1. The Expiring Kill-Switch Mechanism

The expiration of the ENS Security Council’s "cancel" role on June 26, 2026, significantly increases the risk of a governance attack on the ENS treasury. While the treasury holds approximately $350M in total assets, the estimated cost to acquire enough voting power to pass a malicious proposal is currently between $13M and $24M, creating a massive economic incentive for a "Treasury Raid" once the manual override expires [Source: https://ens-pulse.vercel.app/].

1. The Expiring Kill-Switch Mechanism

The "kill-switch" refers to the PROPOSER_ROLE held by a 4-of-8 Security Council multisig. This role allows the Council to unilaterally cancel malicious or buggy proposals before they execute from the DAO's timelock [Source: https://github.com/blockful-io/security-council-ens].

• Mechanism: The contract includes a renounceTimelockRoleByExpiration() function. This function is permissionless and becomes callable once a two-year lock period ends [Source: https://discuss.ens.domains/t/security-council-expiration].
• Deadline: The expiration is set for Unix timestamp 1784919179, which is June 26, 2026 [Source: https://discuss.ens.domains/t/security-council-expiration].
• Status: As of late June 2024, the DAO is in a "vulnerability window" where this safeguard is about to vanish, returning the protocol to a state where any passed vote executes automatically after a 7-day delay.

2. Treasury Exposure and Governance Vulnerabilities

The ENS DAO treasury is one of the largest in DeFi, but its governance structure shows high levels of concentration and low participation, making it a target for governance capture.

3. Potential Attack Vectors

Without the Security Council's ability to cancel proposals, the following vectors become viable:

• Governance Capture (The "Raid"): An attacker buys or borrows enough ENS to meet the 1% quorum and votes to transfer the treasury to a private wallet. With voter participation often below 5%, a concentrated whale can easily outvote the active community.
• Dormant Whale Activation: Large holders (e.g., 0x2454... with 2M+ ENS) could unilaterally pass proposals that the community cannot stop once the Council's role expires [Source: https://discuss.ens.domains/t/centralization-analysis-pre-ep-5-26].

4. Mitigations: The "Next Era" Restructuring

To prevent a treasury drain, a "Temp Check" proposal was introduced on June 19, 2026, to shift control to the ENS Foundation [Source: https://discuss.ens.domains/t/temp-check-next-era-of-ens-dao-empowering-the-ens-foundation/22175].

• Foundation Handover: The proposal moves ~$100M in liquid assets to a 4-of-5 multisig managed by the Foundation.
• Independent Oversight: The multisig includes independent directors (Kartik Talwar, Brett Sun, Anthony Leutenegger) to ensure no single entity can drain funds [Source: https://discuss.ens.domains/t/temp-check-next-era-of-ens-dao-empowering-the-ens-foundation/22175].
• Contention: Some community members argue this centralizes power and "decouples" the treasury from the ENS token, potentially reducing the token's utility [Source: https://thedefiant.io/news/defi/ens-dao-temp-check-empowering-ens-foundation-treasury-handover].

Conclusion

The expiring kill-switch does expose the treasury by removing the final manual safety valve against malicious governance. While the "Next Era" proposal aims to mitigate this by moving funds to a Foundation-managed multisig, the transition period remains high-risk due to the low cost of attack relative to the total treasury value.

Next Steps:

• Would you like a technical analysis of the ENS token's price action to see if "governance premium" or accumulation is occurring ahead of the expiration?
• I can monitor the "Next Era" proposal's voting status and alert you if it fails to reach quorum.