u2 / u2.github.io Goto Github PK

slither --json - --pretty-json cvc/SWC/swc-113-dos/send_loop.sol
{
  "success": true,
  "error": null,
  "result": {
    "detectors": [
      {
        "description": "Refunder.refunds (cvc/SWC/swc-113-dos/send_loop.sol#11) is never initialized. It is used in:\n\t- Refunder.refundAll() (cvc/SWC/swc-113-dos/send_loop.sol#19-24)\n",
        "check": "uninitialized-state",
        "impact": "High",
        "swc-issue": "swc-109 Uninitialized Storage Pointer",
        "recommend": "\nInitialize all the variables. If a variable is meant to be initialized to zero, explicitly set it to zero to improve code readability.\n"
      },
      {
        "description": "Refunder.refundAll() (cvc/SWC/swc-113-dos/send_loop.sol#19-24)using transfer() and send() functions which forward a fixed amount of 2300 gas:\n\t- require(bool)(refundAddresses[x].send(refunds[refundAddresses[x]])) (cvc/SWC/swc-113-dos/send_loop.sol#22)\n",
        "check": "hardcode-gas",
        "impact": "Medium",
        "swc-issue": "swc-134 State Message call with hardcoded gas amount",
        "recommend": "Avoid the use of transfer() and send() and do not otherwise specify a fixed amount of gas when performing calls. Use .call.value(...)('') instead. Use the checks-effects-interactions pattern and/or reentrancy locks to prevent reentrancy attacks."
      },
      {
        "description": "solc-0.4.24 is not recommended for deployment\n",
        "check": "solc-version",
        "impact": "Low",
        "swc-issue": "swc-102 Outdated Compiler Version",
        "recommend": "Deploy with any of the following Solidity versions:\n    - 0.8.18\n    \n    The recommendations take into account:\n    - Risks related to recent releases\n    - Risks of complex code generation changes\n    - Risks of new language features\n    - Risks of known bugs\n    \n    Use a simple pragma version that allows any of these versions.\n    Consider using the latest version of Solidity for testing."
      },
      {
        "description": "Pragma version0.4.24 (cvc/SWC/swc-113-dos/send_loop.sol#7) allows old versions\n",
        "check": "solc-version",
        "impact": "Low",
        "swc-issue": "swc-102 Outdated Compiler Version",
        "recommend": "Deploy with any of the following Solidity versions:\n    - 0.8.18\n    \n    The recommendations take into account:\n    - Risks related to recent releases\n    - Risks of complex code generation changes\n    - Risks of new language features\n    - Risks of known bugs\n    \n    Use a simple pragma version that allows any of these versions.\n    Consider using the latest version of Solidity for testing."
      },
      {
        "description": "Loop condition x < refundAddresses.length (cvc/SWC/swc-113-dos/send_loop.sol#20) should use cached array length instead of referencing `length` member of the storage array.\n ",
        "check": "cache-array-length",
        "impact": "Low",
        "swc-issue": "swc-113 DoS with Failed Call",
        "recommend": "Cache the lengths of storage arrays if they are used and not modified in `for` loops."
      }
    ]
  }
}