The constructor in Governance currently validates the _veTokenAddr parameter using the InvalidTimelockAddress error, which is misleading because this parameter represents the veRAAC token address—not a timelock address.
Define a new error, e.g. InvalidVeTokenAddress, specifically for veRAAC token address validation. Update the constructor to check _veTokenAddr against 0x0 using the new error so that the error message accurately reflects the parameter being validated.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.