Submission Details
Severity:
refund logic executes wrong conditional
Summary
refund function executes wrong conditional.
Vulnerability Details
therefundfunction is incorrect because we need to check if the deadline exists and is in the future to NOT revert but it's checking if deadline is not zero and is in the past return error.
if ctx.accounts.fund.deadline != 0 && ctx.accounts.fund.deadline > Clock::get().unwrap().unix_timestamp.try_into().unwrap() {
return Err(ErrorCode::DeadlineNotReached.into());
}
Impact
wrong logic that breaks the program.
Tools Used
manual
Recommendations
should check if the deadline is not zero and is in the future instead.
Rewards breakdown
nSLOC
170This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.