Submission Details
Severity:
User could vote FOR his own proposal
Summary
User can vote FOR hist proposal, and it could be dangerous, if this user have huge power, which more than quorum
Vulnerability Details
User, who have huge power can vote for his proposal and this proposal will have status successful
function _isProposalSuccessful(uint256 proposalId) internal view returns (bool) {
ProposalVote storage proposalVote = _proposalVotes[proposalId];
uint256 currentQuorum = proposalVote.forVotes + proposalVote.againstVotes;
uint256 requiredQuorum = quorum();
return currentQuorum >= requiredQuorum &&
proposalVote.forVotes > proposalVote.againstVotes;
}
Impact
Proposal could be executed if creator has huge voting power
Tools Used
Manual review
Recommendations
Do not allow proposal creators cast vote for their proposals
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.