RustFund

Summary

Because the dealine_set flag never toggles on, the campaign’s deadline can be updated multiple times. The attacker can manipulate time-based logic to bypass intended funding or refund conditions.

Vulnerability Details

• Tightly coupled to the missing deadline_set = true.

• Each repeated call to set_deadline changes the time, disregarding normal constraints.

Impact

• Uncertain End Dates: Sponsors cannot reliably plan for a refund or success condition if the deadline is dynamic.

• Financial Exploitation: The creator, in combination with other vulnerabilities, can keep the window open until they are able to withdraw forcibly and before refunds get triggered.

Tools Used

• Analysis of the set_deadline function.

• Comparison of implementation logic with protocol business logic.

Recommendations

• After correcting the flag setting, ensure that calling the function again generates an error.

• If necessary, add a limit on changing the deadline (for example, only increase, but not decrease).