Submission Details
Impact:
Likelihood:
[L-2] Unspecific Solidity Pragma
[L-2] Unspecific Solidity Pragma
Description
-
Normal behavior: Use a precise Solidity pragma or lock compiler version in CI for reproducible builds.
-
Specific issue: the contract uses a loose pragma (
^0.8.30) which may compile with different patch versions.
// @> loose pragma
Risk
Likelihood:Low
-
Different compiler patch versions produce different bytecode or optimization behavior during builds.
-
Tooling/CI may pick different solc leading to subtle differences.
Impact:Low
Deployment incompatibilities or unexpected bytecode (e.g., PUSH0) on some targets.
Proof of Concept
// Build with solc 0.8.30 vs 0.8.31 and compare bytecode.
Recommended Mitigation
- pragma solidity ^0.8.30;
+ pragma solidity 0.8.30; // or lock compiler version in CI/tooling
Rewards breakdown
nSLOC
157This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.