DOS due to incompatible solc version, featuring push0 opcode, with EVM chains which haven't upgraded to Shanghai.
The project has
Using the more updated version of Solidity can add new features and enhance security. As described in https://github.com/ethereum/solidity/releases, Version 0.8.20 is the latest version of Solidity, which includes support for Shanghai. If the desired EVM chain to deploy does not support PUSH0 at this moment, all calls to the contract will fail, auto inducing a DOS.
If project decides to deploy with the openzeppelin version its config files point to, which is the latest, it would have a DOS due to the incompatibility with the push0 opcode on other EVM chains which haven't upgraded to the Shanghai version.
Manual review
To be more secured and future-proofed, please consider using the version of Solidity 0.8.18 for the imported contracts featuring 0.8.20 version.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.