TW
Tripwire
Find contracts. Test them. Review real vulns.
Contract
0xdd06d8ad275d1d2e09e4c7162c231acb7df9b44d failed chain 1
Dedaub
Queue = batch runner. Audit = immediate run. Audit + LLM forces codex.
Value & Balances
$41,170.41
last balance 3 months ago
ETH
0.0000
WETH
0.0000
USDC
41,170.41
USDT
0.00
Findings Signal
0
confirmed findings
crit 0 high 0 unconfirmed 2 total 2
validated = confirmed for call sinks; sink observed for others

Proxy & Workflow

linkage
Proxy status
non-proxy
Implementation address
Proxies pointing here
0
Workflow
failed
attempts 1
checked 1 week ago
error slither failed (exit 1): 'forge clean' running (wd: /tmp/slither-lm4bdhq1) 'forge config --json' running 'forge build --build-info --skip ./test/** ./script/** --force' running (wd: /tmp/slither-lm4bdhq1) 'forge' returned non-zero exit code 1 2026-04-04T04:28:00.885652Z ERROR foundry_compilers_artifacts_solc::sources: error="/tmp/slither-lm4bdhq1/lib/openzeppelin-contracts/contracts/cryptography/MerkleProof.sol": No such file or directory (os error 2) stdout: Unable to resolve imports: stdout: "@openzeppelin/contracts/cryptography/MerkleProof.sol" in "/tmp/slither-lm4bdhq1/contracts/MerkleDistributor.sol" stdout: with remappings: stdout: openzeppelin-contracts/=/tmp/slither-lm4bdhq1/lib/openzeppelin-contracts/ stdout: @openzeppelin/contracts/=/tmp/slither-lm4bdhq1/lib/openzeppelin-contracts/contracts/ stdout: Compiling 3 files with Solc 0.6.11 stdout: Solc 0.6.11 finished in 2.64ms Error: Compiler run failed: stderr: Error (6275): Source "lib/openzeppelin-contracts/contracts/cryptography/MerkleProof.sol" not found: File not found. stderr: contracts/MerkleDistributor.sol:5:1: ParserError: Source "lib/openzeppelin-contracts/contracts/cryptography/MerkleProof.sol" not found: File not found. stderr: import "@openzeppelin/contracts/cryptography/MerkleProof.sol"; stderr: ^------------------------------------------------------------^ Traceback (most recent call last): File "/var/www/tripwire/.venv/bin/slither", line 10, in <module> sys.exit(main()) ~~~~^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/slither/__main__.py", line 776, in main main_impl(all_detector_classes=detectors, all_printer_classes=printers) ~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/slither/__main__.py", line 882, in main_impl ) = process_all(filename, args, detector_classes, printer_classes) ~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/slither/__main__.py", line 96, in process_all compilations = compile_all(target, **vars(args)) File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/crytic_compile.py", line 722, in compile_all compilations.append(CryticCompile(target, **kwargs)) ~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/crytic_compile.py", line 211, in __init__ self._compile(**kwargs) ~~~~~~~~~~~~~^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/crytic_compile.py", line 633, in _compile self._platform.compile(self, **kwargs) ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/platform/foundry.py", line 102, in compile hardhat_like_parsing( ~~~~~~~~~~~~~~~~~~~~^ crytic_compile, str(self._target), build_directory, str(self._project_root) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ File "/var/www/tripwire/.venv/lib/python3.13/site-packages/crytic_compile/platform/hardhat.py", line 52, in hardhat_like_parsing raise InvalidCompilation(txt) crytic_compile.platform.exceptions.InvalidCompilation: Compilation failed. Can you run build command? /tmp/slither-lm4bdhq1/out/build-info is not a directory.

Latest Findings

validated = confirmed for call sinks; sink observed for others
No confirmed findings yet.
Show unconfirmed findings
Severity Tool Title Validated Confirmed
high detector Untrusted CALL target/value reachable no no
high detector ETH value transfer possible no no

Codex

latest run
complete source no findings
Fully reviewed AUDIT_BUNDLE.txt. The only first-party logic is a standard MerkleDistributor pattern; I did not identify meaningful exploitable issues in scope around reentrancy, access control, upgradeability, signature...

Code Metadata

fingerprint
Created block
15616954
Code size
1425
Codehash
0x44ac934b399d2a5cd3ee80b44a4b85093dfcc7f54eb900b46208407e8094929d
Priority score
41170.407722

Recent Runs

last 20
Run ID Status Validated Total findings Created
019d5666-7228-7302-a900-09a40daa9b14 failed crit 0 high 0 2 1 week ago