A malicious governance proposal appeared in Moonwell's Moonriver deployment. The attacker approved the proposal in just 11 minutes and spent $1,800 to purchase 40 million MFAM tokens, threatening over $1.08 million in user funds. The proposal attempted to transfer control of the core contracts to the attacker. Although current voting results oppose the proposal, the final outcome depends on the final tally before the March 27 deadline or intervention by the protocol's emergency multi-signature guardians.