First Flight #1: PasswordStore

Beginner FriendlyFoundry
100 EXP
Submission Details
Severity: high
Valid

Private variable storage does not secure the password on the blockchain and anybody will be able to read it.

Updates

Lead Judging Commences

InAllHonesty Lead Judge
11 months ago
InAllHonesty Lead Judge 11 months ago
Submission Judgement Published
Validated
Assigned finding tags:

finding-anyone-can-read-storage

Private functions and state variables are only visible for the contract they are defined in and not in derived contracts. In this case private doesn't mean secret/confidential

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.