YAM Finance is facing a governance takeover attempt after an attacker self-delegated about 504,000 YAM, roughly 3.3% of supply and just above the voting quorum, then submitted YamGovernorAlpha proposal #45. Detected by Defimon, the on-chain monitoring service run by Decurity, the empty-description proposal makes a single call to set the attacker’s address as pending administrator of the YAM Timelock. If approved and executed, the address could accept admin rights and control protocol contracts and the DAO treasury, putting an estimated $337,000 at risk. No treasury loss had been reported at the time of the alert because the proposal still had to pass and execute. With the protocol largely dormant, Defimon urged holders to vote against the proposal before block 25,897,343, about 34 hours from the alert.