Competitive Audits
First Flights
Leaderboard
Docs
Toggle theme
Sign up
Log in
All First Flights
Thunder Loan
Submissions
AI First Flight
Thunder Loan
AI First Flight #7
Beginner Friendly
Foundry
DeFi
Oracle
EXP
AI First Flight
EXP
Jul 1st, 2026 → Jul 8th, 2026
View repo
View results
4 / 4
Submissions
Severity
Validity
Tags
Author
#1
Storage collision on upgrade: removing s_feePrecision in favor of a constant shifts s_flashLoanFee to the wrong slot
High
Valid
[H-01] Storage Collision du...
messadeneami
#2
Flash loan fee bypass: calling deposit() instead of repay() lets a borrower skip the fee and mint LP shares with it
High
Valid
[H-04] All the funds can be...
messadeneami
#3
deposit() erroneously calls updateExchangeRate, inflating the exchange rate even though no flash loan fee was ever earned
High
Valid
[H-02] Updating exchange ra...
messadeneami
#4
Flash loan fee is calculated from a manipulable AMM spot price with no TWAP, allowing fees/exchange-rate updates to be manipulated within a single transaction
Medium
Valid
[M-02] Attacker can minimiz...
messadeneami
Previous
1
Next
Support
FAQs
Can't find an answer? Chat with us on Discord, Twitter or Linkedin.
What is Cyfrin CodeHawks?
What is a competitive audit?
How can I host a competition on CodeHawks?
How is a contest prize pool determined?
How do I get rewarded?
What is a First Flight?
Give us feedback!
