TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

019ba9a5-c643-7000-b175-0a94b890c6ba

complete
Chain ID
1
Address
Block Number
Created
Sat, Jan 10, 2026 8:42 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
0
Validated
0
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 0 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
37094 artifact.fetch complete 1 / 3 3 months ago
37095 proxy.resolve complete 1 / 3 3 months ago
37096 tool.cast_disasm complete 1 / 3 3 months ago
37097 analysis.bundle complete 1 / 3 3 months ago
37098 capability.graph complete 1 / 3 3 months ago
37099 detector.run complete 1 / 3 3 months ago
37100 validation.fork complete 1 / 3 3 months ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no not_proxy
Implementation:
Verified Source: yes
Proxy evidence
{
    "status": "not_proxy"
}

Slither

tool.slither

No slither job recorded yet.

Codex

report.consolidate

No codex job recorded yet.

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
1
EXT*/BALANCE
2
Total opcodes
663
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x80
00000002: PUSH1 0x40
00000004: MSTORE
00000005: PUSH1 0x04
00000007: CALLDATASIZE
00000008: LT
00000009: ISZERO
0000000a: PUSH2 0x0013
0000000d: JUMPI
0000000e: JUMPDEST
0000000f: PUSH2 0x01ad
00000012: JUMP
00000013: JUMPDEST
00000014: PUSH2 0x001d
00000017: PUSH0
00000018: CALLDATALOAD
00000019: PUSH2 0x003c
0000001c: JUMP
0000001d: JUMPDEST
0000001e: DUP1
0000001f: PUSH4 0x8da5cb5b
00000024: EQ
00000025: PUSH2 0x0037
00000028: JUMPI
00000029: PUSH4 0xd9caed12
0000002e: SUB
0000002f: PUSH2 0x000e
00000032: JUMPI
00000033: PUSH2 0x0179
00000036: JUMP
00000037: JUMPDEST
00000038: PUSH2 0x00bc
0000003b: JUMP
0000003c: JUMPDEST
0000003d: PUSH1 0xe0
0000003f: SHR
00000040: SWAP1
00000041: JUMP
00000042: JUMPDEST
00000043: PUSH1 0x40
00000045: MLOAD
00000046: SWAP1
00000047: JUMP
00000048: JUMPDEST
00000049: PUSH0
0000004a: DUP1
0000004b: REVERT
0000004c: JUMPDEST
0000004d: PUSH0
0000004e: DUP1
0000004f: REVERT
00000050: JUMPDEST
00000051: PUSH0
00000052: SWAP2
00000053: SUB
00000054: SLT
00000055: PUSH2 0x005a
00000058: JUMPI
00000059: JUMP
0000005a: JUMPDEST
0000005b: PUSH2 0x004c
0000005e: JUMP
0000005f: JUMPDEST
00000060: PUSH32 0x0000000000000000000000009136ab0294986267b71beed86a75eeb3336d09e1
00000081: SWAP1
00000082: JUMP
00000083: JUMPDEST
00000084: PUSH1 0x01
00000086: DUP1
00000087: PUSH1 0xa0
00000089: SHL
0000008a: SUB
0000008b: AND
0000008c: SWAP1
0000008d: JUMP
0000008e: JUMPDEST
0000008f: PUSH2 0x0097
00000092: SWAP1
00000093: PUSH2 0x0083
00000096: JUMP
00000097: JUMPDEST
00000098: SWAP1
00000099: JUMP
0000009a: JUMPDEST
0000009b: PUSH2 0x00a3
0000009e: SWAP1
0000009f: PUSH2 0x008e
000000a2: JUMP
000000a3: JUMPDEST
000000a4: SWAP1
000000a5: MSTORE
000000a6: JUMP
000000a7: JUMPDEST
000000a8: SWAP2
000000a9: SWAP1
000000aa: PUSH2 0x00ba
000000ad: SWAP1
000000ae: PUSH0
000000af: PUSH1 0x20
000000b1: DUP6
000000b2: ADD
000000b3: SWAP5
000000b4: ADD
000000b5: SWAP1
000000b6: PUSH2 0x009a
000000b9: JUMP
000000ba: JUMPDEST
000000bb: JUMP
000000bc: JUMPDEST
000000bd: CALLVALUE
000000be: PUSH2 0x00ec
000000c1: JUMPI
000000c2: PUSH2 0x00cc
000000c5: CALLDATASIZE
000000c6: PUSH1 0x04
000000c8: PUSH2 0x0050
000000cb: JUMP
000000cc: JUMPDEST
000000cd: PUSH2 0x00e8
000000d0: PUSH2 0x00d7
000000d3: PUSH2 0x005f
000000d6: JUMP
000000d7: JUMPDEST
000000d8: PUSH2 0x00df
000000db: PUSH2 0x0042
000000de: JUMP
000000df: JUMPDEST
000000e0: SWAP2
000000e1: DUP3
000000e2: SWAP2
000000e3: DUP3
000000e4: PUSH2 0x00a7
000000e7: JUMP
000000e8: JUMPDEST
000000e9: SUB
000000ea: SWAP1
000000eb: RETURN
000000ec: JUMPDEST
000000ed: PUSH2 0x0048
000000f0: JUMP
000000f1: JUMPDEST
000000f2: PUSH2 0x00fa
000000f5: DUP2
000000f6: PUSH2 0x008e
000000f9: JUMP
000000fa: JUMPDEST
000000fb: SUB
000000fc: PUSH2 0x0101
000000ff: JUMPI
00000100: JUMP
00000101: JUMPDEST
00000102: PUSH0
00000103: DUP1
00000104: REVERT
00000105: JUMPDEST
00000106: SWAP1
00000107: POP
00000108: CALLDATALOAD
00000109: SWAP1
0000010a: PUSH2 0x0112
0000010d: DUP3
0000010e: PUSH2 0x00f1
00000111: JUMP
00000112: JUMPDEST
00000113: JUMP
00000114: JUMPDEST
00000115: SWAP1
00000116: JUMP
00000117: JUMPDEST
00000118: PUSH2 0x0120
0000011b: DUP2
0000011c: PUSH2 0x0114
0000011f: JUMP
00000120: JUMPDEST
00000121: SUB
00000122: PUSH2 0x0127
00000125: JUMPI
00000126: JUMP
00000127: JUMPDEST
00000128: PUSH0
00000129: DUP1
0000012a: REVERT
0000012b: JUMPDEST
0000012c: SWAP1
0000012d: POP
0000012e: CALLDATALOAD
0000012f: SWAP1
00000130: PUSH2 0x0138
00000133: DUP3
00000134: PUSH2 0x0117
00000137: JUMP
00000138: JUMPDEST
00000139: JUMP
0000013a: JUMPDEST
0000013b: SWAP1
0000013c: SWAP2
0000013d: PUSH1 0x60
0000013f: DUP3
00000140: DUP5
00000141: SUB
00000142: SLT
00000143: PUSH2 0x016f
00000146: JUMPI
00000147: PUSH2 0x016c
0000014a: PUSH2 0x0155
0000014d: DUP5
0000014e: PUSH0
0000014f: DUP6
00000150: ADD
00000151: PUSH2 0x0105
00000154: JUMP
00000155: JUMPDEST
00000156: SWAP4
00000157: PUSH2 0x0163
0000015a: DUP2
0000015b: PUSH1 0x20
0000015d: DUP7
0000015e: ADD
0000015f: PUSH2 0x0105
00000162: JUMP
00000163: JUMPDEST
00000164: SWAP4
00000165: PUSH1 0x40
00000167: ADD
00000168: PUSH2 0x012b
0000016b: JUMP
0000016c: JUMPDEST
0000016d: SWAP1
0000016e: JUMP
0000016f: JUMPDEST
00000170: PUSH2 0x004c
00000173: JUMP
00000174: JUMPDEST
00000175: PUSH0
00000176: ADD
00000177: SWAP1
00000178: JUMP
00000179: JUMPDEST
0000017a: CALLVALUE
0000017b: PUSH2 0x01a8
0000017e: JUMPI
0000017f: PUSH2 0x0192
00000182: PUSH2 0x018c
00000185: CALLDATASIZE
00000186: PUSH1 0x04
00000188: PUSH2 0x013a
0000018b: JUMP
0000018c: JUMPDEST
0000018d: SWAP2
0000018e: PUSH2 0x0314
00000191: JUMP
00000192: JUMPDEST
00000193: PUSH2 0x019a
00000196: PUSH2 0x0042
00000199: JUMP
0000019a: JUMPDEST
0000019b: DUP1
0000019c: PUSH2 0x01a4
0000019f: DUP2
000001a0: PUSH2 0x0174
000001a3: JUMP
000001a4: JUMPDEST
000001a5: SUB
000001a6: SWAP1
000001a7: RETURN
000001a8: JUMPDEST
000001a9: PUSH2 0x0048
000001ac: JUMP
000001ad: JUMPDEST
000001ae: PUSH0
000001af: DUP1
000001b0: REVERT
000001b1: JUMPDEST
000001b2: PUSH1 0x20
000001b4: SWAP2
000001b5: DUP2
000001b6: MSTORE
000001b7: ADD
000001b8: SWAP1
000001b9: JUMP
000001ba: JUMPDEST
000001bb: PUSH0
000001bc: PUSH32 0x556e617574686f72697a65640000000000000000000000000000000000000000
000001dd: SWAP2
000001de: ADD
000001df: MSTORE
000001e0: JUMP
000001e1: JUMPDEST
000001e2: PUSH2 0x01ee
000001e5: PUSH1 0x0c
000001e7: PUSH1 0x20
000001e9: SWAP3
000001ea: PUSH2 0x01b1
000001ed: JUMP
000001ee: JUMPDEST
000001ef: PUSH2 0x01f7
000001f2: DUP2
000001f3: PUSH2 0x01ba
000001f6: JUMP
000001f7: JUMPDEST
000001f8: ADD
000001f9: SWAP1
000001fa: JUMP
000001fb: JUMPDEST
000001fc: PUSH2 0x0210
000001ff: SWAP1
00000200: PUSH1 0x20
00000202: DUP2
00000203: ADD
00000204: SWAP1
00000205: PUSH0
00000206: DUP2
00000207: DUP4
00000208: SUB
00000209: SWAP2
0000020a: ADD
0000020b: MSTORE
0000020c: PUSH2 0x01e1
0000020f: JUMP
00000210: JUMPDEST
00000211: SWAP1
00000212: JUMP
00000213: JUMPDEST
00000214: ISZERO
00000215: PUSH2 0x021a
00000218: JUMPI
00000219: JUMP
0000021a: JUMPDEST
0000021b: PUSH2 0x0222
0000021e: PUSH2 0x0042
00000221: JUMP
00000222: JUMPDEST
00000223: PUSH3 0x461bcd
00000227: PUSH1 0xe5
00000229: SHL
0000022a: DUP2
0000022b: MSTORE
0000022c: DUP1
0000022d: PUSH2 0x0238
00000230: PUSH1 0x04
00000232: DUP3
00000233: ADD
00000234: PUSH2 0x01fb
00000237: JUMP
00000238: JUMPDEST
00000239: SUB
0000023a: SWAP1
0000023b: REVERT
0000023c: JUMPDEST
0000023d: SWAP1
0000023e: JUMP
0000023f: JUMPDEST
00000240: SWAP1
00000241: JUMP
00000242: JUMPDEST
00000243: PUSH2 0x0256
00000246: PUSH2 0x0251
00000249: PUSH2 0x025b
0000024c: SWAP3
0000024d: PUSH2 0x023c
00000250: JUMP
00000251: JUMPDEST
00000252: PUSH2 0x023f
00000255: JUMP
00000256: JUMPDEST
00000257: PUSH2 0x0114
0000025a: JUMP
0000025b: JUMPDEST
0000025c: SWAP1
0000025d: JUMP
0000025e: JUMPDEST
0000025f: PUSH0
00000260: PUSH32 0x546f6b656e20646f6573206e6f74206578697374000000000000000000000000
00000281: SWAP2
00000282: ADD
00000283: MSTORE
00000284: JUMP
00000285: JUMPDEST
00000286: PUSH2 0x0292
00000289: PUSH1 0x14
0000028b: PUSH1 0x20
0000028d: SWAP3
0000028e: PUSH2 0x01b1
00000291: JUMP
00000292: JUMPDEST
00000293: PUSH2 0x029b
00000296: DUP2
00000297: PUSH2 0x025e
0000029a: JUMP
0000029b: JUMPDEST
0000029c: ADD
0000029d: SWAP1
0000029e: JUMP
0000029f: JUMPDEST
000002a0: PUSH2 0x02b4
000002a3: SWAP1
000002a4: PUSH1 0x20
000002a6: DUP2
000002a7: ADD
000002a8: SWAP1
000002a9: PUSH0
000002aa: DUP2
000002ab: DUP4
000002ac: SUB
000002ad: SWAP2
000002ae: ADD
000002af: MSTORE
000002b0: PUSH2 0x0285
000002b3: JUMP
000002b4: JUMPDEST
000002b5: SWAP1
000002b6: JUMP
000002b7: JUMPDEST
000002b8: ISZERO
000002b9: PUSH2 0x02be
000002bc: JUMPI
000002bd: JUMP
000002be: JUMPDEST
000002bf: PUSH2 0x02c6
000002c2: PUSH2 0x0042
000002c5: JUMP
000002c6: JUMPDEST
000002c7: PUSH3 0x461bcd
000002cb: PUSH1 0xe5
000002cd: SHL
000002ce: DUP2
000002cf: MSTORE
000002d0: DUP1
000002d1: PUSH2 0x02dc
000002d4: PUSH1 0x04
000002d6: DUP3
000002d7: ADD
000002d8: PUSH2 0x029f
000002db: JUMP
000002dc: JUMPDEST
000002dd: SUB
000002de: SWAP1
000002df: REVERT
000002e0: JUMPDEST
000002e1: PUSH2 0x02f4
000002e4: PUSH2 0x02ef
000002e7: PUSH2 0x02f9
000002ea: SWAP3
000002eb: PUSH2 0x0083
000002ee: JUMP
000002ef: JUMPDEST
000002f0: PUSH2 0x023f
000002f3: JUMP
000002f4: JUMPDEST
000002f5: PUSH2 0x0083
000002f8: JUMP
000002f9: JUMPDEST
000002fa: SWAP1
000002fb: JUMP
000002fc: JUMPDEST
000002fd: PUSH2 0x0305
00000300: SWAP1
00000301: PUSH2 0x02e0
00000304: JUMP
00000305: JUMPDEST
00000306: SWAP1
00000307: JUMP
00000308: JUMPDEST
00000309: PUSH2 0x0311
0000030c: SWAP1
0000030d: PUSH2 0x02fc
00000310: JUMP
00000311: JUMPDEST
00000312: SWAP1
00000313: JUMP
00000314: JUMPDEST
00000315: SWAP1
00000316: SWAP2
00000317: PUSH2 0x037c
0000031a: PUSH2 0x0384
0000031d: SWAP4
0000031e: PUSH2 0x0359
00000321: CALLER
00000322: PUSH2 0x0353
00000325: PUSH2 0x034d
00000328: PUSH32 0x0000000000000000000000009136ab0294986267b71beed86a75eeb3336d09e1
00000349: PUSH2 0x008e
0000034c: JUMP
0000034d: JUMPDEST
0000034e: SWAP2
0000034f: PUSH2 0x008e
00000352: JUMP
00000353: JUMPDEST
00000354: EQ
00000355: PUSH2 0x0213
00000358: JUMP
00000359: JUMPDEST
0000035a: PUSH2 0x0377
0000035d: DUP2
0000035e: EXTCODESIZE
0000035f: PUSH2 0x0370
00000362: PUSH2 0x036a
00000365: PUSH0
00000366: PUSH2 0x0242
00000369: JUMP
0000036a: JUMPDEST
0000036b: SWAP2
0000036c: PUSH2 0x0114
0000036f: JUMP
00000370: JUMPDEST
00000371: EQ
00000372: ISZERO
00000373: PUSH2 0x02b7
00000376: JUMP
00000377: JUMPDEST
00000378: PUSH2 0x0308
0000037b: JUMP
0000037c: JUMPDEST
0000037d: SWAP2
0000037e: SWAP1
0000037f: SWAP2
00000380: PUSH2 0x040c
00000383: JUMP
00000384: JUMPDEST
00000385: JUMP
00000386: JUMPDEST
00000387: PUSH0
00000388: SWAP1
00000389: JUMP
0000038a: JUMPDEST
0000038b: PUSH0
0000038c: PUSH32 0x5452414e534645525f4641494c45440000000000000000000000000000000000
000003ad: SWAP2
000003ae: ADD
000003af: MSTORE
000003b0: JUMP
000003b1: JUMPDEST
000003b2: PUSH2 0x03be
000003b5: PUSH1 0x0f
000003b7: PUSH1 0x20
000003b9: SWAP3
000003ba: PUSH2 0x01b1
000003bd: JUMP
000003be: JUMPDEST
000003bf: PUSH2 0x03c7
000003c2: DUP2
000003c3: PUSH2 0x038a
000003c6: JUMP
000003c7: JUMPDEST
000003c8: ADD
000003c9: SWAP1
000003ca: JUMP
000003cb: JUMPDEST
000003cc: PUSH2 0x03e0
000003cf: SWAP1
000003d0: PUSH1 0x20
000003d2: DUP2
000003d3: ADD
000003d4: SWAP1
000003d5: PUSH0
000003d6: DUP2
000003d7: DUP4
000003d8: SUB
000003d9: SWAP2
000003da: ADD
000003db: MSTORE
000003dc: PUSH2 0x03b1
000003df: JUMP
000003e0: JUMPDEST
000003e1: SWAP1
000003e2: JUMP
000003e3: JUMPDEST
000003e4: ISZERO
000003e5: PUSH2 0x03ea
000003e8: JUMPI
000003e9: JUMP
000003ea: JUMPDEST
000003eb: PUSH2 0x03f2
000003ee: PUSH2 0x0042
000003f1: JUMP
000003f2: JUMPDEST
000003f3: PUSH3 0x461bcd
000003f7: PUSH1 0xe5
000003f9: SHL
000003fa: DUP2
000003fb: MSTORE
000003fc: DUP1
000003fd: PUSH2 0x0408
00000400: PUSH1 0x04
00000402: DUP3
00000403: ADD
00000404: PUSH2 0x03cb
00000407: JUMP
00000408: JUMPDEST
00000409: SUB
0000040a: SWAP1
0000040b: REVERT
0000040c: JUMPDEST
0000040d: SWAP1
0000040e: PUSH0
0000040f: PUSH1 0x44
00000411: PUSH1 0x20
00000413: SWAP3
00000414: PUSH2 0x045d
00000417: SWAP6
00000418: PUSH2 0x041f
0000041b: PUSH2 0x0386
0000041e: JUMP
0000041f: JUMPDEST
00000420: POP
00000421: PUSH1 0x40
00000423: MLOAD
00000424: SWAP2
00000425: PUSH4 0xa9059cbb
0000042a: PUSH1 0xe0
0000042c: SHL
0000042d: DUP4
0000042e: MSTORE
0000042f: PUSH1 0x01
00000431: DUP1
00000432: PUSH1 0xa0
00000434: SHL
00000435: SUB
00000436: AND
00000437: PUSH1 0x04
00000439: DUP4
0000043a: ADD
0000043b: MSTORE
0000043c: PUSH1 0x24
0000043e: DUP3
0000043f: ADD
00000440: MSTORE
00000441: DUP3
00000442: DUP6
00000443: GAS
00000444: CALL
00000445: SWAP1
00000446: DUP2
00000447: PUSH1 0x1f
00000449: RETURNDATASIZE
0000044a: GT
0000044b: PUSH1 0x01
0000044d: PUSH0
0000044e: MLOAD
0000044f: EQ
00000450: AND
00000451: ISZERO
00000452: AND
00000453: PUSH2 0x045f
00000456: JUMPI
00000457: JUMPDEST
00000458: POP
00000459: PUSH2 0x03e3
0000045c: JUMP
0000045d: JUMPDEST
0000045e: JUMP
0000045f: JUMPDEST
00000460: SWAP1
00000461: POP
00000462: RETURNDATASIZE
00000463: SWAP1
00000464: EXTCODESIZE
00000465: ISZERO
00000466: OR
00000467: ISZERO
00000468: PUSH0
00000469: PUSH2 0x0457
0000046c: JUMP

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 no no
view
trace_id: 0x5208375a40e3dbb1ec7e09d59c686e2174be5da27366304f5e5d732199a8cdd4
call_targets: 0xfee6564b9d70509b221a1068518dfdcec7585575
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x5208375a40e3dbb1ec7e09d59c686e2174be5da27366304f5e5d732199a8cdd4",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xfee6564b9d70509b221a1068518dfdcec7585575"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1092,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 1,
    "guards_detected": [],
    "untrusted_call_count": 1
}
high other detector ETH value transfer possible 55 no no
view
trace_id: 0x5208375a40e3dbb1ec7e09d59c686e2174be5da27366304f5e5d732199a8cdd4
call_targets: 0xfee6564b9d70509b221a1068518dfdcec7585575
target_varies: no
classification: constant_target
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "sink_reached",
    "attempts": 1,
    "trace_id": "0x5208375a40e3dbb1ec7e09d59c686e2174be5da27366304f5e5d732199a8cdd4",
    "confirmed": false,
    "trace_mode": "callTracer",
    "call_targets": [
        "0xfee6564b9d70509b221a1068518dfdcec7585575"
    ],
    "matched_probe": null,
    "target_varies": false,
    "classification": "constant_target"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x8da5cb5b",
            "selector": "0x8da5cb5b",
            "calldata_variants": [
                "0x8da5cb5b",
                "0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1092,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 1,
    "guards_detected": []
}