No update in fund.amount_raised field after transferring funds
Summary:
Hi,
I have found out a potential bug in withdraw and refund functions of the smart contract having no update state after transfer of funds.
Vulnerability Details:
The withdraw and refund functions do not update the fund.amount_raised field after transferring funds out of the fund account. This means the amount_raised field does not accurately reflect the current balance of the fund.
Impact:
Misleading accounting can confuse users and potentially allow double-spending or incorrect refund calculations.
Tools Used:
Manual review
Recommendations:
In the
withdrawfunction, resetfund.amount_raisedto zero after withdrawal.In the
refundfunction, subtract the refunded amount fromfund.amount_raised.
Appeal created
`amount_raised` is not reset to 0 in `withdraw` function
`amount_raised` not updated in `refund` function
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.