The code doesn't check if the deadline is in the future
Summary
The campaign deadline can be set for a deadline that is in the past.
Vulnerability Details
This function https://github.com/CodeHawks-Contests/2025-03-rustfund/blob/main/programs/rustfund/src/lib.rs#L55 does not check the deadline correctly.
Impact
If the creator set a deadline in the past, it could trigger the refund / withdraw conditions which is not intended process.
Tools Used
Manual review
Recommendations
Check that the deadline: u64 is in the future.
Appeal created
[Invalid] Lack of validation of the `deadline` parameter in `set_deadline` function
The creator has an incentive to pay attention to the deadline and provide correct data. If the `deadline` is set in the past, the campaign will be completed. If there are any funds the creator or the contributors (depending on the success of the campaign) can receive them. It is the creator's responsibility to set correct deadline, otherwise the creator can create a new campaign. There is no impact on the protocol from this missing check, so I consider this to be an informational issue.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.