EOS's ($EOS) governance protocol has a problem, and someone just exploited it to the tune of 2.09 million tokens. In EOS's delegated proof-of-stake (DPoS) system, 21 masternodes set the ground rules for on-chain transactions. The 21 nodes can lose their spots, however. Swapping spots with a masternode creates issues though, particularly concerning the EOS blacklist which automatically stops payments from known bad actors. Recently, a new masternode failed to update its blacklist in time with the rest of the nodes, allowing 2.09 million EOS to be moved and disseminated throughout the system. In light of this, new arbitration systems are being built.