Governance Attack Drains $1.58 Million from Token of Power Protocol

How the Exploit Unfolded

The Token of Power protocol fell victim to a calculated governance attack that leveraged weaknesses in its Aragon DAO configuration. With the project's MiniMeToken having a total supply of only 16,384 TOP tokens, acquiring majority control required just over 8,192 tokens. The attacker secured this threshold and immediately moved to execute a malicious proposal.

Because the governance system lacked a timelock mechanism, the attacker created, voted on, and executed the proposal in a single transaction. The proposal called the TokenManager's minting function, generating 10 billion new TOP tokens sent directly to the attacker's contract.

Execution and Fund Drainage

The attacker did not target Balancer's protocol directly. Instead, the TOP/WETH Balancer V1 pool served as the exit liquidity point. By dumping the massively inflated TOP supply into the pool, the attacker swapped against the available WETH reserves, leaving liquidity providers with heavily diluted tokens.

Security researchers from Blockaid, PeckShield, Cyvers, and BlockSec tracked the activity. The attacker performed multiple swaps within one transaction to maximize the drain. On-chain data showed the wallet address 0xff8eF7bC455a57e5893232203052Ce0232b39Fa2 as the primary executor.

Funding and Laundering Tactics

The attacker's initial funds came through Tornado Cash. After draining the pool, the stolen WETH was quickly routed back through the mixer with multiple deposits (including 100 ETH and 10 ETH transactions) to obscure the trail. Within hours, the attacker's wallet held almost no traceable ETH.

Root Causes and Governance Lessons

The incident stemmed from a misconfigured Aragon DAO setup combined with a low token supply and low market valuation, making majority control inexpensive. The absence of standard safeguards—such as timelocks, adequate quorum requirements, or proposal delays—allowed the attack to succeed rapidly.

Security firms emphasized that projects using Aragon or similar frameworks should review voting power distribution, minting permissions, and execution delays. Timelocks provide communities time to respond to suspicious proposals, a critical protection missing here.

Broader Implications for DeFi Security

This case adds to ongoing concerns about governance security in decentralized finance, particularly for smaller projects with legacy infrastructure. While smart contract bugs often grab headlines, governance takeovers represent a distinct vector that weaponizes built-in protocol mechanisms.

Low-supply tokens with significant liquidity exposure remain attractive targets. The event serves as a reminder that strong access controls, restricted minting functions, and time-delay mechanisms are essential rather than optional. No issues were found with Balancer itself, underscoring that the vulnerability resided entirely in the project's governance design.

The Token of Power team has not yet issued a detailed public response or recovery plan as of the latest reports.