Skip to content

Commit

Permalink
Update daoip-8.md
Browse files Browse the repository at this point in the history
  • Loading branch information
amanwithwings authored Dec 24, 2024
1 parent 3204ee6 commit e1636de
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion DAOIPs/daoip-8.md
Original file line number Diff line number Diff line change
Expand Up @@ -67,7 +67,7 @@ The following set of controls are authored for protocol DAOs, i.e DAOs that cont

| Control | Description |
| :--- | :--- |
| Data transparency | 1. `[MANDATORY]` Code that the DAO governs should be available somewhere publicly. <br><br>2. `[RECOMMENDED]` All DAO related smart contracts including protocol, token, governance and treasury related smart contracts, should be documented, as well as verified on block explorers, if the provision exists. For example, there should be publicly accessible documentation on the protocol components, along with flow diagrams, design choices, dependencies and a record of critical privileged roles. |
| Data transparency | 1. `[MANDATORY]` Code that the DAO governs should be available somewhere publicly. <br><br>2. `[RECOMMENDED]` There should be publicly accessible documentation on the protocol components, along with flow diagrams, design choices, dependencies and a record of critical privileged roles. All DAO related smart contracts including protocol, token, governance and treasury related smart contracts, should be documented, as well as verified on block explorers (if the provision exists).|
| Code security | 1. `[MANDATORY]` Protocol code __MUST__ be audited, and a comprehensive report detailing vulnerabilities and suggested improvements should be publicly available for the latest protocol version.|
| Bug bounty program | 1. `[RECOMMENDED]` The DAO is recommended to operate a bug bounty program.<br><br>2. `[RECOMMENDED]` The DAO is recommended to execute a white hat [Safe Harbor agreement](https://github.com/security-alliance/safe-harbor) if the provision exists.|
| Key management | `[MANDATORY]` Use isolated and purpose specific hardware wallets for multisig key holders and delegates. SAFEs or other account abstraction implementations should also be deployed in all operational areas. |
Expand Down

0 comments on commit e1636de

Please sign in to comment.