2 matches found
It is possible to vote, finalise and execute the same proposal several times
Handle paulius.eth Vulnerability details Impact function completeProposal which is the last step sets mapPIDfinalised to true and resets mapPIDfinalising to false. Function voteProposal only checks that mapPIDfinalising is false, it does not check that the mapPIDfinalised, thus the same proposal...
Undefined behavior for DAO and GRANT vote proposals in DAO.sol
Handle 0xRajeev Vulnerability details Impact Given that there are only three proposal types GRANT, UTILS, REWARD that are actionable, it is unclear if 'DAO' type checked in voteProposal is a typographical error and should really be 'GRANT'. Otherwise, GRANT proposals will only require quorum 33%...