dela icon indicating copy to clipboard operation
dela copied to clipboard

Value contract allows overwriting arbitrary keys in store

Open pierluca opened this issue 2 years ago • 0 comments

The value contract does not prefix the keys provided by the smart contract user to store a value. As such, a malicious user could overwrite any key/value combination in the store, including other contracts'.

This is a non-critical because the value contract is a toy contract and not used in production, but it should be addressed nonetheless.

pierluca avatar Jul 24 '23 10:07 pierluca