Helius co-founder flags governance attack, urges protocols to tighten quorum settings immediately
Mert Mumtaz, co-founder and CEO of Solana infrastructure provider Helius, posted an urgent on X on July 6 warning of a governance attack targeting crypto protocols. His message was blunt: tighten your quorum parameters and turn on your notifications. Now.
The post specifically called on Circle personnel to stay vigilant and coordinate with Helius, a detail that immediately raised eyebrows given Circle’s role as the issuer of USDC, one of the largest stablecoins in crypto.
What we know so far
Mumtaz did not name the specific protocol, token, or on-chain transaction involved in the attack. What he did provide was a clear directive for teams to immediately review their governance configurations and ensure notification systems are active so that unusual proposals don’t slip through undetected.
The direct mention of Circle is notable. USDC operates across multiple chains and interacts with numerous DeFi protocols that use decentralized governance models. If the attack vector involves a protocol that handles or integrates USDC, the downstream implications could be substantial.
No major crypto news outlets had independently verified or reported extensively on the specific attack as of the time of Mumtaz’s post.
Why governance attacks keep happening
Governance attacks are not new. The core vulnerability is structural: most DAOs struggle with voter apathy. When only a small fraction of token holders regularly participate in governance votes, the quorum threshold, the minimum number of votes needed to make a proposal valid, becomes the critical variable.
Attackers know this. Common strategies include accumulating governance tokens quietly over time, borrowing them through flash loans for a single vote, or simply timing proposals to coincide with low engagement periods like weekends or holidays. July 6 fell on a Sunday, which is not exactly peak governance participation time.
Mumtaz’s emphasis on notifications is equally important. Many governance systems allow proposals to go live with relatively short voting windows. If token holders aren’t actively monitoring, a malicious proposal can reach quorum and execute before anyone realizes what happened.
Helius, which Mumtaz co-founded alongside Liam Vovk and Nicolas Pennie in 2022, provides RPC nodes, APIs, and data indexing tools for the Solana ecosystem.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Wall Street giants collectively raise rate hike forecasts, US Treasury futures continue to fall, gold drops over 1% to break 4000
After the US October CPI exceeded expectations, Goldman Sachs and Nomura added a forecast for an interest rate hike in March next year, while Deutsche Bank included a forecast for a rate hike in January next year. Currently, the market has fully priced in a 25 basis point rate hike in December, with a 13% probability for a 50 basis point hike. On Wednesday, the US Treasury spot market was closed, but Treasury futures continued to fall, with corresponding yields rising by about 2 to 4 basis points, and spot gold came under pressure, dropping by 1.1%.
No Need to Worry About the Cooling Down of AI Data Center Construction? The US Import Boom Is Unlikely to Subside in the Short Term, Real Impact May Come in 2029
It takes an average of 4.8 years from finalizing investment to starting construction of a data center project, and an additional 2.6 years from construction start to becoming operational. Servers usually cannot be installed until after the building structure and racks are completed. For trade partners such as Taiwan (China), South Korea, and Mexico who rely on US data center supply chain demand, the inertia in construction timelines provides at least a one- to two-year buffer for future exports.
Federal Reserve Major Debate: When Should the Tenure of “Number Three” Williams End?
The main point of contention is whether Williams should step down in June 2028, upon completing a full 10-year term, or in June 2027, when he reaches the mandatory retirement age of 65. Analysts point out that the Federal Reserve Board holds ultimate discretion; if he leaves early, Fed Chair Waller would be able to assert greater control over the appointment to this critical position. However, forcing Williams to shorten his term could easily be interpreted as political manipulation. Williams himself is expected to serve until June 2028.
Crypto prices
More
