Closed c4-submissions closed 10 months ago
raymondfam marked the issue as sufficient quality report
The report contains code segments without clearly marking which contract they are from which should be avoided as it significantly degrades the quality of the report. The overall quality of the report is C as it does not contain valid/useful findings.
AddressProviderService::_getRegistry
function, not as addresses. As such, it is incorrect.PolicyRegistry::updatePolicy
function is solely invoke-able by either the Gnosis Safe deployer, the Gnosis Safe themselves, or parties that wish to change their own policy. A compromise is not possible in such a case and generally, rate limits are ill-advised and will never realistically prevent gas cost surges in blockchain networks.PolicyCommitInvalid
relates to the commit of the policy being invalid whereas an UnauthorizedPolicyUpdate
relates to the caller not possessing the necessary authorization._genNonce
: The contract is compiled with built-in safe arithmetics as a Solidity version 0.8.X
is utilized. Additionally, a sequentially incremented nonce will not realistically overflow.alex-ppg marked the issue as grade-c
See the markdown file with the details of this report here.