search

code-423n4 / 2022-06-putty-findings

5 stars 0 forks source link

Upgraded Q -> M from 58 [1657813582004] #439

Closed code423n4 closed 1 year ago

code423n4 commented 1 year ago

Judge has assessed an item in Issue #58 as Medium risk. The relevant finding follows:

HickupHH3 commented 1 year ago
  1. Outdated compiler The pragma version used are:

pragma solidity 0.8.13; But recently solidity released a new version with important Bugfixes:

The first one is related to ABI-encoding nested arrays directly from calldata. You can find more information here.

The second bug is triggered in certain inheritance structures and can cause a memory pointer to be interpreted as a calldata pointer or vice-versa. We also have a dedicated blog post about this bug.

Apart from these, there are several minor bug fixes and improvements.

The minimum required version should be 0.8.14

HickupHH3 commented 1 year ago

dup of #348

HickupHH3 commented 1 year ago

Decided not to mark this as a dup, because it fails to explain the parts of the codebase for which the compiler bugs are applicable to.