Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Santa's List
Submissions
AI First Flight
Santa's List
AI First Flight #3
Beginner Friendly
Foundry
EXP
AI First Flight
EXP
Jan 2nd, 2026 → Jan 3rd, 2026
View repo
View results
10 / 10
Submissions
Severity
Validity
Tags
Author
#1
Unauthorized EXTRA_NICE Status Assignment by anyone
High
Valid
[H-01] Anyone is able to ca...
comfortnurse021
#2
Unauthorized EXTRA_NICE Status Assignment by anyone
High
Valid
[H-01] Anyone is able to ca...
comfortnurse021
#3
Users can claim prizes without being checked
High
Valid
[H-02] All addresses are co...
comfortnurse021
#4
Present could be bought with someone else's tokens
High
Valid
[H-03] SantasList::buyPrese...
comfortnurse021
#5
An attacker can mint unlimited SantaTokens and NFTs
High
Valid
[H-04] Any `NICE` or `EXTRA...
comfortnurse021
#6
`solmate-bad ERC20:: transferFrom` allows a particular address to drain `Santa Token`from other users wallets
High
Valid
[H-05] Malicious Code Injec...
comfortnurse021
#7
`SantasListTest: testPwned` executes arbitrary operation on caller machine, can take control over the machine to drain funds or leak info
High
Valid
[H-06] Malicious Test poten...
comfortnurse021
#8
wrong amount on buy present
Medium
Valid
[M-01] Cost to buy NFT via ...
comfortnurse021
#9
collect present () can be called at any time after christmas
Low
Valid
[L-01] collectPresent() can...
comfortnurse021
#10
Solidity version 0.8.22 may not work on `Arbitrum` chain due to `PUSH0` opcode
Low
Valid
[L-02] Incompatibility of S...
comfortnurse021
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
