Binance’s security system detected a governance proposal that nearly drained $1.2 million in tokens from the treasury of a Decentralized Autonomous Organization (DAO). Based on an announcement on August 18, this early warning was triggered when there was less than 48 hours remaining before the malicious proposal would be automatically executed by the network. The Binance team immediately contacted the project’s developers and suspended deposit options to the exchange.
Cheap Loophole to the Community Treasury
The attackers attempted to breach the community’s on-chain governance mechanism. The proposal creation threshold in this project was reportedly too low. This vulnerability allowed bad actors to trigger an official vote aimed at moving $1.2 million in tokens from the main vault to their wallets.
This method of robbery through voting channels is becoming increasingly common. Last July, a similar vulnerability affected BonkDAO. In that incident, hackers exploited the system through a malicious governance proposal and inflicted a $20 million loss on the community.
Binance Chief Security Officer Jimmy Su stated that this latest threat was not flagged by any external security providers. Binance’s monitoring system detected it independently without third-party reports. Despite successfully preventing the hack, Binance is still keeping the details of the incident confidential. They did not disclose the name of the DAO project, the token type, the governance platform used, or the centralized exchanges they cooperated with. A public post-mortem report has also not yet been announced.
Preventing Sales on the Open Market
Within the narrow 48-hour window, Binance did not only warn the project team. They also coordinated with several other centralized exchanges to block deposits of the token under attack. Blocking deposit routes on centralized exchanges does not actually have the technical power to cancel proposals within the blockchain network.
The suspension serves purely as a secondary barrier. Blocking deposits aims to limit the paths for token sales post-execution, making it difficult for the hackers to dump the stolen tokens on the open market to exchange them for other assets.
Ultimately, the $1.2 million treasury was saved thanks to voter participation. Before the execution deadline expired, members of the project’s community voted to reject the proposal. The execution was canceled, and no funds were lost. This incident proves that regularly checking and exercising voting rights in the crypto ecosystem is not just a formality, but a final security function when system thresholds are left too loose.
Reported from crypto.news.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
