Submission Details
Severity:
Events not emitting caller information
Summary
Events need to emit detailed information like the caller of the function
Vulnerability Details
function setPassword(string memory newPassword) external {
s_password = newPassword;
emit SetNetPassword();
}
When password is set, event does not give information of the caller who is the msg.sender
Impact
This may have usability, monitoring, off-chain tooling problems, front end problems and even security. For example security tooling if caller is logged can react to password being changed when not expected to be changed or by address not expected etc
Tools Used
Manual Analysis
Recommendations
Event emit caller information
event SetNetPassword(address indexed caller);
....
emit SetNetPassword(msg.sender);
Updates
Lead Judging Commences
inallhonesty
about 2 years ago
aballok
about 2 years ago
inallhonesty
about 2 years ago
aballok
about 2 years ago
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.