Submission Details
Severity:
Improper implementation of getPassword function
Summary:
getPassword() function is not properly implemented.
Vulnerability Details:
The function is supposed to return the password, but instead, it reverts with the PasswordStore__NotOwner error if the sender is not the owner.
Impact:
This means that the password cannot be retrieved by the owner either.
Tools Used:
Replit IDE, Foundry, Remix, PhindAI
Recommendations:
function getPassword() external view returns (string memory) {
require(msg.sender == s_owner, "This function can only be called by the owner");
return s_password;
}
The getPassword() function now returns the password if the sender is the owner. If the sender is not the owner, it returns the error statement.
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.