Marinade Finance DAO Malicious proposals rejected; vulnerability fixed and no funds lost
BIBIBI
AT A GLANCE
Marinade Finance stated that it DAO had been attacked by malicious proposals, but the proposals were rejected and no funds were transferred.
Article
Marinade Finance：DAO Attacked by malicious proposals; the vulnerability has been fixed and no funds were lost
PANews October 1 reported that the Solana staking protocol Marinade Finance stated that September 25 it DAO encountered attackers attempting to seize governance control through two malicious proposals, but both proposals were DAO rejected by the committee, with no funds transferred; mSOL, Native Staking, and SAM services were not affected. The attackers exploited DAO a vulnerability in the voting process, causing a small amount of MNDE tokens to be counted as having voting power far exceeding the actual amount, and submitted a forged “MIP-23” proposal in an attempt to replace the voting process, while also submitting another proposal to transfer DAO treasury assets. It was reported that MNDE holders’ actual voting power exceeded that of the two malicious proposals, and the DAO committee also completed the rejection within 6 hours, approximately 4 days ahead of the proposals’ scheduled execution time. Marinade stated that the relevant vulnerability had been fixed...
Key points
01
Marinade Finance stated that it DAO on September 25 encountered attackers attempting to seize governance control through two malicious proposals.
02
Both proposals were rejected by the DAO committee, with no funds transferred.
03
mSOL, Native Staking, and SAM services were not affected.
04
The attackers exploited DAO a vulnerability in the voting process, causing a small amount of MNDE tokens to be counted as having voting power far exceeding the actual amount.
05
The attackers submitted a forged “MIP-23” proposal and submitted another proposal to transfer DAO treasury assets.
06
MNDE holders’ actual voting power exceeded that of the two malicious proposals, and the DAO committee completed the rejection within 6 hours.
07
Marinade Finance stated that the relevant vulnerability had been fixed.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
The attackers attempted to exploit a voting-power calculation vulnerability to affect DAO governance and advance proposals to replace the voting process and transfer treasury assets.DAO The committee rejected both proposals; the source stated that no funds were transferred and that the relevant services were not affected.
Why it matters to readers
The incident shows that DAO a vulnerability in the voting process could be used to amplify the governance influence of a small amount of tokens and attempt to control the governance process or treasury.
DAO is an organization in which token holders participate in decision-making; in this case, a voting-power calculation vulnerability could allow a small amount of tokens to exert abnormally large influence over decisions.
Risks and unknowns
The original text is truncated with an ellipsis at the explanation of the vulnerability fix and does not provide specific details of the remediation measures.
The evidence does not provide independent audit results or third-party verification of the effectiveness of the fix.
The evidence does not identify the attackers or state whether similar malicious proposals may emerge in the future.
Related Developments
Loading event timeline…
Related concepts
DAO
Abbreviation for decentralized autonomous organization, listed in the text as an application scenario for multisignature wallets.
