RustFund
First Flight #36
Beginner FriendlyRust
100 EXP
View results
Previous Next
Submission Details
Severity: high
Invalid

Potential Integer Overflow in Contribution in RustFund Contract

osuolale

Summary

fund.amount_raised += amount lacks overflow protection, risking failure with extreme inputs.

Vulnerability Details:
The vulnerable code is in the contribute function:

rust

fund.amount_raised += amount;

  • No Check: Relies on u64 bounds.

Impact:

  • Logic Disruption: Rare overflow could corrupt state.

Tools Used: Manual Review

Recommendations:
Use checked arithmetic:

rust

fund.amount_raised = fund.amount_raised.checked_add(amount).ok_or(ErrorCode::CalculationOverflow)?;

Updates

Appeal created

bube Lead Judge 2 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

[Invalid] Arithmetic overflow in `contribute` function

The max value of u64 is: 18,446,744,073,709,551,615 or around 18.4 billion SOL, given that the total supply of SOL on Solana is 512.50M, the scenario when the `contribute` function will revert due to overflow is very very unlikely to happen. Therefore, this is informational finding.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.