The error selector is placed in free memory pointer 0x40 to respect solidity memory layout. However, revert message is copied from 0x1c and let 0x00000000(bytes4) as the revert message. It should be 0x5c.
Manual
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.