Summary

Setting constants to private will save deployment gas. This is because the compiler won't have to create non-payable getter functions for deployment calldata, won't need to store the bytes of the values outside of where it's used, and won't add another entry to the method ID table. The values can still be read from the verified contract source code if necessary.

Vulnerability Details

In the mentioned links there are constant variables, that are public.

Impact

Deployment gas waste.

Tools Used

Manual review.

Recommendations

Change constants from public to private:

e.g: