02509bdc-a433-4b04-93bd-39a4eafdf5c8
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 30635 | report.consolidate | complete | 1 / 1 | 3 months ago |
| 74806 | artifact.fetch | failed | 1 / 3 | 2 weeks ago |
| 74807 | tool.cast_disasm | complete | 1 / 3 | 2 weeks ago |
| 74808 | analysis.bundle | complete | 1 / 3 | 2 weeks ago |
| 74809 | capability.graph | complete | 1 / 3 | 2 weeks ago |
| 74810 | detector.run | complete | 1 / 3 | 2 weeks ago |
| 74811 | validation.fork | complete | 1 / 3 | 2 weeks ago |
No slither job recorded yet.
[codex:1495050] OpenAI Codex v0.77.0 (research preview)
[codex:1495050] --------
[codex:1495050] workdir: /tmp/codex-multi-gacthwuv
[codex:1495050] model: gpt-5.2-codex
[codex:1495050] provider: openai
[codex:1495050] approval: never
[codex:1495050] sandbox: read-only
[codex:1495050] reasoning effort: xhigh
[codex:1495050] reasoning summaries: auto
[codex:1495050] session id: 019b6cbb-2e5f-7c80-b704-74078bc09668
[codex:1495050] --------
[codex:1495050] user
[codex:1495050] You are a security auditor. Audit this Solidity codebase for exploitable vulnerabilities.
[codex:1495050] Focus on: reentrancy, access control, upgradeability/proxy issues, signature validation, oracle manipulation,
[codex:1495050] accounting/invariant breaks, external call patterns, unchecked return values, and dangerous delegatecall.
[codex:1495050]
[codex:1495050] Scope rules:
[codex:1495050] - You MUST fully read `AUDIT_BUNDLE.txt` before concluding. It contains the complete contents of all first-party `contracts/**/*.sol` files.
[codex:1495050] - Treat `lib/` and `@openzeppelin/` as third-party dependencies; skip them unless there is a concrete misuse angle in first-party code.
[codex:1495050]
[codex:1495050] Output MUST be valid JSON matching the provided schema.
[codex:1495050] - If you find nothing meaningful: set no_findings=true and findings=[].
[codex:1495050] - Otherwise: set no_findings=false and include findings with severity/category/title and file/line locations when possible.
[codex:1495050]
[codex:1495050] Output constraints (IMPORTANT):
[codex:1495050] - severity MUST be exactly one of: info, low, medium, high, critical (lowercase).
[codex:1495050] - category MUST be exactly one of: access_control, reentrancy, math, oracle, upgradeability, auth, other.
[codex:1495050] mcp startup: no servers
[codex:1495050]
[codex:1495050] thinking
[codex:1495050] **Preparing to read AUDIT_BUNDLE.txt**
[codex:1495050] exec
[codex:1495050] /bin/bash -lc ls in /tmp/codex-multi-gacthwuv succeeded in 6ms:
[codex:1495050] AUDIT_BUNDLE.txt
[codex:1495050] codex-output-schema.json
[codex:1495050] contracts
[codex:1495050] exec
[codex:1495050] /bin/bash -lc 'cat AUDIT_BUNDLE.txt' in /tmp/codex-multi-gacthwuv succeeded in 5ms:
[codex:1495050] This file concatenates the full contents of first-party Solidity sources for auditing.
[codex:1495050]
[codex:1495050] ================================================================================
[codex:1495050] FILE: contracts/node_modules/@openzeppelin/contracts/access/Ownable.sol
[codex:1495050] ================================================================================
[codex:1495050] // SPDX-License-Identifier: MIT
[codex:1495050] // OpenZeppelin Contracts (last updated v5.0.0) (access/Ownable.sol)
[codex:1495050]
[codex:1495050] pragma solidity ^0.8.20;
[codex:1495050]
[codex:1495050] import {Context} from "../utils/Context.sol";
[codex:1495050]
[codex:1495050] /**
[codex:1495050] * @dev Contract module which provides a basic access control mechanism, where
[codex:1495050] * there is an account (an owner) that can be granted exclusive access to
[codex:1495050] * specific functions.
[codex:1495050] *
[codex:1495050] * The initial owner is set to the address provided by the deployer. This can
[codex:1495050] * later be changed with {transferOwnership}.
[codex:1495050] *
[codex:1495050]
[codex:1495050] thinking
[codex:1495050] **Evaluating Merkle Distributor for Vulnerabilities**
[codex:1495050] codex
[codex:1495050] {"no_findings":true,"summary":"No exploitable vulnerabilities identified in the first-party contracts based on the provided scope.","findings":[]}
[codex:1495050] tokens used
[codex:1495050] 14,691
[codex:1495050] {"no_findings":true,"summary":"No exploitable vulnerabilities identified in the first-party contracts based on the provided scope.","findings":[]}
{
"codex": {
"ran_at": "2025-12-30T00:49:49.618042+00:00",
"returncode": 0
},
"summary": "No exploitable vulnerabilities identified in the first-party contracts based on the provided scope.",
"raw_final": {
"summary": "No exploitable vulnerabilities identified in the first-party contracts based on the provided scope.",
"findings": [],
"no_findings": true
},
"no_findings": true,
"schema_version": 1
}
00000000: PUSH1 0x80 00000002: PUSH1 0x40 00000004: MSTORE 00000005: CALLVALUE 00000006: DUP1 00000007: ISZERO 00000008: PUSH2 0x0010 0000000b: JUMPI 0000000c: PUSH1 0x00 0000000e: DUP1 0000000f: REVERT 00000010: JUMPDEST 00000011: POP 00000012: PUSH1 0x04 00000014: CALLDATASIZE 00000015: LT 00000016: PUSH2 0x00b4 00000019: JUMPI 0000001a: PUSH1 0x00 0000001c: CALLDATALOAD 0000001d: PUSH1 0xe0 0000001f: SHR 00000020: DUP1 00000021: PUSH4 0x79ba5097 00000026: GT 00000027: PUSH2 0x0071 0000002a: JUMPI 0000002b: DUP1 0000002c: PUSH4 0x79ba5097 00000031: EQ 00000032: PUSH2 0x0159 00000035: JUMPI 00000036: DUP1 00000037: PUSH4 0x8da5cb5b 0000003c: EQ 0000003d: PUSH2 0x0161 00000040: JUMPI 00000041: DUP1 00000042: PUSH4 0x9e34070f 00000047: EQ 00000048: PUSH2 0x0186 0000004b: JUMPI 0000004c: DUP1 0000004d: PUSH4 0xe30c3978 00000052: EQ 00000053: PUSH2 0x0199 00000056: JUMPI 00000057: DUP1 00000058: PUSH4 0xf2fde38b 0000005d: EQ 0000005e: PUSH2 0x01aa 00000061: JUMPI 00000062: DUP1 00000063: PUSH4 0xfc0c546a 00000068: EQ 00000069: PUSH2 0x01bd 0000006c: JUMPI 0000006d: PUSH1 0x00 0000006f: DUP1 00000070: REVERT 00000071: JUMPDEST 00000072: DUP1 00000073: PUSH4 0x2e7ba6ef 00000078: EQ 00000079: PUSH2 0x00b9 0000007c: JUMPI 0000007d: DUP1 0000007e: PUSH4 0x2eb4a7ab 00000083: EQ 00000084: PUSH2 0x00ce 00000087: JUMPI 00000088: DUP1 00000089: PUSH4 0x35c93ae4 0000008e: EQ 0000008f: PUSH2 0x0108 00000092: JUMPI 00000093: DUP1 00000094: PUSH4 0x3aeac4e1 00000099: EQ 0000009a: PUSH2 0x012b 0000009d: JUMPI 0000009e: DUP1 0000009f: PUSH4 0x3b53775f 000000a4: EQ 000000a5: PUSH2 0x013e 000000a8: JUMPI 000000a9: DUP1 000000aa: PUSH4 0x715018a6 000000af: EQ 000000b0: PUSH2 0x0151 000000b3: JUMPI 000000b4: JUMPDEST 000000b5: PUSH1 0x00 000000b7: DUP1 000000b8: REVERT 000000b9: JUMPDEST 000000ba: PUSH2 0x00cc 000000bd: PUSH2 0x00c7 000000c0: CALLDATASIZE 000000c1: PUSH1 0x04 000000c3: PUSH2 0x07b9 000000c6: JUMP 000000c7: JUMPDEST 000000c8: PUSH2 0x01e4 000000cb: JUMP 000000cc: JUMPDEST 000000cd: STOP 000000ce: JUMPDEST 000000cf: PUSH2 0x00f5 000000d2: PUSH32 0x34275b9d3ed91d87f2448b18c47da40295ecf80fbf36e12d2e057625cb487ad8 000000f3: DUP2 000000f4: JUMP 000000f5: JUMPDEST 000000f6: PUSH1 0x40 000000f8: MLOAD 000000f9: SWAP1 000000fa: DUP2 000000fb: MSTORE 000000fc: PUSH1 0x20 000000fe: ADD 000000ff: JUMPDEST 00000100: PUSH1 0x40 00000102: MLOAD 00000103: DUP1 00000104: SWAP2 00000105: SUB 00000106: SWAP1 00000107: RETURN 00000108: JUMPDEST 00000109: PUSH2 0x011b 0000010c: PUSH2 0x0116 0000010f: CALLDATASIZE 00000110: PUSH1 0x04 00000112: PUSH2 0x07b9 00000115: JUMP 00000116: JUMPDEST 00000117: PUSH2 0x02cb 0000011a: JUMP 0000011b: JUMPDEST 0000011c: PUSH1 0x40 0000011e: MLOAD 0000011f: SWAP1 00000120: ISZERO 00000121: ISZERO 00000122: DUP2 00000123: MSTORE 00000124: PUSH1 0x20 00000126: ADD 00000127: PUSH2 0x00ff 0000012a: JUMP 0000012b: JUMPDEST 0000012c: PUSH2 0x00cc 0000012f: PUSH2 0x0139 00000132: CALLDATASIZE 00000133: PUSH1 0x04 00000135: PUSH2 0x0850 00000138: JUMP 00000139: JUMPDEST 0000013a: PUSH2 0x02ec 0000013d: JUMP 0000013e: JUMPDEST 0000013f: PUSH2 0x00f5 00000142: PUSH2 0x014c 00000145: CALLDATASIZE 00000146: PUSH1 0x04 00000148: PUSH2 0x0883 0000014b: JUMP 0000014c: JUMPDEST 0000014d: PUSH2 0x03c5 00000150: JUMP 00000151: JUMPDEST 00000152: PUSH2 0x00cc 00000155: PUSH2 0x042a 00000158: JUMP 00000159: JUMPDEST 0000015a: PUSH2 0x00cc 0000015d: PUSH2 0x043e 00000160: JUMP 00000161: JUMPDEST 00000162: PUSH1 0x00 00000164: SLOAD 00000165: PUSH1 0x01 00000167: PUSH1 0x01 00000169: PUSH1 0xa0 0000016b: SHL 0000016c: SUB 0000016d: AND 0000016e: JUMPDEST 0000016f: PUSH1 0x40 00000171: MLOAD 00000172: PUSH1 0x01 00000174: PUSH1 0x01 00000176: PUSH1 0xa0 00000178: SHL 00000179: SUB 0000017a: SWAP1 0000017b: SWAP2 0000017c: AND 0000017d: DUP2 0000017e: MSTORE 0000017f: PUSH1 0x20 00000181: ADD 00000182: PUSH2 0x00ff 00000185: JUMP 00000186: JUMPDEST 00000187: PUSH2 0x011b 0000018a: PUSH2 0x0194 0000018d: CALLDATASIZE 0000018e: PUSH1 0x04 00000190: PUSH2 0x08b8 00000193: JUMP 00000194: JUMPDEST 00000195: PUSH2 0x0487 00000198: JUMP 00000199: JUMPDEST 0000019a: PUSH1 0x01 0000019c: SLOAD 0000019d: PUSH1 0x01 0000019f: PUSH1 0x01 000001a1: PUSH1 0xa0 000001a3: SHL 000001a4: SUB 000001a5: AND 000001a6: PUSH2 0x016e 000001a9: JUMP 000001aa: JUMPDEST 000001ab: PUSH2 0x00cc 000001ae: PUSH2 0x01b8 000001b1: CALLDATASIZE 000001b2: PUSH1 0x04 000001b4: PUSH2 0x08d1 000001b7: JUMP 000001b8: JUMPDEST 000001b9: PUSH2 0x04c8 000001bc: JUMP 000001bd: JUMPDEST 000001be: PUSH2 0x016e 000001c1: PUSH32 0x000000000000000000000000a0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 000001e2: DUP2 000001e3: JUMP 000001e4: JUMPDEST 000001e5: PUSH2 0x01ed 000001e8: DUP6 000001e9: PUSH2 0x0487 000001ec: JUMP 000001ed: JUMPDEST 000001ee: ISZERO 000001ef: PUSH2 0x020b 000001f2: JUMPI 000001f3: PUSH1 0x40 000001f5: MLOAD 000001f6: PUSH4 0x0c8d9eab 000001fb: PUSH1 0xe3 000001fd: SHL 000001fe: DUP2 000001ff: MSTORE 00000200: PUSH1 0x04 00000202: ADD 00000203: PUSH1 0x40 00000205: MLOAD 00000206: DUP1 00000207: SWAP2 00000208: SUB 00000209: SWAP1 0000020a: REVERT 0000020b: JUMPDEST 0000020c: PUSH1 0x00 0000020e: PUSH2 0x0218 00000211: DUP7 00000212: DUP7 00000213: DUP7 00000214: PUSH2 0x03c5 00000217: JUMP 00000218: JUMPDEST 00000219: SWAP1 0000021a: POP 0000021b: PUSH2 0x0225 0000021e: DUP4 0000021f: DUP4 00000220: DUP4 00000221: PUSH2 0x0539 00000224: JUMP 00000225: JUMPDEST 00000226: PUSH2 0x0242 00000229: JUMPI 0000022a: PUSH1 0x40 0000022c: MLOAD 0000022d: PUSH4 0x09bde339 00000232: PUSH1 0xe0 00000234: SHL 00000235: DUP2 00000236: MSTORE 00000237: PUSH1 0x04 00000239: ADD 0000023a: PUSH1 0x40 0000023c: MLOAD 0000023d: DUP1 0000023e: SWAP2 0000023f: SUB 00000240: SWAP1 00000241: REVERT 00000242: JUMPDEST 00000243: PUSH2 0x024b 00000246: DUP7 00000247: PUSH2 0x056f 0000024a: JUMP 0000024b: JUMPDEST 0000024c: PUSH2 0x027f 0000024f: PUSH1 0x01 00000251: PUSH1 0x01 00000253: PUSH1 0xa0 00000255: SHL 00000256: SUB 00000257: PUSH32 0x000000000000000000000000a0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 00000278: AND 00000279: DUP7 0000027a: DUP7 0000027b: PUSH2 0x05ad 0000027e: JUMP 0000027f: JUMPDEST 00000280: PUSH1 0x40 00000282: DUP1 00000283: MLOAD 00000284: DUP8 00000285: DUP2 00000286: MSTORE 00000287: PUSH1 0x20 00000289: DUP2 0000028a: ADD 0000028b: DUP7 0000028c: SWAP1 0000028d: MSTORE 0000028e: PUSH1 0x01 00000290: PUSH1 0x01 00000292: PUSH1 0xa0 00000294: SHL 00000295: SUB 00000296: DUP8 00000297: AND 00000298: SWAP2 00000299: PUSH32 0x4ec90e965519d92681267467f775ada5bd214aa92c0dc93d90a5e880ce9ed026 000002ba: SWAP2 000002bb: ADD 000002bc: PUSH1 0x40 000002be: MLOAD 000002bf: DUP1 000002c0: SWAP2 000002c1: SUB 000002c2: SWAP1 000002c3: LOG2 000002c4: POP 000002c5: POP 000002c6: POP 000002c7: POP 000002c8: POP 000002c9: POP 000002ca: JUMP 000002cb: JUMPDEST 000002cc: PUSH1 0x00 000002ce: PUSH2 0x02e2 000002d1: DUP4 000002d2: DUP4 000002d3: PUSH2 0x02dd 000002d6: DUP10 000002d7: DUP10 000002d8: DUP10 000002d9: PUSH2 0x03c5 000002dc: JUMP 000002dd: JUMPDEST 000002de: PUSH2 0x0539 000002e1: JUMP 000002e2: JUMPDEST 000002e3: SWAP7 000002e4: SWAP6 000002e5: POP 000002e6: POP 000002e7: POP 000002e8: POP 000002e9: POP 000002ea: POP 000002eb: JUMP 000002ec: JUMPDEST 000002ed: PUSH2 0x02f4 000002f0: PUSH2 0x0604 000002f3: JUMP 000002f4: JUMPDEST 000002f5: PUSH1 0x40 000002f7: MLOAD 000002f8: PUSH4 0x70a08231 000002fd: PUSH1 0xe0 000002ff: SHL 00000300: DUP2 00000301: MSTORE 00000302: ADDRESS 00000303: PUSH1 0x04 00000305: DUP3 00000306: ADD 00000307: MSTORE 00000308: PUSH1 0x00 0000030a: SWAP1 0000030b: PUSH1 0x01 0000030d: PUSH1 0x01 0000030f: PUSH1 0xa0 00000311: SHL 00000312: SUB 00000313: DUP5 00000314: AND 00000315: SWAP1 00000316: PUSH4 0x70a08231 0000031b: SWAP1 0000031c: PUSH1 0x24 0000031e: ADD 0000031f: PUSH1 0x20 00000321: PUSH1 0x40 00000323: MLOAD 00000324: DUP1 00000325: DUP4 00000326: SUB 00000327: DUP2 00000328: DUP7 00000329: GAS 0000032a: STATICCALL 0000032b: ISZERO 0000032c: DUP1 0000032d: ISZERO 0000032e: PUSH2 0x033b 00000331: JUMPI 00000332: RETURNDATASIZE 00000333: PUSH1 0x00 00000335: DUP1 00000336: RETURNDATACOPY 00000337: RETURNDATASIZE 00000338: PUSH1 0x00 0000033a: REVERT 0000033b: JUMPDEST 0000033c: POP 0000033d: POP 0000033e: POP 0000033f: POP 00000340: PUSH1 0x40 00000342: MLOAD 00000343: RETURNDATASIZE 00000344: PUSH1 0x1f 00000346: NOT 00000347: PUSH1 0x1f 00000349: DUP3 0000034a: ADD 0000034b: AND 0000034c: DUP3 0000034d: ADD 0000034e: DUP1 0000034f: PUSH1 0x40 00000351: MSTORE 00000352: POP 00000353: DUP2 00000354: ADD 00000355: SWAP1 00000356: PUSH2 0x035f 00000359: SWAP2 0000035a: SWAP1 0000035b: PUSH2 0x08ec 0000035e: JUMP 0000035f: JUMPDEST 00000360: SWAP1 00000361: POP 00000362: PUSH2 0x0375 00000365: PUSH1 0x01 00000367: PUSH1 0x01 00000369: PUSH1 0xa0 0000036b: SHL 0000036c: SUB 0000036d: DUP5 0000036e: AND 0000036f: DUP4 00000370: DUP4 00000371: PUSH2 0x05ad 00000374: JUMP 00000375: JUMPDEST 00000376: PUSH1 0x40 00000378: DUP1 00000379: MLOAD 0000037a: PUSH1 0x01 0000037c: PUSH1 0x01 0000037e: PUSH1 0xa0 00000380: SHL 00000381: SUB 00000382: DUP1 00000383: DUP7 00000384: AND 00000385: DUP3 00000386: MSTORE 00000387: DUP5 00000388: AND 00000389: PUSH1 0x20 0000038b: DUP3 0000038c: ADD 0000038d: MSTORE 0000038e: SWAP1 0000038f: DUP2 00000390: ADD 00000391: DUP3 00000392: SWAP1 00000393: MSTORE 00000394: PUSH32 0x457e4fe0c9f161a0c6f3bfb8d7809a4ac19f6291bd81b03b86b0d00f9af3717b 000003b5: SWAP1 000003b6: PUSH1 0x60 000003b8: ADD 000003b9: PUSH1 0x40 000003bb: MLOAD 000003bc: DUP1 000003bd: SWAP2 000003be: SUB 000003bf: SWAP1 000003c0: LOG1 000003c1: POP 000003c2: POP 000003c3: POP 000003c4: JUMP 000003c5: JUMPDEST 000003c6: PUSH1 0x40 000003c8: DUP1 000003c9: MLOAD 000003ca: PUSH1 0x20 000003cc: DUP2 000003cd: ADD 000003ce: DUP6 000003cf: SWAP1 000003d0: MSTORE 000003d1: PUSH1 0x01 000003d3: PUSH1 0x01 000003d5: PUSH1 0xa0 000003d7: SHL 000003d8: SUB 000003d9: DUP5 000003da: AND 000003db: SWAP2 000003dc: DUP2 000003dd: ADD 000003de: SWAP2 000003df: SWAP1 000003e0: SWAP2 000003e1: MSTORE 000003e2: PUSH1 0x60 000003e4: DUP2 000003e5: ADD 000003e6: DUP3 000003e7: SWAP1 000003e8: MSTORE 000003e9: PUSH1 0x00 000003eb: SWAP1 000003ec: PUSH1 0x80 000003ee: ADD 000003ef: PUSH1 0x40 000003f1: DUP1 000003f2: MLOAD 000003f3: PUSH1 0x1f 000003f5: NOT 000003f6: DUP2 000003f7: DUP5 000003f8: SUB 000003f9: ADD 000003fa: DUP2 000003fb: MSTORE 000003fc: DUP3 000003fd: DUP3 000003fe: MSTORE 000003ff: DUP1 00000400: MLOAD 00000401: PUSH1 0x20 00000403: SWAP2 00000404: DUP3 00000405: ADD 00000406: KECCAK256 00000407: SWAP1 00000408: DUP4 00000409: ADD 0000040a: MSTORE 0000040b: ADD 0000040c: PUSH1 0x40 0000040e: MLOAD 0000040f: PUSH1 0x20 00000411: DUP2 00000412: DUP4 00000413: SUB 00000414: SUB 00000415: DUP2 00000416: MSTORE 00000417: SWAP1 00000418: PUSH1 0x40 0000041a: MSTORE 0000041b: DUP1 0000041c: MLOAD 0000041d: SWAP1 0000041e: PUSH1 0x20 00000420: ADD 00000421: KECCAK256 00000422: SWAP1 00000423: POP 00000424: SWAP4 00000425: SWAP3 00000426: POP 00000427: POP 00000428: POP 00000429: JUMP 0000042a: JUMPDEST 0000042b: PUSH2 0x0432 0000042e: PUSH2 0x0604 00000431: JUMP 00000432: JUMPDEST 00000433: PUSH2 0x043c 00000436: PUSH1 0x00 00000438: PUSH2 0x0631 0000043b: JUMP 0000043c: JUMPDEST 0000043d: JUMP 0000043e: JUMPDEST 0000043f: PUSH1 0x01 00000441: SLOAD 00000442: CALLER 00000443: SWAP1 00000444: PUSH1 0x01 00000446: PUSH1 0x01 00000448: PUSH1 0xa0 0000044a: SHL 0000044b: SUB 0000044c: AND 0000044d: DUP2 0000044e: EQ 0000044f: PUSH2 0x047b 00000452: JUMPI 00000453: PUSH1 0x40 00000455: MLOAD 00000456: PUSH4 0x118cdaa7 0000045b: PUSH1 0xe0 0000045d: SHL 0000045e: DUP2 0000045f: MSTORE 00000460: PUSH1 0x01 00000462: PUSH1 0x01 00000464: PUSH1 0xa0 00000466: SHL 00000467: SUB 00000468: DUP3 00000469: AND 0000046a: PUSH1 0x04 0000046c: DUP3 0000046d: ADD 0000046e: MSTORE 0000046f: PUSH1 0x24 00000471: ADD 00000472: JUMPDEST 00000473: PUSH1 0x40 00000475: MLOAD 00000476: DUP1 00000477: SWAP2 00000478: SUB 00000479: SWAP1 0000047a: REVERT 0000047b: JUMPDEST 0000047c: PUSH2 0x0484 0000047f: DUP2 00000480: PUSH2 0x0631 00000483: JUMP 00000484: JUMPDEST 00000485: POP 00000486: JUMP 00000487: JUMPDEST 00000488: PUSH1 0x00 0000048a: DUP1 0000048b: PUSH2 0x0496 0000048e: PUSH2 0x0100 00000491: DUP5 00000492: PUSH2 0x091b 00000495: JUMP 00000496: JUMPDEST 00000497: SWAP1 00000498: POP 00000499: PUSH1 0x00 0000049b: PUSH2 0x04a6 0000049e: PUSH2 0x0100 000004a1: DUP6 000004a2: PUSH2 0x092f 000004a5: JUMP 000004a6: JUMPDEST 000004a7: PUSH1 0x00 000004a9: SWAP3 000004aa: DUP4 000004ab: MSTORE 000004ac: PUSH1 0x02 000004ae: PUSH1 0x20 000004b0: MSTORE 000004b1: PUSH1 0x40 000004b3: SWAP1 000004b4: SWAP3 000004b5: KECCAK256 000004b6: SLOAD 000004b7: PUSH1 0x01 000004b9: SWAP1 000004ba: SWAP3 000004bb: SHL 000004bc: SWAP2 000004bd: DUP3 000004be: AND 000004bf: SWAP1 000004c0: SWAP2 000004c1: EQ 000004c2: SWAP4 000004c3: SWAP3 000004c4: POP 000004c5: POP 000004c6: POP 000004c7: JUMP 000004c8: JUMPDEST 000004c9: PUSH2 0x04d0 000004cc: PUSH2 0x0604 000004cf: JUMP 000004d0: JUMPDEST 000004d1: PUSH1 0x01 000004d3: DUP1 000004d4: SLOAD 000004d5: PUSH1 0x01 000004d7: PUSH1 0x01 000004d9: PUSH1 0xa0 000004db: SHL 000004dc: SUB 000004dd: DUP4 000004de: AND 000004df: PUSH1 0x01 000004e1: PUSH1 0x01 000004e3: PUSH1 0xa0 000004e5: SHL 000004e6: SUB 000004e7: NOT 000004e8: SWAP1 000004e9: SWAP2 000004ea: AND 000004eb: DUP2 000004ec: OR 000004ed: SWAP1 000004ee: SWAP2 000004ef: SSTORE 000004f0: PUSH2 0x0501 000004f3: PUSH1 0x00 000004f5: SLOAD 000004f6: PUSH1 0x01 000004f8: PUSH1 0x01 000004fa: PUSH1 0xa0 000004fc: SHL 000004fd: SUB 000004fe: AND 000004ff: SWAP1 00000500: JUMP 00000501: JUMPDEST 00000502: PUSH1 0x01 00000504: PUSH1 0x01 00000506: PUSH1 0xa0 00000508: SHL 00000509: SUB 0000050a: AND 0000050b: PUSH32 0x38d16b8cac22d99fc7c124b9cd0de2d3fa1faef420bfe791d8c362d765e22700 0000052c: PUSH1 0x40 0000052e: MLOAD 0000052f: PUSH1 0x40 00000531: MLOAD 00000532: DUP1 00000533: SWAP2 00000534: SUB 00000535: SWAP1 00000536: LOG3 00000537: POP 00000538: JUMP 00000539: JUMPDEST 0000053a: PUSH1 0x00 0000053c: PUSH2 0x0567 0000053f: DUP5 00000540: DUP5 00000541: PUSH32 0x34275b9d3ed91d87f2448b18c47da40295ecf80fbf36e12d2e057625cb487ad8 00000562: DUP6 00000563: PUSH2 0x064a 00000566: JUMP 00000567: JUMPDEST 00000568: SWAP5 00000569: SWAP4 0000056a: POP 0000056b: POP 0000056c: POP 0000056d: POP 0000056e: JUMP 0000056f: JUMPDEST 00000570: PUSH1 0x00 00000572: PUSH2 0x057d 00000575: PUSH2 0x0100 00000578: DUP4 00000579: PUSH2 0x091b 0000057c: JUMP 0000057d: JUMPDEST 0000057e: SWAP1 0000057f: POP 00000580: PUSH1 0x00 00000582: PUSH2 0x058d 00000585: PUSH2 0x0100 00000588: DUP5 00000589: PUSH2 0x092f 0000058c: JUMP 0000058d: JUMPDEST 0000058e: PUSH1 0x00 00000590: SWAP3 00000591: DUP4 00000592: MSTORE 00000593: PUSH1 0x02 00000595: PUSH1 0x20 00000597: MSTORE 00000598: PUSH1 0x40 0000059a: SWAP1 0000059b: SWAP3 0000059c: KECCAK256 0000059d: DUP1 0000059e: SLOAD 0000059f: PUSH1 0x01 000005a1: SWAP1 000005a2: SWAP4 000005a3: SHL 000005a4: SWAP1 000005a5: SWAP3 000005a6: OR 000005a7: SWAP1 000005a8: SWAP2 000005a9: SSTORE 000005aa: POP 000005ab: POP 000005ac: JUMP 000005ad: JUMPDEST 000005ae: PUSH1 0x40 000005b0: DUP1 000005b1: MLOAD 000005b2: PUSH1 0x01 000005b4: PUSH1 0x01 000005b6: PUSH1 0xa0 000005b8: SHL 000005b9: SUB 000005ba: DUP5 000005bb: AND 000005bc: PUSH1 0x24 000005be: DUP3 000005bf: ADD 000005c0: MSTORE 000005c1: PUSH1 0x44 000005c3: DUP1 000005c4: DUP3 000005c5: ADD 000005c6: DUP5 000005c7: SWAP1 000005c8: MSTORE 000005c9: DUP3 000005ca: MLOAD 000005cb: DUP1 000005cc: DUP4 000005cd: SUB 000005ce: SWAP1 000005cf: SWAP2 000005d0: ADD 000005d1: DUP2 000005d2: MSTORE 000005d3: PUSH1 0x64 000005d5: SWAP1 000005d6: SWAP2 000005d7: ADD 000005d8: SWAP1 000005d9: SWAP2 000005da: MSTORE 000005db: PUSH1 0x20 000005dd: DUP2 000005de: ADD 000005df: DUP1 000005e0: MLOAD 000005e1: PUSH1 0x01 000005e3: PUSH1 0x01 000005e5: PUSH1 0xe0 000005e7: SHL 000005e8: SUB 000005e9: AND 000005ea: PUSH4 0xa9059cbb 000005ef: PUSH1 0xe0 000005f1: SHL 000005f2: OR 000005f3: SWAP1 000005f4: MSTORE 000005f5: PUSH2 0x05ff 000005f8: SWAP1 000005f9: DUP5 000005fa: SWAP1 000005fb: PUSH2 0x0662 000005fe: JUMP 000005ff: JUMPDEST 00000600: POP 00000601: POP 00000602: POP 00000603: JUMP 00000604: JUMPDEST 00000605: PUSH1 0x00 00000607: SLOAD 00000608: PUSH1 0x01 0000060a: PUSH1 0x01 0000060c: PUSH1 0xa0 0000060e: SHL 0000060f: SUB 00000610: AND 00000611: CALLER 00000612: EQ 00000613: PUSH2 0x043c 00000616: JUMPI 00000617: PUSH1 0x40 00000619: MLOAD 0000061a: PUSH4 0x118cdaa7 0000061f: PUSH1 0xe0 00000621: SHL 00000622: DUP2 00000623: MSTORE 00000624: CALLER 00000625: PUSH1 0x04 00000627: DUP3 00000628: ADD 00000629: MSTORE 0000062a: PUSH1 0x24 0000062c: ADD 0000062d: PUSH2 0x0472 00000630: JUMP 00000631: JUMPDEST 00000632: PUSH1 0x01 00000634: DUP1 00000635: SLOAD 00000636: PUSH1 0x01 00000638: PUSH1 0x01 0000063a: PUSH1 0xa0 0000063c: SHL 0000063d: SUB 0000063e: NOT 0000063f: AND 00000640: SWAP1 00000641: SSTORE 00000642: PUSH2 0x0484 00000645: DUP2 00000646: PUSH2 0x06d9 00000649: JUMP 0000064a: JUMPDEST 0000064b: PUSH1 0x00 0000064d: DUP3 0000064e: PUSH2 0x0658 00000651: DUP7 00000652: DUP7 00000653: DUP6 00000654: PUSH2 0x0729 00000657: JUMP 00000658: JUMPDEST 00000659: EQ 0000065a: SWAP6 0000065b: SWAP5 0000065c: POP 0000065d: POP 0000065e: POP 0000065f: POP 00000660: POP 00000661: JUMP 00000662: JUMPDEST 00000663: PUSH1 0x00 00000665: DUP1 00000666: PUSH1 0x20 00000668: PUSH1 0x00 0000066a: DUP5 0000066b: MLOAD 0000066c: PUSH1 0x20 0000066e: DUP7 0000066f: ADD 00000670: PUSH1 0x00 00000672: DUP9 00000673: GAS 00000674: CALL 00000675: DUP1 00000676: PUSH2 0x0685 00000679: JUMPI 0000067a: PUSH1 0x40 0000067c: MLOAD 0000067d: RETURNDATASIZE 0000067e: PUSH1 0x00 00000680: DUP3 00000681: RETURNDATACOPY 00000682: RETURNDATASIZE 00000683: DUP2 00000684: REVERT 00000685: JUMPDEST 00000686: POP 00000687: POP 00000688: PUSH1 0x00 0000068a: MLOAD 0000068b: RETURNDATASIZE 0000068c: SWAP2 0000068d: POP 0000068e: DUP2 0000068f: ISZERO 00000690: PUSH2 0x069d 00000693: JUMPI 00000694: DUP1 00000695: PUSH1 0x01 00000697: EQ 00000698: ISZERO 00000699: PUSH2 0x06aa 0000069c: JUMP 0000069d: JUMPDEST 0000069e: PUSH1 0x01 000006a0: PUSH1 0x01 000006a2: PUSH1 0xa0 000006a4: SHL 000006a5: SUB 000006a6: DUP5 000006a7: AND 000006a8: EXTCODESIZE 000006a9: ISZERO 000006aa: JUMPDEST 000006ab: ISZERO 000006ac: PUSH2 0x06d3 000006af: JUMPI 000006b0: PUSH1 0x40 000006b2: MLOAD 000006b3: PUSH4 0x5274afe7 000006b8: PUSH1 0xe0 000006ba: SHL 000006bb: DUP2 000006bc: MSTORE 000006bd: PUSH1 0x01 000006bf: PUSH1 0x01 000006c1: PUSH1 0xa0 000006c3: SHL 000006c4: SUB 000006c5: DUP6 000006c6: AND 000006c7: PUSH1 0x04 000006c9: DUP3 000006ca: ADD 000006cb: MSTORE 000006cc: PUSH1 0x24 000006ce: ADD 000006cf: PUSH2 0x0472 000006d2: JUMP 000006d3: JUMPDEST 000006d4: POP 000006d5: POP 000006d6: POP 000006d7: POP 000006d8: JUMP 000006d9: JUMPDEST 000006da: PUSH1 0x00 000006dc: DUP1 000006dd: SLOAD 000006de: PUSH1 0x01 000006e0: PUSH1 0x01 000006e2: PUSH1 0xa0 000006e4: SHL 000006e5: SUB 000006e6: DUP4 000006e7: DUP2 000006e8: AND 000006e9: PUSH1 0x01 000006eb: PUSH1 0x01 000006ed: PUSH1 0xa0 000006ef: SHL 000006f0: SUB 000006f1: NOT 000006f2: DUP4 000006f3: AND 000006f4: DUP2 000006f5: OR 000006f6: DUP5 000006f7: SSTORE 000006f8: PUSH1 0x40 000006fa: MLOAD 000006fb: SWAP2 000006fc: SWAP1 000006fd: SWAP3 000006fe: AND 000006ff: SWAP3 00000700: DUP4 00000701: SWAP2 00000702: PUSH32 0x8be0079c531659141344cd1fd0a4f28419497f9722a3daafe3b4186f6b6457e0 00000723: SWAP2 00000724: SWAP1 00000725: LOG3 00000726: POP 00000727: POP 00000728: JUMP 00000729: JUMPDEST 0000072a: PUSH1 0x00 0000072c: DUP2 0000072d: DUP2 0000072e: JUMPDEST 0000072f: DUP5 00000730: DUP2 00000731: LT 00000732: ISZERO 00000733: PUSH2 0x0762 00000736: JUMPI 00000737: PUSH2 0x0758 0000073a: DUP3 0000073b: DUP8 0000073c: DUP8 0000073d: DUP5 0000073e: DUP2 0000073f: DUP2 00000740: LT 00000741: PUSH2 0x074c 00000744: JUMPI 00000745: PUSH2 0x074c 00000748: PUSH2 0x0943 0000074b: JUMP 0000074c: JUMPDEST 0000074d: SWAP1 0000074e: POP 0000074f: PUSH1 0x20 00000751: MUL 00000752: ADD 00000753: CALLDATALOAD 00000754: PUSH2 0x076b 00000757: JUMP 00000758: JUMPDEST 00000759: SWAP2 0000075a: POP 0000075b: PUSH1 0x01 0000075d: ADD 0000075e: PUSH2 0x072e 00000761: JUMP 00000762: JUMPDEST 00000763: POP 00000764: SWAP5 00000765: SWAP4 00000766: POP 00000767: POP 00000768: POP 00000769: POP 0000076a: JUMP 0000076b: JUMPDEST 0000076c: PUSH1 0x00 0000076e: DUP2 0000076f: DUP4 00000770: LT 00000771: PUSH2 0x0787 00000774: JUMPI 00000775: PUSH1 0x00 00000777: DUP3 00000778: DUP2 00000779: MSTORE 0000077a: PUSH1 0x20 0000077c: DUP5 0000077d: SWAP1 0000077e: MSTORE 0000077f: PUSH1 0x40 00000781: SWAP1 00000782: KECCAK256 00000783: PUSH2 0x0796 00000786: JUMP 00000787: JUMPDEST 00000788: PUSH1 0x00 0000078a: DUP4 0000078b: DUP2 0000078c: MSTORE 0000078d: PUSH1 0x20 0000078f: DUP4 00000790: SWAP1 00000791: MSTORE 00000792: PUSH1 0x40 00000794: SWAP1 00000795: KECCAK256 00000796: JUMPDEST 00000797: SWAP4 00000798: SWAP3 00000799: POP 0000079a: POP 0000079b: POP 0000079c: JUMP 0000079d: JUMPDEST 0000079e: DUP1 0000079f: CALLDATALOAD 000007a0: PUSH1 0x01 000007a2: PUSH1 0x01 000007a4: PUSH1 0xa0 000007a6: SHL 000007a7: SUB 000007a8: DUP2 000007a9: AND 000007aa: DUP2 000007ab: EQ 000007ac: PUSH2 0x07b4 000007af: JUMPI 000007b0: PUSH1 0x00 000007b2: DUP1 000007b3: REVERT 000007b4: JUMPDEST 000007b5: SWAP2 000007b6: SWAP1 000007b7: POP 000007b8: JUMP 000007b9: JUMPDEST 000007ba: PUSH1 0x00 000007bc: DUP1 000007bd: PUSH1 0x00 000007bf: DUP1 000007c0: PUSH1 0x00 000007c2: PUSH1 0x80 000007c4: DUP7 000007c5: DUP9 000007c6: SUB 000007c7: SLT 000007c8: ISZERO 000007c9: PUSH2 0x07d1 000007cc: JUMPI 000007cd: PUSH1 0x00 000007cf: DUP1 000007d0: REVERT 000007d1: JUMPDEST 000007d2: DUP6 000007d3: CALLDATALOAD 000007d4: SWAP5 000007d5: POP 000007d6: PUSH2 0x07e1 000007d9: PUSH1 0x20 000007db: DUP8 000007dc: ADD 000007dd: PUSH2 0x079d 000007e0: JUMP 000007e1: JUMPDEST 000007e2: SWAP4 000007e3: POP 000007e4: PUSH1 0x40 000007e6: DUP7 000007e7: ADD 000007e8: CALLDATALOAD 000007e9: SWAP3 000007ea: POP 000007eb: PUSH1 0x60 000007ed: DUP7 000007ee: ADD 000007ef: CALLDATALOAD 000007f0: PUSH8 0xffffffffffffffff 000007f9: DUP1 000007fa: DUP3 000007fb: GT 000007fc: ISZERO 000007fd: PUSH2 0x0805 00000800: JUMPI 00000801: PUSH1 0x00 00000803: DUP1 00000804: REVERT 00000805: JUMPDEST 00000806: DUP2 00000807: DUP9 00000808: ADD 00000809: SWAP2 0000080a: POP 0000080b: DUP9 0000080c: PUSH1 0x1f 0000080e: DUP4 0000080f: ADD 00000810: SLT 00000811: PUSH2 0x0819 00000814: JUMPI 00000815: PUSH1 0x00 00000817: DUP1 00000818: REVERT 00000819: JUMPDEST 0000081a: DUP2 0000081b: CALLDATALOAD 0000081c: DUP2 0000081d: DUP2 0000081e: GT 0000081f: ISZERO 00000820: PUSH2 0x0828 00000823: JUMPI 00000824: PUSH1 0x00 00000826: DUP1 00000827: REVERT 00000828: JUMPDEST 00000829: DUP10 0000082a: PUSH1 0x20 0000082c: DUP3 0000082d: PUSH1 0x05 0000082f: SHL 00000830: DUP6 00000831: ADD 00000832: ADD 00000833: GT 00000834: ISZERO 00000835: PUSH2 0x083d 00000838: JUMPI 00000839: PUSH1 0x00 0000083b: DUP1 0000083c: REVERT 0000083d: JUMPDEST 0000083e: SWAP7 0000083f: SWAP10 00000840: SWAP6 00000841: SWAP9 00000842: POP 00000843: SWAP4 00000844: SWAP7 00000845: POP 00000846: PUSH1 0x20 00000848: ADD 00000849: SWAP5 0000084a: SWAP4 0000084b: SWAP3 0000084c: POP 0000084d: POP 0000084e: POP 0000084f: JUMP 00000850: JUMPDEST 00000851: PUSH1 0x00 00000853: DUP1 00000854: PUSH1 0x40 00000856: DUP4 00000857: DUP6 00000858: SUB 00000859: SLT 0000085a: ISZERO 0000085b: PUSH2 0x0863 0000085e: JUMPI 0000085f: PUSH1 0x00 00000861: DUP1 00000862: REVERT 00000863: JUMPDEST 00000864: PUSH2 0x086c 00000867: DUP4 00000868: PUSH2 0x079d 0000086b: JUMP 0000086c: JUMPDEST 0000086d: SWAP2 0000086e: POP 0000086f: PUSH2 0x087a 00000872: PUSH1 0x20 00000874: DUP5 00000875: ADD 00000876: PUSH2 0x079d 00000879: JUMP 0000087a: JUMPDEST 0000087b: SWAP1 0000087c: POP 0000087d: SWAP3 0000087e: POP 0000087f: SWAP3 00000880: SWAP1 00000881: POP 00000882: JUMP 00000883: JUMPDEST 00000884: PUSH1 0x00 00000886: DUP1 00000887: PUSH1 0x00 00000889: PUSH1 0x60 0000088b: DUP5 0000088c: DUP7 0000088d: SUB 0000088e: SLT 0000088f: ISZERO 00000890: PUSH2 0x0898 00000893: JUMPI 00000894: PUSH1 0x00 00000896: DUP1 00000897: REVERT 00000898: JUMPDEST 00000899: DUP4 0000089a: CALLDATALOAD 0000089b: SWAP3 0000089c: POP 0000089d: PUSH2 0x08a8 000008a0: PUSH1 0x20 000008a2: DUP6 000008a3: ADD 000008a4: PUSH2 0x079d 000008a7: JUMP 000008a8: JUMPDEST 000008a9: SWAP2 000008aa: POP 000008ab: PUSH1 0x40 000008ad: DUP5 000008ae: ADD 000008af: CALLDATALOAD 000008b0: SWAP1 000008b1: POP 000008b2: SWAP3 000008b3: POP 000008b4: SWAP3 000008b5: POP 000008b6: SWAP3 000008b7: JUMP 000008b8: JUMPDEST 000008b9: PUSH1 0x00 000008bb: PUSH1 0x20 000008bd: DUP3 000008be: DUP5 000008bf: SUB 000008c0: SLT 000008c1: ISZERO 000008c2: PUSH2 0x08ca 000008c5: JUMPI 000008c6: PUSH1 0x00 000008c8: DUP1 000008c9: REVERT 000008ca: JUMPDEST 000008cb: POP 000008cc: CALLDATALOAD 000008cd: SWAP2 000008ce: SWAP1 000008cf: POP 000008d0: JUMP 000008d1: JUMPDEST 000008d2: PUSH1 0x00 000008d4: PUSH1 0x20 000008d6: DUP3 000008d7: DUP5 000008d8: SUB 000008d9: SLT 000008da: ISZERO 000008db: PUSH2 0x08e3 000008de: JUMPI 000008df: PUSH1 0x00 000008e1: DUP1 000008e2: REVERT 000008e3: JUMPDEST 000008e4: PUSH2 0x0796 000008e7: DUP3 000008e8: PUSH2 0x079d 000008eb: JUMP 000008ec: JUMPDEST 000008ed: PUSH1 0x00 000008ef: PUSH1 0x20 000008f1: DUP3 000008f2: DUP5 000008f3: SUB 000008f4: SLT 000008f5: ISZERO 000008f6: PUSH2 0x08fe 000008f9: JUMPI 000008fa: PUSH1 0x00 000008fc: DUP1 000008fd: REVERT 000008fe: JUMPDEST 000008ff: POP 00000900: MLOAD 00000901: SWAP2 00000902: SWAP1 00000903: POP 00000904: JUMP 00000905: JUMPDEST 00000906: PUSH4 0x4e487b71 0000090b: PUSH1 0xe0 0000090d: SHL 0000090e: PUSH1 0x00 00000910: MSTORE 00000911: PUSH1 0x12 00000913: PUSH1 0x04 00000915: MSTORE 00000916: PUSH1 0x24 00000918: PUSH1 0x00 0000091a: REVERT 0000091b: JUMPDEST 0000091c: PUSH1 0x00 0000091e: DUP3 0000091f: PUSH2 0x092a 00000922: JUMPI 00000923: PUSH2 0x092a 00000926: PUSH2 0x0905 00000929: JUMP 0000092a: JUMPDEST 0000092b: POP 0000092c: DIV 0000092d: SWAP1 0000092e: JUMP 0000092f: JUMPDEST 00000930: PUSH1 0x00 00000932: DUP3 00000933: PUSH2 0x093e 00000936: JUMPI 00000937: PUSH2 0x093e 0000093a: PUSH2 0x0905 0000093d: JUMP 0000093e: JUMPDEST 0000093f: POP 00000940: MOD 00000941: SWAP1 00000942: JUMP 00000943: JUMPDEST 00000944: PUSH4 0x4e487b71 00000949: PUSH1 0xe0 0000094b: SHL 0000094c: PUSH1 0x00 0000094e: MSTORE 0000094f: PUSH1 0x32 00000951: PUSH1 0x04 00000953: MSTORE 00000954: PUSH1 0x24 00000956: PUSH1 0x00 00000958: REVERT 00000959: INVALID 0000095a: LOG2 0000095b: PUSH5 0x6970667358 00000961: UNKNOWN(0x22) 00000962: SLT 00000963: KECCAK256 00000964: PUSH13 0xea2559f793e87a3671cf06c667 00000972: SDIV 00000973: CREATE2 00000974: UNKNOWN(0xFC) 00000975: UNKNOWN(0xC3) 00000976: UNKNOWN(0xD1) 00000977: LOG2 00000978: COINBASE 00000979: SMOD 0000097a: UNKNOWN(0xCB) 0000097b: UNKNOWN(0x2D) 0000097c: LOG4 0000097d: PUSH7 0x49e6c68900cd64 00000985: PUSH20
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| high | other | detector | Untrusted CALL target/value reachable | 60 | no | no |
viewtrace_id: 0x6bf297aecfeb517660d53da4e1a7fa91affe831d2c0c46eeb73ce3af994a765a
call_targets:
0x12a272a581fee5577a5dfa371afeb4b2f3a8c2f8
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x6bf297aecfeb517660d53da4e1a7fa91affe831d2c0c46eeb73ce3af994a765a",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x12a272a581fee5577a5dfa371afeb4b2f3a8c2f8"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x79ba5097",
"selector": "0x79ba5097",
"calldata_variants": [
"0x79ba5097",
"0x79ba50970000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9e34070f",
"selector": "0x9e34070f",
"calldata_variants": [
"0x9e34070f",
"0x9e34070f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe30c3978",
"selector": "0xe30c3978",
"calldata_variants": [
"0xe30c3978",
"0xe30c39780000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf2fde38b",
"selector": "0xf2fde38b",
"calldata_variants": [
"0xf2fde38b",
"0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfc0c546a",
"selector": "0xfc0c546a",
"calldata_variants": [
"0xfc0c546a",
"0xfc0c546a0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2e7ba6ef",
"selector": "0x2e7ba6ef",
"calldata_variants": [
"0x2e7ba6ef",
"0x2e7ba6ef0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2eb4a7ab",
"selector": "0x2eb4a7ab",
"calldata_variants": [
"0x2eb4a7ab",
"0x2eb4a7ab0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1652,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [],
"untrusted_call_count": 1
}
|
| high | other | detector | ETH value transfer possible | 55 | no | no |
viewtrace_id: 0x6bf297aecfeb517660d53da4e1a7fa91affe831d2c0c46eeb73ce3af994a765a
call_targets:
0x12a272a581fee5577a5dfa371afeb4b2f3a8c2f8
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x6bf297aecfeb517660d53da4e1a7fa91affe831d2c0c46eeb73ce3af994a765a",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0x12a272a581fee5577a5dfa371afeb4b2f3a8c2f8"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x79ba5097",
"selector": "0x79ba5097",
"calldata_variants": [
"0x79ba5097",
"0x79ba50970000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9e34070f",
"selector": "0x9e34070f",
"calldata_variants": [
"0x9e34070f",
"0x9e34070f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe30c3978",
"selector": "0xe30c3978",
"calldata_variants": [
"0xe30c3978",
"0xe30c39780000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf2fde38b",
"selector": "0xf2fde38b",
"calldata_variants": [
"0xf2fde38b",
"0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfc0c546a",
"selector": "0xfc0c546a",
"calldata_variants": [
"0xfc0c546a",
"0xfc0c546a0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2e7ba6ef",
"selector": "0x2e7ba6ef",
"calldata_variants": [
"0x2e7ba6ef",
"0x2e7ba6ef0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2eb4a7ab",
"selector": "0x2eb4a7ab",
"calldata_variants": [
"0x2eb4a7ab",
"0x2eb4a7ab0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1652,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": []
}
|
| medium | other | detector | CREATE/CREATE2 reachable | 45 | no | no |
viewtrace_id: 0xc250be4eade2f9d35a3b62e1a0b457bd758b335c08f55d3e9b313c303a1e648b
validation_json{
"sink": "CREATE",
"errors": 0,
"status": "unknown",
"attempts": 24,
"trace_id": "0xc250be4eade2f9d35a3b62e1a0b457bd758b335c08f55d3e9b313c303a1e648b",
"confirmed": false,
"trace_mode": "structLogs",
"call_targets": null,
"matched_probe": null,
"target_varies": null,
"classification": "no_sink"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0x79ba5097",
"selector": "0x79ba5097",
"calldata_variants": [
"0x79ba5097",
"0x79ba50970000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x8da5cb5b",
"selector": "0x8da5cb5b",
"calldata_variants": [
"0x8da5cb5b",
"0x8da5cb5b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x9e34070f",
"selector": "0x9e34070f",
"calldata_variants": [
"0x9e34070f",
"0x9e34070f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xe30c3978",
"selector": "0xe30c3978",
"calldata_variants": [
"0xe30c3978",
"0xe30c39780000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xf2fde38b",
"selector": "0xf2fde38b",
"calldata_variants": [
"0xf2fde38b",
"0xf2fde38b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xfc0c546a",
"selector": "0xfc0c546a",
"calldata_variants": [
"0xfc0c546a",
"0xfc0c546a0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2e7ba6ef",
"selector": "0x2e7ba6ef",
"calldata_variants": [
"0x2e7ba6ef",
"0x2e7ba6ef0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x2eb4a7ab",
"selector": "0x2eb4a7ab",
"calldata_variants": [
"0x2eb4a7ab",
"0x2eb4a7ab0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"create_count": 0,
"create2_count": 1
}
|
| low | other | cast | Contract creation opcode present | 60 | no | — |
viewevidence_json{
"notes": "runtime can deploy contracts dynamically via CREATE/CREATE2",
"create_count": 0,
"create2_count": 1
}
|