GivingThanks

Summary

The CharityRegistry contract does not currently emit any events to track important state changes. Implementing event emission is crucial for improving the contract's auditability and transparency.

Vulnerability Details

The contract does not emit any events to track important state changes, such as when a charity is registered, verified, or when the admin is changed.

Impact

Without events, it is difficult for users, donors, and auditors to track when a charity has been registered, verified, or when the admin has been changed. This can reduce trust, especially in a charitable setting where transparency is key to donor confidence.

Tools Used

• Manual Review

Recommendations

Implement event emission in the CharityRegistry contract like this:

Then emit the appropriate events in the corresponding functions:

• Emit the CharityRegistered event in the registerCharity() function.

• Emit the CharityVerified event in the verifyCharity() function.

• Emit the AdminChanged event in the changeAdmin() function.