Floating pragma
Summary
Contracts do not contain fixed compiler version
Vulnerability Details
Contracts should be deployed using the same compiler version/flags with which they have been tested. Locking the pragma (for e.g. by not using ^ in pragma) ensures that contracts do not accidentally get deployed using an older compiler version with unfixed bugs
All files in scope do not have specification for fixed compiler version.
Impact
Contracts could be deployed using an older compiler version with unfixed bugs or other version, than tested. Which could cause unpredictable behavior
Tools Used
Manual review
Recommendations
Specify fixed solidity compiler version without ^
Lead Judging Commences
Floating Pragma
Floating pragma usage could lead to compilation inconsistencies
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.