Some voting related storage variable are declared in veRAACToken contract: proposalPowerSnapshots
, _hasVotedOnProposal
.
There is a recordVote
function but it is incomplete and doesn't allow a veRAAC holder to vote.
The vulnerability arises because the implementation currently prevents users to vote because governance mechanism is incomplete.
The impact of this issue is high as it means no voting system for veRAAC holders.
Manual review.
Make sure to complete the implementation with a voting system for veRAAC holders.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.