【Crypto World】Recently, a security team discovered a serious vulnerability in Futureswap. The situation is as follows—attackers first submitted a malicious proposal, then used flash loans to accumulate a large amount of voting power within a single block, ultimately successfully passing the proposal. More troubling is that they gained contract permissions through this method, allowing them to transfer tokens from other users’ wallets at will.
This type of attack actually reflects a common risk in current DeFi governance mechanisms—the no-collateral nature of flash loans being exploited to manipulate voting rights. If you have assets on this platform, it is recommended to immediately check your wallet status and consider transferring funds to a safe place if necessary. Similar vulnerabilities may also exist in other DeFi protocols, so everyone should stay vigilant.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
23 Likes
Reward
23
5
Repost
Share
Comment
0/400
MidnightTrader
· 12-19 19:15
It's another flash loan scam, this time it's Futureswap's turn.
---
DeFi governance is really like this, the defenses are as fragile as paper.
---
Hurry and run, or the next one will be your own wallet.
---
How can such vulnerabilities still exist? Developers are really careless.
---
Daring to conduct voting rights with flash loans without collateral is outrageous.
---
I just want to know when there will be a truly secure governance mechanism.
---
Fund transfer permissions can be manipulated, what's the point of playing around?
---
As expected, only being vigilant is real; everything else depends on luck.
View OriginalReply0
AirdropHarvester
· 12-19 17:42
Flash loans are causing trouble again; DeFi governance is really outrageous.
View OriginalReply0
ChainChef
· 12-17 04:49
ngl this is basically futureswap's recipe getting burnt mid-simmering... flash loans cooking up governance manipulation in one block? that's some half-baked protocol design right there. the whole "no collateral needed" ingredient was always gonna be exploited eventually tbh. anyone still marinating their tokens there should honestly pull them out asap, this flavor's turned rancid.
Reply0
ZenZKPlayer
· 12-17 04:44
Flash loans are causing trouble again; the governance loophole this time is truly outrageous.
View OriginalReply0
PonziDetector
· 12-17 04:33
Flash loans are causing trouble again. I've seen this trick too many times. DeFi governance is just a big sieve.
Warning! Futureswap suffers a flash loan attack, and the attacker gains access through malicious proposals
【Crypto World】Recently, a security team discovered a serious vulnerability in Futureswap. The situation is as follows—attackers first submitted a malicious proposal, then used flash loans to accumulate a large amount of voting power within a single block, ultimately successfully passing the proposal. More troubling is that they gained contract permissions through this method, allowing them to transfer tokens from other users’ wallets at will.
This type of attack actually reflects a common risk in current DeFi governance mechanisms—the no-collateral nature of flash loans being exploited to manipulate voting rights. If you have assets on this platform, it is recommended to immediately check your wallet status and consider transferring funds to a safe place if necessary. Similar vulnerabilities may also exist in other DeFi protocols, so everyone should stay vigilant.