Deadline is never set
Summary
After setting a deadline for a fund campaign, the fund.deadline_set flag doesn’t flip to true, so the campaign acts like it has no deadline.
Vulnerability Details
In set_deadline, the code sets fund.deadline but doesn't update the fund.dealine_set to true. It’s stuck on false, so the program doesn’t register that a deadline’s been set.
2025-03-rustfund/programs/rustfund/src/lib.rs at main · CodeHawks-Contests/2025-03-rustfund
Impact
The campaign can keep going forever, contributions or refunds will ignore the deadline since deadline_set stays false. Plus, the creator could change the deadline over and over.
Tools Used
Recommendations
Add fund.deadline_set = true in set_deadline.
Appeal created
Deadline set flag is not updated in `set_deadline` function
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.