Sulkta-OSS/agora
3
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

update changelog

Browse source
This commit is contained in:
Hongrui Fang 2022-11-08 21:53:06 +08:00
parent 9e149c7561
commit 7dfd7373e1
1 changed files with 22 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

20
CHANGELOG.md
View file

@ -6,6 +6,26 @@ This format is based on [Keep A Changelog](https://keepachangelog.com/en/1.0.0).
### Modified ### Modified
- Fix several vulnerabilities and bugs found by auditors.
Including:
- A bug that allows multiple GATs to be minted into a single UTxO and sent
to a malicious script.
- A bug that allows delegates to create or cosign proposals with delegated
stakes.
- Potential DDoS attack: calling `UnlockStake` without any stake.
- Potential DDoS attack: calling `UnlockStake` on a `VotingReady` proposal
without actually changing the votes.
- Ignore staking credential in proposal, stake and governor.
- Improve naming and doc strings to avoid confusion.
Included by [#208](https://github.com/Liqwid-Labs/agora/pull/208)
- Allow delegates to vote and retract vote with their stakes along side with
stakes delegated to them in the same transaction.
Included by [#208](https://github.com/Liqwid-Labs/agora/pull/208)
- Fix several vulnerabilities and bugs found in both proposal and governor scripts. - Fix several vulnerabilities and bugs found in both proposal and governor scripts.
Including: Including: