fix: adding validation in process unlock (#24)

defi-wonderland · Oct 7, 2024 · 6c0fd6d · 6c0fd6d
1 parent c5ca462
commit 6c0fd6d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/program/src/processor.rs b/program/src/processor.rs
@@ -269,6 +269,12 @@ impl Processor {
             return Err(ProgramError::InvalidArgument);
         }
 
+        // Validate that the vesting account is owned by the program
+        if *vesting_account.owner != *program_id {
+            msg!("Vesting account is not owned by this program");
+            return Err(ProgramError::InvalidArgument);
+        }
+
         // Validate that the vesting account public key is derived from the seeds
         let vesting_account_key = Pubkey::create_program_address(&[&seeds], program_id)?;
         if vesting_account_key != *vesting_account.key {