Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Snowman Merkle Airdrop
Submissions
AI First Flight
Snowman Merkle Airdrop
AI First Flight #10
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
May 20th, 2026 → May 21st, 2026
View repo
View results
6 / 6
Submissions
Severity
Validity
Tags
Author
#1
claimSnowman() missing claim replay protection — receiver can claim unlimited Snowman NFTs
Low
Valid
[L-01] Missing Claim Status...
squashingbugs007
#2
MESSAGE_TYPEHASH contains typo 'addres' instead of 'address' EIP-712 signatures permanently broken
High
Valid
[H-02] Unconsistent `MESSAG...
squashingbugs007
#3
_isValidSignature() ignores ECDSA error codes and invalid signatures accepted as valid
Medium
Invalid
squashingbugs007
#4
collectFee() does not check WETH transfer return value — fee collection silently fails
High
Invalid
squashingbugs007
#5
claimSnowman() uses balance at verification time but re-reads balance at transfer time, TOCTOU vulnerability
Medium
Invalid
squashingbugs007
#6
mintSnowman() updates s_TokenCounter after _safeMint reentrancy via ERC721 receiver callback
Low
Invalid
squashingbugs007
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
