TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba9a5-c61d-72f5-a85d-5f82d7cf3bd7

complete
Chain ID
1
Address
Block Number
Created
Sat, Jan 10, 2026 8:42 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Bytecode only
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
37059 artifact.fetch complete 1 / 3 3 months ago
37060 proxy.resolve complete 1 / 3 3 months ago
37061 tool.cast_disasm complete 1 / 3 3 months ago
37062 analysis.bundle complete 1 / 3 3 months ago
37063 capability.graph complete 1 / 3 3 months ago
37064 detector.run complete 1 / 3 3 months ago
37065 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no not_proxy
Implementation:
Verified Source: no
Proxy evidence
{
    "status": "not_proxy"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
1
CALL-family (heavy)
4
EXT*/BALANCE
2
Total opcodes
1084
Flags
create_opcodes_present
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: PUSH2 0x0029
0000000c: JUMPI
0000000d: PUSH1 0x00
0000000f: CALLDATALOAD
00000010: PUSH1 0xe0
00000012: SHR
00000013: DUP1
00000014: PUSH4 0x6f2cedd2
00000019: EQ
0000001a: PUSH2 0x00fe
0000001d: JUMPI
0000001e: DUP1
0000001f: PUSH4 0xdaea85c5
00000024: EQ
00000025: PUSH2 0x0113
00000028: JUMPI
00000029: JUMPDEST
0000002a: PUSH1 0x00
0000002c: SLOAD
0000002d: PUSH1 0x01
0000002f: PUSH1 0x01
00000031: PUSH1 0xa0
00000033: SHL
00000034: SUB
00000035: AND
00000036: CALLER
00000037: EQ
00000038: DUP1
00000039: PUSH2 0x004c
0000003c: JUMPI
0000003d: POP
0000003e: PUSH1 0x03
00000040: SLOAD
00000041: PUSH1 0x01
00000043: PUSH1 0x01
00000045: PUSH1 0xa0
00000047: SHL
00000048: SUB
00000049: AND
0000004a: CALLER
0000004b: EQ
0000004c: JUMPDEST
0000004d: PUSH2 0x0055
00000050: JUMPI
00000051: PUSH1 0x00
00000053: DUP1
00000054: REVERT
00000055: JUMPDEST
00000056: PUSH1 0x05
00000058: SLOAD
00000059: NUMBER
0000005a: LT
0000005b: ISZERO
0000005c: DUP1
0000005d: ISZERO
0000005e: PUSH2 0x006b
00000061: JUMPI
00000062: POP
00000063: PUSH1 0x03
00000065: PUSH1 0x05
00000067: SLOAD
00000068: NUMBER
00000069: SUB
0000006a: LT
0000006b: JUMPDEST
0000006c: DUP1
0000006d: ISZERO
0000006e: PUSH2 0x0081
00000071: JUMPI
00000072: POP
00000073: PUSH1 0x04
00000075: SLOAD
00000076: PUSH1 0x01
00000078: PUSH1 0xa0
0000007a: SHL
0000007b: SWAP1
0000007c: DIV
0000007d: PUSH1 0xff
0000007f: AND
00000080: ISZERO
00000081: JUMPDEST
00000082: ISZERO
00000083: PUSH2 0x00c1
00000086: JUMPI
00000087: PUSH1 0x06
00000089: SLOAD
0000008a: PUSH1 0x00
0000008c: SWAP1
0000008d: PUSH2 0x009e
00000090: SWAP1
00000091: PUSH1 0x01
00000093: PUSH1 0x01
00000095: PUSH1 0xa0
00000097: SHL
00000098: SUB
00000099: AND
0000009a: PUSH2 0x0126
0000009d: JUMP
0000009e: JUMPDEST
0000009f: SWAP1
000000a0: POP
000000a1: PUSH1 0x01
000000a3: DUP2
000000a4: ISZERO
000000a5: ISZERO
000000a6: EQ
000000a7: ISZERO
000000a8: PUSH2 0x00bf
000000ab: JUMPI
000000ac: PUSH1 0x04
000000ae: DUP1
000000af: SLOAD
000000b0: PUSH1 0xff
000000b2: PUSH1 0xa0
000000b4: SHL
000000b5: NOT
000000b6: AND
000000b7: PUSH1 0x01
000000b9: PUSH1 0xa0
000000bb: SHL
000000bc: OR
000000bd: SWAP1
000000be: SSTORE
000000bf: JUMPDEST
000000c0: POP
000000c1: JUMPDEST
000000c2: PUSH1 0x00
000000c4: DUP1
000000c5: SLOAD
000000c6: PUSH1 0x40
000000c8: MLOAD
000000c9: PUSH1 0x01
000000cb: PUSH1 0x01
000000cd: PUSH1 0xa0
000000cf: SHL
000000d0: SUB
000000d1: SWAP1
000000d2: SWAP2
000000d3: AND
000000d4: SWAP2
000000d5: CALLVALUE
000000d6: DUP1
000000d7: ISZERO
000000d8: PUSH2 0x08fc
000000db: MUL
000000dc: SWAP3
000000dd: SWAP1
000000de: SWAP2
000000df: DUP2
000000e0: DUP2
000000e1: DUP2
000000e2: DUP6
000000e3: DUP9
000000e4: DUP9
000000e5: CALL
000000e6: SWAP4
000000e7: POP
000000e8: POP
000000e9: POP
000000ea: POP
000000eb: ISZERO
000000ec: DUP1
000000ed: ISZERO
000000ee: PUSH2 0x00fb
000000f1: JUMPI
000000f2: RETURNDATASIZE
000000f3: PUSH1 0x00
000000f5: DUP1
000000f6: RETURNDATACOPY
000000f7: RETURNDATASIZE
000000f8: PUSH1 0x00
000000fa: REVERT
000000fb: JUMPDEST
000000fc: POP
000000fd: STOP
000000fe: JUMPDEST
000000ff: PUSH2 0x0111
00000102: PUSH2 0x010c
00000105: CALLDATASIZE
00000106: PUSH1 0x04
00000108: PUSH2 0x03d8
0000010b: JUMP
0000010c: JUMPDEST
0000010d: PUSH2 0x0238
00000110: JUMP
00000111: JUMPDEST
00000112: STOP
00000113: JUMPDEST
00000114: PUSH2 0x0111
00000117: PUSH2 0x0121
0000011a: CALLDATASIZE
0000011b: PUSH1 0x04
0000011d: PUSH2 0x03b7
00000120: JUMP
00000121: JUMPDEST
00000122: PUSH2 0x02f8
00000125: JUMP
00000126: JUMPDEST
00000127: PUSH1 0x02
00000129: SLOAD
0000012a: PUSH1 0x40
0000012c: MLOAD
0000012d: PUSH4 0x70a08231
00000132: PUSH1 0xe0
00000134: SHL
00000135: DUP2
00000136: MSTORE
00000137: PUSH1 0x00
00000139: SWAP2
0000013a: DUP3
0000013b: SWAP2
0000013c: PUSH1 0x01
0000013e: PUSH1 0x01
00000140: PUSH1 0xa0
00000142: SHL
00000143: SUB
00000144: DUP6
00000145: DUP2
00000146: AND
00000147: SWAP3
00000148: PUSH4 0x70a08231
0000014d: SWAP3
0000014e: PUSH2 0x015d
00000151: SWAP3
00000152: SWAP1
00000153: SWAP2
00000154: AND
00000155: SWAP1
00000156: PUSH1 0x04
00000158: ADD
00000159: PUSH2 0x04ce
0000015c: JUMP
0000015d: JUMPDEST
0000015e: PUSH1 0x20
00000160: PUSH1 0x40
00000162: MLOAD
00000163: DUP1
00000164: DUP4
00000165: SUB
00000166: DUP2
00000167: DUP7
00000168: DUP1
00000169: EXTCODESIZE
0000016a: ISZERO
0000016b: DUP1
0000016c: ISZERO
0000016d: PUSH2 0x0175
00000170: JUMPI
00000171: PUSH1 0x00
00000173: DUP1
00000174: REVERT
00000175: JUMPDEST
00000176: POP
00000177: GAS
00000178: STATICCALL
00000179: ISZERO
0000017a: DUP1
0000017b: ISZERO
0000017c: PUSH2 0x0189
0000017f: JUMPI
00000180: RETURNDATASIZE
00000181: PUSH1 0x00
00000183: DUP1
00000184: RETURNDATACOPY
00000185: RETURNDATASIZE
00000186: PUSH1 0x00
00000188: REVERT
00000189: JUMPDEST
0000018a: POP
0000018b: POP
0000018c: POP
0000018d: POP
0000018e: PUSH1 0x40
00000190: MLOAD
00000191: RETURNDATASIZE
00000192: PUSH1 0x1f
00000194: NOT
00000195: PUSH1 0x1f
00000197: DUP3
00000198: ADD
00000199: AND
0000019a: DUP3
0000019b: ADD
0000019c: DUP1
0000019d: PUSH1 0x40
0000019f: MSTORE
000001a0: POP
000001a1: DUP2
000001a2: ADD
000001a3: SWAP1
000001a4: PUSH2 0x01ad
000001a7: SWAP2
000001a8: SWAP1
000001a9: PUSH2 0x04a6
000001ac: JUMP
000001ad: JUMPDEST
000001ae: SWAP1
000001af: POP
000001b0: DUP1
000001b1: PUSH2 0x01be
000001b4: JUMPI
000001b5: PUSH1 0x00
000001b7: SWAP2
000001b8: POP
000001b9: POP
000001ba: PUSH2 0x0233
000001bd: JUMP
000001be: JUMPDEST
000001bf: PUSH1 0x02
000001c1: SLOAD
000001c2: PUSH1 0x01
000001c4: SLOAD
000001c5: PUSH1 0x40
000001c7: MLOAD
000001c8: PUSH4 0x2e7aa013
000001cd: PUSH1 0xe1
000001cf: SHL
000001d0: DUP2
000001d1: MSTORE
000001d2: PUSH1 0x01
000001d4: PUSH1 0x01
000001d6: PUSH1 0xa0
000001d8: SHL
000001d9: SUB
000001da: SWAP3
000001db: DUP4
000001dc: AND
000001dd: SWAP3
000001de: PUSH4 0x5cf54026
000001e3: SWAP3
000001e4: PUSH2 0x01fb
000001e7: SWAP3
000001e8: SWAP2
000001e9: AND
000001ea: SWAP1
000001eb: DUP2
000001ec: SWAP1
000001ed: PUSH1 0x00
000001ef: SWAP1
000001f0: DUP10
000001f1: SWAP1
000001f2: DUP3
000001f3: SWAP1
000001f4: PUSH1 0x04
000001f6: ADD
000001f7: PUSH2 0x04e2
000001fa: JUMP
000001fb: JUMPDEST
000001fc: PUSH1 0x00
000001fe: PUSH1 0x40
00000200: MLOAD
00000201: DUP1
00000202: DUP4
00000203: SUB
00000204: DUP2
00000205: PUSH1 0x00
00000207: DUP8
00000208: DUP1
00000209: EXTCODESIZE
0000020a: ISZERO
0000020b: DUP1
0000020c: ISZERO
0000020d: PUSH2 0x0215
00000210: JUMPI
00000211: PUSH1 0x00
00000213: DUP1
00000214: REVERT
00000215: JUMPDEST
00000216: POP
00000217: GAS
00000218: CALL
00000219: ISZERO
0000021a: DUP1
0000021b: ISZERO
0000021c: PUSH2 0x0229
0000021f: JUMPI
00000220: RETURNDATASIZE
00000221: PUSH1 0x00
00000223: DUP1
00000224: RETURNDATACOPY
00000225: RETURNDATASIZE
00000226: PUSH1 0x00
00000228: REVERT
00000229: JUMPDEST
0000022a: POP
0000022b: POP
0000022c: POP
0000022d: POP
0000022e: PUSH1 0x01
00000230: SWAP2
00000231: POP
00000232: POP
00000233: JUMPDEST
00000234: SWAP2
00000235: SWAP1
00000236: POP
00000237: JUMP
00000238: JUMPDEST
00000239: PUSH1 0x00
0000023b: SLOAD
0000023c: PUSH1 0x01
0000023e: PUSH1 0x01
00000240: PUSH1 0xa0
00000242: SHL
00000243: SUB
00000244: AND
00000245: CALLER
00000246: EQ
00000247: PUSH2 0x024f
0000024a: JUMPI
0000024b: PUSH1 0x00
0000024d: DUP1
0000024e: REVERT
0000024f: JUMPDEST
00000250: PUSH1 0x00
00000252: JUMPDEST
00000253: DUP4
00000254: MLOAD
00000255: DUP2
00000256: LT
00000257: ISZERO
00000258: PUSH2 0x02f2
0000025b: JUMPI
0000025c: DUP4
0000025d: DUP2
0000025e: DUP2
0000025f: MLOAD
00000260: DUP2
00000261: LT
00000262: PUSH2 0x0267
00000265: JUMPI
00000266: INVALID
00000267: JUMPDEST
00000268: PUSH1 0x20
0000026a: MUL
0000026b: PUSH1 0x20
0000026d: ADD
0000026e: ADD
0000026f: MLOAD
00000270: PUSH1 0x01
00000272: PUSH1 0x01
00000274: PUSH1 0xa0
00000276: SHL
00000277: SUB
00000278: AND
00000279: CALLVALUE
0000027a: DUP5
0000027b: DUP5
0000027c: DUP5
0000027d: DUP2
0000027e: DUP2
0000027f: LT
00000280: PUSH2 0x0285
00000283: JUMPI
00000284: INVALID
00000285: JUMPDEST
00000286: SWAP1
00000287: POP
00000288: PUSH1 0x20
0000028a: MUL
0000028b: DUP2
0000028c: ADD
0000028d: SWAP1
0000028e: PUSH2 0x0297
00000291: SWAP2
00000292: SWAP1
00000293: PUSH2 0x0523
00000296: JUMP
00000297: JUMPDEST
00000298: PUSH1 0x40
0000029a: MLOAD
0000029b: PUSH2 0x02a5
0000029e: SWAP3
0000029f: SWAP2
000002a0: SWAP1
000002a1: PUSH2 0x04be
000002a4: JUMP
000002a5: JUMPDEST
000002a6: PUSH1 0x00
000002a8: PUSH1 0x40
000002aa: MLOAD
000002ab: DUP1
000002ac: DUP4
000002ad: SUB
000002ae: DUP2
000002af: DUP6
000002b0: DUP8
000002b1: GAS
000002b2: CALL
000002b3: SWAP3
000002b4: POP
000002b5: POP
000002b6: POP
000002b7: RETURNDATASIZE
000002b8: DUP1
000002b9: PUSH1 0x00
000002bb: DUP2
000002bc: EQ
000002bd: PUSH2 0x02e2
000002c0: JUMPI
000002c1: PUSH1 0x40
000002c3: MLOAD
000002c4: SWAP2
000002c5: POP
000002c6: PUSH1 0x1f
000002c8: NOT
000002c9: PUSH1 0x3f
000002cb: RETURNDATASIZE
000002cc: ADD
000002cd: AND
000002ce: DUP3
000002cf: ADD
000002d0: PUSH1 0x40
000002d2: MSTORE
000002d3: RETURNDATASIZE
000002d4: DUP3
000002d5: MSTORE
000002d6: RETURNDATASIZE
000002d7: PUSH1 0x00
000002d9: PUSH1 0x20
000002db: DUP5
000002dc: ADD
000002dd: RETURNDATACOPY
000002de: PUSH2 0x02e7
000002e1: JUMP
000002e2: JUMPDEST
000002e3: PUSH1 0x60
000002e5: SWAP2
000002e6: POP
000002e7: JUMPDEST
000002e8: POP
000002e9: POP
000002ea: POP
000002eb: PUSH1 0x01
000002ed: ADD
000002ee: PUSH2 0x0252
000002f1: JUMP
000002f2: JUMPDEST
000002f3: POP
000002f4: POP
000002f5: POP
000002f6: POP
000002f7: JUMP
000002f8: JUMPDEST
000002f9: PUSH1 0x04
000002fb: SLOAD
000002fc: PUSH1 0x01
000002fe: PUSH1 0x01
00000300: PUSH1 0xa0
00000302: SHL
00000303: SUB
00000304: AND
00000305: CALLER
00000306: EQ
00000307: DUP1
00000308: PUSH2 0x031b
0000030b: JUMPI
0000030c: POP
0000030d: PUSH1 0x00
0000030f: SLOAD
00000310: PUSH1 0x01
00000312: PUSH1 0x01
00000314: PUSH1 0xa0
00000316: SHL
00000317: SUB
00000318: AND
00000319: CALLER
0000031a: EQ
0000031b: JUMPDEST
0000031c: PUSH2 0x0324
0000031f: JUMPI
00000320: PUSH1 0x00
00000322: DUP1
00000323: REVERT
00000324: JUMPDEST
00000325: PUSH1 0x04
00000327: DUP1
00000328: SLOAD
00000329: PUSH1 0xff
0000032b: PUSH1 0xa0
0000032d: SHL
0000032e: NOT
0000032f: AND
00000330: SWAP1
00000331: SSTORE
00000332: NUMBER
00000333: PUSH1 0x05
00000335: SSTORE
00000336: PUSH1 0x06
00000338: DUP1
00000339: SLOAD
0000033a: PUSH1 0x01
0000033c: PUSH1 0x01
0000033e: PUSH1 0xa0
00000340: SHL
00000341: SUB
00000342: NOT
00000343: AND
00000344: PUSH1 0x01
00000346: PUSH1 0x01
00000348: PUSH1 0xa0
0000034a: SHL
0000034b: SUB
0000034c: SWAP3
0000034d: SWAP1
0000034e: SWAP3
0000034f: AND
00000350: SWAP2
00000351: SWAP1
00000352: SWAP2
00000353: OR
00000354: SWAP1
00000355: SSTORE
00000356: JUMP
00000357: JUMPDEST
00000358: DUP1
00000359: CALLDATALOAD
0000035a: PUSH1 0x01
0000035c: PUSH1 0x01
0000035e: PUSH1 0xa0
00000360: SHL
00000361: SUB
00000362: DUP2
00000363: AND
00000364: DUP2
00000365: EQ
00000366: PUSH2 0x0233
00000369: JUMPI
0000036a: PUSH1 0x00
0000036c: DUP1
0000036d: REVERT
0000036e: JUMPDEST
0000036f: PUSH1 0x00
00000371: DUP1
00000372: DUP4
00000373: PUSH1 0x1f
00000375: DUP5
00000376: ADD
00000377: SLT
00000378: PUSH2 0x037f
0000037b: JUMPI
0000037c: DUP1
0000037d: DUP2
0000037e: REVERT
0000037f: JUMPDEST
00000380: POP
00000381: DUP2
00000382: CALLDATALOAD
00000383: PUSH8 0xffffffffffffffff
0000038c: DUP2
0000038d: GT
0000038e: ISZERO
0000038f: PUSH2 0x0396
00000392: JUMPI
00000393: DUP2
00000394: DUP3
00000395: REVERT
00000396: JUMPDEST
00000397: PUSH1 0x20
00000399: DUP4
0000039a: ADD
0000039b: SWAP2
0000039c: POP
0000039d: DUP4
0000039e: PUSH1 0x20
000003a0: DUP1
000003a1: DUP4
000003a2: MUL
000003a3: DUP6
000003a4: ADD
000003a5: ADD
000003a6: GT
000003a7: ISZERO
000003a8: PUSH2 0x03b0
000003ab: JUMPI
000003ac: PUSH1 0x00
000003ae: DUP1
000003af: REVERT
000003b0: JUMPDEST
000003b1: SWAP3
000003b2: POP
000003b3: SWAP3
000003b4: SWAP1
000003b5: POP
000003b6: JUMP
000003b7: JUMPDEST
000003b8: PUSH1 0x00
000003ba: PUSH1 0x20
000003bc: DUP3
000003bd: DUP5
000003be: SUB
000003bf: SLT
000003c0: ISZERO
000003c1: PUSH2 0x03c8
000003c4: JUMPI
000003c5: DUP1
000003c6: DUP2
000003c7: REVERT
000003c8: JUMPDEST
000003c9: PUSH2 0x03d1
000003cc: DUP3
000003cd: PUSH2 0x0357
000003d0: JUMP
000003d1: JUMPDEST
000003d2: SWAP4
000003d3: SWAP3
000003d4: POP
000003d5: POP
000003d6: POP
000003d7: JUMP
000003d8: JUMPDEST
000003d9: PUSH1 0x00
000003db: DUP1
000003dc: PUSH1 0x00
000003de: PUSH1 0x40
000003e0: DUP5
000003e1: DUP7
000003e2: SUB
000003e3: SLT
000003e4: ISZERO
000003e5: PUSH2 0x03ec
000003e8: JUMPI
000003e9: DUP2
000003ea: DUP3
000003eb: REVERT
000003ec: JUMPDEST
000003ed: DUP4
000003ee: CALLDATALOAD
000003ef: PUSH8 0xffffffffffffffff
000003f8: DUP1
000003f9: DUP3
000003fa: GT
000003fb: ISZERO
000003fc: PUSH2 0x0403
000003ff: JUMPI
00000400: DUP4
00000401: DUP5
00000402: REVERT
00000403: JUMPDEST
00000404: DUP2
00000405: DUP7
00000406: ADD
00000407: SWAP2
00000408: POP
00000409: DUP7
0000040a: PUSH1 0x1f
0000040c: DUP4
0000040d: ADD
0000040e: SLT
0000040f: PUSH2 0x0416
00000412: JUMPI
00000413: DUP4
00000414: DUP5
00000415: REVERT
00000416: JUMPDEST
00000417: DUP2
00000418: CALLDATALOAD
00000419: DUP2
0000041a: DUP2
0000041b: GT
0000041c: ISZERO
0000041d: PUSH2 0x0422
00000420: JUMPI
00000421: INVALID
00000422: JUMPDEST
00000423: PUSH1 0x20
00000425: DUP1
00000426: DUP3
00000427: MUL
00000428: PUSH2 0x0432
0000042b: DUP3
0000042c: DUP3
0000042d: ADD
0000042e: PUSH2 0x0568
00000431: JUMP
00000432: JUMPDEST
00000433: DUP4
00000434: DUP2
00000435: MSTORE
00000436: DUP3
00000437: DUP2
00000438: ADD
00000439: SWAP1
0000043a: DUP7
0000043b: DUP5
0000043c: ADD
0000043d: DUP4
0000043e: DUP9
0000043f: ADD
00000440: DUP6
00000441: ADD
00000442: DUP14
00000443: LT
00000444: ISZERO
00000445: PUSH2 0x044c
00000448: JUMPI
00000449: DUP10
0000044a: DUP11
0000044b: REVERT
0000044c: JUMPDEST
0000044d: DUP10
0000044e: SWAP8
0000044f: POP
00000450: JUMPDEST
00000451: DUP6
00000452: DUP9
00000453: LT
00000454: ISZERO
00000455: PUSH2 0x0475
00000458: JUMPI
00000459: PUSH2 0x0461
0000045c: DUP2
0000045d: PUSH2 0x0357
00000460: JUMP
00000461: JUMPDEST
00000462: DUP4
00000463: MSTORE
00000464: PUSH1 0x01
00000466: SWAP8
00000467: SWAP1
00000468: SWAP8
00000469: ADD
0000046a: SWAP7
0000046b: SWAP2
0000046c: DUP5
0000046d: ADD
0000046e: SWAP2
0000046f: DUP5
00000470: ADD
00000471: PUSH2 0x0450
00000474: JUMP
00000475: JUMPDEST
00000476: POP
00000477: SWAP9
00000478: POP
00000479: POP
0000047a: POP
0000047b: DUP8
0000047c: ADD
0000047d: CALLDATALOAD
0000047e: SWAP3
0000047f: POP
00000480: POP
00000481: DUP1
00000482: DUP3
00000483: GT
00000484: ISZERO
00000485: PUSH2 0x048c
00000488: JUMPI
00000489: DUP4
0000048a: DUP5
0000048b: REVERT
0000048c: JUMPDEST
0000048d: POP
0000048e: PUSH2 0x0499
00000491: DUP7
00000492: DUP3
00000493: DUP8
00000494: ADD
00000495: PUSH2 0x036e
00000498: JUMP
00000499: JUMPDEST
0000049a: SWAP5
0000049b: SWAP8
0000049c: SWAP1
0000049d: SWAP7
0000049e: POP
0000049f: SWAP4
000004a0: SWAP5
000004a1: POP
000004a2: POP
000004a3: POP
000004a4: POP
000004a5: JUMP
000004a6: JUMPDEST
000004a7: PUSH1 0x00
000004a9: PUSH1 0x20
000004ab: DUP3
000004ac: DUP5
000004ad: SUB
000004ae: SLT
000004af: ISZERO
000004b0: PUSH2 0x04b7
000004b3: JUMPI
000004b4: DUP1
000004b5: DUP2
000004b6: REVERT
000004b7: JUMPDEST
000004b8: POP
000004b9: MLOAD
000004ba: SWAP2
000004bb: SWAP1
000004bc: POP
000004bd: JUMP
000004be: JUMPDEST
000004bf: PUSH1 0x00
000004c1: DUP3
000004c2: DUP5
000004c3: DUP4
000004c4: CALLDATACOPY
000004c5: SWAP2
000004c6: ADD
000004c7: SWAP1
000004c8: DUP2
000004c9: MSTORE
000004ca: SWAP2
000004cb: SWAP1
000004cc: POP
000004cd: JUMP
000004ce: JUMPDEST
000004cf: PUSH1 0x01
000004d1: PUSH1 0x01
000004d3: PUSH1 0xa0
000004d5: SHL
000004d6: SUB
000004d7: SWAP2
000004d8: SWAP1
000004d9: SWAP2
000004da: AND
000004db: DUP2
000004dc: MSTORE
000004dd: PUSH1 0x20
000004df: ADD
000004e0: SWAP1
000004e1: JUMP
000004e2: JUMPDEST
000004e3: PUSH1 0xc0
000004e5: DUP1
000004e6: DUP3
000004e7: MSTORE
000004e8: PUSH1 0x00
000004ea: SWAP1
000004eb: DUP3
000004ec: ADD
000004ed: MSTORE
000004ee: PUSH1 0x01
000004f0: PUSH1 0x01
000004f2: PUSH1 0xa0
000004f4: SHL
000004f5: SUB
000004f6: SWAP6
000004f7: DUP7
000004f8: AND
000004f9: PUSH1 0x20
000004fb: DUP3
000004fc: ADD
000004fd: MSTORE
000004fe: SWAP4
000004ff: DUP6
00000500: AND
00000501: PUSH1 0x40
00000503: DUP6
00000504: ADD
00000505: MSTORE
00000506: PUSH1 0x60
00000508: DUP5
00000509: ADD
0000050a: SWAP3
0000050b: SWAP1
0000050c: SWAP3
0000050d: MSTORE
0000050e: SWAP1
0000050f: SWAP3
00000510: AND
00000511: PUSH1 0x80
00000513: DUP3
00000514: ADD
00000515: MSTORE
00000516: PUSH1 0xa0
00000518: DUP2
00000519: ADD
0000051a: SWAP2
0000051b: SWAP1
0000051c: SWAP2
0000051d: MSTORE
0000051e: PUSH1 0xe0
00000520: ADD
00000521: SWAP1
00000522: JUMP
00000523: JUMPDEST
00000524: PUSH1 0x00
00000526: DUP1
00000527: DUP4
00000528: CALLDATALOAD
00000529: PUSH1 0x1e
0000052b: NOT
0000052c: DUP5
0000052d: CALLDATASIZE
0000052e: SUB
0000052f: ADD
00000530: DUP2
00000531: SLT
00000532: PUSH2 0x0539
00000535: JUMPI
00000536: DUP3
00000537: DUP4
00000538: REVERT
00000539: JUMPDEST
0000053a: DUP4
0000053b: ADD
0000053c: DUP1
0000053d: CALLDATALOAD
0000053e: SWAP2
0000053f: POP
00000540: PUSH8 0xffffffffffffffff
00000549: DUP3
0000054a: GT
0000054b: ISZERO
0000054c: PUSH2 0x0553
0000054f: JUMPI
00000550: DUP3
00000551: DUP4
00000552: REVERT
00000553: JUMPDEST
00000554: PUSH1 0x20
00000556: ADD
00000557: SWAP2
00000558: POP
00000559: CALLDATASIZE
0000055a: DUP2
0000055b: SWAP1
0000055c: SUB
0000055d: DUP3
0000055e: SGT
0000055f: ISZERO
00000560: PUSH2 0x03b0
00000563: JUMPI
00000564: PUSH1 0x00
00000566: DUP1
00000567: REVERT
00000568: JUMPDEST
00000569: PUSH1 0x40
0000056b: MLOAD
0000056c: DUP2
0000056d: DUP2
0000056e: ADD
0000056f: PUSH8 0xffffffffffffffff
00000578: DUP2
00000579: GT
0000057a: DUP3
0000057b: DUP3
0000057c: LT
0000057d: OR
0000057e: ISZERO
0000057f: PUSH2 0x0584
00000582: JUMPI
00000583: INVALID
00000584: JUMPDEST
00000585: PUSH1 0x40
00000587: MSTORE
00000588: SWAP2
00000589: SWAP1
0000058a: POP
0000058b: JUMP
0000058c: INVALID
0000058d: LOG2
0000058e: PUSH5 0x6970667358
00000594: UNKNOWN(0x22)
00000595: SLT
00000596: KECCAK256
00000597: UNKNOWN(0xEC)
00000598: SSTORE
00000599: JUMPI
0000059a: SDIV
0000059b: ADDRESS
0000059c: ADDMOD
0000059d: UNKNOWN(0xD4)
0000059e: BYTE
0000059f: UNKNOWN(0xC1)
000005a0: REVERT
000005a1: CREATE2
000005a2: DUP14
000005a3: MLOAD
000005a4: UNKNOWN(0xBA)
000005a5: UNKNOWN(0xAF)
000005a6: PUSH25 0x2226f7deb271f9ea1ae15e511e0ca2dc64736f6c6343000703
000005c0: STOP
000005c1: CALLER

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x71f3204ee7eff4de89346369b1bf1959af7e84d1eeaf5b7c4ae91bbeff2d7990
call_targets: 0x7e0d545841cdcfd491fc9593519468ed79b9385b
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x71f3204ee7eff4de89346369b1bf1959af7e84d1eeaf5b7c4ae91bbeff2d7990",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x7e0d545841cdcfd491fc9593519468ed79b9385b"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x6f2cedd2",
            "selector": "0x6f2cedd2",
            "calldata_variants": [
                "0x6f2cedd2",
                "0x6f2cedd20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xdaea85c5",
            "selector": "0xdaea85c5",
            "calldata_variants": [
                "0xdaea85c5",
                "0xdaea85c50000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 229,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 536,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 690,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 3,
    "guards_detected": [],
    "untrusted_call_count": 3
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x71f3204ee7eff4de89346369b1bf1959af7e84d1eeaf5b7c4ae91bbeff2d7990
call_targets: 0x7e0d545841cdcfd491fc9593519468ed79b9385b
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x71f3204ee7eff4de89346369b1bf1959af7e84d1eeaf5b7c4ae91bbeff2d7990",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x7e0d545841cdcfd491fc9593519468ed79b9385b"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x6f2cedd2",
            "selector": "0x6f2cedd2",
            "calldata_variants": [
                "0x6f2cedd2",
                "0x6f2cedd20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xdaea85c5",
            "selector": "0xdaea85c5",
            "calldata_variants": [
                "0xdaea85c5",
                "0xdaea85c50000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 229,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 536,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 690,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 3,
    "guards_detected": []
}
medium other detector CREATE/CREATE2 reachable 45 no no
view
trace_id: 0x61db6255d70ed9ad0dde559ac8ad2b09203adc9af76464935a53aa95261392a4
validation_json
{
    "sink": "CREATE",
    "errors": 0,
    "status": "unknown",
    "attempts": 4,
    "trace_id": "0x61db6255d70ed9ad0dde559ac8ad2b09203adc9af76464935a53aa95261392a4",
    "confirmed": false,
    "trace_mode": "structLogs",
    "call_targets": null,
    "matched_probe": null,
    "target_varies": null,
    "classification": "no_sink"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x6f2cedd2",
            "selector": "0x6f2cedd2",
            "calldata_variants": [
                "0x6f2cedd2",
                "0x6f2cedd20000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0xdaea85c5",
            "selector": "0xdaea85c5",
            "calldata_variants": [
                "0xdaea85c5",
                "0xdaea85c50000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "create_count": 0,
    "create2_count": 1
}
low other cast Contract creation opcode present 60 no
view
evidence_json
{
    "notes": "runtime can deploy contracts dynamically via CREATE/CREATE2",
    "create_count": 0,
    "create2_count": 1
}