The decentralized autonomous organization BONK DAO has confirmed a massive leak of funds: an attacker withdrew BONK tokens worth approximately $20 million from the project's treasury.
The incident occurred as a result of manipulation of voting mechanisms. The attacker acquired a significant volume of BONK tokens — about $4 million — to gain a decisive number of votes in the governance system on the Realms platform on the Solana network. After that, a malicious proposal was submitted and approved, which allowed the withdrawal of assets from the treasury.
Attack Details and Initial Consequences
According to blockchain analysts, the attacker concentrated voting power by purchasing tokens on exchanges before the vote. Then, using the standard DAO procedure, they pushed through a proposal to transfer funds. Unlike a smart contract hack, this involved a legitimate but exploitable vulnerability — the distribution of votes proportional to the number of tokens.
Part of the stolen BONK has already begun to flow into crypto exchanges, raising concerns about their further liquidation. The BONK DAO team is actively engaging with trading platforms, the Solana Foundation, and law enforcement agencies to block the funds and recover them. However, the market reaction has been immediate so far: the price of the BONK token has dropped by 15%.
Lessons for DeFi and the Future of BONK
This case once again highlights the acute security problem in the DeFi sector. A governance attack is one of the most dangerous vectors for DAOs, as it exploits the very architecture of decentralized decision-making. It is clear that a simple "one token, one vote" system without additional protective mechanisms becomes a target for large holders.
The community is already discussing measures to strengthen security: implementing timelocks for large transactions, multi-signatures for approving withdrawals, and delayed execution of treasury operations. These mechanisms could prevent such incidents by giving the community time to react.
My professional opinion: The attack on BONK DAO is a wake-up call for the entire DAO ecosystem. Until projects implement multi-layered treasury protection, such incidents will recur. Investors should pay attention not only to staking yields but also to how well a project's governance mechanisms are protected. Recovering the funds in this case will be extremely difficult, and the market is already pricing this risk into the token's price.