BONK DAO confirmed that attackers drained approximately $20 million worth of BONK tokens from its treasury through a malicious governance proposal. The attack utilized Solana's Realms governance platform, where the attacker accumulated roughly $4 million in BONK tokens to secure sufficient voting power to approve the treasury transfer. The stolen funds have begun moving to cryptocurrency exchanges, prompting BONK DAO to coordinate with exchanges, the Solana Foundation, and law enforcement for asset recovery. The BONK meme coin fell over 10% following the announcement. Unlike smart contract exploits, this incident represents a governance attack where token-weighted voting legitimately approved a malicious treasury transaction.
Attacker Used $4 Million BONK to Drain $20 Million Treasury
According to BONK DAO's official statement, the attacker purchased approximately $4 million worth of BONK tokens to secure enough voting power for the malicious proposal. Once the proposal was approved through the governance system on Solana's Realms platform, it authorized the transfer of an estimated $20 million from the DAO treasury to wallets under the attacker's control.
BONK DAO identified the exchange wallets used to accumulate voting power before the proposal was executed. Blockchain investigators confirmed that the incident was a governance attack rather than a smart contract exploit, with one expert stating: "Basically $4M worth of BONK was used by the drainer to vote YES for taking $21M worth of BONK tokens from the DAO."
Portions of the stolen BONK tokens have already begun moving to cryptocurrency exchanges, according to on-chain tracking data.
BONK DAO Coordinates with Exchanges and Law Enforcement for Recovery
BONK DAO stated it is working alongside exchanges, the Solana Foundation, bridges, and law enforcement to track the stolen assets and explore recovery options. The team confirmed the investigation remains ongoing.
The project announced these coordination efforts in its official statement on July 6, noting that it had identified specific exchange wallets involved in the attack.
FAQ
What happened to BONK DAO's treasury?
BONK DAO confirmed that attackers drained approximately $20 million worth of BONK tokens from its treasury through a malicious governance proposal on Solana's Realms platform. The attacker used roughly $4 million in BONK tokens to gain sufficient voting power to approve the treasury transfer.
How is BONK DAO responding to the governance attack?
BONK DAO is coordinating with cryptocurrency exchanges, the Solana Foundation, bridges, and law enforcement to track the stolen assets and explore recovery options. The team has identified the exchange wallets used to accumulate voting power before the attack and confirmed that portions of the stolen funds have begun moving to exchanges.
How did the BONK governance attack differ from a smart contract exploit?
The BONK incident was a governance attack where token-weighted voting was used to legitimately approve a malicious treasury transaction, rather than exploiting vulnerabilities in smart contract code. The attacker purchased enough BONK tokens to secure voting power and passed a proposal authorizing the $20 million transfer from the DAO treasury.
