Tadle

Summary

Contracts should use strict versions of solidity to ensures that contracts are not deployed with a different version of solidity than they were tested with

Vulnerability Details

Contracts should be deployed with the same compiler version and flags that they have been tested with thoroughly. Locking the pragma helps to ensure that contracts do not accidentally get deployed using, for example, an outdated compiler version that might introduce bugs that affect the contract system negatively.

Impact

Deployed with a different version of solidity than they were tested with could lead to uninteded results.

Recommendations

Lock the pragma version and also consider known bugs (Solidity releases page) for the compiler version that is chosen.