TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba940-8a04-717f-8388-fb62b15e409d

complete
Chain ID
1
Address
0xfb7b22ca585a2b400be99f7f2a2282724c7b54d3
Block Number
—
Created
Sat, Jan 10, 2026 6:52 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

back to vulns open contract
Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted DELEGATECALL target reachable
crit 0 high 0 proxy context implementation known
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
36756 artifact.fetch complete 1 / 3 3 months ago
36757 proxy.resolve complete 1 / 3 3 months ago
36758 tool.cast_disasm complete 1 / 3 3 months ago
36759 analysis.bundle complete 1 / 3 3 months ago
36760 capability.graph complete 1 / 3 3 months ago
36761 detector.run complete 1 / 3 3 months ago
36762 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX: —
Deployer: —
Proxy: yes onchain_only
Implementation:
0x1ecb3b1d213dbbfa994c9a04d08016fdf84192c7 target (child run)
Verified Source: no
Proxy evidence 
{
    "method": "eip1967",
    "status": "onchain_only",
    "implementation": "0x1ecb3b1d213dbbfa994c9a04d08016fdf84192c7",
    "onchain_method": "eip1967"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
2
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
3
Total opcodes
1255
Flags
delegatecall_present
View cast disassembly output 
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0074
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x8f283970
00000019: GT
0000001a: PUSH2 0x004e
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0x8f283970
00000024: EQ
00000025: PUSH2 0x00ef
00000028: JUMPI
00000029: DUP1
0000002a: PUSH4 0xabd108ba
0000002f: EQ
00000030: PUSH2 0x010f
00000033: JUMPI
00000034: DUP1
00000035: PUSH4 0xb2e6b912
0000003a: EQ
0000003b: PUSH2 0x0124
0000003e: JUMPI
0000003f: DUP1
00000040: PUSH4 0xf851a440
00000045: EQ
00000046: PUSH2 0x0139
00000049: JUMPI
0000004a: PUSH2 0x0083
0000004d: JUMP
0000004e: JUMPDEST
0000004f: DUP1
00000050: PUSH4 0x3659cfe6
00000055: EQ
00000056: PUSH2 0x008b
00000059: JUMPI
0000005a: DUP1
0000005b: PUSH4 0x4f1ef286
00000060: EQ
00000061: PUSH2 0x00ab
00000064: JUMPI
00000065: DUP1
00000066: PUSH4 0x5c60da1b
0000006b: EQ
0000006c: PUSH2 0x00be
0000006f: JUMPI
00000070: PUSH2 0x0083
00000073: JUMP
00000074: JUMPDEST
00000075: CALLDATASIZE
00000076: PUSH2 0x0083
00000079: JUMPI
0000007a: PUSH2 0x0081
0000007d: PUSH2 0x014e
00000080: JUMP
00000081: JUMPDEST
00000082: STOP
00000083: JUMPDEST
00000084: PUSH2 0x0081
00000087: PUSH2 0x014e
0000008a: JUMP
0000008b: JUMPDEST
0000008c: CALLVALUE
0000008d: DUP1
0000008e: ISZERO
0000008f: PUSH2 0x0097
00000092: JUMPI
00000093: PUSH1 0x00
00000095: DUP1
00000096: REVERT
00000097: JUMPDEST
00000098: POP
00000099: PUSH2 0x0081
0000009c: PUSH2 0x00a6
0000009f: CALLDATASIZE
000000a0: PUSH1 0x04
000000a2: PUSH2 0x0755
000000a5: JUMP
000000a6: JUMPDEST
000000a7: PUSH2 0x0168
000000aa: JUMP
000000ab: JUMPDEST
000000ac: PUSH2 0x0081
000000af: PUSH2 0x00b9
000000b2: CALLDATASIZE
000000b3: PUSH1 0x04
000000b5: PUSH2 0x0770
000000b8: JUMP
000000b9: JUMPDEST
000000ba: PUSH2 0x01af
000000bd: JUMP
000000be: JUMPDEST
000000bf: CALLVALUE
000000c0: DUP1
000000c1: ISZERO
000000c2: PUSH2 0x00ca
000000c5: JUMPI
000000c6: PUSH1 0x00
000000c8: DUP1
000000c9: REVERT
000000ca: JUMPDEST
000000cb: POP
000000cc: PUSH2 0x00d3
000000cf: PUSH2 0x0220
000000d2: JUMP
000000d3: JUMPDEST
000000d4: PUSH1 0x40
000000d6: MLOAD
000000d7: PUSH1 0x01
000000d9: PUSH1 0x01
000000db: PUSH1 0xa0
000000dd: SHL
000000de: SUB
000000df: SWAP1
000000e0: SWAP2
000000e1: AND
000000e2: DUP2
000000e3: MSTORE
000000e4: PUSH1 0x20
000000e6: ADD
000000e7: PUSH1 0x40
000000e9: MLOAD
000000ea: DUP1
000000eb: SWAP2
000000ec: SUB
000000ed: SWAP1
000000ee: RETURN
000000ef: JUMPDEST
000000f0: CALLVALUE
000000f1: DUP1
000000f2: ISZERO
000000f3: PUSH2 0x00fb
000000f6: JUMPI
000000f7: PUSH1 0x00
000000f9: DUP1
000000fa: REVERT
000000fb: JUMPDEST
000000fc: POP
000000fd: PUSH2 0x0081
00000100: PUSH2 0x010a
00000103: CALLDATASIZE
00000104: PUSH1 0x04
00000106: PUSH2 0x0755
00000109: JUMP
0000010a: JUMPDEST
0000010b: PUSH2 0x025b
0000010e: JUMP
0000010f: JUMPDEST
00000110: CALLVALUE
00000111: DUP1
00000112: ISZERO
00000113: PUSH2 0x011b
00000116: JUMPI
00000117: PUSH1 0x00
00000119: DUP1
0000011a: REVERT
0000011b: JUMPDEST
0000011c: POP
0000011d: PUSH2 0x00d3
00000120: PUSH2 0x0285
00000123: JUMP
00000124: JUMPDEST
00000125: CALLVALUE
00000126: DUP1
00000127: ISZERO
00000128: PUSH2 0x0130
0000012b: JUMPI
0000012c: PUSH1 0x00
0000012e: DUP1
0000012f: REVERT
00000130: JUMPDEST
00000131: POP
00000132: PUSH2 0x00d3
00000135: PUSH2 0x028f
00000138: JUMP
00000139: JUMPDEST
0000013a: CALLVALUE
0000013b: DUP1
0000013c: ISZERO
0000013d: PUSH2 0x0145
00000140: JUMPI
00000141: PUSH1 0x00
00000143: DUP1
00000144: REVERT
00000145: JUMPDEST
00000146: POP
00000147: PUSH2 0x00d3
0000014a: PUSH2 0x0299
0000014d: JUMP
0000014e: JUMPDEST
0000014f: PUSH2 0x0156
00000152: PUSH2 0x02ff
00000155: JUMP
00000156: JUMPDEST
00000157: PUSH2 0x0166
0000015a: PUSH2 0x0161
0000015d: PUSH2 0x039e
00000160: JUMP
00000161: JUMPDEST
00000162: PUSH2 0x03a8
00000165: JUMP
00000166: JUMPDEST
00000167: JUMP
00000168: JUMPDEST
00000169: PUSH2 0x0170
0000016c: PUSH2 0x03cc
0000016f: JUMP
00000170: JUMPDEST
00000171: PUSH1 0x01
00000173: PUSH1 0x01
00000175: PUSH1 0xa0
00000177: SHL
00000178: SUB
00000179: AND
0000017a: CALLER
0000017b: PUSH1 0x01
0000017d: PUSH1 0x01
0000017f: PUSH1 0xa0
00000181: SHL
00000182: SUB
00000183: AND
00000184: EQ
00000185: ISZERO
00000186: PUSH2 0x01a7
00000189: JUMPI
0000018a: PUSH2 0x01a4
0000018d: DUP2
0000018e: PUSH1 0x40
00000190: MLOAD
00000191: DUP1
00000192: PUSH1 0x20
00000194: ADD
00000195: PUSH1 0x40
00000197: MSTORE
00000198: DUP1
00000199: PUSH1 0x00
0000019b: DUP2
0000019c: MSTORE
0000019d: POP
0000019e: PUSH1 0x00
000001a0: PUSH2 0x03ff
000001a3: JUMP
000001a4: JUMPDEST
000001a5: POP
000001a6: JUMP
000001a7: JUMPDEST
000001a8: PUSH2 0x01a4
000001ab: PUSH2 0x014e
000001ae: JUMP
000001af: JUMPDEST
000001b0: PUSH2 0x01b7
000001b3: PUSH2 0x03cc
000001b6: JUMP
000001b7: JUMPDEST
000001b8: PUSH1 0x01
000001ba: PUSH1 0x01
000001bc: PUSH1 0xa0
000001be: SHL
000001bf: SUB
000001c0: AND
000001c1: CALLER
000001c2: PUSH1 0x01
000001c4: PUSH1 0x01
000001c6: PUSH1 0xa0
000001c8: SHL
000001c9: SUB
000001ca: AND
000001cb: EQ
000001cc: ISZERO
000001cd: PUSH2 0x0218
000001d0: JUMPI
000001d1: PUSH2 0x0213
000001d4: DUP4
000001d5: DUP4
000001d6: DUP4
000001d7: DUP1
000001d8: DUP1
000001d9: PUSH1 0x1f
000001db: ADD
000001dc: PUSH1 0x20
000001de: DUP1
000001df: SWAP2
000001e0: DIV
000001e1: MUL
000001e2: PUSH1 0x20
000001e4: ADD
000001e5: PUSH1 0x40
000001e7: MLOAD
000001e8: SWAP1
000001e9: DUP2
000001ea: ADD
000001eb: PUSH1 0x40
000001ed: MSTORE
000001ee: DUP1
000001ef: SWAP4
000001f0: SWAP3
000001f1: SWAP2
000001f2: SWAP1
000001f3: DUP2
000001f4: DUP2
000001f5: MSTORE
000001f6: PUSH1 0x20
000001f8: ADD
000001f9: DUP4
000001fa: DUP4
000001fb: DUP1
000001fc: DUP3
000001fd: DUP5
000001fe: CALLDATACOPY
000001ff: PUSH1 0x00
00000201: SWAP3
00000202: ADD
00000203: SWAP2
00000204: SWAP1
00000205: SWAP2
00000206: MSTORE
00000207: POP
00000208: PUSH1 0x01
0000020a: SWAP3
0000020b: POP
0000020c: PUSH2 0x03ff
0000020f: SWAP2
00000210: POP
00000211: POP
00000212: JUMP
00000213: JUMPDEST
00000214: POP
00000215: POP
00000216: POP
00000217: JUMP
00000218: JUMPDEST
00000219: PUSH2 0x0213
0000021c: PUSH2 0x014e
0000021f: JUMP
00000220: JUMPDEST
00000221: PUSH1 0x00
00000223: PUSH2 0x022a
00000226: PUSH2 0x03cc
00000229: JUMP
0000022a: JUMPDEST
0000022b: PUSH1 0x01
0000022d: PUSH1 0x01
0000022f: PUSH1 0xa0
00000231: SHL
00000232: SUB
00000233: AND
00000234: CALLER
00000235: PUSH1 0x01
00000237: PUSH1 0x01
00000239: PUSH1 0xa0
0000023b: SHL
0000023c: SUB
0000023d: AND
0000023e: EQ
0000023f: ISZERO
00000240: PUSH2 0x0250
00000243: JUMPI
00000244: PUSH2 0x024b
00000247: PUSH2 0x039e
0000024a: JUMP
0000024b: JUMPDEST
0000024c: SWAP1
0000024d: POP
0000024e: SWAP1
0000024f: JUMP
00000250: JUMPDEST
00000251: PUSH2 0x0258
00000254: PUSH2 0x014e
00000257: JUMP
00000258: JUMPDEST
00000259: SWAP1
0000025a: JUMP
0000025b: JUMPDEST
0000025c: PUSH2 0x0263
0000025f: PUSH2 0x03cc
00000262: JUMP
00000263: JUMPDEST
00000264: PUSH1 0x01
00000266: PUSH1 0x01
00000268: PUSH1 0xa0
0000026a: SHL
0000026b: SUB
0000026c: AND
0000026d: CALLER
0000026e: PUSH1 0x01
00000270: PUSH1 0x01
00000272: PUSH1 0xa0
00000274: SHL
00000275: SUB
00000276: AND
00000277: EQ
00000278: ISZERO
00000279: PUSH2 0x01a7
0000027c: JUMPI
0000027d: PUSH2 0x01a4
00000280: DUP2
00000281: PUSH2 0x042a
00000284: JUMP
00000285: JUMPDEST
00000286: PUSH1 0x00
00000288: PUSH2 0x024b
0000028b: PUSH2 0x039e
0000028e: JUMP
0000028f: JUMPDEST
00000290: PUSH1 0x00
00000292: PUSH2 0x024b
00000295: PUSH2 0x03cc
00000298: JUMP
00000299: JUMPDEST
0000029a: PUSH1 0x00
0000029c: PUSH2 0x02a3
0000029f: PUSH2 0x03cc
000002a2: JUMP
000002a3: JUMPDEST
000002a4: PUSH1 0x01
000002a6: PUSH1 0x01
000002a8: PUSH1 0xa0
000002aa: SHL
000002ab: SUB
000002ac: AND
000002ad: CALLER
000002ae: PUSH1 0x01
000002b0: PUSH1 0x01
000002b2: PUSH1 0xa0
000002b4: SHL
000002b5: SUB
000002b6: AND
000002b7: EQ
000002b8: ISZERO
000002b9: PUSH2 0x0250
000002bc: JUMPI
000002bd: PUSH2 0x024b
000002c0: PUSH2 0x03cc
000002c3: JUMP
000002c4: JUMPDEST
000002c5: PUSH1 0x60
000002c7: PUSH2 0x02e9
000002ca: DUP4
000002cb: DUP4
000002cc: PUSH1 0x40
000002ce: MLOAD
000002cf: DUP1
000002d0: PUSH1 0x60
000002d2: ADD
000002d3: PUSH1 0x40
000002d5: MSTORE
000002d6: DUP1
000002d7: PUSH1 0x27
000002d9: DUP2
000002da: MSTORE
000002db: PUSH1 0x20
000002dd: ADD
000002de: PUSH2 0x086f
000002e1: PUSH1 0x27
000002e3: SWAP2
000002e4: CODECOPY
000002e5: PUSH2 0x047e
000002e8: JUMP
000002e9: JUMPDEST
000002ea: SWAP4
000002eb: SWAP3
000002ec: POP
000002ed: POP
000002ee: POP
000002ef: JUMP
000002f0: JUMPDEST
000002f1: PUSH1 0x01
000002f3: PUSH1 0x01
000002f5: PUSH1 0xa0
000002f7: SHL
000002f8: SUB
000002f9: AND
000002fa: EXTCODESIZE
000002fb: ISZERO
000002fc: ISZERO
000002fd: SWAP1
000002fe: JUMP
000002ff: JUMPDEST
00000300: PUSH2 0x0307
00000303: PUSH2 0x03cc
00000306: JUMP
00000307: JUMPDEST
00000308: PUSH1 0x01
0000030a: PUSH1 0x01
0000030c: PUSH1 0xa0
0000030e: SHL
0000030f: SUB
00000310: AND
00000311: CALLER
00000312: PUSH1 0x01
00000314: PUSH1 0x01
00000316: PUSH1 0xa0
00000318: SHL
00000319: SUB
0000031a: AND
0000031b: EQ
0000031c: ISZERO
0000031d: PUSH2 0x0166
00000320: JUMPI
00000321: PUSH1 0x40
00000323: MLOAD
00000324: PUSH3 0x461bcd
00000328: PUSH1 0xe5
0000032a: SHL
0000032b: DUP2
0000032c: MSTORE
0000032d: PUSH1 0x20
0000032f: PUSH1 0x04
00000331: DUP3
00000332: ADD
00000333: MSTORE
00000334: PUSH1 0x42
00000336: PUSH1 0x24
00000338: DUP3
00000339: ADD
0000033a: MSTORE
0000033b: PUSH32 0x5472616e73706172656e745570677261646561626c6550726f78793a2061646d
0000035c: PUSH1 0x44
0000035e: DUP3
0000035f: ADD
00000360: MSTORE
00000361: PUSH32 0x696e2063616e6e6f742066616c6c6261636b20746f2070726f78792074617267
00000382: PUSH1 0x64
00000384: DUP3
00000385: ADD
00000386: MSTORE
00000387: PUSH2 0x195d
0000038a: PUSH1 0xf2
0000038c: SHL
0000038d: PUSH1 0x84
0000038f: DUP3
00000390: ADD
00000391: MSTORE
00000392: PUSH1 0xa4
00000394: ADD
00000395: JUMPDEST
00000396: PUSH1 0x40
00000398: MLOAD
00000399: DUP1
0000039a: SWAP2
0000039b: SUB
0000039c: SWAP1
0000039d: REVERT
0000039e: JUMPDEST
0000039f: PUSH1 0x00
000003a1: PUSH2 0x024b
000003a4: PUSH2 0x055b
000003a7: JUMP
000003a8: JUMPDEST
000003a9: CALLDATASIZE
000003aa: PUSH1 0x00
000003ac: DUP1
000003ad: CALLDATACOPY
000003ae: PUSH1 0x00
000003b0: DUP1
000003b1: CALLDATASIZE
000003b2: PUSH1 0x00
000003b4: DUP5
000003b5: GAS
000003b6: DELEGATECALL
000003b7: RETURNDATASIZE
000003b8: PUSH1 0x00
000003ba: DUP1
000003bb: RETURNDATACOPY
000003bc: DUP1
000003bd: DUP1
000003be: ISZERO
000003bf: PUSH2 0x03c7
000003c2: JUMPI
000003c3: RETURNDATASIZE
000003c4: PUSH1 0x00
000003c6: RETURN
000003c7: JUMPDEST
000003c8: RETURNDATASIZE
000003c9: PUSH1 0x00
000003cb: REVERT
000003cc: JUMPDEST
000003cd: PUSH1 0x00
000003cf: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
000003f0: JUMPDEST
000003f1: SLOAD
000003f2: PUSH1 0x01
000003f4: PUSH1 0x01
000003f6: PUSH1 0xa0
000003f8: SHL
000003f9: SUB
000003fa: AND
000003fb: SWAP2
000003fc: SWAP1
000003fd: POP
000003fe: JUMP
000003ff: JUMPDEST
00000400: PUSH2 0x0408
00000403: DUP4
00000404: PUSH2 0x0583
00000407: JUMP
00000408: JUMPDEST
00000409: PUSH1 0x00
0000040b: DUP3
0000040c: MLOAD
0000040d: GT
0000040e: DUP1
0000040f: PUSH2 0x0415
00000412: JUMPI
00000413: POP
00000414: DUP1
00000415: JUMPDEST
00000416: ISZERO
00000417: PUSH2 0x0213
0000041a: JUMPI
0000041b: PUSH2 0x0424
0000041e: DUP4
0000041f: DUP4
00000420: PUSH2 0x02c4
00000423: JUMP
00000424: JUMPDEST
00000425: POP
00000426: POP
00000427: POP
00000428: POP
00000429: JUMP
0000042a: JUMPDEST
0000042b: PUSH32 0x7e644d79422f17c01e4894b5f4f588d331ebfa28653d42ae832dc59e38c9798f
0000044c: PUSH2 0x0453
0000044f: PUSH2 0x03cc
00000452: JUMP
00000453: JUMPDEST
00000454: PUSH1 0x40
00000456: DUP1
00000457: MLOAD
00000458: PUSH1 0x01
0000045a: PUSH1 0x01
0000045c: PUSH1 0xa0
0000045e: SHL
0000045f: SUB
00000460: SWAP3
00000461: DUP4
00000462: AND
00000463: DUP2
00000464: MSTORE
00000465: SWAP2
00000466: DUP5
00000467: AND
00000468: PUSH1 0x20
0000046a: DUP4
0000046b: ADD
0000046c: MSTORE
0000046d: ADD
0000046e: PUSH1 0x40
00000470: MLOAD
00000471: DUP1
00000472: SWAP2
00000473: SUB
00000474: SWAP1
00000475: LOG1
00000476: PUSH2 0x01a4
00000479: DUP2
0000047a: PUSH2 0x05c3
0000047d: JUMP
0000047e: JUMPDEST
0000047f: PUSH1 0x60
00000481: PUSH1 0x01
00000483: PUSH1 0x01
00000485: PUSH1 0xa0
00000487: SHL
00000488: SUB
00000489: DUP5
0000048a: AND
0000048b: EXTCODESIZE
0000048c: PUSH2 0x04e6
0000048f: JUMPI
00000490: PUSH1 0x40
00000492: MLOAD
00000493: PUSH3 0x461bcd
00000497: PUSH1 0xe5
00000499: SHL
0000049a: DUP2
0000049b: MSTORE
0000049c: PUSH1 0x20
0000049e: PUSH1 0x04
000004a0: DUP3
000004a1: ADD
000004a2: MSTORE
000004a3: PUSH1 0x26
000004a5: PUSH1 0x24
000004a7: DUP3
000004a8: ADD
000004a9: MSTORE
000004aa: PUSH32 0x416464726573733a2064656c65676174652063616c6c20746f206e6f6e2d636f
000004cb: PUSH1 0x44
000004cd: DUP3
000004ce: ADD
000004cf: MSTORE
000004d0: PUSH6 0x1b9d1c9858dd
000004d7: PUSH1 0xd2
000004d9: SHL
000004da: PUSH1 0x64
000004dc: DUP3
000004dd: ADD
000004de: MSTORE
000004df: PUSH1 0x84
000004e1: ADD
000004e2: PUSH2 0x0395
000004e5: JUMP
000004e6: JUMPDEST
000004e7: PUSH1 0x00
000004e9: DUP1
000004ea: DUP6
000004eb: PUSH1 0x01
000004ed: PUSH1 0x01
000004ef: PUSH1 0xa0
000004f1: SHL
000004f2: SUB
000004f3: AND
000004f4: DUP6
000004f5: PUSH1 0x40
000004f7: MLOAD
000004f8: PUSH2 0x0501
000004fb: SWAP2
000004fc: SWAP1
000004fd: PUSH2 0x07f3
00000500: JUMP
00000501: JUMPDEST
00000502: PUSH1 0x00
00000504: PUSH1 0x40
00000506: MLOAD
00000507: DUP1
00000508: DUP4
00000509: SUB
0000050a: DUP2
0000050b: DUP6
0000050c: GAS
0000050d: DELEGATECALL
0000050e: SWAP2
0000050f: POP
00000510: POP
00000511: RETURNDATASIZE
00000512: DUP1
00000513: PUSH1 0x00
00000515: DUP2
00000516: EQ
00000517: PUSH2 0x053c
0000051a: JUMPI
0000051b: PUSH1 0x40
0000051d: MLOAD
0000051e: SWAP2
0000051f: POP
00000520: PUSH1 0x1f
00000522: NOT
00000523: PUSH1 0x3f
00000525: RETURNDATASIZE
00000526: ADD
00000527: AND
00000528: DUP3
00000529: ADD
0000052a: PUSH1 0x40
0000052c: MSTORE
0000052d: RETURNDATASIZE
0000052e: DUP3
0000052f: MSTORE
00000530: RETURNDATASIZE
00000531: PUSH1 0x00
00000533: PUSH1 0x20
00000535: DUP5
00000536: ADD
00000537: RETURNDATACOPY
00000538: PUSH2 0x0541
0000053b: JUMP
0000053c: JUMPDEST
0000053d: PUSH1 0x60
0000053f: SWAP2
00000540: POP
00000541: JUMPDEST
00000542: POP
00000543: SWAP2
00000544: POP
00000545: SWAP2
00000546: POP
00000547: PUSH2 0x0551
0000054a: DUP3
0000054b: DUP3
0000054c: DUP7
0000054d: PUSH2 0x066c
00000550: JUMP
00000551: JUMPDEST
00000552: SWAP7
00000553: SWAP6
00000554: POP
00000555: POP
00000556: POP
00000557: POP
00000558: POP
00000559: POP
0000055a: JUMP
0000055b: JUMPDEST
0000055c: PUSH1 0x00
0000055e: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
0000057f: PUSH2 0x03f0
00000582: JUMP
00000583: JUMPDEST
00000584: PUSH2 0x058c
00000587: DUP2
00000588: PUSH2 0x06a5
0000058b: JUMP
0000058c: JUMPDEST
0000058d: PUSH1 0x40
0000058f: MLOAD
00000590: PUSH1 0x01
00000592: PUSH1 0x01
00000594: PUSH1 0xa0
00000596: SHL
00000597: SUB
00000598: DUP3
00000599: AND
0000059a: SWAP1
0000059b: PUSH32 0xbc7cd75a20ee27fd9adebab32041f755214dbc6bffa90cc0225b39da2e5c2d3b
000005bc: SWAP1
000005bd: PUSH1 0x00
000005bf: SWAP1
000005c0: LOG2
000005c1: POP
000005c2: JUMP
000005c3: JUMPDEST
000005c4: PUSH1 0x01
000005c6: PUSH1 0x01
000005c8: PUSH1 0xa0
000005ca: SHL
000005cb: SUB
000005cc: DUP2
000005cd: AND
000005ce: PUSH2 0x0628
000005d1: JUMPI
000005d2: PUSH1 0x40
000005d4: MLOAD
000005d5: PUSH3 0x461bcd
000005d9: PUSH1 0xe5
000005db: SHL
000005dc: DUP2
000005dd: MSTORE
000005de: PUSH1 0x20
000005e0: PUSH1 0x04
000005e2: DUP3
000005e3: ADD
000005e4: MSTORE
000005e5: PUSH1 0x26
000005e7: PUSH1 0x24
000005e9: DUP3
000005ea: ADD
000005eb: MSTORE
000005ec: PUSH32 0x455243313936373a206e65772061646d696e20697320746865207a65726f2061
0000060d: PUSH1 0x44
0000060f: DUP3
00000610: ADD
00000611: MSTORE
00000612: PUSH6 0x646472657373
00000619: PUSH1 0xd0
0000061b: SHL
0000061c: PUSH1 0x64
0000061e: DUP3
0000061f: ADD
00000620: MSTORE
00000621: PUSH1 0x84
00000623: ADD
00000624: PUSH2 0x0395
00000627: JUMP
00000628: JUMPDEST
00000629: DUP1
0000062a: PUSH32 0xb53127684a568b3173ae13b9f8a6016e243e63b6e8ee1178d6a717850b5d6103
0000064b: JUMPDEST
0000064c: DUP1
0000064d: SLOAD
0000064e: PUSH1 0x01
00000650: PUSH1 0x01
00000652: PUSH1 0xa0
00000654: SHL
00000655: SUB
00000656: NOT
00000657: AND
00000658: PUSH1 0x01
0000065a: PUSH1 0x01
0000065c: PUSH1 0xa0
0000065e: SHL
0000065f: SUB
00000660: SWAP3
00000661: SWAP1
00000662: SWAP3
00000663: AND
00000664: SWAP2
00000665: SWAP1
00000666: SWAP2
00000667: OR
00000668: SWAP1
00000669: SSTORE
0000066a: POP
0000066b: JUMP
0000066c: JUMPDEST
0000066d: PUSH1 0x60
0000066f: DUP4
00000670: ISZERO
00000671: PUSH2 0x067b
00000674: JUMPI
00000675: POP
00000676: DUP2
00000677: PUSH2 0x02e9
0000067a: JUMP
0000067b: JUMPDEST
0000067c: DUP3
0000067d: MLOAD
0000067e: ISZERO
0000067f: PUSH2 0x068b
00000682: JUMPI
00000683: DUP3
00000684: MLOAD
00000685: DUP1
00000686: DUP5
00000687: PUSH1 0x20
00000689: ADD
0000068a: REVERT
0000068b: JUMPDEST
0000068c: DUP2
0000068d: PUSH1 0x40
0000068f: MLOAD
00000690: PUSH3 0x461bcd
00000694: PUSH1 0xe5
00000696: SHL
00000697: DUP2
00000698: MSTORE
00000699: PUSH1 0x04
0000069b: ADD
0000069c: PUSH2 0x0395
0000069f: SWAP2
000006a0: SWAP1
000006a1: PUSH2 0x080f
000006a4: JUMP
000006a5: JUMPDEST
000006a6: PUSH1 0x01
000006a8: PUSH1 0x01
000006aa: PUSH1 0xa0
000006ac: SHL
000006ad: SUB
000006ae: DUP2
000006af: AND
000006b0: EXTCODESIZE
000006b1: PUSH2 0x0712
000006b4: JUMPI
000006b5: PUSH1 0x40
000006b7: MLOAD
000006b8: PUSH3 0x461bcd
000006bc: PUSH1 0xe5
000006be: SHL
000006bf: DUP2
000006c0: MSTORE
000006c1: PUSH1 0x20
000006c3: PUSH1 0x04
000006c5: DUP3
000006c6: ADD
000006c7: MSTORE
000006c8: PUSH1 0x2d
000006ca: PUSH1 0x24
000006cc: DUP3
000006cd: ADD
000006ce: MSTORE
000006cf: PUSH32 0x455243313936373a206e657720696d706c656d656e746174696f6e206973206e
000006f0: PUSH1 0x44
000006f2: DUP3
000006f3: ADD
000006f4: MSTORE
000006f5: PUSH13 0x1bdd08184818dbdb9d1c9858dd
00000703: PUSH1 0x9a
00000705: SHL
00000706: PUSH1 0x64
00000708: DUP3
00000709: ADD
0000070a: MSTORE
0000070b: PUSH1 0x84
0000070d: ADD
0000070e: PUSH2 0x0395
00000711: JUMP
00000712: JUMPDEST
00000713: DUP1
00000714: PUSH32 0x360894a13ba1a3210667c828492db98dca3e2076cc3735a920a3ca505d382bbc
00000735: PUSH2 0x064b
00000738: JUMP
00000739: JUMPDEST
0000073a: DUP1
0000073b: CALLDATALOAD
0000073c: PUSH1 0x01
0000073e: PUSH1 0x01
00000740: PUSH1 0xa0
00000742: SHL
00000743: SUB
00000744: DUP2
00000745: AND
00000746: DUP2
00000747: EQ
00000748: PUSH2 0x0750
0000074b: JUMPI
0000074c: PUSH1 0x00
0000074e: DUP1
0000074f: REVERT
00000750: JUMPDEST
00000751: SWAP2
00000752: SWAP1
00000753: POP
00000754: JUMP
00000755: JUMPDEST
00000756: PUSH1 0x00
00000758: PUSH1 0x20
0000075a: DUP3
0000075b: DUP5
0000075c: SUB
0000075d: SLT
0000075e: ISZERO
0000075f: PUSH2 0x0767
00000762: JUMPI
00000763: PUSH1 0x00
00000765: DUP1
00000766: REVERT
00000767: JUMPDEST
00000768: PUSH2 0x02e9
0000076b: DUP3
0000076c: PUSH2 0x0739
0000076f: JUMP
00000770: JUMPDEST
00000771: PUSH1 0x00
00000773: DUP1
00000774: PUSH1 0x00
00000776: PUSH1 0x40
00000778: DUP5
00000779: DUP7
0000077a: SUB
0000077b: SLT
0000077c: ISZERO
0000077d: PUSH2 0x0785
00000780: JUMPI
00000781: PUSH1 0x00
00000783: DUP1
00000784: REVERT
00000785: JUMPDEST
00000786: PUSH2 0x078e
00000789: DUP5
0000078a: PUSH2 0x0739
0000078d: JUMP
0000078e: JUMPDEST
0000078f: SWAP3
00000790: POP
00000791: PUSH1 0x20
00000793: DUP5
00000794: ADD
00000795: CALLDATALOAD
00000796: PUSH8 0xffffffffffffffff
0000079f: DUP1
000007a0: DUP3
000007a1: GT
000007a2: ISZERO
000007a3: PUSH2 0x07ab
000007a6: JUMPI
000007a7: PUSH1 0x00
000007a9: DUP1
000007aa: REVERT
000007ab: JUMPDEST
000007ac: DUP2
000007ad: DUP7
000007ae: ADD
000007af: SWAP2
000007b0: POP
000007b1: DUP7
000007b2: PUSH1 0x1f
000007b4: DUP4
000007b5: ADD
000007b6: SLT
000007b7: PUSH2 0x07bf
000007ba: JUMPI
000007bb: PUSH1 0x00
000007bd: DUP1
000007be: REVERT
000007bf: JUMPDEST
000007c0: DUP2
000007c1: CALLDATALOAD
000007c2: DUP2
000007c3: DUP2
000007c4: GT
000007c5: ISZERO
000007c6: PUSH2 0x07ce
000007c9: JUMPI
000007ca: PUSH1 0x00
000007cc: DUP1
000007cd: REVERT
000007ce: JUMPDEST
000007cf: DUP8
000007d0: PUSH1 0x20
000007d2: DUP3
000007d3: DUP6
000007d4: ADD
000007d5: ADD
000007d6: GT
000007d7: ISZERO
000007d8: PUSH2 0x07e0
000007db: JUMPI
000007dc: PUSH1 0x00
000007de: DUP1
000007df: REVERT
000007e0: JUMPDEST
000007e1: PUSH1 0x20
000007e3: DUP4
000007e4: ADD
000007e5: SWAP5
000007e6: POP
000007e7: DUP1
000007e8: SWAP4
000007e9: POP
000007ea: POP
000007eb: POP
000007ec: POP
000007ed: SWAP3
000007ee: POP
000007ef: SWAP3
000007f0: POP
000007f1: SWAP3
000007f2: JUMP
000007f3: JUMPDEST
000007f4: PUSH1 0x00
000007f6: DUP3
000007f7: MLOAD
000007f8: PUSH2 0x0805
000007fb: DUP2
000007fc: DUP5
000007fd: PUSH1 0x20
000007ff: DUP8
00000800: ADD
00000801: PUSH2 0x0842
00000804: JUMP
00000805: JUMPDEST
00000806: SWAP2
00000807: SWAP1
00000808: SWAP2
00000809: ADD
0000080a: SWAP3
0000080b: SWAP2
0000080c: POP
0000080d: POP
0000080e: JUMP
0000080f: JUMPDEST
00000810: PUSH1 0x20
00000812: DUP2
00000813: MSTORE
00000814: PUSH1 0x00
00000816: DUP3
00000817: MLOAD
00000818: DUP1
00000819: PUSH1 0x20
0000081b: DUP5
0000081c: ADD
0000081d: MSTORE
0000081e: PUSH2 0x082e
00000821: DUP2
00000822: PUSH1 0x40
00000824: DUP6
00000825: ADD
00000826: PUSH1 0x20
00000828: DUP8
00000829: ADD
0000082a: PUSH2 0x0842
0000082d: JUMP
0000082e: JUMPDEST
0000082f: PUSH1 0x1f
00000831: ADD
00000832: PUSH1 0x1f
00000834: NOT
00000835: AND
00000836: SWAP2
00000837: SWAP1
00000838: SWAP2
00000839: ADD
0000083a: PUSH1 0x40
0000083c: ADD
0000083d: SWAP3
0000083e: SWAP2
0000083f: POP
00000840: POP
00000841: JUMP
00000842: JUMPDEST
00000843: PUSH1 0x00
00000845: JUMPDEST
00000846: DUP4
00000847: DUP2
00000848: LT
00000849: ISZERO
0000084a: PUSH2 0x085d
0000084d: JUMPI
0000084e: DUP2
0000084f: DUP2
00000850: ADD
00000851: MLOAD
00000852: DUP4
00000853: DUP3
00000854: ADD
00000855: MSTORE
00000856: PUSH1 0x20
00000858: ADD
00000859: PUSH2 0x0845
0000085c: JUMP
0000085d: JUMPDEST
0000085e: DUP4
0000085f: DUP2
00000860: GT
00000861: ISZERO
00000862: PUSH2 0x0424
00000865: JUMPI
00000866: POP
00000867: POP
00000868: PUSH1 0x00
0000086a: SWAP2
0000086b: ADD
0000086c: MSTORE
0000086d: JUMP
0000086e: INVALID
0000086f: COINBASE
00000870: PUSH5 0x6472657373
00000876: GASPRICE
00000877: KECCAK256
00000878: PUSH13 0x6f772d6c6576656c2064656c65
00000886: PUSH8 0x6174652063616c6c
0000088f: KECCAK256
00000890: PUSH7 0x61696c6564a264
00000898: PUSH10 0x7066735822122070f351
000008a3: UNKNOWN(0xD3)
000008a4: UNKNOWN(0xC9)
000008a5: OR
000008a6: CALLCODE
000008a7: UNKNOWN(0xD0)
000008a8: PUSH15 0x787cae49c310e252f23b1fc769eef5
000008b8: UNKNOWN(0xC8)
000008b9: UNKNOWN(0x0F)
000008ba: RETURNDATASIZE
000008bb: UNKNOWN(0xB2)
000008bc: UNKNOWN(0x2F)
000008bd: SHR
000008be: DUP11
000008bf: UNKNOWN(0xEB)
000008c0: PUSH5 0x736f6c6343
000008c6: STOP
000008c7: ADDMOD
000008c8: SMOD
000008c9: STOP
000008ca: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
critical upgradeability detector Untrusted DELEGATECALL target reachable 70 no no
view
trace_id: 0x9b0a0b01b169f5f01a0d7930d07479e8f3ba1783b50973f11936776f1321bb82
call_targets: 0x1ecb3b1d213dbbfa994c9a04d08016fdf84192c7
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "DELEGATECALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 2,
    "trace_id": "0x9b0a0b01b169f5f01a0d7930d07479e8f3ba1783b50973f11936776f1321bb82",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x1ecb3b1d213dbbfa994c9a04d08016fdf84192c7"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xabd108ba",
            "selector": "0xabd108ba",
            "calldata_variants": [
                "0xabd108ba",
                "0xabd108ba0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb2e6b912",
            "selector": "0xb2e6b912",
            "calldata_variants": [
                "0xb2e6b912",
                "0xb2e6b9120000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 950,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        },
        {
            "pc": 1293,
            "opcode": "DELEGATECALL",
            "returndata_checked": null,
            "value_expression_category": "n/a",
            "target_expression_category": "computed"
        }
    ],
    "guards_detected": [],
    "delegatecall_count": 2,
    "untrusted_delegatecall_count": 2
}
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x4807242997f906a94a22a9e8e05ae85858e563e922a5f767819b905c91a4cfc0
call_targets: 0xfb7b22ca585a2b400be99f7f2a2282724c7b54d3
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x4807242997f906a94a22a9e8e05ae85858e563e922a5f767819b905c91a4cfc0",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xfb7b22ca585a2b400be99f7f2a2282724c7b54d3"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xabd108ba",
            "selector": "0xabd108ba",
            "calldata_variants": [
                "0xabd108ba",
                "0xabd108ba0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb2e6b912",
            "selector": "0xb2e6b912",
            "calldata_variants": [
                "0xb2e6b912",
                "0xb2e6b9120000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 2214,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [],
    "untrusted_call_count": 1
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x4807242997f906a94a22a9e8e05ae85858e563e922a5f767819b905c91a4cfc0
call_targets: 0xfb7b22ca585a2b400be99f7f2a2282724c7b54d3
target_varies: no
classification: constant_target
validation_json 
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x4807242997f906a94a22a9e8e05ae85858e563e922a5f767819b905c91a4cfc0",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xfb7b22ca585a2b400be99f7f2a2282724c7b54d3"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json 
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x8f283970",
            "selector": "0x8f283970",
            "calldata_variants": [
                "0x8f283970",
                "0x8f2839700000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xabd108ba",
            "selector": "0xabd108ba",
            "calldata_variants": [
                "0xabd108ba",
                "0xabd108ba0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xb2e6b912",
            "selector": "0xb2e6b912",
            "calldata_variants": [
                "0xb2e6b912",
                "0xb2e6b9120000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xf851a440",
            "selector": "0xf851a440",
            "calldata_variants": [
                "0xf851a440",
                "0xf851a4400000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x3659cfe6",
            "selector": "0x3659cfe6",
            "calldata_variants": [
                "0x3659cfe6",
                "0x3659cfe60000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4f1ef286",
            "selector": "0x4f1ef286",
            "calldata_variants": [
                "0x4f1ef286",
                "0x4f1ef2860000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x5c60da1b",
            "selector": "0x5c60da1b",
            "calldata_variants": [
                "0x5c60da1b",
                "0x5c60da1b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json 
{
    "examples": [
        {
            "pc": 2214,
            "opcode": "CALLCODE",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": []
}
medium upgradeability cast DELEGATECALL present 80 no —
view
evidence_json 
{
    "notes": "delegatecall enables execution in caller context; common in proxies/upgradeable patterns",
    "delegatecall_count": 2
}