DEFI-CURVE-GOVPrivilege Escalation

Curve veCRV Vote Capture

Bribe / borrow veCRV via flash loan within a single block snapshot — pass gauge votes that redirect emissions to attacker pools.

§ Where this technique fits

DEFI-CURVE-GOV is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 2 on average.

§ Dossiers chaining this technique

Flash-loan veCRV → capture Curve gauge → emission redirect
Snapshot voting on Curve gauges uses veCRV balance at a specific block. Borrow large CRV via flash-loan, lock for max veCRV, vote in attacker pool's favour, unlock (or accept the limit) — emissions redirected for the epoch.
step 2 / 5

§ What commonly comes next

01
DAO Governance Takeover
W3-GOV-TAKEOVER · Privilege Escalation
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Flash-loan veCRV → capture Curve gauge → emission redirect

§ What commonly comes next