Comments (4)
- one option will be to do DAOFactory.createInstance("Competition") with no(null) init params ,so it will instance a new Competition without initilize it.
from arc.
- one option will be to do DAOFactory.createInstance("Competition") with no(null) init params ,so it will instance a new Competition without initilize it.
If you do this, isn't there a security risk of the competition's initialize function callable by anyone, before you initialize it yourself?
from arc.
Well not really a security risk. You will know if something like that has happened, and it's costly "attack" (mining fees...) with no reward, as you'll just deploy another Competition. So worst case it could force you to do some redeployment, but it is very unlikely as an attacker will need to listen to the blockchain and wait for a tx with this specific bytecode, then send immediatly a transaction before you get to send your initialize tx.
from arc.
fixed by #746
from arc.
Related Issues (20)
- Controller's Creator == Rogue Scheme HOT 3
- DAOTracker : add arc version to "track" function.
- arc-experimental - remove daocreator.sol HOT 1
- arc-experimental : daofactory to support dao instance from older version.
- ContributionReward - Multiple External Tokens In One Proposal
- add AuthorizedMintRep scheme
- improve handling of competition reward splits that don't sum to 100 HOT 1
- redeem suggestion for beneficiary argument is not always effective
- Should not attempt to mint if _reputation == 0
- Redeemer would best not check DAO funds when there is a CrExt.rewarder
- cannot create competitions that do not distribute reputation
- arc experimental : schemeRegistrar instance, initiate and register scheme HOT 1
- fix vulnerabilities
- Should ContributionRewardExt.proposeContributionReward Be `onlyRewarder` Restricted? HOT 1
- Using the Diamond Standard HOT 1
- experimental : fix competition
- Documentation of ProposalExecuteInterface
- Competition : no proposals redeem button
- Arc as an Authentication and Upgrade Layer for my Contract
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from arc.