First Flight #2: Puppy Raffle

Summary

Using unspecific compiler pragma version can produce issues

Vulnerability Details

Often times, it makes sense to use an unspecific Pragma Solidity version since we want to use it for libraries to allow them to be included in different applications with different versions. There is a possibility that a vulnerable compiler version may be selected. Also, older compiler versions might contain known security vulnerabilities that have been addressed in newer releases. Using an outdated compiler might expose the contract to potential risks and vulnerabilities.

Impact

Older versions might have some issues that are not addressed yet.

Tools Used

Manual Review

Recommendations

Consider avoiding the use of the floating pragma version. A good idea would be to select a specific compiler version, the latest one without security issues.