TW
Tripwire
Find contracts. Test them. Review real vulns.
Contract
0x849f4081899305a1fd24aac84db5174eb60dc28e failed chain 1 proxy
Dedaub
Queue = batch runner. Audit = immediate run. Audit + LLM forces codex.
Value & Balances
$41,313.94
last balance 3 months ago
ETH
0.1013
WETH
0.0000
USDC
41,000.00
USDT
0.00
Findings Signal
0
confirmed findings
crit 0 high 0 unconfirmed 8 total 8
validated = confirmed for call sinks; sink observed for others

Proxy & Workflow

linkage
Proxy status
proxy
Implementation address
Proxies pointing here
0
Workflow
failed
attempts 1
checked 1 week ago
error slither failed (exit 1): 'forge clean' running (wd: /tmp/slither-llgbznxh) 'forge config --json' running 'forge build --build-info --skip ./test/** ./script/** --force' running (wd: /tmp/slither-llgbznxh) Traceback (most recent call last): File "/var/www/tripwire/.venv/bin/slither", line 10, in <module> sys.exit(main()) ~~~~^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/slither/__main__.py", line 776, in main main_impl(all_detector_classes=detectors, all_printer_classes=printers) ~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/slither/__main__.py", line 882, in main_impl ) = process_all(filename, args, detector_classes, printer_classes) ~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/slither/__main__.py", line 96, in process_all compilations = compile_all(target, **vars(args)) File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/crytic_compile.py", line 722, in compile_all compilations.append(CryticCompile(target, **kwargs)) ~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/crytic_compile.py", line 211, in __init__ self._compile(**kwargs) ~~~~~~~~~~~~~^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/crytic_compile.py", line 633, in _compile self._platform.compile(self, **kwargs) ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/platform/foundry.py", line 102, in compile hardhat_like_parsing( ~~~~~~~~~~~~~~~~~~~~^ crytic_compile, str(self._target), build_directory, str(self._project_root) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/platform/hardhat.py", line 52, in hardhat_like_parsing raise InvalidCompilation(txt) crytic_compile.platform.exceptions.InvalidCompilation: Compilation failed. Can you run build command? /tmp/slither-llgbznxh/out/build-info is not a directory.

Latest Findings

validated = confirmed for call sinks; sink observed for others
No confirmed findings yet.
Show unconfirmed findings
Severity Tool Title Validated Confirmed
critical detector Untrusted DELEGATECALL target reachable no no
high codex `fillOffer` can be reentered before `filledAmount` is updated, allowing overfilled orders no
high codex Nominal ERC20 accounting makes fee-on-transfer collateral tokens insolvent no
medium codex Owner can confiscate live escrow by de-whitelisting a token before `withdrawStuckToken` no
medium cast DELEGATECALL present no
medium detector CREATE/CREATE2 reachable no no
low cast Contract creation opcode present no
info cast Heavy EXTCODE*/BALANCE usage no

Codex

latest run
complete source findings
Found three meaningful issues in the implementation: `fillOffer` is reentrant before state is updated, ERC20 collateral is accounted at nominal rather than received amounts, and the owner can de-whitelist then withdraw l...
Top findings
  • high `fillOffer` can be reentered before `filledAmount` is updated, allowing overfilled orders
  • high Nominal ERC20 accounting makes fee-on-transfer collateral tokens insolvent
  • medium Owner can confiscate live escrow by de-whitelisting a token before `withdrawStuckToken`

Code Metadata

fingerprint
Created block
19426860
Code size
1160
Codehash
0x82b126ee43ecf8ca97e4e8ecbc5b3abc4e83eac57322377d6cb1b7b6b75363a9
Impl codehash
0x6e1194b74cedb18e7e63d96970b1a0767cafe282b6acf1f51c650f5ce20f6fe7
Priority score
41313.937103

Recent Runs

last 20
Run ID Status Validated Total findings Created
019d5666-7204-7199-9428-87c933f7acea failed crit 0 high 0 8 1 week ago