Raisebox Faucet

First Flight #50
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Impact: low
Likelihood: low
Invalid

Typographical Error in SPDX License Identifier

Root + Impact

Description

Normal Behavior: Smart contracts should include a valid SPDX license identifier at the top of the file to specify the license under which the code is released. The correct format is SPDX-License-Identifier followed by a valid license type (e.g., MIT, GPL-3.0, UNLICENSED).

Actual Issue: The contract contains a typographical error in the SPDX license identifier, spelling "License" as "Lincense". While this does not affect the contract's functionality or compilation, it represents incorrect SPDX syntax and reduces code professionalism.

// @audit "Lincense" should be "License"
// SPDX-Lincense-Identifier: MIT
pragma solidity ^0.8.30;

Risk

Likelihood:

  • This error exists in every deployment of the contract and is visible in all source code viewers and blockchain explorers

  • The typo is permanent once deployed and cannot be corrected without redeployment

Impact:

  • Standards Non-Compliance: Does not follow the official SPDX specification for license identifiers

  • Tooling Compatibility: Some automated license scanning tools may fail to properly identify the contract's license

  • Documentation Issues: Blockchain explorers and source code aggregators may not correctly categorize the contract's license

Proof of Concept

// Current (Incorrect):
// SPDX-Lincense-Identifier: MIT
// Expected (Correct):
// SPDX-License-Identifier: MIT

The typo can be verified by viewing the contract source code where "Lincense" appears instead of the standard "License" spelling.

Recommended Mitigation

Correct the spelling of "License" in the SPDX identifier to comply with official SPDX standards and improve code professionalism.

- // SPDX-Lincense-Identifier: MIT
+ // SPDX-License-Identifier: MIT
pragma solidity ^0.8.30;
Updates

Lead Judging Commences

inallhonesty Lead Judge 9 days ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.