Use locked pragma, security contact, cancun

contracts/common/Decimal.sol

@@ -1,6 +1,9 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
+/**
+ * @custom:security-contact [email protected]
+ */
 library Decimal {
     // unit is used for decimals, e.g. 0.123456
     function unit() internal pure returns (uint256) {

contracts/common/Initializable.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 /**
  * @title Initializable
@@ -12,6 +12,8 @@ pragma solidity ^0.8.9;
  * WARNING: When used with inheritance, manual care must be taken to not invoke
  * a parent initializer twice, or ensure that all initializers are idempotent,
  * because this is not dealt with automatically as with constructors.
+ *
+ * @custom:security-contact [email protected]
  */
 contract Initializable {
     /**

contracts/interfaces/IEVMWriter.sol

@@ -1,6 +1,9 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
+/**
+ * @custom:security-contact [email protected]
+ */
 interface IEVMWriter {
     function setBalance(address acc, uint256 value) external;
 

contracts/interfaces/INodeDriver.sol

@@ -1,6 +1,9 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
+/**
+ * @custom:security-contact [email protected]
+ */
 interface INodeDriver {
     function setGenesisValidator(
         address _auth,

contracts/interfaces/INodeDriverExecutable.sol

@@ -1,6 +1,9 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
+/**
+ * @custom:security-contact [email protected]
+ */
 interface INodeDriverExecutable {
     function execute() external;
 }

contracts/interfaces/ISFC.sol

@@ -1,6 +1,9 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
+/**
+ * @custom:security-contact [email protected]
+ */
 interface ISFC {
     event CreatedValidator(
         uint256 indexed validatorID,

contracts/ownership/Ownable.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {Initializable} from "../common/Initializable.sol";
 
@@ -11,6 +11,8 @@ import {Initializable} from "../common/Initializable.sol";
  * This module is used through inheritance. It will make available the modifier
  * `onlyOwner`, which can be aplied to your functions to restrict their use to
  * the owner.
+ *
+ * @custom:security-contact [email protected]
  */
 contract Ownable is Initializable {
     address private _owner;

contracts/sfc/ConstantsManager.sol

@@ -1,9 +1,12 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {Ownable} from "../ownership/Ownable.sol";
 import {Decimal} from "../common/Decimal.sol";
 
+/**
+ * @custom:security-contact [email protected]
+ */
 contract ConstantsManager is Ownable {
     // Minimum amount of stake for a validator, i.e., 500000 FTM
     uint256 public minSelfStake;

contracts/sfc/GasPriceConstants.sol

@@ -1,8 +1,11 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {Decimal} from "../common/Decimal.sol";
 
+/**
+ * @custom:security-contact [email protected]
+ */
 library GP {
     function trimGasPriceChangeRatio(uint256 x) internal pure returns (uint256) {
         if (x > (Decimal.unit() * 105) / 100) {

contracts/sfc/Migrations.sol

@@ -1,6 +1,9 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
+/**
+ * @custom:security-contact [email protected]
+ */
 contract Migrations {
     address public owner;
     uint256 public lastCompletedMigration;

contracts/sfc/NetworkInitializer.sol

@@ -1,11 +1,14 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {ISFC} from "../interfaces/ISFC.sol";
 import {NodeDriver, NodeDriverAuth} from "./NodeDriver.sol";
 import {ConstantsManager} from "./ConstantsManager.sol";
 import {Decimal} from "../common/Decimal.sol";
 
+/**
+ * @custom:security-contact [email protected]
+ */
 contract NetworkInitializer {
     // Initialize NodeDriverAuth, NodeDriver and SFC in one call to allow fewer genesis transactions
     function initializeAll(

contracts/sfc/NodeDriver.sol

@@ -1,10 +1,13 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {Initializable} from "../common/Initializable.sol";
 import {NodeDriverAuth} from "./NodeDriverAuth.sol";
 import {IEVMWriter} from "../interfaces/IEVMWriter.sol";
 
+/**
+ * @custom:security-contact [email protected]
+ */
 contract NodeDriver is Initializable {
     NodeDriverAuth internal backend;
     IEVMWriter internal evmWriter;

contracts/sfc/NodeDriverAuth.sol

@@ -1,12 +1,15 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {Initializable} from "../common/Initializable.sol";
 import {Ownable} from "../ownership/Ownable.sol";
 import {ISFC} from "../interfaces/ISFC.sol";
 import {NodeDriver} from "./NodeDriver.sol";
 import {INodeDriverExecutable} from "../interfaces/INodeDriverExecutable.sol";
 
+/**
+ * @custom:security-contact [email protected]
+ */
 contract NodeDriverAuth is Initializable, Ownable {
     ISFC internal sfc;
     NodeDriver internal driver;

contracts/sfc/SFC.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {Ownable} from "../ownership/Ownable.sol";
 import {Initializable} from "../common/Initializable.sol";
@@ -11,6 +11,7 @@ import {Version} from "../version/Version.sol";
 
 /**
  * @dev SFC contract for Sonic network.
+ * @custom:security-contact [email protected]
  */
 contract SFC is Initializable, Ownable, Version {
     uint256 internal constant OK_STATUS = 0;

contracts/sfc/Updater.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {Ownable} from "../ownership/Ownable.sol";
 import {Decimal} from "../common/Decimal.sol";
@@ -20,6 +20,9 @@ interface GovVersion {
     function version() external pure returns (bytes4);
 }
 
+/**
+ * @custom:security-contact [email protected]
+ */
 contract Updater {
     address public sfcFrom;
     address public sfcConsts;

contracts/test/StubEvmWriter.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {IEVMWriter} from "../interfaces/IEVMWriter.sol";
 

contracts/test/UnitTestConstantsManager.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {ConstantsManager} from "../sfc/ConstantsManager.sol";
 

contracts/test/UnitTestSFC.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 import {Decimal} from "../common/Decimal.sol";
 import {SFC} from "../sfc/SFC.sol";

contracts/version/Version.sol

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: UNLICENSED
-pragma solidity ^0.8.9;
+pragma solidity 0.8.27;
 
 /**
  * @dev Version contract gives the versioning information of the implementation contract

hardhat.config.ts

@@ -11,9 +11,9 @@ dotenv.config();
 
 const config: HardhatUserConfig = {
   solidity: {
-    version: '0.8.24',
+    version: '0.8.27',
     settings: {
-      evmVersion: 'london',
+      evmVersion: 'cancun',
       optimizer: {
         enabled: true,
         runs: 200,