Skip to content

feat: SprintFund Core V2 - Security fixes and governance improvements#204

Merged
Mosas2000 merged 2 commits intomainfrom
fix/contract-v2-upgrade
Mar 27, 2026
Merged

feat: SprintFund Core V2 - Security fixes and governance improvements#204
Mosas2000 merged 2 commits intomainfrom
fix/contract-v2-upgrade

Conversation

@Mosas2000
Copy link
Copy Markdown
Owner

Summary

Major contract upgrade addressing 12 security vulnerabilities and governance improvements.

Security Fixes

Governance Improvements

Testing

  • 40 unit tests covering all new features and security measures
  • All tests passing

Documentation

  • Migration guide for users, proposers, and integrators

Resolves #11, #12, #13, #14, #15, #16, #17, #18, #20, #21, #25, #86

…nance

Add upgraded smart contract addressing multiple security vulnerabilities
and governance improvements:

Security fixes:
- Prevent double voting on proposals (resolves #12)
- Deduct quadratic vote cost from stake balance (resolves #13)
- Restrict execute-proposal to proposer only (resolves #11)
- Add minimum quorum requirement for execution (resolves #15)
- Add stake lockup period after voting (resolves #18)

Governance improvements:
- Add proposal deadline/expiration mechanism (resolves #14)
- Add upper bound validation on proposal amount (resolves #16)
- Add treasury deposit and balance tracking (resolves #17)
- Add event emission for off-chain indexing (resolves #20)
- Add admin functions for parameter updates (resolves #21)
- Add proposal cancellation by proposer (resolves #25)
- Add timelock for high-value proposals (resolves #86)

Includes comprehensive test suite with 40 unit tests covering all
new functionality and security measures.
Document breaking changes, new features, error codes, and migration
steps for users, proposers, and integrators upgrading from V1 to V2.
@Mosas2000 Mosas2000 merged commit 3a398d3 into main Mar 27, 2026
14 of 25 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Contract: No access control on execute-proposal allows anyone to trigger execution

1 participant