Vulnerability Details

In the three smart contracts in scope for this audit, the floating pragma ^0.8.18 is employed. This practice of locking the pragma version helps to enforce that contracts are not unintentionally deployed using a different pragma.
By doing so, the contract system avoids potential issues that may arise from utilizing outdated pragma versions that could introduce bugs or from using recently released pragma versions that might have unknown security vulnerabilities.

OracleLib.sol#L3

DSCEngine.sol#L24

DecentralizedStableCoin.sol#L24

Recommendations

It is recommended to lock the pragma version with a known bug-free compiler version. Avoid using floating pragma in the final live deployment whenever possible. By specifying a fixed compiler version, you ensure that the bytecode produced remains consistent across different builds. This is particularly crucial if you rely on bytecode-level verification of the code.