First Flight #10: One Shot

Summary

Solc compiler version 0.8.20 switches the default target EVM version to Shanghai, which means that the generated bytecode will include PUSH0 opcodes.

Vulnerability Details

Found in CredToken

```solidity
pragma solidity ^0.8.20;
```

• Found in OneShot

  pragma solidity ^0.8.20;

• Found in RapBattle

  pragma solidity ^0.8.20;

• Found in Streets

  pragma solidity ^0.8.20;

Impact

Contract deployment will fail on L2 chains.

Tools Used

Aderyn

Recommendations

Be sure to select the appropriate EVM version in case you intend to deploy on a chain other than mainnet like L2 chains that may not support PUSH0