Yapeswap Governance Attack Due to Zero Quorum, Resulting in Approximately $21,900 Loss

according to SlowMist monitoring, the decentralized trading platform Yapeswap suffered an attack with losses of approximately $21,900. The root cause was that the WorkersUnion governance quorum was zero, allowing the attacker to pass a proposal with only about 0.000055% of voting power, transferring the feeToSetter permission of YapeFactory to themselves. The attacker then installed a malicious Registry, causing latestVault() to return fake vaults while vaults() still listed the real vaults. YapePair counted the misappropriated deposits as farming assets but did not obtain redeemable shares.