Hawk High

Summary
Expelled students do not receive a refund of their school fees.

Vulnerability Details
Root Cause: The expel function does not include a refund mechanism:

isStudent[_student] = false;

Initial State: A student is enrolled and has paid their fees.

Step 1: The principal expels the student.

Outcome: The student loses their enrollment and their fees.

Implications: This could lead to dissatisfaction or disputes.

Impact
Who is affected: Expelled students.

How they are affected: Students lose their fees without receiving any services.

Tools Used
manuel review

Recommendations
Add a refund mechanism in the expel function:

usdc.safeTransfer(_student, schoolFees);