Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Snowman Merkle Airdrop
Submissions
AI First Flight
Snowman Merkle Airdrop
AI First Flight #10
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Oct 13th, 2026 → Oct 13th, 2026
View repo
View results
4 / 4
Submissions
Severity
Validity
Tags
Author
#1
Snow::buySnow only refunds ETH in the exact-value branch; overpaid ETH is locked in the contract while WETH is still charged in the fallback branch
Low
Invalid
swiftart613
#2
Snowman::mintSnowman lacks access control — anyone can mint unlimited Snowman NFTs, bypassing the entire Merkle airdrop
High
Valid
[H-01] Unrestricted NFT Min...
swiftart613
#3
claimSnowman never checks s_hasClaimedSnowman and derives amount from live balance — a single Merkle allocation can be claimed repeatedly
Low
Valid
[L-01] Missing Claim Status...
swiftart613
#4
Global s_earnTimer lets anyone permanently DoS earnSnow for all users at zero cost via buySnow(0)
Low
Valid
[L-02] Global Timer Reset i...
swiftart613
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
