DeFi protocol Moonwell faces a low-cost governance attack, putting over $1 million in funds at risk

DeepFlowTech · 2026-03-26T13:59:40+00:00

DeFi lending protocol Moonwell was attacked during governance on Moonriver. The attacker purchased 40 million MFAM tokens for $1,800, initiated malicious proposals, aiming to seize control of governance and extract $1.08 million of user funds. Currently, the vote has shifted to oppose, but the outcome remains uncertain. This incident highlights the structural risks of decentralized governance.

DeepFlowTech

2026-03-26 13:59:40

Abstract generation in progress

Deep Tide TechFlow News, March 26 — According to The Block, the DeFi lending protocol Moonwell’s Moonriver deployment was subjected to a governance attack. The attacker spent about $1,800 to acquire approximately 40 million MFAM tokens and completed the entire process—buying tokens, submitting proposals, and passing the quorum—in about 11 minutes. Once executed, this malicious proposal would transfer control of 7 lending markets, the comptroller, and the oracle to a contract controlled by the attacker, potentially allowing them to withdraw around $1.08 million of user funds.

Voting will continue until March 27. Most votes have already shifted to oppose, but the final outcome remains uncertain. The protocol has a “Break Glass Guardian” emergency multisig mechanism that can intervene before the proposal is executed. This incident once again exposes the structural risks of uneven token distribution and low participation in decentralized governance. Notably, Moonwell previously suffered a $1.8 million bad debt loss in February 2026 due to an oracle configuration error.

WELL-4,52%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

1 Likes