Submission Details
Severity:
Missing Contribution Amount Update
Summary
The contribute function doesn’t update contribution.amount after a contribution.
Vulnerability Details
While fund.amount_raised is updated, contribution.amount remains unchanged after initialization to 0, making it impossible to track individual contributions accurately for refunds.
Impact
Contributors cannot be properly refunded since their contribution amounts aren’t tracked.
Tools Used
Manual Code Review
Recommendations
Update the contribution amount:
contribution.amount = contribution.amount
.checked_add(amount)
.ok_or(ErrorCode::CalculationOverflow)?;
Updates
Appeal created
bube 3 months ago
Submission Judgement Published Assigned finding tags:
Contribution amount is not updated
Rewards breakdown
nSLOC
170This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.