TW
Tripwire
Find contracts. Test them. Review real vulns.
Contract
0x3980c9ed79d2c191a89e02fa3529c60ed6e9c04b checked chain 1 proxy
Latest run: 0fb93155-944c-4ca8-9339-4f05dc1ba13c complete
Dedaub
Queue = batch runner. Audit = immediate run. Audit + LLM forces codex.
Value & Balances
$22,928,345.70
last balance 3 months ago
ETH
3,948.5788
WETH
0.0000
USDC
4,724,148.62
USDT
5,963,602.76
Findings Signal
0
confirmed findings
crit 0 high 0 unconfirmed 5 total 5
validated = confirmed for call sinks; sink observed for others

Proxy & Workflow

linkage
Proxy status
proxy
Implementation address
0xa0cfe8af2ab5c9232714647702dbacf862ea4798 (tracked)
Proxies pointing here
0
Workflow
checked
attempts 3
checked 1 week ago

Latest Findings

validated = confirmed for call sinks; sink observed for others
No confirmed findings yet.
Show unconfirmed findings
Severity Tool Title Validated Confirmed
critical codex Unprotected initialize lets an attacker set a fake messenger and drain the bridge no —
high detector Untrusted CALL target/value reachable no no
high detector ETH value transfer possible no no
info cast Heavy EXTCODE*/BALANCE usage no —
info cast Heavy CALL-family usage no —
From run 0fb93155-944c-4ca8-9339-4f05dc1ba13c

Codex

latest run
complete findings
Unprotected initializer enables full bridge takeover and arbitrary ETH/ERC20 withdrawals if the proxy is not initialized in the deployment transaction.
Top findings
  • critical Unprotected initialize lets an attacker set a fake messenger and drain the bridge
View run

Code Metadata

fingerprint
Created block
13627429
Code size
2497
Codehash
0x0991a3aab946c0d9a445aec027330442630decace9705d6c5a19fb3f7ae51f86
Impl codehash
0x368e45dfc5afd1d2e448c2fb053d8864d66368d377a92a3713aaac513e723d57
Priority score
22928345.699049

Recent Runs

last 20
Run ID Status Validated Total findings Created
019b477e-c348-73ef-845d-b074acd49baa complete crit 0 high 1 3 3 months ago
019b3844-9df9-724f-abb3-993733844457 complete crit 0 high 1 2 3 months ago