Morning Edition · Saturday, August 8, 2026Published at 1:55 AM EDT · New York

Attackers Take Over an Abandoned Governance Contract as Smaller DeFi Exploits Keep Targeting Keys, Not Code

StrongBlock lost about $72,000 to a governance proposal that reassigned administrative control, while researchers published proofs of concept for an unvalidated-parameter injection on a token launchpad.

An attacker acquired enough STRONG tokens to control a vote on StrongBlock's dormant on-chain governance, then passed a proposal directing the Governor contract's upgrader to hand administrative rights to an address they controlled. With th…