near-daos / sputnik-dao-contract

Smart contracts for https://app.astrodao.com
https://astrodao.com/
MIT License
108 stars 76 forks source link

Enforce minimum deposit on create method from the factory #148

Closed ctindogaru closed 2 years ago

ctindogaru commented 2 years ago

A deposit of 5 NEAR is required from the UI (https://app.astrodao.com/create-dao-new) when you're trying to create a new DAO.

However, in the smart contract, we are not checking that a deposit of 5 NEAR is attached to the function call.

This issue was spotted during the Halborn audit.