v2.3.5

Changelog

Info ⚠️

• The v2.3.5 release is integrated with tribute-ui.

Important Changes 🗒️

• Every write operation in any DAO Extension must verify if the dao contract in the call arguments matches the dao tied to the extension, otherwise it might be exploited by a malicious dao contract.
• Members that delegate the voting power to a new address are allowed to revoke the delegate address by calling the updateDelegateKey from their original member account or from the delegate account.
• Distribute.sol: take into account the lock/unlocked UNITS and LOOTs of the member.
• KickBadReporter.sol: if the proposal didn't pass it now returns all the funds to the member.
• InternalTokenVestingExtension.sol: take into account the number of tokens blocked for the proposal. The idea is to reset the vesting mechanism to "now" with a new token amount to be vested, and that is based on the blocked amount minus amount to release.

Fixes 🐞

• fix: kyc onboard with delegate key + erc1155 token transfers by @adridadou in #481
• fix: impersonation issue by @adridadou in #484
• fix: failed bad reporter proposal should return all funds by @fforbeck in #489
• fix: LendNFT and InternalTokenVestingExtension by @adridadou in #487
• fix: token distribution by @fforbeck in #490
• fix: make it possible for the initial member addr to change the delegate key by @adridadou in #492

Maintenance 🛠️

• chore: update git+npm ignore 2255b50

Packages 📦

• NPM: https://www.npmjs.com/package/tribute-contracts

---

Full Changelog: v2.3.4...v2.3.5

Launch your DAO: https://tributedao.com/docs/tutorial/dao/installation