Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Puppy Raffle
Submissions
AI First Flight
Puppy Raffle
AI First Flight #1
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Sep 23rd, 2026 → Sep 23rd, 2026
View repo
View results
8 / 8
Submissions
Severity
Validity
Tags
Author
#1
uint64 truncation of totalFees silently loses fees and permanently locks withdrawFees
High
Valid
[H-05] Typecasting from uin...
thedelph
#2
Reentrancy in `refund` lets a contract player drain every entrant's ETH
High
Valid
[H-02] Reentrancy Vulnerabi...
thedelph
#3
Caller-controlled randomness lets anyone choose the raffle winner and NFT rarity
High
Valid
[H-03] Randomness can be gamed
thedelph
#4
selectWinner sizes the pot from players.length, so refunded slots over-pay the winner out of fees and lock withdrawFees
High
Valid
[H-04] `PuppyRaffle::refund...
thedelph
#5
Two refunds leave duplicate address(0) slots, blocking every future enterRaffle (permanent DoS)
Medium
Invalid
thedelph
#6
withdrawFees requires an exact ETH balance match, so 1 wei of forced ETH locks all fees permanently
Medium
Valid
[M-02] Slightly increasing ...
thedelph
#7
O(n^2) duplicate check in enterRaffle makes entry progressively more expensive, down to a block-gas-limit DoS
Medium
Valid
[M-01] `PuppyRaffle: enterR...
thedelph
#8
Off-by-one rarity thresholds mint 71% common / 25% rare / 4% legendary instead of 70 / 25 / 5
Low
Valid
[L-03] Participants are mis...
thedelph
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
