TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba928-f74c-70bf-ae81-8234af82bcbb

complete
Chain ID
1
Address
Block Number
Created
Sat, Jan 10, 2026 6:26 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
35165 artifact.fetch complete 1 / 3 3 months ago
35166 proxy.resolve complete 1 / 3 3 months ago
35167 tool.cast_disasm complete 1 / 3 3 months ago
35168 analysis.bundle complete 1 / 3 3 months ago
35169 capability.graph complete 1 / 3 3 months ago
35170 detector.run complete 1 / 3 3 months ago
35171 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no not_proxy
Implementation:
Verified Source: yes
Proxy evidence
{
    "status": "not_proxy"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
3
EXT*/BALANCE
2
Total opcodes
1350
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLVALUE
00000006: DUP1
00000007: ISZERO
00000008: PUSH2 0x0010
0000000b: JUMPI
0000000c: PUSH1 0x00
0000000e: DUP1
0000000f: REVERT
00000010: JUMPDEST
00000011: POP
00000012: PUSH1 0x04
00000014: CALLDATASIZE
00000015: LT
00000016: PUSH2 0x0088
00000019: JUMPI
0000001a: PUSH1 0x00
0000001c: CALLDATALOAD
0000001d: PUSH1 0xe0
0000001f: SHR
00000020: DUP1
00000021: PUSH4 0x9e34070f
00000026: GT
00000027: PUSH2 0x005b
0000002a: JUMPI
0000002b: DUP1
0000002c: PUSH4 0x9e34070f
00000031: EQ
00000032: PUSH2 0x0170
00000035: JUMPI
00000036: DUP1
00000037: PUSH4 0xb14b990f
0000003c: EQ
0000003d: PUSH2 0x018d
00000040: JUMPI
00000041: DUP1
00000042: PUSH4 0xd5f39488
00000047: EQ
00000048: PUSH2 0x01b9
0000004b: JUMPI
0000004c: DUP1
0000004d: PUSH4 0xfc0c546a
00000052: EQ
00000053: PUSH2 0x01dd
00000056: JUMPI
00000057: PUSH2 0x0088
0000005a: JUMP
0000005b: JUMPDEST
0000005c: DUP1
0000005d: PUSH4 0x16c38b3c
00000062: EQ
00000063: PUSH2 0x008d
00000066: JUMPI
00000067: DUP1
00000068: PUSH4 0x2e7ba6ef
0000006d: EQ
0000006e: PUSH2 0x00ae
00000071: JUMPI
00000072: DUP1
00000073: PUSH4 0x2eb4a7ab
00000078: EQ
00000079: PUSH2 0x013a
0000007c: JUMPI
0000007d: DUP1
0000007e: PUSH4 0x5c975abb
00000083: EQ
00000084: PUSH2 0x0154
00000087: JUMPI
00000088: JUMPDEST
00000089: PUSH1 0x00
0000008b: DUP1
0000008c: REVERT
0000008d: JUMPDEST
0000008e: PUSH2 0x00ac
00000091: PUSH1 0x04
00000093: DUP1
00000094: CALLDATASIZE
00000095: SUB
00000096: PUSH1 0x20
00000098: DUP2
00000099: LT
0000009a: ISZERO
0000009b: PUSH2 0x00a3
0000009e: JUMPI
0000009f: PUSH1 0x00
000000a1: DUP1
000000a2: REVERT
000000a3: JUMPDEST
000000a4: POP
000000a5: CALLDATALOAD
000000a6: ISZERO
000000a7: ISZERO
000000a8: PUSH2 0x01e5
000000ab: JUMP
000000ac: JUMPDEST
000000ad: STOP
000000ae: JUMPDEST
000000af: PUSH2 0x00ac
000000b2: PUSH1 0x04
000000b4: DUP1
000000b5: CALLDATASIZE
000000b6: SUB
000000b7: PUSH1 0x80
000000b9: DUP2
000000ba: LT
000000bb: ISZERO
000000bc: PUSH2 0x00c4
000000bf: JUMPI
000000c0: PUSH1 0x00
000000c2: DUP1
000000c3: REVERT
000000c4: JUMPDEST
000000c5: DUP2
000000c6: CALLDATALOAD
000000c7: SWAP2
000000c8: PUSH1 0x01
000000ca: PUSH1 0x01
000000cc: PUSH1 0xa0
000000ce: SHL
000000cf: SUB
000000d0: PUSH1 0x20
000000d2: DUP3
000000d3: ADD
000000d4: CALLDATALOAD
000000d5: AND
000000d6: SWAP2
000000d7: PUSH1 0x40
000000d9: DUP3
000000da: ADD
000000db: CALLDATALOAD
000000dc: SWAP2
000000dd: SWAP1
000000de: DUP2
000000df: ADD
000000e0: SWAP1
000000e1: PUSH1 0x80
000000e3: DUP2
000000e4: ADD
000000e5: PUSH1 0x60
000000e7: DUP3
000000e8: ADD
000000e9: CALLDATALOAD
000000ea: PUSH5 0x0100000000
000000f0: DUP2
000000f1: GT
000000f2: ISZERO
000000f3: PUSH2 0x00fb
000000f6: JUMPI
000000f7: PUSH1 0x00
000000f9: DUP1
000000fa: REVERT
000000fb: JUMPDEST
000000fc: DUP3
000000fd: ADD
000000fe: DUP4
000000ff: PUSH1 0x20
00000101: DUP3
00000102: ADD
00000103: GT
00000104: ISZERO
00000105: PUSH2 0x010d
00000108: JUMPI
00000109: PUSH1 0x00
0000010b: DUP1
0000010c: REVERT
0000010d: JUMPDEST
0000010e: DUP1
0000010f: CALLDATALOAD
00000110: SWAP1
00000111: PUSH1 0x20
00000113: ADD
00000114: SWAP2
00000115: DUP5
00000116: PUSH1 0x20
00000118: DUP4
00000119: MUL
0000011a: DUP5
0000011b: ADD
0000011c: GT
0000011d: PUSH5 0x0100000000
00000123: DUP4
00000124: GT
00000125: OR
00000126: ISZERO
00000127: PUSH2 0x012f
0000012a: JUMPI
0000012b: PUSH1 0x00
0000012d: DUP1
0000012e: REVERT
0000012f: JUMPDEST
00000130: POP
00000131: SWAP1
00000132: SWAP3
00000133: POP
00000134: SWAP1
00000135: POP
00000136: PUSH2 0x0243
00000139: JUMP
0000013a: JUMPDEST
0000013b: PUSH2 0x0142
0000013e: PUSH2 0x055a
00000141: JUMP
00000142: JUMPDEST
00000143: PUSH1 0x40
00000145: DUP1
00000146: MLOAD
00000147: SWAP2
00000148: DUP3
00000149: MSTORE
0000014a: MLOAD
0000014b: SWAP1
0000014c: DUP2
0000014d: SWAP1
0000014e: SUB
0000014f: PUSH1 0x20
00000151: ADD
00000152: SWAP1
00000153: RETURN
00000154: JUMPDEST
00000155: PUSH2 0x015c
00000158: PUSH2 0x057e
0000015b: JUMP
0000015c: JUMPDEST
0000015d: PUSH1 0x40
0000015f: DUP1
00000160: MLOAD
00000161: SWAP2
00000162: ISZERO
00000163: ISZERO
00000164: DUP3
00000165: MSTORE
00000166: MLOAD
00000167: SWAP1
00000168: DUP2
00000169: SWAP1
0000016a: SUB
0000016b: PUSH1 0x20
0000016d: ADD
0000016e: SWAP1
0000016f: RETURN
00000170: JUMPDEST
00000171: PUSH2 0x015c
00000174: PUSH1 0x04
00000176: DUP1
00000177: CALLDATASIZE
00000178: SUB
00000179: PUSH1 0x20
0000017b: DUP2
0000017c: LT
0000017d: ISZERO
0000017e: PUSH2 0x0186
00000181: JUMPI
00000182: PUSH1 0x00
00000184: DUP1
00000185: REVERT
00000186: JUMPDEST
00000187: POP
00000188: CALLDATALOAD
00000189: PUSH2 0x0587
0000018c: JUMP
0000018d: JUMPDEST
0000018e: PUSH2 0x00ac
00000191: PUSH1 0x04
00000193: DUP1
00000194: CALLDATASIZE
00000195: SUB
00000196: PUSH1 0x40
00000198: DUP2
00000199: LT
0000019a: ISZERO
0000019b: PUSH2 0x01a3
0000019e: JUMPI
0000019f: PUSH1 0x00
000001a1: DUP1
000001a2: REVERT
000001a3: JUMPDEST
000001a4: POP
000001a5: PUSH1 0x01
000001a7: PUSH1 0x01
000001a9: PUSH1 0xa0
000001ab: SHL
000001ac: SUB
000001ad: DUP2
000001ae: CALLDATALOAD
000001af: AND
000001b0: SWAP1
000001b1: PUSH1 0x20
000001b3: ADD
000001b4: CALLDATALOAD
000001b5: PUSH2 0x05ab
000001b8: JUMP
000001b9: JUMPDEST
000001ba: PUSH2 0x01c1
000001bd: PUSH2 0x06cb
000001c0: JUMP
000001c1: JUMPDEST
000001c2: PUSH1 0x40
000001c4: DUP1
000001c5: MLOAD
000001c6: PUSH1 0x01
000001c8: PUSH1 0x01
000001ca: PUSH1 0xa0
000001cc: SHL
000001cd: SUB
000001ce: SWAP1
000001cf: SWAP3
000001d0: AND
000001d1: DUP3
000001d2: MSTORE
000001d3: MLOAD
000001d4: SWAP1
000001d5: DUP2
000001d6: SWAP1
000001d7: SUB
000001d8: PUSH1 0x20
000001da: ADD
000001db: SWAP1
000001dc: RETURN
000001dd: JUMPDEST
000001de: PUSH2 0x01c1
000001e1: PUSH2 0x06da
000001e4: JUMP
000001e5: JUMPDEST
000001e6: PUSH1 0x02
000001e8: SLOAD
000001e9: PUSH1 0x01
000001eb: PUSH1 0x01
000001ed: PUSH1 0xa0
000001ef: SHL
000001f0: SUB
000001f1: AND
000001f2: CALLER
000001f3: EQ
000001f4: PUSH2 0x0230
000001f7: JUMPI
000001f8: PUSH1 0x40
000001fa: DUP1
000001fb: MLOAD
000001fc: PUSH3 0x461bcd
00000200: PUSH1 0xe5
00000202: SHL
00000203: DUP2
00000204: MSTORE
00000205: PUSH1 0x20
00000207: PUSH1 0x04
00000209: DUP3
0000020a: ADD
0000020b: MSTORE
0000020c: PUSH1 0x09
0000020e: PUSH1 0x24
00000210: DUP3
00000211: ADD
00000212: MSTORE
00000213: PUSH9 0x10b232b83637bcb2b9
0000021d: PUSH1 0xb9
0000021f: SHL
00000220: PUSH1 0x44
00000222: DUP3
00000223: ADD
00000224: MSTORE
00000225: SWAP1
00000226: MLOAD
00000227: SWAP1
00000228: DUP2
00000229: SWAP1
0000022a: SUB
0000022b: PUSH1 0x64
0000022d: ADD
0000022e: SWAP1
0000022f: REVERT
00000230: JUMPDEST
00000231: PUSH1 0x00
00000233: DUP1
00000234: SLOAD
00000235: PUSH1 0xff
00000237: NOT
00000238: AND
00000239: SWAP2
0000023a: ISZERO
0000023b: ISZERO
0000023c: SWAP2
0000023d: SWAP1
0000023e: SWAP2
0000023f: OR
00000240: SWAP1
00000241: SSTORE
00000242: JUMP
00000243: JUMPDEST
00000244: PUSH1 0x00
00000246: SLOAD
00000247: PUSH1 0xff
00000249: AND
0000024a: ISZERO
0000024b: PUSH2 0x029b
0000024e: JUMPI
0000024f: PUSH1 0x40
00000251: DUP1
00000252: MLOAD
00000253: PUSH3 0x461bcd
00000257: PUSH1 0xe5
00000259: SHL
0000025a: DUP2
0000025b: MSTORE
0000025c: PUSH1 0x20
0000025e: PUSH1 0x04
00000260: DUP3
00000261: ADD
00000262: MSTORE
00000263: PUSH1 0x1c
00000265: PUSH1 0x24
00000267: DUP3
00000268: ADD
00000269: MSTORE
0000026a: PUSH32 0x636f6e74726163742069732063757272656e746c792070617573656400000000
0000028b: PUSH1 0x44
0000028d: DUP3
0000028e: ADD
0000028f: MSTORE
00000290: SWAP1
00000291: MLOAD
00000292: SWAP1
00000293: DUP2
00000294: SWAP1
00000295: SUB
00000296: PUSH1 0x64
00000298: ADD
00000299: SWAP1
0000029a: REVERT
0000029b: JUMPDEST
0000029c: PUSH2 0x02a4
0000029f: DUP6
000002a0: PUSH2 0x0587
000002a3: JUMP
000002a4: JUMPDEST
000002a5: ISZERO
000002a6: PUSH2 0x02e0
000002a9: JUMPI
000002aa: PUSH1 0x40
000002ac: MLOAD
000002ad: PUSH3 0x461bcd
000002b1: PUSH1 0xe5
000002b3: SHL
000002b4: DUP2
000002b5: MSTORE
000002b6: PUSH1 0x04
000002b8: ADD
000002b9: DUP1
000002ba: DUP1
000002bb: PUSH1 0x20
000002bd: ADD
000002be: DUP3
000002bf: DUP2
000002c0: SUB
000002c1: DUP3
000002c2: MSTORE
000002c3: PUSH1 0x28
000002c5: DUP2
000002c6: MSTORE
000002c7: PUSH1 0x20
000002c9: ADD
000002ca: DUP1
000002cb: PUSH2 0x07d0
000002ce: PUSH1 0x28
000002d0: SWAP2
000002d1: CODECOPY
000002d2: PUSH1 0x40
000002d4: ADD
000002d5: SWAP2
000002d6: POP
000002d7: POP
000002d8: PUSH1 0x40
000002da: MLOAD
000002db: DUP1
000002dc: SWAP2
000002dd: SUB
000002de: SWAP1
000002df: REVERT
000002e0: JUMPDEST
000002e1: PUSH1 0x01
000002e3: PUSH1 0x01
000002e5: PUSH1 0xa0
000002e7: SHL
000002e8: SUB
000002e9: DUP5
000002ea: AND
000002eb: PUSH20 0x56d35962c76d706d9330842712a8220c62f0fcd0
00000300: EQ
00000301: ISZERO
00000302: PUSH2 0x033c
00000305: JUMPI
00000306: PUSH1 0x40
00000308: MLOAD
00000309: PUSH3 0x461bcd
0000030d: PUSH1 0xe5
0000030f: SHL
00000310: DUP2
00000311: MSTORE
00000312: PUSH1 0x04
00000314: ADD
00000315: DUP1
00000316: DUP1
00000317: PUSH1 0x20
00000319: ADD
0000031a: DUP3
0000031b: DUP2
0000031c: SUB
0000031d: DUP3
0000031e: MSTORE
0000031f: PUSH1 0x44
00000321: DUP2
00000322: MSTORE
00000323: PUSH1 0x20
00000325: ADD
00000326: DUP1
00000327: PUSH2 0x083c
0000032a: PUSH1 0x44
0000032c: SWAP2
0000032d: CODECOPY
0000032e: PUSH1 0x60
00000330: ADD
00000331: SWAP2
00000332: POP
00000333: POP
00000334: PUSH1 0x40
00000336: MLOAD
00000337: DUP1
00000338: SWAP2
00000339: SUB
0000033a: SWAP1
0000033b: REVERT
0000033c: JUMPDEST
0000033d: PUSH1 0x40
0000033f: DUP1
00000340: MLOAD
00000341: PUSH1 0x20
00000343: DUP1
00000344: DUP3
00000345: ADD
00000346: DUP9
00000347: SWAP1
00000348: MSTORE
00000349: PUSH12 0xffffffffffffffffffffffff
00000356: NOT
00000357: PUSH1 0x60
00000359: DUP9
0000035a: SWAP1
0000035b: SHL
0000035c: AND
0000035d: DUP3
0000035e: DUP5
0000035f: ADD
00000360: MSTORE
00000361: PUSH1 0x54
00000363: DUP1
00000364: DUP4
00000365: ADD
00000366: DUP8
00000367: SWAP1
00000368: MSTORE
00000369: DUP4
0000036a: MLOAD
0000036b: DUP1
0000036c: DUP5
0000036d: SUB
0000036e: SWAP1
0000036f: SWAP2
00000370: ADD
00000371: DUP2
00000372: MSTORE
00000373: PUSH1 0x74
00000375: DUP4
00000376: ADD
00000377: DUP1
00000378: DUP6
00000379: MSTORE
0000037a: DUP2
0000037b: MLOAD
0000037c: SWAP2
0000037d: DUP4
0000037e: ADD
0000037f: SWAP2
00000380: SWAP1
00000381: SWAP2
00000382: KECCAK256
00000383: PUSH1 0x94
00000385: SWAP3
00000386: DUP7
00000387: MUL
00000388: DUP1
00000389: DUP6
0000038a: ADD
0000038b: DUP5
0000038c: ADD
0000038d: SWAP1
0000038e: SWAP6
0000038f: MSTORE
00000390: DUP6
00000391: DUP3
00000392: MSTORE
00000393: SWAP4
00000394: PUSH2 0x03df
00000397: SWAP4
00000398: SWAP2
00000399: SWAP3
0000039a: DUP8
0000039b: SWAP3
0000039c: DUP8
0000039d: SWAP3
0000039e: DUP4
0000039f: SWAP3
000003a0: SWAP1
000003a1: SWAP2
000003a2: ADD
000003a3: SWAP1
000003a4: DUP5
000003a5: SWAP1
000003a6: DUP1
000003a7: DUP3
000003a8: DUP5
000003a9: CALLDATACOPY
000003aa: PUSH1 0x00
000003ac: SWAP3
000003ad: ADD
000003ae: SWAP2
000003af: SWAP1
000003b0: SWAP2
000003b1: MSTORE
000003b2: POP
000003b3: PUSH32 0x3fa782efa86216ee5b466920c73c2d01b14f881f8b3aa0ffe8255b938963f778
000003d4: SWAP3
000003d5: POP
000003d6: DUP6
000003d7: SWAP2
000003d8: POP
000003d9: PUSH2 0x06fe
000003dc: SWAP1
000003dd: POP
000003de: JUMP
000003df: JUMPDEST
000003e0: PUSH2 0x041a
000003e3: JUMPI
000003e4: PUSH1 0x40
000003e6: MLOAD
000003e7: PUSH3 0x461bcd
000003eb: PUSH1 0xe5
000003ed: SHL
000003ee: DUP2
000003ef: MSTORE
000003f0: PUSH1 0x04
000003f2: ADD
000003f3: DUP1
000003f4: DUP1
000003f5: PUSH1 0x20
000003f7: ADD
000003f8: DUP3
000003f9: DUP2
000003fa: SUB
000003fb: DUP3
000003fc: MSTORE
000003fd: PUSH1 0x21
000003ff: DUP2
00000400: MSTORE
00000401: PUSH1 0x20
00000403: ADD
00000404: DUP1
00000405: PUSH2 0x07f8
00000408: PUSH1 0x21
0000040a: SWAP2
0000040b: CODECOPY
0000040c: PUSH1 0x40
0000040e: ADD
0000040f: SWAP2
00000410: POP
00000411: POP
00000412: PUSH1 0x40
00000414: MLOAD
00000415: DUP1
00000416: SWAP2
00000417: SUB
00000418: SWAP1
00000419: REVERT
0000041a: JUMPDEST
0000041b: PUSH2 0x0423
0000041e: DUP7
0000041f: PUSH2 0x07a7
00000422: JUMP
00000423: JUMPDEST
00000424: PUSH32 0x000000000000000000000000a0b86991c6218b36c1d19d4a2e9eb0ce3606eb48
00000445: PUSH1 0x01
00000447: PUSH1 0x01
00000449: PUSH1 0xa0
0000044b: SHL
0000044c: SUB
0000044d: AND
0000044e: PUSH4 0xa9059cbb
00000453: DUP7
00000454: DUP7
00000455: PUSH1 0x40
00000457: MLOAD
00000458: DUP4
00000459: PUSH4 0xffffffff
0000045e: AND
0000045f: PUSH1 0xe0
00000461: SHL
00000462: DUP2
00000463: MSTORE
00000464: PUSH1 0x04
00000466: ADD
00000467: DUP1
00000468: DUP4
00000469: PUSH1 0x01
0000046b: PUSH1 0x01
0000046d: PUSH1 0xa0
0000046f: SHL
00000470: SUB
00000471: AND
00000472: PUSH1 0x01
00000474: PUSH1 0x01
00000476: PUSH1 0xa0
00000478: SHL
00000479: SUB
0000047a: AND
0000047b: DUP2
0000047c: MSTORE
0000047d: PUSH1 0x20
0000047f: ADD
00000480: DUP3
00000481: DUP2
00000482: MSTORE
00000483: PUSH1 0x20
00000485: ADD
00000486: SWAP3
00000487: POP
00000488: POP
00000489: POP
0000048a: PUSH1 0x20
0000048c: PUSH1 0x40
0000048e: MLOAD
0000048f: DUP1
00000490: DUP4
00000491: SUB
00000492: DUP2
00000493: PUSH1 0x00
00000495: DUP8
00000496: DUP1
00000497: EXTCODESIZE
00000498: ISZERO
00000499: DUP1
0000049a: ISZERO
0000049b: PUSH2 0x04a3
0000049e: JUMPI
0000049f: PUSH1 0x00
000004a1: DUP1
000004a2: REVERT
000004a3: JUMPDEST
000004a4: POP
000004a5: GAS
000004a6: CALL
000004a7: ISZERO
000004a8: DUP1
000004a9: ISZERO
000004aa: PUSH2 0x04b7
000004ad: JUMPI
000004ae: RETURNDATASIZE
000004af: PUSH1 0x00
000004b1: DUP1
000004b2: RETURNDATACOPY
000004b3: RETURNDATASIZE
000004b4: PUSH1 0x00
000004b6: REVERT
000004b7: JUMPDEST
000004b8: POP
000004b9: POP
000004ba: POP
000004bb: POP
000004bc: PUSH1 0x40
000004be: MLOAD
000004bf: RETURNDATASIZE
000004c0: PUSH1 0x20
000004c2: DUP2
000004c3: LT
000004c4: ISZERO
000004c5: PUSH2 0x04cd
000004c8: JUMPI
000004c9: PUSH1 0x00
000004cb: DUP1
000004cc: REVERT
000004cd: JUMPDEST
000004ce: POP
000004cf: MLOAD
000004d0: PUSH2 0x050a
000004d3: JUMPI
000004d4: PUSH1 0x40
000004d6: MLOAD
000004d7: PUSH3 0x461bcd
000004db: PUSH1 0xe5
000004dd: SHL
000004de: DUP2
000004df: MSTORE
000004e0: PUSH1 0x04
000004e2: ADD
000004e3: DUP1
000004e4: DUP1
000004e5: PUSH1 0x20
000004e7: ADD
000004e8: DUP3
000004e9: DUP2
000004ea: SUB
000004eb: DUP3
000004ec: MSTORE
000004ed: PUSH1 0x23
000004ef: DUP2
000004f0: MSTORE
000004f1: PUSH1 0x20
000004f3: ADD
000004f4: DUP1
000004f5: PUSH2 0x0819
000004f8: PUSH1 0x23
000004fa: SWAP2
000004fb: CODECOPY
000004fc: PUSH1 0x40
000004fe: ADD
000004ff: SWAP2
00000500: POP
00000501: POP
00000502: PUSH1 0x40
00000504: MLOAD
00000505: DUP1
00000506: SWAP2
00000507: SUB
00000508: SWAP1
00000509: REVERT
0000050a: JUMPDEST
0000050b: PUSH1 0x40
0000050d: DUP1
0000050e: MLOAD
0000050f: DUP8
00000510: DUP2
00000511: MSTORE
00000512: PUSH1 0x01
00000514: PUSH1 0x01
00000516: PUSH1 0xa0
00000518: SHL
00000519: SUB
0000051a: DUP8
0000051b: AND
0000051c: PUSH1 0x20
0000051e: DUP3
0000051f: ADD
00000520: MSTORE
00000521: DUP1
00000522: DUP3
00000523: ADD
00000524: DUP7
00000525: SWAP1
00000526: MSTORE
00000527: SWAP1
00000528: MLOAD
00000529: PUSH32 0x4ec90e965519d92681267467f775ada5bd214aa92c0dc93d90a5e880ce9ed026
0000054a: SWAP2
0000054b: DUP2
0000054c: SWAP1
0000054d: SUB
0000054e: PUSH1 0x60
00000550: ADD
00000551: SWAP1
00000552: LOG1
00000553: POP
00000554: POP
00000555: POP
00000556: POP
00000557: POP
00000558: POP
00000559: JUMP
0000055a: JUMPDEST
0000055b: PUSH32 0x3fa782efa86216ee5b466920c73c2d01b14f881f8b3aa0ffe8255b938963f778
0000057c: DUP2
0000057d: JUMP
0000057e: JUMPDEST
0000057f: PUSH1 0x00
00000581: SLOAD
00000582: PUSH1 0xff
00000584: AND
00000585: DUP2
00000586: JUMP
00000587: JUMPDEST
00000588: PUSH2 0x0100
0000058b: DUP2
0000058c: DIV
0000058d: PUSH1 0x00
0000058f: SWAP1
00000590: DUP2
00000591: MSTORE
00000592: PUSH1 0x01
00000594: PUSH1 0x20
00000596: DUP2
00000597: SWAP1
00000598: MSTORE
00000599: PUSH1 0x40
0000059b: SWAP1
0000059c: SWAP2
0000059d: KECCAK256
0000059e: SLOAD
0000059f: PUSH1 0xff
000005a1: SWAP1
000005a2: SWAP3
000005a3: AND
000005a4: SHL
000005a5: SWAP1
000005a6: DUP2
000005a7: AND
000005a8: EQ
000005a9: SWAP1
000005aa: JUMP
000005ab: JUMPDEST
000005ac: PUSH1 0x02
000005ae: SLOAD
000005af: PUSH1 0x01
000005b1: PUSH1 0x01
000005b3: PUSH1 0xa0
000005b5: SHL
000005b6: SUB
000005b7: AND
000005b8: CALLER
000005b9: EQ
000005ba: PUSH2 0x05f6
000005bd: JUMPI
000005be: PUSH1 0x40
000005c0: DUP1
000005c1: MLOAD
000005c2: PUSH3 0x461bcd
000005c6: PUSH1 0xe5
000005c8: SHL
000005c9: DUP2
000005ca: MSTORE
000005cb: PUSH1 0x20
000005cd: PUSH1 0x04
000005cf: DUP3
000005d0: ADD
000005d1: MSTORE
000005d2: PUSH1 0x09
000005d4: PUSH1 0x24
000005d6: DUP3
000005d7: ADD
000005d8: MSTORE
000005d9: PUSH9 0x10b232b83637bcb2b9
000005e3: PUSH1 0xb9
000005e5: SHL
000005e6: PUSH1 0x44
000005e8: DUP3
000005e9: ADD
000005ea: MSTORE
000005eb: SWAP1
000005ec: MLOAD
000005ed: SWAP1
000005ee: DUP2
000005ef: SWAP1
000005f0: SUB
000005f1: PUSH1 0x64
000005f3: ADD
000005f4: SWAP1
000005f5: REVERT
000005f6: JUMPDEST
000005f7: PUSH1 0x01
000005f9: PUSH1 0x01
000005fb: PUSH1 0xa0
000005fd: SHL
000005fe: SUB
000005ff: DUP3
00000600: AND
00000601: PUSH2 0x0644
00000604: JUMPI
00000605: PUSH1 0x02
00000607: SLOAD
00000608: PUSH1 0x40
0000060a: MLOAD
0000060b: PUSH1 0x01
0000060d: PUSH1 0x01
0000060f: PUSH1 0xa0
00000611: SHL
00000612: SUB
00000613: SWAP1
00000614: SWAP2
00000615: AND
00000616: SWAP1
00000617: DUP3
00000618: ISZERO
00000619: PUSH2 0x08fc
0000061c: MUL
0000061d: SWAP1
0000061e: DUP4
0000061f: SWAP1
00000620: PUSH1 0x00
00000622: DUP2
00000623: DUP2
00000624: DUP2
00000625: DUP6
00000626: DUP9
00000627: DUP9
00000628: CALL
00000629: SWAP4
0000062a: POP
0000062b: POP
0000062c: POP
0000062d: POP
0000062e: ISZERO
0000062f: DUP1
00000630: ISZERO
00000631: PUSH2 0x063e
00000634: JUMPI
00000635: RETURNDATASIZE
00000636: PUSH1 0x00
00000638: DUP1
00000639: RETURNDATACOPY
0000063a: RETURNDATASIZE
0000063b: PUSH1 0x00
0000063d: REVERT
0000063e: JUMPDEST
0000063f: POP
00000640: PUSH2 0x06c7
00000643: JUMP
00000644: JUMPDEST
00000645: PUSH1 0x02
00000647: SLOAD
00000648: PUSH1 0x40
0000064a: DUP1
0000064b: MLOAD
0000064c: PUSH4 0xa9059cbb
00000651: PUSH1 0xe0
00000653: SHL
00000654: DUP2
00000655: MSTORE
00000656: PUSH1 0x01
00000658: PUSH1 0x01
0000065a: PUSH1 0xa0
0000065c: SHL
0000065d: SUB
0000065e: SWAP3
0000065f: DUP4
00000660: AND
00000661: PUSH1 0x04
00000663: DUP3
00000664: ADD
00000665: MSTORE
00000666: PUSH1 0x24
00000668: DUP2
00000669: ADD
0000066a: DUP5
0000066b: SWAP1
0000066c: MSTORE
0000066d: SWAP1
0000066e: MLOAD
0000066f: SWAP2
00000670: DUP5
00000671: AND
00000672: SWAP2
00000673: PUSH4 0xa9059cbb
00000678: SWAP2
00000679: PUSH1 0x44
0000067b: DUP1
0000067c: DUP3
0000067d: ADD
0000067e: SWAP3
0000067f: PUSH1 0x20
00000681: SWAP3
00000682: SWAP1
00000683: SWAP2
00000684: SWAP1
00000685: DUP3
00000686: SWAP1
00000687: SUB
00000688: ADD
00000689: DUP2
0000068a: PUSH1 0x00
0000068c: DUP8
0000068d: DUP1
0000068e: EXTCODESIZE
0000068f: ISZERO
00000690: DUP1
00000691: ISZERO
00000692: PUSH2 0x069a
00000695: JUMPI
00000696: PUSH1 0x00
00000698: DUP1
00000699: REVERT
0000069a: JUMPDEST
0000069b: POP
0000069c: GAS
0000069d: CALL
0000069e: ISZERO
0000069f: DUP1
000006a0: ISZERO
000006a1: PUSH2 0x06ae
000006a4: JUMPI
000006a5: RETURNDATASIZE
000006a6: PUSH1 0x00
000006a8: DUP1
000006a9: RETURNDATACOPY
000006aa: RETURNDATASIZE
000006ab: PUSH1 0x00
000006ad: REVERT
000006ae: JUMPDEST
000006af: POP
000006b0: POP
000006b1: POP
000006b2: POP
000006b3: PUSH1 0x40
000006b5: MLOAD
000006b6: RETURNDATASIZE
000006b7: PUSH1 0x20
000006b9: DUP2
000006ba: LT
000006bb: ISZERO
000006bc: PUSH2 0x06c4
000006bf: JUMPI
000006c0: PUSH1 0x00
000006c2: DUP1
000006c3: REVERT
000006c4: JUMPDEST
000006c5: POP
000006c6: POP
000006c7: JUMPDEST
000006c8: POP
000006c9: POP
000006ca: JUMP
000006cb: JUMPDEST
000006cc: PUSH1 0x02
000006ce: SLOAD
000006cf: PUSH1 0x01
000006d1: PUSH1 0x01
000006d3: PUSH1 0xa0
000006d5: SHL
000006d6: SUB
000006d7: AND
000006d8: DUP2
000006d9: JUMP
000006da: JUMPDEST
000006db: PUSH32 0x000000000000000000000000a0b86991c6218b36c1d19d4a2e9eb0ce3606eb48
000006fc: DUP2
000006fd: JUMP
000006fe: JUMPDEST
000006ff: PUSH1 0x00
00000701: DUP2
00000702: DUP2
00000703: JUMPDEST
00000704: DUP6
00000705: MLOAD
00000706: DUP2
00000707: LT
00000708: ISZERO
00000709: PUSH2 0x079c
0000070c: JUMPI
0000070d: PUSH1 0x00
0000070f: DUP7
00000710: DUP3
00000711: DUP2
00000712: MLOAD
00000713: DUP2
00000714: LT
00000715: PUSH2 0x071a
00000718: JUMPI
00000719: INVALID
0000071a: JUMPDEST
0000071b: PUSH1 0x20
0000071d: MUL
0000071e: PUSH1 0x20
00000720: ADD
00000721: ADD
00000722: MLOAD
00000723: SWAP1
00000724: POP
00000725: DUP1
00000726: DUP4
00000727: GT
00000728: PUSH2 0x0761
0000072b: JUMPI
0000072c: DUP3
0000072d: DUP2
0000072e: PUSH1 0x40
00000730: MLOAD
00000731: PUSH1 0x20
00000733: ADD
00000734: DUP1
00000735: DUP4
00000736: DUP2
00000737: MSTORE
00000738: PUSH1 0x20
0000073a: ADD
0000073b: DUP3
0000073c: DUP2
0000073d: MSTORE
0000073e: PUSH1 0x20
00000740: ADD
00000741: SWAP3
00000742: POP
00000743: POP
00000744: POP
00000745: PUSH1 0x40
00000747: MLOAD
00000748: PUSH1 0x20
0000074a: DUP2
0000074b: DUP4
0000074c: SUB
0000074d: SUB
0000074e: DUP2
0000074f: MSTORE
00000750: SWAP1
00000751: PUSH1 0x40
00000753: MSTORE
00000754: DUP1
00000755: MLOAD
00000756: SWAP1
00000757: PUSH1 0x20
00000759: ADD
0000075a: KECCAK256
0000075b: SWAP3
0000075c: POP
0000075d: PUSH2 0x0793
00000760: JUMP
00000761: JUMPDEST
00000762: DUP1
00000763: DUP4
00000764: PUSH1 0x40
00000766: MLOAD
00000767: PUSH1 0x20
00000769: ADD
0000076a: DUP1
0000076b: DUP4
0000076c: DUP2
0000076d: MSTORE
0000076e: PUSH1 0x20
00000770: ADD
00000771: DUP3
00000772: DUP2
00000773: MSTORE
00000774: PUSH1 0x20
00000776: ADD
00000777: SWAP3
00000778: POP
00000779: POP
0000077a: POP
0000077b: PUSH1 0x40
0000077d: MLOAD
0000077e: PUSH1 0x20
00000780: DUP2
00000781: DUP4
00000782: SUB
00000783: SUB
00000784: DUP2
00000785: MSTORE
00000786: SWAP1
00000787: PUSH1 0x40
00000789: MSTORE
0000078a: DUP1
0000078b: MLOAD
0000078c: SWAP1
0000078d: PUSH1 0x20
0000078f: ADD
00000790: KECCAK256
00000791: SWAP3
00000792: POP
00000793: JUMPDEST
00000794: POP
00000795: PUSH1 0x01
00000797: ADD
00000798: PUSH2 0x0703
0000079b: JUMP
0000079c: JUMPDEST
0000079d: POP
0000079e: SWAP1
0000079f: SWAP3
000007a0: EQ
000007a1: SWAP4
000007a2: SWAP3
000007a3: POP
000007a4: POP
000007a5: POP
000007a6: JUMP
000007a7: JUMPDEST
000007a8: PUSH2 0x0100
000007ab: DUP2
000007ac: DIV
000007ad: PUSH1 0x00
000007af: SWAP1
000007b0: DUP2
000007b1: MSTORE
000007b2: PUSH1 0x01
000007b4: PUSH1 0x20
000007b6: DUP2
000007b7: SWAP1
000007b8: MSTORE
000007b9: PUSH1 0x40
000007bb: SWAP1
000007bc: SWAP2
000007bd: KECCAK256
000007be: DUP1
000007bf: SLOAD
000007c0: PUSH1 0xff
000007c2: SWAP1
000007c3: SWAP4
000007c4: AND
000007c5: SWAP2
000007c6: SWAP1
000007c7: SWAP2
000007c8: SHL
000007c9: SWAP1
000007ca: SWAP2
000007cb: OR
000007cc: SWAP1
000007cd: SSTORE
000007ce: JUMP
000007cf: INVALID
000007d0: UNKNOWN(0x4D)
000007d1: PUSH6 0x726b6c654469
000007d8: PUSH20 0x7472696275746f723a2044726f7020616c726561
000007ed: PUSH5 0x7920636c61
000007f3: PUSH10 0x6d65642e4d65726b6c65
000007fe: DIFFICULTY
000007ff: PUSH10 0x737472696275746f723a
0000080a: KECCAK256
0000080b: BLOBHASH
0000080c: PUSH15 0x76616c69642070726f6f662e4d6572
0000081c: PUSH12 0x6c654469737472696275746f
00000829: PUSH19 0x3a205472616e73666572206661696c65642e54
0000083d: PUSH9 0x697320706172746963
00000847: PUSH22 0x6c6172207573657220616c726561647920676f6e6520
0000085e: PUSH21 0x68726f7567682061207370656369616c20636c6169
00000874: PUSH14 0x696e672070726f63657373a26469
00000883: PUSH17 0x66735822122086f330d45527b8c2100f86
00000895: RETURNDATASIZE
00000896: UNKNOWN(0xA5)
00000897: UNKNOWN(0xE9)
00000898: BYTE
00000899: UNKNOWN(0xBC)
0000089a: UNKNOWN(0xAC)
0000089b: UNKNOWN(0xBD)
0000089c: UNKNOWN(0x4D)
0000089d: UNKNOWN(0xD4)
0000089e: SAR
0000089f: UNKNOWN(0xD6)
000008a0: DUP8
000008a1: PUSH13 0xf42beb32a250381664736f6c63
000008af: NUMBER
000008b0: STOP
000008b1: MOD
000008b2: SIGNEXTEND
000008b3: STOP
000008b4: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x0475405a1dee4a15bff33686faa91e63bf1ce0911fee83c223c73b065e19b210
call_targets: 0x8609fe43e38448fa0d5f7ae9852570e90b7ec16b
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x0475405a1dee4a15bff33686faa91e63bf1ce0911fee83c223c73b065e19b210",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8609fe43e38448fa0d5f7ae9852570e90b7ec16b"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x9e34070f",
            "selector": "0x9e34070f",
            "calldata_variants": [
                "0x9e34070f",
                "0x9e34070f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb14b990f",
            "selector": "0xb14b990f",
            "calldata_variants": [
                "0xb14b990f",
                "0xb14b990f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd5f39488",
            "selector": "0xd5f39488",
            "calldata_variants": [
                "0xd5f39488",
                "0xd5f394880000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xfc0c546a",
            "selector": "0xfc0c546a",
            "calldata_variants": [
                "0xfc0c546a",
                "0xfc0c546a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x16c38b3c",
            "selector": "0x16c38b3c",
            "calldata_variants": [
                "0x16c38b3c",
                "0x16c38b3c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2e7ba6ef",
            "selector": "0x2e7ba6ef",
            "calldata_variants": [
                "0x2e7ba6ef",
                "0x2e7ba6ef0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2eb4a7ab",
            "selector": "0x2eb4a7ab",
            "calldata_variants": [
                "0x2eb4a7ab",
                "0x2eb4a7ab0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c975abb",
            "selector": "0x5c975abb",
            "calldata_variants": [
                "0x5c975abb",
                "0x5c975abb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1190,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1576,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1693,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 3
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x0475405a1dee4a15bff33686faa91e63bf1ce0911fee83c223c73b065e19b210
call_targets: 0x8609fe43e38448fa0d5f7ae9852570e90b7ec16b
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x0475405a1dee4a15bff33686faa91e63bf1ce0911fee83c223c73b065e19b210",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x8609fe43e38448fa0d5f7ae9852570e90b7ec16b"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x9e34070f",
            "selector": "0x9e34070f",
            "calldata_variants": [
                "0x9e34070f",
                "0x9e34070f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb14b990f",
            "selector": "0xb14b990f",
            "calldata_variants": [
                "0xb14b990f",
                "0xb14b990f0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xd5f39488",
            "selector": "0xd5f39488",
            "calldata_variants": [
                "0xd5f39488",
                "0xd5f394880000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xfc0c546a",
            "selector": "0xfc0c546a",
            "calldata_variants": [
                "0xfc0c546a",
                "0xfc0c546a0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x16c38b3c",
            "selector": "0x16c38b3c",
            "calldata_variants": [
                "0x16c38b3c",
                "0x16c38b3c0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2e7ba6ef",
            "selector": "0x2e7ba6ef",
            "calldata_variants": [
                "0x2e7ba6ef",
                "0x2e7ba6ef0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x2eb4a7ab",
            "selector": "0x2eb4a7ab",
            "calldata_variants": [
                "0x2eb4a7ab",
                "0x2eb4a7ab0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c975abb",
            "selector": "0x5c975abb",
            "calldata_variants": [
                "0x5c975abb",
                "0x5c975abb0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1190,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1576,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1693,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 3,
    "guards_detected": []
}