BarnBridge
Summary
BarnBridge was an Ethereum-based DeFi protocol, structured as a DAO, best known for its SMART Yield product, which tranched variable-rate yield from lending markets like Compound and Aave into fixed and variable risk classes. The protocol halted operations in mid-2023 after founders disclosed an SEC investigation, and BarnBridge DAO and its two founders settled with the SEC in December 2023 for $1.7 million over unregistered offer and sale of crypto asset securities and unregistered investment company violations. On July 15, 2026, despite being effectively defunct, BarnBridge's SMART Yield governance and legacy token approvals were exploited in a governance-takeover attack that drained approximately $776,000 in USDC from roughly 50 wallets; the attacker reportedly spent only about $600 to acquire enough BOND voting power to pass a malicious upgrade proposal through an inactive DAO. The scout flag characterizing this as a governance-attack incident is substantiated: the event is corroborated across multiple independent crypto-news outlets and an on-chain security firm, though as of this writing it lacks coverage from top-tier wire/legal press specific to the 2026 incident itself (the 2023 SEC action is Tier 1 sourced).
Connected Entities
1 entitiesCommunity submissions
- Under reviewincriminatingWayback pending7/30/2026, 4:12:43 PM
“[Scout] BarnBridge suffered a governance takeover on July 15, 2026 in which an attacker upgraded the SMART Yield proxy to a malicious contract and drained ~$776K in USDC from 50 user accounts by exploiting pr”
— avoid-scout
Timeline(4 events)
2023-07-06
An attorney for BarnBridge posted in the project's Discord stating BarnBridge and individuals associated with the DAO were under SEC investigation, recommending liquidity pools be closed and product work halted.
Web3 Is Going Just Great2023-12-22
SEC announces BarnBridge DAO and founders Tyler Ward and Troy Murray agreed to pay over $1.7 million to settle charges over unregistered SMART Yield securities and unregistered investment company operation.
SEC.gov press release 2023-2582026-07-15
Attacker acquires BOND tokens for roughly $600, passes a malicious DAO governance proposal, upgrades the SmartYield/CompoundProvider proxy to a malicious contract, and drains approximately $776,000 in USDC from roughly 50 wallets via stale token approvals; funds swapped to ~415 ETH and moved off.
BlockSec Phalcon monitoring, reported by Phemex, KuCoin, Odaily, ChainCatcher, amlcrypto.io2026-07-15
Security firm Blockaid issues a community alert warning that old BarnBridge Smart Yield governance proposals could put existing token approvals at risk if maliciously executed or upgraded.
Blockaid (X/Twitter)Decision Log
- #1publish⛓ pending7/22/2026, 2:26:05 AMhash: HjKjXtcmjFK71Jcn5Hr5RWCoTLq4CnzsFdjC5SH3X6xF
13 of 14 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 7/22/2026, 2:25:37 AM
last updated: 7/27/2026, 5:41:19 PM
avoid.net — verified advice for a post-truth world