Anyone can cancel any proposals by calling DAO.cancelProposal(id, id) with oldProposalID == newProposalID.
This always passes the minority check as the proposal was approved.
Impact
An attacker can launch a denial of service attack on the DAO governance and prevent any proposals from being executed.
Handle
@cmichelio
Vulnerability details
Vulnerability Details
Anyone can cancel any proposals by calling
DAO.cancelProposal(id, id)
witholdProposalID == newProposalID
. This always passes the minority check as the proposal was approved.Impact
An attacker can launch a denial of service attack on the DAO governance and prevent any proposals from being executed.
Recommended Mitigation Steps
Check
oldProposalID == newProposalID