Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
DatingDapp
Submissions
AI First Flight
DatingDapp
AI First Flight #6
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Nov 6th, 2026 → Nov 13th, 2026
View repo
View results
6 / 6
Submissions
Severity
Validity
Tags
Author
#1
likeUser never credits userBalances, so matched couples get 0 ETH and all like payments are locked forever
High
Valid
[H-01] After the user calls...
ward0x
#2
No refund or withdraw path for likes that never match, so unmatched like payments are locked forever
Medium
Invalid
ward0x
#3
blockProfile deletes profileToToken, so a blocked user can immediately mint a new profile
Medium
Valid
[M-01] `SoulboundProfileNFT...
ward0x
#4
Reentrancy in mintProfile via _safeMint lets one address mint multiple soulbound profiles
Medium
Valid
[M-04] Reentrancy in `Soulb...
ward0x
#5
Unescaped name and image in tokenURI allow JSON metadata injection
Low
Invalid
ward0x
#6
_baseURI is not overridden, so tokenURI returns bare base64 instead of a data: URI
Low
Invalid
ward0x
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
