Submission Details
Severity:
No password empty check
Summary
No check for empty password
Vulnerability Details
The contract allows an empty password to be set. This could be intentional but the owner might not want his password completely wiped out.
Impact
Medium Risk
Tools Used
vscode, forge
Recommendations
consider adding a check for newPassword!="" and revert if it is the empty string.
Updates
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.