mythril/tests/testdata/outputs_expected/calls.sol.o.json

{
  "error": null,
  "issues": [
    {
      "address": 661,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "This contract executes a message call to to another contract. Make sure that the called contract is trusted and does not execute user-supplied code.",
      "function": "thisisfine()",
      "swc-id": "107",
      "min_gas_used": 643,
      "max_gas_used": 1254,
      "title": "Message call to external contract",
      "type": "Informational"
    },
    {
      "address": 666,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "The return value of an external call is not checked. Note that execution continue even if the called contract throws.",
      "function": "thisisfine()",
      "swc-id": "104",
      "min_gas_used": 1352,
      "max_gas_used": 35963,
      "title": "Unchecked CALL return value",
      "type": "Informational"
    },
    {
      "address": 779,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "This contract executes a message call to an address found at storage slot 1. This storage slot can be written to by calling the function `setstoredaddress(address)`. Generally, it is not recommended to call user-supplied addresses using Solidity's call() construct. Note that attackers might leverage reentrancy attacks to exploit race conditions or manipulate this contract's state.",
      "function": "callstoredaddress()",
      "swc-id": "107",
      "min_gas_used": 687,
      "max_gas_used": 1298,
      "title": "Message call to external contract",
      "type": "Warning"
    },
    {
      "address": 779,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "Possible transaction order dependence vulnerability: The value or direction of the call statement is determined from a tainted storage location.",
      "function": "callstoredaddress()",
      "swc-id": "114",
      "min_gas_used": 687,
      "max_gas_used": 1298,
      "title": "Transaction order dependence",
      "type": "Warning"
    },
    {
      "address": 784,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "The return value of an external call is not checked. Note that execution continue even if the called contract throws.",
      "function": "callstoredaddress()",
      "swc-id": "104",
      "min_gas_used": 1396,
      "max_gas_used": 36007,
      "title": "Unchecked CALL return value",
      "type": "Informational"
    },
    {
      "address": 858,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "This contract executes a message call to to another contract. Make sure that the called contract is trusted and does not execute user-supplied code.",
      "function": "reentrancy()",
      "swc-id": "107",
      "min_gas_used": 709,
      "max_gas_used": 1320,
      "title": "Message call to external contract",
      "type": "Informational"
    },
    {
      "address": 869,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "The contract account state is changed after an external call. Consider that the called contract could re-enter the function before this state change takes place. This can lead to business logic vulnerabilities.",
      "function": "reentrancy()",
      "swc-id": "107",
      "min_gas_used": 709,
      "max_gas_used": 1320,
      "title": "State change after external call",
      "type": "Warning"
    },
    {
      "address": 871,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "The return value of an external call is not checked. Note that execution continue even if the called contract throws.",
      "function": "reentrancy()",
      "swc-id": "104",
      "min_gas_used": 6432,
      "max_gas_used": 61043,
      "title": "Unchecked CALL return value",
      "type": "Informational"
    },
    {
      "address": 912,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "This contract executes a message call to an address provided as a function argument. Generally, it is not recommended to call user-supplied addresses using Solidity's call() construct. Note that attackers might leverage reentrancy attacks to exploit race conditions or manipulate this contract's state.",
      "function": "calluseraddress(address)",
      "swc-id": "107",
      "min_gas_used": 335,
      "max_gas_used": 616,
      "title": "Message call to external contract",
      "type": "Warning"
    },
    {
      "address": 918,
      "contract": "Unknown",
      "debug": "<DEBUG-DATA>",
      "description": "The return value of an external call is not checked. Note that execution continue even if the called contract throws.",
      "function": "calluseraddress(address)",
      "swc-id": "104",
      "min_gas_used": 1046,
      "max_gas_used": 35327,
      "title": "Unchecked CALL return value",
      "type": "Informational"
    }
  ],
  "success": true
}