waveygist
created:
by spalen0

Safe MultiSendCallOnly - 23/10/2026 12:02 - MEDIUM

Summary

Casts votes in favor of proposals 2–5 in Voting through Voter. All four calls succeeded in simulation. Proposal contents and effective voting weight are unverified, leaving the impact of supporting them unclear.

Execution Context

Outer call is DELEGATECALL from the Safe (0x16388463d60FFE0661Cf7F1f31a7D658aC790ff7) into 0x40A2aCCbd92BCA938b02010E17A5b8929b49130D (Safe MultiSendCallOnly). Inner calls execute in the Safe's own storage context: msg.sender = 0x16388463d60FFE0661Cf7F1f31a7D658aC790ff7. Every inner transaction is a plain CALL from the Safe, so the batch was simulated as one ordered bundle of those calls from the Safe — the same execution the multisend performs.

Analysis

Calls and effects

The Safe calls Voter’s vote_yea four times, supporting proposals 2, 3, 4, and 5, respectively, in the same Voting contract. Each proposal index identifies a separate ballot; these integers are not token amounts.

The verified function body forwards each Voting address and proposal index to _vote, with PRECISION as the third argument. This is the implementation’s affirmative-vote path. The batch expresses support for all four proposals; it contains no separately decoded proposal-execution call.

All four calls succeeded in the ordered bundle simulation, each using 240,043 gas and emitting one event from Voting. This supports successful execution of the voting calls, but the displayed events contain no decoded fields establishing vote weight or resulting tallies.

State and asset effects

The intended state change is affirmative voting participation on four distinct proposals. The supplied calls contain no explicit token transfer, approval, withdrawal, or allocation instruction, and the simulation lists no token-transfer events.

Voter’s delegated_staking() getter resolves to stYFIx with 18 decimals. That identifies the associated staking token; it does not establish a token movement or quantify voting power here. The function documentation also describes delegated-staking and YBC vote updates where applicable.

Risk assessment

MEDIUM reflects the governance consequence of supporting four proposals whose substance and effective voting weight are not established. Successful simulation demonstrates that the calls execute in sequence, but does not establish whether the supported proposals are benign or whether these votes materially affect their outcomes.

There is no demonstrated direct asset movement in the supplied results. The material exposure is the influence these affirmative votes may exert over downstream governance decisions.

Not verified

  • Proposal contents, executable actions, and resulting governance outcomes.
  • Effective voting weight, tally changes, and whether any proposal reaches its approval threshold.
  • _vote internals, including applicable delegated-staking or YBC updates and any additional side effects.

Call Flow

From: 0x16388463d60FFE0661Cf7F1f31a7D658aC790ff7 (Strategist Multisig (brain.ychad.eth))

  1. vote_yea(address,uint256) on 0x5069BcE8C8e371A45aB113604b128BBdF5Ee5c11 (Voter)

  2. vote_yea(address,uint256) on 0x5069BcE8C8e371A45aB113604b128BBdF5Ee5c11 (Voter)

  3. vote_yea(address,uint256) on 0x5069BcE8C8e371A45aB113604b128BBdF5Ee5c11 (Voter)

  4. vote_yea(address,uint256) on 0x5069BcE8C8e371A45aB113604b128BBdF5Ee5c11 (Voter)