Security
Governance attacks and the controls that stop them
Treasury-scale money attracts treasury-scale attacks. Nearly all of them target the execution path.
Vote-buying and flash-loan voting
Snapshot voting power at a block before the proposal opens so borrowed tokens cannot vote.
Payload substitution
Bind the vote to a hash of the calldata. If the payload changes, the authorisation dies with it.
Signer compromise
Distribute keys across people, devices and jurisdictions; require more signatures for higher-impact actions.