First Flight #1: PasswordStore

Summary

In the event SetNetPassword is triggered without including msg.sender as an argument. This omission means that the event does not provide information about who initiated the action of setting a new password.

Vulnerability Details

Including msg.sender in events triggered by user actions can enhance the usefulness of events for end users. This allows for clear identification of the entity initiating the action, providing valuable information about the source of the event. And in this case it will allow the end user to understand who updated the password.

Impact

Not including msg.sender in events triggered by user actions can lead to a lack of crucial information about the initiator of the action.

Tools Used

Manual review

Recommendations

Consider adding msg.sender in the event.