Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Snowman Merkle Airdrop
Submissions
AI First Flight
Snowman Merkle Airdrop
AI First Flight #10
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Jun 14th, 2026 → Jun 14th, 2026
View repo
View results
5 / 5
Submissions
Severity
Validity
Tags
Author
#1
# [H-1] `Snowman::mintSnowman` function has no access control, anyone can mint nfts themselves without holding Snow tokens to claim nft
High
Valid
[H-01] Unrestricted NFT Min...
hmpippo
#2
# [H-2] Reenterancy within `Snowman::mintSnowman` function, mint nft to contract receiver could trigger a external call, makes user can mint more nfts than specific amount
High
Invalid
hmpippo
#3
# [H-3] `SnowmanAirdrop::getMessageHash` function use receiver's snow token balance as input for calculate digest. If receiver's snow token balance changed after signing, then the verification of signature will fail
Medium
Valid
[M-01] DoS to a user trying...
hmpippo
#4
# [H-4] `SnowmanAirdrop::claimSnowman` function use receiver's snow token balance to calculate leaf node hash. If user's balance of snow token changes after building the Merkle tree, Merkel proof verification will fail
Medium
Invalid
hmpippo
#5
# [H-5] All users share the same `Snow::s_earnTimer`. If one user buy/earn token, it will block other users from earning token for a week
Low
Valid
[L-02] Global Timer Reset i...
hmpippo
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
