Project

Summary

When prices of the DAO tiers are not in 2x multiple, it would be unfair for the members of the DAO.

Vulnerability Detail

Soppose in a DAO prices of tiers are 300, 200 and 100 for tier 0, 1 and 2 respectively. Now if a user is a member of 1 tier and he wants to upgrade to 0 tier. For that user have to join in 1 tier again and then he can upgrade to tier 0.

But for that user have to pay total 400 (200+200) and if he joins tier 0 directly he has to pay only 300. So it will be unfair for the user to upgrade with paying extra 100.

In a vice a versa case if prices are more that 2x (500, 200, 100 in above case), user who joins directly will pay 500 for tier 0 and who upgrades will pay 400 (200+200) so it will be unfair for direct user to pay extra 100.

Impact

when prices are not in 2x multiple and one side user will have to pay extra.

Tool used

Manual Review

Recommendation

Protocol should implement upgrade feature which make sure that user will pay only extra money for next tier. (100 in ex-1 and 300 in ex-2).