Automation improves security and predictability by separating routine actions from human judgment. Rules constrain execution, while people handle exceptions. Worth revisiting as onchain operations scale in complexity and volume. ↓

As security incidents continue to increase across the crypto ecosystem, we’ve also seen a recent increase in malicious proposals targeting token-voting governance systems on Aragon. These proposals are designed to get control of enough tokens to drain liquidity pools. This isn’t unique to Aragon, but it’s a good reminder to review your governance setup, monitor proposals closely, and make sure appropriate safeguards are in place. Depending on your governance model, there are several ways to strengthen security: • Extend voting durations and add timelock stages. Longer voting windows and a timelock before execution give token holders, contributors, and security teams more time to identify malicious proposals and coordinate a response. If your governance process allows early execution, consider using standard voting so proposals can never execute before the voting period ends. • Restrict proposal creation. Limiting proposal creation to members of your governing bodies, or requiring a minimum token balance to create a proposal, can reduce spam and opportunistic attacks while preserving decentralized governance. • Review quorum settings. Make sure treasury proposals require meaningful token holder participation before they can pass, and periodically review quorum thresholds as voter participation and governance activity evolve. • Consider optimistic governance with a token holder veto. In this model, a trusted group such as a core team or multisig creates proposals, while token holders retain the ability to veto them during a protected objection window. This reduces voting overhead while preserving decentralized control, but it depends on token holders actively monitoring proposals and responding before the objection window closes. Governance security is an ongoing process, and every project should regularly review its governance configuration as threats evolve. We’ll continue building tools to make governance and execution more secure while helping projects strengthen their governance. If you’d like us to review your setup or discuss additional protections, our team is happy to help. Please reach out.

1/ Two new cohorts, 20 new teams, the same one goal: harden Ethereum through accessible world-class security. From restaking and stablecoin infra to onchain governance and agent-powered commerce, we’re thrilled to officially welcome Cohort II and III to the Ethereum Security Subsidy Program! Together, as always, with @ethereumfndn, @nethermind, and @chainlinklabs.

Timelocks are an essential secure execution primitive. They create deterministic windows for monitoring, human review, incident response, and security council intervention before onchain actions become irreversible.

COW by @CoWSwap has been added to the OTF dashboard. The OTF maps ownership and value accrual mechanisms to help investors evaluate tokens on fundamentals. Explore the COW report. ↓

We’re proud to be working with the 3F team to ensure secure execution. Unlike most projects who run with a single stage multisig we’ve implemented multi-stage & party signing including automated verification. Proud to be working with one of the fastest growing RWA teams!

We’re proud to support the @MinaFoundation with the rollout and operation of its decentralized treasury. Our focus is secure operations, progressive decentralization with evolving safeguards, and supporting the Mina community as the treasury moves toward independent operation.

New Ethereum security resource from the @Giveth x @thedaofund security funding round. Includes a methodology and sample reports to map permissions and control paths beyond standard code reviews, improving access control risk assessment and reporting.

One of the best parts of working with a team of builders: they see a problem, create a tool to solve it, and open source it for others. Check out this helpful tool built by one of our lead developers. ↓

Epoch 9 voting just opened. Stake KAT, get vKAT, and vote on where KAT rewards flow. Voters earn incentives for backing pools. Manual: you pick the pools. Auto: routes to the highest-incentive pools. avKAT: routes and autocompounds for you.

We're live with @auryn_macmillan @post_polar_ and @A_Leutenegger for a conversation about breakthroughs in private voting. Join to learn more about @theInterfold, their secret ballot solution, and the network enabling it all.

Why private voting matters for onchain governance? Join us and @AragonProject tomorrow to discuss private, verifiable voting using @theInterfold's CRISP on Aragon OSx. With @auryn_macmillan, @A_Leutenegger & @post_polar_ 📅 Thursday, 9 July ⏰ 2pm UTC

Confidential execution needs governance that protects its core properties, and FOLD is a critical part of @theinterfold’s long-term network design. Explore the FOLD launch to participate in the network and its future governance.

The @zama protocol secures its protocol by distributing control over critical operations to a set of operators with equal voting weight. Using an Aragon executor, the system governs critical functions such as contract updates, operator changes, and cryptographic parameters.