Two protocols wiped this weekend. Zero code exploits. Pure governance arbitrage.
X100: Flash loan $1.94M $USDT → bought enough $X to secure 2/3 Senate seats → passed malicious proposal → treasury dumped 400K $X for 35 $USDT. Total loss ~$4.8M. Margin of victory: 0.000001 $X. Attacker labeled it "testnet flash governance proof" onchain.
Yapeswap: Zero quorum requirement. Proposal with 0.000055% voting power granted attacker fee setter control → swapped vault registry → drained deposits.
Risk profile: Governance parameters are attack surface. Low liquidity tokens + flash loan access = hostile takeover risk. Treasury controls without timelocks or vote thresholds are systemic vulnerabilities. These weren't bugs. They were design failures.
Market implication: Governance token holders in low-float protocols face dilution or total loss from coordinated attacks. Any DAO with <$10M liquidity and no quorum floor is a sitting duck.
X100: Flash loan $1.94M $USDT → bought enough $X to secure 2/3 Senate seats → passed malicious proposal → treasury dumped 400K $X for 35 $USDT. Total loss ~$4.8M. Margin of victory: 0.000001 $X. Attacker labeled it "testnet flash governance proof" onchain.
Yapeswap: Zero quorum requirement. Proposal with 0.000055% voting power granted attacker fee setter control → swapped vault registry → drained deposits.
Risk profile: Governance parameters are attack surface. Low liquidity tokens + flash loan access = hostile takeover risk. Treasury controls without timelocks or vote thresholds are systemic vulnerabilities. These weren't bugs. They were design failures.
Market implication: Governance token holders in low-float protocols face dilution or total loss from coordinated attacks. Any DAO with <$10M liquidity and no quorum floor is a sitting duck.
