Submission Details
Severity:
QA/LOW: Misleading comment at L23, because anyone can set the password, no access control.
Summary
@notice This function allows only the owner to set a new password.
Until the contract is fixed and access control added to the set password function, the above comment is misleading.
Vulnerability Details
n/a
Impact
n/a
Tools Used
VSC.
Recommendations
Ugrade/fix the contract with the relevant access controls, as shown in my other finding regarding access control, then this comment will be in line with contract's logic.
Updates
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.