RustFund
First Flight #36
Beginner FriendlyRust
100 EXP
View results
Previous Next
Submission Details
Severity: high
Valid

Implicit Campaign Failure Assumption in RustFund Contract

osuolale

Summary

The refund function assumes campaign failure if the deadline passes, without explicitly checking goal status.

Vulnerability Details:
The vulnerable code is in the refund function:

rust

if ctx.accounts.fund.deadline != 0 && ctx.accounts.fund.deadline > Clock::get().unwrap().unix_timestamp.try_into().unwrap() {
return Err(ErrorCode::DeadlineNotReached.into());
}

  • Implicit Logic: No amount_raised < goal check.

Impact:

  • Logic Disruption: Misaligns with "goals aren't met" requirement.

Tools Used: Manual Review

Recommendations:
See "Refund Goal Check Missing" report for fix.

Updates

Lead Judging Commences

bube Lead Judge
2 months ago

Appeal created

bube Lead Judge 2 months ago
Submission Judgement Published
Validated
Assigned finding tags:

There is no check for goal achievement in `refund` function

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.