Skip to main content

Ink! version

Description

  • Vulnerability Category: Best practices
  • Vulnerability Severity: Enhancement
  • Detectors: ink-version
  • Test Cases: ink-version-1

Using an old version of ink! can be dangerous, as it may have bugs or security issues. Use the latest version available.

Exploit Scenario

Consider the following ink! contract:

[dependencies]
ink = { version = "5.0.0", default-features = false }

Problems can arise if the version is not updated to the latest available.

The vulnerable code example can be found here.

Remediation

Use the latest stable version available.

The remediated code example can be found here.

References