Submission Details
Severity:
fund.deadline can be updated multiple times
Summary
The set_deadline function fails to update the deadline_set flag after setting a deadline, potentially breaking contract logic that relies on this flag.
Vulnerability Details
Despite checking for an existing deadline, the function does not update the dealine_set flag to true after setting a new deadline. This can lead to deadline updation of deadline multiple times.
Impact
The deadline can be set multiple time, thus making the dealine_set validation redundent.
Tools Used
Manual
Recommendations
Explicitly set the deadline_set flag to true after successfully setting a deadline.
- Ok(())
+ fund.deadline_set = true;
+ Ok(())
Updates
Appeal created
bube 8 months ago
Submission Judgement Published Assigned finding tags:
Deadline set flag is not updated in `set_deadline` function
Rewards breakdown
nSLOC
170This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.