Nouns DAO - Clients Incentives — disclosed vulnerability reports and payouts

Nouns DAO - Clients Incentives: Eligibility of cancelled proposals makes it possible for `proposalEligibilityQuorumBps` controlling actor to create multiple eligible proposals, stealing rewards from all others

Nouns DAO's client-incentives rewards subsystem counts every proposal that passes the voting quorum as eligible for proposal-writing rewards, without excluding proposals that were subsequently cancelled by their proposer. Because cancelled proposals free the proposer to immediately create a new one (bypassing the full voting lifecycle), an actor who controls more than the 10% `proposalEligibilityQuorumBps` threshold — directly or through colluding Nouns holders — can repeatedly cycle "create → vote → cancel" to manufacture many eligible proposals in a short window. Each such proposal counts toward the eligible-proposal base in `Rewards.updateRewardsForProposalWritingAndVoting()`, diluting the reward share for all other client ID owners. The impact was judged High because even a modest number of cancelled proposals can depress honest reward recipients' earnings by 2-3x.