First Flight #1: PasswordStore

Summary

setPassword function lacks password validation which can cause issue especially if there is a typo while updating the password.

Vulnerability Details

The setPassword function lacks input validation, allowing users to set the password to be the same as the old one or setting a null string as password. This could lead to unnecessary gas consumption and potential confusion for users.

Impact

Without input validation, users are able to update the password even if it remains unchanged. This can result in wasted computational resources.

Tools Used

Manual Review

Recommendations

Implement input validation to ensure that the new password is different from the existing one before updating it and it is not null.