An attacker accumulated 33%+ of TSD governance tokens by purchasing at low market prices, then proposed replacement of the token implementation contract with a malicious version via DAO governance vote. The attacker's voting weight passed the proposal, enabling the malicious contract to mint 11.8B TSD and immediately dump on PancakeSwap.