Submitted by Soosh, also found by Ch_301, davidbrai, and PwnPatrol
It is possible to indefinitely increase voting power by creating new accounts (addresses) and delegating. This will lead to unfair governance as a user can vote with more votes than actual.
The _transferFrom()  does not move delegates from the srcs delegates to the destinations delegates, instead, it moves directly from src to dest. (see recommendations and Code POC for better understanding)
Expected Output:
Looking at OpenZeppelins ERC721Votes which I believe the team took reference from, it states:
The current implementation does not follow this, and tokens count as votes without being delegated. To fix this issue, votes should only be counted when delegated.
Where it should move from the delegate of _from to the delegate of _to. Suggested FIx:
iainnash (Nouns Builder) confirmed and commented:
Alex the Entreprenerd (judge) commented:
Alex the Entreprenerd (judge) commented:
