Marinade Finance DAO Targeted by Malicious Proposal Attack, Vulnerability Fixed Without Losses

On September 25, the DAO of the Solana staking protocol Marinade Finance was attacked, with the attacker attempting to seize governance control through two malicious proposals. Both proposals were rejected by the DAO committee, and no funds were transferred; mSOL, Native Staking, and SAM services were unaffected. The attacker exploited a vulnerability in the DAO voting process, allowing a small amount of MNDE tokens to be counted with voting rights far exceeding the actual number, and submitted a forged "MIP-23" proposal to attempt to replace the voting process, while also submitting another proposal to transfer DAO treasury assets. The actual voting power of MNDE holders exceeded that of the two malicious proposals, and the DAO committee completed the rejection within six hours, approximately four days ahead of the original execution time of the proposals. Marinade stated that the relevant vulnerability was fixed that evening, and the rejected proposals could not be executed again. A permanent code fix will be implemented, security measures will be added for sensitive proposals, and an AI-driven proposal analysis mechanism will be introduced. The team has notified Realms DAO maintainers to help other DAOs guard against similar risks.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.