Clear Text Password
Summary
The contract stores passwords in clear text. This is insecure because all data stored on the Ethereum blockchain is publicly accessible. Anyone with access to the blockchain data can read the password stored in this contract.
Vulnerability Details
The contract stores passwords in clear text, which is insecure on the publicly accessible Ethereum blockchain.
Impact
The stored passwords are publicly accessible, compromising the security of the contract.
Tools Used
Visual review
Recommendations
Never store sensitive or private information on the blockchain in clear text. Consider using cryptographic hash functions to store a hash of the password instead of the password itself.
Lead Judging Commences
finding-anyone-can-read-storage
Private functions and state variables are only visible for the contract they are defined in and not in derived contracts. In this case private doesn't mean secret/confidential
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.