The governance contract accepts changes to votes, even after they have been cast on-chain.

DNS (Domain Name Service) is the name given to domains/websites on the Internet. They may be vulnerable to attacks, and it is up to the DAO to create mechanisms to protect against them.

Waiting period between proposal submission and the snapshot to count for voting power and start the votes.

Once submitted to governance, a proposal may be canceled by anyone if the wallet that submitted it no longer has the number of governance tokens required to reach the proposal threshold.

An attacker can submit several proposals at once to trick the organization members into approving a malicious proposal or to try a brute force battle with the delegates, similar to a DDOS attack on the governance level.

The DAO can sponsor the gas costs of voting for its members, allowing them to essentially "vote for free". If done without restrictions can be exploited to spend DAO funds.

This security feature helps prevent users borrowing a flashloan to increase. For one block only, the number of votes/tokens in a wallet. Only the governance tokens held in the block preceding the submission/voting of the proposal count as voting power.

Waiting period between the approval of a proposal, prior to executing the automatic execution of a malicious proposal that negatively affects the DAO, allowing time for a Cancel or Veto function to act.

There is a mechanism approved by the DAO to cancel a proposal approved by governance after it has been voted.

Requires a minimum number of votes to submit a proposal to governance.

Group of people responsible for taking action to increase the DAO's security against harmful proposals, through a multisig administered by them. Ideally following L2Beat security council standard.

Period in which wallets with delegated governance tokens have the opportunity to vote on proposals submitted to governance.

Timelock administration can be transferred or shared with addresses other than the DAO itself. If this happens, the main piece of governance is put at risk.

An user can cancel a proposal they submitted themselves to the DAO at any point. Allows for proposal with unintentional mistakes to be taken down by a non-malicious actor.

The governance contract codes have been audited and approved by a security provider.