Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Puppy Raffle
Submissions
AI First Flight
Puppy Raffle
AI First Flight #1
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Nov 7th, 2026 → Nov 14th, 2026
View repo
8 / 8
Submissions
Severity
Tags
#1
Reentrancy in refund() allows an attacker to drain the entire prize pool
High
#2
Weak randomness in `selectWinner()` — winner and rarity are predictable and forceable
High
#3
Refunded players are still counted in prize/fee accounting, bricking winner selection and fee withdrawal
High
#4
DoS — `enterRaffle()` duplicate check is O(n²) over all players
Medium
#5
`totalFees` is `uint64` and overflows — Solidity 0.7.6 has no checked math
Medium
#6
Rarity distribution is 71/25/4, not the intended 70/25/5
Low
#7
`getActivePlayerIndex()` returns 0 for non-players, ambiguous with index 0
Low
#8
Forced ETH (e.g. `selfdestruct`) permanently bricks `withdrawFees()`
Low
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
