This website uses cookies

Read our Privacy policy and Terms of use for more information.

When governance goes wrong

Lesson 4 of 5
By the end of this lesson you’ll know how DAO governance has failed, with a dated case for each kind, and be able to tell which of them a DAO you’re looking at has guarded against.
A collage of an empty debating chamber with rows of bare benches. One small man in an overcoat leans on a rope, dragging a deep blue trolley that carries a huge flat board printed with a photograph of a dense crowd, propped from behind by struts.

Beanstalk: a vote bought for one transaction

17 April 2022 · Beanstalk
About $77 million
On 17 April 2022 an attacker borrowed a very large sum through a flash loan, used it to take a majority of Beanstalk’s voting power, passed a proposal filed the day before that sent the protocol’s funds to the attacker’s own address, and repaid the loan, all inside one transaction.
Four boxes in a loop around the words One transaction. Borrow: a flash loan. Vote: borrowed tokens carry the proposal. Execute, in rust: funds go to the attacker's address. Repay: the loan goes back.
One transaction, start to finish.

Continue with The Crossover Pro

The rest of this story, plus two paid editions a week. $24.99 a month, or $249 a year. Already a member? Sign in above.

Subscribe to Pro