Security Lifecyle for DAO Proposals
summary
Describes a four‑stage proposal lifecycle: creation, validation, approval and execution, and shows concrete fixes used on Compound and Arbitrum. CToken price freeze (Aug 30 2022) stems from a UniswapV3 vs ERC20 vs native ETH Oracle misconfiguration that three audits miss, so requirement for mainnet simulation and on‑chain validation is added. July 26–28 2024 governance manipulation (many accounts consolidating COMP votes) prompts a proposal guardian multisig, quorum protection and delegate program. Audits alone are insufficient; monitoring and on‑chain tests catch real risks.
AI-written summary · about
chapters (8)
- 0:00DAO proposal security intro
- 1:04Why security matters now
- 2:07Proposal lifecycle stages
- 3:50Validation and approval best practices
- 5:13Execution monitoring and recovery
- 5:55Compound DAO incident cases
- 8:43Compound governance attack
- 10:08Key takeaways
related talks
22mGrowing & Securing Networks What’s Next for Onchain Governance
23mSecurely Scaling Decentralized Governance
12mSmart Contract Security
41mSecurely Scaling Decentralized Governance
18mDAOnizing Web3 Security
17mMakerDAO Smart Contract Safety - When Billions are at Stake
33mManaging Risk for Compound
14mYour DAO as your custody solution