Yapeswap Loses $21.9K in Governance Exploit via Zero Quorum Flaw

Yapeswap lost approximately $21.9K in a governance exploit that allowed an attacker to manipulate critical contract roles. According to @SlowMist_Team, the incident resulted from a zero quorum proposal that enabled a small fraction of voting power to transfer the 'feeToSetter' role to a malicious actor. The exploit highlights ongoing security challenges in decentralized finance governance mechanisms, where protocol vulnerabilities can enable unauthorized access to core system functions.

Yapeswap Governance Flaw Enables Role Transfer

The exploit was facilitated by a zero quorum proposal within Yapeswap's governance structure. This flaw allowed a small fraction of voting power to transfer the critical 'feeToSetter' role to an attacker. The governance mechanism failed to require sufficient voting participation to authorize changes to essential contract roles, creating an entry point for malicious activity.

Attacker Creates Fake Vault Registry to Divert Deposits

After gaining control of the 'feeToSetter' role, the attacker created a registry that returned fake vaults while still listing real ones. This setup misled users and resulted in diverted deposits being counted as farming assets. The technical manipulation allowed the attacker to redirect user funds through the fraudulent vault system, leading to the reported $21.9K loss.

FAQ

What caused the Yapeswap governance exploit?

The exploit resulted from a zero quorum proposal that allowed a small fraction of voting power to transfer the 'feeToSetter' role to an attacker. This governance flaw enabled unauthorized changes to critical contract roles without requiring sufficient voting participation.

How did the attacker divert user deposits at Yapeswap?

The attacker created a fake vault registry that returned fraudulent vaults while still listing real ones. This setup misled users and caused diverted deposits to be counted as farming assets, resulting in the $21.9K loss reported by @SlowMist_Team.