Governance Attack

Overview

A governance attack targets the mechanism used to change protocol rules, contracts, parameters, treasury use, upgrades, or emergency powers. Attackers may acquire voting power, borrow tokens, compromise delegates, exploit quorum rules, or deceive authorized signers.

Weak proposal validation, concentrated ownership, low participation, instantaneous execution, ambiguous permissions, and unprotected upgrade keys increase exposure. A formally valid vote can still be economically manipulated or procedurally illegitimate when the underlying process is captured.

Defenses include quorum and threshold design, time locks, voting-power snapshots, delegation transparency, proposal simulation, role separation, and emergency review. Monitoring should detect sudden concentration, borrowed influence, suspicious delegate changes, and proposals with hidden technical effects.

A governance attack manipulates voting, delegation, proposals, administrators, or decision processes to gain unauthorized or harmful control over a system. Governance rules are a security boundary, so voting power, proposal code, execution delay, delegation, and emergency authority need layered protection.

Assessment of Governance Attack should trace governance attack manipulates voting, delegation, proposals, administrators, or decision processes to gain unauthorized or harmful control over a system from prerequisite and entry point through observable impact on the affected service. A theoretical weakness or scanner result involving governance attack manipulates voting, delegation, and proposals should not be reported as exploitation without corroborating logs, transactions, or configuration evidence. Prevention, detection, containment, and recovery for the Governance attack path should be tested against the architecture associated with governance attack manipulates voting, delegation, and proposals.

Retesting for Governance Attack should reproduce the Governance attack path involving governance attack manipulates voting, delegation, and proposals, examine adjacent paths, and verify the conditions for safely returning the affected service to normal operation.