First Flight #1: PasswordStore

Summary

setPassword is using string as input, which is not the most efficient way and can be Dos.

Vulnerability Details

Storing password in term of string is very in-efficeint, lets say user want to store a long password but due to gas constrain he can't do it. He can try as much as he want but he won't be able to store that password as strings are very gas in-efficient.

Impact

Function can be Dossed as user won't be able to set the require password, leading to decreased usability and potentially affecting the overall adoption of the system.

Tools Used

Manual Review

Recommendations

Consider using a more gas-efficient data type, such as bytes32, to store passwords.