BonkDAO Governance Attack Drains $20M in BONK From Treasury

The governance arm of the BONK memecoin shared the news on July 6. According to the team, an attacker turned the DAO’s own voting system against it. As a result, a single proposal passed and swept funds out of the treasury.

What BonkDAO Confirmed

BonkDAO posted the statement from its official @bonk_inu account. In it, the team called the event a malicious governance proposal. It also said the attack drained roughly $20 million in BONK.

The team also said it already identified the exchange wallets behind the attack. Specifically, those wallets bought BONK before the proposal went live. So the buyers built voting power ahead of the drain.

The full statement sits on the official BonkDAO post. For now, it remains the only primary source on the incident.

How the BonkDAO Governance Attack Worked

BonkDAO runs on Realms, a governance platform built on Solana’s SPL Governance program. Holders deposit BONK into the DAO to earn voting power. In turn, that power lets them create and pass proposals.

Some proposals carry executable instructions. For example, a proposal can order a transfer of BONK from the treasury to a chosen wallet. Once voters approve it, the program runs the transfer on-chain.

The BonkDAO governance attack followed this exact path. First, the attacker bought large amounts of BONK on exchanges. Then the attacker deposited those tokens to gain voting power. Finally, a proposal moved the treasury’s BONK to attacker-controlled wallets.

Low participation makes this kind of attack easier. When few members vote, one large holder can dominate the outcome. Without a strong quorum or a timelock, the transfer then executes with little resistance.

Why DAO Treasuries Stay Vulnerable

Governance capture is a known threat across DeFi. Attackers target DAOs that hold large treasuries and lean on token voting. In many cases, the treasury dwarfs the cost of acquiring a voting majority.

That imbalance creates a direct incentive. If the treasury holds more value than the tokens needed to control it, an attack can pay for itself. The BonkDAO governance attack shows how quickly that math turns dangerous.

Following the Money

BonkDAO said it is working with exchanges, bridges, and the Solana Foundation. The team also notified law enforcement. Together, those steps aim to trace and freeze the stolen BONK.

On-chain watchers can track the treasury through its Solscan wallet. Recent data showed about 4.42 trillion BONK, or roughly $30 million. That figure lines up with a $20 million drain from a larger prior balance.

Exchanges could play a decisive role here. If the attacker sends BONK to a centralized platform, that venue can freeze the deposit. Because BonkDAO named the buy-in wallets early, the trail starts warmer than usual.

Bridges matter just as much. If the attacker moves BONK across chains, tracing gets harder fast. That risk explains why BonkDAO looped in bridge operators early.

Still, key details stay private for now. BonkDAO has not shared the proposal ID, the drain transaction, or the attacker wallets. As a result, independent analysts cannot yet verify the full path.

BONK Price Reacts to the Drain

BONK fell about 15% right after the announcement, according to multiple posts on X. The token traded near $0.000005 before the news. Meanwhile, trading volume climbed as holders reacted.

Memecoins often swing hard on headlines like this. So a 15% drop, while sharp, is not unusual for BONK. The bigger question is whether trust in the DAO recovers.

BONK still ranks among Solana’s largest memecoins. Its market cap sat in the $430 million to $450 million range around the event. Even so, the drain dented confidence in the project’s governance.

Community Questions the Timing

Reaction on X ran from panic to grim humor. Some users declared the project finished. Others urged calm and pointed to the recovery effort.

Many holders focused on the timing. Community reports say voting opened about six days before the public statement. Because of that gap, some asked why the warning came so late.

Past burn promises also resurfaced in the replies. Some holders recalled unfulfilled pledges and questioned the team’s follow-through. That history shaped how many read the latest statement.

BonkDAO framed its response as measured and ongoing. Critics, however, want a clearer account of the attack vector. That tension will likely shape the next few updates.

What BonkDAO Faces Next

The team says it will keep working with partners to recover funds and identify those responsible. Realistically, on-chain recovery depends on whether exchanges or bridges can freeze the assets. If the attacker already cashed out, some losses may prove permanent.

Stronger safeguards could follow. Higher quorums, timelocks, and veto windows all reduce the risk of a repeat. The BonkDAO governance attack will test how Solana DAOs handle treasury security.

This story is developing, and details may change as BonkDAO shares more. None of this is financial advice. Always research a project’s governance before committing funds.