Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Puppy Raffle
Submissions
AI First Flight
Puppy Raffle
AI First Flight #1
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Dec 22nd, 2025 → Dec 26th, 2025
View repo
View results
8 / 8
Submissions
Severity
Validity
Tags
Author
#1
Looping through players array to check for duplicates in `PuppyRaffle::enterRaffle` is a potential denial of service (DoS) attack, incrementing gas costs for future entrants
Medium
Valid
[M-01] `PuppyRaffle: enterR...
just
#2
Checking for zero address in constructor
Low
Invalid
just
#3
Cheaking for Re-entering when calling the `PuppyRaffle::refund` function, the hacker will be able to drain the entire balance of the contract
High
Valid
[H-02] Reentrancy Vulnerabi...
just
#4
`PuppyRaffle::getActivePlayerIndex` returns zero if the user's address is not participating in the lottery, but if the participant is at index zero in the array, it should return zero.
Low
Valid
[L-01] Ambiguous index retu...
just
#5
`PuppyRaffle::selectWinner` uses very weak randomness in choosing the winner
High
Valid
[H-03] Randomness can be gamed
just
#6
`PuppyRaffle::selectWinner` uses pseudo-randomness when generating rarity.
High
Valid
[H-03] Randomness can be gamed
just
#7
In `PuppyRaffle::selectWinner` we use a small value for collecting commissions - uint64, when there are more participants it will overflow.
High
Valid
[H-05] Typecasting from uin...
just
#8
# `Puppy Raffle::withdrawal Fees` is a check that can be easily broken and no one else will be able to use this feature.
Medium
Valid
[M-02] Slightly increasing ...
just
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
