Vulnerability Details

All the contracts in the scope use the following pragma statement:

This allows for the situation that the contracts get deployed with a compiler version different from the one they were tested with, which exposes the system to higher risks of undiscovered bugs.

Recommendations

We recommend locking the pragma statement to a specific compiler version intended by the developers. This will help ensure that the contracts are deployed with the intended compiler version and minimize the risks of undiscovered bugs.