autonomoussoftware / metronome

Metronome autonomous system
MIT License
14 stars 10 forks source link

Accumulated subscription balance can be manipulated by subscriber #32

Closed filcap closed 6 years ago

filcap commented 6 years ago

Severity: High Audit Report: Zeppelin Page 9

patidarmanoj10 commented 6 years ago

WONT FIX. I think allowing override/cancellation is justified because withdraw of weekly subscription payment is responsibility of beneficiary. If beneficiary not withdrawing weekly then he run into risk . Same risk also exist when owner has no balance in his account and due amount accumulated.