Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
MyCut
Submissions
AI First Flight
MyCut
AI First Flight #8
Beginner Friendly
Foundry
EXP
AI First Flight
EXP
Oct 5th, 2026 → Oct 5th, 2026
View repo
View results
9 / 9
Submissions
Severity
Validity
Tags
Author
#1
Manager cut is sent to `msg.sender` (the ContestManager contract), which has no withdrawal path — fees stuck forever
High
Valid
[H-01] Owner Cut Stuck in `...
hopeh
#2
`Pot::closePot` divides `claimantCut` by `i_players.length` instead of `claimants.length`, underpaying claimants and locking funds
High
Valid
[H-02] Incorrect logic in `...
hopeh
#3
Duplicate player addresses overwrite their reward in the `Pot` constructor, stranding funds and skewing `closePot`
High
Valid
[H-03] [M1] `Pot::construct...
hopeh
#4
`Pot::closePot` unbounded loop over `claimants` can exceed the block gas limit, permanently blocking closure (gas DoS)
High
Valid
[H-04] Gas Limit DoS via la...
hopeh
#5
`Pot::closePot` with zero claimants pays the manager cut but strands the entire claimant portion in the pot
Medium
Valid
[M-01] Incorrect Handling o...
hopeh
#6
`claimCut` can be called before `fundContest` funds the pot, burning a claim against an empty balance
Medium
Valid
[M-02] **[L-1] users can in...
hopeh
#7
Integer-division rounding in `closePot` leaves undistributed dust permanently locked (no sweep)
Low
Valid
[L-03] [H-03] Precision los...
hopeh
#8
Lack of events on state-changing functions reduces transparency and monitorability
Low
Valid
[L-02] Lack of events which...
hopeh
#9
`ContestManager::createContest` stores `totalRewards` redundantly (also held in Pot) — inefficient, dual source of truth
Low
Invalid
hopeh
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
