Governance Can't Stop, Won't Stop: BonkDAO Drained of $20M After a $4M Vote 🗳️

BonkDAO, the decentralized autonomous organization behind the Solana-based BONK memecoin, confirmed that approximately $20 million worth of BONK tokens was removed from its treasury on Monday through what the project described as a "malicious governance proposal." The BONK team said it has notified law enforcement and is coordinating with exchanges, the Solana Foundation, bridges, and blockchain investigators to recover the funds and identify those responsible.

Preliminary on-chain analysis indicates the attacker acquired roughly $4 million worth of BONK to accumulate enough voting power to pass the proposal on Solana's Realms governance platform. Once approved, the proposal authorized the transfer of an estimated $20 million from the DAO treasury to wallets under the attacker's control. One blockchain investigator summarized the mechanics in a public post, writing: "Basically $4M worth of BONK was used by the drainer to vote YES for taking $21M worth of BONK tokens from the DAO." Unlike a smart contract exploit, the incident was structured as a governance attack in which token-weighted voting was used to approve a malicious treasury transaction.

According to BonkDAO, portions of the stolen BONK have already begun moving to cryptocurrency exchanges, raising concerns that the attacker may attempt to liquidate the holdings. On-chain data reviewed by Arkham showed subsequent BONK transfers originating from addresses linked to the exploit. The team stated it has identified the exchange wallets used to purchase BONK ahead of the proposal and is sharing that information with relevant counterparties as part of the recovery effort.

The BONK token fell more than 10% on the news, according to BeInCrypto price data, while Cointelegraph reported a roughly 7% decline over 24 hours to about $0.05. The broader memecoin sector has come under pressure in recent weeks, with the combined market capitalization of major tokens including Dogecoin ($DOGE), Shiba Inu ($SHIB), and Pepe ($PEPE) hitting a two-year low of approximately $22 billion before recovering to around $25.3 billion, down more than 54% over the prior 12 months, according to CoinMarketCap.

The incident comes as DAO governance security faces renewed scrutiny across the industry. In May, the memecoin launch platform DxSale reported losing $7.3 million in tokens following a cyberattack affecting liquidity providers on the BNB Chain. BonkDAO said its investigation is ongoing and that it will provide updates on fund recovery, exchange actions, and any governance reforms aimed at strengthening treasury protection.