x201d6986
00000025: EQ
00000026: PUSH2 0x00b2
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x3158952e
00000030: EQ
00000031: PUSH2 0x00d0
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x3ebfdaaf
0000003b: EQ
0000003c: PUSH2 0x00fc
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x4bd15dac
00000046: EQ
00000047: PUSH2 0x013d
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x6f449fa7
00000051: EQ
00000052: PUSH2 0x0151
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x826d3d13
0000005c: EQ
0000005d: PUSH2 0x0170
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x8ea98117
00000067: EQ
00000068: PUSH2 0x019f
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0x905b03e5
00000072: EQ
00000073: PUSH2 0x01c0
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xa6513562
0000007d: EQ
0000007e: PUSH2 0x0215
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xb1aeaa78
00000088: EQ
00000089: PUSH2 0x023a
0000008c: JUMPI
0000008d: JUMPDEST
0000008e: PUSH2 0x0258
00000091: PUSH2 0x0002
00000094: JUMP
00000095: JUMPDEST
00000096: PUSH2 0x0258
00000099: PUSH1 0x00
0000009b: SLOAD
0000009c: PUSH1 0x01
0000009e: PUSH1 0xa0
000000a0: PUSH1 0x02
000000a2: EXP
000000a3: SUB
000000a4: SWAP1
000000a5: DUP2
000000a6: AND
000000a7: CALLER
000000a8: SWAP1
000000a9: SWAP2
000000aa: AND
000000ab: EQ
000000ac: PUSH2 0x0285
000000af: JUMPI
000000b0: JUMPDEST
000000b1: JUMP
000000b2: JUMPDEST
000000b3: PUSH2 0x025a
000000b6: PUSH1 0x04
000000b8: CALLDATALOAD
000000b9: JUMPDEST
000000ba: PUSH1 0x0a
000000bc: SLOAD
000000bd: PUSH1 0x03
000000bf: SLOAD
000000c0: DUP3
000000c1: ADD
000000c2: DUP2
000000c3: DUP2
000000c4: DIV
000000c5: PUSH1 0x01
000000c7: ADD
000000c8: SWAP2
000000c9: DUP3
000000ca: MUL
000000cb: SUB
000000cc: SWAP2
000000cd: POP
000000ce: SWAP2
000000cf: JUMP
000000d0: JUMPDEST
000000d1: PUSH2 0x0258
000000d4: CALLER
000000d5: PUSH1 0x01
000000d7: PUSH1 0xa0
000000d9: PUSH1 0x02
000000db: EXP
000000dc: SUB
000000dd: AND
000000de: PUSH1 0x00
000000e0: SWAP1
000000e1: DUP2
000000e2: MSTORE
000000e3: PUSH1 0x0b
000000e5: PUSH1 0x20
000000e7: MSTORE
000000e8: PUSH1 0x40
000000ea: DUP2
000000eb: KECCAK256
000000ec: PUSH1 0x02
000000ee: ADD
000000ef: SLOAD
000000f0: PUSH1 0xff
000000f2: AND
000000f3: ISZERO
000000f4: PUSH2 0x03b3
000000f7: JUMPI
000000f8: PUSH2 0x03b0
000000fb: JUMP
000000fc: JUMPDEST
000000fd: PUSH2 0x0258
00000100: PUSH1 0x00
00000102: PUSH1 0x00
00000104: PUSH1 0x00
00000106: PUSH1 0x00
00000108: PUSH1 0x00
0000010a: PUSH1 0x00
0000010c: PUSH1 0x08
0000010e: PUSH1 0x00
00000110: POP
00000111: SLOAD
00000112: TIMESTAMP
00000113: LT
00000114: ISZERO
00000115: PUSH2 0x03c9
00000118: JUMPI
00000119: PUSH1 0x40
0000011b: MLOAD
0000011c: CALLER
0000011d: PUSH1 0x01
0000011f: PUSH1 0xa0
00000121: PUSH1 0x02
00000123: EXP
00000124: SUB
00000125: AND
00000126: SWAP1
00000127: DUP3
00000128: SWAP1
00000129: CALLVALUE
0000012a: SWAP1
0000012b: DUP3
0000012c: DUP2
0000012d: DUP2
0000012e: DUP2
0000012f: DUP6
00000130: DUP9
00000131: DUP4
00000132: CALL
00000133: SWAP4
00000134: POP
00000135: POP
00000136: POP
00000137: POP
00000138: POP
00000139: PUSH2 0x04f1
0000013c: JUMP
0000013d: JUMPDEST
0000013e: PUSH2 0x0258
00000141: PUSH1 0x04
00000143: SLOAD
00000144: PUSH1 0xff
00000146: AND
00000147: ISZERO
00000148: ISZERO
00000149: PUSH2 0x053a
0000014c: JUMPI
0000014d: PUSH2 0x00b0
00000150: JUMP
00000151: JUMPDEST
00000152: PUSH2 0x0258
00000155: PUSH1 0x00
00000157: DUP1
00000158: SLOAD
00000159: CALLER
0000015a: PUSH1 0x01
0000015c: PUSH1 0xa0
0000015e: PUSH1 0x02
00000160: EXP
00000161: SUB
00000162: SWAP1
00000163: DUP2
00000164: AND
00000165: SWAP2
00000166: AND
00000167: EQ
00000168: PUSH2 0x05b6
0000016b: JUMPI
0000016c: PUSH2 0x03b0
0000016f: JUMP
00000170: JUMPDEST
00000171: PUSH2 0x0273
00000174: PUSH1 0x04
00000176: CALLDATALOAD
00000177: PUSH1 0x01
00000179: PUSH1 0xa0
0000017b: PUSH1 0x02
0000017d: EXP
0000017e: SUB
0000017f: DUP2
00000180: AND
00000181: PUSH1 0x00
00000183: SWAP1
00000184: DUP2
00000185: MSTORE
00000186: PUSH1 0x0b
00000188: PUSH1 0x20
0000018a: MSTORE
0000018b: PUSH1 0x40
0000018d: DUP2
0000018e: KECCAK256
0000018f: PUSH1 0x02
00000191: ADD
00000192: SLOAD
00000193: PUSH1 0xff
00000195: AND
00000196: ISZERO
00000197: PUSH2 0x0675
0000019a: JUMPI
0000019b: PUSH2 0x0693
0000019e: JUMP
0000019f: JUMPDEST
000001a0: PUSH2 0x0258
000001a3: PUSH1 0x04
000001a5: CALLDATALOAD
000001a6: PUSH1 0x00
000001a8: SLOAD
000001a9: CALLER
000001aa: PUSH1 0x01
000001ac: PUSH1 0xa0
000001ae: PUSH1 0x02
000001b0: EXP
000001b1: SUB
000001b2: SWAP1
000001b3: DUP2
000001b4: AND
000001b5: SWAP2
000001b6: AND
000001b7: EQ
000001b8: PUSH2 0x0698
000001bb: JUMPI
000001bc: PUSH2 0x03b0
000001bf: JUMP
000001c0: JUMPDEST
000001c1: PUSH2 0x0258
000001c4: PUSH1 0x04
000001c6: CALLDATALOAD
000001c7: PUSH1 0x00
000001c9: SLOAD
000001ca: CALLER
000001cb: PUSH1 0x01
000001cd: PUSH1 0xa0
000001cf: PUSH1 0x02
000001d1: EXP
000001d2: SUB
000001d3: SWAP1
000001d4: DUP2
000001d5: AND
000001d6: SWAP2
000001d7: AND
000001d8: EQ
000001d9: DUP1
000001da: ISZERO
000001db: PUSH2 0x01ea
000001de: JUMPI
000001df: POP
000001e0: PUSH1 0x09
000001e2: SLOAD
000001e3: PUSH3 0x24ea00
000001e7: ADD
000001e8: TIMESTAMP
000001e9: GT
000001ea: JUMPDEST
000001eb: ISZERO
000001ec: PUSH2 0x03b0
000001ef: JUMPI
000001f0: PUSH1 0x40
000001f2: MLOAD
000001f3: PUSH1 0x01
000001f5: PUSH1 0xa0
000001f7: PUSH1 0x02
000001f9: EXP
000001fa: SUB
000001fb: DUP3
000001fc: DUP2
000001fd: AND
000001fe: SWAP2
000001ff: PUSH1 0x00
00000201: SWAP2
00000202: ADDRESS
00000203: AND
00000204: BALANCE
00000205: SWAP1
00000206: DUP3
00000207: DUP2
00000208: DUP2
00000209: DUP2
0000020a: DUP6
0000020b: DUP9
0000020c: DUP4
0000020d: CALL
0000020e: POP
0000020f: POP
00000210: POP
00000211: POP
00000212: POP
00000213: POP
00000214: JUMP
00000215: JUMPDEST
00000216: PUSH2 0x0273
00000219: PUSH1 0x04
0000021b: CALLDATALOAD
0000021c: JUMPDEST
0000021d: PUSH1 0x00
0000021f: DUP2
00000220: PUSH1 0x01
00000222: EQ
00000223: ISZERO
00000224: PUSH2 0x07d9
00000227: JUMPI
00000228: PUSH1 0x0a
0000022a: PUSH1 0x07
0000022c: PUSH1 0x00
0000022e: POP
0000022f: SLOAD
00000230: PUSH1 0x0f
00000232: MUL
00000233: DIV
00000234: SWAP1
00000235: POP
00000236: PUSH2 0x0693
00000239: JUMP
0000023a: JUMPDEST
0000023b: PUSH2 0x0258
0000023e: PUSH1 0x00
00000240: SLOAD
00000241: CALLER
00000242: PUSH1 0x01
00000244: PUSH1 0xa0
00000246: PUSH1 0x02
00000248: EXP
00000249: SUB
0000024a: SWAP1
0000024b: DUP2
0000024c: AND
0000024d: SWAP2
0000024e: AND
0000024f: EQ
00000250: PUSH2 0x0816
00000253: JUMPI
00000254: PUSH2 0x00b0
00000257: JUMP
00000258: JUMPDEST
00000259: STOP
0000025a: JUMPDEST
0000025b: PUSH1 0x40
0000025d: DUP1
0000025e: MLOAD
0000025f: SWAP3
00000260: DUP4
00000261: MSTORE
00000262: PUSH1 0x20
00000264: DUP4
00000265: ADD
00000266: SWAP2
00000267: SWAP1
00000268: SWAP2
00000269: MSTORE
0000026a: DUP1
0000026b: MLOAD
0000026c: SWAP2
0000026d: DUP3
0000026e: SWAP1
0000026f: SUB
00000270: ADD
00000271: SWAP1
00000272: RETURN
00000273: JUMPDEST
00000274: PUSH1 0x40
00000276: DUP1
00000277: MLOAD
00000278: SWAP2
00000279: DUP3
0000027a: MSTORE
0000027b: MLOAD
0000027c: SWAP1
0000027d: DUP2
0000027e: SWAP1
0000027f: SUB
00000280: PUSH1 0x20
00000282: ADD
00000283: SWAP1
00000284: RETURN
00000285: JUMPDEST
00000286: PUSH1 0x04
00000288: DUP1
00000289: SLOAD
0000028a: PUSH1 0xff
0000028c: NOT
0000028d: AND
0000028e: PUSH1 0x01
00000290: OR
00000291: SWAP1
00000292: SSTORE
00000293: JUMP
00000294: JUMPDEST
00000295: PUSH1 0x01
00000297: PUSH1 0xa0
00000299: PUSH1 0x02
0000029b: EXP
0000029c: SUB
0000029d: CALLER
0000029e: DUP2
0000029f: AND
000002a0: PUSH1 0x00
000002a2: SWAP1
000002a3: DUP2
000002a4: MSTORE
000002a5: PUSH1 0x0b
000002a7: PUSH1 0x20
000002a9: SWAP1
000002aa: DUP2
000002ab: MSTORE
000002ac: PUSH1 0x40
000002ae: DUP1
000002af: DUP4
000002b0: KECCAK256
000002b1: PUSH1 0x02
000002b3: ADD
000002b4: DUP1
000002b5: SLOAD
000002b6: PUSH1 0xff
000002b8: NOT
000002b9: AND
000002ba: PUSH1 0x01
000002bc: SWAP1
000002bd: DUP2
000002be: OR
000002bf: SWAP1
000002c0: SWAP2
000002c1: SSTORE
000002c2: DUP2
000002c3: MLOAD
000002c4: SWAP1
000002c5: SLOAD
000002c6: PUSH1 0xe0
000002c8: PUSH1 0x02
000002ca: EXP
000002cb: PUSH4 0x21f8a721
000002d0: MUL
000002d1: DUP3
000002d2: MSTORE
000002d3: PUSH32 0x746f6b656e000000000000000000000000000000000000000000000000000000
000002f4: PUSH1 0x04
000002f6: DUP4
000002f7: ADD
000002f8: MSTORE
000002f9: SWAP2
000002fa: MLOAD
000002fb: SWAP2
000002fc: SWAP1
000002fd: SWAP5
000002fe: AND
000002ff: SWAP4
00000300: PUSH4 0x21f8a721
00000305: SWAP4
00000306: PUSH1 0x24
00000308: DUP3
00000309: DUP2
0000030a: ADD
0000030b: SWAP5
0000030c: SWAP4
0000030d: SWAP3
0000030e: DUP4
0000030f: SWAP1
00000310: SUB
00000311: ADD
00000312: SWAP1
00000313: DUP3
00000314: SWAP1
00000315: DUP8
00000316: PUSH2 0x61da
00000319: GAS
0000031a: SUB
0000031b: CALL
0000031c: ISZERO
0000031d: PUSH2 0x0002
00000320: JUMPI
00000321: POP
00000322: POP
00000323: POP
00000324: PUSH1 0x40
00000326: MLOAD
00000327: DUP1
00000328: MLOAD
00000329: SWAP1
0000032a: PUSH1 0x20
0000032c: ADD
0000032d: POP
0000032e: SWAP1
0000032f: POP
00000330: DUP1
00000331: PUSH1 0x01
00000333: PUSH1 0xa0
00000335: PUSH1 0x02
00000337: EXP
00000338: SUB
00000339: AND
0000033a: PUSH4 0x9b5254eb
0000033f: CALLER
00000340: PUSH1 0x0b
00000342: PUSH1 0x00
00000344: POP
00000345: PUSH1 0x00
00000347: CALLER
00000348: PUSH1 0x01
0000034a: PUSH1 0xa0
0000034c: PUSH1 0x02
0000034e: EXP
0000034f: SUB
00000350: AND
00000351: DUP2
00000352: MSTORE
00000353: PUSH1 0x20
00000355: ADD
00000356: SWAP1
00000357: DUP2
00000358: MSTORE
00000359: PUSH1 0x20
0000035b: ADD
0000035c: PUSH1 0x00
0000035e: KECCAK256
0000035f: PUSH1 0x00
00000361: POP
00000362: PUSH1 0x01
00000364: ADD
00000365: PUSH1 0x00
00000367: POP
00000368: SLOAD
00000369: PUSH2 0x2710
0000036c: MUL
0000036d: PUSH1 0x40
0000036f: MLOAD
00000370: DUP4
00000371: PUSH1 0xe0
00000373: PUSH1 0x02
00000375: EXP
00000376: MUL
00000377: DUP2
00000378: MSTORE
00000379: PUSH1 0x04
0000037b: ADD
0000037c: DUP1
0000037d: DUP4
0000037e: PUSH1 0x01
00000380: PUSH1 0xa0
00000382: PUSH1 0x02
00000384: EXP
00000385: SUB
00000386: AND
00000387: DUP2
00000388: MSTORE
00000389: PUSH1 0x20
0000038b: ADD
0000038c: DUP3
0000038d: DUP2
0000038e: MSTORE
0000038f: PUSH1 0x20
00000391: ADD
00000392: SWAP3
00000393: POP
00000394: POP
00000395: POP
00000396: PUSH1 0x20
00000398: PUSH1 0x40
0000039a: MLOAD
0000039b: DUP1
0000039c: DUP4
0000039d: SUB
0000039e: DUP2
0000039f: PUSH1 0x00
000003a1: DUP8
000003a2: PUSH2 0x61da
000003a5: GAS
000003a6: SUB
000003a7: CALL
000003a8: ISZERO
000003a9: PUSH2 0x0002
000003ac: JUMPI
000003ad: POP
000003ae: POP
000003af: POP
000003b0: JUMPDEST
000003b1: POP
000003b2: JUMP
000003b3: JUMPDEST
000003b4: PUSH1 0x04
000003b6: SLOAD
000003b7: PUSH2 0x0100
000003ba: SWAP1
000003bb: DIV
000003bc: PUSH1 0xff
000003be: AND
000003bf: ISZERO
000003c0: ISZERO
000003c1: PUSH2 0x0294
000003c4: JUMPI
000003c5: PUSH2 0x03b0
000003c8: JUMP
000003c9: JUMPDEST
000003ca: PUSH1 0x04
000003cc: SLOAD
000003cd: PUSH1 0xff
000003cf: AND
000003d0: ISZERO
000003d1: PUSH2 0x03fa
000003d4: JUMPI
000003d5: PUSH1 0x40
000003d7: MLOAD
000003d8: CALLER
000003d9: PUSH1 0x01
000003db: PUSH1 0xa0
000003dd: PUSH1 0x02
000003df: EXP
000003e0: SUB
000003e1: AND
000003e2: SWAP1
000003e3: PUSH1 0x00
000003e5: SWAP1
000003e6: CALLVALUE
000003e7: SWAP1
000003e8: DUP3
000003e9: DUP2
000003ea: DUP2
000003eb: DUP2
000003ec: DUP6
000003ed: DUP9
000003ee: DUP4
000003ef: CALL
000003f0: SWAP4
000003f1: POP
000003f2: POP
000003f3: POP
000003f4: POP
000003f5: POP
000003f6: PUSH2 0x04f1
000003f9: JUMP
000003fa: JUMPDEST
000003fb: PUSH1 0x09
000003fd: SLOAD
000003fe: TIMESTAMP
000003ff: GT
00000400: ISZERO
00000401: PUSH2 0x042a
00000404: JUMPI
00000405: PUSH1 0x40
00000407: MLOAD
00000408: CALLER
00000409: PUSH1 0x01
0000040b: PUSH1 0xa0
0000040d: PUSH1 0x02
0000040f: EXP
00000410: SUB
00000411: AND
00000412: SWAP1
00000413: PUSH1 0x00
00000415: SWAP1
00000416: CALLVALUE
00000417: SWAP1
00000418: DUP3
00000419: DUP2
0000041a: DUP2
0000041b: DUP2
0000041c: DUP6
0000041d: DUP9
0000041e: DUP4
0000041f: CALL
00000420: SWAP4
00000421: POP
00000422: POP
00000423: POP
00000424: POP
00000425: POP
00000426: PUSH2 0x04f1
00000429: JUMP
0000042a: JUMPDEST
0000042b: PUSH1 0x02
0000042d: SLOAD
0000042e: PUSH1 0x06
00000430: SLOAD
00000431: SUB
00000432: CALLVALUE
00000433: GT
00000434: ISZERO
00000435: PUSH2 0x0471
00000438: JUMPI
00000439: PUSH1 0x02
0000043b: SLOAD
0000043c: PUSH1 0x06
0000043e: SLOAD
0000043f: PUSH1 0x40
00000441: MLOAD
00000442: SWAP2
00000443: SWAP1
00000444: SUB
00000445: SWAP7
00000446: POP
00000447: CALLER
00000448: PUSH1 0x01
0000044a: PUSH1 0xa0
0000044c: PUSH1 0x02
0000044e: EXP
0000044f: SUB
00000450: AND
00000451: SWAP1
00000452: PUSH1 0x00
00000454: SWAP1
00000455: CALLVALUE
00000456: DUP10
00000457: SWAP1
00000458: SUB
00000459: SWAP1
0000045a: DUP3
0000045b: DUP2
0000045c: DUP2
0000045d: DUP2
0000045e: DUP6
0000045f: DUP9
00000460: DUP4
00000461: CALL
00000462: SWAP4
00000463: POP
00000464: POP
00000465: POP
00000466: POP
00000467: ISZERO
00000468: ISZERO
00000469: PUSH2 0x048a
0000046c: JUMPI
0000046d: PUSH2 0x0002
00000470: JUMP
00000471: JUMPDEST
00000472: CALLVALUE
00000473: SWAP6
00000474: POP
00000475: JUMPDEST
00000476: POP
00000477: DUP5
00000478: JUMPDEST
00000479: PUSH1 0x00
0000047b: DUP2
0000047c: GT
0000047d: ISZERO
0000047e: PUSH2 0x04a1
00000481: JUMPI
00000482: PUSH2 0x04f9
00000485: DUP3
00000486: PUSH2 0x00b9
00000489: JUMP
0000048a: JUMPDEST
0000048b: PUSH2 0x0475
0000048e: JUMP
0000048f: JUMPDEST
00000490: PUSH8 0x0de0b6b3a7640000
00000499: DUP2
0000049a: DUP5
0000049b: MUL
0000049c: DIV
0000049d: SWAP1
0000049e: SWAP2
0000049f: ADD
000004a0: SWAP1
000004a1: JUMPDEST
000004a2: CALLER
000004a3: PUSH1 0x01
000004a5: PUSH1 0xa0
000004a7: PUSH1 0x02
000004a9: EXP
000004aa: SUB
000004ab: AND
000004ac: PUSH1 0x00
000004ae: SWAP1
000004af: DUP2
000004b0: MSTORE
000004b1: PUSH1 0x0b
000004b3: PUSH1 0x20
000004b5: MSTORE
000004b6: PUSH1 0x40
000004b8: SWAP1
000004b9: KECCAK256
000004ba: DUP1
000004bb: SLOAD
000004bc: DUP8
000004bd: ADD
000004be: DUP2
000004bf: SSTORE
000004c0: PUSH1 0x01
000004c2: ADD
000004c3: DUP1
000004c4: SLOAD
000004c5: DUP4
000004c6: ADD
000004c7: SWAP1
000004c8: SSTORE
000004c9: PUSH1 0x02
000004cb: DUP1
000004cc: SLOAD
000004cd: DUP8
000004ce: ADD
000004cf: SWAP1
000004d0: DUP2
000004d1: SWAP1
000004d2: SSTORE
000004d3: PUSH1 0x03
000004d5: DUP1
000004d6: SLOAD
000004d7: DUP5
000004d8: ADD
000004d9: SWAP1
000004da: SSTORE
000004db: PUSH1 0x06
000004dd: SLOAD
000004de: SWAP1
000004df: LT
000004e0: PUSH2 0x04f1
000004e3: JUMPI
000004e4: PUSH1 0x04
000004e6: DUP1
000004e7: SLOAD
000004e8: PUSH1 0xff
000004ea: NOT
000004eb: AND
000004ec: PUSH1 0x01
000004ee: OR
000004ef: SWAP1
000004f0: SSTORE
000004f1: JUMPDEST
000004f2: POP
000004f3: POP
000004f4: POP
000004f5: POP
000004f6: POP
000004f7: POP
000004f8: JUMP
000004f9: JUMPDEST
000004fa: SWAP1
000004fb: SWAP6
000004fc: POP
000004fd: SWAP4
000004fe: POP
000004ff: PUSH2 0x0507
00000502: DUP6
00000503: PUSH2 0x021c
00000506: JUMP
00000507: JUMPDEST
00000508: SWAP3
00000509: POP
0000050a: PUSH8 0x0de0b6b3a7640000
00000513: DUP4
00000514: DUP3
00000515: MUL
00000516: DIV
00000517: DUP5
00000518: SWAP1
00000519: GT
0000051a: ISZERO
0000051b: PUSH2 0x048f
0000051e: JUMPI
0000051f: SWAP1
00000520: DUP4
00000521: ADD
00000522: SWAP1
00000523: PUSH2 0x03e8
00000526: DUP5
00000527: MUL
00000528: DUP4
00000529: SWAP1
0000052a: DIV
0000052b: PUSH7 0x038d7ea4c68000
00000533: MUL
00000534: SWAP1
00000535: SUB
00000536: PUSH2 0x0478
00000539: JUMP
0000053a: JUMPDEST
0000053b: PUSH1 0x05
0000053d: SLOAD
0000053e: PUSH1 0x02
00000540: SLOAD
00000541: LT
00000542: PUSH2 0x054a
00000545: JUMPI
00000546: PUSH2 0x00b0
00000549: JUMP
0000054a: JUMPDEST
0000054b: CALLER
0000054c: PUSH1 0x01
0000054e: PUSH1 0xa0
00000550: PUSH1 0x02
00000552: EXP
00000553: SUB
00000554: AND
00000555: PUSH1 0x00
00000557: SWAP1
00000558: DUP2
00000559: MSTORE
0000055a: PUSH1 0x0b
0000055c: PUSH1 0x20
0000055e: MSTORE
0000055f: PUSH1 0x40
00000561: SWAP1
00000562: KECCAK256
00000563: PUSH1 0x02
00000565: ADD
00000566: SLOAD
00000567: PUSH1 0xff
00000569: AND
0000056a: ISZERO
0000056b: PUSH2 0x0573
0000056e: JUMPI
0000056f: PUSH2 0x00b0
00000572: JUMP
00000573: JUMPDEST
00000574: CALLER
00000575: PUSH1 0x01
00000577: PUSH1 0xa0
00000579: PUSH1 0x02
0000057b: EXP
0000057c: SUB
0000057d: AND
0000057e: PUSH1 0x00
00000580: DUP2
00000581: DUP2
00000582: MSTORE
00000583: PUSH1 0x0b
00000585: PUSH1 0x20
00000587: MSTORE
00000588: PUSH1 0x40
0000058a: DUP1
0000058b: DUP3
0000058c: KECCAK256
0000058d: PUSH1 0x02
0000058f: DUP2
00000590: ADD
00000591: DUP1
00000592: SLOAD
00000593: PUSH1 0xff
00000595: NOT
00000596: AND
00000597: PUSH1 0x01
00000599: OR
0000059a: SWAP1
0000059b: SSTORE
0000059c: SLOAD
0000059d: SWAP1
0000059e: MLOAD
0000059f: DUP3
000005a0: DUP2
000005a1: DUP2
000005a2: DUP2
000005a3: DUP6
000005a4: DUP9
000005a5: DUP4
000005a6: CALL
000005a7: SWAP4
000005a8: POP
000005a9: POP
000005aa: POP
000005ab: POP
000005ac: ISZERO
000005ad: ISZERO
000005ae: PUSH2 0x00b0
000005b1: JUMPI
000005b2: PUSH2 0x0002
000005b5: JUMP
000005b6: JUMPDEST
000005b7: PUSH1 0x04
000005b9: SLOAD
000005ba: PUSH1 0xff
000005bc: AND
000005bd: ISZERO
000005be: ISZERO
000005bf: PUSH2 0x05c7
000005c2: JUMPI
000005c3: PUSH2 0x03b0
000005c6: JUMP
000005c7: JUMPDEST
000005c8: PUSH1 0x05
000005ca: SLOAD
000005cb: PUSH1 0x02
000005cd: SLOAD
000005ce: LT
000005cf: ISZERO
000005d0: PUSH2 0x05d8
000005d3: JUMPI
000005d4: PUSH2 0x03b0
000005d7: JUMP
000005d8: JUMPDEST
000005d9: PUSH1 0x01
000005db: SLOAD
000005dc: PUSH1 0x40
000005de: DUP1
000005df: MLOAD
000005e0: PUSH1 0xe0
000005e2: PUSH1 0x02
000005e4: EXP
000005e5: PUSH4 0x21f8a721
000005ea: MUL
000005eb: DUP2
000005ec: MSTORE
000005ed: PUSH32 0x64616f0000000000000000000000000000000000000000000000000000000000
0000060e: PUSH1 0x04
00000610: DUP3
00000611: ADD
00000612: MSTORE
00000613: SWAP1
00000614: MLOAD
00000615: PUSH1 0x01
00000617: PUSH1 0xa0
00000619: PUSH1 0x02
0000061b: EXP
0000061c: SUB
0000061d: SWAP3
0000061e: SWAP1
0000061f: SWAP3
00000620: AND
00000621: SWAP2
00000622: PUSH4 0x21f8a721
00000627: SWAP2
00000628: PUSH1 0x24
0000062a: DUP2
0000062b: DUP2
0000062c: ADD
0000062d: SWAP3
0000062e: PUSH1 0x20
00000630: SWAP3
00000631: SWAP1
00000632: SWAP2
00000633: SWAP1
00000634: DUP3
00000635: SWAP1
00000636: SUB
00000637: ADD
00000638: DUP2
00000639: PUSH1 0x00
0000063b: DUP8
0000063c: PUSH2 0x61da
0000063f: GAS
00000640: SUB
00000641: CALL
00000642: ISZERO
00000643: PUSH2 0x0002
00000646: JUMPI
00000647: POP
00000648: POP
00000649: PUSH1 0x40
0000064b: MLOAD
0000064c: DUP1
0000064d: MLOAD
0000064e: SWAP3
0000064f: POP
00000650: PUSH1 0x01
00000652: PUSH1 0xa0
00000654: PUSH1 0x02
00000656: EXP
00000657: SUB
00000658: DUP4
00000659: DUP2
0000065a: AND
0000065b: SWAP3
0000065c: POP
0000065d: PUSH1 0x00
0000065f: SWAP2
00000660: ADDRESS
00000661: SWAP1
00000662: SWAP2
00000663: AND
00000664: BALANCE
00000665: SWAP1
00000666: DUP3
00000667: DUP2
00000668: DUP2
00000669: DUP2
0000066a: DUP6
0000066b: DUP9
0000066c: DUP4
0000066d: CALL
0000066e: POP
0000066f: POP
00000670: POP
00000671: POP
00000672: POP
00000673: POP
00000674: JUMP
00000675: JUMPDEST
00000676: POP
00000677: PUSH1 0x01
00000679: PUSH1 0xa0
0000067b: PUSH1 0x02
0000067d: EXP
0000067e: SUB
0000067f: DUP2
00000680: AND
00000681: PUSH1 0x00
00000683: SWAP1
00000684: DUP2
00000685: MSTORE
00000686: PUSH1 0x0b
00000688: PUSH1 0x20
0000068a: MSTORE
0000068b: PUSH1 0x40
0000068d: SWAP1
0000068e: KECCAK256
0000068f: PUSH1 0x01
00000691: ADD
00000692: SLOAD
00000693: JUMPDEST
00000694: SWAP2
00000695: SWAP1
00000696: POP
00000697: JUMP
00000698: JUMPDEST
00000699: DUP1
0000069a: PUSH1 0x01
0000069c: PUSH1 0xa0
0000069e: PUSH1 0x02
000006a0: EXP
000006a1: SUB
000006a2: AND
000006a3: PUSH1 0x00
000006a5: EQ
000006a6: ISZERO
000006a7: PUSH2 0x06af
000006aa: JUMPI
000006ab: PUSH2 0x03b0
000006ae: JUMP
000006af: JUMPDEST
000006b0: PUSH1 0x01
000006b2: SLOAD
000006b3: PUSH1 0x01
000006b5: PUSH1 0xa0
000006b7: PUSH1 0x02
000006b9: EXP
000006ba: SUB
000006bb: AND
000006bc: PUSH1 0x00
000006be: EQ
000006bf: PUSH2 0x0747
000006c2: JUMPI
000006c3: PUSH1 0x01
000006c5: SLOAD
000006c6: PUSH1 0x40
000006c8: DUP1
000006c9: MLOAD
000006ca: PUSH32 0x32a16f4e00000000000000000000000000000000000000000000000000000000
000006eb: DUP2
000006ec: MSTORE
000006ed: PUSH1 0xbc
000006ef: PUSH1 0x02
000006f1: EXP
000006f2: PUSH9 0x0746f6b656e7377617
000006fc: MUL
000006fd: PUSH1 0x04
000006ff: DUP3
00000700: ADD
00000701: MSTORE
00000702: SWAP1
00000703: MLOAD
00000704: PUSH1 0x01
00000706: PUSH1 0xa0
00000708: PUSH1 0x02
0000070a: EXP
0000070b: SUB
0000070c: SWAP3
0000070d: SWAP1
0000070e: SWAP3
0000070f: AND
00000710: SWAP2
00000711: PUSH4 0x32a16f4e
00000716: SWAP2
00000717: PUSH1 0x24
00000719: DUP2
0000071a: DUP2
0000071b: ADD
0000071c: SWAP3
0000071d: PUSH1 0x20
0000071f: SWAP3
00000720: SWAP1
00000721: SWAP2
00000722: SWAP1
00000723: DUP3
00000724: SWAP1
00000725: SUB
00000726: ADD
00000727: DUP2
00000728: PUSH1 0x00
0000072a: DUP8
0000072b: PUSH2 0x61da
0000072e: GAS
0000072f: SUB
00000730: CALL
00000731: ISZERO
00000732: PUSH2 0x0002
00000735: JUMPI
00000736: POP
00000737: POP
00000738: PUSH1 0x40
0000073a: MLOAD
0000073b: MLOAD
0000073c: ISZERO
0000073d: SWAP1
0000073e: POP
0000073f: PUSH2 0x0747
00000742: JUMPI
00000743: PUSH2 0x03b0
00000746: JUMP
00000747: JUMPDEST
00000748: DUP1
00000749: PUSH1 0x01
0000074b: PUSH1 0xa0
0000074d: PUSH1 0x02
0000074f: EXP
00000750: SUB
00000751: AND
00000752: PUSH4 0xe001f841
00000757: ADDRESS
00000758: PUSH1 0x40
0000075a: MLOAD
0000075b: DUP3
0000075c: PUSH1 0xe0
0000075e: PUSH1 0x02
00000760: EXP
00000761: MUL
00000762: DUP2
00000763: MSTORE
00000764: PUSH1 0x04
00000766: ADD
00000767: DUP1
00000768: DUP1
00000769: PUSH1 0xbc
0000076b: PUSH1 0x02
0000076d: EXP
0000076e: PUSH9 0x0746f6b656e7377617
00000778: MUL
00000779: DUP2
0000077a: MSTORE
0000077b: PUSH1 0x20
0000077d: ADD
0000077e: POP
0000077f: PUSH1 0x20
00000781: ADD
00000782: DUP3
00000783: PUSH1 0x01
00000785: PUSH1 0xa0
00000787: PUSH1 0x02
00000789: EXP
0000078a: SUB
0000078b: AND
0000078c: DUP2
0000078d: MSTORE
0000078e: PUSH1 0x20
00000790: ADD
00000791: SWAP2
00000792: POP
00000793: POP
00000794: PUSH1 0x20
00000796: PUSH1 0x40
00000798: MLOAD
00000799: DUP1
0000079a: DUP4
0000079b: SUB
0000079c: DUP2
0000079d: PUSH1 0x00
0000079f: DUP8
000007a0: PUSH2 0x61da
000007a3: GAS
000007a4: SUB
000007a5: CALL
000007a6: ISZERO
000007a7: PUSH2 0x0002
000007aa: JUMPI
000007ab: POP
000007ac: POP
000007ad: PUSH1 0x40
000007af: MLOAD
000007b0: MLOAD
000007b1: ISZERO
000007b2: SWAP1
000007b3: POP
000007b4: PUSH2 0x03b0
000007b7: JUMPI
000007b8: PUSH1 0x01
000007ba: DUP1
000007bb: SLOAD
000007bc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007d1: NOT
000007d2: AND
000007d3: DUP3
000007d4: OR
000007d5: SWAP1
000007d6: SSTORE
000007d7: POP
000007d8: JUMP
000007d9: JUMPDEST
000007da: DUP2
000007db: PUSH1 0x02
000007dd: EQ
000007de: ISZERO
000007df: PUSH2 0x07f3
000007e2: JUMPI
000007e3: POP
000007e4: PUSH1 0x07
000007e6: SLOAD
000007e7: PUSH1 0x0a
000007e9: PUSH1 0x0c
000007eb: SWAP1
000007ec: SWAP2
000007ed: MUL
000007ee: DIV
000007ef: PUSH2 0x0693
000007f2: JUMP
000007f3: JUMPDEST
000007f4: PUSH1 0x0a
000007f6: DUP3
000007f7: GT
000007f8: ISZERO
000007f9: PUSH2 0x080d
000007fc: JUMPI
000007fd: POP
000007fe: PUSH1 0x07
00000800: SLOAD
00000801: PUSH1 0x69
00000803: PUSH1 0x64
00000805: SWAP1
00000806: SWAP2
00000807: MUL
00000808: DIV
00000809: PUSH2 0x0693
0000080c: JUMP
0000080d: JUMPDEST
0000080e: POP
0000080f: PUSH1 0x07
00000811: SLOAD
00000812: PUSH2 0x0693
00000815: JUMP
00000816: JUMPDEST
00000817: PUSH1 0x04
00000819: SLOAD
0000081a: PUSH1 0xff
0000081c: AND
0000081d: ISZERO
0000081e: ISZERO
0000081f: PUSH2 0x0827
00000822: JUMPI
00000823: PUSH2 0x00b0
00000826: JUMP
00000827: JUMPDEST
00000828: PUSH1 0x05
0000082a: SLOAD
0000082b: PUSH1 0x02
0000082d: SLOAD
0000082e: LT
0000082f: ISZERO
00000830: PUSH2 0x0838
00000833: JUMPI
00000834: PUSH2 0x00b0
00000837: JUMP
00000838: JUMPDEST
00000839: PUSH1 0x04
0000083b: DUP1
0000083c: SLOAD
0000083d: PUSH2 0xff00
00000840: NOT
00000841: AND
00000842: PUSH2 0x0100
00000845: OR
00000846: SWAP1
00000847: SSTORE
00000848: JUMP

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0xb21531aea2e34d0fad5b066b19b622df03ecaef214186761d044f5a1b1fb445d
call_targets: 0x85c8dba38f5dd4d0b66526a164b80fe86ffed6c2
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xb21531aea2e34d0fad5b066b19b622df03ecaef214186761d044f5a1b1fb445d",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x85c8dba38f5dd4d0b66526a164b80fe86ffed6c2"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x0c2f9cfe",
            "selector": "0x0c2f9cfe",
            "calldata_variants": [
                "0x0c2f9cfe",
                "0x0c2f9cfe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x201d6986",
            "selector": "0x201d6986",
            "calldata_variants": [
                "0x201d6986",
                "0x201d69860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3158952e",
            "selector": "0x3158952e",
            "calldata_variants": [
                "0x3158952e",
                "0x3158952e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ebfdaaf",
            "selector": "0x3ebfdaaf",
            "calldata_variants": [
                "0x3ebfdaaf",
                "0x3ebfdaaf0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4bd15dac",
            "selector": "0x4bd15dac",
            "calldata_variants": [
                "0x4bd15dac",
                "0x4bd15dac0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6f449fa7",
            "selector": "0x6f449fa7",
            "calldata_variants": [
                "0x6f449fa7",
                "0x6f449fa70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x826d3d13",
            "selector": "0x826d3d13",
            "calldata_variants": [
                "0x826d3d13",
                "0x826d3d130000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8ea98117",
            "selector": "0x8ea98117",
            "calldata_variants": [
                "0x8ea98117",
                "0x8ea981170000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 306,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 525,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 795,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 12,
    "guards_detected": [],
    "untrusted_call_count": 12
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0xb21531aea2e34d0fad5b066b19b622df03ecaef214186761d044f5a1b1fb445d
call_targets: 0x85c8dba38f5dd4d0b66526a164b80fe86ffed6c2
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0xb21531aea2e34d0fad5b066b19b622df03ecaef214186761d044f5a1b1fb445d",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x85c8dba38f5dd4d0b66526a164b80fe86ffed6c2"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x0c2f9cfe",
            "selector": "0x0c2f9cfe",
            "calldata_variants": [
                "0x0c2f9cfe",
                "0x0c2f9cfe0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x201d6986",
            "selector": "0x201d6986",
            "calldata_variants": [
                "0x201d6986",
                "0x201d69860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3158952e",
            "selector": "0x3158952e",
            "calldata_variants": [
                "0x3158952e",
                "0x3158952e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3ebfdaaf",
            "selector": "0x3ebfdaaf",
            "calldata_variants": [
                "0x3ebfdaaf",
                "0x3ebfdaaf0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4bd15dac",
            "selector": "0x4bd15dac",
            "calldata_variants": [
                "0x4bd15dac",
                "0x4bd15dac0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6f449fa7",
            "selector": "0x6f449fa7",
            "calldata_variants": [
                "0x6f449fa7",
                "0x6f449fa70000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x826d3d13",
            "selector": "0x826d3d13",
            "calldata_variants": [
                "0x826d3d13",
                "0x826d3d130000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8ea98117",
            "selector": "0x8ea98117",
            "calldata_variants": [
                "0x8ea98117",
                "0x8ea981170000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 306,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 525,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 795,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 12,
    "guards_detected": []
}
info other cast Heavy CALL-family usage 55 no
view
evidence_json
{
    "notes": "large number of CALL/CALLCODE/STATICCALL opcodes; review external call patterns",
    "call_family_count": 12
}