Nouns Builder contest - p_crypt0's results

A permissionless, governed protocol to deploy nouns-style DAOs complete with treasury, generative collections, and governance mechanisms.

General Information

Platform: Code4rena

Start Date: 06/09/2022

Pot Size: $90,000 USDC

Total HM: 33

Participants: 168

Period: 9 days

Judge: GalloDaSballo

Total Solo HM: 10

Id: 157

League: ETH

Nouns Builder

Findings Distribution

Researcher Performance

Rank: 119/168

Findings: 1

Award: $60.77

🌟 Selected for report: 0

🚀 Solo Findings: 0

Comments

Governor.sol: propose()
The calldata 0of each call

To

The calldata of each call

[Informational] Missing return statement in Queue(), Governor.sol

The function queue does not return eta explicitly, in contradiction to the styling of other functions in the contract:

/// @notice Queues a proposal /// @param _proposalId The proposal id function queue(bytes32 _proposalId) external returns (uint256 eta) { // Ensure the proposal has succeeded if (state(_proposalId) != ProposalState.Succeeded) revert PROPOSAL_UNSUCCESSFUL(); // Schedule the proposal for execution eta = settings.treasury.queue(_proposalId); emit ProposalQueued(_proposalId, eta); }

Add

return eta;

https://github.com/code-423n4/2022-09-nouns-builder/blob/7e9fddbbacdd7d7812e912a369cfd862ee67dc03/src/governance/governor/Governor.sol#L311

[informational] Missing GracePeriodUpdated event emission

The function initialise is updating the grace period from zero, to 2 weeks, yet no emission event is being recorded in initialize()

https://github.com/code-423n4/2022-09-nouns-builder/blob/7e9fddbbacdd7d7812e912a369cfd862ee67dc03/src/governance/treasury/Treasury.sol#L58

Add:

emit GracePeriodUpdated(0, 2 weeks);

#0 - GalloDaSballo

2022-09-27T00:33:50Z

Comment NC

Return Invalid, it returns without writing it

Event NC

#1 - GalloDaSballo

2022-09-27T00:33:53Z

2NC

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter