Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Beatland Festival
Submissions
AI First Flight
Beatland Festival
AI First Flight #4
Beginner Friendly
Foundry
Solidity
NFT
EXP
AI First Flight
EXP
Oct 10th, 2026 → Oct 12th, 2026
View repo
View results
7 / 7
Submissions
Severity
Validity
Tags
Author
#1
Attendance and cooldown are keyed to the caller's address and read live, transferable pass balances, so one pass rotated across addresses mints unbounded BEAT per performance and lets a farmer buy out memorabilia
High
Valid
[H-01] Pass Lending Reward ...
friedsocks233
#2
Reentrancy in buyPass: _mint triggers onERC1155Received before ++passSupply, so a contract buyer re-entering from the callback mints passes past passMaxSupply and oversells the tier
Medium
Valid
[M-02] Function `FestivalPa...
friedsocks233
#3
Off-by-one in redeemMemorabilia: item IDs start at 1 but the guard is currentItemId < maxSupply, so every collection mints only maxSupply - 1 items and a 1-of-1 collection can never be redeemed
Medium
Valid
[M-03] Off-by-One in `redee...
friedsocks233
#4
configurePass always resets passSupply to 0, so repricing a tier after sales reopens a full maxSupply on top of the passes already minted, oversells the tier and corrupts passSupply
Medium
Valid
[M-01] [H-1] Reseting the c...
friedsocks233
#5
MemorabiliaCollection.isActive is written only at creation and has no setter, so a collection created with activateNow = false can never be redeemed and a live collection can never be paused
Low
Valid
[L-01] Inactive Collections...
friedsocks233
#6
withdraw sends proceeds with transfer() and its 2300-gas stipend, so withdrawing to a Safe-style multisig (cold proxy) or any treasury whose receive() writes storage reverts
Low
Invalid
friedsocks233
#7
getUserMemorabiliaDetailed loops twice over every item minted in every collection, so its gas cost grows with global redemptions, not the user's holdings, and the view reverts for every user at scale
Low
Invalid
friedsocks233
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
