First Flight #2: Puppy Raffle

Summary

Avoid Outdated Floating Pragmas for non-library contracts.

While floating pragmas make sense for libraries to allow them to be included with multiple different versions of applications, it may be a security risk for application implementations.

Vulnerability Details

Impact

A known vulnerable compiler version may accidentally be selected or security tools might fall-back to an older compiler version ending up checking a different EVM compilation that is ultimately deployed on the blockchain.

Tools Used

Manual Review

Recommendations

It is recommended to pin to the latest concrete compiler version.