Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Rust Fund
Submissions
AI First Flight
Rust Fund
AI First Flight #9
Beginner Friendly
Rust
EXP
AI First Flight
EXP
Sep 27th, 2026 → Sep 27th, 2026
View repo
View results
8 / 8
Submissions
Severity
Validity
Tags
Author
#1
withdraw() has no deadline/goal/state checks — the creator can drain all contributed funds at any moment (instant rug pull)
High
Valid
[H-01] No check for if camp...
sillyrobot796
#2
contribute() never accrues contribution.amount — refund() always pays out 0 lamports, the refund mechanism is dead
High
Valid
[H-03] Permanent Loss of Co...
sillyrobot796
#3
set_deadline() never sets the dealine_set flag — the deadline is infinitely resettable and refunds can be blocked forever
Medium
Valid
[M-02] The set_deadline fun...
sillyrobot796
#4
amount_raised is never updated after payouts — later withdrawals are permanently DoS'd, or the fund PDA's rent is eaten and the account gets garbage-collected
Medium
Valid
[M-01] Withdrawal doesn't r...
sillyrobot796
#5
refund() never verifies that the goal was not met — contributors can claw back funds from fully successful campaigns
High
Valid
[H-04] Inadequate Refund Co...
sillyrobot796
#6
deadline == 0 short-circuits both time guards — campaigns without a deadline accept contributions forever and allow refunds at any time with zero lock-up
Low
Valid
[L-01] Refund function allo...
sillyrobot796
#7
No terminal campaign state or close path, goal = 0 accepted, creator self-contribution allowed, and deadline boundary off-by-one
Medium
Invalid
sillyrobot796
#8
fund_create() does not validate name/description lengths — names over 32 bytes always fail PDA derivation (despite max_len(200)) and descriptions over 5000 bytes fail serialization with no clear error
Low
Invalid
sillyrobot796
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
