1ba452a9-054a-4b6f-a372-6cefb5decf19
Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?
| ID | Type | Status | Attempts | Heartbeat |
|---|---|---|---|---|
| 31655 | report.consolidate | complete | 1 / 1 | 3 months ago |
| 95353 | artifact.fetch | failed | 1 / 3 | 1 week ago |
| 95354 | tool.cast_disasm | complete | 1 / 3 | 1 week ago |
| 95355 | analysis.bundle | complete | 1 / 3 | 1 week ago |
| 95356 | capability.graph | complete | 1 / 3 | 1 week ago |
| 95357 | detector.run | complete | 1 / 3 | 1 week ago |
| 95358 | validation.fork | complete | 1 / 3 | 1 week ago |
No slither job recorded yet.
[codex:236743] OpenAI Codex v0.77.0 (research preview)
[codex:236743] --------
[codex:236743] workdir: /tmp/codex-multi-5ywnpn0a
[codex:236743] model: gpt-5.2-codex
[codex:236743] provider: openai
[codex:236743] approval: never
[codex:236743] sandbox: read-only
[codex:236743] reasoning effort: xhigh
[codex:236743] reasoning summaries: auto
[codex:236743] session id: 019b8bfc-abe8-7253-a5d9-693d278933c2
[codex:236743] --------
[codex:236743] user
[codex:236743] You are a profit-focused exploit hunter. Your ONLY goal is finding ways to extract value (ETH, tokens, NFTs) from this contract.
[codex:236743]
[codex:236743] Read `AUDIT_BUNDLE.txt` completely before concluding. Treat `lib/` and `@openzeppelin/` as trusted unless misused.
[codex:236743]
[codex:236743] ONLY REPORT if you find a CONCRETE, EXPLOITABLE path to profit. We do NOT care about:
[codex:236743] - Gas inefficiency, code quality, naming, or best practices
[codex:236743] - Theoretical vulnerabilities without a clear extraction path
[codex:236743] - Centralization risks (admin can rug) - assume admin keys are secure
[codex:236743] - Front-running unless it enables theft beyond MEV
[codex:236743] - DoS, griefing, or issues that don't result in attacker profit
[codex:236743] - Missing events, view function issues, or informational findings
[codex:236743]
[codex:236743] HIGH-VALUE PATTERNS TO HUNT:
[codex:236743] - Reentrancy: external calls before state updates that allow double-withdrawal
[codex:236743] - Access control: missing/bypassable auth on withdraw, transfer, or mint functions
[codex:236743] - Flash loan attacks: borrow -> manipulate -> profit in single tx
[codex:236743] - Price oracle manipulation: TWAP with short window, spot price reads, stale prices
[codex:236743] - Signature replay: missing nonce, chainId, or deadline in permit/meta-tx
[codex:236743] - Proxy hijacking: unprotected initialize(), storage collision, UUPS without auth
[codex:236743] - Accounting errors: rounding that favors attacker, share inflation, first depositor attacks
[codex:236743] - Unchecked external calls: return value ignored on token transfers enabling fake tokens
[codex:236743] - Cross-function reentrancy: state read in function A, modified via reentrant call, used stale in A
[codex:236743]
[codex:236743] For each finding, you MUST provide:
[codex:236743] 1. Exact file and line numbers of vulnerable code
[codex:236743] 2. Step-by-step exploit transaction sequence
[codex:236743] 3. Estimated profit potential (order of magnitude: contract balance, LP reserves, etc.)
[codex:236743]
[codex:236743] If no concrete profit path exists: set no_findings=true. Do NOT pad with low-severity noise.
[codex:236743]
[codex:236743] Output MUST be valid JSON matching the provided schema.
[codex:236743] - severity: info, low, medium, high, critical (use high/critical ONLY for clear extraction paths)
[codex:236743] - category: access_control, reentrancy, math, oracle, upgradeability, auth, other
[codex:236743] mcp startup: no servers
[codex:236743]
[codex:236743] thinking
[codex:236743] **Preparing to gather instruction files**
[codex:236743] exec
[codex:236743] /bin/bash -lc ls in /tmp/codex-multi-5ywnpn0a succeeded in 5ms:
[codex:236743] AUDIT_BUNDLE.txt
[codex:236743] codex-output-schema.json
[codex:236743] contracts
[codex:236743]
[codex:236743] thinking
[codex:236743] **Reading AUDIT_BUNDLE.txt**
[codex:236743] exec
[codex:236743] /bin/bash -lc 'cat AUDIT_BUNDLE.txt' in /tmp/codex-multi-5ywnpn0a succeeded in 5ms:
[codex:236743] This file concatenates first-party Solidity sources only (lib/@openzeppelin excluded).
[codex:236743]
[codex:236743] ================================================================================
[codex:236743] FILE: contracts/Contract.sol
[codex:236743] ================================================================================
[codex:236743] pragma solidity ^0.4.18;
[codex:236743]
[codex:236743] contract ETHMap {
[codex:236743]
[codex:236743] /// Initial price zone (= LUX)
[codex:236743] /// set at 0.001 Eth
[codex:236743] uint initialZonePrice = 1000000000000000 wei;
[codex:236743]
[codex:236743] /// contractOwner address
[codex:236743] address contractOwner;
[codex:236743]
[codex:236743] /// Users pending withdrawals
[codex:236743] mapping(address => uint) pendingWithdrawals;
[codex:236743]
[codex:236743] /// Zone structures mapping
[codex:236743]
[codex:236743] thinking
[codex:236743] **Evaluating contract for exploits**
[codex:236743] codex
[codex:236743] {"no_findings":true,"summary":"Reviewed `AUDIT_BUNDLE.txt` (contracts/Contract.sol). No concrete, exploitable profit paths found under the provided criteria.","findings":[]}
[codex:236743] tokens used
[codex:236743] 6,805
[codex:236743] {"no_findings":true,"summary":"Reviewed `AUDIT_BUNDLE.txt` (contracts/Contract.sol). No concrete, exploitable profit paths found under the provided criteria.","findings":[]}
{
"codex": {
"ran_at": "2026-01-05T02:29:27.026461+00:00",
"returncode": 0
},
"summary": "Reviewed `AUDIT_BUNDLE.txt` (contracts/Contract.sol). No concrete, exploitable profit paths found under the provided criteria.",
"raw_final": {
"summary": "Reviewed `AUDIT_BUNDLE.txt` (contracts/Contract.sol). No concrete, exploitable profit paths found under the provided criteria.",
"findings": [],
"no_findings": true
},
"no_findings": true,
"schema_version": 1
}
00000000: PUSH1 0x60 00000002: PUSH1 0x40 00000004: MSTORE 00000005: PUSH1 0x04 00000007: CALLDATASIZE 00000008: LT 00000009: PUSH2 0x008e 0000000c: JUMPI 0000000d: PUSH1 0x00 0000000f: CALLDATALOAD 00000010: PUSH29 0x0100000000000000000000000000000000000000000000000000000000 0000002e: SWAP1 0000002f: DIV 00000030: PUSH4 0xffffffff 00000035: AND 00000036: DUP1 00000037: PUSH4 0x11ee0ec5 0000003c: EQ 0000003d: PUSH2 0x0093 00000040: JUMPI 00000041: DUP1 00000042: PUSH4 0x12065fe0 00000047: EQ 00000048: PUSH2 0x0104 0000004b: JUMPI 0000004c: DUP1 0000004d: PUSH4 0x159d3c24 00000052: EQ 00000053: PUSH2 0x012d 00000056: JUMPI 00000057: DUP1 00000058: PUSH4 0x3ccfd60b 0000005d: EQ 0000005e: PUSH2 0x0171 00000061: JUMPI 00000062: DUP1 00000063: PUSH4 0x88806b37 00000068: EQ 00000069: PUSH2 0x019e 0000006c: JUMPI 0000006d: DUP1 0000006e: PUSH4 0xa843c51f 00000073: EQ 00000074: PUSH2 0x01f8 00000077: JUMPI 00000078: DUP1 00000079: PUSH4 0xbee712da 0000007e: EQ 0000007f: PUSH2 0x0249 00000082: JUMPI 00000083: DUP1 00000084: PUSH4 0xcd066fd6 00000089: EQ 0000008a: PUSH2 0x0279 0000008d: JUMPI 0000008e: JUMPDEST 0000008f: PUSH1 0x00 00000091: DUP1 00000092: REVERT 00000093: JUMPDEST 00000094: CALLVALUE 00000095: ISZERO 00000096: PUSH2 0x009e 00000099: JUMPI 0000009a: PUSH1 0x00 0000009c: DUP1 0000009d: REVERT 0000009e: JUMPDEST 0000009f: PUSH2 0x00b4 000000a2: PUSH1 0x04 000000a4: DUP1 000000a5: DUP1 000000a6: CALLDATALOAD 000000a7: SWAP1 000000a8: PUSH1 0x20 000000aa: ADD 000000ab: SWAP1 000000ac: SWAP2 000000ad: SWAP1 000000ae: POP 000000af: POP 000000b0: PUSH2 0x02b0 000000b3: JUMP 000000b4: JUMPDEST 000000b5: PUSH1 0x40 000000b7: MLOAD 000000b8: DUP1 000000b9: DUP5 000000ba: DUP2 000000bb: MSTORE 000000bc: PUSH1 0x20 000000be: ADD 000000bf: DUP4 000000c0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000d5: AND 000000d6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000000eb: AND 000000ec: DUP2 000000ed: MSTORE 000000ee: PUSH1 0x20 000000f0: ADD 000000f1: DUP3 000000f2: DUP2 000000f3: MSTORE 000000f4: PUSH1 0x20 000000f6: ADD 000000f7: SWAP4 000000f8: POP 000000f9: POP 000000fa: POP 000000fb: POP 000000fc: PUSH1 0x40 000000fe: MLOAD 000000ff: DUP1 00000100: SWAP2 00000101: SUB 00000102: SWAP1 00000103: RETURN 00000104: JUMPDEST 00000105: CALLVALUE 00000106: ISZERO 00000107: PUSH2 0x010f 0000010a: JUMPI 0000010b: PUSH1 0x00 0000010d: DUP1 0000010e: REVERT 0000010f: JUMPDEST 00000110: PUSH2 0x0117 00000113: PUSH2 0x0346 00000116: JUMP 00000117: JUMPDEST 00000118: PUSH1 0x40 0000011a: MLOAD 0000011b: DUP1 0000011c: DUP3 0000011d: DUP2 0000011e: MSTORE 0000011f: PUSH1 0x20 00000121: ADD 00000122: SWAP2 00000123: POP 00000124: POP 00000125: PUSH1 0x40 00000127: MLOAD 00000128: DUP1 00000129: SWAP2 0000012a: SUB 0000012b: SWAP1 0000012c: RETURN 0000012d: JUMPDEST 0000012e: CALLVALUE 0000012f: ISZERO 00000130: PUSH2 0x0138 00000133: JUMPI 00000134: PUSH1 0x00 00000136: DUP1 00000137: REVERT 00000138: JUMPDEST 00000139: PUSH2 0x0157 0000013c: PUSH1 0x04 0000013e: DUP1 0000013f: DUP1 00000140: CALLDATALOAD 00000141: SWAP1 00000142: PUSH1 0x20 00000144: ADD 00000145: SWAP1 00000146: SWAP2 00000147: SWAP1 00000148: DUP1 00000149: CALLDATALOAD 0000014a: SWAP1 0000014b: PUSH1 0x20 0000014d: ADD 0000014e: SWAP1 0000014f: SWAP2 00000150: SWAP1 00000151: POP 00000152: POP 00000153: PUSH2 0x038d 00000156: JUMP 00000157: JUMPDEST 00000158: PUSH1 0x40 0000015a: MLOAD 0000015b: DUP1 0000015c: DUP3 0000015d: ISZERO 0000015e: ISZERO 0000015f: ISZERO 00000160: ISZERO 00000161: DUP2 00000162: MSTORE 00000163: PUSH1 0x20 00000165: ADD 00000166: SWAP2 00000167: POP 00000168: POP 00000169: PUSH1 0x40 0000016b: MLOAD 0000016c: DUP1 0000016d: SWAP2 0000016e: SUB 0000016f: SWAP1 00000170: RETURN 00000171: JUMPDEST 00000172: CALLVALUE 00000173: ISZERO 00000174: PUSH2 0x017c 00000177: JUMPI 00000178: PUSH1 0x00 0000017a: DUP1 0000017b: REVERT 0000017c: JUMPDEST 0000017d: PUSH2 0x0184 00000180: PUSH2 0x0445 00000183: JUMP 00000184: JUMPDEST 00000185: PUSH1 0x40 00000187: MLOAD 00000188: DUP1 00000189: DUP3 0000018a: ISZERO 0000018b: ISZERO 0000018c: ISZERO 0000018d: ISZERO 0000018e: DUP2 0000018f: MSTORE 00000190: PUSH1 0x20 00000192: ADD 00000193: SWAP2 00000194: POP 00000195: POP 00000196: PUSH1 0x40 00000198: MLOAD 00000199: DUP1 0000019a: SWAP2 0000019b: SUB 0000019c: SWAP1 0000019d: RETURN 0000019e: JUMPDEST 0000019f: CALLVALUE 000001a0: ISZERO 000001a1: PUSH2 0x01a9 000001a4: JUMPI 000001a5: PUSH1 0x00 000001a7: DUP1 000001a8: REVERT 000001a9: JUMPDEST 000001aa: PUSH2 0x01de 000001ad: PUSH1 0x04 000001af: DUP1 000001b0: DUP1 000001b1: CALLDATALOAD 000001b2: SWAP1 000001b3: PUSH1 0x20 000001b5: ADD 000001b6: SWAP1 000001b7: SWAP2 000001b8: SWAP1 000001b9: DUP1 000001ba: CALLDATALOAD 000001bb: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000001d0: AND 000001d1: SWAP1 000001d2: PUSH1 0x20 000001d4: ADD 000001d5: SWAP1 000001d6: SWAP2 000001d7: SWAP1 000001d8: POP 000001d9: POP 000001da: PUSH2 0x0517 000001dd: JUMP 000001de: JUMPDEST 000001df: PUSH1 0x40 000001e1: MLOAD 000001e2: DUP1 000001e3: DUP3 000001e4: ISZERO 000001e5: ISZERO 000001e6: ISZERO 000001e7: ISZERO 000001e8: DUP2 000001e9: MSTORE 000001ea: PUSH1 0x20 000001ec: ADD 000001ed: SWAP2 000001ee: POP 000001ef: POP 000001f0: PUSH1 0x40 000001f2: MLOAD 000001f3: DUP1 000001f4: SWAP2 000001f5: SUB 000001f6: SWAP1 000001f7: RETURN 000001f8: JUMPDEST 000001f9: CALLVALUE 000001fa: ISZERO 000001fb: PUSH2 0x0203 000001fe: JUMPI 000001ff: PUSH1 0x00 00000201: DUP1 00000202: REVERT 00000203: JUMPDEST 00000204: PUSH2 0x022f 00000207: PUSH1 0x04 00000209: DUP1 0000020a: DUP1 0000020b: CALLDATALOAD 0000020c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000221: AND 00000222: SWAP1 00000223: PUSH1 0x20 00000225: ADD 00000226: SWAP1 00000227: SWAP2 00000228: SWAP1 00000229: POP 0000022a: POP 0000022b: PUSH2 0x0609 0000022e: JUMP 0000022f: JUMPDEST 00000230: PUSH1 0x40 00000232: MLOAD 00000233: DUP1 00000234: DUP3 00000235: ISZERO 00000236: ISZERO 00000237: ISZERO 00000238: ISZERO 00000239: DUP2 0000023a: MSTORE 0000023b: PUSH1 0x20 0000023d: ADD 0000023e: SWAP2 0000023f: POP 00000240: POP 00000241: PUSH1 0x40 00000243: MLOAD 00000244: DUP1 00000245: SWAP2 00000246: SUB 00000247: SWAP1 00000248: RETURN 00000249: JUMPDEST 0000024a: PUSH2 0x025f 0000024d: PUSH1 0x04 0000024f: DUP1 00000250: DUP1 00000251: CALLDATALOAD 00000252: SWAP1 00000253: PUSH1 0x20 00000255: ADD 00000256: SWAP1 00000257: SWAP2 00000258: SWAP1 00000259: POP 0000025a: POP 0000025b: PUSH2 0x06b1 0000025e: JUMP 0000025f: JUMPDEST 00000260: PUSH1 0x40 00000262: MLOAD 00000263: DUP1 00000264: DUP3 00000265: ISZERO 00000266: ISZERO 00000267: ISZERO 00000268: ISZERO 00000269: DUP2 0000026a: MSTORE 0000026b: PUSH1 0x20 0000026d: ADD 0000026e: SWAP2 0000026f: POP 00000270: POP 00000271: PUSH1 0x40 00000273: MLOAD 00000274: DUP1 00000275: SWAP2 00000276: SUB 00000277: SWAP1 00000278: RETURN 00000279: JUMPDEST 0000027a: CALLVALUE 0000027b: ISZERO 0000027c: PUSH2 0x0284 0000027f: JUMPI 00000280: PUSH1 0x00 00000282: DUP1 00000283: REVERT 00000284: JUMPDEST 00000285: PUSH2 0x029a 00000288: PUSH1 0x04 0000028a: DUP1 0000028b: DUP1 0000028c: CALLDATALOAD 0000028d: SWAP1 0000028e: PUSH1 0x20 00000290: ADD 00000291: SWAP1 00000292: SWAP2 00000293: SWAP1 00000294: POP 00000295: POP 00000296: PUSH2 0x0a92 00000299: JUMP 0000029a: JUMPDEST 0000029b: PUSH1 0x40 0000029d: MLOAD 0000029e: DUP1 0000029f: DUP3 000002a0: DUP2 000002a1: MSTORE 000002a2: PUSH1 0x20 000002a4: ADD 000002a5: SWAP2 000002a6: POP 000002a7: POP 000002a8: PUSH1 0x40 000002aa: MLOAD 000002ab: DUP1 000002ac: SWAP2 000002ad: SUB 000002ae: SWAP1 000002af: RETURN 000002b0: JUMPDEST 000002b1: PUSH1 0x00 000002b3: DUP1 000002b4: PUSH1 0x00 000002b6: DUP4 000002b7: PUSH1 0x01 000002b9: DUP2 000002ba: LT 000002bb: ISZERO 000002bc: DUP1 000002bd: ISZERO 000002be: PUSH2 0x02c8 000002c1: JUMPI 000002c2: POP 000002c3: PUSH1 0xb2 000002c5: DUP2 000002c6: GT 000002c7: ISZERO 000002c8: JUMPDEST 000002c9: ISZERO 000002ca: ISZERO 000002cb: PUSH2 0x02d3 000002ce: JUMPI 000002cf: PUSH1 0x00 000002d1: DUP1 000002d2: REVERT 000002d3: JUMPDEST 000002d4: PUSH1 0x03 000002d6: PUSH1 0x00 000002d8: DUP7 000002d9: DUP2 000002da: MSTORE 000002db: PUSH1 0x20 000002dd: ADD 000002de: SWAP1 000002df: DUP2 000002e0: MSTORE 000002e1: PUSH1 0x20 000002e3: ADD 000002e4: PUSH1 0x00 000002e6: KECCAK256 000002e7: PUSH1 0x00 000002e9: ADD 000002ea: SLOAD 000002eb: PUSH1 0x03 000002ed: PUSH1 0x00 000002ef: DUP8 000002f0: DUP2 000002f1: MSTORE 000002f2: PUSH1 0x20 000002f4: ADD 000002f5: SWAP1 000002f6: DUP2 000002f7: MSTORE 000002f8: PUSH1 0x20 000002fa: ADD 000002fb: PUSH1 0x00 000002fd: KECCAK256 000002fe: PUSH1 0x01 00000300: ADD 00000301: PUSH1 0x00 00000303: SWAP1 00000304: SLOAD 00000305: SWAP1 00000306: PUSH2 0x0100 00000309: EXP 0000030a: SWAP1 0000030b: DIV 0000030c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000321: AND 00000322: PUSH1 0x03 00000324: PUSH1 0x00 00000326: DUP9 00000327: DUP2 00000328: MSTORE 00000329: PUSH1 0x20 0000032b: ADD 0000032c: SWAP1 0000032d: DUP2 0000032e: MSTORE 0000032f: PUSH1 0x20 00000331: ADD 00000332: PUSH1 0x00 00000334: KECCAK256 00000335: PUSH1 0x02 00000337: ADD 00000338: SLOAD 00000339: SWAP4 0000033a: POP 0000033b: SWAP4 0000033c: POP 0000033d: SWAP4 0000033e: POP 0000033f: POP 00000340: SWAP2 00000341: SWAP4 00000342: SWAP1 00000343: SWAP3 00000344: POP 00000345: JUMP 00000346: JUMPDEST 00000347: PUSH1 0x00 00000349: PUSH1 0x02 0000034b: PUSH1 0x00 0000034d: CALLER 0000034e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000363: AND 00000364: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000379: AND 0000037a: DUP2 0000037b: MSTORE 0000037c: PUSH1 0x20 0000037e: ADD 0000037f: SWAP1 00000380: DUP2 00000381: MSTORE 00000382: PUSH1 0x20 00000384: ADD 00000385: PUSH1 0x00 00000387: KECCAK256 00000388: SLOAD 00000389: SWAP1 0000038a: POP 0000038b: SWAP1 0000038c: JUMP 0000038d: JUMPDEST 0000038e: PUSH1 0x00 00000390: DUP3 00000391: PUSH1 0x01 00000393: DUP2 00000394: LT 00000395: ISZERO 00000396: DUP1 00000397: ISZERO 00000398: PUSH2 0x03a2 0000039b: JUMPI 0000039c: POP 0000039d: PUSH1 0xb2 0000039f: DUP2 000003a0: GT 000003a1: ISZERO 000003a2: JUMPDEST 000003a3: ISZERO 000003a4: ISZERO 000003a5: PUSH2 0x03ad 000003a8: JUMPI 000003a9: PUSH1 0x00 000003ab: DUP1 000003ac: REVERT 000003ad: JUMPDEST 000003ae: DUP4 000003af: PUSH1 0x03 000003b1: PUSH1 0x00 000003b3: DUP3 000003b4: DUP2 000003b5: MSTORE 000003b6: PUSH1 0x20 000003b8: ADD 000003b9: SWAP1 000003ba: DUP2 000003bb: MSTORE 000003bc: PUSH1 0x20 000003be: ADD 000003bf: PUSH1 0x00 000003c1: KECCAK256 000003c2: PUSH1 0x01 000003c4: ADD 000003c5: PUSH1 0x00 000003c7: SWAP1 000003c8: SLOAD 000003c9: SWAP1 000003ca: PUSH2 0x0100 000003cd: EXP 000003ce: SWAP1 000003cf: DIV 000003d0: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003e5: AND 000003e6: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000003fb: AND 000003fc: CALLER 000003fd: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000412: AND 00000413: EQ 00000414: ISZERO 00000415: ISZERO 00000416: PUSH2 0x041e 00000419: JUMPI 0000041a: PUSH1 0x00 0000041c: DUP1 0000041d: REVERT 0000041e: JUMPDEST 0000041f: DUP4 00000420: PUSH1 0x03 00000422: PUSH1 0x00 00000424: DUP8 00000425: DUP2 00000426: MSTORE 00000427: PUSH1 0x20 00000429: ADD 0000042a: SWAP1 0000042b: DUP2 0000042c: MSTORE 0000042d: PUSH1 0x20 0000042f: ADD 00000430: PUSH1 0x00 00000432: KECCAK256 00000433: PUSH1 0x02 00000435: ADD 00000436: DUP2 00000437: SWAP1 00000438: SSTORE 00000439: POP 0000043a: PUSH1 0x01 0000043c: SWAP3 0000043d: POP 0000043e: POP 0000043f: POP 00000440: SWAP3 00000441: SWAP2 00000442: POP 00000443: POP 00000444: JUMP 00000445: JUMPDEST 00000446: PUSH1 0x00 00000448: DUP1 00000449: PUSH1 0x02 0000044b: PUSH1 0x00 0000044d: CALLER 0000044e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000463: AND 00000464: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000479: AND 0000047a: DUP2 0000047b: MSTORE 0000047c: PUSH1 0x20 0000047e: ADD 0000047f: SWAP1 00000480: DUP2 00000481: MSTORE 00000482: PUSH1 0x20 00000484: ADD 00000485: PUSH1 0x00 00000487: KECCAK256 00000488: SLOAD 00000489: SWAP1 0000048a: POP 0000048b: PUSH1 0x00 0000048d: PUSH1 0x02 0000048f: PUSH1 0x00 00000491: CALLER 00000492: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004a7: AND 000004a8: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004bd: AND 000004be: DUP2 000004bf: MSTORE 000004c0: PUSH1 0x20 000004c2: ADD 000004c3: SWAP1 000004c4: DUP2 000004c5: MSTORE 000004c6: PUSH1 0x20 000004c8: ADD 000004c9: PUSH1 0x00 000004cb: KECCAK256 000004cc: DUP2 000004cd: SWAP1 000004ce: SSTORE 000004cf: POP 000004d0: CALLER 000004d1: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000004e6: AND 000004e7: PUSH2 0x08fc 000004ea: DUP3 000004eb: SWAP1 000004ec: DUP2 000004ed: ISZERO 000004ee: MUL 000004ef: SWAP1 000004f0: PUSH1 0x40 000004f2: MLOAD 000004f3: PUSH1 0x00 000004f5: PUSH1 0x40 000004f7: MLOAD 000004f8: DUP1 000004f9: DUP4 000004fa: SUB 000004fb: DUP2 000004fc: DUP6 000004fd: DUP9 000004fe: DUP9 000004ff: CALL 00000500: SWAP4 00000501: POP 00000502: POP 00000503: POP 00000504: POP 00000505: ISZERO 00000506: ISZERO 00000507: PUSH2 0x050f 0000050a: JUMPI 0000050b: PUSH1 0x00 0000050d: DUP1 0000050e: REVERT 0000050f: JUMPDEST 00000510: PUSH1 0x01 00000512: SWAP2 00000513: POP 00000514: POP 00000515: SWAP1 00000516: JUMP 00000517: JUMPDEST 00000518: PUSH1 0x00 0000051a: DUP3 0000051b: PUSH1 0x01 0000051d: DUP2 0000051e: LT 0000051f: ISZERO 00000520: DUP1 00000521: ISZERO 00000522: PUSH2 0x052c 00000525: JUMPI 00000526: POP 00000527: PUSH1 0xb2 00000529: DUP2 0000052a: GT 0000052b: ISZERO 0000052c: JUMPDEST 0000052d: ISZERO 0000052e: ISZERO 0000052f: PUSH2 0x0537 00000532: JUMPI 00000533: PUSH1 0x00 00000535: DUP1 00000536: REVERT 00000537: JUMPDEST 00000538: DUP4 00000539: PUSH1 0x03 0000053b: PUSH1 0x00 0000053d: DUP3 0000053e: DUP2 0000053f: MSTORE 00000540: PUSH1 0x20 00000542: ADD 00000543: SWAP1 00000544: DUP2 00000545: MSTORE 00000546: PUSH1 0x20 00000548: ADD 00000549: PUSH1 0x00 0000054b: KECCAK256 0000054c: PUSH1 0x01 0000054e: ADD 0000054f: PUSH1 0x00 00000551: SWAP1 00000552: SLOAD 00000553: SWAP1 00000554: PUSH2 0x0100 00000557: EXP 00000558: SWAP1 00000559: DIV 0000055a: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000056f: AND 00000570: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000585: AND 00000586: CALLER 00000587: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000059c: AND 0000059d: EQ 0000059e: ISZERO 0000059f: ISZERO 000005a0: PUSH2 0x05a8 000005a3: JUMPI 000005a4: PUSH1 0x00 000005a6: DUP1 000005a7: REVERT 000005a8: JUMPDEST 000005a9: DUP4 000005aa: PUSH1 0x03 000005ac: PUSH1 0x00 000005ae: DUP8 000005af: DUP2 000005b0: MSTORE 000005b1: PUSH1 0x20 000005b3: ADD 000005b4: SWAP1 000005b5: DUP2 000005b6: MSTORE 000005b7: PUSH1 0x20 000005b9: ADD 000005ba: PUSH1 0x00 000005bc: KECCAK256 000005bd: PUSH1 0x01 000005bf: ADD 000005c0: PUSH1 0x00 000005c2: PUSH2 0x0100 000005c5: EXP 000005c6: DUP2 000005c7: SLOAD 000005c8: DUP2 000005c9: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000005de: MUL 000005df: NOT 000005e0: AND 000005e1: SWAP1 000005e2: DUP4 000005e3: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000005f8: AND 000005f9: MUL 000005fa: OR 000005fb: SWAP1 000005fc: SSTORE 000005fd: POP 000005fe: PUSH1 0x01 00000600: SWAP3 00000601: POP 00000602: POP 00000603: POP 00000604: SWAP3 00000605: SWAP2 00000606: POP 00000607: POP 00000608: JUMP 00000609: JUMPDEST 0000060a: PUSH1 0x00 0000060c: PUSH1 0x01 0000060e: PUSH1 0x00 00000610: SWAP1 00000611: SLOAD 00000612: SWAP1 00000613: PUSH2 0x0100 00000616: EXP 00000617: SWAP1 00000618: DIV 00000619: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000062e: AND 0000062f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000644: AND 00000645: CALLER 00000646: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000065b: AND 0000065c: EQ 0000065d: ISZERO 0000065e: ISZERO 0000065f: PUSH2 0x0667 00000662: JUMPI 00000663: PUSH1 0x00 00000665: DUP1 00000666: REVERT 00000667: JUMPDEST 00000668: DUP2 00000669: PUSH1 0x01 0000066b: PUSH1 0x00 0000066d: PUSH2 0x0100 00000670: EXP 00000671: DUP2 00000672: SLOAD 00000673: DUP2 00000674: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000689: MUL 0000068a: NOT 0000068b: AND 0000068c: SWAP1 0000068d: DUP4 0000068e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000006a3: AND 000006a4: MUL 000006a5: OR 000006a6: SWAP1 000006a7: SSTORE 000006a8: POP 000006a9: PUSH1 0x01 000006ab: SWAP1 000006ac: POP 000006ad: SWAP2 000006ae: SWAP1 000006af: POP 000006b0: JUMP 000006b1: JUMPDEST 000006b2: PUSH1 0x00 000006b4: DUP1 000006b5: PUSH1 0x00 000006b7: DUP1 000006b8: PUSH1 0x00 000006ba: DUP6 000006bb: PUSH1 0x01 000006bd: DUP2 000006be: LT 000006bf: ISZERO 000006c0: DUP1 000006c1: ISZERO 000006c2: PUSH2 0x06cc 000006c5: JUMPI 000006c6: POP 000006c7: PUSH1 0xb2 000006c9: DUP2 000006ca: GT 000006cb: ISZERO 000006cc: JUMPDEST 000006cd: ISZERO 000006ce: ISZERO 000006cf: PUSH2 0x06d7 000006d2: JUMPI 000006d3: PUSH1 0x00 000006d5: DUP1 000006d6: REVERT 000006d7: JUMPDEST 000006d8: PUSH1 0x00 000006da: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000006ef: AND 000006f0: PUSH1 0x03 000006f2: PUSH1 0x00 000006f4: DUP10 000006f5: DUP2 000006f6: MSTORE 000006f7: PUSH1 0x20 000006f9: ADD 000006fa: SWAP1 000006fb: DUP2 000006fc: MSTORE 000006fd: PUSH1 0x20 000006ff: ADD 00000700: PUSH1 0x00 00000702: KECCAK256 00000703: PUSH1 0x01 00000705: ADD 00000706: PUSH1 0x00 00000708: SWAP1 00000709: SLOAD 0000070a: SWAP1 0000070b: PUSH2 0x0100 0000070e: EXP 0000070f: SWAP1 00000710: DIV 00000711: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000726: AND 00000727: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000073c: AND 0000073d: EQ 0000073e: ISZERO 0000073f: ISZERO 00000740: PUSH2 0x076a 00000743: JUMPI 00000744: PUSH1 0x00 00000746: PUSH1 0x03 00000748: PUSH1 0x00 0000074a: DUP10 0000074b: DUP2 0000074c: MSTORE 0000074d: PUSH1 0x20 0000074f: ADD 00000750: SWAP1 00000751: DUP2 00000752: MSTORE 00000753: PUSH1 0x20 00000755: ADD 00000756: PUSH1 0x00 00000758: KECCAK256 00000759: PUSH1 0x02 0000075b: ADD 0000075c: SLOAD 0000075d: EQ 0000075e: ISZERO 0000075f: ISZERO 00000760: ISZERO 00000761: PUSH2 0x0769 00000764: JUMPI 00000765: PUSH1 0x00 00000767: DUP1 00000768: REVERT 00000769: JUMPDEST 0000076a: JUMPDEST 0000076b: PUSH1 0x00 0000076d: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000782: AND 00000783: PUSH1 0x03 00000785: PUSH1 0x00 00000787: DUP10 00000788: DUP2 00000789: MSTORE 0000078a: PUSH1 0x20 0000078c: ADD 0000078d: SWAP1 0000078e: DUP2 0000078f: MSTORE 00000790: PUSH1 0x20 00000792: ADD 00000793: PUSH1 0x00 00000795: KECCAK256 00000796: PUSH1 0x01 00000798: ADD 00000799: PUSH1 0x00 0000079b: SWAP1 0000079c: SLOAD 0000079d: SWAP1 0000079e: PUSH2 0x0100 000007a1: EXP 000007a2: SWAP1 000007a3: DIV 000007a4: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000007b9: AND 000007ba: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000007cf: AND 000007d0: EQ 000007d1: PUSH2 0x07f0 000007d4: JUMPI 000007d5: PUSH1 0x03 000007d7: PUSH1 0x00 000007d9: DUP9 000007da: DUP2 000007db: MSTORE 000007dc: PUSH1 0x20 000007de: ADD 000007df: SWAP1 000007e0: DUP2 000007e1: MSTORE 000007e2: PUSH1 0x20 000007e4: ADD 000007e5: PUSH1 0x00 000007e7: KECCAK256 000007e8: PUSH1 0x02 000007ea: ADD 000007eb: SLOAD 000007ec: PUSH2 0x07fa 000007ef: JUMP 000007f0: JUMPDEST 000007f1: PUSH2 0x07f9 000007f4: DUP8 000007f5: PUSH2 0x0a92 000007f8: JUMP 000007f9: JUMPDEST 000007fa: JUMPDEST 000007fb: SWAP5 000007fc: POP 000007fd: DUP5 000007fe: CALLVALUE 000007ff: LT 00000800: ISZERO 00000801: ISZERO 00000802: ISZERO 00000803: PUSH2 0x080b 00000806: JUMPI 00000807: PUSH1 0x00 00000809: DUP1 0000080a: REVERT 0000080b: JUMPDEST 0000080c: PUSH1 0x00 0000080e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000823: AND 00000824: PUSH1 0x03 00000826: PUSH1 0x00 00000828: DUP10 00000829: DUP2 0000082a: MSTORE 0000082b: PUSH1 0x20 0000082d: ADD 0000082e: SWAP1 0000082f: DUP2 00000830: MSTORE 00000831: PUSH1 0x20 00000833: ADD 00000834: PUSH1 0x00 00000836: KECCAK256 00000837: PUSH1 0x01 00000839: ADD 0000083a: PUSH1 0x00 0000083c: SWAP1 0000083d: SLOAD 0000083e: SWAP1 0000083f: PUSH2 0x0100 00000842: EXP 00000843: SWAP1 00000844: DIV 00000845: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000085a: AND 0000085b: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000870: AND 00000871: EQ 00000872: ISZERO 00000873: PUSH2 0x0905 00000876: JUMPI 00000877: CALLVALUE 00000878: PUSH1 0x02 0000087a: PUSH1 0x00 0000087c: PUSH1 0x01 0000087e: PUSH1 0x00 00000880: SWAP1 00000881: SLOAD 00000882: SWAP1 00000883: PUSH2 0x0100 00000886: EXP 00000887: SWAP1 00000888: DIV 00000889: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000089e: AND 0000089f: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000008b4: AND 000008b5: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000008ca: AND 000008cb: DUP2 000008cc: MSTORE 000008cd: PUSH1 0x20 000008cf: ADD 000008d0: SWAP1 000008d1: DUP2 000008d2: MSTORE 000008d3: PUSH1 0x20 000008d5: ADD 000008d6: PUSH1 0x00 000008d8: KECCAK256 000008d9: PUSH1 0x00 000008db: DUP3 000008dc: DUP3 000008dd: SLOAD 000008de: ADD 000008df: SWAP3 000008e0: POP 000008e1: POP 000008e2: DUP2 000008e3: SWAP1 000008e4: SSTORE 000008e5: POP 000008e6: DUP7 000008e7: PUSH1 0x03 000008e9: PUSH1 0x00 000008eb: DUP10 000008ec: DUP2 000008ed: MSTORE 000008ee: PUSH1 0x20 000008f0: ADD 000008f1: SWAP1 000008f2: DUP2 000008f3: MSTORE 000008f4: PUSH1 0x20 000008f6: ADD 000008f7: PUSH1 0x00 000008f9: KECCAK256 000008fa: PUSH1 0x00 000008fc: ADD 000008fd: DUP2 000008fe: SWAP1 000008ff: SSTORE 00000900: POP 00000901: PUSH2 0x0a13 00000904: JUMP 00000905: JUMPDEST 00000906: PUSH2 0x2710 00000909: PUSH1 0xc8 0000090b: CALLVALUE 0000090c: MUL 0000090d: DUP2 0000090e: ISZERO 0000090f: ISZERO 00000910: PUSH2 0x0915 00000913: JUMPI 00000914: INVALID 00000915: JUMPDEST 00000916: DIV 00000917: SWAP4 00000918: POP 00000919: DUP4 0000091a: CALLVALUE 0000091b: SUB 0000091c: SWAP3 0000091d: POP 0000091e: DUP4 0000091f: PUSH1 0x02 00000921: PUSH1 0x00 00000923: PUSH1 0x01 00000925: PUSH1 0x00 00000927: SWAP1 00000928: SLOAD 00000929: SWAP1 0000092a: PUSH2 0x0100 0000092d: EXP 0000092e: SWAP1 0000092f: DIV 00000930: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000945: AND 00000946: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 0000095b: AND 0000095c: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000971: AND 00000972: DUP2 00000973: MSTORE 00000974: PUSH1 0x20 00000976: ADD 00000977: SWAP1 00000978: DUP2 00000979: MSTORE 0000097a: PUSH1 0x20 0000097c: ADD 0000097d: PUSH1 0x00 0000097f: KECCAK256 00000980: PUSH1 0x00 00000982: DUP3 00000983: DUP3 00000984: SLOAD 00000985: ADD 00000986: SWAP3 00000987: POP 00000988: POP 00000989: DUP2 0000098a: SWAP1 0000098b: SSTORE 0000098c: POP 0000098d: PUSH1 0x03 0000098f: PUSH1 0x00 00000991: DUP9 00000992: DUP2 00000993: MSTORE 00000994: PUSH1 0x20 00000996: ADD 00000997: SWAP1 00000998: DUP2 00000999: MSTORE 0000099a: PUSH1 0x20 0000099c: ADD 0000099d: PUSH1 0x00 0000099f: KECCAK256 000009a0: PUSH1 0x01 000009a2: ADD 000009a3: PUSH1 0x00 000009a5: SWAP1 000009a6: SLOAD 000009a7: SWAP1 000009a8: PUSH2 0x0100 000009ab: EXP 000009ac: SWAP1 000009ad: DIV 000009ae: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000009c3: AND 000009c4: SWAP2 000009c5: POP 000009c6: DUP3 000009c7: PUSH1 0x02 000009c9: PUSH1 0x00 000009cb: DUP5 000009cc: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000009e1: AND 000009e2: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 000009f7: AND 000009f8: DUP2 000009f9: MSTORE 000009fa: PUSH1 0x20 000009fc: ADD 000009fd: SWAP1 000009fe: DUP2 000009ff: MSTORE 00000a00: PUSH1 0x20 00000a02: ADD 00000a03: PUSH1 0x00 00000a05: KECCAK256 00000a06: PUSH1 0x00 00000a08: DUP3 00000a09: DUP3 00000a0a: SLOAD 00000a0b: ADD 00000a0c: SWAP3 00000a0d: POP 00000a0e: POP 00000a0f: DUP2 00000a10: SWAP1 00000a11: SSTORE 00000a12: POP 00000a13: JUMPDEST 00000a14: CALLER 00000a15: PUSH1 0x03 00000a17: PUSH1 0x00 00000a19: DUP10 00000a1a: DUP2 00000a1b: MSTORE 00000a1c: PUSH1 0x20 00000a1e: ADD 00000a1f: SWAP1 00000a20: DUP2 00000a21: MSTORE 00000a22: PUSH1 0x20 00000a24: ADD 00000a25: PUSH1 0x00 00000a27: KECCAK256 00000a28: PUSH1 0x01 00000a2a: ADD 00000a2b: PUSH1 0x00 00000a2d: PUSH2 0x0100 00000a30: EXP 00000a31: DUP2 00000a32: SLOAD 00000a33: DUP2 00000a34: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000a49: MUL 00000a4a: NOT 00000a4b: AND 00000a4c: SWAP1 00000a4d: DUP4 00000a4e: PUSH20 0xffffffffffffffffffffffffffffffffffffffff 00000a63: AND 00000a64: MUL 00000a65: OR 00000a66: SWAP1 00000a67: SSTORE 00000a68: POP 00000a69: PUSH1 0x00 00000a6b: PUSH1 0x03 00000a6d: PUSH1 0x00 00000a6f: DUP10 00000a70: DUP2 00000a71: MSTORE 00000a72: PUSH1 0x20 00000a74: ADD 00000a75: SWAP1 00000a76: DUP2 00000a77: MSTORE 00000a78: PUSH1 0x20 00000a7a: ADD 00000a7b: PUSH1 0x00 00000a7d: KECCAK256 00000a7e: PUSH1 0x02 00000a80: ADD 00000a81: DUP2 00000a82: SWAP1 00000a83: SSTORE 00000a84: POP 00000a85: PUSH1 0x01 00000a87: SWAP6 00000a88: POP 00000a89: POP 00000a8a: POP 00000a8b: POP 00000a8c: POP 00000a8d: POP 00000a8e: SWAP2 00000a8f: SWAP1 00000a90: POP 00000a91: JUMP 00000a92: JUMPDEST 00000a93: PUSH1 0x00 00000a95: DUP2 00000a96: PUSH1 0x01 00000a98: DUP2 00000a99: LT 00000a9a: ISZERO 00000a9b: DUP1 00000a9c: ISZERO 00000a9d: PUSH2 0x0aa7 00000aa0: JUMPI 00000aa1: POP 00000aa2: PUSH1 0xb2 00000aa4: DUP2 00000aa5: GT 00000aa6: ISZERO 00000aa7: JUMPDEST 00000aa8: ISZERO 00000aa9: ISZERO 00000aaa: PUSH2 0x0ab2 00000aad: JUMPI 00000aae: PUSH1 0x00 00000ab0: DUP1 00000ab1: REVERT 00000ab2: JUMPDEST 00000ab3: PUSH1 0x02 00000ab5: PUSH1 0x00 00000ab7: SLOAD 00000ab8: DUP2 00000ab9: ISZERO 00000aba: ISZERO 00000abb: PUSH2 0x0ac0 00000abe: JUMPI 00000abf: INVALID 00000ac0: JUMPDEST 00000ac1: DIV 00000ac2: PUSH1 0x01 00000ac4: DUP5 00000ac5: SUB 00000ac6: MUL 00000ac7: PUSH1 0x00 00000ac9: SLOAD 00000aca: ADD 00000acb: SWAP2 00000acc: POP 00000acd: POP 00000ace: SWAP2 00000acf: SWAP1 00000ad0: POP 00000ad1: JUMP 00000ad2: STOP 00000ad3: LOG1 00000ad4: PUSH6 0x627a7a723058 00000adb: KECCAK256 00000adc: CALLDATASIZE 00000add: PUSH22 0x0c1f9becab4010bbdb3418bf1e9a13a07030ce15b7aa 00000af4: UNKNOWN(0x0C) 00000af5: BYTE 00000af6: PUSH32
| Severity | Category | Tool | Title | Confidence | Validated | Confirmed | Details |
|---|---|---|---|---|---|---|---|
| medium | other | detector | Untrusted CALL target/value reachable | 45 | no | no |
viewtrace_id: 0x5cd522bcc3b2536744f876b222f3fde57b3bd36d47b515c7909b4ca7be9f7e01
call_targets:
0xb6bbf89c3dbba20cb4d5cabaa4a386acbbab455e
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x5cd522bcc3b2536744f876b222f3fde57b3bd36d47b515c7909b4ca7be9f7e01",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xb6bbf89c3dbba20cb4d5cabaa4a386acbbab455e"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x11ee0ec5",
"selector": "0x11ee0ec5",
"calldata_variants": [
"0x11ee0ec5",
"0x11ee0ec50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x12065fe0",
"selector": "0x12065fe0",
"calldata_variants": [
"0x12065fe0",
"0x12065fe00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x159d3c24",
"selector": "0x159d3c24",
"calldata_variants": [
"0x159d3c24",
"0x159d3c240000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3ccfd60b",
"selector": "0x3ccfd60b",
"calldata_variants": [
"0x3ccfd60b",
"0x3ccfd60b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x88806b37",
"selector": "0x88806b37",
"calldata_variants": [
"0x88806b37",
"0x88806b370000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa843c51f",
"selector": "0xa843c51f",
"calldata_variants": [
"0xa843c51f",
"0xa843c51f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xbee712da",
"selector": "0xbee712da",
"calldata_variants": [
"0xbee712da",
"0xbee712da0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1279,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"call_count": 1,
"guards_detected": [
{
"pc": 1020,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1414,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1605,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
],
"untrusted_call_count": 1
}
|
| medium | other | detector | ETH value transfer possible | 40 | no | no |
viewtrace_id: 0x5cd522bcc3b2536744f876b222f3fde57b3bd36d47b515c7909b4ca7be9f7e01
call_targets:
0xb6bbf89c3dbba20cb4d5cabaa4a386acbbab455e
target_varies:
no
classification:
constant_target
validation_json{
"sink": "CALL",
"errors": 0,
"status": "sink_reached",
"attempts": 1,
"trace_id": "0x5cd522bcc3b2536744f876b222f3fde57b3bd36d47b515c7909b4ca7be9f7e01",
"confirmed": false,
"trace_mode": "callTracer",
"call_targets": [
"0xb6bbf89c3dbba20cb4d5cabaa4a386acbbab455e"
],
"matched_probe": null,
"target_varies": false,
"classification": "constant_target"
}
witness_json{
"notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
"constraints": [],
"entrypoints": [
{
"calldata": "0xffffffff",
"selector": "0xffffffff",
"calldata_variants": [
"0xffffffff",
"0xffffffff0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x11ee0ec5",
"selector": "0x11ee0ec5",
"calldata_variants": [
"0x11ee0ec5",
"0x11ee0ec50000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x12065fe0",
"selector": "0x12065fe0",
"calldata_variants": [
"0x12065fe0",
"0x12065fe00000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x159d3c24",
"selector": "0x159d3c24",
"calldata_variants": [
"0x159d3c24",
"0x159d3c240000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x3ccfd60b",
"selector": "0x3ccfd60b",
"calldata_variants": [
"0x3ccfd60b",
"0x3ccfd60b0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0x88806b37",
"selector": "0x88806b37",
"calldata_variants": [
"0x88806b37",
"0x88806b370000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xa843c51f",
"selector": "0xa843c51f",
"calldata_variants": [
"0xa843c51f",
"0xa843c51f0000000000000000000000000000000000000000000000000000000000000000"
]
},
{
"calldata": "0xbee712da",
"selector": "0xbee712da",
"calldata_variants": [
"0xbee712da",
"0xbee712da0000000000000000000000000000000000000000000000000000000000000000"
]
}
]
}
evidence_json{
"examples": [
{
"pc": 1279,
"opcode": "CALL",
"returndata_checked": null,
"value_expression_category": "computed",
"target_expression_category": "computed"
}
],
"eth_value_calls": 1,
"guards_detected": [
{
"pc": 1020,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1414,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
},
{
"pc": 1605,
"type": "msg_sender_eq_const",
"value": "0xffffffffffffffffffffffffffffffffffffffff"
}
]
}
|