Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

frankxeth/voting-fix

Folders and files

NameName
Last commit message
Last commit date

Latest commit

History

3 Commits

Repository files navigation

voting-fix

DAML smart contract for decentralized voting on the Canton Network.
Generated by Canton.Ginie and patched to fix 3 security audit findings.


Security Fixes

Severity Issue Fix
🔴 HIGH Privacy Leak through Observer List Observer list minimized to proposal_owner only
🟡 MED Missing Explicit Signatory for Voters voters added as signatories in all templates
🟡 MED Unbounded votedYes / votedNo lists Hard cap of 1000 entries enforced

Original security score: 53/100 → Fixed version addresses all flagged issues.


Contract Overview

Template: VotingProposal
Domain: Governance
Network: Canton Sandbox / Canton Network

Choices

Choice Controller Description
AddVoter proposal_owner Add a new eligible voter (max 1000)
CastVote voter Cast a yes/no vote before deadline
Finalize proposal_owner Tally votes after deadline

Getting Started

Build

```bash daml build ```

Run Sandbox

```bash daml sandbox ```

Deploy

```bash daml ledger upload-dar .daml/dist/voting-fix-0.0.1.dar --host localhost --port 6865 ```


License

MIT

About

DAML voting contract for Canton Network – security-patched via Canton.Ginie audit

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

Contributors

AltStyle によって変換されたページ (->オリジナル) /