BarnBridge suffered a governance attack on July 15, 2026 when an attacker passed a malicious proposal, replaced the SMART Yield provider contract, and drained ~$776K by exploiting pre-existing USDC approvals from 50 users.

DeFi protocol BarnBridge suffered a governance attack on July 15, 2026. The attacker gained control of the DAO via a malicious governance proposal, upgraded the proxy contract to a malicious implementation, and drained approximately $776,000 USDC by exploiting pre-existing approvals from around 50 user addresses.