Attack on BONK DAO governance: $20 million stolen, token plummets 15%
The decentralized autonomous organization BONK DAO has confirmed a large-scale attack on its governance system. As a result of a malicious vote, approximately $20 million in BONK tokens were drained from the treasury.
This is not a smart contract hack or a code vulnerability—it is a classic example of a governance attack. The attacker used a token-based voting mechanism to pass a proposal that legitimately transferred DAO funds to wallets under their control.
Incident Details
According to blockchain analytics, the attacker previously purchased BONK tokens worth approximately $4 million. This was enough to secure a decisive number of votes in the governance system on the Realms platform (Solana ecosystem). After the malicious proposal was approved, about $20 million was withdrawn from the BONK DAO treasury.
The project team has already identified the exchange addresses through which the attacker accumulated voting power before the attack. BONK is now coordinating with cryptocurrency exchanges, the Solana Foundation, bridge protocols, and law enforcement agencies to track and potentially recover the assets. Part of the stolen funds has already begun flowing into centralized platforms, raising concerns about their imminent liquidation.
Consequences and Market Reaction
News of the incident triggered a sharp decline in the BONK token price. Within a short period, the asset lost approximately 15% of its value, reflecting investor concerns both about the theft itself and the potential selling pressure on the market.
This case once again raises a fundamental security question for all DAOs. Governance procedures, especially those that rely solely on token weight, remain a vulnerable point. BONK DAO will now have to not only fight for the return of funds but also likely reconsider the entire governance architecture.
Analyst's Perspective
As I have repeatedly noted, the "one token, one vote" principle (plutocracy) is a ticking time bomb for DAO treasuries. This incident is a harsh reminder that decentralized governance without proper protective mechanisms (timelocks, multi-signatures, delayed execution) becomes an invitation to attack. The market punishes such architectural miscalculations immediately, and BONK's 15% drop is just the beginning if the funds are not recovered.