BonkDAO Loses $20M After Malicious Governance Vote

BonkDAO reported that a malicious governance proposal removed roughly $20 million worth of BONK from its treasury. The organization said attackers purchased about $4 million in BONK before the vote and used exchange wallets to concentrate voting power.

The proposal moved BONK-denominated funds out of the DAO treasury once it passed. Low voter participation and a small number of addresses holding a large share of the vote-weight allowed the proposal to pass and execute before community members or treasury custodians intervened.

Investigators identified exchange-associated wallets that purchased BONK ahead of the vote and tied those wallets to the voting power used to carry the proposal. BonkDAO is coordinating with centralized exchanges, cross-chain bridges, the Solana Foundation and law enforcement to trace the funds and pursue recovery. The DAO has not disclosed whether any of the drained tokens have been recovered.

BonkDAO uses its BONK-denominated treasury to fund token utility, Solana public goods, ecosystem projects and grants. The organization said the loss could reduce resources available for planned grants, integrations and community programs and that it will review governance and treasury controls.

Planned changes under consideration include adding execution delays for approved proposals, raising quorum thresholds, limiting the voting power a single address can apply, creating formal proposal review windows, requiring multisignature or council checkpoints for large transfers, and splitting the treasury into separate buckets that restrict how much a single vote can move.

Security specialists working with the DAO described token-weighted approval as the pathway exploited in the attack: if a treasury can be accessed by a vote alone, acquiring or concentrating tokens can enable transfers that bypass on-chain technical safeguards. Where treasuries hold large amounts of liquid memecoins, execution delays and additional human review steps are being evaluated as practical controls.

BonkDAO identifies itself as the decentralized arm of BONK and says investigators continue to work with partners to manage the aftermath and propose governance and operational changes aimed at reducing the risk of similar drains in future votes.