Unlocked/floating pragmas are found in multiple contracts. Locking the pragma helps ensure that contracts are not accidentally deployed using an outdated compiler version with unfixed bugs.
Proof of Concept
Referenced code:
Please use grep -R pragma . to find the unlocked/floating pragmas.
Recommended Mitigation Steps
Lock pragmas to a specific Solidity version. Consider the compiler bugs in the following links and ensure that they do not affect the contracts. It is also recommended to use the latest version of Solidity when writing and deploying contracts (see Solidity docs).
Handle
shw
Vulnerability details
Impact
Unlocked/floating pragmas are found in multiple contracts. Locking the pragma helps ensure that contracts are not accidentally deployed using an outdated compiler version with unfixed bugs.
Proof of Concept
Referenced code: Please use
grep -R pragma .
to find the unlocked/floating pragmas.Recommended Mitigation Steps
Lock pragmas to a specific Solidity version. Consider the compiler bugs in the following links and ensure that they do not affect the contracts. It is also recommended to use the latest version of Solidity when writing and deploying contracts (see Solidity docs).
Related links: Solidity repo - known bugs Solidity repo - bugs by version