Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Rust Fund
Submissions
AI First Flight
Rust Fund
AI First Flight #9
Beginner Friendly
Rust
EXP
AI First Flight
EXP
Jun 15th, 2026 → Jun 15th, 2026
View repo
View results
10 / 10
Submissions
Severity
Validity
Tags
Author
#1
refund returns lamports but never decrements fund.amount_raised, desyncing the fund's recorded balance from its real lamports
Medium
Valid
[M-03] Fund Creator Can't W...
sub99
#2
withdraw has no goal-reached or deadline check, letting the creator pull all contributions at any time — a rug-pull against contributors
High
Valid
[H-01] No check for if camp...
sub99
#3
set_deadline never sets dealine_set = true, so the 'deadline already set' guard is dead and the creator can change the deadline arbitrarily
Medium
Valid
[M-02] The set_deadline fun...
sub99
#4
After any refund, withdraw subtracts the stale amount_raised and underflows (bricking withdraw) or drains the fund's rent-exempt lamports
Medium
Valid
[M-03] Fund Creator Can't W...
sub99
#5
withdraw has no goal-reached or deadline check, letting the creator pull all contributions at any time — a rug-pull against contributors
High
Valid
[H-02] H-01. Creators Can W...
sub99
#6
set_deadline never sets dealine_set = true, so the 'deadline already set' guard is dead and the creator can change the deadline arbitrarily
Medium
Valid
[M-02] The set_deadline fun...
sub99
#7
contribute uses an unchecked fund.amount_raised += amount, which can overflow u64 (unlike the checked math used in refund/withdraw)
Medium
Invalid
sub99
#8
withdraw and refund move raw lamports without preserving rent-exemption, risking the fund account being purged and remaining funds lost
Medium
Invalid
sub99
#9
When no deadline is set (deadline == 0), refund is allowed at any time, so contributors can pull funds before the campaign logic applies
Low
Valid
[L-01] Refund function allo...
sub99
#10
Clock::get().unwrap() and try_into().unwrap() can panic, and the deadline u64 vs unix_timestamp i64 conversion is fragile
Low
Invalid
sub99
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
