Binance says its security team caught and stopped an attempt to drain $1.2 million from a blockchain project’s treasury through a malicious governance vote. The exchange has not said which pr
Binance says its security team caught and stopped an attempt to drain $1.2 million from a blockchain project’s treasury through a malicious governance vote. The exchange has not said which project was targeted.
User protection is not only about defending our own platform, but also strengthening the wider ecosystem against attacks.
Recently, our security team detected and helped prevent a $1.2M governance attack on a project’s protocol. This case demonstrates what security by design… pic.twitter.com/lRqDzJKH7c
— Binance (@binance) August 18, 2026
An attacker exploited a low bar for submitting governance proposals on an unnamed project’s decentralized platform. Binance says that threshold was low enough to let the attacker attempt to bypass the project’s normal requirements for passing a vote.
Binance’s monitoring systems flagged the proposal with less than 48 hours remaining before it could be executed. The exchange says it contacted the project directly and told it to vote the proposal down, and coordinated with other exchanges that list the token to pause deposits temporarily, a step meant to stop any stolen tokens from being sold quickly if the vote had gone the other way.
The project’s community voted against the proposal. Binance says the attack was stopped before execution, with no funds lost.
Jimmy Su, Binance’s chief security officer, said the case shows what “security by design” looks like when it extends beyond the exchange’s own platform.
Binance has not named the project, the token, or the wallet address involved. It has not published a proposal ID, a transaction hash, or any vote record that would let an outside party check the $1.2 million figure, the timeline, or the outcome it describes.
The affected project itself has stayed silent. As of August 19, no security research firm or blockchain analytics group had said anything about the incident either.
The mechanism Binance describes, acquiring enough governance votes to push through a proposal that drains a treasury, is not new. It is the same pattern that cost BonkDAO $20 million in early July, when an attacker spent $4.4 million to acquire voting power and passed a proposal carrying a hidden instruction to move treasury funds out. A second case hit BarnBridge on July 15, when roughly $777,000 was drained after a small governance position was used to hijack an upgrade path.
Blockaid, a blockchain security firm, estimated that governance attacks drained roughly $22 million across seven protocols over eight weeks this summer.
BonkDAO and BarnBridge were named the moment their treasuries were hit, and the on-chain record of both attacks sat in public view within hours. This incident has offered neither.
