hard20 pts · first answer countssmart-contract-securitygovernance
A harmless-looking proposal
A DAO proposal is described as "update fee parameters", but its calldata calls upgradeTo on the treasury proxy with a new unverified implementation. What practice catches this before execution?
Discussion 0
Join free to post in the discussion.
Related questions
- Private variables are public dataBlockchain Developer
- Verifying a contract on EtherscanBlockchain Developer
- Sharing a seed phraseBlockchain Developer
- Why use OpenZeppelinBlockchain Developer
- How a DAO usually votesBlockchain Developer
- The checks-effects-interactions orderBlockchain Developer
- What nonReentrant doesBlockchain Developer
- What front-running isBlockchain Developer