An attacker flashloaned $1B+ from Aave, Uniswap, and SushiSwap to gain 2/3 governance voting power and execute malicious proposals (Bip18 to drain the protocol, Bip19 to donate to Ukraine as cover), stealing $181M in non-Bean assets.

The protocol loss caused by the flash loan attack of Ethereum-based algorithm stablecoin project Beanstalk Farms is about 182 million US dollars. The specific assets include 79238241 BEAN3CRV-f, 1637956 BEANLUSD-f, 36084584 BEAN and 0.54 UNI-V2_WETH_BEAN . The attackers made over $80 million, including about 24,830 ETH and 36 million BEAN. The main reason for this attack is that there is no time interval between the voting and execution of the proposal, so that the attacker can directly execute malicious proposals without community review after completing the voting.