Executive Summary This report presents the results of our engagement with Aave to review their implementation of a Governance DAO which will enable token holders to vote on changes and upgrades to the Aave Protocol. The review was conducted over the course of two weeks, from January 27th to February 7th by Daniel Luca and John Mardlin. A total of 15 person-days were spent. During the first week, we focused our efforts on understanding the intention of the design (which is primarily documented by thorough natspec comments within the code), and defining the key risk factors and potential vulnerabilities requiring further investigation.
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | 1 | - | - | - | 1 |
Fixed | 1 | - | 2 | - | 3 |
Total | 2 | 0 | 2 | 0 | 4 |
# | File Name |
---|---|
1 | contracts/interfaces/IGovernanceParamsProvider.sol |
2 | contracts/governance/VotingMachine.sol |
3 | contracts/governance/GovernanceParamsProvider.sol |
4 | contracts/interfaces/IFeeProvider.sol |
5 | contracts/interfaces/IAssetVotingWeightProvider.sol |
6 | contracts/interfaces/IProposalExecutor.sol |
7 | contracts/governance/ExecutiveReputation.sol |
8 | contracts/governance/AssetVotingWeightProvider.sol |
9 | contracts/interfaces/ILendingPoolAddressesProvider.sol |