019ba940-895b-72db-a826-140c87a411e7
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 36567 | artifact.fetch | complete | 1 / 3 | 3 months ago |
| 36568 | proxy.resolve | complete | 1 / 3 | 3 months ago |
| 36569 | tool.cast_disasm | complete | 1 / 3 | 3 months ago |
| 36570 | analysis.bundle | complete | 1 / 3 | 3 months ago |
| 36571 | capability.graph | complete | 1 / 3 | 3 months ago |
| 36572 | detector.run | complete | 1 / 3 | 3 months ago |
| 36573 | validation.fork | complete | 1 / 3 | 3 months ago |
{
"status": "etherscan_only",
"etherscan_hint": {
"source": "etherscan",
"etherscan": {
"proxy_flag": true,
"implementation": "0x15c4763f350b90c3e19aa3f654e766f4957019d3"
}
},
"implementation": "0x15c4763f350b90c3e19aa3f654e766f4957019d3"
}
No slither job recorded yet.
No codex job recorded yet.
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x0055 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH1 0xe0 00000012: SHR 00000013: DUP1 00000014: PUSH4 0x3ad06d16 00000019: EQ 0000001a: PUSH2 0x009e 0000001d: JUMPI 0000001e: DUP1 0000001f: PUSH4 0x54fd4d50 00000024: EQ 00000025: PUSH2 0x00d9 00000028: JUMPI 00000029: DUP1 0000002a: PUSH4 0x5c60da1b 0000002f: EQ 00000030: PUSH2 0x0100 00000033: JUMPI 00000034: DUP1 00000035: PUSH4 0x6fde8202 0000003a: EQ 0000003b: PUSH2 0x0131 0000003e: JUMPI 0000003f: DUP1 00000040: PUSH4 0xa9c45fcb 00000045: EQ 00000046: PUSH2 0x0146 00000049: JUMPI 0000004a: DUP1 0000004b: PUSH4 0xf1739cae 00000050: EQ 00000051: PUSH2 0x01cb 00000054: JUMPI 00000055: JUMPDEST 00000056: PUSH1 0x00 00000058: PUSH2 0x005f 0000005b: PUSH2 0x01fe 0000005e: JUMP 0000005f: JUMPDEST 00000060: SWAP1 00000061: POP 00000062: PUSH1 0x01 00000064: PUSH1 0x01 00000066: PUSH1 0xa0 00000068: SHL 00000069: SUB 0000006a: DUP2 0000006b: AND 0000006c: PUSH2 0x0074 0000006f: JUMPI 00000070: PUSH1 0x00 00000072: DUP1 00000073: REVERT 00000074: JUMPDEST 00000075: PUSH1 0x40 00000077: MLOAD 00000078: CALLDATASIZE 00000079: PUSH1 0x00 0000007b: DUP3 0000007c: CALLDATACOPY 0000007d: PUSH1 0x00 0000007f: DUP1 00000080: CALLDATASIZE 00000081: DUP4 00000082: DUP6 00000083: GAS 00000084: DELEGATECALL 00000085: RETURNDATASIZE 00000086: DUP3 00000087: ADD 00000088: PUSH1 0x40 0000008a: MSTORE 0000008b: RETURNDATASIZE 0000008c: PUSH1 0x00 0000008e: DUP4 0000008f: RETURNDATACOPY 00000090: DUP1 00000091: DUP1 00000092: ISZERO 00000093: PUSH2 0x009a 00000096: JUMPI 00000097: RETURNDATASIZE 00000098: DUP4 00000099: RETURN 0000009a: JUMPDEST 0000009b: RETURNDATASIZE 0000009c: DUP4 0000009d: REVERT 0000009e: JUMPDEST 0000009f: CALLVALUE 000000a0: DUP1 000000a1: ISZERO 000000a2: PUSH2 0x00aa 000000a5: JUMPI 000000a6: PUSH1 0x00 000000a8: DUP1 000000a9: REVERT 000000aa: JUMPDEST 000000ab: POP 000000ac: PUSH2 0x00d7 000000af: PUSH1 0x04 000000b1: DUP1 000000b2: CALLDATASIZE 000000b3: SUB 000000b4: PUSH1 0x40 000000b6: DUP2 000000b7: LT 000000b8: ISZERO 000000b9: PUSH2 0x00c1 000000bc: JUMPI 000000bd: PUSH1 0x00 000000bf: DUP1 000000c0: REVERT 000000c1: JUMPDEST 000000c2: POP 000000c3: DUP1 000000c4: CALLDATALOAD 000000c5: SWAP1 000000c6: PUSH1 0x20 000000c8: ADD 000000c9: CALLDATALOAD 000000ca: PUSH1 0x01 000000cc: PUSH1 0x01 000000ce: PUSH1 0xa0 000000d0: SHL 000000d1: SUB 000000d2: AND 000000d3: PUSH2 0x020d 000000d6: JUMP 000000d7: JUMPDEST 000000d8: STOP 000000d9: JUMPDEST 000000da: CALLVALUE 000000db: DUP1 000000dc: ISZERO 000000dd: PUSH2 0x00e5 000000e0: JUMPI 000000e1: PUSH1 0x00 000000e3: DUP1 000000e4: REVERT 000000e5: JUMPDEST 000000e6: POP 000000e7: PUSH2 0x00ee 000000ea: PUSH2 0x0240 000000ed: JUMP 000000ee: JUMPDEST 000000ef: PUSH1 0x40 000000f1: DUP1 000000f2: MLOAD 000000f3: SWAP2 000000f4: DUP3 000000f5: MSTORE 000000f6: MLOAD 000000f7: SWAP1 000000f8: DUP2 000000f9: SWAP1 000000fa: SUB 000000fb: PUSH1 0x20 000000fd: ADD 000000fe: SWAP1 000000ff: RETURN 00000100: JUMPDEST 00000101: CALLVALUE 00000102: DUP1 00000103: ISZERO 00000104: PUSH2 0x010c 00000107: JUMPI 00000108: PUSH1 0x00 0000010a: DUP1 0000010b: REVERT 0000010c: JUMPDEST 0000010d: POP 0000010e: PUSH2 0x0115 00000111: PUSH2 0x01fe 00000114: JUMP 00000115: JUMPDEST 00000116: PUSH1 0x40 00000118: DUP1 00000119: MLOAD 0000011a: PUSH1 0x01 0000011c: PUSH1 0x01 0000011e: PUSH1 0xa0 00000120: SHL 00000121: SUB 00000122: SWAP1 00000123: SWAP3 00000124: AND 00000125: DUP3 00000126: MSTORE 00000127: MLOAD 00000128: SWAP1 00000129: DUP2 0000012a: SWAP1 0000012b: SUB 0000012c: PUSH1 0x20 0000012e: ADD 0000012f: SWAP1 00000130: RETURN 00000131: JUMPDEST 00000132: CALLVALUE 00000133: DUP1 00000134: ISZERO 00000135: PUSH2 0x013d 00000138: JUMPI 00000139: PUSH1 0x00 0000013b: DUP1 0000013c: REVERT 0000013d: JUMPDEST 0000013e: POP 0000013f: PUSH2 0x0115 00000142: PUSH2 0x0246 00000145: JUMP 00000146: JUMPDEST 00000147: PUSH2 0x00d7 0000014a: PUSH1 0x04 0000014c: DUP1 0000014d: CALLDATASIZE 0000014e: SUB 0000014f: PUSH1 0x60 00000151: DUP2 00000152: LT 00000153: ISZERO 00000154: PUSH2 0x015c 00000157: JUMPI 00000158: PUSH1 0x00 0000015a: DUP1 0000015b: REVERT 0000015c: JUMPDEST 0000015d: DUP2 0000015e: CALLDATALOAD 0000015f: SWAP2 00000160: PUSH1 0x01 00000162: PUSH1 0x01 00000164: PUSH1 0xa0 00000166: SHL 00000167: SUB 00000168: PUSH1 0x20 0000016a: DUP3 0000016b: ADD 0000016c: CALLDATALOAD 0000016d: AND 0000016e: SWAP2 0000016f: DUP2 00000170: ADD 00000171: SWAP1 00000172: PUSH1 0x60 00000174: DUP2 00000175: ADD 00000176: PUSH1 0x40 00000178: DUP3 00000179: ADD 0000017a: CALLDATALOAD 0000017b: PUSH5 0x0100000000 00000181: DUP2 00000182: GT 00000183: ISZERO 00000184: PUSH2 0x018c 00000187: JUMPI 00000188: PUSH1 0x00 0000018a: DUP1 0000018b: REVERT 0000018c: JUMPDEST 0000018d: DUP3 0000018e: ADD 0000018f: DUP4 00000190: PUSH1 0x20 00000192: DUP3 00000193: ADD 00000194: GT 00000195: ISZERO 00000196: PUSH2 0x019e 00000199: JUMPI 0000019a: PUSH1 0x00 0000019c: DUP1 0000019d: REVERT 0000019e: JUMPDEST 0000019f: DUP1 000001a0: CALLDATALOAD 000001a1: SWAP1 000001a2: PUSH1 0x20 000001a4: ADD 000001a5: SWAP2 000001a6: DUP5 000001a7: PUSH1 0x01 000001a9: DUP4 000001aa: MUL 000001ab: DUP5 000001ac: ADD 000001ad: GT 000001ae: PUSH5 0x0100000000 000001b4: DUP4 000001b5: GT 000001b6: OR 000001b7: ISZERO 000001b8: PUSH2 0x01c0 000001bb: JUMPI 000001bc: PUSH1 0x00 000001be: DUP1 000001bf: REVERT 000001c0: JUMPDEST 000001c1: POP 000001c2: SWAP1 000001c3: SWAP3 000001c4: POP 000001c5: SWAP1 000001c6: POP 000001c7: PUSH2 0x0255 000001ca: JUMP 000001cb: JUMPDEST 000001cc: CALLVALUE 000001cd: DUP1 000001ce: ISZERO 000001cf: PUSH2 0x01d7 000001d2: JUMPI 000001d3: PUSH1 0x00 000001d5: DUP1 000001d6: REVERT 000001d7: JUMPDEST 000001d8: POP 000001d9: PUSH2 0x00d7 000001dc: PUSH1 0x04 000001de: DUP1 000001df: CALLDATASIZE 000001e0: SUB 000001e1: PUSH1 0x20 000001e3: DUP2 000001e4: LT 000001e5: ISZERO 000001e6: PUSH2 0x01ee 000001e9: JUMPI 000001ea: PUSH1 0x00 000001ec: DUP1 000001ed: REVERT 000001ee: JUMPDEST 000001ef: POP 000001f0: CALLDATALOAD 000001f1: PUSH1 0x01 000001f3: PUSH1 0x01 000001f5: PUSH1 0xa0 000001f7: SHL 000001f8: SUB 000001f9: AND 000001fa: PUSH2 0x02fe 000001fd: JUMP 000001fe: JUMPDEST 000001ff: PUSH1 0x00 00000201: PUSH2 0x0208 00000204: PUSH2 0x038d 00000207: JUMP 00000208: JUMPDEST 00000209: SWAP1 0000020a: POP 0000020b: SWAP1 0000020c: JUMP 0000020d: JUMPDEST 0000020e: PUSH2 0x0215 00000211: PUSH2 0x0246 00000214: JUMP 00000215: JUMPDEST 00000216: PUSH1 0x01 00000218: PUSH1 0x01 0000021a: PUSH1 0xa0 0000021c: SHL 0000021d: SUB 0000021e: AND 0000021f: CALLER 00000220: PUSH1 0x01 00000222: PUSH1 0x01 00000224: PUSH1 0xa0 00000226: SHL 00000227: SUB 00000228: AND 00000229: EQ 0000022a: PUSH2 0x0232 0000022d: JUMPI 0000022e: PUSH1 0x00 00000230: DUP1 00000231: REVERT 00000232: JUMPDEST 00000233: PUSH2 0x023c 00000236: DUP3 00000237: DUP3 00000238: PUSH2 0x039c 0000023b: JUMP 0000023c: JUMPDEST 0000023d: POP 0000023e: POP 0000023f: JUMP 00000240: JUMPDEST 00000241: PUSH1 0x07 00000243: SLOAD 00000244: SWAP1 00000245: JUMP 00000246: JUMPDEST 00000247: PUSH1 0x06 00000249: SLOAD 0000024a: PUSH1 0x01 0000024c: PUSH1 0x01 0000024e: PUSH1 0xa0 00000250: SHL 00000251: SUB 00000252: AND 00000253: SWAP1 00000254: JUMP 00000255: JUMPDEST 00000256: PUSH2 0x025d 00000259: PUSH2 0x0246 0000025c: JUMP 0000025d: JUMPDEST 0000025e: PUSH1 0x01 00000260: PUSH1 0x01 00000262: PUSH1 0xa0 00000264: SHL 00000265: SUB 00000266: AND 00000267: CALLER 00000268: PUSH1 0x01 0000026a: PUSH1 0x01 0000026c: PUSH1 0xa0 0000026e: SHL 0000026f: SUB 00000270: AND 00000271: EQ 00000272: PUSH2 0x027a 00000275: JUMPI 00000276: PUSH1 0x00 00000278: DUP1 00000279: REVERT 0000027a: JUMPDEST 0000027b: PUSH2 0x0284 0000027e: DUP5 0000027f: DUP5 00000280: PUSH2 0x020d 00000283: JUMP 00000284: JUMPDEST 00000285: PUSH1 0x00 00000287: ADDRESS 00000288: PUSH1 0x01 0000028a: PUSH1 0x01 0000028c: PUSH1 0xa0 0000028e: SHL 0000028f: SUB 00000290: AND 00000291: CALLVALUE 00000292: DUP5 00000293: DUP5 00000294: PUSH1 0x40 00000296: MLOAD 00000297: DUP1 00000298: DUP4 00000299: DUP4 0000029a: DUP1 0000029b: DUP3 0000029c: DUP5 0000029d: CALLDATACOPY 0000029e: PUSH1 0x40 000002a0: MLOAD 000002a1: SWAP3 000002a2: ADD 000002a3: SWAP5 000002a4: POP 000002a5: PUSH1 0x00 000002a7: SWAP4 000002a8: POP 000002a9: SWAP1 000002aa: SWAP2 000002ab: POP 000002ac: POP 000002ad: DUP1 000002ae: DUP4 000002af: SUB 000002b0: DUP2 000002b1: DUP6 000002b2: DUP8 000002b3: GAS 000002b4: CALL 000002b5: SWAP3 000002b6: POP 000002b7: POP 000002b8: POP 000002b9: RETURNDATASIZE 000002ba: DUP1 000002bb: PUSH1 0x00 000002bd: DUP2 000002be: EQ 000002bf: PUSH2 0x02e4 000002c2: JUMPI 000002c3: PUSH1 0x40 000002c5: MLOAD 000002c6: SWAP2 000002c7: POP 000002c8: PUSH1 0x1f 000002ca: NOT 000002cb: PUSH1 0x3f 000002cd: RETURNDATASIZE 000002ce: ADD 000002cf: AND 000002d0: DUP3 000002d1: ADD 000002d2: PUSH1 0x40 000002d4: MSTORE 000002d5: RETURNDATASIZE 000002d6: DUP3 000002d7: MSTORE 000002d8: RETURNDATASIZE 000002d9: PUSH1 0x00 000002db: PUSH1 0x20 000002dd: DUP5 000002de: ADD 000002df: RETURNDATACOPY 000002e0: PUSH2 0x02e9 000002e3: JUMP 000002e4: JUMPDEST 000002e5: PUSH1 0x60 000002e7: SWAP2 000002e8: POP 000002e9: JUMPDEST 000002ea: POP 000002eb: POP 000002ec: SWAP1 000002ed: POP 000002ee: DUP1 000002ef: PUSH2 0x02f7 000002f2: JUMPI 000002f3: PUSH1 0x00 000002f5: DUP1 000002f6: REVERT 000002f7: JUMPDEST 000002f8: POP 000002f9: POP 000002fa: POP 000002fb: POP 000002fc: POP 000002fd: JUMP 000002fe: JUMPDEST 000002ff: PUSH2 0x0306 00000302: PUSH2 0x0246 00000305: JUMP 00000306: JUMPDEST 00000307: PUSH1 0x01 00000309: PUSH1 0x01 0000030b: PUSH1 0xa0 0000030d: SHL 0000030e: SUB 0000030f: AND 00000310: CALLER 00000311: PUSH1 0x01 00000313: PUSH1 0x01 00000315: PUSH1 0xa0 00000317: SHL 00000318: SUB 00000319: AND 0000031a: EQ 0000031b: PUSH2 0x0323 0000031e: JUMPI 0000031f: PUSH1 0x00 00000321: DUP1 00000322: REVERT 00000323: JUMPDEST 00000324: PUSH1 0x01 00000326: PUSH1 0x01 00000328: PUSH1 0xa0 0000032a: SHL 0000032b: SUB 0000032c: DUP2 0000032d: AND 0000032e: PUSH2 0x0336 00000331: JUMPI 00000332: PUSH1 0x00 00000334: DUP1 00000335: REVERT 00000336: JUMPDEST 00000337: PUSH32 0x5a3e66efaa1e445ebd894728a69d6959842ea1e97bd79b892797106e270efcd9 00000358: PUSH2 0x035f 0000035b: PUSH2 0x0246 0000035e: JUMP 0000035f: JUMPDEST 00000360: PUSH1 0x40 00000362: DUP1 00000363: MLOAD 00000364: PUSH1 0x01 00000366: PUSH1 0x01 00000368: PUSH1 0xa0 0000036a: SHL 0000036b: SUB 0000036c: SWAP3 0000036d: DUP4 0000036e: AND 0000036f: DUP2 00000370: MSTORE 00000371: SWAP2 00000372: DUP5 00000373: AND 00000374: PUSH1 0x20 00000376: DUP4 00000377: ADD 00000378: MSTORE 00000379: DUP1 0000037a: MLOAD 0000037b: SWAP2 0000037c: DUP3 0000037d: SWAP1 0000037e: SUB 0000037f: ADD 00000380: SWAP1 00000381: LOG1 00000382: PUSH2 0x038a 00000385: DUP2 00000386: PUSH2 0x0432 00000389: JUMP 0000038a: JUMPDEST 0000038b: POP 0000038c: JUMP 0000038d: JUMPDEST 0000038e: PUSH1 0x08 00000390: SLOAD 00000391: PUSH1 0x01 00000393: PUSH1 0x01 00000395: PUSH1 0xa0 00000397: SHL 00000398: SUB 00000399: AND 0000039a: SWAP1 0000039b: JUMP 0000039c: JUMPDEST 0000039d: PUSH1 0x08 0000039f: SLOAD 000003a0: PUSH1 0x01 000003a2: PUSH1 0x01 000003a4: PUSH1 0xa0 000003a6: SHL 000003a7: SUB 000003a8: DUP3 000003a9: DUP2 000003aa: AND 000003ab: SWAP2 000003ac: AND 000003ad: EQ 000003ae: ISZERO 000003af: PUSH2 0x03b7 000003b2: JUMPI 000003b3: PUSH1 0x00 000003b5: DUP1 000003b6: REVERT 000003b7: JUMPDEST 000003b8: PUSH2 0x03c0 000003bb: DUP2 000003bc: PUSH2 0x0454 000003bf: JUMP 000003c0: JUMPDEST 000003c1: PUSH2 0x03c9 000003c4: JUMPI 000003c5: PUSH1 0x00 000003c7: DUP1 000003c8: REVERT 000003c9: JUMPDEST 000003ca: PUSH1 0x07 000003cc: SLOAD 000003cd: DUP3 000003ce: GT 000003cf: PUSH2 0x03d7 000003d2: JUMPI 000003d3: PUSH1 0x00 000003d5: DUP1 000003d6: REVERT 000003d7: JUMPDEST 000003d8: PUSH1 0x07 000003da: DUP3 000003db: SWAP1 000003dc: SSTORE 000003dd: PUSH1 0x08 000003df: DUP1 000003e0: SLOAD 000003e1: PUSH1 0x01 000003e3: PUSH1 0x01 000003e5: PUSH1 0xa0 000003e7: SHL 000003e8: SUB 000003e9: DUP4 000003ea: AND 000003eb: PUSH1 0x01 000003ed: PUSH1 0x01 000003ef: PUSH1 0xa0 000003f1: SHL 000003f2: SUB 000003f3: NOT 000003f4: SWAP1 000003f5: SWAP2 000003f6: AND 000003f7: DUP2 000003f8: OR 000003f9: SWAP1 000003fa: SWAP2 000003fb: SSTORE 000003fc: PUSH1 0x40 000003fe: DUP1 000003ff: MLOAD 00000400: DUP5 00000401: DUP2 00000402: MSTORE 00000403: SWAP1 00000404: MLOAD 00000405: PUSH32 0x4289d6195cf3c2d2174adf98d0e19d4d2d08887995b99cb7b100e7ffe795820e 00000426: SWAP2 00000427: DUP2 00000428: SWAP1 00000429: SUB 0000042a: PUSH1 0x20 0000042c: ADD 0000042d: SWAP1 0000042e: LOG2 0000042f: POP 00000430: POP 00000431: JUMP 00000432: JUMPDEST 00000433: PUSH1 0x06 00000435: DUP1 00000436: SLOAD 00000437: PUSH1 0x01 00000439: PUSH1 0x01 0000043b: PUSH1 0xa0 0000043d: SHL 0000043e: SUB 0000043f: NOT 00000440: AND 00000441: PUSH1 0x01 00000443: PUSH1 0x01 00000445: PUSH1 0xa0 00000447: SHL 00000448: SUB 00000449: SWAP3 0000044a: SWAP1 0000044b: SWAP3 0000044c: AND 0000044d: SWAP2 0000044e: SWAP1 0000044f: SWAP2 00000450: OR 00000451: SWAP1 00000452: SSTORE 00000453: JUMP 00000454: JUMPDEST 00000455: PUSH1 0x00 00000457: DUP2 00000458: EXTCODEHASH 00000459: PUSH32 0xc5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470 0000047a: DUP2 0000047b: DUP2 0000047c: EQ 0000047d: DUP1 0000047e: ISZERO 0000047f: SWAP1 00000480: PUSH2 0x0488 00000483: JUMPI 00000484: POP 00000485: DUP2 00000486: ISZERO 00000487: ISZERO 00000488: JUMPDEST 00000489: SWAP5 0000048a: SWAP4 0000048b: POP 0000048c: POP 0000048d: POP 0000048e: POP 0000048f: JUMP 00000490: INVALID 00000491: LOG2 00000492: PUSH5 0x6970667358 00000498: UNKNOWN(0x22) 00000499: SLT 0000049a: KECCAK256 0000049b: SLT 0000049c: EXTCODESIZE 0000049d: LOG2 0000049e: OR 0000049f: UNKNOWN(0x0F) 000004a0: ADD 000004a1: PUSH5 0xaa218d5315 000004a7: SELFDESTRUCT 000004a8: PUSH15 0xd1d15a6d6c4b5549fa13f6673ae964 000004b8: UNKNOWN(0xA9) 000004b9: AND 000004ba: ADD 000004bb: PUSH5 0x736f6c6343 000004c1: STOP 000004c2: SMOD 000004c3: SDIV 000004c4: STOP 000004c5: CALLER
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| critical | upgradeability | detector | Untrusted DELEGATECALL target reachable | 70 | no | no |
viewtrace_id: 0x0656eee86f80ae7c81953b8e7f85fedc6acb9f7e278024943629015378f99f34
validation_json{
"sink": "DELEGATECALL",
"errors": 0,
"status": "unknown",
"attempts": 72,
"trace_id": "0x0656eee86f80ae7c81953b8e7f85fedc6acb9f7e278024943629015378f99f34",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x3ad06d16",
"selector": "0x3ad06d16",
"calldata_variants": [
"0x3ad06d16",
"0x3ad06d160000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x54fd4d50",
"selector": "0x54fd4d50",
"calldata_variants": [
"0x54fd4d50",
"0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6fde8202",
"selector": "0x6fde8202",
"calldata_variants": [
"0x6fde8202",
"0x6fde82020000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa9c45fcb",
"selector": "0xa9c45fcb",
"calldata_variants": [
"0xa9c45fcb",
"0xa9c45fcb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf1739cae",
"selector": "0xf1739cae",
"calldata_variants": [
"0xf1739cae",
"0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 132,
"opcode": "DELEGATECALL",
"returndata_checked": null,
"value_expression_category": "n/a",
"target_expression_category": "computed"
}
],
"guards_detected": [],
"delegatecall_count": 1,
"untrusted_delegatecall_count": 1
}
|
| high | other | cast | SELFDESTRUCT present | 85 | no | — |
viewevidence_json{
"notes": "selfdestruct can remove contract code and send funds; review reachability",
"selfdestruct_count": 1
}
|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x8512b9f1abb4aaf50d4e76e07b82340ddf3b6509dba07cd414893aebeec34690
call_targets:
0x4663df344ccc2dc54a332f5c27c008d766773856
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x8512b9f1abb4aaf50d4e76e07b82340ddf3b6509dba07cd414893aebeec34690",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x4663df344ccc2dc54a332f5c27c008d766773856"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x3ad06d16",
"selector": "0x3ad06d16",
"calldata_variants": [
"0x3ad06d16",
"0x3ad06d160000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x54fd4d50",
"selector": "0x54fd4d50",
"calldata_variants": [
"0x54fd4d50",
"0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6fde8202",
"selector": "0x6fde8202",
"calldata_variants": [
"0x6fde8202",
"0x6fde82020000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa9c45fcb",
"selector": "0xa9c45fcb",
"calldata_variants": [
"0xa9c45fcb",
"0xa9c45fcb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf1739cae",
"selector": "0xf1739cae",
"calldata_variants": [
"0xf1739cae",
"0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 692,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x8512b9f1abb4aaf50d4e76e07b82340ddf3b6509dba07cd414893aebeec34690
call_targets:
0x4663df344ccc2dc54a332f5c27c008d766773856
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x8512b9f1abb4aaf50d4e76e07b82340ddf3b6509dba07cd414893aebeec34690",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x4663df344ccc2dc54a332f5c27c008d766773856"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x3ad06d16",
"selector": "0x3ad06d16",
"calldata_variants": [
"0x3ad06d16",
"0x3ad06d160000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x54fd4d50",
"selector": "0x54fd4d50",
"calldata_variants": [
"0x54fd4d50",
"0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6fde8202",
"selector": "0x6fde8202",
"calldata_variants": [
"0x6fde8202",
"0x6fde82020000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa9c45fcb",
"selector": "0xa9c45fcb",
"calldata_variants": [
"0xa9c45fcb",
"0xa9c45fcb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf1739cae",
"selector": "0xf1739cae",
"calldata_variants": [
"0xf1739cae",
"0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 692,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|
| high | other | detector | SELFDESTRUCT reachable | 65 | no | no |
viewtrace_id: 0x45cd8449961aa4458db1d52d862a578b33e785b29e34cbb9991d9b6dfe8a1789
validation_json{
"sink": "SELFDESTRUCT",
"errors": 0,
"status": "unknown",
"attempts": 12,
"trace_id": "0x45cd8449961aa4458db1d52d862a578b33e785b29e34cbb9991d9b6dfe8a1789",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x3ad06d16",
"selector": "0x3ad06d16",
"calldata_variants": [
"0x3ad06d16",
"0x3ad06d160000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x54fd4d50",
"selector": "0x54fd4d50",
"calldata_variants": [
"0x54fd4d50",
"0x54fd4d500000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x5c60da1b",
"selector": "0x5c60da1b",
"calldata_variants": [
"0x5c60da1b",
"0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x6fde8202",
"selector": "0x6fde8202",
"calldata_variants": [
"0x6fde8202",
"0x6fde82020000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa9c45fcb",
"selector": "0xa9c45fcb",
"calldata_variants": [
"0xa9c45fcb",
"0xa9c45fcb0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf1739cae",
"selector": "0xf1739cae",
"calldata_variants": [
"0xf1739cae",
"0xf1739cae0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"guards_detected": [],
"selfdestruct_count": 1
}
|
| medium | upgradeability | cast | DELEGATECALL present | 80 | no | — |
viewevidence_json{
"notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
"delegatecall_count": 1
}
|