Submission Details
Severity:
Uninitialized Proposal Snapshots Prevent Voting Power Retrieval in veRAACToken Contract
Description
The veRAACToken::getVotingPowerForProposal function relies on proposalPowerSnapshots mapping to get the snapshot block for a proposal, but this mapping is never initialized in the contract. This means the function will always revert with InvalidProposal as proposalPowerSnapshots[proposalId] will always return 0.
function getVotingPowerForProposal(address account, uint256 proposalId) external view returns (uint256) {
@> uint256 snapshotBlock = proposalPowerSnapshots[proposalId]; // Always returns 0
@> if (snapshotBlock == 0) revert InvalidProposal(); // Always reverts
return getPastVotes(account, snapshotBlock);
}
Risk
Likelihood: High
Will consistently fail for all calls
Impact: Low
Voting power cannot be retrieved for any proposal
Recommended Mitigation
Add function to set snapshot blocks for proposals
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.