Signed/unsigned arithmetic confusion
Falcon Finance's assessment for RD-F-018 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No static analysis tool run. Solidity 0.8.x prevents overflows but not signed/unsigned confusion. No finding in Zellic or Pashov. Post-TGE contracts unassessable.
Detail #
No Slither/Manticore/Echidna output available. Solidity 0.8.x checked arithmetic prevents integer overflows but does not prevent explicit signed-to-unsigned or unsigned-to-signed casts used incorrectly. No finding in either audit. Cannot assess post-TGE contracts.
Sources #
- Audit
Methodology #
Determine whether signed-integer conversions or comparisons where unsigned was intended exist in the deployed bytecode/source.
See the full factor methodology and distribution across all protocols →