code-423n4 / 2022-09-vtvl-findings

0 stars 0 forks source link

QA Report #488

Open code423n4 opened 2 years ago

code423n4 commented 2 years ago

L001 - PRAGMA VERSION

In the contracts, floating pragmas should not be used. Contracts should be deployed with the same compiler version and flags that they have been tested with thoroughly. Locking the pragma helps to ensure that contracts do not accidentally get deployed using, for example, an outdated compiler version that might introduce bugs that affect the contract system negatively.

Proof of Concept

https://swcregistry.io/docs/SWC-103

vtvl/contracts/token/VariableSupplyERC20Token.sol::2 => pragma solidity ^0.8.14;