TW
Tripwire
Find contracts. Test them. Review real vulns.

Analysis Run

54675ee3-e929-42c2-ae9f-fb667b9c06f2

failed
Chain ID
1
Address
Block Number
Created
Mon, Jan 5, 2026 8:44 PM
Review Summary

What survived the funnel

Open this run to answer one question: is this real attacker-relevant behavior with real impact, or just normal contract plumbing?

Confirmed
2
Validated
2
Source
Verified
Review Backing
Not yet
Best current signal
Untrusted CALL target/value reachable
crit 0 high 2 direct contract
Review Checklist
1. Read the findings table first. Ignore raw jobs until the result looks real.
2. Confirm attacker control, not just the existence of a sink.
3. Confirm money or privilege impact.
4. Keep it if the behavior is real. Kill it if this is normal proxy, admin, or upgrade plumbing.

Processing Jobs

Status & attempts
ID Type Status Attempts Heartbeat
31760 report.consolidate complete 1 / 1 3 months ago
95983 artifact.fetch failed 1 / 3 1 week ago
95984 tool.cast_disasm complete 1 / 3 1 week ago
95985 analysis.bundle complete 1 / 3 1 week ago
95986 capability.graph complete 1 / 3 1 week ago
95987 detector.run complete 1 / 3 1 week ago
95988 validation.fork complete 1 / 3 1 week ago
113792 tool.slither failed 2 / 2 1 week ago

Artifact

Runtime bytecode: available
Creation TX:
Deployer:
Proxy: no
Implementation:
Verified Source: yes

Slither

tool.slither
Status
failed solc version 0.2.1 is too old for supported toolchain
Attempts
2 / 2
Findings
0
Solc
View stderr
Traceback (most recent call last):
  File "/var/www/tripwire/worker/worker.py", line 198, in main
    payload = dispatch_job(job_type, job_id, job_meta, run_data, config, laravel_client)
  File "/var/www/tripwire/worker/worker.py", line 114, in dispatch_job
    return slither_run.run(job_id, job_meta, run_data, config, log, laravel_client)
           ~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/var/www/tripwire/worker/jobs/slither_run.py", line 1056, in run
    solc_path, solc_meta = _prepare_solc(chosen_version, workspace)
                           ~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/var/www/tripwire/worker/jobs/slither_run.py", line 190, in _prepare_solc
    raise RuntimeError(f"solc version {default_version} is too old for supported toolchain")
RuntimeError: solc version 0.2.1 is too old for supported toolchain

Codex

report.consolidate
Job Status
complete
Attempts
1 / 1
Findings
0
No findings?
yes
Summary
No concrete, exploitable profit paths found in the provided contract under the stated assumptions.
View stderr
[codex:1556] OpenAI Codex v0.77.0 (research preview)
[codex:1556] --------
[codex:1556] workdir: /tmp/codex-multi-bplehh_7
[codex:1556] model: gpt-5.2-codex
[codex:1556] provider: openai
[codex:1556] approval: never
[codex:1556] sandbox: read-only
[codex:1556] reasoning effort: xhigh
[codex:1556] reasoning summaries: auto
[codex:1556] session id: 019b8fe7-28b2-7742-a458-00605faccd5f
[codex:1556] --------
[codex:1556] user
[codex:1556] You are a profit-focused exploit hunter. Your ONLY goal is finding ways to extract value (ETH, tokens, NFTs) from this contract.
[codex:1556] 
[codex:1556] Read `AUDIT_BUNDLE.txt` completely before concluding. Treat `lib/` and `@openzeppelin/` as trusted unless misused.
[codex:1556] 
[codex:1556] ONLY REPORT if you find a CONCRETE, EXPLOITABLE path to profit. We do NOT care about:
[codex:1556] - Gas inefficiency, code quality, naming, or best practices
[codex:1556] - Theoretical vulnerabilities without a clear extraction path
[codex:1556] - Centralization risks (admin can rug) - assume admin keys are secure
[codex:1556] - Front-running unless it enables theft beyond MEV
[codex:1556] - DoS, griefing, or issues that don't result in attacker profit
[codex:1556] - Missing events, view function issues, or informational findings
[codex:1556] 
[codex:1556] HIGH-VALUE PATTERNS TO HUNT:
[codex:1556] - Reentrancy: external calls before state updates that allow double-withdrawal
[codex:1556] - Access control: missing/bypassable auth on withdraw, transfer, or mint functions
[codex:1556] - Flash loan attacks: borrow -> manipulate -> profit in single tx
[codex:1556] - Price oracle manipulation: TWAP with short window, spot price reads, stale prices
[codex:1556] - Signature replay: missing nonce, chainId, or deadline in permit/meta-tx
[codex:1556] - Proxy hijacking: unprotected initialize(), storage collision, UUPS without auth
[codex:1556] - Accounting errors: rounding that favors attacker, share inflation, first depositor attacks
[codex:1556] - Unchecked external calls: return value ignored on token transfers enabling fake tokens
[codex:1556] - Cross-function reentrancy: state read in function A, modified via reentrant call, used stale in A
[codex:1556] 
[codex:1556] For each finding, you MUST provide:
[codex:1556] 1. Exact file and line numbers of vulnerable code
[codex:1556] 2. Step-by-step exploit transaction sequence
[codex:1556] 3. Estimated profit potential (order of magnitude: contract balance, LP reserves, etc.)
[codex:1556] 
[codex:1556] If no concrete profit path exists: set no_findings=true. Do NOT pad with low-severity noise.
[codex:1556] 
[codex:1556] Output MUST be valid JSON matching the provided schema.
[codex:1556] - severity: info, low, medium, high, critical (use high/critical ONLY for clear extraction paths)
[codex:1556] - category: access_control, reentrancy, math, oracle, upgradeability, auth, other
[codex:1556] mcp startup: no servers
[codex:1556] 
[codex:1556] thinking
[codex:1556] **Checking for instructions in AGENTS skill**
[codex:1556] exec
[codex:1556] /bin/bash -lc ls in /tmp/codex-multi-bplehh_7 succeeded in 6ms:
[codex:1556] AUDIT_BUNDLE.txt
[codex:1556] codex-output-schema.json
[codex:1556] contracts
[codex:1556] 
[codex:1556] thinking
[codex:1556] **Reading file contents**
[codex:1556] exec
[codex:1556] /bin/bash -lc 'cat AUDIT_BUNDLE.txt' in /tmp/codex-multi-bplehh_7 succeeded in 5ms:
[codex:1556] This file concatenates first-party Solidity sources only (lib/@openzeppelin excluded).
[codex:1556] 
[codex:1556] ================================================================================
[codex:1556] FILE: contracts/Contract.sol
[codex:1556] ================================================================================
[codex:1556] contract DynamicPyramid {
[codex:1556] 
[codex:1556]     //Declare variables for storage critical to contract
[codex:1556]     uint private balance = 0;
[codex:1556]     uint private collectedFees = 0;
[codex:1556]     uint private feePercent = 10;
[codex:1556]     uint private pyramidMultiplier = 300;
[codex:1556]     uint private payoutOrder = 0;
[codex:1556] 
[codex:1556]     address private creator;
[codex:1556]     
[codex:1556]     //Sets creator
[codex:1556]     function DynamicPyramid() {
[codex:1556]         creator = msg.sender;
[codex:1556]     }
[codex:1556] 
[codex:1556] thinking
[codex:1556] **Analyzing potential exploit paths**
[codex:1556] codex
[codex:1556] {"no_findings":true,"summary":"No concrete, exploitable profit paths found in the provided contract under the stated assumptions.","findings":[]}
[codex:1556] tokens used
[codex:1556] 8,079
[codex:1556] {"no_findings":true,"summary":"No concrete, exploitable profit paths found in the provided contract under the stated assumptions.","findings":[]}
Metadata
{
    "codex": {
        "ran_at": "2026-01-05T20:44:47.942647+00:00",
        "returncode": 0
    },
    "summary": "No concrete, exploitable profit paths found in the provided contract under the stated assumptions.",
    "raw_final": {
        "summary": "No concrete, exploitable profit paths found in the provided contract under the stated assumptions.",
        "findings": [],
        "no_findings": true
    },
    "no_findings": true,
    "schema_version": 1
}

Opcode Heuristics

tool.cast_disasm
Delegatecall
0
Selfdestruct
0
CREATE2
0
CALL-family (heavy)
5
EXT*/BALANCE
0
Total opcodes
1331
Flags
No heuristic flags raised.
View cast disassembly output
00000000: PUSH1 0x60
00000002: PUSH1 0x40
00000004: MSTORE
00000005: CALLDATASIZE
00000006: ISZERO
00000007: PUSH2 0x00ae
0000000a: JUMPI
0000000b: PUSH1 0xe0
0000000d: PUSH1 0x02
0000000f: EXP
00000010: PUSH1 0x00
00000012: CALLDATALOAD
00000013: DIV
00000014: PUSH4 0x09dfdc71
00000019: DUP2
0000001a: EQ
0000001b: PUSH2 0x00d2
0000001e: JUMPI
0000001f: DUP1
00000020: PUSH4 0x253459e3
00000025: EQ
00000026: PUSH2 0x0111
00000029: JUMPI
0000002a: DUP1
0000002b: PUSH4 0x4229616d
00000030: EQ
00000031: PUSH2 0x0132
00000034: JUMPI
00000035: DUP1
00000036: PUSH4 0x57d4021b
0000003b: EQ
0000003c: PUSH2 0x016d
0000003f: JUMPI
00000040: DUP1
00000041: PUSH4 0x686f2c90
00000046: EQ
00000047: PUSH2 0x01ac
0000004a: JUMPI
0000004b: DUP1
0000004c: PUSH4 0x6fbaaa1e
00000051: EQ
00000052: PUSH2 0x01d8
00000055: JUMPI
00000056: DUP1
00000057: PUSH4 0x8a5fb3ca
0000005c: EQ
0000005d: PUSH2 0x020c
00000060: JUMPI
00000061: DUP1
00000062: PUSH4 0x9dbc4f9b
00000067: EQ
00000068: PUSH2 0x023e
0000006b: JUMPI
0000006c: DUP1
0000006d: PUSH4 0xa26dbf26
00000072: EQ
00000073: PUSH2 0x02cb
00000076: JUMPI
00000077: DUP1
00000078: PUSH4 0xa6f9dae1
0000007d: EQ
0000007e: PUSH2 0x02d3
00000081: JUMPI
00000082: DUP1
00000083: PUSH4 0xb4022950
00000088: EQ
00000089: PUSH2 0x0306
0000008c: JUMPI
0000008d: DUP1
0000008e: PUSH4 0xced92670
00000093: EQ
00000094: PUSH2 0x0344
00000097: JUMPI
00000098: DUP1
00000099: PUSH4 0xd11f13df
0000009e: EQ
0000009f: PUSH2 0x037c
000000a2: JUMPI
000000a3: DUP1
000000a4: PUSH4 0xfae14192
000000a9: EQ
000000aa: PUSH2 0x0389
000000ad: JUMPI
000000ae: JUMPDEST
000000af: PUSH2 0x03b4
000000b2: PUSH2 0x03b6
000000b5: PUSH1 0x00
000000b7: PUSH8 0x0de0b6b3a7640000
000000c0: CALLVALUE
000000c1: LT
000000c2: ISZERO
000000c3: PUSH2 0x0453
000000c6: JUMPI
000000c7: PUSH1 0x01
000000c9: DUP1
000000ca: SLOAD
000000cb: CALLVALUE
000000cc: ADD
000000cd: SWAP1
000000ce: SSTORE
000000cf: JUMPDEST
000000d0: POP
000000d1: JUMP
000000d2: JUMPDEST
000000d3: PUSH1 0x40
000000d5: DUP1
000000d6: MLOAD
000000d7: PUSH1 0x20
000000d9: DUP2
000000da: DUP2
000000db: ADD
000000dc: DUP4
000000dd: MSTORE
000000de: PUSH1 0x00
000000e0: DUP1
000000e1: DUP4
000000e2: MSTORE
000000e3: DUP4
000000e4: MLOAD
000000e5: SWAP1
000000e6: SLOAD
000000e7: PUSH2 0x0100
000000ea: DUP3
000000eb: ADD
000000ec: SWAP1
000000ed: SWAP5
000000ee: MSTORE
000000ef: PUSH1 0xca
000000f1: DUP1
000000f2: DUP3
000000f3: MSTORE
000000f4: PUSH2 0x03b8
000000f7: SWAP5
000000f8: PUSH8 0x0de0b6b3a7640000
00000101: SWAP1
00000102: DIV
00000103: SWAP4
00000104: SWAP3
00000105: PUSH2 0x07b0
00000108: SWAP1
00000109: DUP4
0000010a: ADD
0000010b: CODECOPY
0000010c: SWAP1
0000010d: POP
0000010e: SWAP1
0000010f: SWAP2
00000110: JUMP
00000111: JUMPDEST
00000112: PUSH1 0x01
00000114: SLOAD
00000115: PUSH8 0x0de0b6b3a7640000
0000011e: SWAP1
0000011f: DIV
00000120: JUMPDEST
00000121: PUSH1 0x40
00000123: DUP1
00000124: MLOAD
00000125: SWAP2
00000126: DUP3
00000127: MSTORE
00000128: MLOAD
00000129: SWAP1
0000012a: DUP2
0000012b: SWAP1
0000012c: SUB
0000012d: PUSH1 0x20
0000012f: ADD
00000130: SWAP1
00000131: RETURN
00000132: JUMPDEST
00000133: PUSH2 0x03b4
00000136: PUSH1 0x04
00000138: CALLDATALOAD
00000139: PUSH1 0x05
0000013b: SLOAD
0000013c: PUSH1 0x00
0000013e: SWAP1
0000013f: PUSH1 0x01
00000141: PUSH1 0xa0
00000143: PUSH1 0x02
00000145: EXP
00000146: SUB
00000147: SWAP1
00000148: DUP2
00000149: AND
0000014a: CALLER
0000014b: SWAP1
0000014c: SWAP2
0000014d: AND
0000014e: EQ
0000014f: ISZERO
00000150: PUSH2 0x0573
00000153: JUMPI
00000154: PUSH1 0x01
00000156: SLOAD
00000157: DUP2
00000158: EQ
00000159: DUP1
0000015a: PUSH2 0x0163
0000015d: JUMPI
0000015e: POP
0000015f: PUSH1 0x64
00000161: DUP3
00000162: GT
00000163: JUMPDEST
00000164: ISZERO
00000165: PUSH2 0x0538
00000168: JUMPI
00000169: PUSH2 0x0002
0000016c: JUMP
0000016d: JUMPDEST
0000016e: PUSH2 0x0120
00000171: PUSH1 0x00
00000173: PUSH8 0x0de0b6b3a7640000
0000017c: PUSH1 0x06
0000017e: PUSH1 0x00
00000180: POP
00000181: PUSH1 0x04
00000183: PUSH1 0x00
00000185: POP
00000186: SLOAD
00000187: DUP2
00000188: SLOAD
00000189: DUP2
0000018a: LT
0000018b: ISZERO
0000018c: PUSH2 0x0002
0000018f: JUMPI
00000190: SWAP3
00000191: MSTORE
00000192: PUSH1 0x02
00000194: SWAP2
00000195: SWAP1
00000196: SWAP2
00000197: MUL
00000198: PUSH1 0x00
0000019a: DUP1
0000019b: MLOAD
0000019c: PUSH1 0x20
0000019e: PUSH2 0x0999
000001a1: DUP4
000001a2: CODECOPY
000001a3: DUP2
000001a4: MLOAD
000001a5: SWAP2
000001a6: MSTORE
000001a7: ADD
000001a8: SLOAD
000001a9: DIV
000001aa: SWAP1
000001ab: JUMP
000001ac: JUMPDEST
000001ad: PUSH2 0x03b4
000001b0: JUMPDEST
000001b1: PUSH1 0x05
000001b3: SLOAD
000001b4: PUSH1 0x01
000001b6: PUSH1 0xa0
000001b8: PUSH1 0x02
000001ba: EXP
000001bb: SUB
000001bc: SWAP1
000001bd: DUP2
000001be: AND
000001bf: CALLER
000001c0: SWAP1
000001c1: SWAP2
000001c2: AND
000001c3: EQ
000001c4: ISZERO
000001c5: PUSH2 0x03b6
000001c8: JUMPI
000001c9: PUSH1 0x01
000001cb: SLOAD
000001cc: PUSH1 0x00
000001ce: EQ
000001cf: ISZERO
000001d0: PUSH2 0x04cd
000001d3: JUMPI
000001d4: PUSH2 0x0002
000001d7: JUMP
000001d8: JUMPDEST
000001d9: PUSH2 0x03b8
000001dc: PUSH1 0x40
000001de: DUP1
000001df: MLOAD
000001e0: PUSH1 0x20
000001e2: DUP2
000001e3: DUP2
000001e4: ADD
000001e5: DUP4
000001e6: MSTORE
000001e7: PUSH1 0x00
000001e9: DUP3
000001ea: MSTORE
000001eb: DUP3
000001ec: MLOAD
000001ed: PUSH1 0x03
000001ef: SLOAD
000001f0: PUSH2 0x0140
000001f3: DUP3
000001f4: ADD
000001f5: SWAP1
000001f6: SWAP5
000001f7: MSTORE
000001f8: PUSH2 0x011f
000001fb: DUP1
000001fc: DUP3
000001fd: MSTORE
000001fe: SWAP1
000001ff: SWAP2
00000200: PUSH2 0x087a
00000203: SWAP1
00000204: DUP4
00000205: ADD
00000206: CODECOPY
00000207: SWAP1
00000208: POP
00000209: SWAP1
0000020a: SWAP2
0000020b: JUMP
0000020c: JUMPDEST
0000020d: PUSH2 0x03b8
00000210: PUSH1 0x40
00000212: DUP1
00000213: MLOAD
00000214: PUSH1 0x20
00000216: DUP2
00000217: DUP2
00000218: ADD
00000219: DUP4
0000021a: MSTORE
0000021b: PUSH1 0x00
0000021d: DUP3
0000021e: MSTORE
0000021f: DUP3
00000220: MLOAD
00000221: PUSH1 0x02
00000223: SLOAD
00000224: PUSH1 0xc0
00000226: DUP3
00000227: ADD
00000228: SWAP1
00000229: SWAP5
0000022a: MSTORE
0000022b: PUSH1 0x84
0000022d: DUP1
0000022e: DUP3
0000022f: MSTORE
00000230: SWAP1
00000231: SWAP2
00000232: PUSH2 0x072c
00000235: SWAP1
00000236: DUP4
00000237: ADD
00000238: CODECOPY
00000239: SWAP1
0000023a: POP
0000023b: SWAP1
0000023c: SWAP2
0000023d: JUMP
0000023e: JUMPDEST
0000023f: PUSH2 0x042d
00000242: PUSH1 0x04
00000244: CALLDATALOAD
00000245: PUSH1 0x06
00000247: SLOAD
00000248: PUSH1 0x00
0000024a: SWAP1
0000024b: DUP2
0000024c: SWAP1
0000024d: DUP4
0000024e: GT
0000024f: PUSH2 0x02c6
00000252: JUMPI
00000253: PUSH1 0x06
00000255: DUP1
00000256: SLOAD
00000257: DUP5
00000258: SWAP1
00000259: DUP2
0000025a: LT
0000025b: ISZERO
0000025c: PUSH2 0x0002
0000025f: JUMPI
00000260: POP
00000261: DUP1
00000262: SLOAD
00000263: DUP2
00000264: DUP4
00000265: MSTORE
00000266: PUSH1 0x02
00000268: DUP6
00000269: MUL
0000026a: PUSH32 0xf652222313e28459528d920b65115c16c04f3efc82aaedc97be59f3f377c0d3f
0000028b: ADD
0000028c: SLOAD
0000028d: PUSH1 0x01
0000028f: PUSH1 0xa0
00000291: PUSH1 0x02
00000293: EXP
00000294: SUB
00000295: AND
00000296: SWAP4
00000297: POP
00000298: PUSH8 0x0de0b6b3a7640000
000002a1: SWAP2
000002a2: SWAP1
000002a3: DUP6
000002a4: SWAP1
000002a5: DUP2
000002a6: LT
000002a7: ISZERO
000002a8: PUSH2 0x0002
000002ab: JUMPI
000002ac: POP
000002ad: POP
000002ae: PUSH1 0x02
000002b0: DUP5
000002b1: MUL
000002b2: PUSH1 0x00
000002b4: DUP1
000002b5: MLOAD
000002b6: PUSH1 0x20
000002b8: PUSH2 0x0999
000002bb: DUP4
000002bc: CODECOPY
000002bd: DUP2
000002be: MLOAD
000002bf: SWAP2
000002c0: MSTORE
000002c1: ADD
000002c2: SLOAD
000002c3: DIV
000002c4: SWAP1
000002c5: POP
000002c6: JUMPDEST
000002c7: SWAP2
000002c8: POP
000002c9: SWAP2
000002ca: JUMP
000002cb: JUMPDEST
000002cc: PUSH1 0x06
000002ce: SLOAD
000002cf: PUSH2 0x0120
000002d2: JUMP
000002d3: JUMPDEST
000002d4: PUSH2 0x03b4
000002d7: PUSH1 0x04
000002d9: CALLDATALOAD
000002da: PUSH1 0x05
000002dc: SLOAD
000002dd: PUSH1 0x01
000002df: PUSH1 0xa0
000002e1: PUSH1 0x02
000002e3: EXP
000002e4: SUB
000002e5: SWAP1
000002e6: DUP2
000002e7: AND
000002e8: CALLER
000002e9: SWAP1
000002ea: SWAP2
000002eb: AND
000002ec: EQ
000002ed: ISZERO
000002ee: PUSH2 0x00cf
000002f1: JUMPI
000002f2: PUSH1 0x05
000002f4: DUP1
000002f5: SLOAD
000002f6: PUSH1 0x01
000002f8: PUSH1 0xa0
000002fa: PUSH1 0x02
000002fc: EXP
000002fd: SUB
000002fe: NOT
000002ff: AND
00000300: DUP3
00000301: OR
00000302: SWAP1
00000303: SSTORE
00000304: POP
00000305: JUMP
00000306: JUMPDEST
00000307: PUSH2 0x03b4
0000030a: PUSH1 0x04
0000030c: CALLDATALOAD
0000030d: PUSH1 0x05
0000030f: SLOAD
00000310: PUSH1 0x01
00000312: PUSH1 0xa0
00000314: PUSH1 0x02
00000316: EXP
00000317: SUB
00000318: SWAP1
00000319: DUP2
0000031a: AND
0000031b: CALLER
0000031c: SWAP1
0000031d: SWAP2
0000031e: AND
0000031f: EQ
00000320: ISZERO
00000321: PUSH2 0x00cf
00000324: JUMPI
00000325: PUSH1 0x01
00000327: SLOAD
00000328: PUSH8 0x0de0b6b3a7640000
00000331: SWAP2
00000332: SWAP1
00000333: SWAP2
00000334: MUL
00000335: SWAP1
00000336: DUP2
00000337: GT
00000338: ISZERO
00000339: PUSH2 0x04f7
0000033c: JUMPI
0000033d: PUSH2 0x04f7
00000340: PUSH2 0x01b0
00000343: JUMP
00000344: JUMPDEST
00000345: PUSH2 0x03b4
00000348: PUSH1 0x04
0000034a: CALLDATALOAD
0000034b: PUSH1 0x05
0000034d: SLOAD
0000034e: PUSH1 0x01
00000350: PUSH1 0xa0
00000352: PUSH1 0x02
00000354: EXP
00000355: SUB
00000356: SWAP1
00000357: DUP2
00000358: AND
00000359: CALLER
0000035a: SWAP1
0000035b: SWAP2
0000035c: AND
0000035d: EQ
0000035e: ISZERO
0000035f: PUSH2 0x00cf
00000362: JUMPI
00000363: PUSH2 0x012c
00000366: DUP2
00000367: GT
00000368: DUP1
00000369: PUSH2 0x0372
0000036c: JUMPI
0000036d: POP
0000036e: PUSH1 0x78
00000370: DUP2
00000371: LT
00000372: JUMPDEST
00000373: ISZERO
00000374: PUSH2 0x0577
00000377: JUMPI
00000378: PUSH2 0x0002
0000037b: JUMP
0000037c: JUMPDEST
0000037d: PUSH1 0x06
0000037f: SLOAD
00000380: PUSH1 0x04
00000382: SLOAD
00000383: SWAP1
00000384: SUB
00000385: PUSH2 0x0120
00000388: JUMP
00000389: JUMPDEST
0000038a: PUSH2 0x03b4
0000038d: PUSH1 0x04
0000038f: CALLDATALOAD
00000390: PUSH1 0x05
00000392: SLOAD
00000393: CALLER
00000394: PUSH1 0x01
00000396: PUSH1 0xa0
00000398: PUSH1 0x02
0000039a: EXP
0000039b: SUB
0000039c: SWAP1
0000039d: DUP2
0000039e: AND
0000039f: SWAP2
000003a0: AND
000003a1: EQ
000003a2: ISZERO
000003a3: PUSH2 0x00cf
000003a6: JUMPI
000003a7: PUSH1 0x0a
000003a9: DUP2
000003aa: GT
000003ab: ISZERO
000003ac: PUSH2 0x057c
000003af: JUMPI
000003b0: PUSH2 0x0002
000003b3: JUMP
000003b4: JUMPDEST
000003b5: STOP
000003b6: JUMPDEST
000003b7: JUMP
000003b8: JUMPDEST
000003b9: PUSH1 0x40
000003bb: MLOAD
000003bc: DUP1
000003bd: DUP4
000003be: DUP2
000003bf: MSTORE
000003c0: PUSH1 0x20
000003c2: ADD
000003c3: DUP1
000003c4: PUSH1 0x20
000003c6: ADD
000003c7: DUP3
000003c8: DUP2
000003c9: SUB
000003ca: DUP3
000003cb: MSTORE
000003cc: DUP4
000003cd: DUP2
000003ce: DUP2
000003cf: MLOAD
000003d0: DUP2
000003d1: MSTORE
000003d2: PUSH1 0x20
000003d4: ADD
000003d5: SWAP2
000003d6: POP
000003d7: DUP1
000003d8: MLOAD
000003d9: SWAP1
000003da: PUSH1 0x20
000003dc: ADD
000003dd: SWAP1
000003de: DUP1
000003df: DUP4
000003e0: DUP4
000003e1: DUP3
000003e2: SWAP1
000003e3: PUSH1 0x00
000003e5: PUSH1 0x04
000003e7: PUSH1 0x20
000003e9: DUP5
000003ea: PUSH1 0x1f
000003ec: ADD
000003ed: DIV
000003ee: PUSH1 0x0f
000003f0: MUL
000003f1: PUSH1 0x03
000003f3: ADD
000003f4: CALL
000003f5: POP
000003f6: SWAP1
000003f7: POP
000003f8: SWAP1
000003f9: DUP2
000003fa: ADD
000003fb: SWAP1
000003fc: PUSH1 0x1f
000003fe: AND
000003ff: DUP1
00000400: ISZERO
00000401: PUSH2 0x041e
00000404: JUMPI
00000405: DUP1
00000406: DUP3
00000407: SUB
00000408: DUP1
00000409: MLOAD
0000040a: PUSH1 0x01
0000040c: DUP4
0000040d: PUSH1 0x20
0000040f: SUB
00000410: PUSH2 0x0100
00000413: EXP
00000414: SUB
00000415: NOT
00000416: AND
00000417: DUP2
00000418: MSTORE
00000419: PUSH1 0x20
0000041b: ADD
0000041c: SWAP2
0000041d: POP
0000041e: JUMPDEST
0000041f: POP
00000420: SWAP4
00000421: POP
00000422: POP
00000423: POP
00000424: POP
00000425: PUSH1 0x40
00000427: MLOAD
00000428: DUP1
00000429: SWAP2
0000042a: SUB
0000042b: SWAP1
0000042c: RETURN
0000042d: JUMPDEST
0000042e: PUSH1 0x40
00000430: MLOAD
00000431: DUP1
00000432: DUP4
00000433: PUSH1 0x01
00000435: PUSH1 0xa0
00000437: PUSH1 0x02
00000439: EXP
0000043a: SUB
0000043b: AND
0000043c: DUP2
0000043d: MSTORE
0000043e: PUSH1 0x20
00000440: ADD
00000441: DUP3
00000442: DUP2
00000443: MSTORE
00000444: PUSH1 0x20
00000446: ADD
00000447: SWAP3
00000448: POP
00000449: POP
0000044a: POP
0000044b: PUSH1 0x40
0000044d: MLOAD
0000044e: DUP1
0000044f: SWAP2
00000450: SUB
00000451: SWAP1
00000452: RETURN
00000453: JUMPDEST
00000454: POP
00000455: PUSH1 0x02
00000457: SLOAD
00000458: PUSH9 0x02b5e3af16b1880000
00000462: CALLVALUE
00000463: LT
00000464: PUSH2 0x046c
00000467: JUMPI
00000468: PUSH1 0x02
0000046a: SWAP1
0000046b: DIV
0000046c: JUMPDEST
0000046d: PUSH2 0x00cf
00000470: DUP2
00000471: PUSH1 0x00
00000473: PUSH1 0x06
00000475: PUSH1 0x00
00000477: POP
00000478: DUP1
00000479: SLOAD
0000047a: DUP1
0000047b: PUSH1 0x01
0000047d: ADD
0000047e: DUP3
0000047f: DUP2
00000480: DUP2
00000481: SLOAD
00000482: DUP2
00000483: DUP4
00000484: SSTORE
00000485: DUP2
00000486: DUP2
00000487: ISZERO
00000488: GT
00000489: PUSH2 0x0581
0000048c: JUMPI
0000048d: PUSH1 0x02
0000048f: MUL
00000490: DUP2
00000491: PUSH1 0x02
00000493: MUL
00000494: DUP4
00000495: PUSH1 0x00
00000497: MSTORE
00000498: PUSH1 0x20
0000049a: PUSH1 0x00
0000049c: KECCAK256
0000049d: SWAP2
0000049e: DUP3
0000049f: ADD
000004a0: SWAP2
000004a1: ADD
000004a2: PUSH2 0x0581
000004a5: SWAP2
000004a6: SWAP1
000004a7: JUMPDEST
000004a8: DUP1
000004a9: DUP3
000004aa: GT
000004ab: ISZERO
000004ac: PUSH2 0x05e5
000004af: JUMPI
000004b0: DUP1
000004b1: SLOAD
000004b2: PUSH1 0x01
000004b4: PUSH1 0xa0
000004b6: PUSH1 0x02
000004b8: EXP
000004b9: SUB
000004ba: NOT
000004bb: AND
000004bc: DUP2
000004bd: SSTORE
000004be: PUSH1 0x00
000004c0: PUSH1 0x01
000004c2: SWAP2
000004c3: SWAP1
000004c4: SWAP2
000004c5: ADD
000004c6: SWAP1
000004c7: DUP2
000004c8: SSTORE
000004c9: PUSH2 0x04a7
000004cc: JUMP
000004cd: JUMPDEST
000004ce: PUSH1 0x01
000004d0: SLOAD
000004d1: PUSH1 0x05
000004d3: SLOAD
000004d4: PUSH1 0x40
000004d6: MLOAD
000004d7: PUSH1 0x01
000004d9: PUSH1 0xa0
000004db: PUSH1 0x02
000004dd: EXP
000004de: SUB
000004df: SWAP2
000004e0: SWAP1
000004e1: SWAP2
000004e2: AND
000004e3: SWAP2
000004e4: PUSH1 0x00
000004e6: SWAP2
000004e7: DUP3
000004e8: DUP2
000004e9: DUP2
000004ea: DUP2
000004eb: DUP6
000004ec: DUP9
000004ed: DUP4
000004ee: CALL
000004ef: POP
000004f0: POP
000004f1: POP
000004f2: PUSH1 0x01
000004f4: SSTORE
000004f5: POP
000004f6: JUMP
000004f7: JUMPDEST
000004f8: PUSH1 0x01
000004fa: SLOAD
000004fb: PUSH1 0x00
000004fd: EQ
000004fe: ISZERO
000004ff: PUSH2 0x0507
00000502: JUMPI
00000503: PUSH2 0x0002
00000506: JUMP
00000507: JUMPDEST
00000508: PUSH1 0x05
0000050a: SLOAD
0000050b: PUSH1 0x40
0000050d: MLOAD
0000050e: PUSH1 0x01
00000510: PUSH1 0xa0
00000512: PUSH1 0x02
00000514: EXP
00000515: SUB
00000516: SWAP2
00000517: SWAP1
00000518: SWAP2
00000519: AND
0000051a: SWAP1
0000051b: PUSH1 0x00
0000051d: SWAP1
0000051e: DUP4
0000051f: SWAP1
00000520: DUP3
00000521: DUP2
00000522: DUP2
00000523: DUP2
00000524: DUP6
00000525: DUP9
00000526: DUP4
00000527: CALL
00000528: POP
00000529: POP
0000052a: PUSH1 0x01
0000052c: DUP1
0000052d: SLOAD
0000052e: SWAP2
0000052f: SWAP1
00000530: SWAP2
00000531: SUB
00000532: SWAP1
00000533: SSTORE
00000534: POP
00000535: POP
00000536: POP
00000537: JUMP
00000538: JUMPDEST
00000539: POP
0000053a: PUSH1 0x01
0000053c: SLOAD
0000053d: PUSH1 0x05
0000053f: SLOAD
00000540: PUSH1 0x40
00000542: MLOAD
00000543: PUSH1 0x64
00000545: SWAP1
00000546: SWAP3
00000547: DIV
00000548: DUP4
00000549: MUL
0000054a: SWAP2
0000054b: PUSH1 0x01
0000054d: PUSH1 0xa0
0000054f: PUSH1 0x02
00000551: EXP
00000552: SUB
00000553: SWAP2
00000554: SWAP1
00000555: SWAP2
00000556: AND
00000557: SWAP1
00000558: PUSH1 0x00
0000055a: SWAP1
0000055b: DUP4
0000055c: SWAP1
0000055d: DUP3
0000055e: DUP2
0000055f: DUP2
00000560: DUP2
00000561: DUP6
00000562: DUP9
00000563: DUP4
00000564: CALL
00000565: POP
00000566: POP
00000567: PUSH1 0x01
00000569: DUP1
0000056a: SLOAD
0000056b: SWAP2
0000056c: SWAP1
0000056d: SWAP2
0000056e: SUB
0000056f: SWAP1
00000570: SSTORE
00000571: POP
00000572: POP
00000573: JUMPDEST
00000574: POP
00000575: POP
00000576: JUMP
00000577: JUMPDEST
00000578: PUSH1 0x03
0000057a: SSTORE
0000057b: JUMP
0000057c: JUMPDEST
0000057d: PUSH1 0x02
0000057f: SSTORE
00000580: JUMP
00000581: JUMPDEST
00000582: POP
00000583: POP
00000584: POP
00000585: SWAP2
00000586: SWAP1
00000587: SWAP1
00000588: PUSH1 0x00
0000058a: MSTORE
0000058b: PUSH1 0x20
0000058d: PUSH1 0x00
0000058f: KECCAK256
00000590: SWAP1
00000591: PUSH1 0x02
00000593: MUL
00000594: ADD
00000595: PUSH1 0x00
00000597: POP
00000598: PUSH1 0x40
0000059a: DUP1
0000059b: MLOAD
0000059c: DUP1
0000059d: DUP3
0000059e: ADD
0000059f: SWAP1
000005a0: SWAP2
000005a1: MSTORE
000005a2: CALLER
000005a3: DUP1
000005a4: DUP3
000005a5: MSTORE
000005a6: PUSH1 0x03
000005a8: SLOAD
000005a9: PUSH1 0x64
000005ab: CALLVALUE
000005ac: SWAP2
000005ad: SWAP1
000005ae: SWAP2
000005af: MUL
000005b0: DIV
000005b1: PUSH1 0x20
000005b3: SWAP3
000005b4: SWAP1
000005b5: SWAP3
000005b6: ADD
000005b7: DUP3
000005b8: SWAP1
000005b9: MSTORE
000005ba: DUP3
000005bb: SLOAD
000005bc: PUSH1 0x01
000005be: PUSH1 0xa0
000005c0: PUSH1 0x02
000005c2: EXP
000005c3: SUB
000005c4: NOT
000005c5: AND
000005c6: OR
000005c7: DUP3
000005c8: SSTORE
000005c9: PUSH1 0x01
000005cb: SWAP2
000005cc: SWAP1
000005cd: SWAP2
000005ce: ADD
000005cf: SSTORE
000005d0: POP
000005d1: PUSH1 0x06
000005d3: SLOAD
000005d4: PUSH1 0x0a
000005d6: EQ
000005d7: ISZERO
000005d8: PUSH2 0x05e9
000005db: JUMPI
000005dc: PUSH1 0xc8
000005de: PUSH1 0x03
000005e0: SSTORE
000005e1: PUSH2 0x05fa
000005e4: JUMP
000005e5: JUMPDEST
000005e6: POP
000005e7: SWAP1
000005e8: JUMP
000005e9: JUMPDEST
000005ea: PUSH1 0x06
000005ec: SLOAD
000005ed: PUSH1 0x19
000005ef: EQ
000005f0: ISZERO
000005f1: PUSH2 0x05fa
000005f4: JUMPI
000005f5: PUSH1 0x96
000005f7: PUSH1 0x03
000005f9: SSTORE
000005fa: JUMPDEST
000005fb: PUSH1 0x00
000005fd: DUP1
000005fe: SLOAD
000005ff: PUSH1 0x64
00000601: DUP5
00000602: DUP2
00000603: SUB
00000604: CALLVALUE
00000605: SWAP1
00000606: DUP2
00000607: MUL
00000608: DUP3
00000609: SWAP1
0000060a: DIV
0000060b: SWAP1
0000060c: SWAP3
0000060d: ADD
0000060e: SWAP1
0000060f: SWAP3
00000610: SSTORE
00000611: PUSH1 0x01
00000613: DUP1
00000614: SLOAD
00000615: SWAP2
00000616: DUP6
00000617: MUL
00000618: SWAP3
00000619: SWAP1
0000061a: SWAP3
0000061b: DIV
0000061c: ADD
0000061d: SWAP1
0000061e: SSTORE
0000061f: JUMPDEST
00000620: PUSH1 0x04
00000622: SLOAD
00000623: PUSH1 0x06
00000625: DUP1
00000626: SLOAD
00000627: SWAP1
00000628: SWAP2
00000629: SWAP1
0000062a: DUP2
0000062b: LT
0000062c: ISZERO
0000062d: PUSH2 0x0002
00000630: JUMPI
00000631: PUSH1 0x00
00000633: SWAP2
00000634: DUP3
00000635: MSTORE
00000636: PUSH1 0x02
00000638: MUL
00000639: PUSH32 0xf652222313e28459528d920b65115c16c04f3efc82aaedc97be59f3f377c0d3f
0000065a: ADD
0000065b: SWAP1
0000065c: POP
0000065d: PUSH1 0x01
0000065f: ADD
00000660: SLOAD
00000661: PUSH1 0x00
00000663: SLOAD
00000664: GT
00000665: ISZERO
00000666: PUSH2 0x0573
00000669: JUMPI
0000066a: PUSH1 0x04
0000066c: SLOAD
0000066d: PUSH1 0x06
0000066f: DUP1
00000670: SLOAD
00000671: SWAP1
00000672: SWAP2
00000673: SWAP1
00000674: DUP2
00000675: LT
00000676: ISZERO
00000677: PUSH2 0x0002
0000067a: JUMPI
0000067b: PUSH1 0x02
0000067d: MUL
0000067e: PUSH1 0x00
00000680: DUP1
00000681: MLOAD
00000682: PUSH1 0x20
00000684: PUSH2 0x0999
00000687: DUP4
00000688: CODECOPY
00000689: DUP2
0000068a: MLOAD
0000068b: SWAP2
0000068c: MSTORE
0000068d: ADD
0000068e: SLOAD
0000068f: PUSH1 0x04
00000691: SLOAD
00000692: DUP3
00000693: SLOAD
00000694: SWAP2
00000695: SWAP4
00000696: POP
00000697: SWAP1
00000698: DUP2
00000699: LT
0000069a: ISZERO
0000069b: PUSH2 0x0002
0000069e: JUMPI
0000069f: PUSH1 0x02
000006a1: MUL
000006a2: PUSH32 0xf652222313e28459528d920b65115c16c04f3efc82aaedc97be59f3f377c0d3f
000006c3: ADD
000006c4: SLOAD
000006c5: PUSH1 0x40
000006c7: MLOAD
000006c8: PUSH1 0x01
000006ca: PUSH1 0xa0
000006cc: PUSH1 0x02
000006ce: EXP
000006cf: SUB
000006d0: SWAP2
000006d1: SWAP1
000006d2: SWAP2
000006d3: AND
000006d4: SWAP2
000006d5: POP
000006d6: PUSH1 0x00
000006d8: SWAP1
000006d9: DUP4
000006da: SWAP1
000006db: DUP3
000006dc: DUP2
000006dd: DUP2
000006de: DUP2
000006df: DUP6
000006e0: DUP9
000006e1: DUP4
000006e2: CALL
000006e3: SWAP4
000006e4: POP
000006e5: POP
000006e6: POP
000006e7: POP
000006e8: POP
000006e9: PUSH1 0x06
000006eb: PUSH1 0x00
000006ed: POP
000006ee: PUSH1 0x04
000006f0: PUSH1 0x00
000006f2: POP
000006f3: SLOAD
000006f4: DUP2
000006f5: SLOAD
000006f6: DUP2
000006f7: LT
000006f8: ISZERO
000006f9: PUSH2 0x0002
000006fc: JUMPI
000006fd: PUSH1 0x00
000006ff: SWAP2
00000700: DUP3
00000701: MSTORE
00000702: DUP2
00000703: SLOAD
00000704: PUSH1 0x02
00000706: SWAP2
00000707: SWAP1
00000708: SWAP2
00000709: MUL
0000070a: PUSH1 0x00
0000070c: DUP1
0000070d: MLOAD
0000070e: PUSH1 0x20
00000710: PUSH2 0x0999
00000713: DUP4
00000714: CODECOPY
00000715: DUP2
00000716: MLOAD
00000717: SWAP2
00000718: MSTORE
00000719: ADD
0000071a: SLOAD
0000071b: SWAP1
0000071c: SUB
0000071d: SWAP1
0000071e: SSTORE
0000071f: PUSH1 0x04
00000721: DUP1
00000722: SLOAD
00000723: PUSH1 0x01
00000725: ADD
00000726: SWAP1
00000727: SSTORE
00000728: PUSH2 0x061f
0000072b: JUMP
0000072c: MSTORE8
0000072d: PUSH9 0x6f776e20696e202520
00000737: PUSH7 0x6f726d2e204665
0000073f: PUSH6 0x206973206861
00000746: PUSH13 0x766564283530252920666f7220
00000754: PUSH2 0x6d6f
00000757: PUSH22 0x6e747320657175616c206f7220677265617465722074
0000076e: PUSH9 0x616e20353020657468
00000778: PUSH6 0x72732e202846
0000077f: PUSH6 0x65206d617920
00000786: PUSH4 0x68616e67
0000078b: PUSH6 0x2c2062757420
00000792: PUSH10 0x73206361707065642074
0000079d: PUSH16 0x2061206d6178696d756d206f66203130
000007ae: UNKNOWN(0x25)
000007af: UNKNOWN(0x29)
000007b0: COINBASE
000007b1: PUSH13 0x6c2062616c616e63652076616c
000007bf: PUSH22 0x657320617265206d6561737572656420696e20457468
000007d6: PUSH6 0x72732c206e6f
000007dd: PUSH21 0x6520746861742064756520746f206e6f2064656369
000007f3: PUSH14 0x616c20706c6163696e672c207468
00000802: PUSH6 0x73652076616c
00000809: PUSH22 0x65732073686f7720757020617320696e746567657273
00000820: KECCAK256
00000821: PUSH16 0x6e6c792c2077697468696e2074686520
00000832: PUSH4 0x6f6e7472
00000837: PUSH2 0x6374
0000083a: KECCAK256
0000083b: PUSH10 0x7473656c6620796f7520
00000846: PUSH24 0x696c6c206765742074686520657861637420646563696d61
0000085f: PUSH13 0x2076616c756520796f75206172
0000086d: PUSH6 0x20737570706f
00000874: PUSH20 0x656420746f54686973206d756c7469706c696572
00000889: KECCAK256
0000088a: PUSH2 0x7070
0000088d: PUSH13 0x69657320746f20796f75206173
0000089b: KECCAK256
0000089c: PUSH20 0x6f6f6e206173207472616e73616374696f6e2069
000008b1: PUSH20 0x2072656365697665642c206d6179206265206c6f
000008c6: PUSH24 0x6572656420746f2068617374656e207061796f757473206f
000008df: PUSH19 0x20696e63726561736564206966207061796f75
000008f3: PUSH21 0x7320617265206661737420656e6f7567682e204475
00000909: PUSH6 0x20746f206e6f
00000910: KECCAK256
00000911: PUSH7 0x6c6f6174206f72
00000919: KECCAK256
0000091a: PUSH5 0x6563696d61
00000920: PUSH13 0x732c206d756c7469706c696572
0000092e: KECCAK256
0000092f: PUSH10 0x73207831303020666f72
0000093a: KECCAK256
0000093b: PUSH2 0x2066
0000093e: PUSH19 0x616374696f6e616c206d756c7469706c696572
00000952: KECCAK256
00000953: PUSH6 0x2e672e203235
0000095a: ADDRESS
0000095b: KECCAK256
0000095c: PUSH10 0x732061637475616c6c79
00000967: KECCAK256
00000968: PUSH2 0x2032
0000096b: UNKNOWN(0x2E)
0000096c: CALLDATALOAD
0000096d: PUSH25 0x206d756c7469706c6965722e20436170706564206174203378
00000987: KECCAK256
00000988: PUSH14 0x617820616e6420312e3278206d69
00000997: PUSH15 0x2ef652222313e28459528d920b6511
000009a7: TLOAD
000009a8: AND
000009a9: UNKNOWN(0xC0)
000009aa: UNKNOWN(0x4F)
000009ab: RETURNDATACOPY
000009ac: UNKNOWN(0xFC)
000009ad: DUP3
000009ae: UNKNOWN(0xAA)
000009af: UNKNOWN(0xED)
000009b0: UNKNOWN(0xC9)
000009b1: PUSH28

Findings

validated = confirmed for call sinks; sink observed for others
Severity Category Tool Title Confidence Validated Confirmed Details
high other detector Untrusted CALL target/value reachable 60 yes yes
view
trace_id: 0x73dc6b78fce421aa7cb264e9b5c1e5d7763359571039a094ac7d40473555ac73
call_targets: 0x0000000000000000000000000000000000000004, 0xa9e4e3b1da2462752aea980698c335e70e9ab26c
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0x73dc6b78fce421aa7cb264e9b5c1e5d7763359571039a094ac7d40473555ac73",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0xa9e4e3b1da2462752aea980698c335e70e9ab26c"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x09dfdc71",
            "selector": "0x09dfdc71",
            "calldata_variants": [
                "0x09dfdc71",
                "0x09dfdc710000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x253459e3",
            "selector": "0x253459e3",
            "calldata_variants": [
                "0x253459e3",
                "0x253459e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4229616d",
            "selector": "0x4229616d",
            "calldata_variants": [
                "0x4229616d",
                "0x4229616d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x57d4021b",
            "selector": "0x57d4021b",
            "calldata_variants": [
                "0x57d4021b",
                "0x57d4021b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x686f2c90",
            "selector": "0x686f2c90",
            "calldata_variants": [
                "0x686f2c90",
                "0x686f2c900000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6fbaaa1e",
            "selector": "0x6fbaaa1e",
            "calldata_variants": [
                "0x6fbaaa1e",
                "0x6fbaaa1e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8a5fb3ca",
            "selector": "0x8a5fb3ca",
            "calldata_variants": [
                "0x8a5fb3ca",
                "0x8a5fb3ca0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9dbc4f9b",
            "selector": "0x9dbc4f9b",
            "calldata_variants": [
                "0x9dbc4f9b",
                "0x9dbc4f9b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1012,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1262,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1319,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "call_count": 5,
    "guards_detected": [],
    "untrusted_call_count": 5
}
high other detector ETH value transfer possible 55 yes yes
view
trace_id: 0x73dc6b78fce421aa7cb264e9b5c1e5d7763359571039a094ac7d40473555ac73
call_targets: 0x0000000000000000000000000000000000000004, 0xa9e4e3b1da2462752aea980698c335e70e9ab26c
target_varies: yes
classification: target_varies
validation_json
{
    "sink": "CALL",
    "errors": 0,
    "status": "confirmed",
    "attempts": 1,
    "trace_id": "0x73dc6b78fce421aa7cb264e9b5c1e5d7763359571039a094ac7d40473555ac73",
    "confirmed": true,
    "trace_mode": "callTracer",
    "call_targets": [
        "0x0000000000000000000000000000000000000004",
        "0xa9e4e3b1da2462752aea980698c335e70e9ab26c"
    ],
    "matched_probe": null,
    "target_varies": true,
    "classification": "target_varies"
}
witness_json
{
    "notes": "heuristic witness; entrypoints are best-effort selectors with zeroed calldata",
    "constraints": [],
    "entrypoints": [
        {
            "calldata": "0x09dfdc71",
            "selector": "0x09dfdc71",
            "calldata_variants": [
                "0x09dfdc71",
                "0x09dfdc710000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x253459e3",
            "selector": "0x253459e3",
            "calldata_variants": [
                "0x253459e3",
                "0x253459e30000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x4229616d",
            "selector": "0x4229616d",
            "calldata_variants": [
                "0x4229616d",
                "0x4229616d0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x57d4021b",
            "selector": "0x57d4021b",
            "calldata_variants": [
                "0x57d4021b",
                "0x57d4021b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x686f2c90",
            "selector": "0x686f2c90",
            "calldata_variants": [
                "0x686f2c90",
                "0x686f2c900000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x6fbaaa1e",
            "selector": "0x6fbaaa1e",
            "calldata_variants": [
                "0x6fbaaa1e",
                "0x6fbaaa1e0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x8a5fb3ca",
            "selector": "0x8a5fb3ca",
            "calldata_variants": [
                "0x8a5fb3ca",
                "0x8a5fb3ca0000000000000000000000000000000000000000000000000000000000000000"
            ]
        },
        {
            "calldata": "0x9dbc4f9b",
            "selector": "0x9dbc4f9b",
            "calldata_variants": [
                "0x9dbc4f9b",
                "0x9dbc4f9b0000000000000000000000000000000000000000000000000000000000000000"
            ]
        }
    ]
}
evidence_json
{
    "examples": [
        {
            "pc": 1012,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1262,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        },
        {
            "pc": 1319,
            "opcode": "CALL",
            "returndata_checked": null,
            "value_expression_category": "computed",
            "target_expression_category": "computed"
        }
    ],
    "eth_value_calls": 5,
    "guards_detected": []
}