search

code-423n4 / 2022-01-yield-findings

1 stars 0 forks source link

Solidity compiler versions mismatch #28

Closed code423n4 closed 2 years ago

code423n4 commented 2 years ago

Handle

robee

Vulnerability details

The project is compiled with different versions of solidity, which is not recommended due ti undefined behaviors as a result of it.

alcueca commented 2 years ago

No, the AggregatorV3Interface.sol, which is taken from a Chainlink repo, specifies that the pragma is equal or greater than 0.6. Since the rest of the contracts are fixed to 0.8.6 it follows that the project will be compiled with 0.8.6

Please note that 0.8.6 >= 0.6, so no conflict here.

Also, it's an interface.

GalloDaSballo commented 2 years ago

The finding is invalid