First Flight #1: PasswordStore

Summary

The PasswordStore smart contract contains a typo in the event name. It emits an event called SetNetPassword() instead of SetNewPassword(). This typographical error might lead to confusion and should be corrected for clarity and consistency.

Vulnerability Details

The event SetNetPassword() is emitted when a new password is set in the PasswordStore contract. However, the event name contains a typo ("Net" instead of "New"). Event names serve as a way to communicate and log activities within the contract. A typo in the event name can lead to confusion and misinterpretation when reviewing or monitoring these events.

Impact

The impact of this typo is more on clarity and consistency than on security.

Tools Used

Manual code review.

Recommendations

Correct the typo in the event name from SetNetPassword() to SetNewPassword() for consistency and clarity.