Rarible DAO faces active governance takeover attempt via malicious proposal granting full control to attacker "Falcon" through delegatecall exploit.
Security & Exploits ·
An account labeled "Falcon" holding approximately 132.5K veRARI tokens submitted a governance proposal to the Rarible DAO, surpassing the 5,000 token threshold required to initiate proposals. The proposal explicitly aims to transfer complete DAO control to the proposer, according to its stated text, and remains open for voting with no treasury movements executed as of the submission date in late September.
The exploit leverages a delegatecall mechanism through a minimal four-line contract designed to write a value of 1 into an access control slot. When invoked through the DAO's executor via delegatecall, this operation grants the attacker elevated permissions within the governance contract itself. The attack vector bypasses traditional authorization checks by performing a raw storage write operation that directly modifies role assignments.
The core vulnerability centers on the DAO's use of delegatecall to execute external code without sufficient validation of the target contract's logic. The attack remains contingent on proposal approval through the voting mechanism; if ratified, execution would transfer operational authority of the DAO and its treasury to the attacker. Whether sufficient governance votes exist to pass the measure, or whether community members or security watchers will intervene, remains unresolved.