Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Puppy Raffle
Submissions
AI First Flight
Puppy Raffle
AI First Flight #1
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Sep 18th, 2026 → Sep 18th, 2026
View repo
View results
10 / 10
Submissions
Severity
Validity
Tags
Author
#1
Reentrancy in `PuppyRaffle::refund` allows a single player to drain the entire contract balance
High
Valid
[H-02] Reentrancy Vulnerabi...
verdoolaegelouis
#2
Predictable randomness in `PuppyRaffle::selectWinner` lets an attacker choose when to win and force the puppy rarity
High
Valid
[H-03] Randomness can be gamed
verdoolaegelouis
#3
Unchecked uint64 downcast makes `PuppyRaffle::totalFees` overflow and locks all collected fees
High
Valid
[H-05] Typecasting from uin...
verdoolaegelouis
#4
A single `PuppyRaffle::refund` permanently bricks `selectWinner` and locks every remaining stake
High
Valid
[H-04] `PuppyRaffle::refund...
verdoolaegelouis
#5
Reentrancy through `_safeMint` in `PuppyRaffle::selectWinner` pays two prize pools for one round
High
Invalid
verdoolaegelouis
#6
Strict balance equality in `PuppyRaffle::withdrawFees` lets one wei of forced ETH lock all fees forever
Medium
Valid
[M-02] Slightly increasing ...
verdoolaegelouis
#7
O(n^2) duplicate check in `PuppyRaffle::enterRaffle` prices out and eventually blocks all new entrants
Medium
Valid
[M-01] `PuppyRaffle: enterR...
verdoolaegelouis
#8
`PuppyRaffle::getActivePlayerIndex` returns 0 both for the first player and for an address that never entered
Low
Valid
[L-01] Ambiguous index retu...
verdoolaegelouis
#9
Off-by-one rarity thresholds mint 71/25/4 instead of the documented 70/25/5 distribution
Low
Valid
[L-03] Participants are mis...
verdoolaegelouis
#10
`PuppyRaffle::tokenURI` emits invalid JSON: the rarity value is interpolated without quotes
Low
Invalid
verdoolaegelouis
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
