Registry address is set as msg.sender, but should be another address. I expect it to be initialized as "_registry" . The registry can be change later on, so it is a low severity problem.
Likelyhood: High, the parameter is not well used and won't be set. Impact: Low, can be changed with the setter and no one will be able to donate to malicious charity.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.