Cointegrity

Governance Attacks

Web3 / social community

Governance attacks occur when malicious actors acquire sufficient voting tokens or influence within a decentralized autonomous organization (DAO) to manipulate voting outcomes and pass proposals that benefit themselves at the expense of other stakeholders. These attacks exploit the democratic principle of token-weighted voting by concentrating token ownership, borrowing tokens temporarily, or leveraging flashloan attacks to gain voting power without long-term commitment. Once control is established, attackers can drain treasury funds, redirect protocol parameters, or sabotage development roadmaps, fundamentally compromising the integrity of supposedly decentralized governance systems. Example: In 2022, the Beanstalk protocol suffered a $182 million governance attack where an attacker used a flashloan to acquire enough BEAN tokens to pass a proposal that transferred protocol funds to their wallet, demonstrating how governance mechanisms can be weaponized despite decentralization. Why it matters for Web3 social and community: Governance attacks undermine the foundational promise of decentralized organizations—that communities collectively control protocol direction. Preventing these attacks builds trust in DAO ecosystems and ensures token holders' voting rights remain meaningful, not merely theatrical displays of decentralization theater.

Category: social community, defi

Explore the full Web3 Glossary — 2,062+ expert-curated definitions. Need guidance? Talk to our consultants.