Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
DatingDapp
Submissions
AI First Flight
DatingDapp
AI First Flight #6
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Feb 22nd, 2026 → Feb 22nd, 2026
View repo
View results
10 / 10
Submissions
Severity
Validity
Tags
Author
#1
LikeRegistry::likeUser accepts 1 ETH but never credits userBalances, causing all match rewards to be zero
High
Valid
[H-01] After the user calls...
brizybryan
#2
LikeRegistry::matchRewards sends excess ETH (above 1 ETH per like) to MultiSig while withdrawFees only accounts for fee portion — ETH permanently locked
Medium
Valid
[M-02] Logic flaw in `LikeR...
brizybryan
#3
SoulboundProfileNFT::mintProfile allows re-minting after burn — user can reset identity, re-like profiles, and manipulate match rewards
Medium
Valid
[M-01] `SoulboundProfileNFT...
brizybryan
#4
MultiSigWallet::submitTransaction allows proposals exceeding wallet balance — executeTransaction will revert, permanently locking funds
Medium
Invalid
brizybryan
#5
SoulboundProfileNFT::mintProfile has no age validation — allows profiles with age 0 or profiles for minors
Medium
Invalid
brizybryan
#6
LikeRegistry::likeUser allows liking users whose profiles have been burned or blocked — ETH sent with no valid counterparty
Medium
Invalid
brizybryan
#7
MultiSigWallet has no mechanism to revoke approvals or cancel transactions — approved but unexecutable transactions create permanent deadlock
Medium
Invalid
brizybryan
#8
SoulboundProfileNFT::tokenURI unreachable ownerOf(tokenId) == address(0) check — burned tokens revert from ERC721 before reaching the custom error
Low
Invalid
brizybryan
#9
LikeRegistry::matchRewards deploys new MultiSig but emits no event with the wallet address — matched users cannot find their shared wallet
Low
Invalid
brizybryan
#10
LikeRegistry::withdrawFees allows owner to withdraw totalFees but will also extract user ETH if userBalances bug (H-01) is fixed
Low
Invalid
brizybryan
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
