Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
MyCut
Submissions
AI First Flight
MyCut
AI First Flight #8
Beginner Friendly
Foundry
EXP
AI First Flight
EXP
May 18th, 2026 → May 18th, 2026
View repo
View results
9 / 9
Submissions
Severity
Validity
Tags
Author
#1
closePot() divides by all players but only pays claimants, permanently locking the majority of remaining funds
High
Valid
[H-02] Incorrect logic in `...
cybervikink
#2
When zero players claim, 90% of all deposited funds are permanently locked after closePot()
High
Valid
[H-02] Incorrect logic in `...
cybervikink
#3
fundContest() has no "already funded" guard, allowing the owner to double-fund and permanently lock the excess tokens
Medium
Invalid
cybervikink
#4
ERC20 return values are not checked — failed transfers silently corrupt accounting state
Low
Invalid
cybervikink
#5
Duplicate player addresses in the constructor silently overwrite one allocation, locking the excess tokens
High
Valid
[H-03] [M1] `Pot::construct...
cybervikink
#6
Medium — Integer division truncation in closePot() silently destroys dust tokens with no recovery
Low
Valid
[L-03] [H-03] Precision los...
cybervikink
#7
totalRewards is caller-supplied and never validated against the sum of individual reward allocations
Low
Valid
[L-01] The logic for Contes...
cybervikink
#8
Pot owner is hardcoded to the deploying ContestManager — Pot becomes uncloseable if ContestManager is replaced
High
Valid
[H-01] Owner Cut Stuck in `...
cybervikink
#9
No events emitted on claimCut() or closePot() — off-chain systems cannot reconstruct distribution history
Low
Invalid
cybervikink
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
