[{"result":{"data":[{"id":"cm1el4vjp00019d2nzombxfzp","description":"stake.link is a first-of-its-kind liquid delegated staking platform delivering DeFi composability for Chainlink Staking. Built by premier Chainlink ecosystem developer LinkPool, powered by Chainlink node operators, and governed by the stake.link DAO, stake.link's extensible architecture is purpose-built to support Chainlink Staking and to extend participation in the Chainlink Network.","company":"Stakelink","name":"Liquid Staking","protocolTags":"defi, hardhat, oracle","urlSlug":"2024-09-stakelink","logoImgPublicId":"company/i1y9fns50hfag91yvewa","reward":50000,"rewardHighMedium":42000,"rewardLow":4250,"rewardCommunityJudging":3750,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-09-stakelink","startDate":"2024-09-30T12:00:00.000Z","endDate":"2024-10-17T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":"clm0jkw6w0000jv08gaj4hof4","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":false,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":2530},{"id":"cm0uykx3500011tv38wh36e65","description":"As Starknet continues its decentralized journey, we present StarkWare’s proposal for the first stage of staking. This is an important step in building the staking community and technology, offering new opportunities for users and developers.\n\nThis contest scope covers the staking mechanism for Starknet Improvement Proposal 18.","company":"Starknet","name":"Staking","protocolTags":"defi","urlSlug":"2024-09-starknet-staking","logoImgPublicId":"company/acitigkzam9ijrj4eplb","reward":65000,"rewardHighMedium":60000,"rewardLow":5000,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-09-starknet-competitive","startDate":"2024-09-16T12:00:00.000Z","endDate":"2024-10-04T12:00:00.000Z","appealStartDate":"2024-10-31T12:00:00.000Z","appealEndDate":"2024-10-31T13:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":"clm0jkw6w0000jv08gaj4hof4","firstFlight":false,"formalVerification":false,"kycRewards":true,"privateSubmissionsToggle":true,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":false,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":2937},{"id":"clz2gpi0o000ps6nj8stws2bd","description":"ArkProject offers a liquidity layer for digital assets: uniting markets,\nempowering creators, bridging the gap to mass adoption, built on top of Starknet.","company":"ArkProject","name":"ArkProject: NFT Bridge","protocolTags":"nft, bridge","urlSlug":"2024-07-ark-project","logoImgPublicId":"company/wog00zesf32qw2gq0mft","reward":60000,"rewardHighMedium":50000,"rewardLow":5500,"rewardCommunityJudging":4500,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-07-ark-project","startDate":"2024-07-31T12:00:00.000Z","endDate":"2024-08-28T12:00:00.000Z","appealStartDate":"2024-09-18T16:45:00.000Z","appealEndDate":"2024-09-20T16:45:00.000Z","communityJudgingEnabled":true,"communityJudgingStartDate":"2024-08-28T13:00:00.000Z","communityJudgingEndDate":"2024-09-04T13:00:00.000Z","leadJudgeId":"clm0jkw6w0000jv08gaj4hof4","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":true,"nsloc":2301},{"id":"clzrc4ntn00015mxghjmoc4wt","description":"Fjord connects innovative projects and engaged backers through a community-focused platform, offering fair and transparent LBPs and token sale events.","company":"Fjord","name":"Fjord Token Staking","protocolTags":"defi, foundry","urlSlug":"2024-08-fjord","logoImgPublicId":"company/u4twycoyiwasxukhaxo7","reward":20000,"rewardHighMedium":16000,"rewardLow":2500,"rewardCommunityJudging":1500,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-08-fjord","startDate":"2024-08-20T12:00:00.000Z","endDate":"2024-08-27T12:00:00.000Z","appealStartDate":"2024-09-11T12:00:00.000Z","appealEndDate":"2024-09-13T12:00:00.000Z","communityJudgingEnabled":true,"communityJudgingStartDate":"2024-08-27T13:00:00.000Z","communityJudgingEndDate":"2024-09-02T13:00:00.000Z","leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":true,"nsloc":662},{"id":"clzcnh4o1000p11vucwtzgoro","description":"Tadle offers decentralized pre-market infrastructure facilitating the bridging of liquidity between primary and secondary financial markets!","company":"Tadle","name":"Tadle","protocolTags":"defi","urlSlug":"2024-08-tadle","logoImgPublicId":"company/crvpf3cxfjpqwwsufnif","reward":30000,"rewardHighMedium":25000,"rewardLow":2750,"rewardCommunityJudging":2250,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-08-tadle","startDate":"2024-08-05T16:00:00.000Z","endDate":"2024-08-12T16:00:00.000Z","appealStartDate":"2024-09-03T12:00:00.000Z","appealEndDate":"2024-09-05T12:00:00.000Z","communityJudgingEnabled":true,"communityJudgingStartDate":"2024-08-12T17:00:00.000Z","communityJudgingEndDate":"2024-08-26T17:00:00.000Z","leadJudgeId":"clk3twjk3003imj08kmy05ubk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":true,"nsloc":1229},{"id":"clyg8slke0001bvhpwszwjr7z","description":"Zaros is a Perpetuals DEX powered by Boosted (Re)Staking Vaults. It seeks to maximize LPs yield generation, while offering a top-notch trading experience on Arbitrum (and Monad in the future).","company":"Zaros","name":"Zaros Part 1","protocolTags":"defi, foundry","urlSlug":"2024-07-zaros","logoImgPublicId":"company/myxbjmyu1c5rf3nwjiso","reward":60000,"rewardHighMedium":50000,"rewardLow":5500,"rewardCommunityJudging":4500,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-07-zaros","startDate":"2024-07-17T12:00:00.000Z","endDate":"2024-07-31T12:00:00.000Z","appealStartDate":"2024-08-26T14:30:00.000Z","appealEndDate":"2024-08-28T14:30:00.000Z","communityJudgingEnabled":true,"communityJudgingStartDate":"2024-07-31T13:00:00.000Z","communityJudgingEndDate":"2024-08-07T13:00:00.000Z","leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":true,"nsloc":2878},{"id":"clxwwzifk001r8s1kz98wbpyz","description":"CCIP is the global standard for cross-chain interoperability. It enables developers to build secure, multi-chain applications and services, backed by Chainlink’s decentralized oracle network. ","company":"Chainlink","name":"CCIP v1.5","protocolTags":"bridge, foundry, defi, updates","urlSlug":"2024-07-CL-CCIP","logoImgPublicId":"company/n1p5puocte2qgnvzsz2n","reward":200000,"rewardHighMedium":175000,"rewardLow":10000,"rewardCommunityJudging":15000,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-07-CL-CCIP","startDate":"2024-07-02T12:00:00.000Z","endDate":"2024-07-17T13:52:00.000Z","appealStartDate":"2024-07-28T14:00:00.000Z","appealEndDate":"2024-07-30T14:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":"cloqvpzij0003l708uu50aiih","firstFlight":false,"formalVerification":false,"kycRewards":true,"privateSubmissionsToggle":true,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":true,"nsloc":2114},{"id":"cly8oizwp00014brg47oo8pt1","description":"The Biconomy offers an Account Abstraction toolkit that enables the simplest UX on your dApp, wallet, or appchain. Built on top of ERC 4337, Biconomy offers a full-stack solution for tapping into the power of our Smart Accounts Platform, Paymasters, and Bundlers.\n\nNexus is a suite of contracts for Modular Smart Accounts compliant with ERC-7579 and ERC-4337, developed by Biconomy. It aims to enhance modularity and security for smart contract accounts, providing a flexible framework for various use cases.","company":"Biconomy","name":"Biconomy: Nexus","protocolTags":"hardhat, foundry","urlSlug":"2024-07-biconomy","logoImgPublicId":"company/vyxxhc17ubu9wn1tkfxy","reward":30000,"rewardHighMedium":25000,"rewardLow":2750,"rewardCommunityJudging":2250,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-07-biconomy","startDate":"2024-07-08T12:00:00.000Z","endDate":"2024-07-15T12:00:00.000Z","appealStartDate":"2024-07-28T09:25:00.000Z","appealEndDate":"2024-07-30T09:25:00.000Z","communityJudgingEnabled":true,"communityJudgingStartDate":"2024-07-15T13:00:00.000Z","communityJudgingEndDate":"2024-07-19T13:00:00.000Z","leadJudgeId":"clk3twjk3003imj08kmy05ubk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":true,"nsloc":1433},{"id":"clxyjvjkg0007isl3p290etog","description":"Temple Gold is a claim on future airdrops. Airdrops are farmed token allocations from protocols like Ethena or Origami. We introduce Temple Gold as a non-tradable claim on farmed token allocations. Using auction markets and staking contracts, users can get some emission of TGLD to claim farmed token allocations that temple creates in the future. Users can claim allocations from specialized auctions called Spice auctions.","company":"TempleDAO","name":"TempleGold","protocolTags":"foundry","urlSlug":"2024-07-templegold","logoImgPublicId":"company/ovmmfbu9hgikanujugqr","reward":25000,"rewardHighMedium":20000,"rewardLow":2500,"rewardCommunityJudging":2500,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-07-templegold","startDate":"2024-07-04T12:00:00.000Z","endDate":"2024-07-11T12:00:00.000Z","appealStartDate":"2024-07-25T22:10:00.000Z","appealEndDate":"2024-07-27T22:10:00.000Z","communityJudgingEnabled":true,"communityJudgingStartDate":"2024-07-11T13:00:00.000Z","communityJudgingEndDate":"2024-07-17T13:00:00.000Z","leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":true,"nsloc":998},{"id":"clw9e11e4001gdv0iigjylx5n","description":"Beanstalk is a permissionless fiat stablecoin protocol built on Ethereum. Its primary objective is to incentivize independent market participants to regularly cross the price of 1 Bean over its dollar peg in a sustainable fashion.\n\nThis is the culmination of all your Beanstalk experience in one final boss code base!","company":"Beanstalk","name":"Beanstalk: The Finale","protocolTags":"defi, hardhat, foundry","urlSlug":"2024-05-beanstalk-the-finale","logoImgPublicId":"company/m5oacju1uewfxdifcnfb","reward":250000,"rewardHighMedium":220000,"rewardLow":10000,"rewardCommunityJudging":20000,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-05-beanstalk-the-finale","startDate":"2024-05-30T12:00:00.000Z","endDate":"2024-07-08T12:00:00.000Z","appealStartDate":"2024-07-25T22:10:00.000Z","appealEndDate":"2024-07-27T22:10:00.000Z","communityJudgingEnabled":true,"communityJudgingStartDate":"2024-07-08T13:00:00.000Z","communityJudgingEndDate":"2024-07-15T13:00:00.000Z","leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":true,"nsloc":12285},{"id":"clwgjlhig0015rbi5sssuk0qe","description":"TSender is a hyper gas efficient protocol for air dropping tokens to a large number of users. Inspired by the work of the Gaslite team. ","company":"Cyfrin","name":"TSender","protocolTags":"defi, foundry","urlSlug":"2024-05-TSender","logoImgPublicId":"company/obvlapyy82pqssm1gywe","reward":15000,"rewardHighMedium":12500,"rewardLow":1375,"rewardCommunityJudging":1125,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-05-TSender","startDate":"2024-05-24T12:00:00.000Z","endDate":"2024-05-31T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":true,"communityJudgingStartDate":"2024-05-31T13:00:00.000Z","communityJudgingEndDate":"2024-06-03T13:00:00.000Z","leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":false,"nsloc":256},{"id":"clvb9njmy00012dqjyaavpl44","description":"Sablier is a permissionless token distribution protocol for ERC-20 assets. It can be used for vesting, payroll, airdrops, and more.\n\nThe sender of a payment stream first deposits a specific amount of ERC-20 tokens in a contract. Then, the contract progressively allocates the funds to the recipient, who can access them as they become available over time. The payment rate is influenced by various factors such as the start time, the end time, the total amount of tokens deposited and the type of stream.","company":"Sablier","name":"Sablier","protocolTags":"defi, foundry","urlSlug":"2024-05-Sablier","logoImgPublicId":"company/lmlxsuvaykogjzypmb36","reward":53440,"rewardHighMedium":45000,"rewardLow":3100,"rewardCommunityJudging":5340,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-05-Sablier","startDate":"2024-05-10T12:00:00.000Z","endDate":"2024-05-31T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":true,"communityJudgingStartDate":"2024-05-31T13:00:00.000Z","communityJudgingEndDate":"2024-06-05T13:00:00.000Z","leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":false,"nsloc":2655},{"id":"clvo5kwin00078k6jhhjobn22","description":"Beanstalk is a permissionless fiat stablecoin protocol built on Ethereum. Its primary objective is to incentivize independent market participants to regularly cross the price of 1 Bean over its dollar peg in a sustainable fashion.","company":"Beanstalk","name":"Beanstalk Part 3","protocolTags":"defi, hardhat","urlSlug":"2024-05-Beanstalk-3","logoImgPublicId":"company/km9b9u4fxgjhmg9e2fhb","reward":21000,"rewardHighMedium":17900,"rewardLow":1000,"rewardCommunityJudging":2100,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-05-Beanstalk-Part-3","startDate":"2024-05-06T12:00:00.000Z","endDate":"2024-05-20T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":true,"communityJudgingStartDate":"2024-05-20T13:00:00.000Z","communityJudgingEndDate":"2024-05-23T13:00:00.000Z","leadJudgeId":"clr7msrkm0049q8odnpeafgru","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":false,"nsloc":1104},{"id":"clv1eptuo0003bcnzce1ap7om","description":"Basin is a composable EVM-native decentralized exchange protocol that allows for the composition of arbitrary exchange functions, network-native oracles and exchange implementations into a single liquidity pool known as a Well.","company":"Beanstalk","name":"Beanstalk: Dive Into Basin","protocolTags":"defi, hardhat","urlSlug":"2024-04-Beanstalk-DIB","logoImgPublicId":"company/dkpeqjkgetkxsga9v5q6","reward":12000,"rewardHighMedium":10000,"rewardLow":1000,"rewardCommunityJudging":1000,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-04-Beanstalk-DIB","startDate":"2024-04-22T12:00:00.000Z","endDate":"2024-04-29T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":true,"communityJudgingStartDate":"2024-04-29T13:00:00.000Z","communityJudgingEndDate":"2024-05-02T13:00:00.000Z","leadJudgeId":"clr7msrkm0049q8odnpeafgru","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":false,"nsloc":479},{"id":"clu7665bs0001fmt5yahc8tyh","description":"Beanstalk is a permissionless fiat stablecoin protocol built on Ethereum. Its primary objective is to incentivize independent market participants to regularly cross the price of 1 Bean over its dollar peg in a sustainable fashion.\n\nThis audit is centered around the BIP (Beanstalk Improvement Proposal) that whitelists the BEAN:wstETH Well in the Silo and migrates liquidity underlying Unripe assets from BEAN:ETH to BEAN:wstETH.","company":"Beanstalk","name":"Beanstalk Part 2","protocolTags":"defi, hardhat","urlSlug":"2024-04-beanstalk-2","logoImgPublicId":"company/vwkqymxqrtutq4rdvf7w","reward":35000,"rewardHighMedium":30000,"rewardLow":1500,"rewardCommunityJudging":3500,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-04-beanstalk-2","startDate":"2024-04-01T12:00:00.000Z","endDate":"2024-04-15T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":true,"communityJudgingStartDate":"2024-04-15T12:00:00.000Z","communityJudgingEndDate":"2024-04-22T12:00:00.000Z","leadJudgeId":"clr7msrkm0049q8odnpeafgru","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":false,"nsloc":1991},{"id":"clsxlpte900074r5et7x6kh96","description":"Beanstalk is a permissionless fiat stablecoin protocol built on Ethereum. Its primary objective is to incentivize independent market participants to regularly cross the price of 1 Bean over its dollar peg in a sustainable fashion.","company":"Beanstalk","name":"Beanstalk Part 1","protocolTags":"defi, hardhat, oracle, proxy, updates","urlSlug":"2024-02-Beanstalk-1","logoImgPublicId":"company/ycg7ldplxqc2yj7vvqlr","reward":100000,"rewardHighMedium":95000,"rewardLow":5000,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-02-Beanstalk-1","startDate":"2024-02-26T12:00:00.000Z","endDate":"2024-03-25T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":"2024-03-25T12:00:00.000Z","communityJudgingEndDate":"2024-04-01T12:00:00.000Z","leadJudgeId":"clr7msrkm0049q8odnpeafgru","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":false,"nsloc":5776},{"id":"clt7ewpli0001w7f6ol2yojki","description":"Moonwell is an open and decentralized lending and borrowing protocol built on Base, Moonbeam, and Moonriver. The app's intuitive design ensures a streamlined user experience, enabling everyone to do more with their digital assets. Moonwell is a fork of Compound, and naming has been modified from cTokens to mTokens, which are interest bearing tokens that represent the underlying asset.","company":"Moonwell","name":"Moonwell","protocolTags":"defi, foundry","urlSlug":"2024-03-Moonwell","logoImgPublicId":"company/tudqydfv5fhvxtn1xfrl","reward":15000,"rewardHighMedium":14000,"rewardLow":1000,"rewardCommunityJudging":1500,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-03-Moonwell","startDate":"2024-03-04T12:00:00.000Z","endDate":"2024-03-11T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":true,"communityJudgingStartDate":"2024-03-11T12:00:00.000Z","communityJudgingEndDate":"2024-03-18T12:00:00.000Z","leadJudgeId":"clk3twjk3003imj08kmy05ubk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":true,"cjEligibilityPreviousMonetaryReward":true,"cjEligibilityValidSubmissionsRatio":false,"nsloc":394},{"id":"clrzgrole0007xtsq0gfdw8if","description":"Morpheus AI is a Smart Agent concept of connecting LLMs and AI Agents to wallets, Dapps, & smart contracts promises to open the world of Web3 to everyone. Chatting in normal language with your Smart Agent and having it understand the question or task, is similar to how Google's search engine opened the early internet up to the general public.","company":"MorpheusAI","name":"MorpheusAI","protocolTags":"foundry","urlSlug":"2024-01-Morpheus","logoImgPublicId":"company/ijvtzoor5kydcvzxugpk","reward":22500,"rewardHighMedium":20000,"rewardLow":2500,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-01-Morpheus","startDate":"2024-01-30T12:00:00.000Z","endDate":"2024-02-03T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":1054},{"id":"clqf7mgla0001yeyfah59c674","description":"A first-of-its-kind liquid delegated staking platform delivering DeFi composability for Chainlink Staking. Built by premier Chainlink ecosystem developer LinkPool, powered by Chainlink node operators, and governed by the stake.link DAO, stake.link's extensible architecture is purpose-built to support Chainlink Staking and to extend participation in the Chainlink Network.","company":"stake.link","name":"stake.link","protocolTags":"defi, hardhat, bridge","urlSlug":"2023-12-stake-link","logoImgPublicId":"company/dnhijrp0zjbt3uubr3sy","reward":27500,"rewardHighMedium":25000,"rewardLow":2500,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-12-stake-link","startDate":"2023-12-22T12:00:00.000Z","endDate":"2024-01-12T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":"clra1r21c0006w6ilcrtk9vt3","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":1414},{"id":"clql6lvyu0001mnje1xpqcuvl","description":"Secure your crypto assets, such as ETH, WBTC, ARB, LINK, & PAXG tokenized gold, in smart contracts that you control and no one else, then effortlessly borrow stablecoins with 0% interest loans and no time limit to pay back.","company":"The Standard","name":"The Standard","protocolTags":"defi, hardhat","urlSlug":"2023-12-the-standard","logoImgPublicId":"company/sccyr0ug1iccwj7kpgjc","reward":20000,"rewardHighMedium":17500,"rewardLow":2500,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-12-the-standard","startDate":"2023-12-27T12:00:00.000Z","endDate":"2024-01-10T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":"clqx1mw2t000cp0c6v34ywh6q","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":609},{"id":"clo38mm260001la08daw5cbuf","description":"Steadefi is the next-gen DeFi protocol designed to provide the highest and most sustainable real yields to our investors without the stress of constant position management or the prolonged downturns of the crypto markets.","company":"Steadefi","name":"Steadefi","protocolTags":"defi, hardhat, foundry, oracle","urlSlug":"2023-10-SteadeFi","logoImgPublicId":"company/bs9olaklaihbrwutmmfn","reward":35000,"rewardHighMedium":33000,"rewardLow":2000,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-10-SteadeFi","startDate":"2023-10-26T12:00:00.000Z","endDate":"2023-11-06T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":"clp7n0q8y0000gdxb9hizn3n6","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":2289},{"id":"cll5rujmw0001js08menkj7hc","description":"Vyper is a Pythonic programming language designed specifically for the Ethereum Virtual Machine. Prioritizing security, compiler simplicity, and auditability, Vyper intentionally omits several features from Python to reduce vulnerabilities and potential EVM exploits. Vyper enables developers to deploy smart contracts on the Ethereum platform while ensuring that the contracts are more transparent and easier to audit than those written in other languages.","company":"Vyper","name":"Vyper - Compiler","protocolTags":"updates","urlSlug":"2023-09-vyper-compiler","logoImgPublicId":"company/qpc8y6fvd80duslzmk8k","reward":160000,"rewardHighMedium":150000,"rewardLow":10000,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-09-vyper-compiler","startDate":"2023-09-14T04:00:00.000Z","endDate":"2023-11-04T04:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":"closq2s9v0003l3083kct7o67","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":true,"privateSubmissionsPublicAfterFinalisationToggle":true,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":14644},{"id":"clm871gl00001mp081mzjdlwc","description":"The system mints pegged assets (stablecoins) using an orderbook, using over-collateralized staked ETH. ","company":"Ditto","name":"DittoETH","protocolTags":"defi, foundry, oracle","urlSlug":"2023-09-ditto","logoImgPublicId":"company/ltz8kv2hxjeiphxrxwhi","reward":55000,"rewardHighMedium":50000,"rewardLow":5000,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-09-ditto","startDate":"2023-09-08T00:00:00.000Z","endDate":"2023-10-08T23:59:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":"clk3twjk3003imj08kmy05ubk","firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":3365},{"id":"cllcnja1h0001lc08z7w0orxx","description":"The SPARKN protocol is a Web3 project that aims to build a marketplace for anyone who wants to solve their problems or anyone who wants to help solve problems.\nAs a first step, we have created the protocol. The details of how to use the protocol is up to the users. This team is a graduate of the Foundry Full Course on YouTube with $15,000 up for grabs! ","company":"CodeFox Inc.","name":"Sparkn ","protocolTags":"defi, foundry, proxy","urlSlug":"2023-08-sparkn","logoImgPublicId":"company/pvl7t7gkply4zqj9kbum","reward":15000,"rewardHighMedium":14000,"rewardLow":1000,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-08-sparkn","startDate":"2023-08-21T04:00:00.000Z","endDate":"2023-08-29T04:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":null,"firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":194},{"id":"clkbo1fa20009jr08nyyf9wbx","description":"Oracle free peer to peer perpetual lending\n\nBefore diving into the codebase and this implementation of the Blend lending protocol, it is recommended that you read the original paper by Paradigm and Blur: \n\nhttps://www.paradigm.xyz/2023/05/blend#continuous-loans","company":"BeedleFi","name":"Beedle - Oracle free perpetual lending","protocolTags":"defi, foundry","urlSlug":"2023-07-beedle","logoImgPublicId":"company/upc2ow2fgp0kdsgxxnyt","reward":20000,"rewardHighMedium":18000,"rewardLow":2000,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-07-beedle","startDate":"2023-07-24T04:00:00.000Z","endDate":"2023-08-07T04:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":null,"firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":706},{"id":"cljx3b9390009liqwuedkn0m0","description":"This project is meant to be a stablecoin where users can deposit WETH and WBTC in exchange for a token that will be pegged to the USD. The system is meant to be such that someone could fork this codebase, swap out WETH & WBTC for any basket of assets they like, and the code would work the same.","company":"Cyfrin","name":"Foundry DeFi Stablecoin CodeHawks Audit Contest","protocolTags":"defi, foundry","urlSlug":"2023-07-foundry-defi-stablecoin","logoImgPublicId":"company/ha8pzblcinwogcirgbxi","reward":15000,"rewardHighMedium":14000,"rewardLow":1000,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-07-foundry-defi-stablecoin","startDate":"2023-07-24T04:00:00.000Z","endDate":"2023-08-05T04:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":null,"firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":236},{"id":"cljyfxlc40003jq082s0wemya","description":"This project is meant to enable smart contract auditors (sellers) and smart contract protocols looking for audits (buyers) to connect using a credibly neutral option, with optional arbitration.\n\n","company":"Cyfrin","name":"CodeHawks Escrow Contract - Competition Details","protocolTags":"foundry","urlSlug":"2023-07-escrow","logoImgPublicId":"company/v2pdne7zfd9ja6mqk3qb","reward":40000,"rewardHighMedium":37000,"rewardLow":3000,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-07-escrow","startDate":"2023-07-24T04:00:00.000Z","endDate":"2023-08-05T04:00:00.000Z","appealStartDate":null,"appealEndDate":null,"communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"leadJudgeId":null,"firstFlight":false,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"nsloc":186}]}},{"result":{"data":[{"id":"cm1ulc8zx0007d0933baqbdh4","description":"The Starknet Auction protocol is a simple auction protocol that enables the auction of NFTs using ERC20 tokens as bid currency. ","content":"# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: October 10, 2024 Noon UTC\n- Ends: October 17, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 132\n\n# Starknet Auction\n\n## Disclaimer\n\n_This code was created for Codehawks as the first flight. It is made with bugs and flaws on purpose._\n_Don't use any part of this code without reviewing it and audit it._\n\n_Created by Bube_\n\n[//]: # (contest-details-open)\n\n# About\n\nThe Starknet Auction protocol is a simple auction protocol that enables the auction of NFTs using ERC20 tokens as bid currency. The NFT owner is the admin of the protocol. The NFT owner deploys the protocol and starts the auction. The participants in the auction (called users/bidders) place bids. Each bid should be bigger than the previous highest bid. The participants may have multiple bids. Аfter the auction time expires the bidder who made the highest bid wins the auction and receives the NFT. The owner of the NFT receives the value of the highest bid and the other participants can withdraw their unsuccessful bids.\n\n## Functions:\n\n- `start` - This function starts the auction, setting the bidding duration, the starting price, and marking the auction as started. It also transfers the NFT from the owner to the auction contract. Only the owner of the contract can call this function.\n\n- `bid` - Users/Bidders can place bids with `ERC20` tokens. The bid must be higher than the current highest bid. The contract updates the highest bid and highest bidder upon receiving a valid bid. The `ERC20` tokens for the bid are transferred to the contract.\n\n- `withdraw` - The owner withdraws the value of the highest bid, and other participants withdraw their unsuccessful bids after the end of the auction.\n\n- `end` - This function finalizes the auction. It checks that the auction duration has elapsed and transfers the NFT to the highest bidder and marks the auction as ended. Only the owner of the contract can call this function.\n\n- `get_bid` - This is a getter function that returns the current highest bid in the auction.\n\n## Actors\n\n- NFT Owner/Admin (Trusted) - Initiates the auction and receives the value of the highest bid. \n- Bidders/Users - Place bids and can withdraw their bids if they don't win. The bidder with the highest bid wins the NFT.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\nYou should install [`Scarb`](https://docs.swmansion.com/scarb/download.html). \nIt is recommended to install Scarb via [`asdf`](https://docs.swmansion.com/scarb/download.html#install-via-asdf), a CLI tool that can manage multiple language runtime versions on a per-project basis. This will ensure that the version of Scarb you use to work on a project always matches the one defined in the project settings, avoiding problems related to version mismatches.\nPlease refer to the [`asdf`](https://asdf-vm.com/guide/getting-started.html) documentation to install all prerequisites.\n\nOnce you have `asdf` installed locally, you can download `Scarb` plugin with the following command:\n\n```bash\nasdf plugin add scarb\n```\n\nThis will allow you to download specific versions:\n\n```bash\nasdf install scarb 2.8.1\n```\n\nand set a global version:\n\n```bash\nasdf global scarb 2.8.1\n```\n\nYou can verify installation by running the following command in a new terminal session, it should print both `Scarb` and `Cairo` language versions, e.g:\n\n```javascript\n$ scarb --version\nscarb 2.8.1 (09590f5fc 2024-08-27)\ncairo: 2.8.0 (https://crates.io/crates/cairo-lang-compiler/2.8.0)\nsierra: 1.6.0\n```\nReference: [`Cairo Book`](https://book.cairo-lang.org/ch01-01-installation.html)\n\n### **Install `Foundry` for `Starknet`:**\n\nInstall via `snfoundryup`. `Snfoundryup` is the `Starknet Foundry` toolchain installer. You can install it by running:\n\n```bash\ncurl -L https://raw.githubusercontent.com/foundry-rs/starknet-foundry/master/scripts/install.sh | sh\n```\n\nFollow the instructions and then run:\n\n```bash\nsnfoundryup\n```\n\nSee `snfoundryup --help` for more options.\n\nTo verify that the `Starknet Foundry` is installed correctly, run `snforge --version` and `sncast --version`.\nInstallation via `asdf`. First, add the `Starknet Foundry` plugin to `asdf`:\n\n```bash\nasdf plugin add starknet-foundry\n```\n\nInstall the latest version:\n\n```bash\nasdf install starknet-foundry latest\n```\n\nSee [`asdf guide`](https://asdf-vm.com/guide/getting-started.html) for more details.\n\nReference: [`The Starknet Foundry Book`](https://foundry-rs.github.io/starknet-foundry/getting-started/installation.html).\n\n# Setup\n\nClone the repo\n\n```bash\ngit clone .....\n```\n\n```bash\ncd ....\n```\n\nBuild and run tests\n\n```bash\nsnforge test --features enable_for_tests\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- In Scope:\n\n```\nsrc/\n├── starknet_auction.cairo\n\n```\n\nThe `mock_erc20_token.cairo` and `mock_erc721_token.cairo` contracts are used only in tests and are out of scope.\n\n## Compatibilities\n\n- Blockchains: Starknet\n- Tokens: STRK\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\n- We can assume that the approval of the ERC721 and ERC20 tokens is done before the transfer.\n- The protocol doesn't use safe_transfer_from when transfers the ERC721 token.\n\n[//]: # (known-issues-close)","company":"First Flight #26","protocolTags":"beginnerFriendly, nft","name":"Starknet Auction","urlSlug":"2024-10-starknet-auction","logoImgPublicId":"company/pd8wkmjqrxr0ftnfd4zw","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"","startDate":"2024-10-10T12:00:00.000Z","endDate":"2024-10-17T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":null,"firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":false,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":132},{"id":"cm1f6lg6s00011lm9rt620s6u","description":"MysteryBox is a thrilling protocol where users can purchase mystery boxes containing random rewards! Open your box to reveal amazing prizes, or trade them with others. Will you get lucky and find the rare treasures?","content":"# First Flight #25: MysteryBox\n\n### Prize Pool\n\n- High - 100 XP\n- Medium - 20 XP\n- Low - 2 XP\n\n- Starts: September, 26 2024 Noon UTC\n\n- Ends: October, 03 2024 Noon UTC\n\n- nSLOC: 86\n\n[//]: # (contest-details-open)\n\n## About the Project\n\n**MysteryBox** is a thrilling protocol where users can purchase mystery boxes containing random rewards! Open your box to reveal amazing prizes, or trade them with others. Will you get lucky and find the rare treasures?\n\n### Actors\n\n- **Owner/Admin (Trusted)** - Can set the price of boxes, add new rewards, and withdraw funds.\n- **User/Player** - Can purchase mystery boxes, open them to receive rewards, and trade rewards with others.\n\n[//]: # (contest-details-close)\n\n[//]: # (scope-open)\n\n## Scope (contracts)\n\nAll Contracts in `src` are in scope.\n\n```js\nsrc/\n├── MysteryBox.sol\n```\n## Compatibilities\n\n- **Blockchains**: EVM Equivalent Chains Only\n- **Tokens**: Standard ERC20 Tokens Only\n\n[//]: # (scope-close)\n\n[//]: # (getting-started-open)\n\n## Setup\n\nClone the repo\n```bash\ngit clone https://github.com/Cyfrin/2024-09-mystery-box.git\n```\nOpen in VSCode\n```bash\ncode 2024-09-mystery-box/\n```\n\nBuild and run tests\n```bash\nforge test\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\n- No known issues\n\n[//]: # (known-issues-close)","company":"First Flight #25","protocolTags":"beginnerFriendly, foundry","name":"Mystery Box","urlSlug":"2024-09-mystery-box","logoImgPublicId":"company/oipnxzytq7wamtzeeepn","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-09-mystery-box","startDate":"2024-09-26T12:00:00.000Z","endDate":"2024-10-03T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":false,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":86},{"id":"cm0sgbf8l0001jqvxpwdvewan","description":"With a US election coming up, we started thinking about elections and how... well they suck. Most governments follow a \"1 person 1 vote\" style voting, which ultimately leads to a 2 party system. So, for our project, we decided to implement a ranked choice on-chain voting mechanism!","content":"# President Elector\n\n### Prize Pool TO BE FILLED OUT BY CYFRIN\n\n- Starts: September 12, 2024 Noon UTC\n- Ends: September 19, 2024 Noon UTC\n\n- nSLOC: 140\n\n[//]: # (contest-details-open)\n\n## About the Project\n\nWith a US election coming up, we started thinking about elections and how... well they suck. Most governments follow a \"1 person 1 vote\" style voting, which ultimately [leads to a 2 party system](https://www.youtube.com/watch?v=qf7ws2DF-zk). So, for our project, we decided to implement a ranked choice on-chain voting mechanism! \n\nOur project showcases a ranked choice voting smart contract. The contract will have a specific set of voters initialized at construction, so we don't have to worry about sybil attacks. \n\nThe setup looks as such:\n\n1. The initial president is set as the msg.sender, and each president should have a term of roughly 4 years (1460 days).\n2. Voters can call `rankCandidates` to rank candidates (which can be any address) any time to queue up their votes for the next president. \n3. After the 4 year term has passed, anyone can call `selectPresident` which will select the new `s_currentPresident` based on the queued up ranks of each voter.\n4. Voters can also sign an un-sent transaction so others can spend the gas to cast their vote with `rankCandidatesBySig`\n\n\n## About Ranked Choice Voting\n\nRanked choice voting is where candidates rank their choices, as opposed to voting for a single candidate. Once all votes have been collected, candidates go through \"rounds\" to choose a new president. Each \"round\" the candidate with the least votes is eliminated, and voters who selected that candidate who was removed will have their vote then count for whoever was selected next. You can see a gif of it here.\n\n![alt text](img/ranked-choice-visualization.gif)\n> Gif from [ballotpedia](https://ballotpedia.org/Ranked-choice_voting_(RCV))\n\n## Actors\n\n- Voters: Users who can vote for president. They are identified at construction time.\n- Candidates: Users who received at least 1 vote.\n- President: The current winner of the ranked choice algorithm. \n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started \n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n- [soldeer](https://soldeer.xyz/)\n - You'll know you did it right if you can run `soldeer --version` and you see a response like `soldeer 0.x.x`\n\n## Installation\n\nThis repo uses [https://soldeer.xyz/] for package management. If you haven't installed [soldeer](https://soldeer.xyz/), head over to their documentation to get started. \n\n```bash\ngit clone https://github.com/Cyfrin/2024-09-president-elector\ncd 2024-09-president-elector\nsoldeer install\nforge build\n```\n\n## Quickstart\n\n```bash\nforge test\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Scope\n\n```\n./src/RankedChoice.sol\n```\n\n# Compatibilities\n\n- solc_version: \"0.8.24\"\n- Chain(s) to deploy to:\n - ETH Mainnet\n- Deployment information:\n - Out of scope\n- Tokens:\n - None\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\n- In `_selectPresidentRecursive` there is an issue where if two candidates are tied, whoever was earlier in the list is dropped. This is known, and we are OK with it.\n- There are other issues with this style of voting, like for example, in some cases a candidate who does worse will win. You can see a [longer explainer here.](https://www.youtube.com/watch?v=qf7ws2DF-zk)\n- We know that `1460 days` is not exactly 4 years. We are OK with that.\n\n[//]: # (known-issues-close)\n","company":"First Flight #24","protocolTags":"beginnerFriendly, foundry","name":"President Elector","urlSlug":"2024-09-president-elector","logoImgPublicId":"company/jgsrylmgbxsjgmex02qj","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-09-president-elector","startDate":"2024-09-12T12:00:00.000Z","endDate":"2024-09-19T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":"2024-09-24T09:30:00.000Z","appealEndDate":"2024-09-26T09:30:00.000Z","leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":140},{"id":"cm08g79zj00073j81clrlhpzw","description":"MyCut is a contest rewards distribution protocol which allows the set up and management of multiple rewards distributions!","content":"# First Flight #23: MyCut\n\n### Prize Pool\n\n- High - 100 XP\n- Medium - 20 XP\n- Low - 2 XP\n\n- Starts: August, 29 2024 Noon UTC\n\n- Ends: September 05, 2024 Noon UTC\n\n- nSLOC: 106\n\n[//]: # (contest-details-open)\n\n## About the Project\n\nMyCut is a contest rewards distribution protocol which allows the set up and management of multiple rewards distributions, allowing authorized claimants 90 days to claim before the manager takes a cut of the remaining pool and the remainder is distributed equally to those who claimed in time!\n\n### Actors\n\n- Owner/Admin (Trusted) - Is able to create new Pots, close old Pots when the claim period has elapsed and fund Pots\n- User/Player - Can claim their cut of a Pot\n\n[//]: # (contest-details-close)\n\n[//]: # (scope-open)\n\n## Scope (contracts)\n\nAll Contracts in `src` are in scope.\n\n```js\nsrc/\n├── ContestManager.sol\n├── Pot.sol\n```\n\n## Compatibilities\n\n- Blockchains: EVM Equivalent Chains Only\n- Tokens: Standard ERC20 Tokens Only\n\n\n[//]: # (scope-close)\n\n[//]: # (getting-started-open)\n\n## Setup\n\nClone the repo\n```bash\ngit clone https://github.com/Cyfrin/2024-08-MyCut.git\n```\nOpen in VSCode\n```bash\ncode 2024-08-MyCut/\n```\n\nBuild and run tests\n```bash\nforge test\n```\n\n\n[//]: # (getting-started-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\n- No known issues\n\n[//]: # (known-issues-close)\n","company":"First Flight #23","protocolTags":"beginnerFriendly, foundry","name":"MyCut","urlSlug":"2024-08-MyCut","logoImgPublicId":"company/iqtqohmdzqnmte0xxxog","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-08-MyCut","startDate":"2024-08-29T12:00:00.000Z","endDate":"2024-09-05T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":"2024-09-10T17:15:00.000Z","appealEndDate":"2024-09-12T17:15:00.000Z","leadJudgeId":"clldzdkk60000mr082grbuj97","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":106},{"id":"clznww1gy0008skcbx8dt1zdu","description":"Steak is a yield farming protocol in its pre-launch phase. It boasts an attractive APY, various vault management strategies, and a strong and active community. Being in the pre-launch phase, Steak wants to bootstrap liquidity for its ERC4626 WETH vault and reward early adopters. For this, Steak has launched a points campaign where users can stake their ETH and earn points, which will allow users to be eligible for the $STEAK token airdrop in the future.","content":"# Steaking\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: August 15, 2024 Noon UTC\n- Ends: August 22, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 177\n- Complexity Score: 🤷\n\n[//]: # (contest-details-open)\n\n## About the Project\n\nSteak is a yield farming protocol in its pre-launch phase. It boasts an attractive APY, various vault management strategies, and a strong and active community. Being in the pre-launch phase, Steak wants to bootstrap liquidity for its ERC4626 WETH vault and reward early adopters. For this, Steak has launched a points campaign where users can stake their ETH and earn points, which will allow users to be eligible for the $STEAK token airdrop in the future.\n\nThe staking period lasts for a total of 4 weeks where users can stake their raw ETH in the `Steaking` contract. The minimum amount that can be staked is `0.5` ether. 1 ETH staked gives the user 1000 points on the backend server. Users can unstake to adjust their staked ETH amount, or withdraw it completely.\n\nAfter the 4 week staking period ends, the Steak protocol team will set the address of the freshly deployed ERC4626 WETH vault. Users will be able to convert their raw staked ETH into WETH, deposit into the WETH vault, and claim their shares.\n\n## Actors\n\n1. **Users**: Can stake and unstake raw ETH into the vault. After the staking period ends, users can convert ETH to WETH, and deposit it into the WETH vault.\n2. **Steak protocol team multisig**: The multisig is the owner of the `Steaking` contract, and is responsible for setting the vault address after the staking period ends.\n\n[//]: # (contest-details-close)\n\n[//]: # (scope-open)\n\n## Scope (contracts)\n\nAll the files listed below are in scope.\n\n```\nsrc\n├── steaking-contracts\n│ └── src\n│ └── Steaking.vy\n└── steaking-server\n └── src\n ├── models\n │ └── steakPoints.js\n ├── utils\n │ ├── connectToMongoDb.js\n │ ├── constants.js\n │ └── getConfig.js\n └── main.js\n```\n\n## Compatibilities\n\nThe `Steaking` contract is to be deployed on Ethereum mainnet only.\n\n[//]: # (scope-close)\n\n[//]: # (getting-started-open)\n\n## Setup\n\nEnsure that you have git, python3, pip3, venv, foundry, node.js, and pnpm installed and configured on your system.\n\n### Setting up the contracts\n\nCd into the `steaking-contracts` folder, create a virtual environment with python3 venv, and activate it,\n\n```bash\ncd steaking-contracts\n\npython3 -m venv .venv\n\nsource .venv/bin/activate\n```\n\nThen install all the requirements from `requirements.txt`,\n\n```bash\npip3 install -r requirements.txt\n```\n\nNow, it's time to setup Foundry,\n\n```bash\nforge test\n```\n\nThat's it! You should be good to go now.\n\n### Setting up the server\n\nThis one is slightly easier. Cd into `steaking-server`,\n\n```bash\ncd steaking-server\n```\n\nContinue by filling in the values in `.env.example`, and renaming the file to `.env`. Then install the node modules,\n\n```bash\npnpm install\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\nThe protocol has not been audited before, and there are no currently known issues.\n\n[//]: # (known-issues-close)\n","company":"First Flight #22","protocolTags":"beginnerFriendly, foundry, defi","name":"First Flight #22: Steaking","urlSlug":"2024-08-steaking","logoImgPublicId":"company/tyghhcrtssamygb7id26","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-08-steaking","startDate":"2024-08-15T12:00:00.000Z","endDate":"2024-08-22T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":"2024-08-23T12:00:00.000Z","appealEndDate":"2024-08-25T12:00:00.000Z","leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":0},{"id":"clz44dghd0001l1umnr1tbj1r","description":"KittyFi, a EUR pegged stablecoin based protocol which proactively maintains the user's deposited collateral to earn yield on it via Aave protocol.\nWith KittyFi, the collateral deposited by user will not just remain in there for backing the KittyCoin but will earn yield on it via Aave protocol.\nBy utilizing the interest earned on collateral, the protocol will reduce the risk of user getting liquidated by equally allocating the interest earned on collateral to every user in the pool.","content":"# First Flight #21: KittyFi\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: August 01, 2024 Noon UTC\n- Ends: August 08, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 224\n- Complexity Score: 203\n\n[//]: # (contest-details-open)\n\n# Disclaimer\n\n_This code was created for Codehawks as a first flight. It is made with bugs and flaws on purpose._\n_Don't use any part of this code without reviewing it and audit it._\n\n# About\nKittyFi, a EUR pegged stablecoin based protocol which proactively maintains the user's deposited collateral to earn yield on it via Aave protocol.\n\nWith KittyFi, the collateral deposited by user will not just remain in there for backing the KittyCoin but will earn yield on it via Aave protocol.\n\nBy utilizing the interest earned on collateral, the protocol will reduce the risk of user getting liquidated by equally allocating the interest earned on collateral to every user in the pool.\n\n### KittyCoin\nThe stable coin of KittyFi protocol which is pegged to EUR and can be minted by supplying collateral and minting via KittyPool.\n\n### KittyPool\nThis smart contract is assigned the role to allow user to deposit collateral and mint KittyCoin from it. The KittyPool contract routes the call to the respective vault for deposit and withdrawal fo collateral which is created for every collateral token used in protocol.
\nThe user is required to main overcollateralization in order to prevent liquidation of their pawsition (I mean position (meows, purrss)).\n\nThe pool also handles liquidations, the user gets some percentage reward on the collateral liquidated from the user's vault.\n\n### KittyVault\nEvery collateral token have their own vault deployed via `KittyPool` contract.\nThe vault is responsible for maintaining the collateral deposited by user and supply it to Aave protocol to earn yield on it.\nThe KittyVault when queried with the amount of collateral present in it or collateral of user, then it will return the interest earned total collateral.\n\n### Actors\n- `User` - Performing deposit and withdrawal of collateral along with minting and burning of KittyCoin\n- `Meowntainer` - Responsible for performing executions to supply and withdraw collateral from Aave protocol on KittyVault\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n## Installation\n\n1. Clone the repository and compile contracts\n```bash \ngit clone https://github.com/cyfrin/2024-08-kitty-fi\ncode 2024-08-kitty-fi\nmake\n```\n\n## Build\n\n```\nmake build\n```\n\n## Test\n\n```\nmake test\n```\n\n## Note\n\nAs custom errors are used in require statements, therefore don't forgot to use `--via-ir` flag in command\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- In Scope:\n```\nsrc/KittyCoin.sol\nsrc/KittyPool.sol\nsrc/KittyVault.sol\n```\n\n## Compatibilities\n\n- Solc Version: `0.8.26`\n- Chain(s) to deploy contract to:\n - Ethereum\n - Polygon\n - Avalanche\n- Tokens that can be used as collateral: All tokens avaiable for lending on Aave pool on respective chains except for Fee on Transfer tokens and Rebasing tokens.\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues and Assumptions\n\n- Trusted roles - Meowntainer (You trust your cat, then you have to trust Meowntainer, purrrr)\n- The `vaults` array used in KittyPool will not have a length more than 20, that means that are at most 20 collateral tokens that will be used in protocol.\n\n[//]: # (known-issues-close)\n","company":"First Flight #21","protocolTags":"beginnerFriendly, defi, foundry","name":"First Flight #21: KittyFi","urlSlug":"2024-08-kitty-fi","logoImgPublicId":"company/xw8lhsp7aczf4ffdx5ik","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-08-kitty-fi","startDate":"2024-08-01T12:00:00.000Z","endDate":"2024-08-08T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":"2024-08-10T09:45:00.000Z","appealEndDate":"2024-08-12T09:45:00.000Z","leadJudgeId":"clk3yh639002emf08ywok1hzf","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":224},{"id":"clyknsu9a0009a8utwuybof37","description":"The Predicter is an innovative competitive betting protocol offering a decentralized and fair way for friends and strangers to make wagers!","content":"# The Predicter\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: July 18, 2024 Noon UTC\n- Ends: July 25, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 191\n- Complexity Score: 119\n\n## Disclaimer\n\n_This code was created for CodeHawks as a Community First Flight. It is made with bugs and flaws on purpose._\n\n_Do NOT use any part of this code without reviewing it and auditing it._\n\n[//]: # (contest-details-open)\n\n# Contest Details\n\n_Created by [NightHawK](https://www.codehawks.com/profile/clvmfeh090004jbg1f2oa6srl)_\n\n[Twitter](https://twitter.com/HawkApprovedDA)\n\n## About\n\nIvan and his 15 friends are big football fans and they decided to watch the matches of a football tournament together. Ivan has found a suitable hall with a capacity of 30 people in which they can watch the matches. To make it more interesting, and to pay the hall rent, Ivan decides to organize betting on the matches, as well as to invite up to 14 other completely random people to join in watching and betting.\n\nIvan and his 15 friends are always honest and well-intentioned, but nothing is known about the other people and their intentions, so, Ivan decided to use the modern Web 3 technologies to develop the betting system. He is a novice Web 3 developer and therefore Ivan needs your help to audit the protocol he has developed.\n\nThe protocol have the following roles: Organizer, User and Player. Everyone can be a User and after approval of the Organizer can become a Player. Ivan has the roles of both Organizer and Player. Ivan's 15 friends are Players. These 16 people are considered honest and trusted. They will not intentionally take advantage of vulnerabilities in the protocol. The Users and the other 14 people with the role of Players are unknown and the protocol must be protected from any malicious actions by them.\n\nThe entrance fees paid at the beginning form the prize fund, which after the end of the tournament is distributed among all Players who paid at least one prediction fee and depending on theirs collected number of points.\n\nWhen Player is making prediction, a prediction fee is required to be paid. Ivan also has to pay this fee. No second prediction fee is due if any Player desires to change an already paid prediction. The funds collected from this prediction fees are used to cover the costs of the hall and the Organizer must be able to withdraw those funds at any time.\n\nThe entrance fee and prediction fee are parameters of the protocol that are set when it is deployed on the Arbitrum blockchain.\n\nThe start of the tournament is set to Thu Aug 15 2024 20:00:00 UTC. A total of 9 matches will be played.\n\nUntil 16:00:00 UTC on the day of the start of the tournament, Users can register by paying the entry fee. Anyone registered must be approved by the Organizer to become a Player. As the Organizer, Ivan will give priority approval to him and his other 15 friends. He will then approve some of the remaining registered Users until the maximum number is filled. Ivan and all 15 of his friends will register.\n\nUser who is not approved can withdraw the deposited entry fee at any time.\n\nTwo teams take part in the matches. Each match can end with:\n\n- first team win (prediction First);\n- second team win (prediction Second);\n- or with a tie (prediction Draw).\n\nEvery day from 20:00:00 UTC one match is played. Until 19:00:00 UTC on the day of the match, predictions can be made by any approved Player. Players pay prediction fee when making their first prediction for each match.\n\nAfter the end of each match the Organizer will enter the match result.\n\nThe prediction of the Player is correct if it is equal to the entered final result from the Organizer. The Player will:\n\n- receive 2 points for a correct prediction for which a prediction fee has been paid;\n- lose 1 point for a wrong prediction for which a prediction fee has been paid;\n- neighter receive nor lose any points if he has not given a prediction or the corresponding prediction fee has not been paid.\n\nAfter the Organizer has entered the result from the last match (the 9th match), Players can take their rewards from the prize pool. Players can receive an amount from the prize fund only if their total number of points is a positive number and if they had paid at least one prediction fee. The prize fund is distributed in proportion to the points collected by all Players with a positive number of points. If all Players have a negative number of points, they will receive back the value of the entry fee.\n\nThe protocol consists the following contracts.\n\n## ScoreBoard.sol\n\nThe `ScoreBoard` contract is responsible for keeping the predictions of the Players and the final results of all the matches. This contract provides the calculation of the final score (number of points) of all the Players.\n\n- `setResult` allows the Organizer to set the final result of any match.\n- `confirmPredictionPayment` is executed by `ThePredicter` contract in order to mark the corresponding prediction of the Player as paid.\n- `setPrediction` sets the prediction of the Player for the given match. This function is called when the Player pays the prediction fee. It can be called again by the Players to alter their predictions without a second payment of the prediction fee which is according to the rules.\n- `clearPredictionsCount` is used to make the Player ineligible for a second reward after reward collection.\n- `getPlayerScore` is used to calculate the score of any Player.\n- `isEligibleForReward` returns whether the Player is compliant with the rules for getting a reward.\n\n## ThePredicter.sol\n\nThe `ThePredicter` contract is supposed to manage the registration of the players, to collect the entrance and prediction fees and to distribute the rewards.\n\n- `register` allows Users to pay the entrance fee and become cadidates for Players.\n- `cancelRegistration` allows the Users which are still not approved for Players to cancel their registration and to withdraw the paid entrance fee.\n- `approvePlayer` allows the Organizer to approve any user to be a Player.\n- `makePrediction` allows the Players to pay the prediction fee and in the same time to set their prediction for the corresponding match.\n- `withdrawPredictionFees` allows the Organizer to withdraw the current amount of the prediction fees.\n- `withdraw` allows the Players to withdraw their rewards after the end of the tournament.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (4aa17bc 2024-05-14T00:16:59.874867353Z)`\n\n## Usage\n\n## Setup\n\n```\ngit clone https://github.com/Cyfrin/2024-07-the-predicter\ncode 2024-07-the-predicter\nmake install\nmake test\n```\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- In Scope:\n\n```\n├── src\n│ ├── Scoreboard.sol\n│ ├── ThePredicter.sol\n```\n\n## Compatibilities\n\n- Solc Version: `0.8.20`\n- Chain(s) to deploy contract to:\n - Arbitrum\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\nNone\n\n[//]: # (known-issues-close)\n","company":"First Flight #20","protocolTags":"beginnerFriendly, foundry","name":"First Flight #20: The Predicter","urlSlug":"2024-07-the-predicter","logoImgPublicId":"company/pcnnystmxhipituqplyo","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-07-the-predicter","startDate":"2024-07-18T12:00:00.000Z","endDate":"2024-07-25T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":"2024-07-27T13:00:00.000Z","appealEndDate":"2024-07-29T13:00:00.000Z","leadJudgeId":"clvmfeh090004jbg1f2oa6srl","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":191},{"id":"clxyxpmnp0001fijub81drn2y","description":"The Mondrian Wallet team is at it again, with tighter code and zkSync account abstraction!","content":"# Mondrian Wallet v2\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: July 04, 2024 Noon UTC\n- Ends: July 11, 2024 Noon UTC\n\n- nSloc: 105\n\n[//]: # (contest-details-open)\n\n## About\n\nThe Mondrian Wallet team is back! And they decided \"oh wow, zkSync has native account abstraction! Let's just use that. Also, we introduced a lot of bugs, so let's just make this codebase upgradeable, so that only the owner of the wallet can introduce functionality later as they see fit. Also, the NFT gimmick was silly so, let's not do that again.\"\n\nIf the contracts are upgradeable, we'll just be able to upgrade them if there is a bug, so no issues right? \n\nTo *really* understand this codebase, you'll want to learn about:\n- Account Abstraction\n- zkSync System Contracts\n- Upgradable smart contracts via UUPS\n\n## Actions\n\nThe Mondrian Wallet v2 will allow users to have a native smart contract wallet on zkSync, it will implement all the functionality of `IAccount.sol`. \n\nYou can learn more about about account abstraction on zkSync by watching the [account abstraction Cyfrin Updraft section](https://updraft.cyfrin.io/courses/advanced-foundry/account-abstraction/introduction).\n\nThe wallet should be able to do anything a normal EoA can do, but with limited functionality interacting with system contracts. \n\n## Roles\n\n- `Owner` - The owner of the wallet, who can upgrade the wallet.\n- zkSync system contracts - We don't consider these \"actors\" for the audit. \n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started \n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n- [foundry-zksync](https://github.com/matter-labs/foundry-zksync)\n - You'll know you did it right if you can run `forge-zksync --help` and you see `zksync` somewhere in the output\n\n## Installation\n\n```bash\ngit clone https://github.com/Cyfrin/2024-07-Mondrian-Wallet_v2.git\ncd 2024-07-Mondrian-Wallet_v2\nmake\n```\n\n# Quickstart \n\n```bash\nmake build # this will update foundry-zksync\nmake test # this will run with via-ir and --system-mode=true\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n## Scope\n\n```\n./src/\n#-- MondrianWallet2.sol\n```\n\n## Compatibilities\n\n- solc_version: \"0.8.24\",\n- solc_zkvm_edition: \"1.0.1\",\n- zkSolc: \"1.4.1\"\n- Chain(s) to deploy to:\n - zkSync Era Mainnet\n- Deployment information:\n - Out of scope\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\n- The wallet may not work as intended with zksync system contracts. The only system contract that it is expected to work correctly with is the `DEPLOYER_CONTRACT` and the `NONCE_HOLDER_SYSTEM_CONTRACT`.\n- We are using the `cyfrin/foundry-era-contracts` package, which is not what the zkSync documentation recommends. Please ignore.\n\n[//]: # (known-issues-close)\n","company":"First Flight #19","protocolTags":"beginnerFriendly, foundry","name":"First Flight #19: Mondrian Wallet v2","urlSlug":"2024-07-Mondrian-Wallet_v2","logoImgPublicId":"company/hqfo5wgg4uxt9drkfzea","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-07-Mondrian-Wallet_v2","startDate":"2024-07-04T12:00:00.000Z","endDate":"2024-07-11T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":"2024-07-15T13:30:00.000Z","appealEndDate":"2024-07-17T13:30:00.000Z","leadJudgeId":"clk3y8e9u000cjq08uw5phym7","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":105},{"id":"clxkt59ib0001fgzg4py6ngp0","description":"This project is meant to be a permissionless way for users to swap assets between each other at a fair price. You can think of T-Swap as a decentralized asset/token exchange (DEX). T-Swap is known as an Automated Market Maker (AMM) because it doesn't use a normal \"order book\" style exchange, instead it uses \"Pools\" of an asset. It is similar to Uniswap. ","content":"\n# First Flight #18: TSwap\n\n- [Contest Details](#contest-details)\n - [Prize Pool](#prize-pool)\n - [Stats](#stats)\n - [TSwap](#tswap)\n - [TSwap Pools](#tswap-pools)\n - [Liquidity Providers](#liquidity-providers)\n - [Why would I want to add tokens to the pool?](#why-would-i-want-to-add-tokens-to-the-pool)\n - [LP Example](#lp-example)\n - [Core Invariant](#core-invariant)\n - [Make a swap](#make-a-swap)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Quickstart](#quickstart)\n- [Usage](#usage)\n - [Testing](#testing)\n - [Test Coverage](#test-coverage)\n- [Audit Scope Details](#audit-scope-details)\n - [Actors / Roles](#actors--roles)\n - [Known Issues](#known-issues)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: June 20, 2024 Noon UTC\n- Ends: June 27, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: \n - 276\n- Complexity Score:\n - 174\n\n[//]: # (contest-details-open)\n\n_If you've taken the [Cyfrin Updraft security & auditing course](https://updraft.cyfrin.io/courses/security), this will look very familiar to you!_\n\n_This will be one of the more challenging first flights, but understanding the basics of how a DEX works will be crucial if you want to get good at auditing DeFi smart contracts._\n\n## TSwap \n\nThis project is meant to be a permissionless way for users to swap assets between each other at a fair price. You can think of T-Swap as a decentralized asset/token exchange (DEX). \nT-Swap is known as an [Automated Market Maker (AMM)](https://chain.link/education-hub/what-is-an-automated-market-maker-amm) because it doesn't use a normal \"order book\" style exchange, instead it uses \"Pools\" of an asset. \nIt is similar to Uniswap. To understand Uniswap, please watch this video: [Uniswap Explained](https://www.youtube.com/watch?v=DLu35sIqVTM)\n\n## TSwap Pools\nThe protocol starts as simply a `PoolFactory` contract. This contract is used to create new \"pools\" of tokens. It helps make sure every pool token uses the correct logic. But all the magic is in each `TSwapPool` contract. \n\nYou can think of each `TSwapPool` contract as it's own exchange between exactly 2 assets. Any ERC20 and the [WETH](https://etherscan.io/token/0xc02aaa39b223fe8d0a0e5c4f27ead9083c756cc2) token. These pools allow users to permissionlessly swap between an ERC20 that has a pool and WETH. Once enough pools are created, users can easily \"hop\" between supported ERC20s. \n\nFor example:\n1. User A has 10 USDC\n2. They want to use it to buy DAI\n3. They `swap` their 10 USDC -> WETH in the USDC/WETH pool\n4. Then they `swap` their WETH -> DAI in the DAI/WETH pool\n\nEvery pool is a pair of `TOKEN X` & `WETH`. \n\nThere are 2 functions users can call to swap tokens in the pool. \n- `swapExactInput`\n- `swapExactOutput`\n\nWe will talk about what those do in a little. \n\n## Liquidity Providers\nIn order for the system to work, users have to provide liquidity, aka, \"add tokens into the pool\". \n\n### Why would I want to add tokens to the pool? \nThe TSwap protocol accrues fees from users who make swaps. Every swap has a `0.3` fee, represented in `getInputAmountBasedOnOutput` and `getOutputAmountBasedOnInput`. Each applies a `997` out of `1000` multiplier. That fee stays in the protocol. \n\nWhen you deposit tokens into the protocol, you are rewarded with an LP token. You'll notice `TSwapPool` inherits the `ERC20` contract. This is because the `TSwapPool` gives out an ERC20 when Liquidity Providers (LP)s deposit tokens. This represents their share of the pool, how much they put in. When users swap funds, 0.03% of the swap stays in the pool, netting LPs a small profit. \n\n### LP Example\n1. LP A adds 1,000 WETH & 1,000 USDC to the USDC/WETH pool\n 1. They gain 1,000 LP tokens\n2. LP B adds 500 WETH & 500 USDC to the USDC/WETH pool \n 1. They gain 500 LP tokens\n3. There are now 1,500 WETH & 1,500 USDC in the pool\n4. User A swaps 100 USDC -> 100 WETH. \n 1. The pool takes 0.3%, aka 0.3 USDC.\n 2. The pool balance is now 1,400.3 WETH & 1,600 USDC\n 3. aka: They send the pool 100 USDC, and the pool sends them 99.7 WETH\n\nNote, in practice, the pool would have slightly different values than 1,400.3 WETH & 1,600 USDC due to the math below. \n\n## Core Invariant \n\nOur system works because the ratio of Token A & WETH will always stay the same. Well, for the most part. Since we add fees, our invariant technially increases. \n\n`x * y = k`\n- x = Token Balance X\n- y = Token Balance Y\n- k = The constant ratio between X & Y\n\n```javascript\ny = Token Balance Y\nx = Token Balance X\nx * y = k\nx * y = (x + ∆x) * (y − ∆y)\n∆x = Change of token balance X\n∆y = Change of token balance Y\nβ = (∆y / y)\nα = (∆x / x)\n\nFinal invariant equation without fees:\n∆x = (β/(1-β)) * x\n∆y = (α/(1+α)) * y\n\nInvariant with fees\nρ = fee (between 0 & 1, aka a percentage)\nγ = (1 - p) (pronounced gamma)\n∆x = (β/(1-β)) * (1/γ) * x\n∆y = (αγ/1+αγ) * y\n```\n\nOur protocol should always follow this invariant in order to keep swapping correctly!\n\n## Make a swap\n\nAfter a pool has liquidity, there are 2 functions users can call to swap tokens in the pool. \n- `swapExactInput`\n- `swapExactOutput`\n\nA user can either choose exactly how much to input (ie: I want to use 10 USDC to get however much WETH the market says it is), or they can choose exactly how much they want to get out (ie: I want to get 10 WETH from however much USDC the market says it is. \n\n## Actors / Roles\n- Liquidity Providers: Users who have liquidity deposited into the pools. Their shares are represented by the LP ERC20 tokens. They gain a 0.3% fee every time a swap is made. \n- Users: Users who want to swap tokens.\n\n*This codebase is based loosely on [Uniswap v1](https://github.com/Uniswap/v1-contracts/tree/master)*\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n## Quickstart\n\n```\ngit clone https://github.com/Cyfrin/2024-06-t-swap\ncode 2024-06-t-swap\nmake \n```\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing: \n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- Commit Hash: XXX\n- In Scope:\n```\n./src/\n#-- PoolFactory.sol\n#-- TSwapPool.sol\n```\n- Solc Version: 0.8.20\n- Chain(s) to deploy contract to: Ethereum\n- Tokens:\n - Any ERC20 token\n \n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\n- None\n\n[//]: # (known-issues-close)\n","company":"First Flight #18","protocolTags":"beginnerFriendly, defi, foundry","name":"First Flight #18: T-Swap","urlSlug":"2024-06-t-swap","logoImgPublicId":"company/yy5s3jzxfd9zula8go0q","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-06-t-swap","startDate":"2024-06-20T12:00:00.000Z","endDate":"2024-06-27T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":"2024-07-01T19:15:00.000Z","appealEndDate":"2024-07-03T19:15:00.000Z","leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":276},{"id":"clx1ufwjy006g3d8ddjdk3qfr","description":"Dussehra, a major Hindu festival, commemorates the victory of Lord Rama, the seventh avatar of Vishnu, over the demon king Ravana. The festival symbolizes the victory of good over evil, righteousness over wickedness.\n\nThe Dussehra protocol allows user to participate in the event of Dussehra. ","content":"# First Flight #17: Dussehra\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: June 06, 2024 Noon UTC\n- Ends: June 13, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 218\n- Complexity Score: 145\n\n[//]: # (contest-details-open)\n\n## Disclaimer\n\n_This code was created for Codehawks as the first flight. It is made with bugs and flaws on purpose._\n_Don't use any part of this code without reviewing it and auditing it._\n\n_Created by Naman Gautam_\n- [GitHub](https://github.com/Naman1729)\n- [Twitter](https://twitter.com/NamanGautam1729)\n- [LinkedIn](https://www.linkedin.com/in/naman-gautam-a8a81a253/)\n\n# About\n\n- Dussehra, a major Hindu festival, commemorates the victory of Lord Rama, the seventh avatar of Vishnu, over the demon king Ravana. The festival symbolizes the victory of good over evil, righteousness over wickedness. According to the epic Ramayana, Ravana kidnaps Rama's wife, Sita, leading to a brutal battle between Rama and his allies against Ravana and his forces. After a ten-day battle, Rama emerged victorious by slaying Ravana, marking the victory of virtue and the restoration of dharma. Dussehra is celebrated with grand processions, reenactments of Rama's victory, and the burning of effigies of Ravana, symbolizing the destruction of evil forces. It signifies the enduring significance of courage, righteousness, and the eventual victory of light over darkness.\n\n- The `Dussehra` protocol allows users to participate in the event of Dussehra. The protocol is divided into three contracts: `ChoosingRam`, `Dussehra`, and `RamNFT`. The `ChoosingRam` contract allows users to increase their values and select Ram, but only if they have not selected Ram before. The `Dussehra` contract allows users to enter the people who like Ram, kill Ravana, and withdraw their rewards. The `RamNFT` contract allows the `Dussehra contract` to mint Ram NFTs, update the characteristics of the NFTs, and get the characteristics of the NFTs.\n\n## ChoosingRam.sol\n\nThis contract allows users to increase their values and select Ram if all characteristics are true. If the user has not selected Ram before 12 October 2024, then the Organizer can select Ram if not selected.\n\n- `increaseValuesOfParticipants` allows users to increase their values(or characteristics) and become Ram for the event. The values will never be updated again after 12 October 2024.\n- `selectRamIfNotSelected` - Allows the organizer to select Ram if not selected by the user.\n\n## Dussehra.sol\n\nThis contract allows users to enter the people who like Ram, kill Ravana, and withdraw their rewards.\n\n`enterPeopleWhoLikeRam` allows users to enter the event like Ram by paying an entry fee and receiving the ramNFT.\n- `killRavana`—Allows users to kill Ravana, and the Organizer will receive half of the total amount collected in the event. This function will only work after 12 October 2024 and before 13 October 2024.\n- `withdraw` - Allows ram to withdraw their rewards.\n\n## RamNFT.sol\n\nThis contract allows the Dussehra contract to mint Ram NFTs, update the characteristics of the NFTs, and get the characteristics of the NFTs.\n\n- `setChoosingRamContract` - Allows the organizer to set the choosingRam contract. \n- `mintRamNFT` - Allows the Dussehra contract to mint Ram NFTs.\n- `updateCharacteristics` - Allows the ChoosingRam contract to update the characteristics of the NFTs. \n- `getCharacteristics` - Allows the user to get the characteristics of the NFTs.\n- `getNextTokenId` - Allows the users to get the next token id.\n\nNFTs are minted with the following characteristics:\n- `ram`: address of user\n- `isJitaKrodhah`: false // _JitaKrodhah means one who has conquered anger_\n- `isDhyutimaan`: false // _Dhyutimaan means one who is intelligent_\n- `isVidvaan`: false // _Vidvaan means one who is knowledgeable_\n- `isAatmavan`: false // _Aatmavan means one who is self-controlled_\n- `isSatyavaakyah`: false // _Satyavaakyah means one who speaks the truth_\n\n## Roles\n\nOrganizer - Organiser of the event and Owner of RamNFT contract\n\nUser - User who wants to participate in the event \n\nRam - The user who has selected Ram for the event\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n```\ngit clone https://github.com/Cyfrin/2024-06-Dussehra\ncd 2024-06-Dussehra\n```\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n- In Scope:\n\n```\n├── src\n│ ├── ChoosingRam.sol\n│ ├── Dussehra.sol\n│ ├── RamNFT.sol\n```\n\n## Compatibilities\n\n- Solc Version: `0.8.20`\n- Chain(s) to deploy contract to:\n - Ethereum\n - zksync\n - Arbitrum\n - BNB\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\nNone\n\n[//]: # (known-issues-close)\n","company":"First Flight #17","protocolTags":"beginnerFriendly, foundry, nft","name":"First Flight #17: Dussehra","urlSlug":"2024-06-Dussehra","logoImgPublicId":"company/q441dznuxpiqbypx0ll8","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-06-Dussehra","startDate":"2024-06-06T12:00:00.000Z","endDate":"2024-06-13T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clk3y8e9u000cjq08uw5phym7","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":218},{"id":"clwgiehgu00119zwn2xx92ay8","description":"An undercover AMA agent (anti-mafia agency) discovered a protocol used by the Mafia. In several days, a raid will be conducted by the police and we need as much information as possible about this protocol to prevent any problems. But the AMA doesn’t have any web3 experts on their team.\n\nHawks, they need your help!\n\nFind flaws in this protocol and send us your findings.","content":"\n# First Flight #16: Mafia Take Down\n\n# Table of Contents\n\n- [Contest Details](#contest-details)\n - [Prize Pool](#prize-pool)\n - [Stats](#stats)\n - [Disclaimer](#disclaimer)\n- [Table of Contents](#table-of-contents)\n- [About](#about)\n - [Policies](#policies)\n - [Modules](#modules)\n - [WeaponShelf](#weaponshelf)\n - [MoneyShelf](#moneyshelf)\n - [MoneyVault](#moneyvault)\n - [CrimeMoney](#crimemoney)\n - [Scripts](#scripts)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Installation](#installation)\n - [Quickstart](#quickstart)\n- [Audit Scope Details](#audit-scope-details)\n - [Compatibilities](#compatibilities)\n - [Roles](#roles)\n - [Known Issues](#known-issues)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: May 23, 2024 Noon UTC\n- Ends: May 30, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 205\n- Complexity Scope: 284\n\n[//]: # (contest-details-open)\n\n_A special thanks to n0kto for contributing this Community First Flight!_\n\nLearn more about n0kto!\n- [GitHub](https://github.com/n0kto)\n- [Twitter](https://x.com/n0kto)\n- [LinkedIn](https://www.linkedin.com/in/axel-leloup-659a15155/)\n\n### Disclaimer\n\n_This code was created for Codehawks as the first flight. It is made with bugs and flaws on purpose._\n_Don't use any part of this code without reviewing it and audit it._\n\n# About\n\nAn undercover AMA agent (anti-mafia agency) discovered a protocol used by the Mafia. In several days, a raid will be conducted by the police and we need as much information as possible about this protocol to prevent any problems. But the AMA doesn’t have any web3 experts on their team.\n\nHawkers, they need your help!\n\nFind flaws in this protocol and send us your findings.\n\n_This project uses the Default framework: https://github.com/fullyallocated/Default_\n\n## Policies\n\nPolicies are external-facing contracts that receive inbound calls to the protocol, and route all the necessary updates to data models via Modules. Access control and input validation are performed in these contracts.\n\n### Laundrette\n\nThe AMA intervention will be held in a Laundrette, the headquarters of the mafia. It seems they named the interface contract the same as their shell company.\n\nAnyone can deposit USDC to get CrimeMoney but only gang members and godfather can withdraw USDC. As the French say : giving is giving, taking back is stealing.\n\nUsers have to approve the MoneyShelf contract before calling the function to deposit.\n\nCurrently, the mafia does not have any way to control the incoming weapons so only the god father can account for them in real world and assign them to any gang members. Gang members has to withdraw them in the contract before taking them in real life. Since they don't want to lose a finger, they never forget to do it that way.\n\nThis contract is the admin of `Kernel.sol` to grant and revoke roles.\nA function permit the godfather to retrieve the admin role when needed.\n\n## Modules\n\nModules are internal-facing contracts that store shared state across the protocol.\nExcept for view functions, all functions can only be called by an authorized policies (which asked permissions from the kernel).\n\n### WeaponShelf\n\nThis contract keeps count for the available weapons per member.\n\n### MoneyShelf\n\nThis contract in charge of keeping USDC and minting/burning the CrimeMoney.\nUsers have to approve this contract before calling the Laundrette function to deposit.\n\n### MoneyVault\n\nIn case of any issue (on-chain or off-chain), MoneyShelf is updated to this contract to protect the money from the justice system or any other gang.\n\nOnly the GodFather can withdraw and no one can deposit in this contract.\n\n## CrimeMoney\n\nA stablecoin pegged to USDC deposited in MoneyShelf.\n\n## Scripts\n\n- `Deploy.s.sol` deploys the whole protocol.\n- `EmergencyMigration.s.sol` migrates MoneyShelf to MoneyVault in case of an emergency.\n\n## Roles\n\n- GodFather: Owner, has all the rights.\n- GangMember:\n - Deposit USDC and withdraw USDC in exchange for CrimeMoney\n - Transfer CrimeMoney between members and godfather.\n - Take weapons that GodFather assigned to the member.\n- External users: can only call view functions and deposit USDC.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n \n\n## Installation\n\n```bash\ngit clone https://github.com/Cyfrin/2024-05-mafia-take-down\ncd 2024-05-mafia-take-down\nmake\n```\n\n## Quickstart\n\n```bash\nmake test\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- Commit Hash: XXX\n- Files in scope:\n\n```\n├── script\n│ ├── Deployer.s.sol\n│ ├── EmergencyMigration.s.sol\n├── src\n│ ├── CrimeMoney.sol\n│ ├── modules\n│ │ ├── MoneyShelf.sol\n│ │ ├── MoneyVault.sol\n│ │ ├── Shelf.sol\n│ │ └── WeaponShelf.sol\n│ ├── policies\n│ │ └── Laundrette.sol\n```\n\n## Compatibilities\n\n- Solc Version: 0.8.24\n- Chain(s) to deploy to:\n - Polygon\n- ERC20 Token Compatibilities:\n - USDC\n - CrimeMoney\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\n- Missing events.\n- The Mafia knows that nothing is private on blockchains, view functions will reveal what the mafia owns.\n- Users can deposit on any account, not only gang member's accounts.\n\n[//]: # (known-issues-close)\n","company":"First Flight #16","protocolTags":"beginnerFriendly, defi, foundry","name":"First Flight #16: Mafia Takedown","urlSlug":"2024-05-mafia-take-down","logoImgPublicId":"company/a7jx7bhupoza5v3gmbf7","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-05-mafia-take-down","startDate":"2024-05-23T12:00:00.000Z","endDate":"2024-05-30T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clm0jkw6w0000jv08gaj4hof4","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":205},{"id":"clvxt8idd00014zcc81dv6rde","description":"Our team loves account abstraction, and abstract art, so we decided to combine them!\n\nUsers who create an account abstraction wallet with MondrianWallet will get a cool account abstraction wallet, with a random Mondrian art painting!","content":"# First Flight #15: Mondrian Wallet\n\n# Table of Contents\n\n- [Mondrian Wallet](#mondrian-wallet)\n- [Contest Details](#contest-details)\n - [Prize Pool](#prize-pool)\n - [Stats](#stats)\n - [Disclaimer](#disclaimer)\n- [Table of Contents](#table-of-contents)\n- [About](#about)\n - [What is account abstraction?](#what-is-account-abstraction)\n - [What account abstraction methods are supported in Mondrian Wallet?](#what-account-abstraction-methods-are-supported-in-mondrian-wallet)\n - [The NFT](#the-nft)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Installation](#installation)\n - [Testing](#testing)\n- [Audit Scope Details](#audit-scope-details)\n - [Compatibilities](#compatibilities)\n- [Roles](#roles)\n- [Known Issues](#known-issues)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: May 09, 2024 Noon UTC\n- Ends: May 16, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 89\n- Complexity Scope: 82\n\n[//]: # (contest-details-open)\n\n### Disclaimer\n\n_This code was created for Codehawks as the first flight. It is made with bugs and flaws on purpose._\n_Don't use any part of this code without reviewing it and audit it._\n\n_This is your opportunity to learn about account abstraction!_\n\n# About\n\nOur team loves account abstraction, and abstract art, so we decided to combine them!\n\nUsers who create an account abstraction wallet with `MondrianWallet` will get a cool account abstraction wallet, with a random [Mondrian](https://en.wikipedia.org/wiki/Piet_Mondrian) art painting!\n\n## What is account abstraction?\n\nAccount abstraction (EIP-4337) essentailly allows wallets to sign transactions with _*anything*_ instead of just a private key. \n\nYou can see a diagram of what this looks like below. \n\n

\n $\"account$ \n
\n\nWe do not use the `Paymaster` or `Aggregator` in our Mondrian Wallet.\n\n\n## What account abstraction methods are supported in Mondrian Wallet?\n\nFor our wallet, a user can execute transactions by one of two methods:\n\n1. A direct call from the Mondrian Wallet Owner, via the `execute` function\n2. A `UserOp` from a user who has a signed transaction from the Mondrian Wallet Owner via the `handleOps` function in the `EntryPoint` contract.\n\nTo learn more about how this works, you can read the [EIP-4337](https://eips.ethereum.org/EIPS/eip-4337) documentation.\n\n## The NFT\n\nYou'll see the `tokenURI` function returns one of 4 random Mondrian art paintings. Each should have equal distribution and be random. \n\n## Roles\n\nOwner - The one who can execute transactions by directly calling the `execute` function.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started \n\n## Requirements \n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [Nodejs](https://nodejs.org/en/)\n - You'll know you've installed nodejs right if you can run:\n - `node --version` and get an ouput like: `vx.x.x`\n- [Yarn](https://classic.yarnpkg.com/lang/en/docs/install/) instead of `npm`\n - You'll know you've installed yarn right if you can run:\n - `yarn --version` and get an output like: `x.x.x`\n - You might need to install it with `npm`\n\n## Installation \n\n\n1. Clone the repository and compile contracts\n```bash \ngit clone https://github.com/cyfrin/2024-05-Mondrian-Wallet\ncd 2024-05-Mondrian-Wallet\nyarn \nyarn compile\n```\n\n\n## Testing\n\n```\nyarn test\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- In Scope:\n\n```\n./contracts/\n└── MondrianWallet.sol\n```\n\n## Compatibilities\n\n- Solc Version: `0.8.24`\n- Chain(s) to deploy contract to:\n - Ethereum\n - zkSync\n- Deployer address (who will be deploying the contract):\n - 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\n- None\n\n[//]: # (known-issues-close)\n\n","company":"First Flight #15","protocolTags":"beginnerFriendly, foundry","name":"First Flight #15: Mondrian Wallet","urlSlug":"2024-05-Mondrian-Wallet","logoImgPublicId":"company/ah4v0nzxzr9fxb9iwrfm","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-05-Mondrian-Wallet","startDate":"2024-05-09T12:00:00.000Z","endDate":"2024-05-16T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":89},{"id":"clvb821kr0001jzdbi6ggixb0","description":"AirDropper is a gas optimized protocol built to assist with token distribution on the zkSync Era chain.","content":"# First Flight #14: Airdropper\n\n# Table of Contents\n\n- [Contest Details](#contest-details)\n - [Prize Pool](#prize-pool)\n - [Stats](#stats)\n - [Disclaimer](#disclaimer)\n- [Table of Contents](#table-of-contents)\n- [About](#about)\n - [MerkleAirdrop.sol](#merkleairdropsol)\n - [Why are we using this merkle proof thing?](#why-are-we-using-this-merkle-proof-thing)\n - [How do Merkle Proof based airdrops work?](#how-do-merkle-proof-based-airdrops-work)\n - [makeMerkle.js](#makemerklejs)\n - [Deploy.s.sol](#deployssol)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Installation](#installation)\n - [Testing](#testing)\n- [Audit Scope Details](#audit-scope-details)\n - [Compatibilities](#compatibilities)\n- [Roles](#roles)\n- [Known Issues](#known-issues)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: April 25, 2024 Noon UTC\n- Ends: May 02, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 62\n- Complexity Scope: 66\n\n[//]: # (contest-details-open)\n\n### Disclaimer\n\n_This code was created for Codehawks as the first flight. It is made with bugs and flaws on purpose._\n_Don't use any part of this code without reviewing it and audit it._\n\n# About\n\nOur team is looking to airdrop 100 USDC tokens on the [zkSync era chain](https://zksync.io/) to 4 lucky addresses based on their activity on the Ethereum L1. The Ethereum addresses are:\n\n```\n0x20F41376c713072937eb02Be70ee1eD0D639966C\n0x277D26a45Add5775F21256159F089769892CEa5B\n0x0c8Ca207e27a1a8224D1b602bf856479b03319e7\n0xf6dBa02C01AF48Cf926579F77C9f874Ca640D91D\n```\n\nEach address will recieve 25 USDC. \n\nThe codebase was designed to be deployed to the [zkSync era chain](https://zksync.io/) and therefore uses the [zksync-foundry](https://github.com/matter-labs/foundry-zksync) fork of foundry.\n\n## MerkleAirdrop.sol\n\nWe have a single smart contract `MerkleAirdrop.sol` that we think looks very good. We based it off the [Uniswap Merkle-Distributor](https://github.com/Uniswap/merkle-distributor). It uses a [merkle proof](https://en.wikipedia.org/wiki/Merkle_tree) to verify that the user is eligible for the airdrop.\n\nThe way users `claim` their airdrop is by calling the `claim` function, and passing:\n1. Their address\n2. The amount they are elligible for\n3. The merkle proof\n\nThe `claim` function requires a `1e9` ETH fee to be paid, and the owner of the contract is the only one who should be allowed to withdraw it with `claimFees`.\n\n### Why are we using this merkle proof thing?\n\nLet's imagine you're doing an airdrop, what's the first solution that comes to mind? Probably just creating a list of addresses that are elligible to recieve the drop, and just checking users against that list. The smart contract might look like this:\n\n```javascript\nmapping(address => bool) public isEligible;\n\nfunction addEligible(address _address) external {\n isEligible[_address] = true;\n}\n\nfunction claim() external {\n if(isEligible[msg.sender]) {\n // send the airdrop\n }\n}\n```\n\nThe `claim` function looks easy enough, but we have to populate the list by calling `addEligible` for every address. If we have a lot of addresses, this is going to end up costing SO MUCH GAS!\n\n### How do Merkle Proof based airdrops work?\n\nOk, so clearly we need a better solution, this is where merkle trees come in. It's recommended you read up on Merkle trees to understand this. But you can audit this codebase without really understanding it. You can get by in doing this audit if you just think \"so long as the `inputs` in `makeMerkle.js` are correct, the `process` will work correctly\". \n\nBut, this is a great time to learn something new :)\n\n## makeMerkle.js\n\nThis file is not in scope for the audit, but it's good to know how it works because it's how we are generating the `s_merkleRoot` in our `Deploy.s.sol`. The output of this file is:\n\n1. A merkle root that is used in `s_merkleRoot`\n2. An example proof that can be used to test the smart contract for one of the addresses\n\nIf you have `node` and `yarn` installed, you can run the file by:\n\n1. Installing dependencies\n```\nyarn \n```\n\n2. Running the script\n\n```\nyarn run makeMerkle\n```\n\nAssume that so long as the inputs are correct, the proofs and merkle root are correct.\n\n## Deploy.s.sol\n\nThe [Cyfrin/CodeHawks](https://www.cyfrin.io/) team has convinced us that we need to add our Deploy script to being in scope for this competitive audit. All this does is deploy and set up our smart contract. Once this codebase passes audit, we plan on running the script in the makefile to deploy this. \n\nWe use the script found in `makeMerkle.js` to create the `s_merkleRoot`.\n\n## Roles\n\nOnwer - The one who can withdraw the fees earned by the `claim` function.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started \n\n## Requirements \n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n- [rust/cargo](https://doc.rust-lang.org/cargo/getting-started/installation.html)\n - You'll know you did it right if you can run `cargo --version` and you see a response like `cargo 1.57.0 (f1edd0429 2022-01-05)`\n\nOptional:\n- [nodejs](https://nodejs.org/en/download/)\n - You'll know you did it right if you can run `node --version` and you see a response like `v16.13.0`\n- [yarn](https://classic.yarnpkg.com/en/docs/install)\n - You'll know you did it right if you can run `yarn --version` and you see a response like `1.22.17`\n\n## Installation \n\n1. Install `foundry-zksync`\nThere are a few [prerequiste steps](https://github.com/matter-labs/foundry-zksync?tab=readme-ov-file#-prerequisites) to installing this tool. Please see the [official documentation](https://github.com/matter-labs/foundry-zksync?tab=readme-ov-file#-prerequisites) before installing this.\n\nOnce you have the prerequisites, you can follow their [quickstart](https://github.com/matter-labs/foundry-zksync?tab=readme-ov-file#quick-install)\n\nThis will override your existing `foundry` installation. You can know it's been done properly if you can run the following:\n\n```bash\nforge build --help | grep zksync\n```\n\nand see an output like:\n\n```\n --zksync\n```\n\n2. Clone the repository: \n```bash \ngit clone https://github.com/cyfrin/2024-04-airdropper \ncd 2024-04-airdropper \nmake \n```\n\nThis will build the smart contracts with `forge build --zksync`. \n\n## Testing\n\n```\nforge test --zksync\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- In Scope:\n\n```\n./src/\n└── MerkleAirdrop.sol\n./script/\n└── Deploy.s.sol\n```\n\n## Compatibilities\n\n- Solc Version: `0.8.24`\n- Chain(s) to deploy contract to:\n - zkSync\n- Deployment address:\n - 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\n- None\n\n[//]: # (known-issues-close)\n","company":"First Flight #14","protocolTags":"beginnerFriendly, defi, foundry","name":"First Flight #14: AirDropper","urlSlug":"2024-04-airdropper","logoImgPublicId":"company/f6tkfc3qvzq1ffeixkyq","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-04-airdropper","startDate":"2024-04-25T12:00:00.000Z","endDate":"2024-05-02T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":62},{"id":"cluseb1bf0001s4tjl2rzajup","description":"Every year on 1st March people in Bulgaria celebrate a centuries-old tradition called the day of Baba Marta (\"Baba\" means Grandma and \"Mart\" means March), related to sending off the winter and welcoming the approaching spring. The \"Baba Marta\" protocol allows you to buy `MartenitsaToken` and to give it away to friends!","content":"# First Flight #13: Baba Marta\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: April 11, 2024 Noon UTC\n- Ends: April 18, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 239\n- Complexity Score: 202\n\n[//]: # (contest-details-open)\n\n## Disclaimer\n\n_This code was created for Codehawks as the first flight. It is made with bugs and flaws on purpose._\n_Don't use any part of this code without reviewing it and audit it._\n\n_Created by Bube_\n\n# About\n\nEvery year on 1st March people in Bulgaria celebrate a centuries-old tradition called the day of Baba Marta (\"Baba\" means Grandma and \"Mart\" means March), related to sending off the winter and welcoming the approaching spring. On that day and a few days afterwards, people exchange and wear the so-called “Martenitsa”. The martenitsa consists of decorative pieces of red and white twisted threads, symbolising health and happiness. The martenitsas are given away to family and friends and are worn around the wrist or on clothes. The martenitsa is made of twined red and white threads – woolen, silk, or cotton. The most typical martenitsa represents two small dolls, known as Pizho and Penda. Pizho is the male doll, usually in white colour. Penda is the female doll, usually in red colour. Martenitsas come in a variety of shapes and sizes: bracelets, necklaces, tassels, pompoms and balls. The white is a symbol of purity, innocence, beauty and joy. The red is associated with health, vitality, fertility and bravery. According to the tradition, people wear martenitsas for a certain period, the end of which is usually associated with the first signs of spring – seeing a stork or a fruit tree in blossom.\n\nThe \"Baba Marta\" protocol allows you to buy `MartenitsaToken` and to give it away to friends. Also, if you want, you can be a producer. The producer creates `MartenitsaTokens` and sells them. There is also a voting for the best `MartenitsaToken`. Only producers can participate with their own `MartenitsaTokens`. The other users can only vote. The winner wins 1 `HealthToken`. If you are not a producer and you want a `HealthToken`, you can receive one if you have 3 different `MartenitsaTokens`. More `MartenitsaTokens` more `HealthTokens`. The `HealthToken` is a ticket to a special event (producers are not able to participate). During this event each participant has producer role and can create and sell own `MartenitsaTokens`.\n\n## MartenitsaToken.sol\n\nThe Martenitsa NFT.\nThis contract manages a collection of digital tokens called `MartenitsaTokens`.\n\n- `setProducer`: Allows the contract owner to add new producers by specifying their addresses.\n- `createMartenitsa`: Allows registered producers to create a new martenitsa token with a specified design.\n- `getDesign`: Retrieves the design of a given martenitsa token.\n- `updateCountMartenitsaTokensOwner`: Allows updating the count of martenitsa tokens owned by a specific address.\n- `getCountMartenitsaTokensOwner`: Retrieves the count of martenitsa tokens owned by a specific address.\n- `getAllProducers`: Retrieves an array of all registered producers.\n- `getNextTokenId`: Retrieves the next available token ID.\n\n## MartenitsaMarketplace.sol\n\nThis contract provides a marketplace where users can buy and sell martenitsa tokens, with additional functionality for making presents, collecting rewards and managing listings. All users can participate in buying and collecting rewards, but only producers can list their tokens for sale and then sell them.\n\n- `listMartenitsaForSale`: Allows registered producers to list a martenitsa token for sale with a specified price.\n- `buyMartenitsa`: Allows users to buy a listed martenitsa token and transfer funds to the seller.\n- `makePresent`: Allows users to make a present of a martenitsa token they own to someone else.\n- `collectReward`: Allows users to collect `HealthTokens` as a reward based on the number of `MartenitsaTokens` they own. For every 3 different `MartenitsaTokens` you receive 1 `HealthToken`.\n- `cancelListing`: Allows sellers to cancel the listing for sale of a martenitsa token.\n- `getListing`: Retrieves the characteristics of a martenitsa token listed for sale.\n\n## MartenitsaEvent.sol\n\nThis contract manages an event where participants can join, if they meet certain criteria and during the event the participants will become producers. That means they can create and sell `MartenitsaTokens`. Users who are already producers can not participate in the event.\n\n- `startEvent`: Allows the owner to start the event by specifying its duration.\n- `joinEvent`: Allows participants to join the event if they have sufficient `HealthToken` balance. The producers are not able to participate.\n- `stopEvent`: Removes the producer role of the participants after the event is ended.\n- `getParticipant`: Retrieves information about whether a given address has participated in the event.\n\n## MartenitsaVoting.sol\n\nThe contract allows the users to participate in voting for martenitsa tokens listed on the marketplace (only producers can add their `MartenitsaTokens` for voting). After the voting period ends, the owner can announce the winner based on the number of votes, and the winner receives a `HealthToken` as a reward. The voting takes place only once.\n\n- `startVoting`: Allows the owner to start the voting period.\n- `voteForMartenitsa`: Allows users to vote for a specific martenitsa token ID during the voting period.\n- `announceWinner`: Allows the owner to announce the winner of the voting and distribute a `HealthToken` as a reward.\n- `getVoteCount`: Retrieves the count of votes for a given martenitsa token ID.\n\n## HealthToken.sol\n\nHealthToken is an ERC-20 token with additional functionality. The primary purpose of this token is to serve as a reward mechanism for participants who have more than 3 `MartenitsaTokens`. For every 3 different `MartenitsaTokens` they receive 1 `HealthToken`. This token is also a reward for the winner of the voting. These should be the two eligible ways to receive a `HealthToken` in this protocol.\n\n- `setMarketAndVotingAddress`: Allows the owner to set the addresses of the `MartenitsaMarketplace` and `MartenitsaVoting` contracts.\n- `distributeHealthToken`: Allows the marketplace and voting contracts to distribute `HealthTokens` as rewards to specified addresses.\n\n## Roles\n\nProducer - Should be able to create martenitsa and sell it. The producer can also buy martenitsa, make present and participate in vote. The martenitsa of producer can be candidate for the winner of voting.\n\nUser - Should be able to buy martenitsa and make a present to someone else. The user can collect martenitsa tokens and for every 3 different martenitsa tokens will receive 1 health token. The user is also able to participate in a special event and to vote for one of the producer's martenitsa.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n```\ngit clone https://github.com/Cyfrin/2024-04-Baba-Marta\ncd 2024-04-Baba-Marta\n```\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n- In Scope:\n\n```\n├── src\n│ ├── HealthToken.sol\n│ ├── MartenitsaEvent.sol\n│ ├── MartenitsaMarketplace.sol\n│ ├── MartenitsaToken.sol\n| ├── MartenitsaVoting.sol\n│ ├── SpecialMartenitsaToken.sol\n\n```\n\n## Compatibilities\n\n- Solc Version: `^0.8.21`\n- Chain(s) to deploy contract to:\n - Ethereum\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\nNone\n\n[//]: # (known-issues-close)\n","company":"First Flight #13","protocolTags":"beginnerFriendly, foundry, gamefi","name":"First Flight #13: Baba Marta","urlSlug":"2024-04-Baba-Marta","logoImgPublicId":"company/cjm9qalxsioqgbfpvrsl","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-04-Baba-Marta","startDate":"2024-04-11T12:00:00.000Z","endDate":"2024-04-18T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clk3y8e9u000cjq08uw5phym7","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":239},{"id":"clu7ddcsa000fcc387vjv6rpt","description":"Get pumped for the 2nd Community Submitted First Flight on CodeHawks, brought to us by Shikhar Agarwal!\n\nThis project allows users to buy a cute cat from our branches and mint NFT for buying a cat. The NFT will be used to track the cat info and all related data for a particular cat corresponding to their token ids. Kitty Owner can also Bridge their NFT from one chain to another chain via Chainlink CCIP.","content":"# First Flight #12: Kitty Connect\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: March 28, 2024 Noon UTC\n- Ends: April 04, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 235\n- Complexity Score: 193\n\n[//]: # (contest-details-open)\n\n# About the Project\n\nThis project allows users to buy a cute cat from our branches and mint NFT for buying a cat. The NFT will be used to track the cat info and all related data for a particular cat corresponding to their token ids.\nKitty Owner can also Bridge their NFT from one chain to another chain via [`Chainlink CCIP`](https://docs.chain.link/ccip).\n\nThe codebase is broken up into 2 contracts (In Scope):\n\n- `KittyConnect.sol`\n- `KittyBridge.sol`\n\n## KittyConnect\n\nThis contract allows users to buy a cute cat from our branches and mint NFT for buying a cat. The NFT will be used to track the cat info and all related data for a particular cat corresponding to their token ids.\n\n## KittyBridge\n\nThis contract allows users to bridge their Kitty NFT from one chain to another chain via [`Chainlink CCIP`](https://docs.chain.link/ccip).\n\n# How this Project Works\n\n## Buying a Cat\n\nA user is required to visit our shop partner to buy a cat. The shop partner will call the function from KittyConnect contract to mint NFT for buying a cat. (This NFT will track all the data related to the cat)\n\n## Bridge Kitty NFT from one chain to another chain\n\nUser can bridge Kitty NFT from one chain to another chain by calling this function from KittyConnect contract. This involves burning of the kitty NFT on the source chain and minting on the destination chain. Bridging is powered by chainlink CCIP.\n\n## Transferring Ownership of cat to new owner\n\nSometimes a user wants to transfer their cat to a new owner, this can be easily done by transferring the Kitty NFT to that desired owner.\nA user is first required to approve the kitty NFT to the new owner, and is then required to visit our shop partner to finally facilitate transfer the ownership of the cat to the new owner.\n\n## Roles in the Project:\n\n1. Cat Owner\n - User who buy the cat from our branches and mint NFT for buying a cat.\n2. Shop Partner\n - Shop partner provide services to the cat owner to buy cat.\n3. KittyConnect Owner\n - Owner of the contract who can transfer the ownership of the contract to another address.\n \n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n## Quickstart\n\n```bash\ngit clone https://github.com/Cyfrin/2024-03-kitty-connect\ncd 2024-03-kitty-connect\n```\n\n### Install Dependencies\n\n```bash\nmake\n```\n\nor\n\n```bash\nforge build\n```\n\n## Testing\n\n```bash\nforge test\n```\n\n### Test Coverage\n\n```bash\nforge coverage\n```\n\n### Compiling\n\n```bash\nforge compile\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n- In Scope:\n\n```\n├── src\n│ ├── KittyConnect.sol\n│ ├── KittyBridge.sol\n│ ├── base\n│ ├── KittyBridgeBase.sol\n```\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\n- there is one known bug while bridging the NFT to other chain, the previousOwners of the cat are not passed because they may cost a large amount of gas.\n\n[//]: # (known-issues-close)\n","company":"First Flight #12: Kitty Connect","protocolTags":"beginnerFriendly, foundry, nft, gamefi","name":"First Flight #12: Kitty Connect","urlSlug":"2024-03-kitty-connect","logoImgPublicId":"company/genifg36sfwepvhwb1wt","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-03-kitty-connect","startDate":"2024-03-28T12:00:00.000Z","endDate":"2024-04-04T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":235},{"id":"cltd8lz860001y058i5ug72ko","description":"The Puppy Raffle NFT team is back! And this time, they've learnt from their mistakes... It couldn't have been their fault their last contract had so many bugs, so puppies and solidity must have just been bad luck! They decided to try this again, with sneks and Vyper! Surely that was the issue last time? 😜\n\nThe Puppy Raffle team loves being on the cutting edge, so this codebase is built with a new beta release of the vyper compiler!","content":"# First Flight #11: Snek-Raffle\n\n- [Contest Details](#contest-details)\n - [Prize Pool](#prize-pool)\n - [Stats](#stats)\n- [About](#about)\n - [New Vyper Compiler Features](#new-vyper-compiler-features)\n - [snek_raffle.vy](#snek_rafflevy)\n - [It's a NFT](#its-a-nft)\n - [Chainlink VRF](#chainlink-vrf)\n - [Winnable Sneks](#winnable-sneks)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Installation](#installation)\n - [Note](#note)\n - [Testing](#testing)\n- [Audit Scope Details](#audit-scope-details)\n - [Compatibilities](#compatibilities)\n- [Roles](#roles)\n- [Known Issues](#known-issues)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: March 07, 2024 Noon UTC\n- Ends: March 14, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 136\n- Complexity Score: 🐍\n\n[//]: # (contest-details-open)\n\n# About\nThe Puppy Raffle NFT team is back! And this time, they've learnt from their mistakes... It couldn't have been their fault their last contract had so many bugs, so puppies and solidity must have just been bad luck! They decided to try this again, with sneks and Vyper! Surely that was the issue last time? 😜\n\nThe Puppy Raffle team loves being on the cutting edge, so this codebase is built with a [new beta release of the vyper compiler](https://x.com/vyperlang/status/1762203569715855826)!\n\n## New Vyper Compiler Features\n\nIntroducing... Imports!! The vyper compiler now features imports, and you can see we use imports from the [🐍 snekmate](https://github.com/pcaversaccio/snekmate) repo. We `pip` installed the library by invoking:\n\n```console\npip3 install git+https://github.com/pcaversaccio/snekmate.git@modules -t contracts/libraries\n```\n\nAnd then we removed all the files except the ones we needed.\n\nWe will use 🐍 snekmate's latest [`ERC721.vy`](./contracts/libraries/snekmate/tokens/ERC721.vy) contract, which is compatible with the latest Vyper compiler version, but the contract itself is considered out of scope for this audit.\n\nYou can see how we import the [`ERC721.vy`](./contracts/libraries/snekmate/tokens/ERC721.vy) contract in the [`snek_raffle.vy`](./contracts/snek_raffle.vy) contract:\n\n```python\nfrom libraries.snekmate.tokens import ERC721 # Imports the contract \ninitializes: ERC721 # This means that our contract initializes with the __init__ func of the ERC721 contract\n\n\nexports: ( # In vyper, you have specify what external functions you want your contract to use/inherit\n ERC721.balanceOf,\n ERC721.ownerOf,\n .\n .\n)\n\n.\n.\n.\n ERC721.__init__(\"Snek Raffle\", \"SNEK\", \"\", \"snek raffle\", \"v0.0.1\") # This is how we initialize the ERC721 contract in our constructor \n```\n\nYou cannot inherit/override internal functions. This is a specific design choice by the Vyper team - so that knowing exactly what a function is supposed to do is easier. \n\n## snek_raffle.vy\n\nThe `snek_raffle.vy` is the main contract that the team is looking for a security review on, and the only contract considered in-scope. The contract functionality is as such:\n\n1. `enter_raffle`: Users pay the `ENTRANCE_FEE` to enter the snek raffle \n2. `request_raffle_winner`: This is the function to kick off a [chainlink VRF](https://docs.chain.link/vrf) call to get a random winner. This function can be called only when the following conditions are met:\n 1. The `raffle_state` is set to `OPEN`\n 2. Enough `RAFFLE_DURATION` has passed since the raffle was opened\n 3. There are at least 1 `players`\n 4. There is more than 0 `balance` in the contract\n3. `rawFulfillRandomWords`: The function that the Chainlink VRF calls back to give the contest a random winner. The following happens when this function is called:\n 1. The winner receives:\n 1. A random snek NFT \n 2. The balance of the contract (should be all the entrace fees added together)\n 2. The contract is \"reset\" to it's initial state:\n 1. The raffle is considered `OPEN`\n 2. `players` array is reset \n 3. `last_timestamp` is reset \n\n## It's a NFT\n\nWhen someone wins a snek, it should have all the functionality of a normal NFT. It should be able to be viewed, transferred, approved, etc.\n\n_Note: If you find an issue with [`ERC721.vy`](./contracts/libraries/snekmate/tokens/ERC721.vy), ignore it. If the [`snek_raffle.vy`](./contracts/snek_raffle.vy) forgets to import/export a function, or uses it wrong, consider that a bug. But if the function itself is wrong in [`ERC721.vy`](./contracts/libraries/snekmate/tokens/ERC721.vy), that's fine. We are pretending that contract is perfect for this review._\n\n## Chainlink VRF\n\nThe contracts rely on the Chainlink VRF to get a random number. Assume the contract/subscription will always be properly funded with LINK tokens. \n\n## Winnable Sneks \n\n\nThere are 3 NFTs that can be won in the snek raffle, each with varying rarity. \n\n1. Brown Snek - 70% Chance to get\n2. Jungle Snek - 25% Chance to get\n3. Cosmic Snek - 5% Chance to get\n\nThe Chainlink VRF is used to get a random number, and the random number is used to determine the winner.\n\n## Roles\n\n- Chainlink VRF: The Chainlink VRF is responsible for providing a random number to the contract.\n- Users: People who can enter the raffle for the sneks. \n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started \n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [python3](https://www.python.org/downloads/)\n - You'll know you've done it right if you can run `python3 --version` and you see a response like `Python x.x.x`\n- [pip3](https://pip.pypa.io/en/stable/installation/)\n - You'll know you've done it right if you can run `pip3 --version` and you see a response like `pip x.x.x from /path/to/site-packages/pip (python x.x)`\n\n## Installation\n\nIf this is your first time using a python virtual environment, you can [learn more about it here,](https://docs.python.org/3/library/venv.html) and we highly advise that you work with an AI to help you get set up. AIs like ChatGPT tend to be very good at python debugging. \n\n1. Clone the repository\n```\ngit clone https://github.com/Cyfrin/2024-03-snek-raffle\ncd 2024-03-snek-raffle\n```\n\n2. Setup the virtual environment, and install packages\n```\nmake venv\nsource ./venv/bin/activate\nmake install\n```\n\n_Be sure to run `source ./venv/bin/activate` before you install!_\n\nor, if `make` doesn't work:\n```\npython3 -m venv ./venv\nsource ./venv/bin/activate\npip3 install vyper==0.4.0b1\npip3 install git+https://github.com/vyperlang/titanoboa@vyper-0.4.0\n```\n\n> Q: Why not a `requirements.txt` file?\n> A: Because this is an experimental package and the dependencies are all messed up right now. \n\nYou'll be in something called a \"virtual environment\" which will have all the packages you need for this project to run tests. To \"leave\" the python virtual environment, just run `deactivate`. \n\n### Note\n\nThe above will install the new experimental vyper compiler and titanoboa testing framework, so it might take a little longer to install than normal. \n\n## Manual Compiling\n\nYou can manually compile the vyper contract with this command:\n\n```\nvyper contracts/snek_raffle.vy \n```\n\nor\n```\npython3 -m vyper contracts/snek_raffle.vy\n```\n\n## Testing\n\n```\npytest\n```\n\nor\n\n```\npython3 -m pytest\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- In Scope:\n\n```ml\n└── contracts\n └── snek_raffle.vy\n```\n\n## Compatibilities\n\n- Vyper Version: [`0.4.0b1`](https://github.com/vyperlang/vyper/releases/tag/0.4.0b1) (Experimental new Vyper compiler version)\n- Chain(s) to deploy contract to:\n - Ethereum\n - Arbitrum\n - ZKSync\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\n- This is a beta release of the vyper compiler which hasn't undergone a security review itself, and we expect there to be some issues with the compiler itself, ignore those. \n\n[//]: # (known-issues-close)\n","company":"First Flight #11","protocolTags":"beginnerFriendly, foundry, nft","name":"First Flight #11: Snek-Raffle","urlSlug":"2024-03-snek-raffle","logoImgPublicId":"company/ocawxe9a5ab2uh3tiozt","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-03-snek-raffle","startDate":"2024-03-07T12:00:00.000Z","endDate":"2024-03-14T12:00:00.000Z","communityJudgingEnabled":true,"communityJudgingStartDate":"2024-03-14T12:00:00.000Z","communityJudgingEndDate":"2024-03-19T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":136},{"id":"clstf5qd2000rakskkj0lkm33","description":"When opportunity knocks, you gunna answer it? One Shot lets a user mint a rapper NFT, have it gain experience in the streets (staking) and Rap Battle against other NFTs for Cred.","content":"# First Flight #10: One Shot\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: February 22, 2024 Noon UTC\n- Ends: February 29, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 201\n- Complexity Score: 143\n\n[//]: # (contest-details-open)\n\n## Disclaimer\n\n_This code was created for Codehawks as the first flight. It is made with bugs and flaws on purpose._\n_Don't use any part of this code without reviewing it and audit it._\n\n_Created by equious.eth_\n\n# About\n\nWhen opportunity knocks, you gunna answer it? One Shot lets a user mint a rapper NFT, have it gain experience in the streets (staking) and Rap Battle against other NFTs for Cred.\n\n## OneShot.sol\n\nThe Rapper NFT.\n\nUsers mint a rapper that begins with all the flaws and self-doubt we all experience.\nNFT Mints with the following properties:\n\n- `weakKnees` - True\n- `heavyArms` - True\n- `spaghettiSweater` - True\n- `calmandReady` - False\n- `battlesWon` - 0\n\nThe only way to improve these stats is by staking in the `Streets.sol`:\n\n## Streets.sol\n\nExperience on the streets will earn you Cred and remove your rapper's doubts.\n\n- Staked Rapper NFTs will earn 1 Cred ERC20/day staked up to 4 maximum\n- Each day staked a Rapper will have properties change that will help them in their next Rap Battle\n\n## RapBattle.sol\n\nUsers can put their Cred on the line to step on stage and battle their Rappers. A base skill of 50 is applied to all rappers in battle, and this is modified by the properties the rapper holds.\n\n- WeakKnees - False = +5\n- HeavyArms - False = +5\n- SpaghettiSweater - False = +5\n- CalmAndReady - True = +10\n\nEach rapper's skill is then used to weight their likelihood of randomly winning the battle!\n\n- Winner is given the total of both bets\n\n## CredToken.sol\n\nERC20 token that represents a Rapper's credibility and time on the streets. The primary currency at risk in a rap battle.\n\n## Roles\n\nUser - Should be able to mint a rapper, stake and unstake their rapper and go on stage/battle\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- In Scope:\n\n```\n├── src\n│ ├── CredToken.sol\n│ ├── OneShot.sol\n│ ├── RapBattle.sol\n│ ├── Streets.sol\n```\n\n## Compatibilities\n\n- Solc Version: `^0.8.20`\n- Chain(s) to deploy contract to:\n - Ethereum\n - Arbitrum\n \n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\nNone\n\n[//]: # (known-issues-close)\n","company":"First Flight #10","protocolTags":"beginnerFriendly, foundry, nft","name":"First Flight #10: One Shot","urlSlug":"2024-02-one-shot","logoImgPublicId":"company/hu6za6gwm3fbe8objgog","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-02-one-shot","startDate":"2024-02-22T12:00:00.000Z","endDate":"2024-02-29T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":"2024-02-29T12:00:00.000Z","communityJudgingEndDate":"2024-03-05T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":true,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":201},{"id":"clsathvgg0005yhmxmoe455mm","description":"Love is in the air, and our community's very own n0kto has graciously played matchmaker with the Soulmate protocol!\n\nLovers estranged can come together through the magic of a Soulbound NFT and watch their LoveToken stacks grow as the relationship matures.","content":"# First Flight #9: Soulmate\n\n# Contest Details\n\nOur **FIRST EVER** Community Submitted First Flight Contest! A huge thank you to **n0kto** for this incredible contribution to the community.\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: February 08, 2024 Noon UTC\n- Ends: February 15, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 233\n- Complexity Score: 123\n\n[//]: # (contest-details-open)\n\n# Disclaimer\n\n_This code was created for Codehawks as the first flights for Valentine's day. It is made with bugs and flaws on purpose._\n_Don't use any part of this code without reviewing it and audit it._\n\n# About\n\nValentine's day is approaching, and with that, it's time to meet your soulmate!\n\nWe've created the Soulmate protocol, where you can mint your shared Soulbound NFT with an unknown person, and get `LoveToken` as a reward for staying with your soulmate.\nA staking contract is available to collect more love. Because if you give love, you receive more love.\n\n## Soulmate.sol\n\nThe Soulbound NFT shared by soulmates used in the protocol.\nIt is used by Airdrop.sol and Staking.sol to know how long the couple are in love.\n\nThe main functions are:\n\n- `mintSoulmateToken`: Where you'll mint a soulbound NFT. You'll either be assigned to someone else who is waiting for a soulmate, or you'll be waiting for a soulmate to be assigned to you.\n- `soulmateOf`: Where you can see the soulmate of an address. If it returns `address(0)` then a soulmate has not been assigned yet.\n- `writeMessageInSharedSpace`: Where you can write messages to your soulmate.\n\nEveryone should be able to be minted a soulmate.\n\nAnd finally, sometimes, love can be hard, even if it is your soulmate... but there is always another solution : get divorced.\n\n- `getDivorced`: Where you and your soulmate are separated and no longer soulmates. This will cancel the possibily for 2 lovers to collect LoveToken from the airdrop. There is and should be no way to undo this action.\n\n## LoveToken.sol\n\nA basic ERC20 Token given to soulmates. The initial supply is distributed to 2 instances of `Vault.sol` managed by:\n\n- `Airdrop.sol`\n- `Staking.sol`\n\nThis token represents how much love there is between two soulmates.\n\n## Airdrop.sol\n\nOnce you have a soulmate, you can claim 1 LoveToken a day.\n\nThis contract has 1 main function:\n\n- `claim`: Allows only those with a soulmate to collect 1 LoveToken per day. Both soulmates can collect 1 per day (aka, 2 per day per couple).\n\n## Staking.sol\n\nAs you claim your LoveToken, you can stake it to claim even more!\n\nThis contract is dedicated to the staking functionality.\nIt has the following functions:\n\n- `deposit`: Deposit LoveToken to the staking contract\n- `withdraw`: Withdraw LoveToken from the staking contract\n- `claimRewards`: Claim LoveToken rewards from the staking contract.\n\nFor every 1 token deposited and 1 week left in the contract, 1 LoveToken is rewarded.\n\nExamples:\n\n- 1 token deposited for 1 week = 1 LoveToken reward\n- 7 tokens deposited for 2 weeks = 14 LoveToken reward\n\n## Vault.sol\n\nThe vault contract is responsible for holding the love tokens, and approving the Staking and Airdrop contracts to pull funds from the Vaults. There will be 2 vaults:\n\n- A vault to hold funds for the airdrop contract\n- A vault to hold funds for the staking contract\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- Commit Hash:\n- In Scope:\n (For this contest, just use the main branch)\n\n```\nHash:\n```\n\n## Compatibilities\n\n- Solc Version: `0.8.23 < 0.9.0`\n- Chain(s) to deploy contract to:\n - Ethereum\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\n- Eventually, the counter used to give ids will reach the `type(uint256).max` and no more will be able to be minted. This is known and can be ignored.\n\n[//]: # (known-issues-close)\n","company":"First Flight #9","protocolTags":"beginnerFriendly, foundry, nft","name":"First Flight #9: Soulmate","urlSlug":"2024-02-soulmate","logoImgPublicId":"company/jlaqqfofafa01emq3nh8","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-02-soulmate","startDate":"2024-02-08T12:00:00.000Z","endDate":"2024-02-15T12:00:00.000Z","communityJudgingEnabled":true,"communityJudgingStartDate":"2024-02-15T12:00:00.000Z","communityJudgingEndDate":"2024-02-20T12:00:00.000Z","appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clk3twjk3003imj08kmy05ubk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":233},{"id":"clrp8xvh70001dq1os4gaqbv5","description":"The math MASTERS are titans of the algebraic and gas efficient. This small library of hyper-optimized functions hopes to allow developers to make better codebases!","content":"# First Flight #8: Math Masters\n\n- [Contest Details](#contest-details)\n - [Prize Pool](#prize-pool)\n - [Stats](#stats)\n- [Math Master](#math-master)\n- [About](#about)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Quickstart](#quickstart)\n- [Usage](#usage)\n - [Testing](#testing)\n - [Test Coverage](#test-coverage)\n- [Audit Scope Details](#audit-scope-details)\n - [Compatibilities](#compatibilities)\n- [Roles](#roles)\n- [Known Issues](#known-issues)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: January 25, 2024 Noon UTC\n- Ends: February 02, 2024 Noon UTC\n\n### Stats\n\n- nSLOC: 46\n- Complexity Score: 276\n\n[//]: # (contest-details-open)\n\n# Math Master\n\n_This codebase was inspired by the [solady](https://github.com/Vectorized/solady), [obront.eth](https://twitter.com/zachobront), and [solmate](https://github.com/transmissions11/solmate) codebases. Huge thanks to [karma](https://twitter.com/0xkarmacoma) for the help on FV with Halmos.... which may be a hint._\n\n_We will teach how to do Formal Verification and assembly in the upcoming Cyfrin Updraft course._\n\n# About\n\nWelcome to the future of web3! We, the math MASTERS are titans of the algebraic and gas efficient. We have created a small library called `MathMasters` where we have the following functions/terms defined:\n\n- `WAD`: fixed point decimal with 18 decimals (for basic quantities, e.g. balances)\n- `mulWad`: Equivalent to `(x * y) / WAD` rounded down.\n- `mulWadUp`: Equivalent to `(x * y) / WAD` rounded up.\n- `sqrt`: Returns the square root of `x`.\n\nWe hope that people will use our hype optimized functions to make better codebases.\n\nWe are especially concerned with any function doing something \"weird\" at the EVM/assembly level. We would consider any of the following a valid LOW severity rating:\n\n- Incorrect storage slot packaging\n- Overriding the [solidity free memory pointer](https://docs.soliditylang.org/en/latest/internals/layout_in_memory.html)\n- Any out of gas errors\n- Incorrect use of function selectors\n\nWe expect any solidity project using version `^0.8.3` or above should be able to use our codebase. If not, that should be considered a vulnerability as well.\n\nThis is a great chance to test out your fuzzing and Formal Verification skills.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n- [Halmos](https://github.com/a16z/halmos)\n - To know you've installed it run `halmos --version` and you should see something like `halmos 0.1.0 (816e00b 2023-03-16T00:05:26.396218Z)\n\n## Quickstart\n\n```\ngit clone https://github.com/Cyfrin/2024-01-math-master\ncd 2024-01-math-master\nmake\n```\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- Commit Hash:\n- In Scope:\n (For this contest, just use the main branch)\n\n```\nHash:\n```\n\n## Compatibilities\n\n- Solc Version: `0.8.3 < 0.9.0`\n- Chain(s) to deploy contract to:\n - Ethereum\n- Tokens:\n - None\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\nNone\n\n[//]: # (known-issues-close)\n","company":"First Flight #8","protocolTags":"beginnerFriendly, foundry","name":"First Flight #8: Math Master","urlSlug":"2024-01-math-master","logoImgPublicId":"company/cnpeluh0czwknuv6nuu6","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-01-math-master","startDate":"2024-01-25T12:00:00.000Z","endDate":"2024-02-02T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":46},{"id":"clr6s75ut00013qg9z8bpkalo","description":"Q. What does a horse say to an insecure Web3?\nA. NAAAAY!\n\nGet ready for First Flight #7: Horse Store, another perfect opportunity to learn and grow!","content":"# First Flight #7: Horse Store\n\n*Much of the NFT code was inspired by [Huffmate](https://github.com/huff-language/huffmate/)*\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: January 11, 2024 Noon UTC\n- Ends: January 18, 2024 Noon UTC \n\n### Stats\n\n- nSLOC: \n - Solidity: 26\n - Huff: 434\n- Complexity Score:\n - Solidity: 28\n - Huff: 🐴 \n\n[//]: # (contest-details-open)\n\n## About\n\n*Neiiigghhhhhh*\n\nWe are the equestrian lovers, and we LOVE all things horses! So we've created an NFT to commemorate our love of horses.\n\nBut, here is the thing, horses are *fast* and don't burn *gas*, but burn *oats*. So we wanted to make sure our codebase was hyper optimized, and to do so, we've written our contracts in Huff, a horse-themed assembly-like language so our code can be hyper-optimized and FAST. \n\n🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎🐎\n\nSo, we wrote our codebase into 2 parts.\n\n1. The Solidity Rendition\n2. The Huff Rendition\n\n**Every** function in the solidity rendition has been re-written in huff. We wrote it in solidity first to get a better understanding of what the codebase *should* do, and then optimized it in huff. We consider the solidity written code to be our *reference* code, and the huff code to be our *actual* code. \n\n## Seaport inspiration\n\nThis setup was inspired by the [Seaport](https://github.com/ProjectOpenSea/seaport) protocol, which did something similar with solidity reference contracts, and assembly actual contracts. \n\n## Functionality \n\nOur contracts are simple, they allow the following functionality:\n\n1. `mintHorse`: Allow anyone to mint their own horse NFT.\n2. `feedHorse`: Allow anyone to feed a horse NFT. This will add a `block.timestamp` to a mapping tracking when the horse was last fed. \n3. `isHappyHorse`: Allow anyone to see if a horse is happy. A horse is happy if and only if they have been fed within the past 24 hours. \n\nWe consider the horse happiness the most important aspect of the codebase, and our invariants can be defined as follows:\n\n1. \n```\nIf horse X has been fed within the past 24 hours, horse X must be happy.\n```\n\n2. \n```\nHorses must be able to be fed at all times. \n```\n\n## Hints\n\nEven if you don't understand Huff... Maybe you can write some tests... \n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [Git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git) \n - You'll know you've done it right if you can run `git --version`\n- [Foundry / Foundryup](https://github.com/gakonst/foundry)\n - This will install `forge`, `cast`, and `anvil`\n - You can test you've installed them right by running `forge --version` and get an output like: `forge 0.2.0 (f016135 2022-07-04T00:15:02.930499Z)`\n - To get the latest of each, just run `foundryup`\n- [Huff Compiler](https://docs.huff.sh/get-started/installing/)\n - You'll know you've done it right if you can run `huffc --version` and get an output like: `huffc 0.2.0`\n\n\n## Quickstart\n\n1. Clone the repo & install dependencies\n\n```\ngit clone https://github.com/Cyfrin/2024-01-horse-store\ncd 2024-01-horse-store\nmake\n```\n\n2. Run tests\n\n```\nforge test\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- Commit Hash: \n```\n01bce4f0a2271c4105ee7c9121b27fe7973b0eaf\n```\n- In Scope:\n(For this contest, just use the main branch)\n\n```\n#-- HorseStore.huff\n#-- HorseStore.sol\n#-- IHorseStore.sol\n```\n\n## Compatibilities\n\n- Solc Version: `0.8.20`\n- Chain(s) to deploy contract to: \n - Arbitrum\n - Ethereum\n- Tokens:\n - None\n\nFor this codebase, we consider any of the following to be in-scope:\n1. An issue with `HorseStore.sol`\n2. An issue with `HorseStore.huff`\n3. Any issue where `HorseStore.huff` functionality does not match `HorseStore.sol` functionality, not including gas costs, or specific storage slots. Sending any X calldata to either contract should result in them being in the same state. \n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\n- We understand that the exact 24 hour time frame for a horse to be happy can be manipulated on some chains. Please ignore any discrepancies in timestamps up to 120 seconds. If you find a way for a horse to be labelled incorrectly outside of a 120 second grace window, it should be considered a valid finding. \n- We do not consider gas efficiency differences between the two valid findings. \n- The exact error names can be different between the huff and solidity versions\n\n[//]: # (known-issues-close)\n","company":"First Flight #7","protocolTags":"beginnerFriendly, foundry, nft","name":"First Flight #7: Horse Store","urlSlug":"2024-01-horse-store","logoImgPublicId":"company/wnjnaknf11h238xdycxd","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2024-01-horse-store","startDate":"2024-01-11T12:00:00.000Z","endDate":"2024-01-18T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":460},{"id":"clq5cx9x60001kd8vrc01dirq","description":"This is a special rendition of CodeHawks First Flights, as this contract is a simplified version of a real contract which was audited by Cyfrin in a private audit and contained the same bug! Thanks to Dacian for creating this First Flight!\n\nYour mission, should you choose to accept it, is to find that bug!","content":"# First Flight #6: Voting Booth\n\n# Table of Contents\n- [Contest Details](#contest-details)\n - [Prize Pool](#prize-pool)\n - [Stats](#stats)\n- [Table of Contents](#table-of-contents)\n- [Context](#context)\n- [About](#about)\n - [Hint](#hint)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Quickstart](#quickstart)\n- [Usage](#usage)\n - [Testing](#testing)\n - [Test Coverage](#test-coverage)\n- [Audit Scope Details](#audit-scope-details)\n - [Compatibilities](#compatibilities)\n - [Roles](#roles)\n - [Known Issues](#known-issues)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: December 15, Noon UTC\n- Ends: December 22, Noon UTC \n\n## Stats\n\n- nSLOC: 80\n- Complexity Score: 67\n\n[//]: # (contest-details-open)\n\n# Context \n\nThis is a special rendition of CodeHawks First Flights, as this contract is a simplified version of a real contract which was audited by Cyfrin in a private audit and contained the same bug! Thanks to [Dacian](https://twitter.com/DevDacian) for creating this First Flight! \n\nYour mission, should you choose to accept it, is to find that bug!\n\n# About \n\nThis contract allows the creator to invite a select group of people to vote on something and provides an eth reward to the `for` voters if the proposal passes, otherwise refunds the reward to the creator. The creator of the contract is considered \"Trusted\".\n\nThis contract has been intentionally simplified to remove much of the extra complexity in order to help you find the particular bug without other distractions. Please read the comments carefully as they note specific findings that are excluded as the implementation has been purposefully kept simple to help you focus on finding the harder to find and more interesting bug.\n\nThis contract intentionally has no time-out period for the voting to complete; lack of a time-out period resulting in voting never completing is not a valid finding as this has been intentionally omitted to simplify the codebase.\n\n## Hint\n\nCats are fuzzy.\n\n## Roles\n\n- `creator` - Deployer of the protocol, they are a trusted used who will receive the funds if a vote fails. \n- `AllowedVoters` - A list of addresses that are allowed to vote on proposals.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n## Quickstart\n\n```\ngit clone https://github.com/Cyfrin/2023-12-Voting-Booth\ncd 2023-12-Voting-Booth\nmake\n```\n\nOr optionally, you can run:\n```\nforge install\nforge build\n```\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- Commit Hash: 5b9554656d53baa2086ab7c74faf8bdeaf81a8b7\n- In Scope:\n\n```\n./src/\n#-- VotingBooth.sol\n```\n\n## Compatibilities\n\n- Solc Version: 0.8.23\n- Chain(s) to deploy contract to: \n - Arbitrum\n- Tokens\n - None\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\n- This contract intentionally has no time-out period for the voting to complete; lack of a time-out period resulting in voting never completing is not a valid finding as this has been intentionally omitted to simplify the codebase.\n\n\n[//]: # (known-issues-close)\n","company":"First Flight #6","protocolTags":"beginnerFriendly, foundry","name":"First Flight #6: Voting Booth","urlSlug":"2023-12-Voting-Booth","logoImgPublicId":"company/ydt7bez1iimfl3ykarih","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-12-Voting-Booth","startDate":"2023-12-15T12:00:00.000Z","endDate":"2023-12-22T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clk3twjk3003imj08kmy05ubk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":0},{"id":"clpba0ama0001ywpabex01hrp","description":"He's making a smart contract and checking it twice ... Let's find out if this protocol has been naughty or nice!","content":"# First Flight #5: Santa's List\n\n- [About](#about)\n - [SantasList](#santaslist)\n - [List Checking](#list-checking)\n - [Collecting Presents](#collecting-presents)\n - [SantaToken](#santatoken)\n - [TokenUri.sol](#tokenurisol)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: November 30, 2023 Noon UTC\n- Ends: December 07, 2023 Noon UTC\n\n## Stats\n\n- nSLOC: 116\n- Complexity Score: 83\n\n[//]: # (contest-details-open)\n\n# About\nSanta has adopted blockchain technology to keep track of the naughty and nice! Hooray! So Santa hired some south pole contract elves to help build him a blockchain-based list. He'd never worked with blockchain elves before but was excited to see what they could do! They got nearly 100% test coverage, so that's got to be good, right?\n\nThe codebase is broken up into 3 contracts:\n- `SantasList.sol` \n- `SantaToken.sol` \n- `TokenUri.sol`\n\n## SantasList \nSanta's List is the main contract that stores the list of naughty and nice people. It doubles as an NFT contract that people can collect if they are `NICE` or `EXTRA_NICE`. In order for someone to be considered `NICE` or `EXTRA_NICE` they *must* be first \"checked twice\" by Santa. \n\nOnce they are checked twice, `NICE` users can collect their NFT, and `EXTRA_NICE` users can collect their NFT **and** they are given `SantaToken`s. The `SantaToken` is an ERC20 that can be used to buy the NFT for their `NAUGHTY` or `UNKNOWN` friends. \n\n### List Checking\nIn this contract **Only Santa** to take the following actions:\n- `checkList`: A function that changes an `address` to a new `Status` of `NICE`, `EXTRA_NICE`, `NAUGHTY`, or `UNKNOWN` on the *original* `s_theListCheckedOnce` list. \n- `checkTwice`: A function that changes an `address` to a new `Status` of `NICE`, `EXTRA_NICE`, `NAUGHTY`, or `UNKNOWN` on the *new* `s_theListCheckedTwice` list **only** if someone has already been marked on the `s_theListCheckedOnce`.\n\n### Collecting Presents\n\n\n*You can see what a Christmas NFT present looks like here!*\n\n\n\nThe following functions are meant to be called by people, but only those marked `NICE` or `EXTRA_NICE` can benefit from them.\n\n- `collectNFT`: A function that allows a `NICE` or `EXTRA_NICE` user to collect their NFT. `EXTRA_NICE` users also receive `SantaToken` which is used to purchase an additional NFTs. An address is only allowed to collect 1 NFT per address, there is a check in the codebase to prevent someone from minting duplicate NFTs. \n- `buyPresent`: A function that trades `2e18` of `SantaToken` for an NFT. This function can be called by anyone. \n\n## SantaToken\nThis codebase is based off [solmate](https://github.com/transmissions11/solmate) a Modern, opinionated, and gas optimized building blocks for smart contract development. The ERC20 is a typical ERC20 with the following changes:\n- Only `SantasList` can mint tokens\n- Only `SantasList` can burn tokens (well, technically anyone can, but only `SantasList` can call the burn function)\n\n## TokenUri.sol\nA minimal contract that exclusively has the tokenURI. It's a separate contract inherited by `SantasList` for readability purposes. \n\n## Roles\n\n- `Santa` - Deployer of the protocol, should only be able to do 2 things:\n - `checkList` - Check the list once\n - `checkTwice` - Check the list twice\n - Additionally, it's OK if Santa mints themselves tokens. \n- `User` - Can buyPresents and mint NFTs depending on their status of NICE, NAUGHTY, EXTRA-NICE or UNKNOWN\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n## Quickstart\n\n```\ngit clone https://github.com/Cyfrin/2023-11-Santas-List\ncd 2023-11-Santas-List\nmake\n```\n\nOr optionally, you can run:\n```\nforge install\nforge build\n```\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- Commit Hash: 91c8f8c94a9ff2db91f0ab2b2742cf1739dd6374\n- In Scope:\n\n```\n./src/\n#-- SantaToken.sol\n#-- SantasList.sol\n#-- TokenUri.sol\n```\n\n## Compatibilities\n\n- Solc Version: 0.8.22\n- Chain(s) to deploy contract to: \n - Arbitrum\n- Tokens\n - `SantaToken`\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\n- We are aware that we are missing a number of zero address checks, please ignore.\n- The Christmas date is approximate, if it's more then 24 hours before or after Christmas, please report that. Otherwise, it's OK.\n\n[//]: # (known-issues-close)\n","company":"First Flight #5","protocolTags":"beginnerFriendly, foundry","name":"First Flight #5: Santa's List","urlSlug":"2023-11-Santas-List","logoImgPublicId":"company/r0rzvpvbhfr4q5jaafv3","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-11-Santas-List","startDate":"2023-11-30T12:00:00.000Z","endDate":"2023-12-07T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":116},{"id":"clomptuvr0001ie09bzfp4nqw","description":"First Flight #4 has you delving into Boss Bridge, a simple protocol allowing users to move tokens from Layer 1 to Layer 2.","content":"# First Flight #4: Boss Bridge\n\n# Contest Details\n\n## Prize Pool\n\n- Total Prize Pool:\n - High: 100XP\n - Medium: 20XP\n - Low: 2XP\n- Starts - November 09, 2023\n- Ends - November 15, 2023\n\n## Stats\n\n- nSLOC: 99\n- Complexity Score: 106\n\n[//]: # (contest-details-open)\n\n# Boss Bridge\n\nThis project presents a simple bridge mechanism to move our ERC20 token from L1 to an L2 we're building.\nThe L2 part of the bridge is still under construction, so we don't include it here.\n\nIn a nutshell, the bridge allows users to deposit tokens, which are held into a secure vault on L1. Successful deposits trigger an event that our off-chain mechanism picks up, parses it and mints the corresponding tokens on L2.\n\nTo ensure user safety, this first version of the bridge has a few security mechanisms in place:\n\n- The owner of the bridge can pause operations in emergency situations.\n- Because deposits are permissionless, there's an strict limit of tokens that can be deposited.\n- Withdrawals must be approved by a bridge operator.\n\nWe plan on launching `L1BossBridge` on both Ethereum Mainnet and ZKSync.\n\n## On withdrawals\n\nThe bridge operator is in charge of signing withdrawal requests submitted by users. These will be submitted on the L2 component of the bridge, not included here. Our service will validate the payloads submitted by users, checking that the account submitting the withdrawal has first originated a successful deposit in the L1 part of the bridge.\n\n## Actors/Roles\n\n- Bridge Owner: A centralized bridge owner who can:\n - pause/unpause the bridge in the event of an emergency\n - set `Signers` (see below)\n- Signer: Users who can \"send\" a token from L2 -> L1.\n- Vault: The contract owned by the bridge that holds the tokens.\n- Users: Users mainly only call `depositTokensToL2`, when they want to send tokens from L1 -> L2.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n## Quickstart\n\n```\ngit clone https://github.com/Cyfrin/2023-11-Boss-Bridge.git\ncd 2023-11-Boss-Bridge\nmake\n```\n\nor\n\n```\ngit clone https://github.com/Cyfrin/2023-11-Boss-Bridge.git\ncd 2023-11-Boss-Bridge\nforge install\nforge build\n```\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n## Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n## Static Analysis\n\n### Slither\n\n```\nmake slither\n```\n\n### Aderyn\n\n```\nmake aderyn\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n## Audit Scope Details\n\n- Commit Hash: 07af21653ab3e8a8362bf5f63eb058047f562375\n- In scope\n\n```\n./src/\n#-- L1BossBridge.sol\n#-- L1Token.sol\n#-- L1Vault.sol\n#-- TokenFactory.sol\n```\n\n- Solc Version: 0.8.20\n- Chain(s) to deploy contracts to:\n - Ethereum Mainnet:\n - L1BossBridge.sol\n - L1Token.sol\n - L1Vault.sol\n - TokenFactory.sol\n - ZKSync Era:\n - TokenFactory.sol\n - Tokens:\n - L1Token.sol (And copies, with different names & initial supplies)\n\n## Token Compatibility\n\nFor the moment, assume _only_ the `L1Token.sol` or copies of it will be used as tokens for the bridge. This means all other ERC20s and their [weirdness](https://github.com/d-xo/weird-erc20) is considered out-of-scope.\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\n- We are aware the bridge is centralized and owned by a single user, aka it is centralized.\n- We are missing some zero address checks/input validation intentionally to save gas.\n- We have magic numbers defined as literals that should be constants.\n- Assume the `deployToken` will always correctly have an L1Token.sol copy, and not some [weird erc20](https://github.com/d-xo/weird-erc20)\n\n[//]: # (known-issues-close)\n","company":"First Flight #4","protocolTags":"beginnerFriendly, foundry, bridge","name":"First Flight #4: Boss Bridge","urlSlug":"2023-11-Boss-Bridge","logoImgPublicId":"company/l8hfdebsjntxn2tpnqjr","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-11-Boss-Bridge/","startDate":"2023-11-09T12:00:00.000Z","endDate":"2023-11-15T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clk3twjk3003imj08kmy05ubk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":99},{"id":"clocopz26004rkx08q1n61wnz","description":"Become more familiar with DeFi and flashloans in CodeHawks' most challenging First Flight yet! Thunder Loan allows users to create flash loans and provides yield to it's liquidity providers!","content":"# First Flight #3: Thunder Loan\n\n- [Thunder Loan](#thunder-loan)\n- [Contest Details](#contest-details)\n - [Contest Details](#contest-details-1)\n - [Prize Pool](#prize-pool)\n - [Stats](#stats)\n - [A flash loan protocol based on Aave and Compound.](#a-flash-loan-protocol-based-on-aave-and-compound)\n- [About](#about)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Quickstart](#quickstart)\n - [Optional Gitpod](#optional-gitpod)\n- [Usage](#usage)\n - [Testing](#testing)\n - [Test Coverage](#test-coverage)\n - [Audit Scope Details](#audit-scope-details)\n - [Compatibilities](#compatibilities)\n - [Roles](#roles)\n - [Known Issues](#known-issues)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: Noon UTC Wednesday, Nov 01 2023\n- Ends: Noon UTC Wednesday, Nov 08 2023\n\n## Stats\n\n- nSLOC: 387\n- Complexity Score: 325\n\n[//]: # (contest-details-open)\n\n## A flash loan protocol based on [Aave](https://aave.com/) and [Compound](https://compound.finance/).\n\n# About\n\nThe ⚡️ThunderLoan⚡️ protocol is meant to do the following:\n\n1. Give users a way to create flash loans\n2. Give liquidity providers a way to earn money off their capital\n\nLiquidity providers can `deposit` assets into `ThunderLoan` and be given `AssetTokens` in return. These `AssetTokens` gain interest over time depending on how often people take out flash loans!\n\nWhat is a flash loan?\n\nA flash loan is a loan that exists for exactly 1 transaction. A user can borrow any amount of assets from the protocol as long as they pay it back in the same transaction. If they don't pay it back, the transaction reverts and the loan is cancelled.\n\nUsers additionally have to pay a small fee to the protocol depending on how much money they borrow.\n\nWe are planning to upgrade from the current `ThunderLoan` contract to the `ThunderLoanUpgraded` contract. Please include this upgrade in scope of a security review.\n\n## Roles\n\n- Owner: The owner of the protocol who has the power to upgrade the implementation.\n- Liquidity Provider: A user who deposits assets into the protocol to earn interest.\n- User: A user who takes out flash loans from the protocol.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n## Quickstart\n\n```\ngit clone https://github.com/Cyfrin/2023-11-Thunder-Loan\ncd 2023-11-Thunder-Loan\nmake\n```\n\n### Optional Gitpod\n\nIf you can't or don't want to run and install locally, you can work with this repo in Gitpod. If you do this, you can skip the `clone this repo` part.\n\n[![Open in Gitpod](https://gitpod.io/button/open-in-gitpod.svg)](https://gitpod.io/#github.com/Cyfrin/6-thunder-loan-audit)\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n## Audit Scope Details\n\n- Commit Hash: e8ce05f5530ca965165d41547b289604f873fdf6\n- In Scope:\n\n```\n├── interfaces\n│ ├── IFlashLoanReceiver.sol\n│ ├── IPoolFactory.sol\n│ ├── ITSwapPool.sol\n│ #── IThunderLoan.sol\n├── protocol\n│ ├── AssetToken.sol\n│ ├── OracleUpgradeable.sol\n│ #── ThunderLoan.sol\n#── upgradedProtocol\n #── ThunderLoanUpgraded.sol\n```\n\n## Compatibilities\n\n- Solc Version: 0.8.20\n- Chains:\n - ETH\n- Tokens:\n - All tokens that follow the ERC20 Standard\n - Any ERC20 that does not is only included if it is specified below:\n - USDT: 0xdAC17F958D2ee523a2206206994597C13D831ec7\n - USDC: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n - STA: 0xa7DE087329BFcda5639247F96140f9DAbe3DeED1\n - PAXG: 0x45804880De22913dAFE09f4980848ECE6EcbAf78\n - BNB: 0xB8c77482e45F1F44dE1745F52C74426C631bDD52\n - ZIL: 0x05f4a42e251f2d52b8ed15E9FEdAacFcEF1FAD27\n - KNC: 0xdd974D5C2e2928deA5F71b9825b8b646686BD200\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n## Known Issues\n\nNone\n\n[//]: # (known-issues-close)\n","company":"First Flight #3","protocolTags":"beginnerFriendly, foundry, defi, oracle","name":"First Flight #3: Thunder Loan","urlSlug":"2023-11-Thunder-Loan","logoImgPublicId":"company/d1hkijtzamvahfhxlkis","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-11-Thunder-Loan","startDate":"2023-11-01T12:00:00.000Z","endDate":"2023-11-08T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clk3twjk3003imj08kmy05ubk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":387},{"id":"clo383y5c000jjx087qrkbrj8","description":"This next First Flight audit will have you applying your skills to an NFT Raffle Protocol. Let's make those Pups secure!","content":"# First Flight #2: Puppy Raffle\n\n- [Contest Details](#contest-details)\n - [Prize Pool](#prize-pool)\n - [Stats](#stats)\n- [Puppy Raffle](#puppy-raffle)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Quickstart](#quickstart)\n - [Optional Gitpod](#optional-gitpod)\n- [Usage](#usage)\n - [Testing](#testing)\n - [Test Coverage](#test-coverage)\n- [Audit Scope Details](#audit-scope-details)\n - [Compatibilities](#compatibilities)\n- [Roles](#roles)\n- [Known Issues](#known-issues)\n\n# Contest Details\n\n### Prize Pool\n\n- High - 100xp\n- Medium - 20xp\n- Low - 2xp\n\n- Starts: Noon UTC Wednesday, Oct 25 2023\n- Ends: Noon UTC Wednesday, Nov 01 2023\n\n## Stats\n\n- nSLOC: 143\n- Complexity Score: 111\n\n[//]: # (contest-details-open)\n\n# Puppy Raffle\n\nThis project is to enter a raffle to win a cute dog NFT. The protocol should do the following:\n\n1. Call the `enterRaffle` function with the following parameters:\n 1. `address[] participants`: A list of addresses that enter. You can use this to enter yourself multiple times, or yourself and a group of your friends.\n2. Duplicate addresses are not allowed\n3. Users are allowed to get a refund of their ticket & `value` if they call the `refund` function\n4. Every X seconds, the raffle will be able to draw a winner and be minted a random puppy\n5. The owner of the protocol will set a feeAddress to take a cut of the `value`, and the rest of the funds will be sent to the winner of the puppy.\n\n## Roles\n\nOwner - Deployer of the protocol, has the power to change the wallet address to which fees are sent through the `changeFeeAddress` function.\nPlayer - Participant of the raffle, has the power to enter the raffle with the `enterRaffle` function and refund value through `refund` function.\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n# Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n## Quickstart\n\n```\ngit clone https://github.com/Cyfrin/2023-10-Puppy-Raffle\ncd 2023-10-Puppy-Raffle\nmake\n```\n\n### Optional Gitpod\n\nIf you can't or don't want to run and install locally, you can work with this repo in Gitpod. If you do this, you can skip the `clone this repo` part.\n\n[![Open in Gitpod](https://gitpod.io/button/open-in-gitpod.svg)](https://gitpod.io/#github.com/Cyfrin/3-passwordstore-audit)\n\n# Usage\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n# Audit Scope Details\n\n- Commit Hash: 22bbbb2c47f3f2b78c1b134590baf41383fd354f\n- In Scope:\n\n```\n./src/\n└── PuppyRaffle.sol\n```\n\n## Compatibilities\n\n- Solc Version: 0.7.6\n- Chain(s) to deploy contract to: Ethereum\n\n[//]: # (scope-close)\n\n[//]: # (known-issues-open)\n\n# Known Issues\n\nNone\n\n[//]: # (known-issues-close)\n","company":"First Flight #2","protocolTags":"beginnerFriendly, foundry, nft","name":"First Flight #2: Puppy Raffle","urlSlug":"2023-10-Puppy-Raffle","logoImgPublicId":"company/tdkz9rzok2ttktqyhakk","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":0,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-10-FF2-Puppy-Raffle","startDate":"2023-10-25T12:00:00.000Z","endDate":"2023-11-01T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"cljydfm3x0000lf08aeuhjqqm","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":143},{"id":"clnuo221v0001l50aomgo4nyn","description":"First Flight Initiative - New to Web3 Security? Start your journey here!\n\nPasswordStore is a simple solidity protocol meant to allow the owner to store and retrieve their password securely. Never worry about forgetting your password again!","content":"# First Flight #1: PasswordStore\n\n- [Contest Details](#contest-details)\n - [Stats](#stats)\n- [Getting Started](#getting-started)\n - [Requirements](#requirements)\n - [Quickstart](#quickstart)\n - [Optional Gitpod](#optional-gitpod)\n- [Usage](#usage)\n - [Deploy (local)](#deploy-local)\n - [Testing](#testing)\n - [Test Coverage](#test-coverage)\n - [Compatibilities](#compatibilities)\n- [Roles](#roles)\n- [Known Issues](#known-issues)\n\n[//]: # (contest-details-open)\n\n## Contest Details\n\n- 2x XP/Finding!\n \n- High - 200xp\n- Medium - 40xp\n- Low - 4xp\n\nStarts: 00:00 UTC Wednesday, Oct 18 2023\n\nEnds: 00:00 UTC Wednesday, Oct 25 2023\n\n## Stats\n\n- nSLOC: 20\n- Complexity Score: 10\n\n## About\n\nPasswordStore is a smart contract application for storing a password. Users should be able to store a password and then retrieve it later. Others should not be able to access the password.\n\n## Roles\n\nOwner - Only the owner may set and retrieve their password\n\n[//]: # (contest-details-close)\n\n[//]: # (getting-started-open)\n\n## Getting Started\n\n## Requirements\n\n- [git](https://git-scm.com/book/en/v2/Getting-Started-Installing-Git)\n - You'll know you did it right if you can run `git --version` and you see a response like `git version x.x.x`\n- [foundry](https://getfoundry.sh/)\n - You'll know you did it right if you can run `forge --version` and you see a response like `forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)`\n\n## Quickstart\n\n```\ngit clone https://github.com/Cyfrin/2023-10-PasswordStore\ncd 2023-10-PasswordStore\nforge install foundry-rs/forge-std --no-commit\nforge build\n```\n\n### Optional Gitpod\n\nIf you can't or don't want to run and install locally, you can work with this repo in Gitpod. If you do this, you can skip the `clone this repo` part.\n\n[![Open in Gitpod](https://gitpod.io/button/open-in-gitpod.svg)](https://gitpod.io/#github.com/Cyfrin/3-passwordstore-audit)\n\n## Usage\n\n### Deploy (local)\n\n1. Start a local node\n\n```\nmake anvil\n```\n\n2. Deploy\n\nThis will default to your local node. You need to have it running in another terminal in order for it to deploy.\n\n```\nmake deploy\n```\n\n## Testing\n\n```\nforge test\n```\n\n### Test Coverage\n\n```\nforge coverage\n```\n\nand for coverage based testing:\n\n```\nforge coverage --report debug\n```\n\n[//]: # (getting-started-close)\n\n[//]: # (scope-open)\n\n## Scope\n\n- Commit Hash: 2e8f81e263b3a9d18fab4fb5c46805ffc10a9990\n- In Scope:\n\n```\n./src/\n└── PasswordStore.sol\n```\n\n## Compatibilities\n\n- Solc Version: 0.8.18\n- Chain(s) to deploy contract to: Ethereum\n\n[//]: # (scope-close)\n\n## Known Issues\n\n[//]: # (known-issues-open)\n\n

\nNo known issues reported.\n\n[//]: # (known-issues-close)\n","company":"First Flight #1","protocolTags":"beginnerFriendly, foundry","name":"First Flight #1: PasswordStore","urlSlug":"2023-10-PasswordStore","logoImgPublicId":"company/oqeneydfjjxss2xqco1h","reward":0,"rewardHighMedium":0,"rewardLow":0,"rewardCommunityJudging":0,"xpBoost":2,"maxRewardedCommunityJudgingPosition":5,"currency":"USDC","githubUrl":"https://github.com/Cyfrin/2023-10-PasswordStore","startDate":"2023-10-18T12:00:00.000Z","endDate":"2023-10-25T12:00:00.000Z","communityJudgingEnabled":false,"communityJudgingStartDate":null,"communityJudgingEndDate":null,"appealStartDate":null,"appealEndDate":null,"leadJudgeId":"clkgm90b9000gms085g528phk","firstFlight":true,"formalVerification":false,"kycRewards":false,"privateSubmissionsToggle":false,"privateSubmissionsPublicAfterFinalisationToggle":false,"finalised":true,"cjEligibilityContestParticipation":false,"cjEligibilityPreviousValidSubmission":false,"cjEligibilityPreviousMonetaryReward":false,"cjEligibilityValidSubmissionsRatio":false,"highXpRate":100,"mediumXpRate":20,"lowXpRate":2,"nsloc":20}]}},{"error":{"message":"UNAUTHORIZED","code":-32001,"data":{"code":"UNAUTHORIZED","httpStatus":401,"path":"judging.getContests"}}},{"result":{"data":[{"id":"clnt4jyn2000dm808txei311h","name":"Non-acceptable severity","deleted":false,"createdById":"cljx5xan10002kx0877m20mbo"},{"id":"cloybqk1l0013l908rdjolt7s","name":"Known issue","deleted":false,"createdById":"cljx5xan10002kx0877m20mbo"},{"id":"cloybqqw50015l9086s49dra6","name":"Too generic","deleted":false,"createdById":"cljx5xan10002kx0877m20mbo"},{"id":"cloybrfah001dl908ixzcpdex","name":"Incorrect statement","deleted":false,"createdById":"cljx5xan10002kx0877m20mbo"},{"id":"cloyg4qrt0018l208cid4y5p1","name":"Lack of quality","deleted":false,"createdById":"cljx5xan10002kx0877m20mbo"},{"id":"clp64g0hk0001a3aq65jxrq8b","name":"Out of scope","deleted":false,"createdById":"cljx5xan10002kx0877m20mbo"},{"id":"clp64g4fv0003a3aqr76rlxg8","name":"Design choice","deleted":false,"createdById":"cljx5xan10002kx0877m20mbo"}]}},{"error":{"message":"UNAUTHORIZED","code":-32001,"data":{"code":"UNAUTHORIZED","httpStatus":401,"path":"judging.getMyActiveJudgingContests"}}}]

Judging Dashboard