Submission Details
Severity:
test_owner_can_set_password() doesn't check non-owner
Summary
This test only checks the case when owner sets the password.
Vulnerability Details
Test doesn't check any other address except the owner's one. It is equally important to check a non-owner scenario.
Impact
This incomplete test results in the function setPassword() to keep working and not generating an error.
Tools Used
Manual check.
Recommendations
Add a check with non-owner address, e.g. vm.startPrank(address(1)).
Updates
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.