RustFund

First Flight #36
Beginner FriendlyRust
100 EXP
View results
Submission Details
Severity: high
Valid

Contributor amount update

Summary

The contribute function does not show the contributor's amount contributed updated as the function is executed

Vulnerability Details

In the contribute function, the contriibute function allows users to contribute thereby creating an account detail for each contributor stating
1. contributor's public key
2. The fund account public key
3. The amount contributed by each contributor

The contribute function does not update the contributor's amount deposited.

Impact

In the refund and withdraw function explicitly show contributor.amount = amount for each account making a contribution as that is what will be used in the refund and witthdraw logic to return the amount donated safely

Tools Used

Manual review , typescript testing

Recommendations

Put logic to implement the changes as they are made real-time

Updates

Appeal created

bube Lead Judge 5 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Contribution amount is not updated

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.