discuss: contract security

[vacekj]

I think we should separate the threats by time:

• before round
• during active round (voting active)
• after round (withdrawals)

As well as by contract.

For best practices in terms of SCs, this comes to mind:

• The official Solidity docs
• This checklist from Sigma Prime, although quite outdated, is very thorough

I suggest pairing / mobbing on this, in roughly this fashion:

1. Go through the checklists to see which of the vulnerabilites are relevant to us.
2. Investigate each vulnerability in terms of potential damage, taking into account the timeframes referenced above.
3. Design and implement any changes we deem necessary.

I would also like to discuss the possiblity of other SC devs from Gitcoin collaborating on this, to further increase confidence.

[vacekj]

Closing on account of external contract audit achieving the same goals.