StrongBlock Governance Hijacked as Attacker Drains $72K From Protocol

TL;DR

• StrongBlock lost approximately $72,000 in STRONG and STRNGR tokens after an attack that exploited its abandoned governance system.
• The attacker accumulated enough voting power to pass a proposal that transferred administrative control of StrongBlock’s Governor proxy contract.
• The incident showed that inactive protocols remain vulnerable as long as their contracts, permissions, and balances stay active on-chain.

The StrongBlock protocol suffered a loss of approximately $72,000 in STRONG and STRNGR tokens after an attacker used its inactive governance system to seize administrative control of key contracts. The blockchain security firm Defimon Alerts documented the incident and explained the mechanism used in detail.

The attacker acquired the majority of the voting power associated with STRONG, a token that had lost much of its value as activity in the project declined. With that accumulated power, they submitted and passed a proposal that redirected the Governor’s Upgrader contract to execute `setPendingAdmin(attacker)`, making their address the proxy’s administrator.

… Continue reading the full article at the original source below.