Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Rust Fund
Submissions
AI First Flight
Rust Fund
AI First Flight #9
Beginner Friendly
Rust
EXP
AI First Flight
EXP
Oct 5th, 2026 → Oct 5th, 2026
View repo
View results
10 / 10
Submissions
Severity
Validity
Tags
Author
#1
`withdraw` does not check that the campaign deadline has passed — the creator can withdraw before the deadline
High
Valid
[H-01] No check for if camp...
hopeh
#2
`withdraw` does not check that the funding goal was met — the creator can withdraw a failed campaign's funds
High
Valid
[H-02] H-01. Creators Can W...
hopeh
#3
`contribute` never records `contribution.amount` — refunds always return 0, so contributors can never reclaim their funds
High
Valid
[H-03] Permanent Loss of Co...
hopeh
#4
Inadequate refund conditions — `refund` has no goal/failure check, so contributors can refund a successful campaign
High
Valid
[H-04] Inadequate Refund Co...
hopeh
#5
`withdraw` never resets `fund.amount_raised` to 0 — later withdrawals revert, locking new contributions
Medium
Valid
[M-01] Withdrawal doesn't r...
hopeh
#6
`set_deadline` never sets `dealine_set = true` — the deadline can be changed repeatedly, defeating its own one-time guard
Medium
Valid
[M-02] The set_deadline fun...
hopeh
#7
`refund` never decrements `fund.amount_raised` — the fund's recorded total desyncs from its actual lamports and breaks `withdraw`
Medium
Valid
[M-03] Fund Creator Can't W...
hopeh
#8
`refund` allows refunds at any time when the deadline is unset (`deadline == 0`), with no time-lock
Low
Valid
[L-01] Refund function allo...
hopeh
#9
`withdraw`/`refund` mutate lamports directly with no rent-exemption check — the fund PDA can be left below rent minimum and purged
Low
Valid
[L-03] Unsafe Direct Lampor...
hopeh
#10
Rent is permanently locked — `Fund` and `Contribution` accounts are never closed, so the rent-exempt SOL can never be reclaimed
Low
Valid
[L-04] Unclaimed rent from ...
hopeh
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
