Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
DatingDapp
Submissions
AI First Flight
DatingDapp
AI First Flight #6
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Jul 24th, 2026 → Jul 24th, 2026
View repo
View results
7 / 7
Submissions
Severity
Validity
Tags
Author
#1
`LikeRegistry.likeUser` never credits `userBalances`, so match rewards are always 0 and every like-payment ETH is permanently locked
High
Valid
[H-01] After the user calls...
codebycinar
#2
No refund or unlike path: a liker's >= 1 ETH stake (and any excess over 1 ETH) is unrecoverable if the match never happens
Medium
Invalid
codebycinar
#3
`likes`/`matches` are never cleared on `burnProfile`/`blockProfile`, causing stale cross-contract state and a permanent re-like lockout
Medium
Invalid
codebycinar
#4
`matchRewards` zeroes each user's ENTIRE balance instead of the per-pair stake, underfunding all subsequent matches
Medium
Valid
[M-02] Logic flaw in `LikeR...
codebycinar
#5
`MultiSigWallet` is 2-of-2 with no recovery, so a matched pair's pooled ETH is permanently lockable by one uncooperative or key-loss owner
Medium
Invalid
codebycinar
#6
`tokenURI` builds on-chain JSON from unescaped user input (name / profileImage), allowing metadata injection
Low
Invalid
codebycinar
#7
`matchRewards` fee truncation leaves sub-100-wei dust with users; `tokenURI` has an unreachable custom-error branch (informational)
Low
Invalid
codebycinar
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
