Submission Details
Severity:
Access control
Summary
Add the require statement or the if-revert statement in the setPassword function. Because only the owner can set the password.
Vulnerability Details
if(msg.sender != s_owner) {
revert PasswordStore_NotOwner();
}
Impact
If you not written require statement. Anybody can set the password.
Tools Used
Mannual
Recommendations
Add Checks. Follow checks, effects, interactions.
Updates
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.