ENS DAO activates two-year Security Council to veto malicious governance proposals

Why ENS added the council

The council’s role is to provide a final safeguard during ENS governance’s built-in two-day timelock. After a proposal passes, it does not execute immediately. Instead, it enters a waiting period during which the community can review the queued transaction. During that window, the council may step in and cancel a proposal if it fits ENS’s stated definition of a malicious or exploitative attack.

ENS said the body was introduced in response to recent governance attacks, including the $20 million BonkDAO treasury drain incident. The new arrangement gives the DAO an emergency cancellation mechanism at a moment when successful proposals are otherwise only waiting to be executed.

Scope and limits of the veto power

The Security Council operates under a five-of-eight multisig setup, meaning at least five members must agree in order to block a transaction. Its authority is narrow. It can veto queued transactions, but it cannot rewrite governance proposals or move treasury funds.

ENS also drew clear boundaries around when the council should act. Its mandate is intended for cases involving stolen governance credentials, fraud, vote buying, flash loans, and similar efforts to obtain voting power through means outside normal market participation. By contrast, a proposal that is merely controversial or politically divisive is not, by itself, grounds for intervention.

That distinction is central to the design. Most proposals are still expected to move through voting and execution without any action from the council. The new body is meant to be used only when a passed proposal appears to be the product of an attack rather than ordinary governance.

Who is on the council

The eight members are ENS founder Nick Johnson, Hudson Jameson, Pablo Sabbatella, Colton Liberacki, Kevin Gaspar, Alex Van de Sande, Griff Green, and Alex Netto. They were chosen through a ranked-choice election conducted under governance proposal EP 6.50.

The previous council’s cancellation authority is due to expire on July 24. ENS activated the replacement before that deadline so the DAO would not be left without an emergency veto mechanism during the handover. The newly installed council’s term runs until July 16, 2028, giving it a two-year mandate.

Why the transition matters

By activating the new council before the prior authority lapses, ENS is trying to avoid a gap in its defensive governance tools. The system does not change the ordinary path for proposals that pass a vote, but it adds one last review stage during the timelock in case a successful proposal is later identified as malicious.

The change reflects a broader concern across decentralized governance systems: how to preserve open, token-based decision-making while maintaining some protection against attacks that exploit voting mechanics rather than winning support through standard participation. In ENS’s case, the Security Council is intended to serve as a narrowly scoped check, with its powers limited to canceling suspicious proposals before execution and only under defined emergency conditions.