Summary

Integer Overflow in contribute function

Vulnerability Details

The code snippet shows that the amount is added to fund.amount_raised directly without checking for overflow. In Rust, when using non-checked arithmetic operations like +=, if the sum exceeds the maximum value of the integer type, it will silently wrap around in release mode, causing incorrect fund tracking.

Impact

if a large enough amount is sent it would potentially overflow the fund.amount_raised.

Tools Used

Manual Review

Recommendations

Use checked arithmetic to prevent overflow. Replace the vulnerable line with: