RustFund

First Flight #36
Beginner FriendlyRust
100 EXP
View results
Submission Details
Severity: medium
Valid

Inconsistent Refund and Contribution Tracking

Summary: The refund function doesn't properly update the fund's amount_raised when issuing refunds.

Vulnerability Details: When a refund is processed, the function updates the contributor's and fund's lamport balances but doesn't decrease the amount_raised field in the fund account

Impact: This creates an inconsistency between the fund's actual balance and its recorded amount_raised. This can lead to accounting errors and could impact the contract's overall state integrity.

Tools Used

Recommendations: Update the fund's amount_raised field when processing refunds

Updates

Appeal created

bube Lead Judge 5 months ago
Submission Judgement Published
Validated
Assigned finding tags:

`amount_raised` not updated in `refund` function

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.