Raisebox Faucet

First Flight #50
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Impact: low
Likelihood: low
Invalid

SPDX License Typo and Loose Pragma Declaration

[I-01] SPDX License Typo and Loose Pragma Declaration

Description: The contract header contains a typo in the SPDX license identifier:

// SPDX-Lincense-Identifier: MIT

This should be:

// SPDX-License-Identifier: MIT

Additionally, the pragma version is declared with a loose upper bound:

pragma solidity ^0.8.30;

While this is syntactically valid, it allows compilation with any version above 0.8.30, which may introduce unexpected behavior if newer compiler versions change language semantics or introduce breaking changes.

Impact:

-SPDX typo may cause license metadata to be ignored by tools and auditors.

-Loose pragma can lead to inconsistent compilation across environments.

-Tooling issues: Some static analyzers and verifiers may reject or misinterpret the contract.

-Legal ambiguity: License metadata is important for open-source compliance.

Recommended Mitigation:

1.Fix the SPDX header:

// SPDX-License-Identifier: MIT

2.Use a fixed pragma version for consistency:

pragma solidity =0.8.30;
Updates

Lead Judging Commences

inallhonesty Lead Judge 7 days ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.