Mystery Box

First Flight #25
Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: medium
Invalid

Use of floating pragma in `MysteryBox.sol` could lead to introduction of unknown security vulnerabilities.

Summary

Contracts should be deployed with the same compiler version and used during development and testing. Locking the pragma helps to ensure
that contracts do not accidentally get deployed using another pragma.

Vulnerability Details

The issue is on line 2 of the MysteryBox contract.

pragma solidity ^0.8.0;

Impact

An outdated pragma version might introduce bugs that affect the contract system negatively or recently released pragma versions may have unknown security vulnerabilities.

Tools Used

Manual Review

Recommendations

Consider locking the pragma in the contracts to the 0.8.0 version.

pragma solidity 0.8.0;

It is not recommended to use a floating pragma in production.

Updates

Appeal created

inallhonesty Lead Judge 11 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.