`fund.amount` is not updated after `refund`
Summary
The refund function fails to update the total fund's amount_raised when processing individual contributor refunds, leading to incorrect accounting. This can cause an issue when withdrawing the funds,
Vulnerability Details
When a contributor receives a refund, the amount_raised remains unchanged. This creates a critical discrepancy that could allow withdrawing more funds than actually available.
Impact
The contract may overstate total funds raised and prevent accurate tracking of remaining fund balance.
Tools Used
Manual
Recommendations
Explicitly subtract the refunded amount from the total amount_raised to maintain accurate fund tracking.
Appeal created
`amount_raised` not updated in `refund` function
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.