Submission Details
Severity:
No Explicit Campaign State in RustFund Contract
Summary
The contract lacks an explicit state (e.g., Pending, Active, Failed) to track campaign progress.
Vulnerability Details:
The Fund struct relies on deadline and dealine_set:
rust
pub struct Fund {
pub deadline: u64,
pub dealine_set: bool,
}
Implicit State: deadline = 0 means "not set," but no clear state machine.
Impact:
Logic Clarity: Harder to reason about campaign status.
User Experience: Less transparent to users.
Tools Used: Manual Review
Recommendations:
Add a state enum:
rust
#[derive(AnchorSerialize, AnchorDeserialize, Clone, PartialEq)]
pub enum CampaignState {
Pending,
Active,
Failed,
Succeeded,
}
pub struct Fund {
// ...
pub state: CampaignState,
}
Rewards breakdown
nSLOC
170This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.