Signed/unsigned arithmetic confusion

Evidence summary #

Solidity 0.8.x has built-in overflow/underflow checks eliminating the most common signed/unsigned confusion vectors. Extensive seven-firm audit coverage makes surviving arithmetic confusion unlikely.

Sources #

Methodology #

Determine whether signed-integer conversions or comparisons where unsigned was intended exist in the deployed bytecode/source.

See the full factor methodology and distribution across all protocols →