Panel

Alerts

Contact

Donate

Glossary

FAQ

DAO Overview

Attack Profitability

Risk Analysis

Resilience Stages

Token Distribution

Holders & Delegates

Activity Feed

Panel

Alerts

Contact

Donate

Glossary

FAQ

Panel

Get Security Alerts

>v1.1.0_

powered by

Blockful
Docs

/

Terms of Service

/

Give Feedback
Docs

/

Terms of Service

/

Give Feedback

/

Risk Analysis

Risk level:

MEDIUM

Assess critical vulnerabilities in the DAO's governance setup.

Risk level:

MEDIUM

Risk Areas

Each item highlights a specific risk area, showing which issues are resolved and which still expose the system to threats.

SPAM VULNERABLE
ATTACK PROFITABILITY
SAFEGUARDS
HACKABLE
RESPONSE TIME
GOV FRONT-END VULNERABILITY

Spam Vulnerable

MEDIUM

Means the system can be overwhelmed by malicious or low-quality proposals. This wastes resources, discourages real participation and exposes the DAO to a war of attrition.

It usually happens when there are no checks to submit proposals, or the implementation allows it to be ignored.

// REQUIREMENTS

  • Proposal Flashloan Protection
  • Proposal Threshold
  • Spam Resistance
  • Voting Flashloan Protection
  • Voting Period
  • Voting Subsidy

Governance Implementation

When combined, these requirements determine the risk level of each area above. Here, you can explore each one individually and see why it's considered high risk—or not.

+-

Interface Hijack

No

MEDIUM

Definition

Protection against Domain Name Service attacks on the domains/websites used by the DAO.

Risk explained

Although protected from spoofing or hijacking, the service used for voting could still be internally compromised. A change in the voting interface could be used to manipulate the results of the vote, hiding malicious txns, or even changing selection of votes.

+-

Vote Mutability

No

MEDIUM

Definition

The governance contract accepts changes to votes even after they have been cast on-chain.

+-

Voting Delay

44h

MEDIUM

Definition

Waiting period between proposal submission and the snapshot to count for voting power and start the votes.

+-

Voting Period

5d 6h

MEDIUM

Definition

Period in which wallets with governance tokens or delegates have the opportunity to vote on proposals submitted to governance.

+-

Audited Contracts

Yes

LOW

Definition

The governance contract codes have been audited and approved by a security provider.

+-

Attack Profitability

<10k USD

LOW

Definition

Compares the cost of all delegated votes with the value of assets in the DAO treasury excluding its governance tokens.

+-

Proposal Flashloan Protection

Yes

LOW

Definition

Protects the DAO from users creating a proposal using voting power from borrowed tokens via flash loan.

+-

Proposal Threshold

1M UNI

LOW

Definition

The minimum number of votes required to create a proposal.

+-

Proposal Threshold Cancel

Yes

LOW

Definition

Whether a proposal may be canceled if the wallet that submitted it no longer has the number of governance tokens required to reach the proposal threshold.

+-

Proposer Balance Cancel

Yes

LOW

Definition

Allow for any user to cancel the proposer of an address if that address no longer holds the necessary voting power to pass proposal threshold while their proposal is still active.

+-

Spam Resistance

Yes

LOW

Definition

Protection against an attacker submitting several proposals at once to trick the organization's members into approving a malicious proposal.

+-

Timelock Admin

Only Governor

LOW

Definition

Controls whether governor's administration can be transferred or shared with addresses other than the DAO itself.

+-

Timelock Delay

2 days

LOW

Definition

Waiting period to execute a proposal after it's approved. Aims to prevent the automatic execution of a malicious proposal that negatively affects the DAO.

+-

Voting Flashloan Protection

Yes

LOW

Definition

Protects the DAO from users manipulating votes using voting power from borrowed tokens via flash loan.

+-

Voting Subsidy

Yes

LOW

Definition

The DAO sponsoring the gas costs of voting for its members allowing them to essentially 'vote for free'.