Build Finance DAO suffered a governance takeover when an attacker submitted a proposal to grant themselves minting and treasury controls. Low participation allowed the malicious proposal to pass unnoticed. The attacker minted 1.1 billion BUILD tokens, drained liquidity pools on Uniswap and Balancer, and stole 130,000 METRIC tokens from the treasury, ultimately extracting 160 ETH.

The venture capital DAO organization Build Finance tweeted that the project suffered a malicious governance takeover. The malicious actors successfully controlled the Build token contract by getting enough votes, minting 1,107,600 BUILD tokens in three transactions, and spent With most of the funds in Balancer and Uniswap liquidity pools exhausted, attackers continue to take control of the balancer pools via governance contracts and drain the remaining funds including 130,000 METRIC tokens, METRIC liquidity on Uniswap and Fantom Both pools subsequently came under intense selling pressure. As it stands, attackers have full control over governance contracts, minting keys, and treasuries, and the DAO no longer controls any part of critical infrastructure.