Skip to content
high Governance No SWC entry CWE-284

Missing Timelock on Governance Execution

SAFE-0061 Governance Checked automatically by the scanner
1

What goes wrong

Approved governance/admin actions execute immediately with no delay, removing any window for users to exit or for the community to detect and respond to a malicious or mistaken proposal.

2

How to fix it

the pattern that is safe
// Queue in TimelockController; execute only after minDelay elapses
timelock.schedule(target, 0, data, 0, salt, minDelay);
Route governance through OZ TimelockController.
3

Where this has happened

Largest recorded losses in the same failure class — related, not the same bug:

Check your own contract for this

The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0061 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.

Run the scanner See how it is attacked Read the docs