{"analyzer_versions":{"semgrep":"1.163.0"},"body":{"counts":{"access-control":0,"centralization":0,"flash-loan":0,"front-running":0,"gas-dos":0,"logic":1,"math-overflow":0,"oracle-manipulation":0,"other":0,"reentrancy":1,"timestamp-dependence":0,"unchecked-call":2,"uninitialized":0},"findings":[{"class":"reentrancy","description":"Reentrancy in Reentrance.withdraw(uint256) (Reentrance.sol#3):\n\tExternal calls:\n\t- (ok,None) = msg.sender.call{value: amount}() (Reentrance.sol#3)\n\tState variables written after the call(s):\n\t- balances[msg.sender] -= amount (Reentrance.sol#3)\n\tReentrance.balances (Reentrance.sol#3) can be used in cross function reentrancies:\n\t- Reentrance.balances (Reentrance.sol#3)\n\t- Reentrance.deposit() (Reentrance.sol#3)\n\t- Reentrance.withdraw(uint256) (Reentrance.sol#3)\n","file":"Reentrance.sol","id":"10071287073f93fcc57b572abfd9512b7d6d8adc6702c7d51ec1c82aaf616cb6","line":3,"references":["https://github.com/crytic/slither/wiki/Detector-Documentation#reentrancy-eth"],"rule_id":"slither:reentrancy-eth","severity":"high","source":"slither","title":"Reentrancy in Reentrance.withdraw(uint256) (Reentrance.sol#3):"},{"class":"unchecked-call","description":"Low-level .call to an externally-controlled target. Combined with reentrancy or unchecked return values, this is a common fund-draining pattern.","file":"Reentrance.sol","id":"6f4ae2520fdeb83172fc21910d2241de1e45af07969313bc381bec79fadea17a","line":3,"references":["https://github.com/JE4NVRG/vegasec/blob/main/apps/web/src/lib/risk/solidity/semgrep-rules/vegasec-solidity.yml#vegasec-low-level-call-untrusted"],"rule_id":"semgrep:vegasec-low-level-call-untrusted","severity":"medium","source":"semgrep","title":"Low-level"},{"class":"logic","description":"Version constraint 0.8.19 contains known severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)\n\t- VerbatimInvalidDeduplication\n\t- FullInlinerNonExpressionSplitArgumentEvaluationOrder\n\t- MissingSideEffectsOnSelectorAccess.\nIt is used by:\n\t- 0.8.19 (Reentrance.sol#2)\n","file":"Reentrance.sol","id":"4dbdc121adf5044f0cae2c57d5ff574185743f9413ce0244f107e57581d12056","line":2,"references":["https://github.com/crytic/slither/wiki/Detector-Documentation#solc-version"],"rule_id":"slither:solc-version","severity":"informational","source":"slither","title":"Version constraint 0.8.19 contains known severe issues (https://solidity.readthedocs.io/en/latest/bugs.html)"},{"class":"unchecked-call","description":"Low level call in Reentrance.withdraw(uint256) (Reentrance.sol#3):\n\t- (ok,None) = msg.sender.call{value: amount}() (Reentrance.sol#3)\n","file":"Reentrance.sol","id":"f569251b73e59f4aa3525f5dfa902c7a3b0fe84f2c4cc4d9810019dae8d647dd","line":3,"references":["https://github.com/crytic/slither/wiki/Detector-Documentation#low-level-calls"],"rule_id":"slither:low-level-calls","severity":"informational","source":"slither","title":"Low level call in Reentrance.withdraw(uint256) (Reentrance.sol#3):"}],"warnings":[]},"canonical_version":"vss-canonical-1","coverage_status":"unknown","final_score":85,"findings_count":4,"generated_at":"2026-05-27T06:46:08.706Z","id":"VSS-20260527-GVL4COEK","severity_counts":{"critical":0,"high":1,"informational":2,"low":0,"medium":1},"source_filename":"Reentrance.sol","source_hash":"2c11ffa944585d3f6b649c2e7057ad7418012c97948ee5b10a7a4d0e17c87851","surface":"solidity","warnings_count":0}