highLogic errorEVM-Solidity
Nouns DAO - Clients Incentives: Rewards can be stolen from other proposals and votes by extending auction revenue period with the help of bogus proposals
- Payout
- $0
- Protocol
- Nouns DAO - Clients Incentives
- Disclosed
- Apr 1, 2024
- Source
- sherlock
Nouns DAO's Client Incentives rewards module derives the auction-revenue reward period from the creationTimestamp of the last proposal in a user-supplied proposal range, without requiring that anchor proposal to be eligible. Because proposalDataForRewards() re …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.