What happened
On 17 April 2022 an attacker borrowed governance power, passed a malicious proposal and transferred protocol assets.
What failed
Emergency governance could be bought for one transaction.
Current status
The original Beanstalk credit system failed.
What users should do
- Be cautious with protocols where flash-loaned tokens can vote immediately.
Lessons
- Governance is part of the attack surface.