Root + Impact

Description

• The contract declares a `MerkleRootUpdated` event that is never emitted. Since the merkle root is immutable, this event serves no purpose and is dead code.

  ### Root + Impact

  An event is declared but never used, indicating incomplete implementation or leftover code.

  ```solidity

  // src/MerkleAirdrop.sol:20

  event MerkleRootUpdated(bytes32 newMerkleRoot);

  ```

  The merkle root is stored as an immutable variable, so it can never be updated. This event declaration is dead code that should be removed for code clarity.

Risk

Likelihood:

• * Event is declared but never emitted

  * Merkle root is immutable, so it can never be updated

  * This is a code quality issue, not a security issue

Impact:

• * Code confusion - suggests merkle root can be updated when it cannot

  * Unnecessary gas cost for event declaration (minimal)

  * Dead code that should be cleaned up

  * No functional impact

Proof of Concept

Recommended Mitigation