Blockaid detected an exploit on Onyx on Ethereum where an attacker passed a DAO proposal to transfer 620 million XCN from the Onyx DAO Treasury to their own wallet. Approximately $2.91 million has been drained so far.
An exploit on YamFinance involved a dormant DAO quorum governance takeover, draining legacy UMA farming contracts. The estimated loss is approximately $121K, consisting of WETH and UMA tokens.
Term Labs was targeted in a governance attack, resulting in a loss of approximately $8.5 million. The stolen funds, including 2,843 ETH and $1.6 million DAI, are currently held at a specific address.
Governance takeovers have recently drained $22 million through bought and borrowed votes. Blockaid's Cosigner aims to mitigate this by adding an independent signer to multisig and MPC setups to validate transactions.
Token of Power experienced a governance attack where a malicious proposal led to the draining of $1,580,000 from its Balancer V1 liquidity pool on Ethereum.
DeFi lending protocol Moonwell on Moonriver is reportedly facing a governance attack. An attacker acquired MFAM tokens to propose and pass a vote to transfer administrative control, aiming to extract approximately $1.08 million in user funds. While "No" votes have gained traction, the final outcome is pending.
