Based on this recommendation by Trail of Bits, of using Solidity version 0.5, over 0.4 and 0.6 for production, I decided to write my contracts in Solidity version 0.5. Now, when I want to use OZ’s SafeMath library for my contracts, I only find them with pragma solidity ^0.6.0;, and NOT with pragma …

Hi @smitrajput , I would check if the Solidity 0.5 recommendation still applies as it appears this was last updated in March. Solidity version 0.6.0 was released in December 2019 and is now at 0.6.12. If you want to use a Solidity 0.5 version of OpenZeppelin Contracts then you can install the 2.x…

Thanks so much @abcoathup . That works. And yes, it will be really helpful if you could confirm that the recommendation still holds, because there have been many releases of Solidity 0.6.x, even after March.

Hi @smitrajput , I suggest checking that recommendation with Trail of Bits about not using Solidity 0.6 to see if their recommendation has changed. As an aside, Solidity 0.7 was released today.

:joy: I’m pretty confused rn. Anyways, yes, I’ll check the recommendation with the team themselves. And thanks for the Solidity 0.7 release update.

Hi @smitrajput , Sorry that you are confused. I currently recommend using OpenZeppelin Contracts 3.x with Solidity 0.6. Let me know if you hear anything more about the recommendation to use Solidity 0.5.

Thanks for the recommendation. And yes, I’ll definitely update you on the Solidity 0.5 recommendation.

Hi @smitrajput , I wanted to share with you the following recommendation: [image] Recommended Solidity version for security conscious contracts Support Hi @junderw , Checking with the OpenZeppelin Research team and their recommendation is either the latest Solidity 0.5 or …

That helps. Thanks a lot. I conclude using latest Solidity version 0.6 from that. I’d also like to bring your attention to another question I had asked here, regarding using OZ’s SafeERC20 contracts: this is the link to that question

Hi @smitrajput , I have moved your question to a new topic: Issue calling Transfer function in the USDT contract as it is best to have one topic per question, otherwise they can get a bit lost and make it hard for the community to answer.

That’s actually better. Thanks.

How to use SafeMath lib for Solidity version 0.5?

Support Contracts

abcoathup August 7, 2020, 2:48am 8

Hi @smitrajput,

I wanted to share with you the following recommendation:

Topic		Replies	Views
SafeMath in Solidity <0.8 Contracts	1	2810	December 9, 2021
Recommended Solidity version for security conscious contracts Support design	4	5073	August 7, 2020
OpenZeppelin forcing Solidity version upgrade to v0.5.7 Announcements	0	1621	April 16, 2019
How to specify the version of imported OpenZeppelin Contracts? Contracts	9	13830	December 21, 2021
SafeMath compiler collision with older openzeppelin dependencies, Foundry project Smart Contracts	0	559	August 16, 2022

How to use SafeMath lib for Solidity version 0.5?

Related topics