code-423n4 / 2021-04-marginswap-findings

1 stars 0 forks source link

Unlocked Pragma #31

Open code423n4 opened 3 years ago

code423n4 commented 3 years ago

Email address

mail@cmichel.io

Handle

@cmichelio

Eth address

0x6823636c2462cfdcD8d33fE53fBCD0EdbE2752ad

Vulnerability details

Every Solidity file specifies in the header a version number of the format pragma solidity ^0.8.0. The caret (^) before the version number implies an unlocked pragma, meaning that the compiler will use the specified version or above.

It’s usually a good idea to pin a specific version to know what compiler bug fixes and optimizations were enabled at the time of compiling the contract.

Impact

Recommended mitigation steps

Pin the compiler versions.

zscole commented 3 years ago

This was submitted with a risk rating of 1 for low severity. This is non-critical, as it does not apply to the functionality of the contract.