Artifacts

DISCLAIMER // NFA // DYOR

This analysis is based on observations of the contract behavior. We are not smart contract security experts. This document aims to explain what the contract appears to do based on the code. It should not be considered a comprehensive security audit or financial advice. Always verify critical information independently and consult with blockchain security professionals for important decisions.

⊙ generated by robots | curated by humans

METADATA
Contract Address	`0x00000000...1da8dB` (etherscan)
Network	Ethereum Mainnet
Analysis Date	2026-07-03

Runtime Bytecode

The deployed contract bytecode fetched from the blockchain (24,566 bytes — near the EIP-170 limit).

Source: Etherscan - Contract Code

Command:

export ETH_RPC_URL=https://eth.llamarpc.com
cast code 0x000000000049Cc3f65588E74d9c25B66781da8dB

Artifact: Full runtime bytecode is large; retrieve it with the command above. Code size confirmed via cast codesize = 24566.

Creation Bytecode

The full init code used to deploy the contract, including constructor code and the ten ABI-encoded constructor arguments in its last 0x140 bytes.

Source: Etherscan - Creation TX

Command:

# The pool was deployed via a CREATE2 vanity factory (0xbfc04675...2b836f); the init code +
# constructor args are returned by the Etherscan getcontractcreation endpoint's creationBytecode.
export ETH_RPC_URL=https://eth.llamarpc.com
cast tx 0xb7c846234a531c1453a0759100c722df9f1eba7521df11033c7aaf17115d8c78 input

Decoded constructor arguments:

ARG	VALUE
`sp1Verifier`	`0xb69f2584...a6f4e2` (etherscan) (SP1Verifier)
`programVKey`	`0x0093404c720746027ab2f9128272dc8015fd0fb810f6afa8b7cff09741b12c04`
`bitcoinRelayVKey`	`0x00de8331bd06d7150c49218de747dba446615d0081e139b1f41a9c3e7e827583`
`canonicalFactory`	`0x00000000...f3bf64` (etherscan) (CanonicalAssetFactory)
`headerRelay`	`0x1677a5a3...2e9094` (etherscan) (BitcoinLightRelay)
`genesisReflectionAnchor`	`0xbcca946e9082e70c577116894d5e0505bf1f2d727ee301000000000000000000` (Bitcoin block hash, little-endian; reverses to canonical big-endian for explorer lookup)
`reflectionConfirmations`	`6`
`reflectionResumeDigest`	`0xb42a14da4f4e5ef51785a2afe8a234aa58874ae9707ddce0845b1bdad6eb4439` (non-zero ⇒ generational mid-stream resume)
`tethBitcoinLink`	`0x3cba71e1114af183cdeacc6b8457a474d17529fd28704480ca799d0d03126f34`
`collateralEngine`	`0x00000000...30c97c` (etherscan) (CollateralEngine)

Verified Source Code

Source code verified on Etherscan (exact match). The primary file src/ConfidentialPool.sol is 2,380 lines; it imports Solady's ReentrancyGuardTransient and SafeTransferLib.

Source: Etherscan - Contract Source

Compiler settings: v0.8.34+commit.80d5c536, viaIR: true, optimizer enabled with runs: 1, evmVersion: prague, license MIT.

Local copies (saved during analysis, not committed to the docs tree):

artifacts/000000...81da8dB/
  getsourcecode.json                 # raw Etherscan v2 getsourcecode response
  ConfidentialPool.abi.json          # contract ABI (30 functions, 7 events, 60 errors)
  sources/
    src__ConfidentialPool.sol        # primary contract (2,380 lines)
    lib__solady__src__utils__ReentrancyGuardTransient.sol
    lib__solady__src__utils__SafeTransferLib.sol
  creation.json                      # getcontractcreation response (init code + args)
  TODO.md                            # analysis checklist

Additional Artifacts

Registered Assets (on-chain, at analysis)

ASSET	INTERNAL ID (evmAssetId)	CANONICAL TOKEN / UNDERLYING	MODE	SCALE
tETH	`0x62c4c604...ed3af1`	native ETH (`address(0)`)	escrow	1e10
tacBTC	(by token)	`0x92987ddc...0FD047` (etherscan)	pool-minted	1e10
tacUSD	(by token)	`0x5Db7f31e...75333C` (etherscan)	pool-minted	1e10
USDC	`0xc05bfed4...69c1d6`	`0xA0b86991...06eB48` (etherscan)	escrow	1
USDT	`0xc50e8dd9...ac6c00`	`0xdac17f95...831ec7` (etherscan)	escrow	1
wstETH	`0xb6495046...dccd06`	`0x7f39c581...5e2ca0` (etherscan)	escrow	1e10

Activity Summary (23 txns, all deployer `0x68575b07...6267c7` (etherscan))

SELECTOR	FUNCTION	COUNT
`0x717fd7f2`	`settle`	11
`0x8be3ad21`	`wrap`	5 (one carried 0.0001 ETH)
`0x0b36171c`	`attestBitcoinStateProven`	4
`0x0339e3f3`	`registerWrappedAuto`	3

Command to reproduce activity:

# NORMAL TRANSACTIONS TO THE CONTRACT (ETHERSCAN V2)
curl -s "https://api.etherscan.io/v2/api?chainid=1&module=account&action=txlist&address=0x000000000049Cc3f65588E74d9c25B66781da8dB&startblock=0&endblock=99999999&sort=asc&apikey=$ETHERSCAN_API_KEY"

# EVENT LOGS BY TOPIC0
curl -s "https://api.etherscan.io/v2/api?chainid=1&module=logs&action=getLogs&address=0x000000000049Cc3f65588E74d9c25B66781da8dB&fromBlock=0&toBlock=latest&apikey=$ETHERSCAN_API_KEY"

Event totals: 6 AssetRegistered, 5 Wrap, 9 LeavesInserted, 7 NullifiersSpent. No CrossOutRecorded, BitcoinNotesConsumed, or CdpPositionInserted — the bridge-out, fast-lane, and CDP paths were not exercised on-chain.