| Severity | Tool | Title | Validated | Confirmed |
|---|---|---|---|---|
| high | slither | GovTreasurer.safeGDAOTransfer(address,uint256) (contracts/Contract.sol#1105-1113) ignores return value by gdao.transfer(_to,GDAOBal) (contracts/Contract.sol#1109-1110) | no | — |
| high | detector | Authorization based on tx.origin | no | — |
| high | slither | GovTreasurer.safeGDAOTransfer(address,uint256) (contracts/Contract.sol#1105-1113) ignores return value by gdao.transfer(_to,_amount) (contracts/Contract.sol#1112-1113) | no | — |
| medium | slither | Reentrancy in GovTreasurer.withdraw(uint256,uint256) (contracts/Contract.sol#1089-1104): | no | — |
| medium | slither | Reentrancy in GovTreasurer.deposit(uint256,uint256) (contracts/Contract.sol#1059-1089): | no | — |
| medium | slither | Reentrancy in GovTreasurer.set(uint256,uint256,bool) (contracts/Contract.sol#976-985): | no | — |
| medium | detector | ETH value transfer possible | no | no |
| medium | slither | Reentrancy in GovTreasurer.add(uint256,IERC20,uint256,bool) (contracts/Contract.sol#963-976): | no | — |
| medium | codex | Reward payout can be reentered before accounting updates | no | — |
| medium | detector | Untrusted CALL target/value reachable | no | no |
| medium | slither | Reentrancy in GovTreasurer.withdraw(uint256,uint256) (contracts/Contract.sol#1089-1104): | no | — |
| medium | slither | Reentrancy in GovTreasurer.updatePool(uint256) (contracts/Contract.sol#1030-1040): | no | — |
| low | codex | Reward transfers ignore ERC20 return values | no | — |
| low | codex | Emergency withdraw always transfers zero tokens | no | — |
| info | cast | Heavy EXTCODE*/BALANCE usage | no | — |
| Run ID | Status | Validated | Total findings | Created |
|---|---|---|---|---|
| 019bab3b-a9ce-7222-9441-b6180eb0d007 | complete | crit 0 high 0 | 15 | 3 months ago |