Yam Finance thwarts governance attack aimed at hijacking its treasury
![](data:image/svg+xml;utf-8,<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" />)
Yam Finance, a decentralized finance (DeFi) protocol, prevented a malicious governance attack designed to cede control of its reserves to an unknown third party, the project said on Saturday.
According to a preliminary report issued by Yam DAO, the attack was launched on July 7, but detected two days later. The attacker submitted a governance proposal via internal transactions, making it difficult for community members to notice.
This malicious governance proposal included an unverified contract designed to transfer control of Yam’s reserves to a wallet address controlled by the attacker. The rogue actor was initially able to achieve a quorum for the proposal that was in danger of being passed before it was stopped by the Yam Finance team.
If the attack had succeeded, it would have been able to drain the Yam Finance treasury, which currently holds $3.1 million worth of crypto assets, according to data from DeepDAO.
Source:
5 comments