RustFund

Summary : When a user contributes to a fund, the contribution's amount field is never updated.

Vulnerability Details: In the contribute function, the contribution account is properly initialized, but after the SOL transfer, only the fund's amount_raised is updated. The contribution's amount is never incremented

Impact: This issue causes the refund functionality to fail entirely. Since refunds are based on the amount stored in the contribution account (which remains at 0), contributors will never receive their funds back, effectively losing all contributions if a campaign fails.

Tools Used

Recommendations : Add the following line after updating fund.amount_raised: