BonkDAO lost $20 million to a malicious governance vote. No code was broken. That's the catch.
The attacker didn't find a bug in BonkDAO's contracts. They just passed a vote and walked out with the treasury.
CryptoVibe Desk · bonk · solana · dao
- →BonkDAO confirmed Monday that attackers drained approximately $20 million in BONK tokens from its treasury via a malicious governance proposal.
- →This is not a code exploit. The attacker used BonkDAO's own voting system, meaning any DAO treasury faces the same risk.
- →Watch whether exchanges freeze the funds within 48 hours of the incident, and whether BonkDAO publishes the on-chain proposal details to identify who voted yes.
- DAO → A group that controls shared funds and makes decisions by token vote, with no central authority or CEO.
- governance proposal → A formal request submitted to a DAO asking members to vote on moving funds or changing the group's rules.
BonkDAO lost $20 million on Monday. An attacker passed a malicious governance proposal through the DAO's voting system and drained the treasury.
No code failed. Governance that controls real funds is an attack surface, and that's the catch. This is the sharpest example on record for a major Solana memecoin treasury.
Two sources put the drain at $20 million, citing BonkDAO's official X account. BONK's price fell around 10% following the announcement, per BeInCrypto, though that figure comes from a single source.
The stolen funds have reportedly started moving to exchanges. BonkDAO said it is coordinating with exchanges, the Solana Foundation, and law enforcement. No named agency or jurisdiction has been confirmed.
If you hold BONK, the 10% drop is about recovery uncertainty. Watch exchange coordination over the next 24 hours.
BonkDAO is still quiet on the on-chain proposal ID, and that is the real problem now. Without a voter breakdown, exchanges cannot target specific wallets. The coordination it is promising cannot execute until that data is public.
A named exchange publicly freezing BONK withdrawals tied to the treasury drain within 48 hours of the incident, confirming the coordinated recovery effort has real reach.
Primary links and supporting reads used by the desk for this story.
Forward this.
