Platform: CodeHawks
Period: February 25 – March 4, 2026
Auditor: jebitok
Contracts in Scope: src/ContestManager.sol, src/Pot.sol
Compiler: Solidity ^0.8.20
Framework: Foundry
External Protocols: OpenZeppelin Ownable, OpenZeppelin IERC20/ERC20
A contest rewards distribution protocol. An owner creates Pots (reward pools) and funds them with ERC20 tokens. Eligible players have a 90-day window to claim their share. After 90 days the owner closes the Pot: taking a 10% cut of unclaimed rewards, with the remainder split equally among those who claimed in time.
| Document | Description |
|---|---|
| Audit Report Draft | Protocol overview, architecture, findings, static analysis results, test coverage |
| Aderyn Report | Aderyn static analysis output |
| Slither Output | Slither static analysis output |
| Coverage Summary | Forge coverage report |
Generated by audit.sh — see audit_output_mycut/recon/ for:
- Storage layouts, ABIs, function selectors (
ContestManager,Pot) - Import graph, line counts, bytecode sizes
- Access control patterns, external call map, public function list
- Time logic and reward math extracts
audit.sh — run inside the cloned MyCut protocol repo. See the root README for usage.