Submission Details
Severity:
Missing Contribution Amount Tracking
Description
The contribution.amount field is initialized to 0 but never updated, even after a contributor sends SOL to the fund. This breaks refund logic and contribution tracking.
Impact
Incorrect Refunds: Contributors will receive
0SOL on refund, even if they contributed multiple times.Loss of Trust: Contributors cannot verify their total contributions.
Affected Code
// Line 41
// Initialize contribution.amount to 0
contribution.amount = 0;
// Missing: Update contribution.amount after transfer
Recommendation
Update contribution.amount using checked_add:
contribution.amount = contribution.amount
.checked_add(amount)
.ok_or(ErrorCode::CalculationOverflow)?;
Updates
Appeal created
bube 3 months ago
Submission Judgement Published Assigned finding tags:
Contribution amount is not updated
Rewards breakdown
nSLOC
170This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.