Binance announced on August 18 that its security team successfully identified and stopped a malicious governance proposal targeting an unnamed decentralized autonomous organization (DAO). The threat, which was detected internally before any external security firm flagged it, put approximately $1.2 million in treasury tokens at risk with less than 48 hours remaining before it could take effect.
Upon discovering the issue, Binance contacted the project team directly and coordinated with other cryptocurrency exchanges listing the token to pause deposits. The project's community subsequently voted down the proposal, halting the attack before any funds could be moved. Binance has not publicly disclosed the name of the project or the specific token involved.
Mechanics of the Vulnerability
The attacker attempted to exploit weaknesses in the DAO's voting rules. DAOs typically allow token holders to vote on decisions such as treasury spending and upgrades. When governance rules permit proposals with minimal review time, bad actors can attempt to push harmful initiatives through quickly.
Binance security chief Jimmy Su noted that the incident demonstrates how modern security efforts must extend beyond an exchange's own internal platforms, emphasizing that many recent attacks target access and administrative processes rather than fundamental code flaws.
Broader Industry Context
Governance and protocol exploits remain a significant risk within the decentralized finance sector. In July, BonkDAO reported a loss of approximately $20 million in BONK tokens after an attacker accumulated sufficient voting power to pass a malicious proposal independently. In a separate incident involving KelpDAO, hackers targeted a bridge before quick remedial action blocked an additional $95 million and froze thousands of ETH tied to the attacker.
Binance reports that it allocates approximately $300 million annually to compliance and fraud prevention, employing nearly 1,500 staff members in related roles. The exchange stated that its monitoring systems caught $10.53 billion in fraud or unusual activity between 2025 and early 2026.
