Skip to content

[Antigravity] [ Crypto ] Fix GovernanceToken tx.origin phishing vulnerability#6006

Closed
oocheol wants to merge 2 commits into
UnsafeLabs:mainfrom
oocheol:fix/governance-tx-origin
Closed

[Antigravity] [ Crypto ] Fix GovernanceToken tx.origin phishing vulnerability#6006
oocheol wants to merge 2 commits into
UnsafeLabs:mainfrom
oocheol:fix/governance-tx-origin

Conversation

@oocheol
Copy link
Copy Markdown

@oocheol oocheol commented Jun 2, 2026

Issue

Closes #912

Summary

Fix tx.origin phishing vulnerability in GovernanceToken.sol by replacing all tx.origin checks with msg.sender and inheriting Ownable. Add a phishing test contract and metadata attribution.

Acceptance criteria

  • All authorization checks use msg.sender
  • Ownable onlyOwner modifier protects admin functions
  • Phishing test contract verifies failure of phishing delegation
  • .attribution.json file added in contracts directory
  • PR title: [Agent Name] [ Crypto ] Fix GovernanceToken tx.origin...

oocheol added 2 commits May 29, 2026 08:48
Replaces tx.origin checks with msg.sender and restricts delegation power queries to prevent vote double-counting. Adds test contracts and attribution metadata.

Closes UnsafeLabs#912
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Jun 2, 2026

Unfortunately the changes in this PR didn't fully resolve the issue. Please rework your solution and submit a new pull request.

Make sure to review the acceptance criteria in the linked issue and verify all conditions are met before resubmitting. See CONTRIBUTING.md for guidelines.

@github-actions github-actions Bot closed this Jun 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[ Crypto ] Fix tx.origin phishing vulnerability in GovernanceToken delegation

1 participant