makeProposal can be front run with an arbitrary proposal modifications, enabling griefing attack

Handle hyh Vulnerability details Impact Griefing attack is possible for makeProposal as proposal details can be modified by anyone. Proposal setters have no access controls, requiring only that proposal be not current, so when makeProposal is executed after the preparation phase an attacker can...

The system can get to a "stuck" state if a bad proposal (proposal that can't be executed) is accepted

Handle CertoraInc Vulnerability details LimboDAO.sol updateCurrentProposal modifier and makeProposal function The LimboDAO contract has a variable that indicates the current proposal - every time there can be only one proposal. The only way a proposal can be done and a new proposal can be...