Submission Details
Severity:
Deadline can be edited anytime
Summary
Vulnerability Details
In this function https://github.com/CodeHawks-Contests/2025-03-rustfund/blob/main/programs/rustfund/src/lib.rs#L57 - the deadline_set flag is never set to true.
Impact
A creator can change the deadline anytime.
Tools Used
Manual review
Recommendations
Either set the deadline_setflag to true in the function above or check for a non 0 deadline value.
Updates
Appeal created
bube 6 months ago
Submission Judgement Published Assigned finding tags:
Deadline set flag is not updated in `set_deadline` function
Rewards breakdown
nSLOC
170This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.