Submission Details
Severity:
Lack of Event Emission for Updates in updateDAOMembership
Summary:
The updateDAOMembership function lacks event emission after updating the DAO configuration. This can reduce transparency and make it difficult to track changes on-chain.
Vulnerability Details:
The updateDAOMembership function lacks event emission after updating the DAO configuration. This can reduce transparency and make it difficult to track changes on-chain.
Impact:
This impacts the contract’s transparency, making it difficult for off-chain services and DAO members to monitor changes.
Tools Used:
Manual Review
Recommendations:
Emit a DAOMembershipUpdated event at the end of updateDAOMembership, logging the DAO address, ENS name, number of tiers, and maxMembers value. This event will improve the function’s transparency and help track changes on-chain.
event DAOMembershipUpdated( address indexed daoAddress, string ensName, uint256 newNoOfTiers, uint256 maxMembers );
emit DAOMembershipUpdated(daoAddress, ensName, dao.noOfTiers, dao.maxMembers);
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
54128
USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.