QA Report

[code423n4]

1) Use modifier for frequently used access restrictions.

if (owner != msg.sender) revert NotOwner(owner, msg.sender); is used multiple times in Vault.sol. Create a modifier for it to avoid redundancy.
Functions where its used are:

1. install
2. setMerkleRoot
3. transferOwnership
4. uninstall

2) When Changing owners the new owner should be zero-checked to avoid accidental loss or ownership.

Instance in Vault.sol:

transferOwnership function

3) Missing emit statement in several functions in Migration.sol.

Functions where an emit statement is missing are:

1. propose
2. join
3. leave
4. commit
5. withdrawContribution
6. migrateFractions