security_review("reserve_governor")

Reserve Governor

Cantina public competition · May 2026
Hybrid optimistic/pessimistic governance system built on OpenZeppelin Governor. 2,742 lines of Solidity reviewed across 9 core contracts.

HIGH 1

MEDIUM 1

LOW 7

INFO 3

TOTAL FINDINGS 12

LINES REVIEWED 2,742

H-01 · Optimistic Proposer Aborts Confirmation Vote — Persistent Governance DoS M-01 · additionalGuardians Bypass Guardian Restrictions — Unrestricted Proposal Cancellation L-01 · Proposer Cancels Succeeded Optimistic Proposal — proposalId Permanently Locked L-02 · Veto Threshold Uses Floor Instead of Ceil — 1 Token Easier Than Documented L-03 · Fee-on-Transfer Underlying Bricks Native Reward Accounting via Underflow L-04 · Missing _decimalsOffset() Override — ERC4626 First-Depositor Inflation Attack L-05 · No Upper Bound on vetoPeriod — Misconfiguration Freezes Governance for 136 Years L-06 · Deflationary Reward Token Causes Permanent Vault DoS via _accrueRewards Underflow L-07 · Registry Deregistration Silently Discards Pending User Rewards I-01 · Governance Cannot Cancel Proposals via governor.cancel() from Within a Proposal I-02 · Zero-Supply Path Returns Canceled Without Setting proposalCore.canceled Flag I-03 · unregisterSelectors Race Window — In-Flight Optimistic Proposals Survive Selector Removal

[ DOWNLOAD REPORT PDF ]

[ TAP TO VIEW FULL REPORT ]