The Solana ecosystem has faced a serious security incident: the decentralized autonomous organization BonkDAO, which manages the meme coin BONK, was attacked through a fake proposal in the governance system. As a result, the attacker withdrew tokens worth approximately $20 million from the treasury. This event has already triggered an immediate response from cryptocurrency exchanges: Kraken and Upbit temporarily suspended operations with BONK, including deposits and withdrawals.
Attack Details: Vote Manipulation
According to my analysis, the incident occurred on July 6, 2026. An unknown participant initiated a malicious proposal called Bonk Improvement Proposal #76. Formally, it proposed "implementing Sowellian governance" and updating the council composition, but was actually aimed at seizing funds. The attacker, possessing significant voting weight, pushed the proposal through the Solana Realms platform, a standard tool for managing DAOs in the Solana ecosystem.
It is important to emphasize that this is a classic attack scenario where holders of large token volumes use their voting weight to transfer assets to their own advantage. The BonkDAO team has not yet disclosed the technical details of the voting or the proposal parameters, but it is clear that the mechanism for preventing manipulation proved insufficient.
Fund Movement and Market Reaction
Immediately after the proposal was adopted, BONK tokens were transferred to an address which, according to Solscan data, was funded through a Bybit exchange account. A few hours later, the funds were moved to another wallet, indicating an attempt to cover tracks. Notably, contrary to promises in the proposal text, the tokens were not distributed among those who voted "for"—all funds ended up in the attacker's hands.
The news put immediate pressure on BONK's price. Over the past 24 hours, the meme token lost 7.7% of its value and is currently trading around $0.00000432 according to CoinGecko. This is not a critical drop, but it undermines trust in the project's governance mechanisms, which could have long-term consequences.
Context and Outlook
BonkDAO has stated that it is actively cooperating with exchanges, bridges, and the Solana Foundation to resolve the situation. However, restoring reputation after such an attack is a challenging task. Recall that in December 2023, BONK's market capitalization exceeded $1.7 billion, and the hype around the token's airdrop even boosted sales of Solana's Saga smartphone. Now, the project faces a governance crisis amid a general decline in activity on the "meme coin factory" Pump.fun, where the number of daily launches has dropped by 30% compared to spring 2026.
Expert Commentary: This incident is a stark reminder that even in mature DAOs, governance remains a vulnerable point. Mechanisms like quadratic voting and protection against "vote capture" should be a priority for any project managing large treasuries. The meme coin market, built on speculative enthusiasm, is particularly sensitive to such losses of trust—recovery could take not days, but months, unless fundamental changes are made to the security structure.