Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Snowman Merkle Airdrop
Submissions
AI First Flight
Snowman Merkle Airdrop
AI First Flight #10
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Aug 17th, 2026 → Aug 17th, 2026
View repo
View results
6 / 6
Submissions
Severity
Validity
Tags
Author
#1
Unrestricted `mintSnowman` lets anyone mint the entire NFT supply for free
High
Valid
[H-01] Unrestricted NFT Min...
crisscholte
#2
SnowmanAirdrop::claimSnowman rebuilds the Merkle leaf from the live balanceOf instead of the snapshotted amount, so earning or receiving any Snow voids a recipient's airdrop
Medium
Valid
[M-01] DoS to a user trying...
crisscholte
#3
SnowmanAirdrop::claimSnowman never reads s_hasClaimedSnowman, so an eligible address can claim its allocation an unlimited number of times
Low
Valid
[L-01] Missing Claim Status...
crisscholte
#4
Snow::s_earnTimer is a single global slot written by both earnSnow and buySnow, so any caller can deny the free weekly Snow to every user for the entire farming period at zero cost
Low
Valid
[L-02] Global Timer Reset i...
crisscholte
#5
Snow::buySnow selects its payment rail by strict equality on msg.value and never refunds, so an inexact ETH amount is kept while the full price is also charged in WETH
Medium
Invalid
crisscholte
#6
SnowmanAirdrop's EIP-712 type string is malformed, so signatures from any standards-compliant wallet are rejected and users must blind-sign a raw hash
High
Valid
[H-02] Unconsistent `MESSAG...
crisscholte
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
