Submission Details
Severity:
No event emitted upon password change
Summary:
No event emitted upon password change
Vulnerability Details:
The setPassword() function does not emit any event when the password is changed.
Impact:
This makes it difficult to track changes to the password.
Tools Used:
Replit IDE, Foundry, Remix, PhindAI
Recommendations:
// event correctly specified
event SetPassword(address indexed _by, string _password);
// event properly implemented in `setPassword function
function setPassword(string memory newPassword) external {
require(msg.sender == s_owner, "This function can only be called by the owner");
s_password = newPassword;
emit SetPassword(msg.sender, newPassword);
}
Updates
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.