Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
MyCut
Submissions
AI First Flight
MyCut
AI First Flight #8
Beginner Friendly
Foundry
EXP
AI First Flight
EXP
Jun 5th, 2026 → Jun 5th, 2026
View repo
View results
7 / 7
Submissions
Severity
Validity
Tags
Author
#1
closePot() computes claimantCut with i_players.length instead of claimants.length, underpaying claimants and permanently locking the remainder
High
Valid
[H-02] Incorrect logic in `...
bytethebuilder
#2
closePot() never finalizes the Pot: remainingRewards is not zeroed and there is no closed guard, letting the manager re-run distribution and drain the pool
Low
Invalid
bytethebuilder
#3
Integer-division truncation in closePot() leaves dust permanently locked in the Pot with no recovery path
Low
Valid
[L-03] [H-03] Precision los...
bytethebuilder
#4
Manager cut is sent to the ContestManager contract (the Pot owner), which has no withdrawal function, so the manager's cut is permanently locked
High
Valid
[H-01] Owner Cut Stuck in `...
bytethebuilder
#5
claimCut() enforces no claim deadline and no post-close guard, so players can still claim after closePot(), breaking the settled distribution
Medium
Invalid
bytethebuilder
#6
No validation that players.length == rewards.length or that sum(rewards) == totalRewards, allowing an insolvent Pot where some players cannot claim
Low
Valid
[L-01] The logic for Contes...
bytethebuilder
#7
Unchecked ERC20 transfer/transferFrom return values in _transferReward and fundContest allow silent failures and phantom-funded pots
Low
Invalid
bytethebuilder
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
