El protocolo DeFi Moonwell sufre un ataque de gobernanza a bajo costo, con más de un millón de dólares en fondos en riesgo

Deep Tide TechFlow news, March 26, According to The Block, the governance attack on the Moonriver deployment of DeFi lending protocol Moonwell. The attacker spent about $1,800 to acquire approximately 40 million MFAM tokens and completed the entire process of purchasing tokens, initiating a proposal, and passing it within about 11 minutes. Once executed, this malicious proposal would transfer control of 7 lending markets, the comptroller, and the oracle to a contract controlled by the attacker, potentially extracting about $1.08 million of user funds.

Voting will continue until March 27, with most votes already against, but the final outcome remains uncertain. The protocol has a “Break Glass Guardian” emergency multisig mechanism that can intervene before the proposal is executed. This incident once again exposes the structural risks of token distribution imbalance and low participation in decentralized governance. Notably, Moonwell previously suffered a bad debt loss of $1.8 million in February 2026 due to an oracle configuration error.