BEANSTALK FARMSBEANSTALK FARMSBEANSTALK FARMS
$182M EXPLOIT

  1function emergencyCommit(uint32 bip) external {
  2    // Get the proposer of this BIP
  3    address bipProposer = bip.proposer;
  4
  5    // Check proposal meets emergency threshold
  6    // BUG: Uses CURRENT voting power, not snapshot!
  7    require(
  8        balanceOfStalk(msg.sender) >=
  9            totalStalk().mul(C.EMERGENCY_THRESHOLD).div(100),
 10        "Governance: Must have >= 67% voting power"
 11    );
 12
 13    // If threshold met, execute IMMEDIATELY
 14    // No timelock, no delay, no cooldown period
 15    _execute(bip);
 16
 17    // THE FLAW: Flash loans can acquire Stalk instantly
 18    // by depositing into the Silo, then immediately
 19    // call emergencyCommit() with supermajority power
 20    // and execute ANY arbitrary code via a malicious BIP
 21}