Kingdom: Code Quality

Poor code quality leads to unpredictable behavior. From a user's perspective that often manifests itself as poor usability. For an attacker it provides an opportunity to stress the system in unexpected ways.

Solidity Misconfiguration: Compiler With Known Vulnerabilities

Solidity

Abstract

The contract uses an outdated version of the Solidity compiler that can expose it to publicly disclosed bugs and vulnerabilities.

Explanation

When creating a Solidity smart contract developers can specify the compiler version to use in order to clarify what version it has been tested against and prevent any problems from using a different version of the compiler. However, many compiler-related vulnerabilities have been publicly disclosed over the years and newer patched versions of the compiler have been created to address those issues.

References

[1] Enterprise Ethereum Alliance Compiler Bugs

[2] Standards Mapping - Smart Contract Weakness Classification SWC-102

desc.structural.solidity.swc102