Flash Loan Governance Exploits

Flash loan governance exploits are a sophisticated type of attack where a malicious actor uses a flash loan to borrow a massive amount of governance tokens for a single transaction block. By temporarily holding these tokens, the attacker gains sufficient voting power to pass a malicious proposal, such as draining a protocol's treasury or changing key risk parameters.

Once the vote is cast, the attacker repays the flash loan, effectively executing the attack with very little capital at risk. This exploit highlights a critical vulnerability in on-chain governance systems that rely solely on current token holdings for voting power.

To defend against these attacks, many protocols have implemented snapshots of token balances taken before a proposal is created, or they require a minimum holding period for tokens to be eligible for voting. This prevents the use of short-term borrowed capital from influencing long-term protocol decisions.