First Flight #1: PasswordStore

Summary

We are not checking if the password has a minimum length.
This is crucial to prevent blank or weak passwords.

Vulnerability Details

Inside the 'setPassword' function there is no check implemented to verify that the password is not a blank one.
So someone could accidentally set a blank password which would result in a potential critical exploit.

Impact

Very High impact as this is critical to a secure system.
Without a password this contract can and will be exploited sooner or later.

Tools Used

Vs Code
Foundry

Recommendations

Implement a check to verify the password has a minimum length of 8 characters for example.
This way a user can not set a blank password and be vulnerable to a hack/exploit.