The delegation even if you have no `VotingPower`

[code423n4]

Lines of code

https://github.com/PartyDAO/party-contracts-c4/blob/main/contracts/party/PartyGovernance.sol#L911

Vulnerability details

Impact

when you buy a new VotingPower. You need to undelegated them before the next proposal

Proof of Concept

-When Alice sell his NFT by calling transferFrom() on PartyGovernanceNFT.sol. it will be set for the delegating to the previous delegator. but he actually doesn't have any VotingPower -But is Alice decide after some time to buy some VotingPower

• the VotingPower will go to the previous delegator
• Alice needs to undelegated their NFT to get all new VotingPower

Recommended Mitigation Steps

undelegated automatically when someone sells their VotingPower

[merklejerk]

This is intentional. Delegations are a property of the account, not the governance token ID.

[HardlyDifficult]

Working as intended. Closing as invalid.