Description

Pyth Solana attester has only one test for the contract main function, attest (located in pyth2wormhole/client/tests/test_attest.rs).

Impact

A comprehensive testsuite covering all functionality is very effective in discovering existing bugs and prevent future ones.

Recommendations

We highly recommend Pyth to develop a comprehensive test-suite with maximum code coverage.

Remediation

The finding has been acknowledged by Pyth Data Foundation. Their official response is reproduced below:

Pyth Data Association acknowledges the finding, but doesn’t believe it has security implications. However, we may deploy a bug fix to address it.