[audit] 14. “Migrate only if newer” pattern is not followed

[NoahSaso]

From Oak:

In contracts/distribution/dao-rewards-distributor/src/contract.rs:594 -597, the rewards distributor contract can be migrated without regard to their version. This can be improved by adding validation to ensure that the migration is only performed if the supplied version is newer.

This fix adds contract name and version checks before allowing migration.

[codecov]

Codecov Report

Attention: Patch coverage is 95.08197% with 3 lines in your changes missing coverage. Please review.

Please upload report for BASE (development@ec3cec7). Learn more about missing BASE report.

Files	Patch %	Lines
.../distribution/dao-rewards-distributor/src/error.rs	0.00%	3 Missing ⚠️

Additional details and impacted files

@@              Coverage Diff               @@
##             development     #869   +/-   ##
==============================================
  Coverage               ?   96.64%           
==============================================
  Files                  ?      241           
  Lines                  ?    65523           
  Branches               ?        0           
==============================================
  Hits                   ?    63326           
  Misses                 ?     2197           
  Partials               ?        0           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.