Binance said its security team recently helped prevent what could have been a major loss for a decentralized autonomous organization (DAO), stopping a malicious governance proposal that may have put around $1.2 million worth of tokens at risk.
According to Binance, its monitoring systems detected the proposal with less than 48 hours remaining before it could be executed. After spotting the threat, the exchange immediately contacted the affected project and worked with other crypto exchanges to temporarily close deposits for the token involved.
The project’s community later voted against the proposal, preventing it from moving forward. Binance said no funds were lost as a result.
The company explained that the attacker allegedly tried to take advantage of a weakness in the project’s governance system. Reports suggest the requirements for creating proposals were low enough to allow the proposal to reach a vote when it should not have.
Governance systems allow token holders to vote on important decisions such as treasury spending, protocol upgrades, and rule changes. When safeguards are weak, attackers may try to use the voting process to gain access to project funds.
Binance said closing deposits on exchanges was a precautionary measure. While it would not have stopped the proposal itself, it could have made it harder for an attacker to move or sell any stolen tokens if the proposal had succeeded.
Despite the successful intervention, many details remain unknown. Binance has not revealed the name of the project, the token involved, the proposal itself, or any on-chain records related to the incident. Because of this, independent verification of the reported $1.2 million risk is currently not possible.
The incident highlights the growing importance of security in decentralized governance systems. Experts often recommend stronger protections such as higher proposal requirements, longer review periods, and stricter voting thresholds to reduce the risk of malicious proposals reaching execution.
For now, Binance says the threat was stopped before any damage occurred, but the affected project may still need to strengthen its governance system to prevent similar attempts in the future.
