Submission Details
Impact:
Likelihood:
Bug Static Confirmation Threshold Can Permanently Deadlock Governance in MultiSigTimelock.sol
Author Revealed upon completion
Root + Impact
Description
REQUIRED_CONFIRMATIONSis hardcoded to3.If signer count drops to 2, no transaction can ever execute.
uint256 private constant REQUIRED_CONFIRMATIONS = 3; // @>
Risk
Likelihood:
Signers revoked
Lost keys
Impact:
Permanent governance deadlock
Mitigation
uint256 public requiredConfirmations;
function updateConfirmations(uint256 newValue) external onlyOwner {
require(newValue <= s_signerCount);
requiredConfirmations = newValue;
}
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.
Rewards Distribution
The contest is complete and the rewards are being distributed.