The leaks · 50 / 86
Governance attacks
If voting power is a token, someone can buy or borrow enough votes to pass a proposal that sends them the treasury. The vote was valid. The outcome was a theft.
How the vote gets bought
They borrow the token, vote, pass a transfer, and return the token. Or they simply buy a tired, low-turnout vote. Quorum was met. Holders who were not looking paid for it.
The check
Who can propose. How long a vote must wait before it executes. Whether borrowed tokens can vote. A treasury with no delay is a wallet with extra steps.
A governance token is not a parliament. It is a key that can be rented.
Check yourself
If a vote passed, was the treasury safe?
Not if the voters could be borrowed for an afternoon and the transfer was immediate.
After this you can look for a delay between a vote and the movement of the treasury.
Previous: Exploit patterns · Next: 51% attacks and chain halts