Kane Wallmann

Hi @CertiK you may want to take a look at this

If you have any delegated NDX voting shares, please read this. For the TL;DR - there are two transactions we're asking you to execute at the end of this post. A few days ago there was an attack on the Indexed treasury. We were able to defeat this proposal with the help of community members, but there is now a second attack that would transfer ownership of the Indexed timelock, and therefore the Indexed proxy manager, to the attacker. In anticipation of a second attack, we created a poison pill proposal that would permanently disable the timelock, removing the potential for a proxy upgrade attack but also burning the ~$80k it holds. We did this in order to lock in everyone's voting shares as quickly as possible, so that if the attacker bought more tokens we could at least prevent them from abusing proxy upgrades. We've also created a second proposal that would allow us to take control over the treasury so that we can distribute its assets rather than burning them, but we can only execute this if we're able to defeat the new attack; however, we're about 44,000 votes off from being able to do this. If we can get enough votes against the attack proposal by Friday, we'll be able to cancel the poison pill proposal and pass the alternative proposal, taking control over the treasury so we can distribute its assets. If not, we will be forced to execute the poison pill, permanently burning all assets in the Indexed treasury but preventing a much worse potential proxy upgrade attack. The address that proposed the first attack was linked to the DPRK by @zachxbt (xitter.gq/zachxbt/status/1…), and while this may simply be an opportunistic copycat, we believe we have a duty to prevent what may credibly be a Lazarus attack. We are asking anyone who still has delegated NDX voting shares to do the following: Vote against the attack proposal: tally.xyz/gov/indexed/propos… Vote for the new proposal: tally.xyz/gov/indexed/propos… The second proposal will transfer ownership of the timelock to a 2/3 multisig owned by Dillon Kellar (@d1ll0nk), pr0 (@not_pr0) and myself (@functi0nZer0).