hard20 pts · first answer countsdefismart-contract-security

Flash-loaned voting power

A DAO counts votes using token.balanceOf(voter) at the moment of voting. An attacker borrows millions of tokens in a flash loan, votes, and repays in one transaction. What is the standard fix?

A.Block contracts from voting with an extcodesize checkB.Require votes to be signed with EIP-712C.Use voting power snapshotted at a past block (like ERC20Votes getPastVotes at proposal creation) and add a voting delayD.Charge a fee for every vote

← Checking a Chainlink price Return data gas griefing →