Submission Details
Severity:
Withdrawal After Refund Misaccounting in RustFund Contract
Summary
Refunds don’t update amount_raised, allowing creators to withdraw refunded amounts.
Vulnerability Details:
See "Fund Amount Raised Not Updated After Refund" for code details.
Impact:
Funds Misallocation: Double-counting of refunded funds.
Tools Used: Manual Review
Recommendations:
See "Fund Amount Raised Not Updated After Refund" report.
Rewards breakdown
nSLOC
170This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.