Yapeswap has reported a significant loss of approximately $21.9K due to a governance exploit. According to a tweet by @SlowMist_Team, the incident stemmed from a proposal backed by an incredibly low percentage of voting power that allowed an attacker to modify critical contract roles. This situation raises crucial questions regarding the robustness of governance mechanisms in decentralized finance protocols and their susceptibility to manipulation. Read more here.
What Went Down
In the latest incident, Yapeswap’s governance structure was fundamentally exploited, leading to a reported loss of approximately $21.9K. The exploit was facilitated by a zero quorum proposal that allowed a small fraction of voting power to transfer the critical `feeToSetter` role to an attacker. This breach enabled the attacker to create a registry that misled users by returning fake vaults while still listing real ones, resulting in diverted deposits being counted as farming assets. Such vulnerabilities underscore the importance of stringent governance protocols in decentralized finance projects.
What We Know
- N/A
coinfomania.com