OriginProtocol / OriginProtocol/origin-dollar
Governor proposal creation may be blocked by frontrunning
Nobody has claimed this yet.
- Dominant language
- Solidity
- Stars
- 152
- Forks
- 115
- Avg merge
- 3d 20h
- Merged PRs (30d)
- 17
Description
Open Zeppelin has issued the following security advisory:
Affected packages: >=4.3.0 <4.9.1
Patched version: 4.9.1
Origin's ousd-governance repo is using OZ v4.6.0.
A modified versions of the OZ Governance contracts are being used.
Analysis needs to be done to see if the OZ change needs to be applied to the modified Origin governance contracts.
OpenZeppelin commit that addresses the issue: https://github.com/OpenZeppelin/openzeppelin-contracts/commit/d9474327a492f9f310f31bc53f38dbea56ed9a57
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the OpenZeppelin security advisory and commit d9474327a492f9f310f31bc53f38dbea56ed9a57, then compare their governance changes with the modified contracts in the ousd-governance repository. Determine whether the frontrunning fix applies to Origin's contracts; the issue is done when that assessment is documented and any necessary change is applied and verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- solidity
- Domain
- blockchain, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100