Submission Details
Severity:
QA/LOW: No input validation, user can pass empty string accidentally.
Summary
User can think they've saved their encrypted/unencrypted password, delete their local copies, and never being able to retrieve their password again, because they accidentally entered an empty string for the newPassword parameter.
Vulnerability Details
n/a
Impact
n/a
Tools Used
VSC.
Recommendations
Should add a check in this function to ensure the new password and old password cannot be equal:
function setPassword(string memory newPassword) external {
++ if (newPassword == s_password) revert NewPassword_Equal_OldPassword();
s_password = newPassword;
emit SetNetPassword();
}
Updates
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.