Summary

Pragma isn't specified correctly which can lead to a nonfunction/damaged contract when deployed on Arbitrum

Vulnerability Details

Pragma has been set to ^0.8.20 in contracts, which will be deployed on Arbitrum blockchain, allowing the contracts to be compiled with version 0.8.20. The problem with this is that Arbitrum is NOT compatible with 0.8.20 and newer. Contracts compiled with those versions will result in a nonfunctional or potentially damaged version that won't behave as expected. The default behaviour of the compiler would be to use the newest version which would mean by default it will be compiled with the 0.8.20 version which will produce broken code.

For more info - https://docs.arbitrum.io/solidity-support

Impact

Damaged or nonfunctional contracts when deployed on Arbitrum

Tools Used

Manual review

Recommendations

Constrain the pragma version: pragma solidity >=0.8.0 <=0.8.19