Binance Says It Stopped a $1.2M DAO Attack, but Won’t Name the Target

MakeCryippreferred on

Binance says its security team caught and stopped an attempt to drain $1.2 million from a blockchain project’s treasury through a malicious governance vote. The exchange has not said which project was targeted.

• Binance’s security team flagged a governance proposal aimed at draining $1.2 million from a project’s treasury, with less than 48 hours left before it could take effect.
• The project’s community voted the proposal down after Binance alerted them and coordinated with other exchanges to pause deposits; Binance says no funds were lost.
• Binance has not named the affected project.

What Binance says happened

An attacker exploited a low bar for submitting governance proposals on an unnamed project’s decentralized platform. Binance says that threshold was low enough to let the attacker attempt to bypass the project’s normal requirements for passing a vote.

Binance’s monitoring systems flagged the proposal with less than 48 hours remaining before it could be executed. The exchange says it contacted the project directly and told it to vote the proposal down, and coordinated with other exchanges that list the token to pause deposits temporarily, a step meant to stop any stolen tokens from being sold quickly if the vote had gone the other way.

The project’s community voted against the proposal. Binance says the attack was stopped before execution, with no funds lost.

Jimmy Su, Binance’s chief security officer, said the case shows what “security by design” looks like when it extends beyond the exchange’s own platform.

The gap nobody’s filled

Binance has not named the project, the token, or the wallet address involved. It has not published a proposal ID, a transaction hash, or any vote record that would let an outside party check the $1.2 million figure, the timeline, or the outcome it describes.

The affected project itself has stayed silent. As of August 19, no security research firm or blockchain analytics group had said anything about the incident either.

BonkDAO’s $20M lesson, without the silence

The mechanism Binance describes, acquiring enough governance votes to push through a proposal that drains a treasury, is not new. It is the same pattern that cost BonkDAO $20 million in early July, when an attacker spent $4.4 million to acquire voting power and passed a proposal carrying a hidden instruction to move treasury funds out. A second case hit BarnBridge on July 15, when roughly $777,000 was drained after a small governance position was used to hijack an upgrade path.

Blockaid, a blockchain security firm, estimated that governance attacks drained roughly $22 million across seven protocols over eight weeks this summer.

BonkDAO and BarnBridge were named the moment their treasuries were hit, and the on-chain record of both attacks sat in public view within hours. This incident has offered neither.