Rust Fund

Root + Impact

The Fund account reserves space for a name of up to 200 bytes (#[max_len(200)]), which signals that long campaign names are supported. But the fund's PDA is derived with the full name as a seed (seeds = [name.as_bytes(), creator.key().as_ref()]), and Solana limits every individual PDA seed to 32 bytes. For any name longer than 32 bytes no valid program address exists at all, client-side address derivation already fails, and fund_create can never succeed. Ordinary descriptive campaign names (a typical project title with a subtitle easily exceeds 32 bytes) are silently impossible to launch, and nothing in the program, its errors, or its docs tells creators why creation keeps failing.

Description

Risk

Likelihood: High - triggers deterministically for any name of 33 bytes or more, a very common input for real campaign titles.
Impact: Low - no funds are lost; affected creators simply cannot launch their campaign until they shorten the name, with no error message pointing at the actual cause. It is a functional dead zone across most of the advertised name-length range.

Proof of Concept

Verified with solana-program-test (test passes). Client-side PDA derivation for a 40-byte name cannot produce an address (Solana's seed length limit), and submitting fund_create with such a name fails; the same flow with a short name succeeds.

Recommended Mitigation

Derive the PDA from a fixed-size digest of the name instead of the raw name (for example the first 32 bytes of a hash of the full name), or validate at creation that names are at most 32 bytes and reduce the account allocation to match, so the supported range is consistent and fails with a clear error.