Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

audit: Same Proposal Status for Queued, Executed or Vetoed Proposals #188

Closed
Orland0x opened this issue Jun 13, 2023 · 4 comments
Closed

Comments

@Orland0x
Copy link
Contributor

In TimelockExecutionStrategy and CompTimelockCompatibleExecutionStrategy, executing or vetoing a transaction has the same observable effect of setting the executionTime of the payload to 0. Different events (ProposalVetoed vs ProposalExecuted) are emitted, but the proposal status as reported by getProposalStatus will in both cases be Executed. An on-chain actor will have no way to tell if a queued proposal has been executed or vetoed.

@Orland0x
Copy link
Contributor Author

Orland0x commented Jun 13, 2023

From the POV of the space, the proposal has been executed even if it gets later vetoed. So this seems okay.

@pscott
Copy link
Collaborator

pscott commented Jun 19, 2023

From the POV of the space, the proposal has been executed even if it gets later vetoed. So this seems okay.

It does feel cleaner to provide the correct information to the caller.. maybe the space doesn't care but another on-chain actor would care?

@Orland0x
Copy link
Contributor Author

how would we do it though? we dont store the proposal id in the timelock. Feels like an edge case that if someone really cared they could write their own custom strat

@pscott
Copy link
Collaborator

pscott commented Jun 19, 2023

Yeah I agree there's not much we can do :p

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants