Token of Power Exploit Drains $1.58M via Governance Flaw

In a move that highlights the escalating risks within decentralized governance structures, the Token of Power protocol suffered an exploit draining approximately 944 WETH worth $1.58 million from a Balancer V1 liquidity pool. The attacker exploited a governance misconfiguration in the Aragon DAO to mint unauthorized tokens and gain majority voting power, enabling the execution of malicious proposals to drain the pool. Blockchain security firms PeckShield, Cyvers, and Blockaid confirmed the incident occurred on the Ethereum network, noting that the small total supply of tokens facilitated the governance takeover.

This exploit occurs amidst a surge in DeFi security incidents, with Q2 2026 setting a record of approximately 70 separate exploits according to DefiLlama data. For context, this follows a separate $36 million breach at Humanity Protocol earlier in June (per KuCoin reports). Market data indicates that the stolen funds were funneled through Tornado Cash to obscure tracing, a method utilized in roughly 72% of crypto thefts linked to credential compromises this year according to Koinly research. The incident underscores a shift where attackers increasingly target governance logic rather than simple code bugs.

Traders should monitor liquidity levels in affected Balancer pools, with WETH trading at $1,670.99 (close June 12, 2026). Markets are awaiting a formal incident report or compensation plan from the Token of Power team as forensic analysis continues. Looking ahead, broader sentiment in digital assets may be influenced by macro factors such as the recent ECB communications, including Lagarde's speech on June 9, which continues to impact risk-on appetite across the decentralized finance sector.