BonkDAO's $20M "Sowellian" Heist: A 1% Vote, 4.4T Tokens, and a Whole Lot of Bleeding

BonkDAO confirmed on July 6, 2026, that an attacker drained an estimated $20 million worth of BONK tokens from its treasury through a malicious governance proposal executed on Solana's Realms platform. The proposal, titled "Sowellian BonkDAO," passed with low community participation and no execution delay, authorizing a direct transfer of 4.426 trillion BONK, valued at about $19.3 million, to an address ending in "JHvQ" at roughly 4:00 a.m. ET on Monday. That wallet, identified by Solana blockchain explorer Solscan as having been funded via a Bybit account, subsequently moved the funds to a separate Solana address ending in "eh42" around 3:30 p.m. ET.

Blockchain investigators reported that the attacker acquired approximately $4 million worth of BONK through Binance and Bybit in the days prior to the vote, securing enough token-weighted voting power to pass the proposal under BonkDAO's 1% community vote threshold. "Basically $4M worth of BONK was used by the drainer to vote YES for taking $21M worth of BONK tokens from the DAO," one expert highlighted. The project said in an X post that it has "identified the exchange wallets used to purchase BONK ahead of the proposal," and added that "law enforcement has been notified" and that BonkDAO "continues to work with relevant parties to recover funds and identify those responsible."

The stolen BONK has begun moving toward cryptocurrency exchanges, prompting trading platforms to respond. South Korean exchange Upbit and American exchange Kraken have both paused deposits and withdrawals of the BONK token, with Upbit citing "user protection measures following the circumstances of a security incident." BonkDAO stated it is coordinating with centralized exchanges, network bridges, and the Solana Foundation on recovery efforts.

The BONK token fell over the day of the disclosure, with one source reporting a drop of about 10% and others citing declines around 7-8% to approximately $0.0000054398, or about $0.0000043 in one report. The incident has drawn criticism from security researchers, with one analyst calling it "kinda silly" to configure direct treasury transfers without a lock period or multiple approvals, and Web3 security researcher Taylor Monahan arguing that the episode underscored how useless the broader DAO model is when "incentivizing democracy" comes at the cost of security. The attack comes as crypto stolen funds reached a record high in the first half of 2026, and follows May's $7.3 million exploit of memecoin launch platform DxSale on BNB Chain. BONK, launched in December 2022 with its developers airdropping half of the token's total supply, remains down roughly 93% from its all-time high of $0.000058.