Questbook DDA Program Report

As we’re nearing DA elections for the next phase of the program, we wanted to bring a double spending issue on one of the proposals in October that was caught by @paulofonseca on 13th of January 2025.

On the October of 30th, there was a bug on the Questbook’s Safe API integration that caused a double funding request initiation for the same milestone, which initiated two seperate txns on the Safe front end.

The txns are 1 and 2 for this proposal.

The fact that it was a request for the same milestone was missed from my end as the Program Manager and had both approved and executed both txns effectively paying the grantee out twice for the same milestone.

Thanks to @paulofonseca spotting this error, we were able to contact the grantee and request for the funds back which was sent back by 14th January, you can view the funds sent back here.

The situation was resolved. For more clarity, this bug was fixed back in November, and there were a few other cases where there were double spending milestone requests sent which were caught. Out of them, including the one above, there was another case where it was missed, but we had spotted it immediately and had received the funds back to the safe, you can view it here.

2 Likes