First Flight #1: PasswordStore

Summary

The setPassword() function is callable by regular user.Sensitive function to update password should be protected by modifiers e.g onlyOwner()

Vulnerability Details

function setPassword(string memory newPassword) external {
s_password = newPassword;
emit SetNetPassword();
}

Impact

password gets changed

Tools Used

manual audit

Recommendations

use modifiers like onlyOwner() or consider other access control mechanism.