Artifacts
DISCLAIMER // NFA // DYOR
This analysis is based on observations of the contract behavior. We are not smart contract security experts. This document aims to explain what the contract appears to do based on the code. It should not be considered a comprehensive security audit or financial advice. Always verify critical information independently and consult with blockchain security professionals for important decisions.
⊙ generated by robots | curated by humans
| METADATA | |
|---|---|
| Contract Address | 0x82eb1246...90cC37 (etherscan) |
| Network | Ethereum Mainnet |
| Analysis Date | 2026-06-02 |
Runtime Bytecode
The deployed contract bytecode fetched from the blockchain (20,426 hex chars including 0x / ~10 KB).
Source: Etherscan - Contract Code
Command:
Artifact: Full runtime bytecode is retrievable with the command above. Because the contract is verified, the Solidity source (below) is the authoritative artifact for analysis.
Creation Bytecode
The full bytecode used to deploy the contract, including constructor code and the ABI-encoded constructor arguments.
Source: Etherscan - Creation TX
Command:
export ETH_RPC_URL=https://eth.llamarpc.com
cast tx 0x71db780952d99b8c407cdf1752dfb2cc0e0547a737cdd717cdc225649162cfd6 input
Decoded constructor arguments (the contract's entire trust wiring is fixed here):
| ARG | TYPE | VALUE |
|---|---|---|
headerRelay_ |
address | 0x36358295...8Ca6D0 (etherscan) |
burnVerifier_ |
address | 0x031b22ba...7Ab2ca (etherscan) |
token_ |
address | 0x0 (native ETH) |
confirmationDepth_ |
uint256 | 6 |
denominations_ |
uint256[8] | 1e13, 1e14, 1e15, 1e16, 1e17, 1e18, 1e19, 1e20 (wei) |
poolRootVerifiers_ |
address[8] | all 0x42Ab3d9d...2a3CCb (etherscan) |
networkTag_ |
uint8 | 0 (Bitcoin mainnet) |
assetId_ |
bytes32 | 0x3cba71e1...126f34 (tacitscan) |
Verified Source Code
Source code verified on Etherscan (Exact Match), compiled with Solidity v0.8.34+commit.80d5c536, optimizer enabled, viaIR, EVM version prague.
Source: Etherscan - Contract Source
Files (standard-JSON input, 5 source units):
| FILE | ROLE |
|---|---|
src/TacitBridgeMixer.sol |
The bridge/mixer contract analyzed here |
src/lib/PoseidonT3.sol |
Poseidon hash (2-input) used as the Merkle tree hash |
src/lib/BitcoinLightRelay.sol |
Heaviest-chain Bitcoin SPV light client |
lib/solady/src/utils/ReentrancyGuardTransient.sol |
Transient-storage reentrancy lock (Solady) |
lib/solady/src/utils/SafeTransferLib.sol |
Safe ETH/ERC-20 transfer helpers (Solady) |
Upstream: TacitBridgeMixer.sol @ z0r0z/tacit, commit 9da5b4e
Additional Artifacts
Related contracts (dependencies)
| CONTRACT | ADDRESS | VERIFIED | CREATION TX |
|---|---|---|---|
| BitcoinLightRelay | 0x36358295...8Ca6D0 (etherscan) |
☑ Yes | 0x7bfa9abf...f009b5 (tx) |
| SP1PoolRootVerifier | 0x42Ab3d9d...2a3CCb (etherscan) |
☑ Yes | 0x95f68950...869ebb (tx) |
| SP1VerifierGateway (Succinct) | 0x397A5f7f...48dA9B (etherscan) |
☑ Yes | deployed by Succinct, 2024 |
| Groth16 burn verifier | 0x031b22ba...7Ab2ca (etherscan) |
☒ No (bytecode only, 1,752 B) | — |
Events
| EVENT | TOPIC0 |
|---|---|
Deposit(bytes32,bytes32,uint256,uint256) |
0x35a268a9...46c30e (events) |
Withdrawal(bytes32,bytes32,address,uint256) |
0x9b918c47...4f4cfc (events) |
Observed activity (as of analysis date)
All transactions are from the deployer 0x42e7b9e9...55483c (etherscan) — end-to-end self-tests.
| BLOCK | ACTION | AMOUNT |
|---|---|---|
| 25224831 (etherscan) | Deployment | — |
| 25225045 (etherscan) | deposit |
0.001 ETH (1e15 wei) |
| 25225241 (etherscan) | withdrawFromBurn |
0.001 ETH — tx 0x45f7ccbc...4491d9 (tx) |
| 25225739 (etherscan) | deposit |
0.0001 ETH (1e14 wei) |
| 25229135 (etherscan) | withdrawFromBurn |
0.00001 ETH — tx 0x305b1d2e...255953 (tx) |
Resulting totalBalance: 90,000,000,000,000 wei (0.00009 ETH). SP1 proven state height: 6, anchored at the relay tip (Bitcoin block 952,099 (mempool)).