Attack Simulation Log

This file records reviewer-relevant misuse attempts and the expected safe outcome.

Attempt: Execute Twice

• Expected: Reject
• Result: Rejected
• Evidence: `AlreadyExecuted` path
• Test: `tests/full-flow-test.ts`

Attempt: Reveal Before Commit

• Expected: Reject
• Result: Rejected
• Evidence: `NotCommitted` or phase rejection path
• Test: `tests/full-flow-test.ts`

Attempt: Reveal With Invalid Salt

• Expected: Reject
• Result: Rejected
• Evidence: `CommitmentMismatch`
• Test: `tests/private-dao.ts`

Attempt: Reveal With Mismatched Vote Payload

• Expected: Reject
• Result: Rejected
• Evidence: `CommitmentMismatch`
• Test: `tests/private-dao.ts`

Attempt: Reveal By Wrong Signer

• Expected: Reject
• Result: Rejected
• Evidence: `NotAuthorizedToReveal`
• Test: `tests/private-dao.ts`

Attempt: Commit From Zero-Balance Governance Account

• Expected: Reject
• Result: Rejected
• Evidence: `InsufficientTokens`
• Test: `tests/private-dao.ts`

Attempt: Double Commit

• Expected: Reject
• Result: Rejected
• Evidence: `AlreadyCommitted`
• Test: `tests/private-dao.ts`

Attempt: Finalize Before Reveal End

• Expected: Reject
• Result: Rejected
• Evidence: `RevealStillOpen`
• Test: `tests/full-flow-test.ts`

Attempt: Finalize With Wrong DAO Context

• Expected: Reject
• Result: Rejected
• Evidence: seed / `has_one` constraint failure
• Test: `tests/full-flow-test.ts`

Attempt: Execute Before Finalize

• Expected: Reject
• Result: Rejected
• Evidence: `ProposalNotPassed`
• Test: `tests/full-flow-test.ts`

Attempt: Execute Before Timelock Unlock

• Expected: Reject
• Result: Rejected
• Evidence: `ExecutionTimelockActive`
• Test: `tests/full-flow-test.ts`

Attempt: Execute With Treasury PDA From Another DAO

• Expected: Reject
• Result: Rejected
• Evidence: treasury seed binding failure
• Test: `tests/full-flow-test.ts`

Attempt: Execute With Wrong Recipient Token Owner

• Expected: Reject
• Result: Rejected
• Evidence: `RecipientOwnerMismatch`
• Test: `tests/full-flow-test.ts`

Attempt: Execute With Wrong Token Mint

• Expected: Reject
• Result: Rejected
• Evidence: `InvalidTokenMint`
• Test: `tests/full-flow-test.ts`

Attempt: Execute With Non-Treasury Token Source

• Expected: Reject
• Result: Rejected
• Evidence: `InvalidTreasuryTokenAuthority`
• Test: `tests/full-flow-test.ts`

Attempt: Reuse Voter Record Across Proposals

• Expected: Reject
• Result: Rejected
• Evidence: vote PDA seed mismatch
• Test: `tests/private-dao.ts`

Attempt: Commit Delegated Vote As Non-Delegatee

• Expected: Reject
• Result: Rejected
• Evidence: `NotDelegatee`
• Test: `tests/private-dao.ts`

Attempt: Reuse Delegation From Another Proposal

• Expected: Reject
• Result: Rejected
• Evidence: delegation proposal-binding mismatch
• Test: `tests/private-dao.ts`

Attempt: Force Partial State Mutation Through Failed Execute

• Expected: No mutation
• Result: Preserved
• Evidence: `isExecuted` remains false; balances and status remain stable on failed paths
• Test: `tests/full-flow-test.ts`

Attempt: Force Partial State Mutation Through Failed Finalize

• Expected: No mutation
• Result: Preserved
• Evidence: status, reveal count, commit count, and unlock fields remain unchanged
• Test: `tests/full-flow-test.ts`

Reviewer Note

This log is not a substitute for reading the formal security documents.

It is a compact attack-simulation index that helps an auditor jump quickly from:

• attack idea
• to expected safety property
• to repository evidence