On-chain solicitation for governance attack on Nouns DAO — attacker offering to split treasury drain proceeds 50/50 with someone holding 2 voting power.
Security & Exploits ·
An on-chain message sent to a Nouns DAO member solicited participation in a treasury drain exploit, offering a 50–50 split of proceeds. The attacker referenced a prior proposal that narrowly failed to pass, citing a shortfall of two votes and zero quorum, and claimed to possess functional exploit code. The message provided contact methods including a wallet address and email for coordination.
The solicitation proposed a specific attack vector: the targeted member would use their two voting power to propose and execute a drain transaction, with proceeds distributed through an on-chain splitter contract. This structure would allow the attacker to capture treasury value while distributing half to the participant without direct asset movement between the involved parties.
It remains unclear whether the targeted member engaged with the attacker, whether additional parties were solicited, or what state the exploit code—if it exists—currently occupies. No confirmation of a successful drain or further attempts has been established from the available material.