Beanstalk Part 2

Summary

Across the audited contracts, different versions of the Solidity compiler are used:
^0.7.6 used in FertilizerFacet which specifies that the code is compatible with compiler versions 0.7.6 and above, but less than 0.8.0, 0.7.6 in UnripeFacet which also uses the pragma #experimental ABIEncoderV2

Vulnerability Details

While the individual contracts can be compiled using different versions of the Solidity compiler, profuse versioning among the same codebase is confusing and error-prone.

As indicated by its name, the experimental feature should not be used in production.

Tools Used

Manual Review

Recommendations

Consider using a common version or the latest version of the Solidity compiler throughout the code.