Omniscia Hot Cross Audit
Compilation
Compilation
The project utilizes truffle
as its development pipeline tool, containing an array of tests and scripts coded in JavaScript.
To compile the project, the compile
command needs to be issued via the truffle
CLI tool:
truffle compile
The truffle
tool automatically selects Solidity version 0.8.3
based on the version specified within the truffle-config.js
file.
The project contains discrepancies with regards to the Solidity version used as the pragma
statements differ between them, however, they are restricted to dependencies and can be safely ignored.
We utilized 0.8.3
for our static analysis as well as optimizational review of the codebase.
We observed certain sensitive keys being revealed in the truffle-config.js
file and we strongly urge the Hot Cross team to alter git
history if they intend to publicize the repository publicly.