20,000 USDC
View results
Submission Details
Severity: gas
Valid

Unspecific Compiler Version Pragma

Summary

Avoid floating pragmas for non-library contracts.

Vulnerability Details

While floating pragmas make sense for libraries to allow them to be included with multiple different versions of applications, it may be a security risk for application implementations.

Impact

A known vulnerable compiler version may accidentally be selected or security tools might fall-back to an older compiler version ending up checking a different EVM compilation that is ultimately deployed on the blockchain.

Tools Used

Manual finding

Recommendations

Use pragma solidity 0.8.19 instead of pragma solidity ^0.8.19

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.