Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Rust Fund
Submissions
AI First Flight
Rust Fund
AI First Flight #9
Beginner Friendly
Rust
EXP
AI First Flight
EXP
May 19th, 2026 → May 19th, 2026
View repo
View results
10 / 10
Submissions
Severity
Validity
Tags
Author
#1
Contribution amount never recorded — refunds always return 0 SOL
High
Valid
[H-03] Permanent Loss of Co...
cybervikink
#2
dealine_set boolean never written — deadline can be overwritten indefinitely
Medium
Valid
[M-02] The set_deadline fun...
cybervikink
#3
withdraw() has no goal-met or deadline-passed check — creator can rug-pull at any time
High
Valid
[H-01] No check for if camp...
cybervikink
#4
fund.amount_raised not decremented on refund — accounting desync enables over-withdrawal
Medium
Valid
[M-03] Fund Creator Can't W...
cybervikink
#5
Unchecked arithmetic on fund.amount_raised — silent overflow in release builds
Low
Invalid
cybervikink
#6
Deadline stored as u64, compared against i64 clock — type mismatch and .unwrap() panics
Medium
Invalid
cybervikink
#7
refund() short-circuits when deadline == 0 — contributors can exit any active campaign instantly
Low
Valid
[L-01] Refund function allo...
cybervikink
#8
withdraw() transfers amount_raised instead of actual vault lamports — rent permanently stranded
Low
Valid
[L-04] Unclaimed rent from ...
cybervikink
#9
set_deadline() accepts past timestamps — creator can immediately expire a campaign
Medium
Invalid
cybervikink
#10
Zero-amount contributions accepted — free PDA spam enables on-chain griefing
Low
Invalid
cybervikink
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
