Menu
MCAP $2.87T ▼-5.88%
BTC $83,861 ▼-3.76%
ETH $2,675 ▼-3.84%
BNB $768.50 ▼-3.50%
XRP $1.490 ▼-9.46%
SOL $114.89 ▼-3.87%
DOGE $0.0935 ▼-9.79%
ADA $0.240 ▼-7.94%
TRX $0.3437 ▼-0.16%
LINK $12.33 ▼-6.20%
AVAX $10.31 ▼-7.76%
HYPE $91.91 ▼-5.79%
DOT $1.130 ▼-5.97%

DAO Governance

Balancer’s 296 ETH recovery lacks vote and payout details for affected LPs

Balancer’s 296 ETH recovery lacks vote and payout details for affected LPs

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

Balancer’s DAO published a Sept. 18 proposal to distribute 296.401711 ETH recovered after an Aug. 31 exploit of its V1 pools, but the document does not yet tell any liquidity provider what they would actually be paid. That gap between “recovery” and “reimbursement” matters to institutional LPs weighing how DeFi protocols handle post-hack governance, legal exposure and payout timelines.

  • Balancer recorded 296.401711 ETH returned to its DAO multisig against $1.39 million in tokens drained at attack-time prices.
  • Five separate ETH transfers arrived between Sept. 8 and Sept. 16 from the main grey hat, three anonymous white hats and block builder Ultrasound.money.
  • As of Sept. 20 the proposal remained labeled BIP-XXX with no Snapshot vote link, and no per-address claim amounts have been published.
  • 296 ETH total recovered and returned to the Balancer DAO multisig
  • $1.39M value of tokens drained at attack-time prices on Aug. 31
  • 120 legacy V1 pools eligible to share the recovered ETH

Balancer’s DAO wants to split the recovered 296.401711 ETH among liquidity providers across 120 legacy V1 pools hit in the Aug. 31 exploit, according to the proposal posted to the Balancer forum. The plan sets out a formula for dividing the ETH but stops short of showing what any specific address would receive.

Five Transfers From Grey Hat and Ultrasound.money Built the 296 ETH Pool

The proposal traces the 296.401711 ETH to five separate returns made to the Balancer DAO multisig between Sept. 8 and Sept. 16. The main grey hat behind the recovery, three anonymous white hats and block builder Ultrasound.money each contributed a portion of the total.

That figure represents what came back, not what was taken. The proposal values the original drain at roughly $1.39 million in tokens priced at the time of the attack, while the recovery pool is denominated entirely in ETH.

Because the loss is expressed in historical dollars and the recovery is expressed in current ETH, the document does not state a recovery percentage. An LP cannot tell from the proposal alone what share of their original loss the 296.4 ETH is meant to cover.

Allocation Formula Locks In a Pre-Attack Block, Not Live Balances

Under the plan, Balancer would first split the recovered ETH across the 120 pools based on each pool’s share of the total dollar loss at attack time. It would then divide each pool’s allocation among liquidity providers according to their pool-token holdings at Ethereum block 25,872,248, the block immediately preceding the first exploit transaction at block 25,872,249.

Using a single pre-attack snapshot lets Balancer cover all 120 pools with one formula, including pools later hit by copycat exploit attempts. The approach standardizes eligibility but adds a step LPs must still wait on.

The Sept. 18 forum post does not include the per-pool allocation table, holder lists or per-address amounts that the formula requires to produce a real number. Until Balancer publishes those files, no liquidity provider can calculate an exact ETH payout, even after doing the math on the formula itself. The mechanics of tracing DeFi risk after an exploit echo the broader trust gap explored in CryptoCoinShow’s look at why smart contracts still struggle to verify real-world conditions.

Legal Release and Unscheduled Snapshot Vote Stand Between LPs and Cash

Accepting any eventual payment carries a condition beyond the math. Claimants would have to provide digital consent releasing Balancer Labs, Balancer DAO, Balancer Foundation, affiliated parties and service providers from liabilities tied to the incident.

Payments would be made in ETH, while claims tied to smart contracts or multisig wallets would be handled case by case rather than through the standard formula.

As of Sept. 20, the proposal still carried its placeholder BIP-XXX label and included no Snapshot vote link, leaving the governance step that would trigger a payout unscheduled. The post states that claim data and a claim mechanism would only be published and deployed if the proposal passes, with no announced start or end date for the V1 claim window. That timeline sits apart from Balancer’s separate wind-down proposal, which specifies that funds recovered from protocol attacks belong to affected LPs and sit outside the treasury distribution earmarked for BAL holders.

The CCS read. For institutional LPs, the real signal here is process risk, not amount. A recovery that requires a legal release, an unpublished holder list and an unscheduled Snapshot vote before a single ETH moves sets a template other DeFi protocols will likely copy after their own exploits, for better or worse. Capital allocators comparing DeFi exposure to structures like the underwriter-capital growth tracked at Cap should weight this governance lag into their risk models.

The next concrete step is procedural: Balancer’s DAO must attach a Snapshot vote link to the still-placeholder BIP-XXX proposal before per-pool allocation tables, holder lists or a claim mechanism can be published, and no date for that vote has been set as of Sept. 20.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

DAOs are forcing crypto protocols to choose between code and emergency brakes

DAOs are forcing crypto protocols to choose between code and emergency brakes

, , , , , ,

Web3September 5, 2026·6 min read

Compound’s near-passage of a $24 million treasury transfer in July 2024 exposed a structural vulnerability in decentralized autonomous organizations: the same governance rules designed to empower token holders can be weaponized by coordinated voters to extract value before safeguards activate. Institutional investors now face a critical choice between protocol security and decentralization, and most DAOs lack adequate defenses.

  • Compound Proposal 289 nearly transferred 499,000 COMP ($24 million) in final 34 minutes via 563,591 votes cast as 82% of total support.
  • Max Planck and Vrije Universiteit research tracked voting-power concentration and governance-rule attacks across 48 large Ethereum DAOs.
  • Emergency pause mechanisms and veto powers, the primary defense, shift control away from pure token-holder democracy toward centralized gatekeepers.
  • $24M Amount of COMP tokens proposed for transfer in controversial Compound governance vote
  • 82% Proportion of final proposal support concentrated in last 34 minutes before voting deadline
  • 48 Large Ethereum DAOs analyzed for voting-power concentration and attack vectors

On July 29, 2024, Compound’s token holders came within eight minutes of approving a governance proposal that would have transferred 499,000 COMP, then valued at approximately $24 million, into a yield-bearing vehicle controlled by a small group of voters.

Proposal 289 had failed twice before, but on its third iteration, a coordinated bloc of addresses delegated their voting power and cast 563,591 votes in the final 34-minute window, accounting for 82 percent of all votes supporting the measure.

The proposal passed 682,191 to 633,636, a narrow margin that exposed a critical gap in Compound’s governance architecture: the protocol possessed no emergency authority to pause execution, even as community members flagged the concentration of voting power and questioned the transaction’s legitimacy.

Compound’s leadership later negotiated a settlement that canceled the allocation entirely and added a veto mechanism to future governance cycles.

The incident became emblematic of a tension now forcing decentralized protocols to confront a uncomfortable trade-off: the code worked flawlessly, executing exactly as programmed, yet the system failed to prevent what many participants viewed as a raid on the treasury.

That failure has prompted researchers and institutional stakeholders to examine whether DAOs have built sufficient safeguards into their governance layers, or whether the rush to eliminate human gatekeepers has simply created new vulnerabilities.

Max Planck Research Maps Voting-Power Concentration Across 48 Ethereum DAOs

Two separate 2026 studies from the Max Planck Institute for Software Systems and Vrije Universiteit Amsterdam examined governance vulnerabilities in 48 large Ethereum DAOs, revealing systemic patterns in how voting power concentrates and how attackers exploit valid governance rules.

The first study traced the mechanics of registration, staking, delegation, and minimum-balance requirements, each designed to prevent spam and ensure skin-in-the-game participation, yet each creating bottlenecks that favor large holders and established delegates.

The second mapped specific attack vectors that operate within those rules, showing how coordinated actors can time proposals, accumulate delegated power, and move assets during windows when no pause mechanism exists.

Compound’s July incident exemplifies the second category: the attackers used only valid governance mechanics, registered wallets, delegated tokens, and cast votes within the deadline. No smart contract was exploited, no private keys compromised, no rules violated. The system functioned as designed and produced an outcome that a narrow majority of voters on-chain supported.

Yet institutional participants and security researchers argue that the speed and concentration of late-stage voting created conditions indistinguishable from a flash-loan attack or a sybil-coordinated raid.

This distinction matters for institutional investors evaluating DAO governance as a risk category. When a protocol failure stems from code, patches and audits can address it. When it stems from incentive design or the temporal dynamics of voting, the remedies inevitably involve adding human judgment, whether through a timelock, a veto council, a multisignature check, or an emergency pause.

Each such brake introduces the very centralization that DAOs were meant to eliminate.

Registration, Delegation, and Transaction Costs Create Tiered Access to Voting

The path from holding a governance token to casting a binding vote is longer than most participants realize.

Depending on the DAO’s architecture, a holder may need to register a wallet on-chain, lock tokens for a minimum period, explicitly delegate voting power to themselves or a proxy, maintain a minimum balance at the moment voting closes, and pay transaction fees, often significant during periods of network congestion.

Proposals face parallel barriers: someone must hold sufficient tokens or command enough delegated support to introduce a proposal, and the idea typically passes through a forum discussion and informal off-chain poll before reaching a binding blockchain vote or a snapshot poll conducted on a service such as Snapshot.

Proposal thresholds exist to prevent spam and protect the network from malicious code deployments, but they also reserve authorship for wealthy token holders and established delegates with enough capital to broadcast transactions. On-chain voting makes results enforceable and verifiable, but transaction costs, paid by individual voters, create a wealth tax that excludes smaller participants.

Off-chain polls on services like Snapshot cost nothing to participate in and attract a broad audience, yet they depend on a smaller technical group to execute the result, centralizing the final step in fewer hands.

The cumulative effect is a governance apparatus with multiple gates, each solving a legitimate problem while introducing a hidden bias. Registration requirements curb artificial participation but delay legitimate voters. Delegation thresholds reduce quorum failure but concentrate power among delegates who have actively claimed it.

On-chain voting ensures immutability but prices out smaller holders. Free off-chain voting widens participation but narrows execution.

Veto Mechanisms and Emergency Brakes Force Protocols to Accept Centralized Gatekeepers

Compound’s solution to the July incident, adding a veto role that could cancel proposals, is the most common institutional defense against governance attacks. Other DAOs employ timelocks that delay execution by days or weeks, allowing the broader community to mobilize if suspicious activity occurs.

Some use multisignature wallets held by core contributors, giving a small group the ability to reject or pause on-chain results. Others create separate committees tasked with reviewing proposals before they reach binding votes.

Each mechanism trades decentralization for security. A veto authority must be trusted not to abuse it; a timelock merely delays the attack window rather than eliminating it; a multisig concentrates power in known individuals who may face regulatory or legal pressure; a committee reintroduces the gatekeeping that blockchain governance was supposed to eliminate.

Institutional investors must evaluate whether they view these defenses as reasonable safeguards or as evidence that pure token-holder governance cannot scale without reverting to centralized control.

The Compound case offers no clean resolution to that debate. The protocol fixed the immediate vulnerability by adding a veto power, but doing so contradicts the governance model that attracted token holders in the first place. Holders buy COMP partly for the right to shape the protocol’s future; a veto council, no matter how well-intentioned, claims some of that right back.

Institutional Risk Assessment Now Hinges on Governance Resilience and Transparency

For institutional investors evaluating DAO-governed protocols, the Max Planck research and Compound’s experience suggest that governance security should rank alongside smart contract audits and custody solutions.

Protocols that lack emergency pause mechanisms, clear documentation of attack vectors, and transparent communication about voting-power concentration present material risk, particularly if they control significant assets or plan to scale to major market infrastructure roles.

The choice between code and emergency brakes is not binary; most protocols will adopt some combination of both. The question is which combination, and whether the trade-offs are disclosed clearly to participants.

A protocol that acknowledges the Compound-style vulnerability and implements graduated defenses, timelock plus multisig plus active community monitoring, may inspire more confidence than one that insists pure token-holder voting is sufficient.

The resolution will likely emerge from two parallel tracks: regulatory bodies may eventually impose minimum governance standards on protocols that touch regulated assets or custody services, while leading DAOs themselves will adopt best practices through voluntary competitive pressure. Compound’s post

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

ENS DAO Security Council renewal blocked as founder wields 50% voting power

ENS DAO Security Council renewal blocked as founder wields 50% voting power

, , , , , , ,

BlockchainJune 30, 2026·6 min read

ENS founder Nick Johnson wielded approximately 50% of the protocol’s active voting power to block a Security Council renewal proposal on June 30, 2026, deepening a governance crisis that exposes the tension between decentralized control and treasury protection in major DAOs. The move leaves a $350 million treasury vulnerable to potential governance attacks while reigniting debate over whether concentrated founder influence defeats the purpose of decentralized governance.

  • Nick Johnson’s 50% voting stake blocked the Security Council renewal on-chain vote ending June 30, 2026
  • ENS DAO treasury holds $350 million in assets, or $88 million excluding ENS tokens, far exceeding the $166 million market cap
  • A replacement Security Council proposal emerged the same day, raising supermajority requirement to 5 of 8 votes for canceling timelocked proposals
  • 50% Founder voting power used to block renewal compared to distributed community governance ideal
  • $350M DAO treasury assets versus $166 million circulating market cap, creating RFV raid vulnerability
  • 95% ENS token decline from $85.69 peak in November 2021 to current $4.07 trading price

The ENS Protocol governance structure has fractured over the renewal of its Security Council, a body designed to prevent treasury theft through governance attacks. On June 30, 2026, an on-chain proposal to renew the Council failed after founder Nick Johnson deployed approximately half of all active voting tokens to oppose it, despite not participating in the preceding off-chain Snapshot vote.

The move has exposed a fundamental contradiction at the heart of major protocol DAOs: the mechanisms meant to protect decentralized treasuries from attack can themselves become tools of unilateral control.

The stakes are unusually high. The ENS DAO treasury contains approximately $350 million in total assets, according to data from DeFiLlama, or $88 million when excluding ENS tokens themselves. By contrast, the ENS token trades at $4.07 per unit with a circulating market cap of roughly $166 million, a 95% collapse from its November 2021 peak of $85.69.

This gap, where treasury assets dwarf the token’s market value, creates the classic conditions for what the industry calls an “RFV raid,” in which a well-capitalized attacker acquires enough voting tokens to control proposals and siphon treasury value. The Security Council exists precisely to guard against this scenario.

Yet Johnson’s use of his voting stake to unilaterally block renewal has triggered the opposite concern: that founder control over the treasury now supersedes community governance entirely.

Johnson’s 50% Voting Power Blocks Renewal as DAO Governance Fractures

Community sentiment around the blocked vote has split sharply.

Lefteris Karapetsas, a longtime Ethereum community member, declared the result unsurprising and went further, calling the DAO “dead” in a post on X. He argued that Johnson’s concentrated voting power effectively shields the $500 million treasury from outside oversight, a characterization that frames the founder’s stake not as emergency protection but as unaccountable control.

The language reflects broader frustration with how governance power has remained centralized despite the DAO’s decentralized structure.

Not all observers agree with that framing. AvsA, an active ENS community member posting on the governance forum, defended the substance of the failed proposal, arguing it represented legitimate governance rather than an attack. However, AvsA simultaneously cautioned that allowing the Security Council to expire entirely would create worse risks.

In a terse assessment, AvsA wrote: “The DAO is a $130M treasury safeguarded by at best $20M worth of tokens.” This observation underscores the core problem: whether the Council stays in place under Johnson’s influence or lapses entirely, the structural vulnerability persists.

The governance dispute has stretched over several weeks, with no clear resolution path emerging. Johnson abstained from the earlier off-chain Snapshot vote, making his deployment of voting power exclusively on the on-chain phase a decisive final move.

The timing and magnitude of his intervention signal an unwillingness to cede control over the Security Council mechanism, even as community members argue that such control is precisely what decentralized governance should prevent.

New Council Proposal Raises Supermajority Threshold to 5 of 8 Votes

Within hours of the renewal’s failure, katherine.eth introduced a draft proposal on the ENS governance forum to establish a replacement Security Council with modified rules. The plan suggests reducing the Council from its current composition to eight members, a smaller body intended to streamline decision-making.

More substantively, the proposal raises the supermajority threshold required to cancel timelocked proposals from 4 of 8 votes to 5 of 8, a change that would make it harder for the Council to exercise its most powerful authority unilaterally.

The official ENS DAO account confirmed the submission and announced that nominations would remain open until July 3. The post emphasized that the new Council would operate under a public mandate and that removal mechanisms for members failing to adhere to governance standards would be built into the charter.

These procedural additions suggest an attempt to thread between two competing risks: maintaining some ability to block governance attacks while constraining the Council’s unilateral power.

The draft proposal also attempts to define the scope of the Council’s veto authority more precisely. It specifies that cancellation power should be reserved only for “malicious, coercive, or exploitative governance attacks,” a constraint designed to prevent routine use against ordinary community proposals.

However, the draft itself acknowledges that no consensus exists on what these terms mean in practice. This definitional ambiguity, whether a proposal constitutes a legitimate governance decision or a masked attack, sits at the center of the current conflict and remains unresolved in the new draft.

Treasury Assets Exceed Market Cap by 210%, Creating Structural Vulnerability

The economic conditions underlying the governance crisis are stark and unlikely to resolve quickly. The ENS token has collapsed 95% from its 2021 peak, reducing the circulating market cap to $166 million even as the DAO treasury accumulated $350 million in assets.

This inversion, where the DAO commands substantially more capital than the token market reflects, is unusual and creates persistent incentive structures that existing governance mechanisms were not designed to handle.

From a protocol security perspective, this gap represents an open vulnerability window. An attacker with $20-30 million could theoretically accumulate enough ENS tokens at current market prices to command a voting majority, then direct the DAO to transfer treasury assets to addresses under their control. The Security Council’s veto power exists to prevent exactly this scenario.

However, the current crisis reveals that concentrating the Council’s protection in the hands of a single founder may deter attacks but at the cost of creating a different governance risk: unilateral treasury control by one actor.

The financial mathematics leave little room for compromise solutions that satisfy both security and decentralization requirements simultaneously.

July 3 Nomination Deadline Sets Timeline for New Council Governance Rules

The immediate next step in the governance process is the July 3 deadline for Security Council nominations under katherine.eth’s proposal. Assuming the nomination process completes, a follow-on vote will determine whether the community endorses the new eight-member structure with the 5-of-8 supermajority requirement.

That vote will provide the clearest signal yet of whether the broader ENS community views Johnson’s blocking action as justified protection or governance overreach.

The outcome remains genuinely uncertain. If the new proposal passes, it would represent a partial victory for reform advocates, since the raised supermajority threshold would constrain unilateral veto power. However, Johnson maintains the same 50% voting stake in any subsequent vote, meaning he could block the new proposal just as he blocked the renewal.

Conversely, if the new proposal fails, the ENS governance structure enters genuinely uncharted territory: a DAO with a massive treasury, a collapsed token price, and no active Security Council.

The path forward hinges on whether ENS token holders view the new proposal as a legitimate reform of the Council’s authority or as an insufficient check on founder power. The July 3 nomination deadline will determine which governance framework the community votes on, but Johnson

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe