First Flight #1: PasswordStore

Summary

The PasswordStore.sol contract has a vulnerability where the stored password can be directly read from the contract's storage on the Ethereum blockchain.

Vulnerability Details

The content of the s_password variable can be accessed directly without interacting with the contract's functions.

Exploit scenario:

Initial state:

• The PasswordStore contract is deployed on the Ethereum network.

• The owner has set a private password using the setPassword function.

Step 1: An attacker inspects the storage of the PasswordStore contract directly using the Foundry command

cast storage <ADDRESS> [SLOT]

or Web3

web3.eth.getStorageAt(address, position)

and reads the content of the s_password.

Outcome: The attacker successfully retrieves the password without using the contract's functions.

Impact

The core functionality of the contract, which is to store a password and prevent others from accessing it, is compromised.

Tools Used

Manual review

Recommendations

Do not store passwords directly on the blockchain.