Governance Attack
Acquiring enough voting power in a protocol to pass a proposal that hands its assets or its controls to the attacker.
Where a protocol's treasury and parameters are controlled by token-weighted voting, the cost of control is the cost of acquiring votes. An attacker can buy tokens, borrow them, or in the worst designs obtain them for the length of a single transaction through a flash loan, then propose and execute a change that transfers funds. Defenses focus on time and on snapshotting: taking voting balances from a block before the proposal existed, imposing a delay between passage and execution so the community can react, requiring a minimum quorum and proposal threshold, and giving a guardian the ability to veto or pause. The 2022 attack on Beanstalk is the standard example of a proposal passed and executed using voting power obtained within one transaction.
На практике
A timelock between a vote passing and the change taking effect gives users a window to withdraw funds before a malicious proposal executes.
Распространённое заблуждение
That an attacker must hold tokens for a long period to exert control, when snapshot and quorum rules can permit voting power that exists for only a few seconds.