Christmas Dinner

Location

Issue

• The contract allows the Host to withdraw all funds from the contract at any time, regardless of whether the deadline has passed.

• While this might be intentional, it poses a risk that the Host could “rug-pull” before the event or even before the deadline, leaving participants without recourse.

Impact

• Participants might lose confidence or funds if the Host withdraws prematurely.

• The original intent (“No Backsies,” and ensuring the funds are used for the event) could be undermined if the Host is malicious.

Recommendation

• Require that withdraw() can only be called after the deadline (or a grace period):

  modifier afterDeadline() {

  require(block.timestamp > deadline, "Cannot withdraw before deadline");

  _;

  }

  ​

  function withdraw() external onlyHost afterDeadline {

  ...

  }

• Alternatively, allow early withdrawal only if certain conditions are met (e.g., majority consent via an off-chain or on-chain vote).