TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba90f-8389-70dd-9e12-27f4e4ca62f7

complete
Chain ID
1
Address
Block Number
Created
Sat, Jan 10, 2026 5:58 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 proxy context implementation known
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
34799 artifact.fetch complete 1 / 3 3 months ago
34800 proxy.resolve complete 1 / 3 3 months ago
34801 tool.cast_disasm complete 1 / 3 3 months ago
34802 analysis.bundle complete 1 / 3 3 months ago
34803 capability.graph complete 1 / 3 3 months ago
34804 detector.run complete 1 / 3 3 months ago
34805 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: yes confirmed
Verified Source: yes
Proxy evidence
{
    "method": "etherscan+onchain",
    "status": "confirmed",
    "etherscan_hint": {
        "source": "etherscan",
        "etherscan": {
            "proxy_flag": true,
            "implementation": "0xe6874d09046173911a5e2bd4b4e6148dbb1b4f8a"
        }
    },
    "implementation": "0xe6874d09046173911a5e2bd4b4e6148dbb1b4f8a",
    "onchain_method": "eip1967"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
1
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
2
Total opcodes
983
Flags
delegatecall_present create_opcodes_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x005e
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x893d20e8
00000019: GT
0000001a: PUSH2 0x0043
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x893d20e8
00000024: EQ
00000025: PUSH2 0x00b5
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0x9b0b0fda
0000002f: EQ
00000030: PUSH2 0x00f3
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xaaf10f42
0000003a: EQ
0000003b: PUSH2 0x0113
0000003e: JUMPI
0000003f: PUSH2 0x006d
00000042: JUMP
00000043: JUMPDEST
00000044: DUP1
00000045: PUSH4 0x13af4035
0000004a: EQ
0000004b: PUSH2 0x0075
0000004e: JUMPI
0000004f: DUP1
00000050: PUSH4 0x6c5d4ad0
00000055: EQ
00000056: PUSH2 0x0095
00000059: JUMPI
0000005a: PUSH2 0x006d
0000005d: JUMP
0000005e: JUMPDEST
0000005f: CALLDATASIZE
00000060: PUSH2 0x006d
00000063: JUMPI
00000064: PUSH2 0x006b
00000067: PUSH2 0x0128
0000006a: JUMP
0000006b: JUMPDEST
0000006c: STOP
0000006d: JUMPDEST
0000006e: PUSH2 0x006b
00000071: PUSH2 0x0128
00000074: JUMP
00000075: JUMPDEST
00000076: CALLVALUE
00000077: DUP1
00000078: ISZERO
00000079: PUSH2 0x0081
0000007c: JUMPI
0000007d: PUSH1 0x00
0000007f: DUP1
00000080: REVERT
00000081: JUMPDEST
00000082: POP
00000083: PUSH2 0x006b
00000086: PUSH2 0x0090
00000089: CALLDATASIZE
0000008a: PUSH1 0x04
0000008c: PUSH2 0x07a2
0000008f: JUMP
00000090: JUMPDEST
00000091: PUSH2 0x03cb
00000094: JUMP
00000095: JUMPDEST
00000096: CALLVALUE
00000097: DUP1
00000098: ISZERO
00000099: PUSH2 0x00a1
0000009c: JUMPI
0000009d: PUSH1 0x00
0000009f: DUP1
000000a0: REVERT
000000a1: JUMPDEST
000000a2: POP
000000a3: PUSH2 0x006b
000000a6: PUSH2 0x00b0
000000a9: CALLDATASIZE
000000aa: PUSH1 0x04
000000ac: PUSH2 0x080e
000000af: JUMP
000000b0: JUMPDEST
000000b1: PUSH2 0x045c
000000b4: JUMP
000000b5: JUMPDEST
000000b6: CALLVALUE
000000b7: DUP1
000000b8: ISZERO
000000b9: PUSH2 0x00c1
000000bc: JUMPI
000000bd: PUSH1 0x00
000000bf: DUP1
000000c0: REVERT
000000c1: JUMPDEST
000000c2: POP
000000c3: PUSH2 0x00ca
000000c6: PUSH2 0x0611
000000c9: JUMP
000000ca: JUMPDEST
000000cb: PUSH1 0x40
000000cd: MLOAD
000000ce: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000000e3: SWAP1
000000e4: SWAP2
000000e5: AND
000000e6: DUP2
000000e7: MSTORE
000000e8: PUSH1 0x20
000000ea: ADD
000000eb: PUSH1 0x40
000000ed: MLOAD
000000ee: DUP1
000000ef: SWAP2
000000f0: SUB
000000f1: SWAP1
000000f2: RETURN
000000f3: JUMPDEST
000000f4: CALLVALUE
000000f5: DUP1
000000f6: ISZERO
000000f7: PUSH2 0x00ff
000000fa: JUMPI
000000fb: PUSH1 0x00
000000fd: DUP1
000000fe: REVERT
000000ff: JUMPDEST
00000100: POP
00000101: PUSH2 0x006b
00000104: PUSH2 0x010e
00000107: CALLDATASIZE
00000108: PUSH1 0x04
0000010a: PUSH2 0x08dd
0000010d: JUMP
0000010e: JUMPDEST
0000010f: PUSH2 0x06a8
00000112: JUMP
00000113: JUMPDEST
00000114: CALLVALUE
00000115: DUP1
00000116: ISZERO
00000117: PUSH2 0x011f
0000011a: JUMPI
0000011b: PUSH1 0x00
0000011d: DUP1
0000011e: REVERT
0000011f: JUMPDEST
00000120: POP
00000121: PUSH2 0x00ca
00000124: PUSH2 0x0716
00000127: JUMP
00000128: JUMPDEST
00000129: PUSH1 0x00
0000012b: PUSH2 0x0152
0000012e: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000014f: SLOAD
00000150: SWAP1
00000151: JUMP
00000152: JUMPDEST
00000153: PUSH1 0x40
00000155: DUP1
00000156: MLOAD
00000157: PUSH1 0x04
00000159: DUP2
0000015a: MSTORE
0000015b: PUSH1 0x24
0000015d: DUP2
0000015e: ADD
0000015f: DUP3
00000160: MSTORE
00000161: PUSH1 0x20
00000163: DUP2
00000164: ADD
00000165: DUP1
00000166: MLOAD
00000167: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff
00000184: AND
00000185: PUSH32 0xb794726200000000000000000000000000000000000000000000000000000000
000001a6: OR
000001a7: SWAP1
000001a8: MSTORE
000001a9: SWAP1
000001aa: MLOAD
000001ab: SWAP2
000001ac: SWAP3
000001ad: POP
000001ae: PUSH1 0x00
000001b0: SWAP2
000001b1: DUP3
000001b2: SWAP2
000001b3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000001c8: DUP6
000001c9: AND
000001ca: SWAP2
000001cb: PUSH2 0x01d4
000001ce: SWAP2
000001cf: SWAP1
000001d0: PUSH2 0x093a
000001d3: JUMP
000001d4: JUMPDEST
000001d5: PUSH1 0x00
000001d7: PUSH1 0x40
000001d9: MLOAD
000001da: DUP1
000001db: DUP4
000001dc: SUB
000001dd: DUP2
000001de: DUP6
000001df: GAS
000001e0: STATICCALL
000001e1: SWAP2
000001e2: POP
000001e3: POP
000001e4: RETURNDATASIZE
000001e5: DUP1
000001e6: PUSH1 0x00
000001e8: DUP2
000001e9: EQ
000001ea: PUSH2 0x020f
000001ed: JUMPI
000001ee: PUSH1 0x40
000001f0: MLOAD
000001f1: SWAP2
000001f2: POP
000001f3: PUSH1 0x1f
000001f5: NOT
000001f6: PUSH1 0x3f
000001f8: RETURNDATASIZE
000001f9: ADD
000001fa: AND
000001fb: DUP3
000001fc: ADD
000001fd: PUSH1 0x40
000001ff: MSTORE
00000200: RETURNDATASIZE
00000201: DUP3
00000202: MSTORE
00000203: RETURNDATASIZE
00000204: PUSH1 0x00
00000206: PUSH1 0x20
00000208: DUP5
00000209: ADD
0000020a: RETURNDATACOPY
0000020b: PUSH2 0x0214
0000020e: JUMP
0000020f: JUMPDEST
00000210: PUSH1 0x60
00000212: SWAP2
00000213: POP
00000214: JUMPDEST
00000215: POP
00000216: SWAP2
00000217: POP
00000218: SWAP2
00000219: POP
0000021a: DUP2
0000021b: DUP1
0000021c: ISZERO
0000021d: PUSH2 0x0227
00000220: JUMPI
00000221: POP
00000222: DUP1
00000223: MLOAD
00000224: PUSH1 0x20
00000226: EQ
00000227: JUMPDEST
00000228: ISZERO
00000229: PUSH2 0x02d9
0000022c: JUMPI
0000022d: PUSH1 0x00
0000022f: DUP2
00000230: DUP1
00000231: PUSH1 0x20
00000233: ADD
00000234: SWAP1
00000235: MLOAD
00000236: DUP2
00000237: ADD
00000238: SWAP1
00000239: PUSH2 0x0242
0000023c: SWAP2
0000023d: SWAP1
0000023e: PUSH2 0x0946
00000241: JUMP
00000242: JUMPDEST
00000243: SWAP1
00000244: POP
00000245: DUP1
00000246: ISZERO
00000247: PUSH2 0x02d7
0000024a: JUMPI
0000024b: PUSH1 0x40
0000024d: MLOAD
0000024e: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
0000026f: DUP2
00000270: MSTORE
00000271: PUSH1 0x20
00000273: PUSH1 0x04
00000275: DUP3
00000276: ADD
00000277: MSTORE
00000278: PUSH1 0x35
0000027a: PUSH1 0x24
0000027c: DUP3
0000027d: ADD
0000027e: MSTORE
0000027f: PUSH32 0x4c314368756753706c61736850726f78793a2073797374656d20697320637572
000002a0: PUSH1 0x44
000002a2: DUP3
000002a3: ADD
000002a4: MSTORE
000002a5: PUSH32 0x72656e746c79206265696e672075706772616465640000000000000000000000
000002c6: PUSH1 0x64
000002c8: DUP3
000002c9: ADD
000002ca: MSTORE
000002cb: PUSH1 0x84
000002cd: ADD
000002ce: JUMPDEST
000002cf: PUSH1 0x40
000002d1: MLOAD
000002d2: DUP1
000002d3: SWAP2
000002d4: SUB
000002d5: SWAP1
000002d6: REVERT
000002d7: JUMPDEST
000002d8: POP
000002d9: JUMPDEST
000002da: PUSH1 0x00
000002dc: PUSH2 0x0303
000002df: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000300: SLOAD
00000301: SWAP1
00000302: JUMP
00000303: JUMPDEST
00000304: SWAP1
00000305: POP
00000306: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000031b: DUP2
0000031c: AND
0000031d: PUSH2 0x03a8
00000320: JUMPI
00000321: PUSH1 0x40
00000323: MLOAD
00000324: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000345: DUP2
00000346: MSTORE
00000347: PUSH1 0x20
00000349: PUSH1 0x04
0000034b: DUP3
0000034c: ADD
0000034d: MSTORE
0000034e: PUSH1 0x30
00000350: PUSH1 0x24
00000352: DUP3
00000353: ADD
00000354: MSTORE
00000355: PUSH32 0x4c314368756753706c61736850726f78793a20696d706c656d656e746174696f
00000376: PUSH1 0x44
00000378: DUP3
00000379: ADD
0000037a: MSTORE
0000037b: PUSH32 0x6e206973206e6f74207365742079657400000000000000000000000000000000
0000039c: PUSH1 0x64
0000039e: DUP3
0000039f: ADD
000003a0: MSTORE
000003a1: PUSH1 0x84
000003a3: ADD
000003a4: PUSH2 0x02ce
000003a7: JUMP
000003a8: JUMPDEST
000003a9: CALLDATASIZE
000003aa: PUSH1 0x00
000003ac: DUP1
000003ad: CALLDATACOPY
000003ae: PUSH1 0x00
000003b0: DUP1
000003b1: CALLDATASIZE
000003b2: PUSH1 0x00
000003b4: DUP5
000003b5: GAS
000003b6: DELEGATECALL
000003b7: RETURNDATASIZE
000003b8: PUSH1 0x00
000003ba: DUP1
000003bb: RETURNDATACOPY
000003bc: DUP1
000003bd: PUSH2 0x03c5
000003c0: JUMPI
000003c1: RETURNDATASIZE
000003c2: PUSH1 0x00
000003c4: REVERT
000003c5: JUMPDEST
000003c6: POP
000003c7: RETURNDATASIZE
000003c8: PUSH1 0x00
000003ca: RETURN
000003cb: JUMPDEST
000003cc: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000003ed: SLOAD
000003ee: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000403: AND
00000404: CALLER
00000405: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000041a: AND
0000041b: EQ
0000041c: DUP1
0000041d: PUSH2 0x0424
00000420: JUMPI
00000421: POP
00000422: CALLER
00000423: ISZERO
00000424: JUMPDEST
00000425: ISZERO
00000426: PUSH2 0x0454
00000429: JUMPI
0000042a: PUSH2 0x0451
0000042d: DUP2
0000042e: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000044f: SSTORE
00000450: JUMP
00000451: JUMPDEST
00000452: POP
00000453: JUMP
00000454: JUMPDEST
00000455: PUSH2 0x0451
00000458: PUSH2 0x0128
0000045b: JUMP
0000045c: JUMPDEST
0000045d: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000047e: SLOAD
0000047f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000494: AND
00000495: CALLER
00000496: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000004ab: AND
000004ac: EQ
000004ad: DUP1
000004ae: PUSH2 0x04b5
000004b1: JUMPI
000004b2: POP
000004b3: CALLER
000004b4: ISZERO
000004b5: JUMPDEST
000004b6: ISZERO
000004b7: PUSH2 0x0454
000004ba: JUMPI
000004bb: PUSH1 0x00
000004bd: PUSH2 0x04e4
000004c0: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
000004e1: SLOAD
000004e2: SWAP1
000004e3: JUMP
000004e4: JUMPDEST
000004e5: SWAP1
000004e6: POP
000004e7: DUP1
000004e8: EXTCODEHASH
000004e9: DUP3
000004ea: MLOAD
000004eb: PUSH1 0x20
000004ed: DUP5
000004ee: ADD
000004ef: KECCAK256
000004f0: SUB
000004f1: PUSH2 0x04f8
000004f4: JUMPI
000004f5: POP
000004f6: POP
000004f7: JUMP
000004f8: JUMPDEST
000004f9: PUSH1 0x40
000004fb: MLOAD
000004fc: PUSH1 0x00
000004fe: SWAP1
000004ff: PUSH2 0x052e
00000502: SWAP1
00000503: PUSH32 0x600d380380600d6000396000f300000000000000000000000000000000000000
00000524: SWAP1
00000525: DUP6
00000526: SWAP1
00000527: PUSH1 0x20
00000529: ADD
0000052a: PUSH2 0x095f
0000052d: JUMP
0000052e: JUMPDEST
0000052f: PUSH1 0x40
00000531: MLOAD
00000532: PUSH1 0x20
00000534: DUP2
00000535: DUP4
00000536: SUB
00000537: SUB
00000538: DUP2
00000539: MSTORE
0000053a: SWAP1
0000053b: PUSH1 0x40
0000053d: MSTORE
0000053e: SWAP1
0000053f: POP
00000540: PUSH1 0x00
00000542: DUP2
00000543: MLOAD
00000544: PUSH1 0x20
00000546: DUP4
00000547: ADD
00000548: PUSH1 0x00
0000054a: CREATE
0000054b: DUP5
0000054c: MLOAD
0000054d: PUSH1 0x20
0000054f: DUP7
00000550: ADD
00000551: KECCAK256
00000552: SWAP1
00000553: SWAP2
00000554: POP
00000555: DUP2
00000556: EXTCODEHASH
00000557: EQ
00000558: PUSH2 0x05e3
0000055b: JUMPI
0000055c: PUSH1 0x40
0000055e: MLOAD
0000055f: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000
00000580: DUP2
00000581: MSTORE
00000582: PUSH1 0x20
00000584: PUSH1 0x04
00000586: DUP3
00000587: ADD
00000588: MSTORE
00000589: PUSH1 0x32
0000058b: PUSH1 0x24
0000058d: DUP3
0000058e: ADD
0000058f: MSTORE
00000590: PUSH32 0x4c314368756753706c61736850726f78793a20636f646520776173206e6f7420
000005b1: PUSH1 0x44
000005b3: DUP3
000005b4: ADD
000005b5: MSTORE
000005b6: PUSH32 0x636f72726563746c79206465706c6f7965640000000000000000000000000000
000005d7: PUSH1 0x64
000005d9: DUP3
000005da: ADD
000005db: MSTORE
000005dc: PUSH1 0x84
000005de: ADD
000005df: PUSH2 0x02ce
000005e2: JUMP
000005e3: JUMPDEST
000005e4: PUSH2 0x060b
000005e7: DUP2
000005e8: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000609: SSTORE
0000060a: JUMP
0000060b: JUMPDEST
0000060c: POP
0000060d: POP
0000060e: POP
0000060f: POP
00000610: JUMP
00000611: JUMPDEST
00000612: PUSH1 0x00
00000614: PUSH2 0x063b
00000617: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
00000638: SLOAD
00000639: SWAP1
0000063a: JUMP
0000063b: JUMPDEST
0000063c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000651: AND
00000652: CALLER
00000653: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000668: AND
00000669: EQ
0000066a: DUP1
0000066b: PUSH2 0x0672
0000066e: JUMPI
0000066f: POP
00000670: CALLER
00000671: ISZERO
00000672: JUMPDEST
00000673: ISZERO
00000674: PUSH2 0x069d
00000677: JUMPI
00000678: POP
00000679: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000069a: SLOAD
0000069b: SWAP1
0000069c: JUMP
0000069d: JUMPDEST
0000069e: PUSH2 0x06a5
000006a1: PUSH2 0x0128
000006a4: JUMP
000006a5: JUMPDEST
000006a6: SWAP1
000006a7: JUMP
000006a8: JUMPDEST
000006a9: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000006ca: SLOAD
000006cb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006e0: AND
000006e1: CALLER
000006e2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000006f7: AND
000006f8: EQ
000006f9: DUP1
000006fa: PUSH2 0x0701
000006fd: JUMPI
000006fe: POP
000006ff: CALLER
00000700: ISZERO
00000701: JUMPDEST
00000702: ISZERO
00000703: PUSH2 0x070a
00000706: JUMPI
00000707: SWAP1
00000708: SSTORE
00000709: JUMP
0000070a: JUMPDEST
0000070b: PUSH2 0x0712
0000070e: PUSH2 0x0128
00000711: JUMP
00000712: JUMPDEST
00000713: POP
00000714: POP
00000715: JUMP
00000716: JUMPDEST
00000717: PUSH1 0x00
00000719: PUSH2 0x0740
0000071c: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000073d: SLOAD
0000073e: SWAP1
0000073f: JUMP
00000740: JUMPDEST
00000741: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
00000756: AND
00000757: CALLER
00000758: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
0000076d: AND
0000076e: EQ
0000076f: DUP1
00000770: PUSH2 0x0777
00000773: JUMPI
00000774: POP
00000775: CALLER
00000776: ISZERO
00000777: JUMPDEST
00000778: ISZERO
00000779: PUSH2 0x069d
0000077c: JUMPI
0000077d: POP
0000077e: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000079f: SLOAD
000007a0: SWAP1
000007a1: JUMP
000007a2: JUMPDEST
000007a3: PUSH1 0x00
000007a5: PUSH1 0x20
000007a7: DUP3
000007a8: DUP5
000007a9: SUB
000007aa: SLT
000007ab: ISZERO
000007ac: PUSH2 0x07b4
000007af: JUMPI
000007b0: PUSH1 0x00
000007b2: DUP1
000007b3: REVERT
000007b4: JUMPDEST
000007b5: DUP2
000007b6: CALLDATALOAD
000007b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff
000007cc: DUP2
000007cd: AND
000007ce: DUP2
000007cf: EQ
000007d0: PUSH2 0x07d8
000007d3: JUMPI
000007d4: PUSH1 0x00
000007d6: DUP1
000007d7: REVERT
000007d8: JUMPDEST
000007d9: SWAP4
000007da: SWAP3
000007db: POP
000007dc: POP
000007dd: POP
000007de: JUMP
000007df: JUMPDEST
000007e0: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000
00000801: PUSH1 0x00
00000803: MSTORE
00000804: PUSH1 0x41
00000806: PUSH1 0x04
00000808: MSTORE
00000809: PUSH1 0x24
0000080b: PUSH1 0x00
0000080d: REVERT
0000080e: JUMPDEST
0000080f: PUSH1 0x00
00000811: PUSH1 0x20
00000813: DUP3
00000814: DUP5
00000815: SUB
00000816: SLT
00000817: ISZERO
00000818: PUSH2 0x0820
0000081b: JUMPI
0000081c: PUSH1 0x00
0000081e: DUP1
0000081f: REVERT
00000820: JUMPDEST
00000821: DUP2
00000822: CALLDATALOAD
00000823: PUSH8 0xffffffffffffffff
0000082c: DUP1
0000082d: DUP3
0000082e: GT
0000082f: ISZERO
00000830: PUSH2 0x0838
00000833: JUMPI
00000834: PUSH1 0x00
00000836: DUP1
00000837: REVERT
00000838: JUMPDEST
00000839: DUP2
0000083a: DUP5
0000083b: ADD
0000083c: SWAP2
0000083d: POP
0000083e: DUP5
0000083f: PUSH1 0x1f
00000841: DUP4
00000842: ADD
00000843: SLT
00000844: PUSH2 0x084c
00000847: JUMPI
00000848: PUSH1 0x00
0000084a: DUP1
0000084b: REVERT
0000084c: JUMPDEST
0000084d: DUP2
0000084e: CALLDATALOAD
0000084f: DUP2
00000850: DUP2
00000851: GT
00000852: ISZERO
00000853: PUSH2 0x085e
00000856: JUMPI
00000857: PUSH2 0x085e
0000085a: PUSH2 0x07df
0000085d: JUMP
0000085e: JUMPDEST
0000085f: PUSH1 0x40
00000861: MLOAD
00000862: PUSH1 0x1f
00000864: DUP3
00000865: ADD
00000866: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0
00000887: SWAP1
00000888: DUP2
00000889: AND
0000088a: PUSH1 0x3f
0000088c: ADD
0000088d: AND
0000088e: DUP2
0000088f: ADD
00000890: SWAP1
00000891: DUP4
00000892: DUP3
00000893: GT
00000894: DUP2
00000895: DUP4
00000896: LT
00000897: OR
00000898: ISZERO
00000899: PUSH2 0x08a4
0000089c: JUMPI
0000089d: PUSH2 0x08a4
000008a0: PUSH2 0x07df
000008a3: JUMP
000008a4: JUMPDEST
000008a5: DUP2
000008a6: PUSH1 0x40
000008a8: MSTORE
000008a9: DUP3
000008aa: DUP2
000008ab: MSTORE
000008ac: DUP8
000008ad: PUSH1 0x20
000008af: DUP5
000008b0: DUP8
000008b1: ADD
000008b2: ADD
000008b3: GT
000008b4: ISZERO
000008b5: PUSH2 0x08bd
000008b8: JUMPI
000008b9: PUSH1 0x00
000008bb: DUP1
000008bc: REVERT
000008bd: JUMPDEST
000008be: DUP3
000008bf: PUSH1 0x20
000008c1: DUP7
000008c2: ADD
000008c3: PUSH1 0x20
000008c5: DUP4
000008c6: ADD
000008c7: CALLDATACOPY
000008c8: PUSH1 0x00
000008ca: SWAP3
000008cb: DUP2
000008cc: ADD
000008cd: PUSH1 0x20
000008cf: ADD
000008d0: SWAP3
000008d1: SWAP1
000008d2: SWAP3
000008d3: MSTORE
000008d4: POP
000008d5: SWAP6
000008d6: SWAP5
000008d7: POP
000008d8: POP
000008d9: POP
000008da: POP
000008db: POP
000008dc: JUMP
000008dd: JUMPDEST
000008de: PUSH1 0x00
000008e0: DUP1
000008e1: PUSH1 0x40
000008e3: DUP4
000008e4: DUP6
000008e5: SUB
000008e6: SLT
000008e7: ISZERO
000008e8: PUSH2 0x08f0
000008eb: JUMPI
000008ec: PUSH1 0x00
000008ee: DUP1
000008ef: REVERT
000008f0: JUMPDEST
000008f1: POP
000008f2: POP
000008f3: DUP1
000008f4: CALLDATALOAD
000008f5: SWAP3
000008f6: PUSH1 0x20
000008f8: SWAP1
000008f9: SWAP2
000008fa: ADD
000008fb: CALLDATALOAD
000008fc: SWAP2
000008fd: POP
000008fe: JUMP
000008ff: JUMPDEST
00000900: PUSH1 0x00
00000902: DUP2
00000903: MLOAD
00000904: PUSH1 0x00
00000906: JUMPDEST
00000907: DUP2
00000908: DUP2
00000909: LT
0000090a: ISZERO
0000090b: PUSH2 0x0920
0000090e: JUMPI
0000090f: PUSH1 0x20
00000911: DUP2
00000912: DUP6
00000913: ADD
00000914: DUP2
00000915: ADD
00000916: MLOAD
00000917: DUP7
00000918: DUP4
00000919: ADD
0000091a: MSTORE
0000091b: ADD
0000091c: PUSH2 0x0906
0000091f: JUMP
00000920: JUMPDEST
00000921: DUP2
00000922: DUP2
00000923: GT
00000924: ISZERO
00000925: PUSH2 0x092f
00000928: JUMPI
00000929: PUSH1 0x00
0000092b: DUP3
0000092c: DUP7
0000092d: ADD
0000092e: MSTORE
0000092f: JUMPDEST
00000930: POP
00000931: SWAP3
00000932: SWAP1
00000933: SWAP3
00000934: ADD
00000935: SWAP3
00000936: SWAP2
00000937: POP
00000938: POP
00000939: JUMP
0000093a: JUMPDEST
0000093b: PUSH1 0x00
0000093d: PUSH2 0x07d8
00000940: DUP3
00000941: DUP5
00000942: PUSH2 0x08ff
00000945: JUMP
00000946: JUMPDEST
00000947: PUSH1 0x00
00000949: PUSH1 0x20
0000094b: DUP3
0000094c: DUP5
0000094d: SUB
0000094e: SLT
0000094f: ISZERO
00000950: PUSH2 0x0958
00000953: JUMPI
00000954: PUSH1 0x00
00000956: DUP1
00000957: REVERT
00000958: JUMPDEST
00000959: POP
0000095a: MLOAD
0000095b: SWAP2
0000095c: SWAP1
0000095d: POP
0000095e: JUMP
0000095f: JUMPDEST
00000960: PUSH32 0xffffffffffffffffffffffffff00000000000000000000000000000000000000
00000981: DUP4
00000982: AND
00000983: DUP2
00000984: MSTORE
00000985: PUSH1 0x00
00000987: PUSH2 0x0993
0000098a: PUSH1 0x0d
0000098c: DUP4
0000098d: ADD
0000098e: DUP5
0000098f: PUSH2 0x08ff
00000992: JUMP
00000993: JUMPDEST
00000994: SWAP5
00000995: SWAP4
00000996: POP
00000997: POP
00000998: POP
00000999: POP
0000099a: JUMP
0000099b: INVALID
0000099c: LOG1
0000099d: PUSH5 0x736f6c6343
000009a3: STOP
000009a4: ADDMOD
000009a5: UNKNOWN(0x0F)
000009a6: STOP
000009a7: EXP

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high upgradeability detector Untrusted DELEGATECALL target reachable 55 no no
view
trace_id: 0x3d02ab4a1f834e5cdae2981b4cb9274ff8f71b38da7da6414497d03ac806afb3
call_targets: 0xe6874d09046173911a5e2bd4b4e6148dbb1b4f8a
target_varies: no
classification: constant_target
validation_json
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x3d02ab4a1f834e5cdae2981b4cb9274ff8f71b38da7da6414497d03ac806afb3",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xe6874d09046173911a5e2bd4b4e6148dbb1b4f8a"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x893d20e8",
            "selector": "0x893d20e8",
            "calldata_variants": [
                "0x893d20e8",
                "0x893d20e80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9b0b0fda",
            "selector": "0x9b0b0fda",
            "calldata_variants": [
                "0x9b0b0fda",
                "0x9b0b0fda0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xaaf10f42",
            "selector": "0xaaf10f42",
            "calldata_variants": [
                "0xaaf10f42",
                "0xaaf10f420000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x13af4035",
            "selector": "0x13af4035",
            "calldata_variants": [
                "0x13af4035",
                "0x13af40350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6c5d4ad0",
            "selector": "0x6c5d4ad0",
            "calldata_variants": [
                "0x6c5d4ad0",
                "0x6c5d4ad00000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 950,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [
        {
            "pc": 1028,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1173,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1618,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1761,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        },
        {
            "pc": 1879,
            "type": "msg_sender_eq_const",
            "value": "0xffffffffffffffffffffffffffffffffffffffff"
        }
    ],
    "delegatecall_count": 1,
    "untrusted_delegatecall_count": 1
}
medium upgradeability cast DELEGATECALL present 80 no
view
evidence_json
{
    "notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
    "delegatecall_count": 1
}
medium other detector CREATE/CREATE2 reachable 45 no no
view
trace_id: 0x443a1e5a26980e2bcccb2af679d65d23c86b8c9de21dfbdeb41f00f2a75d22b1
validation_json
{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 10,
    "trace_id": "0x443a1e5a26980e2bcccb2af679d65d23c86b8c9de21dfbdeb41f00f2a75d22b1",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x893d20e8",
            "selector": "0x893d20e8",
            "calldata_variants": [
                "0x893d20e8",
                "0x893d20e80000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9b0b0fda",
            "selector": "0x9b0b0fda",
            "calldata_variants": [
                "0x9b0b0fda",
                "0x9b0b0fda0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xaaf10f42",
            "selector": "0xaaf10f42",
            "calldata_variants": [
                "0xaaf10f42",
                "0xaaf10f420000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x13af4035",
            "selector": "0x13af4035",
            "calldata_variants": [
                "0x13af4035",
                "0x13af40350000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6c5d4ad0",
            "selector": "0x6c5d4ad0",
            "calldata_variants": [
                "0x6c5d4ad0",
                "0x6c5d4ad00000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "create_count": 1,
    "create2_count": 0
}
low other cast Contract creation opcode present 60 no
view
evidence_json
{
    "notes": "runtime can deploy contracts dynamically via CREATE/CREATE2",
    "create_count": 1,
    "create2_count": 0
}