Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Snowman Merkle Airdrop
Submissions
AI First Flight
Snowman Merkle Airdrop
AI First Flight #10
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Aug 11th, 2026 → Aug 12th, 2026
View repo
View results
9 / 9
Submissions
Severity
Validity
Tags
Author
#1
Snowman::mintSnowman` lacks access control: anyone can mint unlimited NFTs for free, bypassing the airdrop
High
Valid
[H-01] Unrestricted NFT Min...
alvarok29
#2
[H-01] The airdrop can be claimed unlimited times: `s_hasClaimedSnowman` is written but never checked
Low
Valid
[L-01] Missing Claim Status...
alvarok29
#3
[M-02] Malformed EIP-712 typehash: signatures produced by any standard wallet are rejected
High
Valid
[H-02] Unconsistent `MESSAG...
alvarok29
#4
[M-03] Global farming cooldown: one user blocks `earnSnow` for everyone else indefinitely
Low
Valid
[L-02] Global Timer Reset i...
alvarok29
#5
[M-01] Sending 1 unit of SNOW to a beneficiary permanently blocks their airdrop claim
Medium
Valid
[M-01] DoS to a user trying...
alvarok29
#6
M-04] `buySnow` keeps the ETH sent when it isn't the exact fee, and charges again in WETH
Low
Invalid
alvarok29
#7
[M-05] SNOW declares 18 decimals but mints raw units: the full price buys 1 wei of token
Medium
Invalid
alvarok29
#8
[M-06] Contract beneficiaries (multisigs, smart wallets) can never claim the airdrop, via two paths
Medium
Invalid
alvarok29
#9
[L-01] `collectFee` drags the WETH transfer down when the ETH send fails, potentially locking fees forever
Low
Invalid
alvarok29
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
