Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Santa's List
Submissions
AI First Flight
Santa's List
AI First Flight #3
Beginner Friendly
Foundry
EXP
AI First Flight
EXP
Jul 21st, 2026 → Jul 23rd, 2026
View repo
View results
3 / 3
Submissions
Severity
Validity
Tags
Author
#1
SantaToken inherits a backdoored transferFrom that lets a hardcoded address move any holder's tokens without approval, enabling theft of all token balances
High
Valid
[H-05] Malicious Code Injec...
justtammy
#2
buyPresent burns the receiver's tokens instead of the caller's and mints the NFT to the caller, letting anyone burn any token holder's balance and receive a free NFT
High
Valid
[H-03] SantasList::buyPrese...
justtammy
#3
checkList is missing the onlySanta modifier, allowing anyone to set the first-check naughty/nice status for any address, breaking the documented "only Santa" rule
High
Valid
[H-01] Anyone is able to ca...
justtammy
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
