hats-finance / illuminex-0x0bb4aa1f58719707405c231fcdf0b405714799cf

0 stars 0 forks source link

Compiler version above 0.8.24 are not yet supported on Saphire however still included #55

Open hats-bug-reporter[bot] opened 3 days ago

hats-bug-reporter[bot] commented 3 days ago

Github username: @@giorgiodalla Twitter username: 0xAuditism Submission hash (on-chain): 0x815e0a2522d328df4b699a8acb18f91876f15c5e4d65dedc507faede85c7302c Severity: low

Description: Description\ The Sapphire VM is built on the Rust Ethereum EVM, which can be found at https://github.com/rust-ethereum/evm. This implementation is compatible with Solidity versions up to 0.8.24. However, it does not yet support some transaction types introduced in Solidity 0.8.25, such as those mentioned in https://github.com/rust-ethereum/evm/issues/277, which are pending release.

Attack Scenario\ Describe how the vulnerability can be exploited.

Attachments

  1. Proof of Concept (PoC) File All files contain an unbounded pragma which means 0.8.25 and 0.8.26 are included.

  2. Revised Code File (Optional)

In order to avoid running into unexpected issue consider using a bounded floating pragma, this can be executed as such :

pragma solidity >=0.8.0 <=0.8.24;

rotcivegaf commented 3 days ago

https://github.com/hats-finance/illuminex-0x0bb4aa1f58719707405c231fcdf0b405714799cf/blob/3ad7c2aedf991493aab45d3e0847b7e07f5c0d07/packages/contracts/hardhat.config.ts#L16 Informational