MakerDAO Governance Delegate Loses $11 Million in Phishing Scam
A MakerDAO governance delegate has lost $11 million worth of Aave Ethereum Maker (aEthMKR) and Pendle USDe tokens due to a phishing scam. The incident, detected by Scam Sniffer in the early hours of June 23, occurred after the delegate inadvertently signed multiple fraudulent signatures.
The scam involved the transfer of 3,657 aEthMKR tokens from the sender address â0xfb94d3404c1d3d9d6f08f79e58041d5ea95accfaâ to the recipient address â0x739772254924a57428272f429bd55f30eb36bb96,â with the transaction being confirmed in just 11 seconds. Arkham identified the victim as a MakerDAO governance delegate, a crucial role within the MakerDAO ecosystem. These delegates are responsible for voting on governance proposals, polls, and executive votes, significantly influencing the decisions within the Maker protocol.
Phishing scams involve cybercriminals posing as reputable entities to deceive individuals into providing sensitive information. In this case, the victim was tricked into signing multiple permit network phishing signatures, leading to the substantial loss of tokens.
The MakerDAO protocol relies on MKR tokenholders and delegates to vote on proposals, which progress from initial polls to final executive votes. Once a proposal is approved, it is implemented into the Maker protocol after a waiting period known as the Governance Security Module (GSM), designed to prevent sudden changes to the protocol.