Project

Summary

The contract does not provide a mechanism for updating the ENS name (ensname) associated with a DAO after its initial creation. This limitation can affect the flexibility and adaptability of DAOs in managing their identity and branding.

Vulnerability Details

The ENS name is set during the creation of a DAO and stored in the DAOConfig structure. However, there is no function to modify this name once it has been set.
If an incorrect ENS name is entered during creation, there is no built-in method to rectify this mistake.

Impact

DAOs are unable to update their ENS name to reflect changes in branding or organizational structure, potentially leading to inconsistent or outdated identities.
Mistakes made during the initial setup cannot be corrected, which may cause confusion or misidentification.
The inability to change the ENS name could lead to dissatisfaction among DAO creators who expect flexibility in managing their DAO's identity.

Tools Used

Manual Review

Recommendations

Introduce a function that allows authorized users (e.g., those with a specific role) to update the ENS name associated with a DAO. This function should include appropriate checks to prevent unauthorized changes.