{"investigation":{"slug":"defi-governance-attack-cluster-2026-bonkdao-term-labs-pattern","entity_name":"DeFi Governance Attack Cluster 2026 (BonkDAO + Term Labs Pattern)","trust_score":15,"severity_base":null,"score_modifier":0,"confidence":0.65,"status":"published","content_type":"investigation","summary":"Between June and August 2026, at least four DeFi protocols — Token of Power, BonkDAO, BarnBridge SMART Yield, and Term Labs — lost a combined minimum of roughly $31 million to a recurring attack pattern in which an attacker cheaply acquires enough token-weighted voting power to pass a self-serving proposal through a protocol's own governance system, without exploiting any smart contract bug. This is a thematic cluster covering a genuine, verifiable attack class rather than a single entity; individual protocols in the cluster vary in size and legitimacy, but the pattern itself — low quorum thresholds, low voter turnout, and liquid governance tokens combined with governance-controlled treasuries — is a real, recurring structural vulnerability documented by multiple independent security firms and news outlets. A widely repeated claim that DefiLlama counts exactly \"five governance attacks totaling $25.1 million\" in 2026 could not be independently verified and appears mathematically inconsistent with the incidents this investigation confirmed, which alone exceed that total.","sections":[{"content":"On July 6, 2026, an attacker spent approximately $4.4 million to acquire roughly 882.38 billion BONK tokens — just above the 1% quorum threshold (879.95 billion tokens) required by BonkDAO's governance system on Solana's Realms platform. A proposal titled \"BIP #76 – Sowellian BonkDAO\" had been submitted on June 30, 2026, by an anonymous wallet, with marketing-style language obscuring a clause instructing the transfer of roughly 4.4 trillion BONK from the treasury to the attacker's wallet. The proposal passed with 99.9% \"yes\" votes from just seven wallets, against a backdrop of more than 18,000 token holders who did not vote (a turnout of roughly 2.9%). The proposal executed immediately because BonkDAO's governance configuration lacked a timelock. Approximately $20 million in BONK was drained; the attacker sold roughly $5.3 million of the proceeds within nine hours and moved the remainder, worth roughly $19 million, toward exchange-linked wallets. BonkDAO confirmed the incident and said it was working with exchanges, bridges, and the Solana Foundation to attempt fund recovery. No code vulnerability was exploited — the attacker used the DAO's own token-weighted voting mechanism as designed.","heading":"BonkDAO treasury drain (July 2026)","sources":[{"url":"https://www.coindesk.com/markets/2026/07/07/bonk-faces-usd20-million-treasury-drain-after-attacker-spends-usd4-million-to-pass-malicious-proposal","name":"CoinDesk: BONK faces $20 million treasury drain after attacker spends $4 million to pass malicious proposal","type":"news_article","credibility":1},{"url":"https://therecord.media/attackers-vote-themselves-20-million-bonk-crypto","name":"The Record: Attackers vote themselves $20 million in BONK cryptocurrency","type":"news_article","credibility":1},{"url":"https://crypto.news/what-is-a-governance-attack-how-bonkdao-lost-20m-in-a-single-vote/","name":"crypto.news: What is a governance attack? How BonkDAO lost $20M in a single vote","type":"news_article","credibility":2},{"url":"https://blockaid.io/blog/governance-takeovers-how-22m-was-drained-and-how-to-stop-them","name":"Blockaid: Governance Takeovers: How $22M Was Drained and How to Stop Them","type":"research","credibility":2}],"severity":"critical"},{"content":"On August 23, 2026, an attacker drained approximately $8.5 million — comprising roughly 2,843 ETH (about $6.9 million) and 1.68 million USDC (later swapped to DAI) — from Term Labs' Strategy Vaults, which are ERC-4626 tokenized vaults built on Yearn V3 infrastructure but governed through a custom Aragon TokenVoting wrapper specific to Term. Voting power in this system was not tied directly to vault deposits; depositors had to separately wrap their vault shares into a distinct governance token, an extra opt-in step that almost no depositors completed. Multiple reports (crypto.news, citing on-chain data) indicate the attacker spent as little as $951 to acquire a majority (reported at roughly 90.66%) of the governance token's voting power while it had minimal liquidity, then passed a routine-looking proposal that disabled the vaults' transaction delay, enabling the drain across the ETH Meta Vault and several USDC vaults. Security firms PeckShield and CertiK independently confirmed the incident and traced the attacker's wallet, which had been seeded with 2 ETH from the Tornado Cash mixer. Yearn stated on X that the exploit involved a governance wrapper built specifically for Term rather than a flaw in standard Yearn V3 vaults. Term Labs shut down its Meta Vaults, revoked their DAO governance roles, and blocked new deposits while allowing existing depositors to withdraw. According to Term Labs' own incident report, the protocol subsequently recovered all affected fixed-rate loan positions by moving them to safety before maturity, with the final position secured on August 25, 2026.","heading":"Term Labs (Term Finance) vault governance exploit (August 2026)","sources":[{"url":"https://www.theblock.co/news/defi/2026-08-23-defi-lending-protocol-term-finance-loses-an-estimated-8-5-million-to-governance-exploit-412543","name":"The Block: DeFi lending protocol Term Finance loses an estimated $8.5 million to governance exploit","type":"news_article","credibility":1},{"url":"https://crypto.news/term-labs-dao-governance-heist-951-dollars-8-5-million-exploit/","name":"crypto.news: The $8.5M DAO heist that cost $951 to pull off: how Term Labs got governance hijacked","type":"news_article","credibility":2},{"url":"https://finance.yahoo.com/markets/crypto/articles/another-defi-hack-term-labs-123536364.html","name":"Yahoo Finance: Another DeFi Hack: Term Labs Loses $8.5 Million in Governance Exploit","type":"news_article","credibility":2},{"url":"https://globalcrypto.tv/term-labs-governance-attack-causes-8-5m-loss-in-defi-exploit/","name":"globalcrypto.tv: CertiK Flags $8.5M Term Labs Governance Attack","type":"news_article","credibility":2},{"url":"https://crypto.news/term-labs-recovers-fixed-rate-positions-after-8-5m-governance-attack/","name":"crypto.news: Term Labs recovers fixed-rate positions after $8.5M governance attack","type":"news_article","credibility":2}],"severity":"critical"},{"content":"On or around June 9-10, 2026, the Token of Power (TOP) protocol, an Aragon-based governance token on Ethereum with a total supply of only 16,384 tokens, was exploited when an attacker — reportedly funded through Tornado Cash — acquired just over half of the token's supply, cheap to assemble given the tiny float. The attacker used Aragon's Voting app to create, pass, and execute a proposal in a single transaction with no timelock, minting 10 billion new TOP tokens directly to themselves. These were dumped into a Balancer V1 liquidity pool, netting the attacker approximately 944.2 WETH, worth roughly $1.58-1.59 million. Security and compliance firm TRM Labs and multiple crypto outlets confirmed the mechanics; funds were reportedly laundered back through Tornado Cash. This incident predates BonkDAO by about four weeks and used a similar structural weakness — a governance system with mint or transfer authority, no timelock, and a supply cheap enough to corner.","heading":"Token of Power governance mint exploit (June 2026)","sources":[{"url":"https://bitcoinist.com/token-of-power-governance-exploit-drains-1-58-million-in-weth-trm-says/","name":"Bitcoinist: Token Of Power Governance Exploit Drains $1.58 Million In WETH, TRM Says","type":"news_article","credibility":2},{"url":"https://ambcrypto.com/governance-takeover-lets-attacker-mint-10b-top-tokens-in-1-5m-exploit/","name":"AMBCrypto: Governance takeover lets attacker mint 10B TOP tokens in $1.5m exploit","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/news/flash/token-of-power-governance-attack-drains-1-58m-via-balancer-pool","name":"KuCoin: Token of Power Governance Attack Drains $1.58M via Balancer Pool","type":"news_article","credibility":2}],"severity":"high"},{"content":"On July 15, 2026, the BarnBridge SMART Yield protocol on Ethereum was exploited after an attacker acquired sufficient governance voting power — reportedly for as little as $600 in governance tokens — to pass a malicious proposal that replaced the controller contract of a SMART Yield component. The new controller was then used to sweep stale, years-old token approvals from roughly 50 wallets that had never been revoked, transferring approximately $776,000-$777,000 in USDC across two sweeps minutes apart. Security firm GoPlus Security and monitoring firm BlockSec both confirmed the mechanics on-chain, and Blockaid had separately flagged the underlying stale-approval risk in the protocol's old governance proposals before the drain was confirmed. On-chain records indicate the attacker's wallet was funded with ETH from Tornado Cash roughly ten days before the exploit. Unlike BonkDAO and Term Labs, this attack combined governance capture with a lingering approvals vulnerability rather than a direct treasury transfer.","heading":"BarnBridge SMART Yield governance-enabled approval sweep (July 2026)","sources":[{"url":"https://x.com/GoPlusSecurity/status/2077368534628458801","name":"GoPlus Security (X/Twitter): Vulnerability Analysis of BarnBridge SMART Yield exploit","type":"social_media","credibility":2},{"url":"https://blocksec.com/blog/web3-security-barnbridge-defituna-exploits","name":"BlockSec: ~$1.35M Lost: BarnBridge, DeFiTuna","type":"research","credibility":2},{"url":"https://www.kucoin.com/news/flash/barnbridge-smart-yield-protocol-hit-by-governance-attack-suffers-776-000-loss","name":"KuCoin: BarnBridge SMART Yield Protocol Hit by Governance Attack, Suffers $776,000 Loss","type":"news_article","credibility":2}],"severity":"high"},{"content":"Blockaid, a Web3 security firm, reported that its threat intelligence identified at least seven governance takeovers between June 9 and August 6, 2026 across Ethereum, Solana, and Base, naming Panther (where a passing governance vote reached the protocol's contract upgrade rights) and Unicly (where an attacker's voting power was flash-borrowed for a single block rather than held) as part of the same wave, alongside Token of Power, BonkDAO, and BarnBridge. However, this investigation could not locate independent, named-outlet reporting with specific dollar-loss figures, exact dates, or on-chain transaction confirmation for the Panther and Unicly incidents beyond the single Blockaid blog post. These two incidents are therefore included here as alleged, low-confidence data points pending independent corroboration, rather than as confirmed losses.","heading":"Additional cluster incidents (Panther, Unicly) — unverified specifics","sources":[{"url":"https://blockaid.io/blog/governance-takeovers-how-22m-was-drained-and-how-to-stop-them","name":"Blockaid: Governance Takeovers: How $22M Was Drained and How to Stop Them","type":"research","credibility":2}],"severity":"medium"},{"content":"A claim that DefiLlama counted exactly five governance attacks totaling $25.1 million in 2026 is repeated across numerous secondary crypto news and aggregator sites. This investigation was unable to locate the underlying DefiLlama page, tweet, or dataset that originates this specific figure — DefiLlama's public hacks dashboard could not be accessed directly during this investigation (returned an access error), and no outlet linked to a primary DefiLlama source for the $25.1 million number. The figure is also mathematically inconsistent with the incidents independently verified in this investigation: BonkDAO alone ($20 million) plus Term Labs ($8.5 million) already total $28.5 million, exceeding the claimed $25.1 million aggregate before Token of Power ($1.58 million) or BarnBridge ($776,000) are even added, which would bring a four-incident minimum to roughly $30.86 million. Separately, one AI-generated aggregator source (a GitHub \"release\" page under the account Ricosworks1, not a news outlet) erroneously included Compound's Proposal 289 / \"Golden Boys\"/Humpy controversy — a real event, but independently confirmed via The Block to have occurred in July 2024, not 2026 — inside a \"2026 governance attack\" total, which appears to be a source of the confusion propagating through search results. Given these inconsistencies, the specific \"5 attacks / $25.1M / DefiLlama\" claim should be treated as unverified and likely inaccurate as stated, though the broader qualitative claim that governance attacks are a recurring, named threat class in 2026 is well supported by the four incidents individually verified above.","heading":"Unverified aggregate figure: \"five governance attacks, $25.1 million, DefiLlama\"","sources":[{"url":"https://www.theblock.co/post/307943/24-million-compound-finance-proposal-passed-by-whale-over-dao-objections","name":"The Block: $24 million Compound Finance proposal passed by whale over DAO objections (dated July 28, 2024)","type":"news_article","credibility":1}],"severity":"medium"},{"content":"The pattern across the confirmed incidents — Token of Power, BonkDAO, BarnBridge SMART Yield, and Term Labs — is consistent and structurally distinct from smart-contract exploits: in each case, an attacker acquired governance voting power cheaply (relative to the value under governance control) because of low voter turnout, low or easily-reached quorum thresholds, and liquid/concentrated governance tokens, then used a protocol's own legitimate proposal-and-execution mechanism to move funds or grant themselves privileged access, without exploiting any code bug. Several outlets and the security firm Blockaid explicitly frame this as a named, recurring 2026 attack wave. This general failure mode is not new in DeFi history — the Beanstalk Farms flash-loan governance attack (April 2022, roughly $182 million) is a widely cited earlier precedent using a related but not identical mechanism (flash-loan-borrowed voting power in a single transaction, rather than outright token purchase or wrapper-token accumulation). What differs in the 2026 cluster is the diversity of mechanisms within the same broad category: outright token purchase to hit quorum (BonkDAO), minting authority reachable via governance (Token of Power), stale-approval sweeps enabled by a captured controller (BarnBridge), and voting-power accumulated through an easily-overlooked wrapper-token opt-in (Term Labs). This supports treating \"governance/quorum-buying attacks\" as a genuine, identifiable DeFi risk category for any protocol combining (a) a treasury or privileged contract functions reachable via a governance vote, (b) low historical voter turnout, and (c) a governance token that is liquid or cheaply cornerable — rather than as one-off, unrelated incidents.","heading":"Assessment: is this a genuine distinct attack class?","sources":[{"url":"https://blockaid.io/blog/governance-takeovers-how-22m-was-drained-and-how-to-stop-them","name":"Blockaid: Governance Takeovers: How $22M Was Drained and How to Stop Them","type":"research","credibility":2},{"url":"https://crypto.news/what-is-a-governance-attack-how-bonkdao-lost-20m-in-a-single-vote/","name":"crypto.news: What is a governance attack? How BonkDAO lost $20M in a single vote","type":"news_article","credibility":2}],"severity":"high"}],"timeline":[{"date":"2026-06","event":"Attacker cheaply acquires majority of Token of Power's tiny fixed token supply and mints 10 billion new TOP tokens via a single-transaction Aragon governance proposal with no timelock, draining roughly $1.58-1.59 million in WETH via a Balancer pool.","source":"Blockaid / Bitcoinist (TRM Labs)","source_url":"https://bitcoinist.com/token-of-power-governance-exploit-drains-1-58-million-in-weth-trm-says/","date_evidence":"Token of Power (Ethereum) - June 9 - $1.59 million","date_original":"2026-06-09"},{"date":"2026-06","event":"An anonymous wallet submits BonkDAO proposal 'BIP #76 – Sowellian BonkDAO,' which contains a hidden clause transferring roughly 4.4 trillion BONK from the treasury to the proposer's wallet.","source":"CoinDesk","source_url":"https://www.coindesk.com/markets/2026/07/07/bonk-faces-usd20-million-treasury-drain-after-attacker-spends-usd4-million-to-pass-malicious-proposal","date_original":"2026-06-30"},{"date":"2026-07-06","event":"BonkDAO proposal passes with 99.9% yes votes from 7 wallets (2.9% turnout); roughly $20 million in BONK is drained from the treasury.","source":"crypto.news","source_url":"https://crypto.news/what-is-a-governance-attack-how-bonkdao-lost-20m-in-a-single-vote/","date_evidence":"On July 6, 2026, someone spent about four million dollars buying BONK, used it to control almost a hundred percent of a seven-wallet vote, and legally walked off with twenty million from the DAO's treasury."},{"date":"2026-07","event":"BonkDAO confirms the attack publicly and says it is coordinating with exchanges, bridges, and the Solana Foundation to manage the fallout; CoinDesk and other outlets report the incident.","source":"CoinDesk","source_url":"https://www.coindesk.com/markets/2026/07/07/bonk-faces-usd20-million-treasury-drain-after-attacker-spends-usd4-million-to-pass-malicious-proposal","date_original":"2026-07-07"},{"date":"2026-07","event":"BarnBridge SMART Yield governance is hijacked via a cheaply-acquired voting position, replacing a controller contract and sweeping roughly $776,000-$777,000 in stale USDC approvals from about 50 wallets.","source":"GoPlus Security / KuCoin","source_url":"https://www.kucoin.com/news/flash/barnbridge-smart-yield-protocol-hit-by-governance-attack-suffers-776-000-loss","date_evidence":"BarnBridge SMART Yield lost $777,000 on July 15 through a stale-approval exploit","date_original":"2026-07-15"},{"date":"2026-08-23","event":"Term Labs' Meta Vaults are drained of roughly 2,843 ETH and 1.68 million USDC (approximately $8.5 million total) after an attacker accumulates governance voting power over the vaults' wrapper token and disables the transaction delay; PeckShield and CertiK confirm the incident.","source":"The Block","source_url":"https://www.theblock.co/news/defi/2026-08-23-defi-lending-protocol-term-finance-loses-an-estimated-8-5-million-to-governance-exploit-412543","date_evidence":"Date & Time: August 23, 2026, 4:50 PM EDT (updated 4:56 PM EDT)"},{"date":"2026-08","event":"Term Labs reports it has moved the final affected fixed-rate loan position back to safety, completing recovery of loan positions (though the roughly $8.5 million in drained liquid vault balances remains lost).","source":"crypto.news","source_url":"https://crypto.news/term-labs-recovers-fixed-rate-positions-after-8-5m-governance-attack/","date_original":"2026-08-25"},{"date":"2026-09","event":"Term Labs publishes a fuller incident report; industry outlets (crypto.news, Cryptonomist, Blockaid) begin framing BonkDAO, Term Labs, Token of Power, and BarnBridge as a connected 2026 'governance attack' wave.","source":"Cryptonomist","source_url":"https://en.cryptonomist.ch/2026/09/03/term-labs-governance-attack/"}],"sources_used":[{"url":"https://www.coindesk.com/markets/2026/07/07/bonk-faces-usd20-million-treasury-drain-after-attacker-spends-usd4-million-to-pass-malicious-proposal","name":"CoinDesk: BONK faces $20 million treasury drain after attacker spends $4 million to pass malicious proposal","type":"news_article","archive_url":"http://web.archive.org/web/20260925122659/https://www.coindesk.com/markets/2026/07/07/bonk-faces-usd20-million-treasury-drain-after-attacker-spends-usd4-million-to-pass-malicious-proposal","credibility":1,"archive_timestamp":"2026-09-25T12:26:59+00:00"},{"url":"https://therecord.media/attackers-vote-themselves-20-million-bonk-crypto","name":"The Record: Attackers vote themselves $20 million in BONK cryptocurrency","type":"news_article","archive_url":"http://web.archive.org/web/20260921085702/https://therecord.media/attackers-vote-themselves-20-million-bonk-crypto","credibility":1,"archive_timestamp":"2026-09-21T08:57:02+00:00"},{"url":"https://www.theblock.co/news/defi/2026-08-23-defi-lending-protocol-term-finance-loses-an-estimated-8-5-million-to-governance-exploit-412543","name":"The Block: DeFi lending protocol Term Finance loses an estimated $8.5 million to governance exploit","type":"news_article","archive_url":"http://web.archive.org/web/20260824065737/https://www.theblock.co/news/defi/2026-08-23-defi-lending-protocol-term-finance-loses-an-estimated-8-5-million-to-governance-exploit-412543","credibility":1,"archive_timestamp":"2026-08-24T06:57:37+00:00"},{"url":"https://www.theblock.co/post/307943/24-million-compound-finance-proposal-passed-by-whale-over-dao-objections","name":"The Block: $24 million Compound Finance proposal passed by whale over DAO objections (July 2024)","type":"news_article","archive_url":"http://web.archive.org/web/20260309031107/https://www.theblock.co/post/307943/24-million-compound-finance-proposal-passed-by-whale-over-dao-objections","credibility":1,"archive_timestamp":"2026-03-09T03:11:07+00:00"},{"url":"https://crypto.news/what-is-a-governance-attack-how-bonkdao-lost-20m-in-a-single-vote/","name":"crypto.news: What is a governance attack? How BonkDAO lost $20M in a single vote","type":"news_article","archive_url":"http://web.archive.org/web/20260828003253/https://crypto.news/what-is-a-governance-attack-how-bonkdao-lost-20m-in-a-single-vote/","credibility":2,"archive_timestamp":"2026-08-28T00:32:53+00:00"},{"url":"https://crypto.news/term-labs-dao-governance-heist-951-dollars-8-5-million-exploit/","name":"crypto.news: The $8.5M DAO heist that cost $951 to pull off: how Term Labs got governance hijacked","type":"news_article","archive_url":"http://web.archive.org/web/20260921150650/https://crypto.news/term-labs-dao-governance-heist-951-dollars-8-5-million-exploit/","credibility":2,"archive_timestamp":"2026-09-21T15:06:50+00:00"},{"url":"https://crypto.news/term-labs-recovers-fixed-rate-positions-after-8-5m-governance-attack/","name":"crypto.news: Term Labs recovers fixed-rate positions after $8.5M governance attack","type":"news_article","archive_url":"http://web.archive.org/web/20260925144055/https://crypto.news/term-labs-recovers-fixed-rate-positions-after-8-5m-governance-attack/","credibility":2,"archive_timestamp":"2026-09-25T14:40:55+00:00"},{"url":"https://finance.yahoo.com/markets/crypto/articles/another-defi-hack-term-labs-123536364.html","name":"Yahoo Finance: Another DeFi Hack: Term Labs Loses $8.5 Million in Governance Exploit","type":"news_article","archive_url":"http://web.archive.org/web/20260921134002/https://finance.yahoo.com/markets/crypto/articles/another-defi-hack-term-labs-123536364.html","credibility":2,"archive_timestamp":"2026-09-21T13:40:02+00:00"},{"url":"https://globalcrypto.tv/term-labs-governance-attack-causes-8-5m-loss-in-defi-exploit/","name":"globalcrypto.tv: CertiK Flags $8.5M Term Labs Governance Attack","type":"news_article","archive_url":"https://web.archive.org/web/20260925144122/https://globalcrypto.tv/term-labs-governance-attack-causes-8-5m-loss-in-defi-exploit/","credibility":2,"archive_timestamp":"2026-09-25T14:41:22+00:00"},{"url":"https://en.cryptonomist.ch/2026/09/03/term-labs-governance-attack/","name":"Cryptonomist: Term Labs Governance Attack: $8.5M Vault Recovery","type":"news_article","archive_url":"https://web.archive.org/web/20260925122310/https://en.cryptonomist.ch/2026/09/03/term-labs-governance-attack/","credibility":2,"archive_timestamp":"2026-09-25T12:23:10+00:00"},{"url":"https://blockaid.io/blog/governance-takeovers-how-22m-was-drained-and-how-to-stop-them","name":"Blockaid: Governance Takeovers: How $22M Was Drained and How to Stop Them","type":"research","archive_url":"http://web.archive.org/web/20260827002143/https://blockaid.io/blog/governance-takeovers-how-22m-was-drained-and-how-to-stop-them","credibility":2,"archive_timestamp":"2026-08-27T00:21:43+00:00"},{"url":"https://bitcoinist.com/token-of-power-governance-exploit-drains-1-58-million-in-weth-trm-says/","name":"Bitcoinist: Token Of Power Governance Exploit Drains $1.58 Million In WETH, TRM Says","type":"news_article","archive_url":"https://web.archive.org/web/20260925121853/https://bitcoinist.com/token-of-power-governance-exploit-drains-1-58-million-in-weth-trm-says/","credibility":2,"archive_timestamp":"2026-09-25T12:18:53+00:00"},{"url":"https://ambcrypto.com/governance-takeover-lets-attacker-mint-10b-top-tokens-in-1-5m-exploit/","name":"AMBCrypto: Governance takeover lets attacker mint 10B TOP tokens in $1.5m exploit","type":"news_article","archive_url":"http://web.archive.org/web/20260610084227/https://ambcrypto.com/governance-takeover-lets-attacker-mint-10b-top-tokens-in-1-5m-exploit/","credibility":2,"archive_timestamp":"2026-06-10T08:42:27+00:00"},{"url":"https://www.kucoin.com/news/flash/token-of-power-governance-attack-drains-1-58m-via-balancer-pool","name":"KuCoin: Token of Power Governance Attack Drains $1.58M via Balancer Pool","type":"news_article","archive_url":null,"credibility":2,"archive_timestamp":null},{"url":"https://x.com/GoPlusSecurity/status/2077368534628458801","name":"GoPlus Security (X/Twitter): Vulnerability Analysis of BarnBridge SMART Yield exploit","type":"social_media","archive_url":null,"credibility":2,"archive_timestamp":null},{"url":"https://blocksec.com/blog/web3-security-barnbridge-defituna-exploits","name":"BlockSec: ~$1.35M Lost: BarnBridge, DeFiTuna","type":"research","archive_url":"http://web.archive.org/web/20260821202012/https://blocksec.com/blog/web3-security-barnbridge-defituna-exploits","credibility":2,"archive_timestamp":"2026-08-21T20:20:12+00:00"},{"url":"https://www.kucoin.com/news/flash/barnbridge-smart-yield-protocol-hit-by-governance-attack-suffers-776-000-loss","name":"KuCoin: BarnBridge SMART Yield Protocol Hit by Governance Attack, Suffers $776,000 Loss","type":"news_article","archive_url":"http://web.archive.org/web/20260727173209/https://www.kucoin.com/news/flash/barnbridge-smart-yield-protocol-hit-by-governance-attack-suffers-776-000-loss","credibility":2,"archive_timestamp":"2026-07-27T17:32:09+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-investigator","created_at":"2026-09-25T12:10:30.369938+00:00","updated_at":"2026-09-25T16:54:48.523283+00:00"}}