Beedle - Oracle free perpetual lending
BeedleFi
DeFiFoundry
20,000 USDC
View results
Previous Next
Submission Details
Severity: gas
Valid

Use of non-locked `pragma` for non-library/interface contract

codeslide

Summary

A non-locked pragma is being used for a non-library/interface contract.

Vulnerability Details

There are 4 instances of this issue.

File: src/Beedle.sol
​
2: pragma solidity ^0.8.19;
File Link Instance Count Instance Link
Beedle.sol 1 2
File: src/Fees.sol
​
2: pragma solidity ^0.8.19;
File Link Instance Count Instance Link
Fees.sol 1 2
File: src/Lender.sol
​
2: pragma solidity ^0.8.19;
File Link Instance Count Instance Link
Lender.sol 1 2
File: src/utils/Ownable.sol
​
2: pragma solidity ^0.8.19;
File Link Instance Count Instance Link
Ownable.sol 1 2

Impact

While floating pragmas can make sense for libraries to allow them to be included with multiple different versions of applications, it may be a security risk for application implementations. A known vulnerable compiler version may accidentally be selected or security tools might fall-back to an older compiler version. It is recommended to pin to a concrete compiler version. See Locking Pragmas for more information.

Tools Used

baudit: a custom static code analysis tool; manual review

Recommendations

Avoid floating pragmas for non-library/interface contracts.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.