We breakdown the recent Compound “governance attack”, including discussing whether “governance attack” is the right label for it or not; how it’s different from other attacks; and the broader trend of online vs offline governance attacks in general. We also discuss how to avoid, prevent, and respond to such governance attacks -- highlighting key differences between on-chain/ token-based/ digital voting systems vs. physical-world political systems around the world. What happens when you have activity from actors that the majority doesn’t necessarily agree with? How do you distinguish between good-faith and bad-faith activity, especially on-chain? And other such tricky questions?