Submission Details
Severity:
No validtion of the input of function `setPassword`
Summary
No validtion of the input of function setPassword
Vulnerability Details
There is no input validation when function setPassword is being called.
Impact
Anyone can call the function right now and set the password value into anything including empty string.
This can break the protocol.
Tools Used
Manual review
Recommendations
+ error PasswordStore__InvalidValue();
function setPassword(string memory newPassword) external {
+ if (newPassword == password || newPassword == '') revert PasswordStore__InvalidValue();
s_password = newPassword;
emit SetNetPassword();
}
Updates
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.