{"id":71103,"date":"2024-02-09T15:30:19","date_gmt":"2024-02-09T19:30:19","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=71103"},"modified":"2024-02-12T12:22:38","modified_gmt":"2024-02-12T16:22:38","slug":"report-shows-governance-poses-threat-to-75-of-top-tokens","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/report-shows-governance-poses-threat-to-75-of-top-tokens\/","title":{"rendered":"Report Shows Governance Poses Threat to 75% of Top Tokens"},"content":{"rendered":"\n

Web3 firm De.Fi report shows that significant governance risks are present in nearly 75% of the top tokens by volume as they do not adhere to best practices to prevent exploits and other security threats<\/a>.<\/p>\n\n\n\n

\"Report
Report Shows Governance Poses Threat to 75% of Top Tokens<\/figcaption><\/figure>\n\n\n\n

Nearly 75% of the 429 tokens with governance frameworks, according to an analysis by Web3 firm De.Fi, has contract-related risk factors, such as concealed owners and wallets with special permissions.<\/p>\n\n\n\n

Multisig wallets<\/a>, which necessitate the utilization of a maximum of five distinct private keys for transaction approval, administer a mere 16.6% of the contracts under examination. As stated in the report, the application is considered a tool for mitigating the risks associated with malware and phishing cyberattacks.<\/p>\n\n\n\n

Furthermore, it is worth noting that a wallet or externally owned account manages more than 38% of token contracts. This implies that a “wallet may invoke privileged functions of the contracts at any time.” The risk level may vary based on the permissions granted, according to De Fi's analysis:<\/p>\n\n\n\n

\n

\u201cFor example, if the wallet can only set a protocol fee within reasonable constant limits, there is no risk here. But, if it can replace critical addresses the contract interacts with, such as price oracles and vault strategies, user assets get under a direct danger.\u201d<\/em><\/p>\n<\/blockquote>\n\n\n\n

6.8% of contracts contain a hidden ownership provision that grants the contract creator the ability to revoke ownership and veto ballots. Additionally, 10% of the tokens have entered into renounced contracts. This signifies that their creators have relinquished their authority to alter the tokens' code or governance characteristics, complementing decentralization.<\/p>\n\n\n\n

Many initiatives entrust a single wallet proprietor with the security of their entire treasuries. Typically, these proprietors remain concealed, preventing DAO participants from verifying the identity of the fund manager. <\/p>\n\n\n\n

This has resulted in access control vulnerabilities, exploits, and rug pulls<\/a> worth billions of dollars, according to Artem Bondarenko, tech director at De.Fi.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Governance tokens, a form of cryptocurrency, give their possessors the privilege to engage in decentralized autonomous organization (DAO), blockchain projects, or protocol-related decision-making processes.<\/p>\n\n\n\n

De.Fi's Rekt database reveals that the top three governance breaches caused $414 million in losses, including smart contract exploitation by Multichain, Beanstalk Farm's flash loan attack via a governance proposal, and Tornado Cash\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a>‘s exploit via a malicious proposal.<\/p>\n\n\n\n

“However, it is critical to emphasize that although governance parameters may indicate that a token is vulnerable, it does not invariably result in a security breach.” <\/p>\n\n\n\n

“Numerous organizations that possess governance tokens have sophisticated security departments and procedures that are not necessarily on-chain or publicly tracked,” Bondarenko continued.<\/p>\n\n\n\n

According to the analysis, around fourteen percent of the contracts need to have governance mechanisms or disclose them.<\/p>\n","protected":false},"excerpt":{"rendered":"

Web3 firm De.Fi report shows that significant governance risks are present in nearly 75% of the top tokens by volume as they do not adhere to best practices to prevent exploits and other security threats. Nearly 75% of the 429 tokens with governance frameworks, according to an analysis by Web3 firm De.Fi, has contract-related risk […]<\/p>\n","protected":false},"author":1,"featured_media":71123,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[21],"tags":[5615,18359,17724,810],"class_list":["post-71103","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-tokens-2","tag-governance","tag-governance-tokens","tag-threats"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/02\/image-25.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/71103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=71103"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/71103\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/71123"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=71103"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=71103"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=71103"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}