As security incidents continue to increase across the crypto ecosystem, we’ve also seen a recent increase in malicious proposals targeting token-voting governance systems on Aragon. These proposals are designed to get control of enough tokens to drain liquidity pools. This isn’t unique to Aragon, but it’s a good reminder to review your governance setup, monitor proposals closely, and make sure appropriate safeguards are in place. Depending on your governance model, there are several ways to strengthen security: • Extend voting durations and add timelock stages. Longer voting windows and a timelock before execution give token holders, contributors, and security teams more time to identify malicious proposals and coordinate a response. If your governance process allows early execution, consider using standard voting so proposals can never execute before the voting period ends. • Restrict proposal creation. Limiting proposal creation to members of your governing bodies, or requiring a minimum token balance to create a proposal, can reduce spam and opportunistic attacks while preserving decentralized governance. • Review quorum settings. Make sure treasury proposals require meaningful token holder participation before they can pass, and periodically review quorum thresholds as voter participation and governance activity evolve. • Consider optimistic governance with a token holder veto. In this model, a trusted group such as a core team or multisig creates proposals, while token holders retain the ability to veto them during a protected objection window. This reduces voting overhead while preserving decentralized control, but it depends on token holders actively monitoring proposals and responding before the objection window closes. Governance security is an ongoing process, and every project should regularly review its governance configuration as threats evolve. We’ll continue building tools to make governance and execution more secure while helping projects strengthen their governance. If you’d like us to review your setup or discuss additional protections, our team is happy to help. Please reach out.