019ba90f-8389-70dd-9e12-27f4e4ca62f7
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 34799 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 34800 | proxy.resolve | complete | 1 / 3 | 3 months ago |
| 34801 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 34802 | analysis.bundle | complete | 1 / 3 | 3 months ago |
| 34803 | capability.graph | complete | 1 / 3 | 3 months ago |
| 34804 | detector.run | complete | 1 / 3 | 3 months ago |
| 34805 | validation.fork | complete | 1 / 3 | 3 months ago |
{
"method": "etherscan+onchain",
"status": "confirmed",
"etherscan_hint": {
"source": "etherscan",
"etherscan": {
"proxy_flag": true,
"implementation": "0xe6874d09046173911a5e2bd4b4e6148dbb1b4f8a"
}
},
"implementation": "0xe6874d09046173911a5e2bd4b4e6148dbb1b4f8a",
"onchain_method": "eip1967"
}
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x005e 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH1 0xe0 00000012: SHR 00000013: DUP1 00000014: PUSH4 0x893d20e8 00000019: GT 0000001a: PUSH2 0x0043 0000001d: JUMPI 0000001e: DUP1 0000001f: PUSH4 0x893d20e8 00000024: EQ 00000025: PUSH2 0x00b5 00000028: JUMPI 00000029: DUP1 0000002a: PUSH4 0x9b0b0fda 0000002f: EQ 00000030: PUSH2 0x00f3 00000033: JUMPI 00000034: DUP1 00000035: PUSH4 0xaaf10f42 0000003a: EQ 0000003b: PUSH2 0x0113 0000003e: JUMPI 0000003f: PUSH2 0x006d 00000042: JUMP 00000043: JUMPDEST 00000044: DUP1 00000045: PUSH4 0x13af4035 0000004a: EQ 0000004b: PUSH2 0x0075 0000004e: JUMPI 0000004f: DUP1 00000050: PUSH4 0x6c5d4ad0 00000055: EQ 00000056: PUSH2 0x0095 00000059: JUMPI 0000005a: PUSH2 0x006d 0000005d: JUMP 0000005e: JUMPDEST 0000005f: CALLDATASIZE 00000060: PUSH2 0x006d 00000063: JUMPI 00000064: PUSH2 0x006b 00000067: PUSH2 0x0128 0000006a: JUMP 0000006b: JUMPDEST 0000006c: STOP 0000006d: JUMPDEST 0000006e: PUSH2 0x006b 00000071: PUSH2 0x0128 00000074: JUMP 00000075: JUMPDEST 00000076: CALLVALUE 00000077: DUP1 00000078: ISZERO 00000079: PUSH2 0x0081 0000007c: JUMPI 0000007d: PUSH1 0x00 0000007f: DUP1 00000080: REVERT 00000081: JUMPDEST 00000082: POP 00000083: PUSH2 0x006b 00000086: PUSH2 0x0090 00000089: CALLDATASIZE 0000008a: PUSH1 0x04 0000008c: PUSH2 0x07a2 0000008f: JUMP 00000090: JUMPDEST 00000091: PUSH2 0x03cb 00000094: JUMP 00000095: JUMPDEST 00000096: CALLVALUE 00000097: DUP1 00000098: ISZERO 00000099: PUSH2 0x00a1 0000009c: JUMPI 0000009d: PUSH1 0x00 0000009f: DUP1 000000a0: REVERT 000000a1: JUMPDEST 000000a2: POP 000000a3: PUSH2 0x006b 000000a6: PUSH2 0x00b0 000000a9: CALLDATASIZE 000000aa: PUSH1 0x04 000000ac: PUSH2 0x080e 000000af: JUMP 000000b0: JUMPDEST 000000b1: PUSH2 0x045c 000000b4: JUMP 000000b5: JUMPDEST 000000b6: CALLVALUE 000000b7: DUP1 000000b8: ISZERO 000000b9: PUSH2 0x00c1 000000bc: JUMPI 000000bd: PUSH1 0x00 000000bf: DUP1 000000c0: REVERT 000000c1: JUMPDEST 000000c2: POP 000000c3: PUSH2 0x00ca 000000c6: PUSH2 0x0611 000000c9: JUMP 000000ca: JUMPDEST 000000cb: PUSH1 0x40 000000cd: MLOAD 000000ce: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000e3: SWAP1 000000e4: SWAP2 000000e5: AND 000000e6: DUP2 000000e7: MSTORE 000000e8: PUSH1 0x20 000000ea: ADD 000000eb: PUSH1 0x40 000000ed: MLOAD 000000ee: DUP1 000000ef: SWAP2 000000f0: SUB 000000f1: SWAP1 000000f2: RETURN 000000f3: JUMPDEST 000000f4: CALLVALUE 000000f5: DUP1 000000f6: ISZERO 000000f7: PUSH2 0x00ff 000000fa: JUMPI 000000fb: PUSH1 0x00 000000fd: DUP1 000000fe: REVERT 000000ff: JUMPDEST 00000100: POP 00000101: PUSH2 0x006b 00000104: PUSH2 0x010e 00000107: CALLDATASIZE 00000108: PUSH1 0x04 0000010a: PUSH2 0x08dd 0000010d: JUMP 0000010e: JUMPDEST 0000010f: PUSH2 0x06a8 00000112: JUMP 00000113: JUMPDEST 00000114: CALLVALUE 00000115: DUP1 00000116: ISZERO 00000117: PUSH2 0x011f 0000011a: JUMPI 0000011b: PUSH1 0x00 0000011d: DUP1 0000011e: REVERT 0000011f: JUMPDEST 00000120: POP 00000121: PUSH2 0x00ca 00000124: PUSH2 0x0716 00000127: JUMP 00000128: JUMPDEST 00000129: PUSH1 0x00 0000012b: PUSH2 0x0152 0000012e: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 0000014f: SLOAD 00000150: SWAP1 00000151: JUMP 00000152: JUMPDEST 00000153: PUSH1 0x40 00000155: DUP1 00000156: MLOAD 00000157: PUSH1 0x04 00000159: DUP2 0000015a: MSTORE 0000015b: PUSH1 0x24 0000015d: DUP2 0000015e: ADD 0000015f: DUP3 00000160: MSTORE 00000161: PUSH1 0x20 00000163: DUP2 00000164: ADD 00000165: DUP1 00000166: MLOAD 00000167: PUSH28 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffff 00000184: AND 00000185: PUSH32 0xb794726200000000000000000000000000000000000000000000000000000000 000001a6: OR 000001a7: SWAP1 000001a8: MSTORE 000001a9: SWAP1 000001aa: MLOAD 000001ab: SWAP2 000001ac: SWAP3 000001ad: POP 000001ae: PUSH1 0x00 000001b0: SWAP2 000001b1: DUP3 000001b2: SWAP2 000001b3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001c8: DUP6 000001c9: AND 000001ca: SWAP2 000001cb: PUSH2 0x01d4 000001ce: SWAP2 000001cf: SWAP1 000001d0: PUSH2 0x093a 000001d3: JUMP 000001d4: JUMPDEST 000001d5: PUSH1 0x00 000001d7: PUSH1 0x40 000001d9: MLOAD 000001da: DUP1 000001db: DUP4 000001dc: SUB 000001dd: DUP2 000001de: DUP6 000001df: GAS 000001e0: STATICCALL 000001e1: SWAP2 000001e2: POP 000001e3: POP 000001e4: RETURNDATASIZE 000001e5: DUP1 000001e6: PUSH1 0x00 000001e8: DUP2 000001e9: EQ 000001ea: PUSH2 0x020f 000001ed: JUMPI 000001ee: PUSH1 0x40 000001f0: MLOAD 000001f1: SWAP2 000001f2: POP 000001f3: PUSH1 0x1f 000001f5: NOT 000001f6: PUSH1 0x3f 000001f8: RETURNDATASIZE 000001f9: ADD 000001fa: AND 000001fb: DUP3 000001fc: ADD 000001fd: PUSH1 0x40 000001ff: MSTORE 00000200: RETURNDATASIZE 00000201: DUP3 00000202: MSTORE 00000203: RETURNDATASIZE 00000204: PUSH1 0x00 00000206: PUSH1 0x20 00000208: DUP5 00000209: ADD 0000020a: RETURNDATACOPY 0000020b: PUSH2 0x0214 0000020e: JUMP 0000020f: JUMPDEST 00000210: PUSH1 0x60 00000212: SWAP2 00000213: POP 00000214: JUMPDEST 00000215: POP 00000216: SWAP2 00000217: POP 00000218: SWAP2 00000219: POP 0000021a: DUP2 0000021b: DUP1 0000021c: ISZERO 0000021d: PUSH2 0x0227 00000220: JUMPI 00000221: POP 00000222: DUP1 00000223: MLOAD 00000224: PUSH1 0x20 00000226: EQ 00000227: JUMPDEST 00000228: ISZERO 00000229: PUSH2 0x02d9 0000022c: JUMPI 0000022d: PUSH1 0x00 0000022f: DUP2 00000230: DUP1 00000231: PUSH1 0x20 00000233: ADD 00000234: SWAP1 00000235: MLOAD 00000236: DUP2 00000237: ADD 00000238: SWAP1 00000239: PUSH2 0x0242 0000023c: SWAP2 0000023d: SWAP1 0000023e: PUSH2 0x0946 00000241: JUMP 00000242: JUMPDEST 00000243: SWAP1 00000244: POP 00000245: DUP1 00000246: ISZERO 00000247: PUSH2 0x02d7 0000024a: JUMPI 0000024b: PUSH1 0x40 0000024d: MLOAD 0000024e: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 0000026f: DUP2 00000270: MSTORE 00000271: PUSH1 0x20 00000273: PUSH1 0x04 00000275: DUP3 00000276: ADD 00000277: MSTORE 00000278: PUSH1 0x35 0000027a: PUSH1 0x24 0000027c: DUP3 0000027d: ADD 0000027e: MSTORE 0000027f: PUSH32 0x4c314368756753706c61736850726f78793a2073797374656d20697320637572 000002a0: PUSH1 0x44 000002a2: DUP3 000002a3: ADD 000002a4: MSTORE 000002a5: PUSH32 0x72656e746c79206265696e672075706772616465640000000000000000000000 000002c6: PUSH1 0x64 000002c8: DUP3 000002c9: ADD 000002ca: MSTORE 000002cb: PUSH1 0x84 000002cd: ADD 000002ce: JUMPDEST 000002cf: PUSH1 0x40 000002d1: MLOAD 000002d2: DUP1 000002d3: SWAP2 000002d4: SUB 000002d5: SWAP1 000002d6: REVERT 000002d7: JUMPDEST 000002d8: POP 000002d9: JUMPDEST 000002da: PUSH1 0x00 000002dc: PUSH2 0x0303 000002df: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000300: SLOAD 00000301: SWAP1 00000302: JUMP 00000303: JUMPDEST 00000304: SWAP1 00000305: POP 00000306: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000031b: DUP2 0000031c: AND 0000031d: PUSH2 0x03a8 00000320: JUMPI 00000321: PUSH1 0x40 00000323: MLOAD 00000324: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 00000345: DUP2 00000346: MSTORE 00000347: PUSH1 0x20 00000349: PUSH1 0x04 0000034b: DUP3 0000034c: ADD 0000034d: MSTORE 0000034e: PUSH1 0x30 00000350: PUSH1 0x24 00000352: DUP3 00000353: ADD 00000354: MSTORE 00000355: PUSH32 0x4c314368756753706c61736850726f78793a20696d706c656d656e746174696f 00000376: PUSH1 0x44 00000378: DUP3 00000379: ADD 0000037a: MSTORE 0000037b: PUSH32 0x6e206973206e6f74207365742079657400000000000000000000000000000000 0000039c: PUSH1 0x64 0000039e: DUP3 0000039f: ADD 000003a0: MSTORE 000003a1: PUSH1 0x84 000003a3: ADD 000003a4: PUSH2 0x02ce 000003a7: JUMP 000003a8: JUMPDEST 000003a9: CALLDATASIZE 000003aa: PUSH1 0x00 000003ac: DUP1 000003ad: CALLDATACOPY 000003ae: PUSH1 0x00 000003b0: DUP1 000003b1: CALLDATASIZE 000003b2: PUSH1 0x00 000003b4: DUP5 000003b5: GAS 000003b6: DELEGATECALL 000003b7: RETURNDATASIZE 000003b8: PUSH1 0x00 000003ba: DUP1 000003bb: RETURNDATACOPY 000003bc: DUP1 000003bd: PUSH2 0x03c5 000003c0: JUMPI 000003c1: RETURNDATASIZE 000003c2: PUSH1 0x00 000003c4: REVERT 000003c5: JUMPDEST 000003c6: POP 000003c7: RETURNDATASIZE 000003c8: PUSH1 0x00 000003ca: RETURN 000003cb: JUMPDEST 000003cc: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 000003ed: SLOAD 000003ee: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000403: AND 00000404: CALLER 00000405: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000041a: AND 0000041b: EQ 0000041c: DUP1 0000041d: PUSH2 0x0424 00000420: JUMPI 00000421: POP 00000422: CALLER 00000423: ISZERO 00000424: JUMPDEST 00000425: ISZERO 00000426: PUSH2 0x0454 00000429: JUMPI 0000042a: PUSH2 0x0451 0000042d: DUP2 0000042e: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 0000044f: SSTORE 00000450: JUMP 00000451: JUMPDEST 00000452: POP 00000453: JUMP 00000454: JUMPDEST 00000455: PUSH2 0x0451 00000458: PUSH2 0x0128 0000045b: JUMP 0000045c: JUMPDEST 0000045d: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 0000047e: SLOAD 0000047f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000494: AND 00000495: CALLER 00000496: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004ab: AND 000004ac: EQ 000004ad: DUP1 000004ae: PUSH2 0x04b5 000004b1: JUMPI 000004b2: POP 000004b3: CALLER 000004b4: ISZERO 000004b5: JUMPDEST 000004b6: ISZERO 000004b7: PUSH2 0x0454 000004ba: JUMPI 000004bb: PUSH1 0x00 000004bd: PUSH2 0x04e4 000004c0: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 000004e1: SLOAD 000004e2: SWAP1 000004e3: JUMP 000004e4: JUMPDEST 000004e5: SWAP1 000004e6: POP 000004e7: DUP1 000004e8: EXTCODEHASH 000004e9: DUP3 000004ea: MLOAD 000004eb: PUSH1 0x20 000004ed: DUP5 000004ee: ADD 000004ef: KECCAK256 000004f0: SUB 000004f1: PUSH2 0x04f8 000004f4: JUMPI 000004f5: POP 000004f6: POP 000004f7: JUMP 000004f8: JUMPDEST 000004f9: PUSH1 0x40 000004fb: MLOAD 000004fc: PUSH1 0x00 000004fe: SWAP1 000004ff: PUSH2 0x052e 00000502: SWAP1 00000503: PUSH32 0x600d380380600d6000396000f300000000000000000000000000000000000000 00000524: SWAP1 00000525: DUP6 00000526: SWAP1 00000527: PUSH1 0x20 00000529: ADD 0000052a: PUSH2 0x095f 0000052d: JUMP 0000052e: JUMPDEST 0000052f: PUSH1 0x40 00000531: MLOAD 00000532: PUSH1 0x20 00000534: DUP2 00000535: DUP4 00000536: SUB 00000537: SUB 00000538: DUP2 00000539: MSTORE 0000053a: SWAP1 0000053b: PUSH1 0x40 0000053d: MSTORE 0000053e: SWAP1 0000053f: POP 00000540: PUSH1 0x00 00000542: DUP2 00000543: MLOAD 00000544: PUSH1 0x20 00000546: DUP4 00000547: ADD 00000548: PUSH1 0x00 0000054a: CREATE 0000054b: DUP5 0000054c: MLOAD 0000054d: PUSH1 0x20 0000054f: DUP7 00000550: ADD 00000551: KECCAK256 00000552: SWAP1 00000553: SWAP2 00000554: POP 00000555: DUP2 00000556: EXTCODEHASH 00000557: EQ 00000558: PUSH2 0x05e3 0000055b: JUMPI 0000055c: PUSH1 0x40 0000055e: MLOAD 0000055f: PUSH32 0x08c379a000000000000000000000000000000000000000000000000000000000 00000580: DUP2 00000581: MSTORE 00000582: PUSH1 0x20 00000584: PUSH1 0x04 00000586: DUP3 00000587: ADD 00000588: MSTORE 00000589: PUSH1 0x32 0000058b: PUSH1 0x24 0000058d: DUP3 0000058e: ADD 0000058f: MSTORE 00000590: PUSH32 0x4c314368756753706c61736850726f78793a20636f646520776173206e6f7420 000005b1: PUSH1 0x44 000005b3: DUP3 000005b4: ADD 000005b5: MSTORE 000005b6: PUSH32 0x636f72726563746c79206465706c6f7965640000000000000000000000000000 000005d7: PUSH1 0x64 000005d9: DUP3 000005da: ADD 000005db: MSTORE 000005dc: PUSH1 0x84 000005de: ADD 000005df: PUSH2 0x02ce 000005e2: JUMP 000005e3: JUMPDEST 000005e4: PUSH2 0x060b 000005e7: DUP2 000005e8: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 00000609: SSTORE 0000060a: JUMP 0000060b: JUMPDEST 0000060c: POP 0000060d: POP 0000060e: POP 0000060f: POP 00000610: JUMP 00000611: JUMPDEST 00000612: PUSH1 0x00 00000614: PUSH2 0x063b 00000617: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 00000638: SLOAD 00000639: SWAP1 0000063a: JUMP 0000063b: JUMPDEST 0000063c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000651: AND 00000652: CALLER 00000653: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000668: AND 00000669: EQ 0000066a: DUP1 0000066b: PUSH2 0x0672 0000066e: JUMPI 0000066f: POP 00000670: CALLER 00000671: ISZERO 00000672: JUMPDEST 00000673: ISZERO 00000674: PUSH2 0x069d 00000677: JUMPI 00000678: POP 00000679: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 0000069a: SLOAD 0000069b: SWAP1 0000069c: JUMP 0000069d: JUMPDEST 0000069e: PUSH2 0x06a5 000006a1: PUSH2 0x0128 000006a4: JUMP 000006a5: JUMPDEST 000006a6: SWAP1 000006a7: JUMP 000006a8: JUMPDEST 000006a9: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 000006ca: SLOAD 000006cb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000006e0: AND 000006e1: CALLER 000006e2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000006f7: AND 000006f8: EQ 000006f9: DUP1 000006fa: PUSH2 0x0701 000006fd: JUMPI 000006fe: POP 000006ff: CALLER 00000700: ISZERO 00000701: JUMPDEST 00000702: ISZERO 00000703: PUSH2 0x070a 00000706: JUMPI 00000707: SWAP1 00000708: SSTORE 00000709: JUMP 0000070a: JUMPDEST 0000070b: PUSH2 0x0712 0000070e: PUSH2 0x0128 00000711: JUMP 00000712: JUMPDEST 00000713: POP 00000714: POP 00000715: JUMP 00000716: JUMPDEST 00000717: PUSH1 0x00 00000719: PUSH2 0x0740 0000071c: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103 0000073d: SLOAD 0000073e: SWAP1 0000073f: JUMP 00000740: JUMPDEST 00000741: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000756: AND 00000757: CALLER 00000758: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000076d: AND 0000076e: EQ 0000076f: DUP1 00000770: PUSH2 0x0777 00000773: JUMPI 00000774: POP 00000775: CALLER 00000776: ISZERO 00000777: JUMPDEST 00000778: ISZERO 00000779: PUSH2 0x069d 0000077c: JUMPI 0000077d: POP 0000077e: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc 0000079f: SLOAD 000007a0: SWAP1 000007a1: JUMP 000007a2: JUMPDEST 000007a3: PUSH1 0x00 000007a5: PUSH1 0x20 000007a7: DUP3 000007a8: DUP5 000007a9: SUB 000007aa: SLT 000007ab: ISZERO 000007ac: PUSH2 0x07b4 000007af: JUMPI 000007b0: PUSH1 0x00 000007b2: DUP1 000007b3: REVERT 000007b4: JUMPDEST 000007b5: DUP2 000007b6: CALLDATALOAD 000007b7: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000007cc: DUP2 000007cd: AND 000007ce: DUP2 000007cf: EQ 000007d0: PUSH2 0x07d8 000007d3: JUMPI 000007d4: PUSH1 0x00 000007d6: DUP1 000007d7: REVERT 000007d8: JUMPDEST 000007d9: SWAP4 000007da: SWAP3 000007db: POP 000007dc: POP 000007dd: POP 000007de: JUMP 000007df: JUMPDEST 000007e0: PUSH32 0x4e487b7100000000000000000000000000000000000000000000000000000000 00000801: PUSH1 0x00 00000803: MSTORE 00000804: PUSH1 0x41 00000806: PUSH1 0x04 00000808: MSTORE 00000809: PUSH1 0x24 0000080b: PUSH1 0x00 0000080d: REVERT 0000080e: JUMPDEST 0000080f: PUSH1 0x00 00000811: PUSH1 0x20 00000813: DUP3 00000814: DUP5 00000815: SUB 00000816: SLT 00000817: ISZERO 00000818: PUSH2 0x0820 0000081b: JUMPI 0000081c: PUSH1 0x00 0000081e: DUP1 0000081f: REVERT 00000820: JUMPDEST 00000821: DUP2 00000822: CALLDATALOAD 00000823: PUSH8 0xffffffffffffffff 0000082c: DUP1 0000082d: DUP3 0000082e: GT 0000082f: ISZERO 00000830: PUSH2 0x0838 00000833: JUMPI 00000834: PUSH1 0x00 00000836: DUP1 00000837: REVERT 00000838: JUMPDEST 00000839: DUP2 0000083a: DUP5 0000083b: ADD 0000083c: SWAP2 0000083d: POP 0000083e: DUP5 0000083f: PUSH1 0x1f 00000841: DUP4 00000842: ADD 00000843: SLT 00000844: PUSH2 0x084c 00000847: JUMPI 00000848: PUSH1 0x00 0000084a: DUP1 0000084b: REVERT 0000084c: JUMPDEST 0000084d: DUP2 0000084e: CALLDATALOAD 0000084f: DUP2 00000850: DUP2 00000851: GT 00000852: ISZERO 00000853: PUSH2 0x085e 00000856: JUMPI 00000857: PUSH2 0x085e 0000085a: PUSH2 0x07df 0000085d: JUMP 0000085e: JUMPDEST 0000085f: PUSH1 0x40 00000861: MLOAD 00000862: PUSH1 0x1f 00000864: DUP3 00000865: ADD 00000866: PUSH32 0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe0 00000887: SWAP1 00000888: DUP2 00000889: AND 0000088a: PUSH1 0x3f 0000088c: ADD 0000088d: AND 0000088e: DUP2 0000088f: ADD 00000890: SWAP1 00000891: DUP4 00000892: DUP3 00000893: GT 00000894: DUP2 00000895: DUP4 00000896: LT 00000897: OR 00000898: ISZERO 00000899: PUSH2 0x08a4 0000089c: JUMPI 0000089d: PUSH2 0x08a4 000008a0: PUSH2 0x07df 000008a3: JUMP 000008a4: JUMPDEST 000008a5: DUP2 000008a6: PUSH1 0x40 000008a8: MSTORE 000008a9: DUP3 000008aa: DUP2 000008ab: MSTORE 000008ac: DUP8 000008ad: PUSH1 0x20 000008af: DUP5 000008b0: DUP8 000008b1: ADD 000008b2: ADD 000008b3: GT 000008b4: ISZERO 000008b5: PUSH2 0x08bd 000008b8: JUMPI 000008b9: PUSH1 0x00 000008bb: DUP1 000008bc: REVERT 000008bd: JUMPDEST 000008be: DUP3 000008bf: PUSH1 0x20 000008c1: DUP7 000008c2: ADD 000008c3: PUSH1 0x20 000008c5: DUP4 000008c6: ADD 000008c7: CALLDATACOPY 000008c8: PUSH1 0x00 000008ca: SWAP3 000008cb: DUP2 000008cc: ADD 000008cd: PUSH1 0x20 000008cf: ADD 000008d0: SWAP3 000008d1: SWAP1 000008d2: SWAP3 000008d3: MSTORE 000008d4: POP 000008d5: SWAP6 000008d6: SWAP5 000008d7: POP 000008d8: POP 000008d9: POP 000008da: POP 000008db: POP 000008dc: JUMP 000008dd: JUMPDEST 000008de: PUSH1 0x00 000008e0: DUP1 000008e1: PUSH1 0x40 000008e3: DUP4 000008e4: DUP6 000008e5: SUB 000008e6: SLT 000008e7: ISZERO 000008e8: PUSH2 0x08f0 000008eb: JUMPI 000008ec: PUSH1 0x00 000008ee: DUP1 000008ef: REVERT 000008f0: JUMPDEST 000008f1: POP 000008f2: POP 000008f3: DUP1 000008f4: CALLDATALOAD 000008f5: SWAP3 000008f6: PUSH1 0x20 000008f8: SWAP1 000008f9: SWAP2 000008fa: ADD 000008fb: CALLDATALOAD 000008fc: SWAP2 000008fd: POP 000008fe: JUMP 000008ff: JUMPDEST 00000900: PUSH1 0x00 00000902: DUP2 00000903: MLOAD 00000904: PUSH1 0x00 00000906: JUMPDEST 00000907: DUP2 00000908: DUP2 00000909: LT 0000090a: ISZERO 0000090b: PUSH2 0x0920 0000090e: JUMPI 0000090f: PUSH1 0x20 00000911: DUP2 00000912: DUP6 00000913: ADD 00000914: DUP2 00000915: ADD 00000916: MLOAD 00000917: DUP7 00000918: DUP4 00000919: ADD 0000091a: MSTORE 0000091b: ADD 0000091c: PUSH2 0x0906 0000091f: JUMP 00000920: JUMPDEST 00000921: DUP2 00000922: DUP2 00000923: GT 00000924: ISZERO 00000925: PUSH2 0x092f 00000928: JUMPI 00000929: PUSH1 0x00 0000092b: DUP3 0000092c: DUP7 0000092d: ADD 0000092e: MSTORE 0000092f: JUMPDEST 00000930: POP 00000931: SWAP3 00000932: SWAP1 00000933: SWAP3 00000934: ADD 00000935: SWAP3 00000936: SWAP2 00000937: POP 00000938: POP 00000939: JUMP 0000093a: JUMPDEST 0000093b: PUSH1 0x00 0000093d: PUSH2 0x07d8 00000940: DUP3 00000941: DUP5 00000942: PUSH2 0x08ff 00000945: JUMP 00000946: JUMPDEST 00000947: PUSH1 0x00 00000949: PUSH1 0x20 0000094b: DUP3 0000094c: DUP5 0000094d: SUB 0000094e: SLT 0000094f: ISZERO 00000950: PUSH2 0x0958 00000953: JUMPI 00000954: PUSH1 0x00 00000956: DUP1 00000957: REVERT 00000958: JUMPDEST 00000959: POP 0000095a: MLOAD 0000095b: SWAP2 0000095c: SWAP1 0000095d: POP 0000095e: JUMP 0000095f: JUMPDEST 00000960: PUSH32 0xffffffffffffffffffffffffff00000000000000000000000000000000000000 00000981: DUP4 00000982: AND 00000983: DUP2 00000984: MSTORE 00000985: PUSH1 0x00 00000987: PUSH2 0x0993 0000098a: PUSH1 0x0d 0000098c: DUP4 0000098d: ADD 0000098e: DUP5 0000098f: PUSH2 0x08ff 00000992: JUMP 00000993: JUMPDEST 00000994: SWAP5 00000995: SWAP4 00000996: POP 00000997: POP 00000998: POP 00000999: POP 0000099a: JUMP 0000099b: INVALID 0000099c: LOG1 0000099d: PUSH5 0x736f6c6343 000009a3: STOP 000009a4: ADDMOD 000009a5: UNKNOWN(0x0F) 000009a6: STOP 000009a7: EXP
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | upgradeability | detector | Untrusted DELEGATECALL target reachable | 55 | no | no |
viewtrace_id: 0x3d02ab4a1f834e5cdae2981b4cb9274ff8f71b38da7da6414497d03ac806afb3
call_targets:
0xe6874d09046173911a5e2bd4b4e6148dbb1b4f8a
target_varies:
no
classification:
constant_target
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x3d02ab4a1f834e5cdae2981b4cb9274ff8f71b38da7da6414497d03ac806afb3",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xe6874d09046173911a5e2bd4b4e6148dbb1b4f8a"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x893d20e8",
"selector": "0x893d20e8",
"calldata_variants": [
"0x893d20e8",
"0x893d20e80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9b0b0fda",
"selector": "0x9b0b0fda",
"calldata_variants": [
"0x9b0b0fda",
"0x9b0b0fda0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xaaf10f42",
"selector": "0xaaf10f42",
"calldata_variants": [
"0xaaf10f42",
"0xaaf10f420000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6c5d4ad0",
"selector": "0x6c5d4ad0",
"calldata_variants": [
"0x6c5d4ad0",
"0x6c5d4ad00000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 950,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [
{
"pc": 1028,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1173,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1618,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1761,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1879,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
],
"delegatecall_count": 1,
"untrusted_delegatecall_count": 1
}
|
| medium | upgradeability | cast | DELEGATECALL present | 80 | no | — |
viewevidence_json{
"notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
"delegatecall_count": 1
}
|
| medium | other | detector | CREATE/CREATE2 reachable | 45 | no | no |
viewtrace_id: 0x443a1e5a26980e2bcccb2af679d65d23c86b8c9de21dfbdeb41f00f2a75d22b1
validation_json{
"sink": "CREATE",
"errors": 0,
"status": "unknown",
"attempts": 10,
"trace_id": "0x443a1e5a26980e2bcccb2af679d65d23c86b8c9de21dfbdeb41f00f2a75d22b1",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x893d20e8",
"selector": "0x893d20e8",
"calldata_variants": [
"0x893d20e8",
"0x893d20e80000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9b0b0fda",
"selector": "0x9b0b0fda",
"calldata_variants": [
"0x9b0b0fda",
"0x9b0b0fda0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xaaf10f42",
"selector": "0xaaf10f42",
"calldata_variants": [
"0xaaf10f42",
"0xaaf10f420000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x13af4035",
"selector": "0x13af4035",
"calldata_variants": [
"0x13af4035",
"0x13af40350000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6c5d4ad0",
"selector": "0x6c5d4ad0",
"calldata_variants": [
"0x6c5d4ad0",
"0x6c5d4ad00000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"create_count": 1,
"create2_count": 0
}
|
| low | other | cast | Contract creation opcode present | 60 | no | — |
viewevidence_json{
"notes": "runtime can deploy contracts dynamically via CREATE/CREATE2",
"create_count": 1,
"create2_count": 0
}
|