Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix: increaseReward provides a way to send funds to anycontractaddress #76

Open
arseneeth opened this issue Apr 20, 2021 · 2 comments
Open
Assignees
Labels
bug Something isn't working PRIORITY high priority, should be done ASAP

Comments

@arseneeth
Copy link
Contributor

The _increaseReward function on line 166 sends ERC20tokens to any address -this represents some risk to send funds to a new address via a proposal that was made by the DAO by mistake or by bad intention.

@arseneeth arseneeth added bug Something isn't working PRIORITY high priority, should be done ASAP labels May 12, 2021
@codebuster22
Copy link
Contributor

So do we just remove this or we need to think something?

@arseneeth
Copy link
Contributor Author

let's ditch out increaseReward completely

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working PRIORITY high priority, should be done ASAP
Projects
None yet
Development

No branches or pull requests

2 participants