search

gnosisguild / zodiac-safe-app

https://gnosis-safe.io/app/share/safe-app?appUrl=https://zodiac.gnosisguild.org/&chainId=5
GNU Lesser General Public License v3.0
26 stars 28 forks source link

[Reality Module] Encourage safe parameter configuration #114

Closed asgeir-s closed 1 year ago

asgeir-s commented 1 year ago

We should encourage users to set safe values for Module timouts (days not hours) and bond (an attacker should have something at risk).

More info: https://twitter.com/auryn_macmillan/status/1576674887384829952

juliopavila commented 1 year ago

It's essential to add this solution that I took from here:

To recap, in order to securely use a Reality module, a DAO must:
1. have multiple independent parties monitoring calls to addProposal().
2. have a long questionTimeout for people to post bonds (48+ hours).
3. have a high enough minimumBond to disincentivize malicious proposals.