Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Algo Ssstablecoinsss
Submissions
AI First Flight
Algo Ssstablecoinsss
AI First Flight #2
Beginner Friendly
DeFi
EXP
AI First Flight
EXP
Oct 10th, 2026 → Oct 12th, 2026
View repo
View results
7 / 7
Submissions
Severity
Validity
Tags
Author
#1
Collateral decimals are never normalised in _get_usd_value / _get_token_amount_from_usd: 8-decimal WBTC is valued 1e10x too low, so a liquidator seizes ~1 WBTC for ~9e12 wei of DSC and WBTC gives no borrowing power
Medium
Invalid
friedsocks233
#2
DSC exports ownable.transfer_ownership instead of erc20.transfer_ownership, so the deployer keeps the minter role after ownership passes to DSCEngine and can mint unlimited unbacked DSC that no one can revoke
Low
Invalid
friedsocks233
#3
liquidate() always seizes debt + an uncapped 10% bonus and requires a strictly higher HF, so positions at or below 110% collateralisation cannot be liquidated in any meaningful way and drift into bad debt
Low
Invalid
friedsocks233
#4
oracle_lib applies one hard-coded 72h TIMEOUT to every feed instead of the Chainlink heartbeat its own NatSpec requires, so mint, redeem and liquidate run on prices far past the heartbeat and the engine freezes only at 72h+1s
Low
Invalid
friedsocks233
#5
No ZKsync sequencer-uptime check or post-restart grace period before Chainlink prices are used, so liquidations run in the sequencer-restart block before borrowers can react and they lose the 10% liquidation bonus
Low
Invalid
friedsocks233
#6
oracle_lib returns the Chainlink answer without checking price > 0, so a fresh zero answer values that collateral at $0: healthy mixed-collateral positions are liquidated for the 10% bonus and single-asset positions become unliquidatable
Low
Invalid
friedsocks233
#7
burn_dsc and redeem_collateral_for_dsc require HF >= 1 after a repayment that can only raise HF, so an underwater borrower cannot partially repay and pays the 10% liquidation bonus on debt they tried to repay
Low
Invalid
friedsocks233
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
