Yapeswap suffered a governance mechanism vulnerability attack, resulting in a loss of approximately $21,900.

Yapeswap suffered an attack, losing approximately $21,900. The WorkersUnion governance mechanism has a zero quorum requirement, and a proposal that garnered approximately 0.000055% of the voting power transferred the feeToSetter privileges of YapeFactory to the attacker. The attacker deployed a malicious Registry contract, causing latestVault() to return a forged vault address. YapePair recorded the transferred deposits as farm assets but did not receive its redeemable share (Source: SlowMist).