
An attacker met the minimum stake threshold to propose draining Umbra's treasury, but MetaDAO's decision market rejected the malicious bid at 28% odds.
Someone just tried to walk out of Umbra Privacy's treasury with roughly $1.5 million in USDC. The attacker met the minimum stake threshold on MetaDAO to submit a governance proposal that would have drained between $1.5 million and $1.57 million from Umbra's treasury. It was the first proposal on MetaDAO to ever meet that threshold.
MetaDAO does not use standard token-weighted voting. It runs on a futarchy model where participants bet on whether a proposal will be good or bad for the project through decision markets. If the market prices a proposal as harmful, it gets rejected. If it prices the proposal as beneficial, it passes.
The decision market priced the malicious proposal at roughly 28% likelihood of passing. The proposal was rejected.
Umbra Privacy operates as a privacy layer on Solana, offering zero-fee asset shielding. The project ran a community sale through MetaDAO in October 2025 that generated over $154 million in commitments for a capped raise of just $3 million.
The Solana ecosystem has seen this before. BonkDAO reportedly lost $20 million through a governance exploit in July 2026, just weeks before the Umbra attempt.
Futarchy has been a theoretical darling in crypto governance circles for years, drawing from economist Robin Hanson's original concept. MetaDAO is one of the most prominent implementations on any blockchain.
A genuine attacker with genuine stake submitted a genuine proposal to steal genuine money in early August 2026. The system caught it and rejected it. The 28% pass probability suggests the margin of safety was not enormous. A more sophisticated attacker who also manipulated the decision market could theoretically push those odds higher.
The fact that the minimum stake threshold was met for the first time is also worth tracking. A threshold that seemed adequate at launch might become trivially cheap for a well-funded attacker as token values and treasury sizes fluctuate.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.