Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
FollowingYam Finance governance attack: Attackers try to seize control through Proposition 45, putting $33,700 at risk
According to Defimon Alerts security alert, an attacker is trying to seize control of Yam Finance through a malicious governance proposal that could endanger approximately $337,000 in the agreement. This incident highlights the persistent loopholes in the decentralized governance system and the importance of active participation by token holders.
Attack Details: Commissions and Proposal Submission
Defimon Alerts reported that the attacker entrusted 504,000 YAM tokens to addresses it controlled, slightly above the quorum threshold required for a valid vote. This consignment accounted for approximately 3.3% of YAM's total supply. Subsequently, the attacker submitted Governance Proposal No. 45, which, if passed and implemented, would give the attacker management rights over the YAM time-lock contract. Such permissions would allow attackers to manipulate the agreement's contracts and DAO treasury, potentially stealing approximately $337,000.
The Yam Finance agreement is currently basically inactive, which may be the reason why the quorum threshold is low and easy to reach. The vote is expected to end in about 34 hours, and Defimon Alerts called on YAM holders to vote against the proposal to stop the attack.
Impact on DeFi governance
The incident exposed many key flaws in the DeFi governance system: Low participation rates make quorum thresholds relatively easy to meet, especially for determined attackers. Even agreements that are no longer actively developed will remain targets as long as there is still money in their treasury or contract. This incident reminds us that governing security requires not only robust technical design, but also continued vigilance from the community.
How YAM holders should respond
Holders who still hold YAM tokens are urged to participate in the ongoing vote and reject Proposition 45. By voting against the proposal, the community can prevent attackers from gaining control. If the proposal fails to reach a quorum or is rejected, the funds will remain safe. This situation emphasizes the importance of token holders remaining involved, even for projects that appear to be dormant.
Conclusion
The governance takeover attempt encountered by Yam Finance vividly illustrates the risks inherent in decentralized systems. About $337,000 in funding is at stake, and the results of Proposition 45 will be a test of the community's ability to defend the agreement. The incident also demonstrated once again that the DeFi project needs to implement stronger security measures, such as a time-lock for multi-stage approval or a higher quorum threshold, to mitigate such attacks in the future.
FAQs
Q1: What are governance attacks in DeFi?
Governance attacks refer to the behavior of actors by borrowing or entrusting tokens to gain sufficient voting rights, thereby using malicious proposals to steal funds or change protocol parameters for personal gain.
Q2: How do token holders protect agreements?
Token holders should actively participate in governance voting, delegate to trusted representatives, and support proposals to enhance security, such as raising the quorum threshold or implementing a multi-approving time lock.
Q3: Is Yam Finance still in operation?
Yam Finance is currently largely inactive, but it still holds funds in its smart contracts and treasury. Due to the value locked in the contract, the protocol remains a potential target even if development has stopped.
