For every successful DAO, there are dozens that failed — and the failure modes are instructive. Wonderland DAO collapsed in January 2022 when its treasury manager, 0xSifu, was revealed to be Michael Patryn, co-founder of the fraudulent QuadrigaCX exchange. The revelation that a convicted fraudster was managing hundreds of millions in DAO funds highlighted the anonymous-governance problem: token holders had voted to trust someone they knew nothing about.
Mango Markets DAO was exploited in October 2022 by Avraham Eisenberg, who manipulated the MNGO token price to drain $115 million from the protocol. Eisenberg then proposed a DAO vote to legitimize the theft as a “bug bounty” — arguing that he had used the protocol as designed. The DAO voted against his proposal, but the episode raised uncomfortable questions about the line between exploitation and legitimate use in permissionless systems. Eisenberg was later arrested and convicted of market manipulation.
Build Finance DAO experienced a “hostile governance takeover” in February 2022, where an attacker accumulated enough governance tokens to pass a proposal giving themselves control of the treasury. The attack was perfectly legal within the DAO’s governance rules — the attacker simply bought voting power on the open market and used it. The episode demonstrated that token-based governance is fundamentally vulnerable to capital attacks.
The collective lesson from these failures is that DAOs don’t eliminate trust — they redistribute it. Instead of trusting a CEO, you trust code, governance processes, and anonymous pseudonymous actors. The attack surface changes but doesn’t disappear. The most resilient DAOs are those that acknowledge these risks explicitly and build layered defenses: timelocks on treasury actions, multisig requirements for large transfers, identity requirements for key roles, and clear processes for removing bad actors. Pure trustlessness is a myth. Managed trust is the achievable goal.
Leave a Reply