Share this article
'Flash Loans' Have Made Their Way to Manipulating Protocol Elections
BProtocol used a flash loan to speed up election results on MakerDAO. The DeFi platform is now weighing changes to its voting process.
Updated Sep 14, 2021, 10:25 a.m. Published Oct 29, 2020, 5:45 p.m.
Make us preferred on Google
Flash loans can be used for more than just siphoning funds out of poorly put-together decentralized finance (DeFi) protocols.
STORY CONTINUES BELOW
That’s one lesson investors can learn from Israel-based startup BProtocol’s manipulation of flash loans to sway election results on DeFi legacy project MakerDAO earlier this week.
According to the MakerDAO community forum, on October 26, BProtocol borrowed 13,000 MKR tokens worth some $7 million through a flash loan from derivatives platform dYdX swapped for MKR on lending platform Aave. Voting with the flash-loaned MKR tokens enabled BProtocol to speed up desired election results for its project built on MakerDAO.
The “attack” was less an attack than yet another unexpected consequence of flash loans, a crypto-first product that made its debut in early 2020 with DeFi platform Aave.
Read more: Everything You Ever Wanted to Know About the DeFi ‘Flash Loan’ Attack
Flash loans enable an in-the-know trader to amass mad leverage behind a trade by providing a temporary loan that must execute and settle in one block space. Here – and perhaps for the first time – BProtocol borrowed millions of MKR tokens to sway a protocol election and hand back the money in one block.
Other DeFi degens have used flash loans to perform what is commonly known as an oracle attack. In these situations a project’s funds are at risk due to poor project infrastructure – typically, shoddy pricing feeds. This happened last Sunday with $1 billion protocol Harvest Finance, which had prices for its stablecoin pools swayed by a flash loan, resulting in a haircut for Harvest traders.
Flash votes
The ability to use flash loans to exploit governance events is fairly new, however. Holders of MakerDAO’s governance token typically decide how the platform changes.
But here BProtocol showed that if there are enough MKR tokens up for borrowing on DeFi markets, a flash loan can be used by just about anyone to sway Maker’s election results. All someone needs to do is wait to be last in line at the ballot and drop in the borrowed tokens, BProtocol CEO Yaron Velner said in a WhatsApp call.
Velner added he thinks the Maker Foundation was aware of the unlocked door BProtocol went through with its flash loan, and that the outcome of the vote would have likely been the same.
He said the team had been waiting extra days to be whitelisted for using MakerDAO’s pricing oracles and had become “curious” after months of studying Maker’s infrastructure to see if the flash loan was possible. So they decided to play a bit.
Read more: MakerDAO’s Embrace of Centralized Stablecoins Offers Risks and Rewards
Now MakerDAO community members and the Maker Foundation are considering options for “disincentivizing large MKR Holders from providing MKR Liquidity on Lending Platforms and AMM Platforms” until MakerDAO can blacklist votes using flash loans, according to the MakerDAO forum.
In lieu of comment, the Maker Foundation pointed CoinDesk to a community forum discussion from October 6 on limiting the use of flash loans for governance procedures.
More For You
KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.
What to know:
- KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
- This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
- Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
- Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
- Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.
More For You
Ethereum Foundation makes post quantum security a top priority as new team forms
EF researcher Justin Drake says a new post-quantum team will drive wallet safety upgrades, research prizes and test networks as quantum timelines shorten.
What to know:
- The Ethereum Foundation has elevated post-quantum security to a top strategic priority, forming a dedicated Post Quantum team led by Thomas Coratger with support from leanVM cryptographer Emile.
- Researcher Justin Drake said Ethereum is shifting from background research to active engineering, including biweekly developer sessions on post-quantum transactions and multi-client post-quantum consensus test networks.
- The foundation is backing new cryptography with funding and outreach, launching two $1 million prizes, planning post-quantum community events and education, and stressing that blockchains must prepare early for quantum threats despite their long-term nature.
Top Stories
