First Flight #9: Soulmate

Summary

Solidity pragma should be specific, not wide

Vulnerability Details

Consider using a specific version of Solidity in your contracts instead of a wide version. For example, instead of pragma solidity ^0.8.0;, use pragma solidity 0.8.23;

Impact

Locking the pragma helps ensure that contracts do not accidentally get deployed using a different compiler specification.For example, an outdated compiler version might introduce bugs, or a newversion that is not extensively tested may introduce security vulnerabilities

Tools Used

Manual Analysis

Proof of Concept:
see files

• Found in src/Airdrop.sol Line: 2

• Found in src/LoveToken.sol Line: 2

• Found in src/Soulmate.sol Line: 2

• Found in src/Staking.sol Line: 2

• Found in src/Vault.sol Line: 2

• Found in src/interface/ILoveToken.sol Line: 2

• Found in src/interface/ISoulmate.sol Line: 2

• Found in src/interface/IStaking.sol Line: 2

• Found in src/interface/IVault.sol Line: 2

Tools Used

Recommendations

For example, instead of pragma solidity ^0.8.0;, use pragma solidity 0.8.23;