Signed/unsigned arithmetic confusion
mETH Protocol's assessment for RD-F-018 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No signed/unsigned confusion finding in accessible audit summaries. Solidity 0.8.x has built-in overflow/underflow protection. No manual int→uint casting identified in source inspection. Cannot confirm without independent static analysis tool run.
Sources #
- GitHubMixBytes Mantle METH Audit — no signed/unsigned findingMixBytes audit — no signed/unsigned confusion finding listedretrieved 2026-05-16
Methodology #
Determine whether signed-integer conversions or comparisons where unsigned was intended exist in the deployed bytecode/source.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol meth-protocol factor RD-F-018 score gray collected_at 2026-05-16 02:17:50