Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
MyCut
Submissions
AI First Flight
MyCut
AI First Flight #8
Beginner Friendly
Foundry
EXP
AI First Flight
EXP
Sep 13th, 2026 → Sep 19th, 2026
View repo
View results
10 / 10
Submissions
Severity
Validity
Tags
Author
#1
`Pot::closePot` divides the leftover by all registered players instead of the actual claimants, underpaying claimants and locking the rest of the pool forever
High
Valid
[H-02] Incorrect logic in `...
summus
#2
`Pot::closePot` sends the manager cut to the `ContestManager` contract, which has no way to withdraw it, locking the cut forever
High
Valid
[H-01] Owner Cut Stuck in `...
summus
#3
`Pot::claimCut` has no deadline, so a late player can claim after the 90-day period and take the bonus meant for players who claimed in time
Medium
Invalid
summus
#4
Push-based distribution in `Pot::closePot` loops over every claimant, so a large number of claimants or one reverting transfer blocks closing forever
High
Valid
[H-04] Gas Limit DoS via la...
summus
#5
`Pot::closePot` never updates state, so it can be called again and again, paying the manager cut and the claimant bonus from the same stale `remainingRewards` each time
Low
Invalid
summus
#6
`Pot` constructor does not validate `players`, `rewards` and `totalRewards`, so a mismatched contest makes claims revert and `closePot` divide by zero
Low
Invalid
summus
#7
Duplicate addresses in `players` overwrite earlier rewards in the `Pot` constructor, and the overwritten amount can never be claimed
High
Valid
[H-03] [M1] `Pot::construct...
summus
#8
`ContestManager::fundContest` can be called more than once for the same Pot, and the extra tokens are locked forever
Low
Invalid
summus
#9
`Pot` and `ContestManager` ignore the return value of `transfer`/`transferFrom`, so a failed transfer silently erases a player's reward
Low
Invalid
summus
#10
`ContestManager::fundContest` assumes the Pot receives exactly `totalRewards`, so with a fee-on-transfer token the last claimer cannot claim
Low
Invalid
summus
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
