DeFi & Governance
DAO Governance Security: Common Attack Vectors and Defenses
How governance mechanisms meant to decentralize control end up creating new attack surfaces.
LOZULA Senior Security Research Team
2026-03-31
8 min read
Key Takeaways for Security Teams
- Flash loan governance attacks exploit voting power measured at execution time rather than a fixed snapshot.
- A technically secure contract can still be captured through a poorly designed governance process around it.
- Timelocks are a security control, not just a UX delay, they exist to give the community a chance to react.
DAO governance systems introduce a distinct category of risk: an attacker does not need to break the smart contract logic if they can instead manipulate the voting process that controls it.
Governance-Specific Attack Vectors
These attacks target the voting and proposal mechanism itself rather than any single contract function.
- •Flash loan governance attacks: borrowing enough voting tokens to pass a malicious proposal in a single transaction
- •Proposal front-running, where a malicious proposal is disguised or bundled with legitimate changes
- •Low quorum thresholds allowing a small, coordinated group to pass proposals unopposed
- •Timelock bypasses, or timelocks too short to give the community a real chance to react
Structural Defenses
Most of these risks are mitigated by governance design choices, not smart contract patches alone.
- •Snapshot-based voting power (not live balance) to neutralize flash loan attacks
- •Adequate timelock delays between a proposal passing and execution
- •Minimum quorum requirements calibrated to actual token distribution
- •Multi-sig or guardian veto power for emergency pauses on clearly malicious proposals