Submission Details
Severity:
Initial password is shared in the project documents causing anyone to see the password
Summary
"myPassword" is shared in the DeployPasswordStore.s.sol script.
Vulnerability Details
The initial password which will be set with the help of deploy script DeployPasswordStore.s.sol is already shared in the project github.
Impact
Since the git repository is public, everyone has access to the project documents. This allows everyone to see the initial password which will be set during the deployment of the contract.
Tools Used
Github
Manual audit
Recommendations
Sensitive data should not be recorded in git repositories even if the repository is private.
Updates
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.