Great analysis, thanks for taking the time to put together such a thorough report, Wenzel.
It seems both entities tried to exploit the min/max dissolve delay and age bonus mechanisms, disregarding the will of individual token holders. Max and Tommy notably reduced the dissolve delays to also gain VP advantages.
There were a few motion proposals to decide the direction, but neither party abstained.
I agree with changing Params proposal to critical, and have two more suggestions:
- On the NNS dApp, it should be more clearly indicated which topics are considered critical when setting follows.
- SNS Projects should be able to configure other types as Critical (especially the setting and running of custom functions). For example Water Neuron has nICP ledger as SNS canister dApp. So there could be an attack vector on minting / inflation, etc.
Thanks again for shedding light on this, @wpb.