Bonk DAO Just Got Played: $4M Buy, $20M Vanish 🦴

BONK DAO confirmed that roughly $20 million in BONK tokens were drained from its treasury through a malicious governance proposal, with the meme coin falling more than 10% on the news. The project said it has identified exchange wallets used to acquire voting power ahead of the exploit and is now coordinating with exchanges, the Solana Foundation, bridges, and law enforcement to track and potentially recover the assets.

Preliminary on-chain analysis cited by blockchain investigators indicates the attacker purchased approximately $4 million worth of BONK to secure enough voting power to pass the proposal on Solana's Realms platform. Once approved, the proposal authorized a transfer of an estimated $20 million from the DAO treasury, with the manipulation carried out entirely through legitimate token-weighted voting rather than a smart contract exploit.

"Basically $4M worth of BONK was used by the drainer to vote YES for taking $21M worth of BONK tokens from the DAO," one on-chain investigator wrote. Portions of the stolen BONK have begun moving to cryptocurrency exchanges, according to transaction data reviewed by Arkham, raising the prospect of liquidation attempts by the attacker.

BONK DAO stated that recovery efforts remain underway and that updates will be shared as the investigation progresses. The incident is expected to intensify discussion across the industry around DAO governance safeguards, including timelocks, multisignature approvals, and treasury execution delays intended to prevent a single proposal from draining protocol funds.

The breach adds BONK DAO to a growing list of decentralized organizations that have lost treasury assets to governance attacks in which voting power is accumulated specifically to authorize malicious treasury transfers.