Worked example · 2023-04

Arbitrum Foundation governance bypass and treasury transfer — Ethereum — 2023-03/04

Loss

no hack and no theft. Under AIP-1 the Arbitrum Foundation sought control of 750 million ARB (about $1 billion at the time) from the DAO treasury; reporting says the tokens appear to have been sent to the Foundation before token holders approved, and token holders were voting heavily against AIP-1. The Foundation also sold 50 million ARB from that allocation before the vote (40 million to an "experienced market participant", the rest for fiat to cover costs). The Foundation split AIP-1 into separately voted proposals (announced 2023-04-05) and pledged not to move the remaining 700 million ARB until the DAO approved a budget and vesting schedule. A later proposal to return 700 million ARB to the DAO treasury (AIP-1.05) failed on 2023-04-15 (84.01% against).

OAK Techniques observed

OAK-T16.002 (Hostile Vote Treasury Drain) — broadly construed; the Arbitrum Foundation exercised de facto governance authority over the DAO Treasury by taking control of 750M ARB tokens ahead of, and despite, a token-holder vote that was going heavily against it. The structural shape — treasury assets moved by a controlling entity without token-holder governance approval — is the defining T16 pattern, even though the entity exercising control was the protocol's own Foundation rather than an external adversary. The case is not a clean adversarial-technique anchor — the Foundation was not an attacker in the conventional sense — but is included in the OAK corpus as the cleanest documented example of the legal-wrapper-governance-bypass risk surface, which is a standing structural risk for every DAO whose treasury is held by a legal entity that can exercise control outside the on-chain governance process. Flagged for TAXONOMY-GAPS.md as evidence that the T16 surface includes both adversarial exploitation of governance mechanisms AND legal-wrapper governance bypass by protocol-affiliated entities.

Attribution

confirmed (protocol's own Foundation). The Foundation's decisions are on the public record via its own communications, the Arbitrum DAO governance forum and contemporaneous press coverage. No adversarial attribution is necessary; the entity exercising control was the protocol's own steward.

Corrected 2026-10-11

the earlier text said the Foundation returned the 750M ARB to the DAO treasury and that the loss was effectively zero; sources show the return proposal failed, 50M ARB was sold before the vote, and the transfer was not "discovered" on a specific 2023-04-01 date. Unsourced dates, a "Cayman Islands" detail and the 625K-address airdrop figure were removed.

Key teaching point

A legal-wrapper entity that can move DAO Treasury tokens without on-chain token-holder approval is a single point of governance failure, regardless of that entity's intent. The structural risk exists for every protocol whose treasury is held by a legal entity that exercises practical control over treasury multisigs; here the community's social pressure won concessions (a split proposal, a vesting contract, lower proposal thresholds) but did not reverse the transfer.