DAO treasuries sit behind governance contracts, and governance is an attack surface like any other. This talk catalogs ten ways onchain governance gets taken over or ground to a halt: flash-loaned voting power, decaying quorums, proposal spam, timelock capture, delegation markets, and more. Each is grounded in a real incident or disclosed vulnerability, and each ends with the mitigation that now exists. If your protocol has a governor and a treasury, this is the threat model you inherited.