Governance Attacks & Defenses

When 'Decentralised Governance' Gets Hijacked

Many crypto protocols are governed by token holders: those holding the governance token can propose and vote on changes, including decisions that control large treasuries or critical protocol parameters. This is meant to be decentralised, democratic control. But because voting power is usually tied to token holdings, and tokens can be bought, borrowed, or accumulated, governance becomes an attack surface: if someone can gain enough voting power, they can pass proposals that benefit themselves — potentially draining a treasury, changing rules maliciously, or seizing control. A governance attack is exactly this: manipulating a protocol's voting system to force through a harmful proposal. As DAOs came to control billions in assets, their governance systems became high-value targets, and several have been attacked.

Common Ways Governance Is Attacked

A few recurring attack patterns: Vote buying / borrowing — acquiring temporary voting power (buying tokens, or borrowing them, sometimes via a flash loan) just long enough to swing a vote. Low-turnout capture — if most token holders don't vote (voter apathy is common), a relatively small amount of tokens can be enough to pass a proposal, so an attacker needs far less than a true majority. Proposal trickery — sneaking a malicious action into a proposal that looks benign, hoping voters don't scrutinise it closely. Whale dominance — a single large holder (or a few) having enough tokens to control outcomes outright. The unifying theme is gaining or exploiting concentrated voting power — whether bought, borrowed, or simply under-contested due to apathy — to push through something that benefits the attacker at the protocol's expense.

• Token-holder governance controls treasuries and critical parameters — a high-value target
• Voting power tied to tokens means it can be bought, borrowed, or accumulated
• Attacks: vote buying/borrowing, low-turnout capture, hidden malicious proposals, whale dominance
• A governance attack forces through a harmful proposal by gaining voting control