Omniscia Hot Cross Audit

Compilation

Compilation

The project utilizes truffle as its development pipeline tool, containing an array of tests and scripts coded in JavaScript.

To compile the project, the compile command needs to be issued via the truffle CLI tool:

truffle compile

The truffle tool automatically selects Solidity version 0.8.3 based on the version specified within the truffle-config.js file.

The project contains discrepancies with regards to the Solidity version used as the pragma statements differ between them, however, they are restricted to dependencies and can be safely ignored.

We utilized 0.8.3 for our static analysis as well as optimizational review of the codebase.

We observed certain sensitive keys being revealed in the truffle-config.js file and we strongly urge the Hot Cross team to alter git history if they intend to publicize the repository publicly.