Earlier this week, a bug was found in MakerDAO's voting contracts that could have moved user tokens and locked them in voting contracts. Luckily, the issue was caught before malicious actors took advantage.