Submission Details
Severity:
Deadline Set Flag Not Updated
Summary
The dealine_set flag (typo in field name) is never updated, allowing multiple deadline modifications.
Vulnerability Details
Typo in
dealine_setfield (should bedeadline_set)The
set_deadlinefunction never sets this flag to true, allowing repeated calls to modify the deadline.
Impact
Creators can arbitrarily extend campaign deadlines, potentially trapping contributor funds indefinitely.
Tools Used
Manual code review
Recommendations
Rename field to
deadline_setUpdate flag in
set_deadline
fund.deadline_set = true;
Updates
Appeal created
bube 5 months ago
Submission Judgement Published Assigned finding tags:
Deadline set flag is not updated in `set_deadline` function
Rewards breakdown
nSLOC
170This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.