Submission Details
Severity:
Avoid using floating pragma solidity versions `pragma solidity ^0.8.20`
Summary
Using a floating version might compile the contract with a version that has unresolved security issues, especially if the floating range includes old versions.
Vulnerability Details
pragma solidity ^0.8.20
- `contracts/swan/BuyerAgent.sol`
- `contracts/swan/Swan.sol`
- `contracts/swan/SwanAsset.sol`
- `contracts/swan/SwanManager.sol`
- `contracts/libraries/Statistics.sol`
- `contracts/llm/LLMOracleCoordinator.sol`
- `contracts/llm/LLMOracleManager.sol`
- `contracts/llm/LLMOracleRegistry.sol`
- `contracts/llm/LLMOracleTask.sol`
Impact
Version constraint ^0.8.20 contains known severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)
- VerbatimInvalidDeduplication
- FullInlinerNonExpressionSplitArgumentEvaluationOrder
- MissingSideEffectsOnSelectorAccess.
Tools Used
manual review, slither
Recommendations
use a fixed stable version of Solidity.
eg;- pragma solidity 0.8.24
Prize pool breakdown
Total prize
21,000 USDC
nSLOC
1,03420
USDC / LOC
20,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.