Solidity

1 post in the catalog

Each feed is checked for new posts. Every post is read, and those that belong here join the catalog. What Trove read and did not keep stays on file, not shown.

soliditylang.orgadvisory

Yul Optimizer Knowledge Base Stale Bookkeeping Bug

Solidity advisory on a Yul optimizer bug in the KnowledgeBase, present in versions 0.8.19 to 0.8.37 and fixed in 0.8.38. Stale cached address offsets let LoadResolver and EqualStoreEliminator treat coinciding memory or storage slots as distinct, so loads return outdated values or needed stores are dropped. It includes a pure-Solidity reproducer for --via-ir, a Sourcify scan with no differing bytecode, and checks for deployed contracts. Rated low severity.

SolidityYulSourcify+1

Ethereum Foundation bug bountyDaniel BoyeSurya Prakash Akula+4

AppSec· 2026-10-22T00:00:00+00:00