First Flight #1: PasswordStore

Summary

The PasswordStore::setPassword function should check to see if the caller of the function is also the owner of the contract.

Vulnerability Details

An attacker can call setPassword and change the password.

Impact

Can change the password and impact the protocol's main functionality

Tools Used

Foundry

Recommendations

setPassword should use the same condition and revert method as the getPassword function.
``Diff

• function setPassword(string memory newPassword) external {
  if (msg.sender != s_owner) {
  revert PasswordStore__NotOwner();
  }
  s_password = newPassword;
  emit SetNetPassword();
  }