What is a CodeHawks First Flight?

First Flights are 7 days long smart contracts auditing challenges characterised by smaller codebases and different rewards mechanisms from our standard smart contract auditing competitions, making them the perfect testing and learning ground for any aspirant smart contract security auditor.

Every week a new First Flight is announced and will be available on the codehawks.com platform to join for 7 days.

Differently from the CodeHawks smart contract auditing competitions, First Flights do not come with monetary prize pools but grant participants a multiplier on the XP earned by submitting findings.

For more information: CodeHawks Docs

First Flight #1: PasswordStore

Contest Details

Prize Pool

2x XP/Finding!
High - 200xp
Medium - 40xp
Low - 4xp
Starts: 00:00 UTC Wednesday, Oct 18 2023
Ends: 00:00 UTC Wednesday, Oct 25 2023

Stats

nSLOC: 20
Complexity Score: 10

PasswordStore

A smart contract application for storing a password. Users should be able to store a password and then retrieve it later. Others should not be able to access the password.

Contest Details
- Prize Pool
- Stats
PasswordStore
Getting Started
- Requirements
- Quickstart
  - Optional Gitpod
Usage
- Deploy (local)
- Testing
  - Test Coverage
Audit Scope Details
- Compatibilities
Roles
Known Issues
- Create the audit report

Getting Started

Requirements

git
- You'll know you did it right if you can run git --version and you see a response like git version x.x.x
foundry
- You'll know you did it right if you can run forge --version and you see a response like forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)

Quickstart

git clone https://github.com/Cyfrin/2023-10-PasswordStore
cd 2023-10-PasswordStore
forge install foundry-rs/forge-std --no-commit
forge build

Optional Gitpod

If you can't or don't want to run and install locally, you can work with this repo in Gitpod. If you do this, you can skip the clone this repo part.

Usage

Deploy (local)

Start a local node

make anvil

Deploy

This will default to your local node. You need to have it running in another terminal in order for it to deploy.

make deploy

Testing

forge test

Test Coverage

forge coverage

and for coverage based testing:

forge coverage --report debug

Audit Scope Details

Commit Hash: 2e8f81e263b3a9d18fab4fb5c46805ffc10a9990
In Scope:

./src/
└── PasswordStore.sol

Compatibilities

Solc Version: 0.8.18
Chain(s) to deploy contract to: Ethereum

Roles

Owner - Only the owner may set and retrieve their password

Known Issues

None

Create the audit report

View the audit-report-templating repo to install all dependencies.

cd audits
pandoc 2023-09-01-password-store-report.md -o report.pdf --from markdown --template=eisvogel --listings

Rank	Username
1	b bhvrvt	480	2 (0)	0 (0)	0
2	C Ciara	480	2 (0)	0 (0)	0
3	d dianivanov	406	2 (0)	0 (0)	1
4	C Cosine	400	2 (0)	0 (0)	0
5	V VIELITE	400	2 (0)	0 (0)	0
6	k kamuik16	400	2 (0)	0 (0)	0
7	r ret2basic	400	2 (0)	0 (0)	0
8	0 0xDimo	400	2 (0)	0 (0)	0
9	a anarcheuz	400	2 (0)	0 (0)	0
10	n nisedo	400	2 (0)	0 (0)	0
11	k kevinkien	400	2 (0)	0 (0)	0
12	x x0rd3v1l	400	2 (0)	0 (0)	0
13	C Chandr	400	2 (0)	0 (0)	0
14	n notvalidaccount	400	2 (0)	0 (0)	0
15	p priker	400	2 (0)	0 (0)	0
16	f funkornaut	400	2 (0)	0 (0)	0
17	a atrixs	400	2 (0)	0 (0)	0
18	M Magnetto	400	2 (0)	0 (0)	0
19	Z Zac369	400	2 (0)	0 (0)	0
20	g gin	400	2 (0)	0 (0)	0
21	T Timenov	400	2 (0)	0 (0)	0
22	0 0xkeesmark	400	2 (0)	0 (0)	0
23	a abhishekthakur	400	2 (0)	0 (0)	0
24	a adilc	400	2 (0)	0 (0)	0
25	N Nachoddiaz	400	2 (0)	0 (0)	0
26	f fedebianu	400	2 (0)	0 (0)	0
27	P Proxy	400	2 (0)	0 (0)	0
28	M MrPotatoMagic	400	2 (0)	0 (0)	0
29	0 0x6a70	400	2 (0)	0 (0)	0
30	t tsar	400	2 (0)	0 (0)	0
31	a aaa	400	2 (0)	0 (0)	0
32	b bLnk	400	2 (0)	0 (0)	0
33	A ABA	400	2 (0)	0 (0)	0
34	0 0xTheBlackPanther	400	2 (0)	0 (0)	0
35	E ElHaj	400	2 (0)	0 (0)	0
36	a asamd	400	2 (0)	0 (0)	0
37	A Aamirusmani1552	400	2 (0)	0 (0)	0
38	p pacelliv	400	2 (0)	0 (0)	0
39	g gabr1sr	400	2 (0)	0 (0)	0
40	l light	400	2 (0)	0 (0)	0
41	b bytes1	400	2 (0)	0 (0)	0
42	S SaudxInu	400	2 (0)	0 (0)	0
43	0 0xhuy0512	400	2 (0)	0 (0)	0
44	I IvanFitro	400	2 (0)	0 (0)	0
45	T Testerbot	400	2 (0)	0 (0)	0
46	h happyformerlawyer	400	2 (0)	0 (0)	0
47	l lordforever	400	2 (0)	0 (0)	0
48	D Davide	400	2 (0)	0 (0)	0
49	0 0xloscar01	400	2 (0)	0 (0)	0
50	a ararara	400	2 (0)	0 (0)	0
51	y yongtaufoo	400	2 (0)	0 (0)	0
52	r rufflabs	400	2 (0)	0 (0)	0
53	l longzai	400	2 (0)	0 (0)	0
54	A Andrew	400	2 (0)	0 (0)	0
55	0 0xjacopod	400	2 (0)	0 (0)	0
56	0 0xMitch	400	2 (0)	0 (0)	0
57	d dalaillama	400	2 (0)	0 (0)	0
58	t tpiliposian	400	2 (0)	0 (0)	0
59	m musashi	400	2 (0)	0 (0)	0
60	A Arav	400	2 (0)	0 (0)	0
61	A Aitor	400	2 (0)	0 (0)	0
62	a aethrouzz	400	2 (0)	0 (0)	0
63	K KiteWeb3	400	2 (0)	0 (0)	0
64	l lileth	400	2 (0)	0 (0)	0
65	P Polaristow	400	2 (0)	0 (0)	0
66	s slasheur	400	2 (0)	0 (0)	0
67	m merklebonsai	400	2 (0)	0 (0)	0
68	L Luka	400	2 (0)	0 (0)	0
69	M MikeDougherty	400	2 (0)	0 (0)	0
70	p polarzero	400	2 (0)	0 (0)	0
71	Z ZedBlockchain	400	2 (0)	0 (0)	0
72	I IceBear	400	2 (0)	0 (0)	0
73	0 00decree	400	2 (0)	0 (0)	0
74	S Silverwind	400	2 (0)	0 (0)	0
75	l lealCodes	400	2 (0)	0 (0)	0
76	i iLoveMiaGoth	400	2 (0)	0 (0)	0
77	l ljj	400	2 (0)	0 (0)	0
78	0 0xJimbo	400	2 (0)	0 (0)	0
79	s sonny2k	400	2 (0)	0 (0)	0
80	0 0xVinylDavyl	400	2 (0)	0 (0)	0
81	b blocktivist	400	2 (0)	0 (0)	0
82	0 0xGhali	400	2 (0)	0 (0)	0
83	m merlinboii	400	2 (0)	0 (0)	0
84	a acu	400	2 (0)	0 (0)	0
85	j jnrlouis	400	2 (0)	0 (0)	0
86	r robbiesumner	400	2 (0)	0 (0)	0
87	E Eric	400	2 (0)	0 (0)	0
88	H HandsomeGiraffe	400	2 (0)	0 (0)	0
89	E Ericselvig	400	2 (0)	0 (0)	0
90	t trauki	400	2 (0)	0 (0)	0
91	n nervouspika	400	2 (0)	0 (0)	0
92	z zxarcs	400	2 (0)	0 (0)	0
93	s shikhar229169	400	2 (0)	0 (0)	0
94	O Osora9	400	2 (0)	0 (0)	0
95	e eeshenggoh	400	2 (0)	0 (0)	0
96	0 0xbjorn	400	2 (0)	0 (0)	0
97	Z ZdravkoHr	400	2 (0)	0 (0)	0
98	d dcheng	400	2 (0)	0 (0)	0
99	n nmirchev8	400	2 (0)	0 (0)	0
100	s stakog	400	2 (0)	0 (0)	0

First Flight #1

First Flight #1: PasswordStore

What is a CodeHawks First Flight?

First Flight #1: PasswordStore

Contest Details

Prize Pool

Stats

PasswordStore

Getting Started

Requirements

Quickstart

Optional Gitpod

Usage

Deploy (local)

Testing

Test Coverage

Audit Scope Details

Compatibilities

Roles

Known Issues

Create the audit report

Leaderboard

Findings

Owner's password stored in th...

Anyone can set the password b...

Initialization Timeframe Vuln...