Submission Details
Severity:
TimeLockController address can't be initially set in Governance contract
Summary
The Governance contrat needs to be already deployed when deploying the TimelockController contract so it can be given the EXECUTOR_ROLE , this means that the correct TimelockController address can't be given to Governance on deployment.
Vulnerability Details
This isn't much of a problem because it can later be set using the setTimelock function.
Impact
Workflow isn't setup correctly.
Tools Used
Manual review
Recommendations
Don't set timelock during Governance deployment.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.