Ampleforth’s 54th governance proposal has been flagged as a suspected malicious measure that would transfer nearly all of the 2.538 million USDC held by a time-locked treasury contract to the proposer’s address, according to details disclosed in the proposal.

The proposal is titled “SPOT Completed Work Grant” and is described as seeking a treasury transfer to the proposer’s own address. Based on the disclosed figures, the amount involved is close to the entire USDC balance held by the relevant time-locked contract.

The proposer said they authored the measure and would self-vote through a representative wallet holding 87,238 FORTH. That stake is only modestly above the stated proposal threshold of 75,000 FORTH, raising concerns about how cheaply a treasury-targeting proposal can be introduced under the current governance design.

According to the disclosed calculation, with FORTH priced at $0.22 per token, the cost to assemble the minimum required position would be about $132,000. The proposal has been described as suspected malicious activity, but the available information does not confirm whether it has secured broader support, whether it can ultimately pass, or whether any defensive action has already been taken.

The incident centers on governance mechanics rather than a direct smart contract exploit. That distinction matters because treasury risk in decentralized protocols can come from voting structure, delegation concentration, and execution permissions, even when core contracts themselves are functioning as designed.

Why It Matters

This case highlights a recurring risk in on-chain governance: a protocol treasury may be exposed not only to code vulnerabilities but also to governance configurations that allow relatively small token positions to initiate high-impact proposals. For DAO participants, the episode puts proposal thresholds, delegate oversight, and treasury execution safeguards back into focus.

It also matters beyond Ampleforth because governance systems increasingly control stablecoin reserves, grants, and protocol-owned assets. A suspected attempt involving USDC from a treasury contract could sharpen scrutiny on how DAOs separate legitimate spending proposals from actions that redirect funds under the cover of normal governance procedures.