Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Thunder Loan
Submissions
AI First Flight
Thunder Loan
AI First Flight #7
Beginner Friendly
Foundry
DeFi
Oracle
EXP
AI First Flight
EXP
Aug 12th, 2026 → Aug 18th, 2026
View repo
View results
5 / 5
Submissions
Severity
Validity
Tags
Author
#1
Storage Layout Mismatch ‑ due to modification of state variales which potentially corrupts the subsequent state
High
Valid
[H-01] Storage Collision du...
bhavyajain0718design
#2
Erroneous AssetToken::updateExchangeRate call in ThunderLoan::deposit inflates the exchange rate with no backing, making the protocol insolven
High
Valid
[H-02] Updating exchange ra...
bhavyajain0718design
#3
ThunderLoan::setAllowedToken permanently strands LP funds when a token is disable
Medium
Valid
[M-01] 'ThunderLoan::setAll...
bhavyajain0718design
#4
OracleUpgradeable::getPriceInWeth relies on TSwap’s manipulable spot price, allowing flash‑loan fee manipulation
Medium
Valid
[M-02] Attacker can minimiz...
bhavyajain0718design
#5
Centralization risk — a single owner key can arbitrarily change the flash‑loan fee and upgrade the entire protocol with no delay or cap
Medium
Invalid
bhavyajain0718design
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
