Beans DAO - Audit

CertiKFiles named in the report

Audit

CertiK reviewed Beans DAO (Beans DAO - Audit) on 19 Aug 2022: 10 findings, 0 critical; 2 marked fixed, 2 acknowledged, 6 open.

No open critical findings
Open the reportOpen Beans DAO’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High200
Medium020
Low402
LowA Proposer Can Cancel his Succeeded ProposalFixed

A proposer can cancel his succeeded proposal, because Line 331 only check Executed state. ```js=330 function cancel(uint256 proposalId) external { require(state(proposalId) != ProposalState.Executed, 'BeansDAO::cancel: cannot cancel executed proposa l'); Proposal storage proposal = proposals[proposalId]; require( msg.sender == proposal.proposer || beans.getPriorVotes(proposal.proposer, block.number - 1) < proposal.proposalThreshold, 'BeansDAO::cancel: proposer above threshold' ); ```

LowVisibility of Function `getOgBeanAddress`Fixed

The visibility of function `getOgBeanAddress()` is internal, but it is not used in the `BeansToken` contract.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (14)

  • contracts/governance/BeansDAOProxy.sol
  • contracts/BeansDescriptor.sol
  • contracts/BeansAuctionHouse.sol
  • contracts/OGBeanList.sol
  • contracts/base/ERC721.sol
  • contracts/BeansSeeder.sol
  • contracts/governance/BeansDAOExecutor.sol
  • contracts/proxies/BeansAuctionHouseProxyAdmin.sol
  • contracts/libraries/Base64.sol
  • contracts/base/ERC721Checkpointable.sol
  • contracts/BeansToken.sol
  • contracts/proxies/BeansAuctionHouseProxy.sol
  • contracts/governance/BeansDAOLogicV1.sol
  • contracts/governance/BeansDAOInterfaces.sol

Part of Beans DAO’s security record

Beans DAO
Audits1 audit by 1 firmLast audit Aug 2022, by CertiK.
Critical findingsNo open critical findingsIn 1 report.
Open Beans DAO’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us