Vulnerable OpenZepplin versions
Vulnerability Details
1- The openzepplin/ contracts 's version used is vulnerable to many risk factors some are high/meduim here is the link that shows them:
https://security.snyk.io/package/npm/@openzeppelin%2Fcontracts
recomm: upgrade to version 5.0.2 as it is the latest non vulnerable version.
2- The openzepplin/ contracts-upgradeable 's version used is vulnerable to many risk factors some are high/meduim.
here is the link that shows them:
https://security.snyk.io/package/npm/@openzeppelin%2Fcontracts-upgradeable
recomm: upgrade to version 5.1.0-rc.0 as it is the latest non vulnerable version.
Tools Used
Manual review
Recommendations
Provided after each issue.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.