StrongBlock Governance Attack Drains $72K via Abandoned Upgrade Control
A StrongBlock governance attack drained about $72K in STRONG and STRNGR after an attacker hijacked admin rights through the protocol’s abandoned governance system. Defimon Alerts says the attacker gained the majority of STRONG voting power, passed a malicious on-chain proposal, and moved control of the Governor proxy to their address.
Crucially, the theft did not require breaking smart-contract code or bypassing access controls. The attacker used governance as designed: they upgraded the Governor proxy to a malicious implementation and then used the Governor’s authority to execute arbitrary transactions and move funds from the protocol pool.
Stolen assets totaled 32,695 STRONG and 383,447 STRNGR (roughly $72K at the time). For traders, the event reinforces a key risk: even “abandoned” or low-participation protocols can still retain active upgrade/governance permissions on-chain.
Implication: any weakening confidence around STRONG governance mechanics can pressure sentiment and liquidity, so monitor proposal activity, proxy/admin changes, and follow-on market reactions to STRONG and STRNGR.
Bearish
This is a STRONG-related governance takeover where the attacker used legitimate voting and upgrade pathways rather than a code exploit. That increases perceived protocol/control risk and can quickly dent sentiment around STRONG and STRNGR. In the short term, traders may sell on the headline and uncertainty about remaining governance parameters. In the long term, any mitigation (revoking upgrade rights, multisig, timelocks) could stabilize sentiment, but the immediate effect is usually negative because governance/admin exposure is hard to quantify and may trigger additional risk-off positioning for STRONG holders.