First Flight #1: PasswordStore

Summary

Additional parameters should be included in the SetNetPassword event to facilitate easier status tracking for administrators.

Vulnerability Details

The SetNetPassword event lacks specified parameters, and the emitted events do not provide sufficient details regarding password changes. This deficiency in information can be inconvenient when there is a need to track the progress of password updates.

Impact

As above

Tools Used

Manual Review

Recommendations

Consider adding several useful parameters, like block.timestamp and msg.sender, to the SetNetPassword event to enhance event information and better tracking of password changes.