RustFund

First Flight #36
Beginner FriendlyRust
100 EXP
View results
Submission Details
Severity: medium
Valid

set_deadline does not update the deadline_set bool

Summary

set_deadline does not update the deadline_set bool

Vulnerability Details

After setting a deadline, the fund struct is not correctly tracking whether the deadline is set or not.

Impact

The creator can set a deadline and then unexpectedly change it whenever they want. This effectively means that they can withdraw all funds from the fund at any point once the goal is reached which goes against what the contributors would expect.

Tools Used

N/A

Recommendations

Add fund.dealine_set = true;to the end of the set deadline function.

Updates

Appeal created

bube Lead Judge 2 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Deadline set flag is not updated in `set_deadline` function

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.