No Timelock, No Mercy: $1.58M WETH Drained In Token Of Power Governance Exploit
TRM’s investigation revealed the attacker took advantage of a flaw in how the protocol’s Aragon DAO was configured – specifically, it didn’t have a timelock feature. This allowed them to quickly propose a harmful change, vote on it, and put it into effect all within the same block.