BarnBridge protocol subjected to governance attack, resulting in a loss of approximately $776000
--
According to BlockSec monitoring, the BarnBridge SMART Yield cUSDC protocol was subjected to governance attacks on Ethereum, resulting in a loss of approximately $776000. The attacker gained DAO governance privileges, upgraded the SmartYield/controller proxy to a malicious implementation contract, and used USDC authorization from 50 user accounts to transfer funds to the attacker's hands through transferFees.