On June 7, attacker exploited weak governance controls to pass malicious proposal ID 52, gaining admin access to token proxy. Attacker modified ABep20Delegate with backdoor to extract funds from users with active token approvals.

A governance attack on the BSC eco-protocol Atlantis Loans, in which attackers gained control of the contract and replaced it with a contract containing backdoor functionality to transfer user assets, is currently costing approximately $1 million. The attackers created the malicious governance proposal in the GovernorBravo contract on June 7, 2023.