First Flight #7: Horse Store

Summary

• According to the documentation of HorseStore, the contract is deployed on Arbitrum but the pragma version is 0.8.20 which can create problems on deploying in Arbitrum. where it leads to damage contract or nonFunctioning of contract.

Vulnerability Details

• The pragma version of the contract is 0.8.20 which create problems on Arbitrum because it does not support some OPCODES which are used in the contract. This results in damage contract which does not behave as expected.

• This is the link of the documentation of Arbitrum : https://docs.arbitrum.io/for-devs/concepts/differences-between-arbitrum-ethereum/solidity-support

Impact

• The contract is deployed on Arbitrum but the pragma version is 0.8.20 which can create problems on deploying in Arbitrum. where it leads to damage contract or nonFunctioning of contract.

Tools Used

• Manual Review

Recommendations

• We can change the version of pragma to 0.8.19 which is supported by Arbitrum.