Someone drained $72,000 from StrongBlock by doing exactly what the protocol's governance rules allowed them to do. The attacker grabbed majority voting power in STRONG tokens, submitted a proposal to transfer administrative control, and used the newly gained access to drain assets from a project pool. Security firm Defimon Alerts tracked the incident, which saw 32,695 STRONG and 383,447 STRNGR tokens vanish.
This wasn't a conventional hack. The attacker didn't exploit a bug or break through access controls. Instead, the governance system worked precisely as designed, which made it the perfect weapon. STRONG had already lost most of its value as the project faded into dormancy. Voting power became cheap to accumulate, and once the attacker controlled enough tokens, the rest followed standard protocol procedure.
The assault moved through governance in stages. First came the proposal, directing the Governor's Upgrader contract to set the attacker as pending administrator. Votes passed. The transaction queued and executed on-chain. At that point, the attacker's address held administrator privileges over the Governor proxy, a contract that manages upgrades to StrongBlock's core logic.
With admin rights secured, the attacker replaced the Governor's implementation with a malicious version. This new contract contained a forward function accessible only to the attacker's account, turning the Governor into a tool for executing arbitrary transactions under its own authority. Since the Governor proxy held administrative privileges across the protocol, it could transfer tokens and modify state in ways the original governance structure never intended.
Upgradeable proxy architecture separates data storage from executable logic. An authorized admin can swap in new code without changing the contract's address, which sounds elegant until someone hostile gains that permission. In StrongBlock's case, it became the key vulnerability.
The stolen pool contained over 416,000 tokens combined, valued at roughly $72,000 when the theft occurred. The incident shows a recurring problem in abandoned projects. When development teams move on or projects lose traction, governance tokens become cheap to buy up. A determined attacker with modest capital can accumulate voting majorities in dormant systems, then reshape the protocol to their advantage using rules that were never designed with that scenario in mind.
This article covers technical security events in crypto and is provided for informational purposes only. It does not constitute financial advice or investment guidance.
