Submission Details
Severity:
Potential integer overflow
Summary
Lack of explicit overflow protection when updating fund amounts.
Vulnerability Details
Simple addition of fund.amount_raised += amount without explicit overflow checks.
Impact
Unexpected behavior with large contribution amounts and accounting inconsistencies
Tools Used
Manual Code Review
Recommendations
Use checked_add() instead of +=
Updates
Appeal created
bube 3 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
[Invalid] Arithmetic overflow in `contribute` function
The max value of u64 is: 18,446,744,073,709,551,615 or around 18.4 billion SOL, given that the total supply of SOL on Solana is 512.50M, the scenario when the `contribute` function will revert due to overflow is very very unlikely to happen. Therefore, this is informational finding.
Rewards breakdown
nSLOC
170This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.