ContinuumDAO Forum

Abstract

This proposal rewards a whitehat researcher, 1nc0gn170 (0xCccbB73ea22c9749D22089Ee617bd715b143b63D), who identified several bugs — including critical ones — in DAO protocol contracts and disclosed them unconditionally, without demands. Findings: (1) 1/4 Power Attack — a multi-option Delta proposal could be constructed so a malicious option executed regardless of the vote outcome, because no "none of the above" (NOTA) option was required; fixed by always including NOTA in Delta proposals. (2) Double Fee Collection — the CTM token, built on CTMERC20 with its cross-chain transfer mechanism, burned the amount and then took a fee, so a portion of CTM vanished between transfers; fixed. (3) No Vote Win — a Delta proposal declaring more winning options than were voted on still executed an unvoted-for option as a winner; fixed. The disclosure prompted DAO maintainers to run further internal audits, and correspondence with QuillAudit revealed further bugs via their QuillShield tool. The reward is 25,000 CTM locked 4 years as veCTM.

Motivation

Timely, no-strings disclosure protected the DAO from flaws in both its governance machinery and its token. Bug 1 was a voting-manipulation vector in the DAO's own proposal system; bug 2 silently destroyed CTM in transit. Rewarding this work states plainly that security research is valued as the DAO's public good, and that the DAO intends to keep a proven, good-faith contributor — the kind of person we wish to keep as a contributor. Paying in 4-year veCTM rather than liquid CTM gives him an aligned long-term stake in the DAO instead of a one-off payout.

Overview

This proposal originates from the committee (core contributors).

Type

Treasury. The action transfers 25,000 CTM of value to the whitehat's wallet on Linea.

Scope

1. The governor approves veCTM (0x221EC90B3B083A8501A37bdeb7035CeaedF3C31f) to spend 25,000 CTM.
2. The governor calls create_lock_for(25000e18, 125798400, 0xCccbB73ea22c9749D22089Ee617bd715b143b63D) on veCTM, creating a 4-year veCTM NFT owned by 1nc0gn170.
3. Public record linking the reward to github.com/ContinuumDAO/vectm/issues/5.

Success Criteria

N/A: the disclosure of the bugs has already been done. The observable completion signal for this proposal is a veCTM NFT for 25,000 CTM / 208 weeks owned by 0xCccb…b63D.

Timeline

Immediate upon execution.

Budget

25,000 CTM (25000e18), from existing DAO holdings at the governor; no new issuance.

Community discussion

The Ideas & Suggestions stage is intentionally omitted; this is a proposal from a committee KeyGen, the preferred KeyGen on this node.

Reference

The fixes are public and accessible on our GitHub at https://github.com/ContinuumDAO/vectm/issues/5

Abstract

This proposal asks the DAO to recognise the veCTM Marketplace smart contract, deployed on Linea at 0x92557d38beAe4658d3c03A02F349FFB60c3bfFA5, as the official marketplace of ContinuumDAO, to include it in the Continuum frontend UI, and to include it in DAO communications as the official marketplace.

It is a signalling Decision. No on-chain actions are included and no DAO funds are moved.

Motivation

The marketplace benefits the DAO in three concrete ways.

1. Fee revenue. Fees are paid on every successful NFT transaction. The fee is taken from the gross payment made from the buyer to the seller. The fee rate depends on the tier of token sold, with higher tiers inducing higher fee rates, to a maximum of 1%. Fees flow to the DAO treasury.
2. An on-ramp for new MPA wallet operators. A marketplace allows new users of the MPA wallet to buy a veCTM and, provided it has the threshold locked amount, attach it to their node and avail of the free subscription model.
3. Two-way liquidity. Current holders who do not wish to retain membership of the DAO have an off-ramp; prospective DAO members who wish to join have an on-ramp. Exit and entry no longer depend on bilateral deals.

Overview

The marketplace is deployed and live on Linea at 0x92557d38beAe4658d3c03A02F349FFB60c3bfFA5. It supports buying, selling and auctioning of veCTM tokens.

The fee policy is a percentage fee on each completed sale, capped at 1%, subject to DAO change. The 1% figure is a DAO-set ceiling: the fee applies per completed sale, taken from the gross buyer-to-seller payment, and the DAO may adjust the rate within that cap by a later Decision.

Type of proposal

Decision — a DAO yes/no decision which does not necessarily have an on-chain action. It is explicitly not Admin (no contract modification, re-deployment or proxy upgrade), not Treasury (no DAO funds are transferred by any action), and not Constitution (no amendment to the Constitution).

Scope

1. Formally recognise 0x92557d38beAe4658d3c03A02F349FFB60c3bfFA5 (Linea) as the official ContinuumDAO veCTM marketplace.
2. Include the marketplace in the Continuum frontend UI, so members can discover listings and complete a purchase or sale from the DAO interface.
3. Include the marketplace in DAO communications as the official marketplace, publishing the deployment address and network.
4. Adopt the fee policy stated above: a percentage fee on each completed sale, capped at 1%, subject to DAO change.

Proposer / team background

Proposers are Hal, marketplace and DAO lead developer, and Selqui, MPA wallet lead developer.

Alignment with Vision & Mission

Recognising and integrating the marketplace keeps DAO activity on a single member-facing surface, makes the venue's economics legible, and supports DAO-managed infrastructure by routing marketplace fees to the treasury. It also lowers the barrier to acquiring the veCTM position that node operation depends on.

Risks

• Frontend integration adds maintenance surface; mitigated by scoping the integration to the official venue rather than building a parallel marketplace.
• "Capped at 1%" may be misread as a fixed rate; the cap is a DAO-set ceiling, changeable by a later Decision.
• A signalling proposal does not bind execution; adoption relies on the teams acting on the mandate.

Budget and timeline

Budget: none — no DAO funds are moved and the proposal carries no on-chain actions. Timeline: frontend integration and communications are scheduled by the contributors, subject to this Decision passing. No on-chain execution step is required.

Success criteria

The marketplace is recognised as the official venue, surfaced in the frontend UI, reflected in DAO communications, and the fee line is recorded as a percentage capped at 1%, subject to DAO change.

---

Vote: For / Against / Abstain.