Summary

The withdraw function allows the campaign creator to withdraw funds without enforcing restrictions on the fund status. This lack of conditionals opens the door to premature or unauthorized fund access.

Vulnerability Details

The code permits the withdrawal of all raised funds by the creator without verifying if the fundraising period has ended or if the funding goal has been met.

Impact

The creator might withdraw funds before the campaign concludes or reach the goal, which could lead to loss of trust among contributors.

Tools Used

Manual code review

Recommendations

Implement strict conditions that only allow withdrawals after the campaign’s deadline or once the funding goal is reached.