★ Flash-loanable voting weight
QuickSwap's assessment for RD-F-036 — scored red on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Snapshot quickvote.eth uses erc20-balance-of strategy on transferable QUICK tokens with quorum=0. No checkpoint, no vote-escrow, no lock mechanism. QUICK is a freely transferable ERC-20 (Polygon bridge child token). Voting power = current balance = flash-loanable by construction. dQUICK (staked QUICK) is NOT used as the voting token per profile. With quorum=0, any vote can pass with a single QUICK token if the attacker acquires sufficient QUICK momentarily.
Sources #
- InternalQuickSwap Profile §6 — Flash-loan voting risk confirmed.research/protocols/quickswap/00-profile.md §6: Voting strategy erc20-balance-of on transferable QUICK, quorum=0, dQUICK NOT usedretrieved 2026-05-16
- QuickSwap Snapshot Space API — Strategy and QuorumSnapshot API quickvote.eth confirms strategy type=erc20-balance-of, quorum=0, no checkpoint mechanismretrieved 2026-05-16
Methodology #
Determine whether governance voting power is a function of current token balance of a transferable token with no lock or checkpoint, making it flash-loan susceptible.
See the full factor methodology and distribution across all protocols →