The castVote
function's end-time validation uses a >
operator instead of >=
, allowing votes to be cast exactly at the proposal's end time.
Current implementation:
This allows voting when block.timestamp
equals proposal.endTime
, potentially violating intended voting window constraints.
Possibility of votes being cast at the exact deadline
Potential inconsistency with expected governance timing rules
Manual code review
Update the time check to use >=
:
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.