{"id":24266,"date":"2026-07-07T13:33:49","date_gmt":"2026-07-07T13:33:49","guid":{"rendered":"https:\/\/nft.runfyers.com\/index.php\/2026\/07\/07\/bonk-dao-loses-20-million-after-attacker-buys-governance-vote-to-drain-treasury-nft-plazas\/"},"modified":"2026-07-07T13:33:49","modified_gmt":"2026-07-07T13:33:49","slug":"bonk-dao-loses-20-million-after-attacker-buys-governance-vote-to-drain-treasury-nft-plazas","status":"publish","type":"post","link":"https:\/\/nft.runfyers.com\/index.php\/2026\/07\/07\/bonk-dao-loses-20-million-after-attacker-buys-governance-vote-to-drain-treasury-nft-plazas\/","title":{"rendered":"BONK DAO Loses $20 Million After Attacker Buys Governance Vote to Drain Treasury – NFT Plazas"},"content":{"rendered":"

<\/p>\n

\n

A governance exploit has cost the BonkDAO treasury an estimated $20 million, after an attacker spent roughly $4.4 million acquiring enough BONK tokens to push through a malicious proposal that automatically transferred the funds to a wallet under their control.<\/span><\/p>\n

The incident, which unfolded over the course of a week and culminated early Monday, has reignited debate over whether onchain governance \u2014 long pitched as a transparent, community-driven alternative to centralized control \u2014 is fundamentally vulnerable to anyone willing to pay for a temporary majority.<\/span><\/p>\n

How the Attack Unfolded<\/span><\/h2>\n

The scheme began on June 30, when an anonymous wallet submitted a proposal titled \u201cBIP #76 \u2013 Sowellian BonkDAO\u201d to the project\u2019s onchain governance platform. On its surface, the proposal read like a reform pitch, promising to \u201crebuild from the ashes, monetize holdings, stop the bleeding,\u201d and install new governance members. Buried within it, however, was a single operative instruction: transfer roughly 4.426 trillion BONK tokens \u2014 the entire contents of the treasury \u2014 to a wallet ending in \u201cJHvQ.\u201d<\/span><\/p>\n

To pass, the proposal needed \u201cyes\u201d votes equal to at least 1% of BONK\u2019s total supply, the quorum threshold set by the DAO\u2019s rules. Over July 4 and 5, a separate wallet methodically acquired exactly that amount, spending about $4.4 million buying BONK on the exchanges Bybit and Binance, with some reports indicating additional tokens were borrowed through DeFi lending platforms, according to onchain analytics firm Lookonchain.<\/span><\/p>\n

When the vote closed, only seven wallets had participated \u2014 against more than 18,000 total DAO members \u2014 a turnout of just 2.9%. The proposal cleared quorum by a razor-thin margin: 882.38 billion BONK in favor against an 879.95 billion threshold, almost exactly matching the stake the attacker had spent days assembling. Effectively, the \u201c99.9% yes\u201d result represented a single actor voting in agreement with itself.<\/span><\/p>\n

How the Attack Unfolded<\/span><\/i><\/p>\n

The Drain and the Aftermath<\/span><\/h2>\n

Once the proposal passed, the transfer executed automatically, moving roughly $20 million worth of BONK out of the treasury and into the attacker\u2019s wallet. According to blockchain intelligence firm Chainalysis, about $188,000 was sent to a centralized exchange within hours, likely an attempt to begin cashing out, while the remaining roughly $19 million was moved to a multisignature wallet requiring multiple approvals to access.<\/span><\/p>\n

Just over an hour after the drain, the attacker began selling off the BONK tokens originally purchased to manipulate the vote, offloading about $5.3 million worth \u2014 while retaining the stolen treasury holdings.<\/span><\/p>\n

BonkDAO confirmed the attack publicly, describing it as a malicious governance proposal and stating it had identified the exchange wallets used to accumulate voting power ahead of the proposal. \u201cDuring the investigation, BonkDAO identified the exchange wallets used to purchase BONK ahead of the proposal,\u201d the project posted on <\/span>X<\/span><\/a>, adding that law enforcement had been notified and that it continues working with exchanges, bridges, and the Solana Foundation to trace and potentially recover funds.<\/span><\/p>\n

BonkDAO confirmed the attack publicly<\/span><\/i><\/p>\n

In response, South Korean exchange Upbit and U.S.-based Kraken both suspended deposits and withdrawals of BONK, with Upbit citing \u201cuser protection measures following the circumstances of a security incident.\u201d<\/span><\/p>\n

Market Impact<\/span><\/h2>\n

BONK, once a top-100 token by market capitalization, fell roughly 7% in the 24 hours following disclosure of the attack, trading around $0.0000043 \u2014 a level roughly 93% below its all-time high of $0.000058. Some reporting places the decline closer to 10%, reflecting differences in the exact measurement window as the story developed throughout the day.<\/span><\/p>\n

A Legitimate Attack<\/span><\/h2>\n

What sets the BonkDAO incident apart from typical DeFi exploits is that no code was broken and no private keys were stolen. Every action \u2014 the token purchases, the proposal submission, the vote, and the payout \u2014 was a valid, rule-following transaction on Solana. That has fueled a familiar argument within crypto circles over whether the episode constitutes theft or simply a ruthless but technically permitted use of a DAO\u2019s own governance mechanics.<\/span><\/p>\n

BonkDAO and blockchain analytics firms have characterized the episode as an attack, a framing reinforced by the involvement of law enforcement. Critics within the community have also pointed to a broader governance failure: the proposal sat visible on BonkDAO\u2019s platform for nearly six days with minimal scrutiny before the vote concluded and the transfer executed as programmed.<\/span><\/p>\n

The underlying lesson, analysts note, is structural. Any treasury governed by a system where voting power can simply be purchased is only as secure as the cost of assembling a controlling stake \u2014 and in this case, that cost was a fraction of the treasury\u2019s value. With $4.4 million in capital, the attacker walked away having netted roughly $20 million, minus whatever portion is eventually recovered or frozen by exchanges and investigators.<\/span><\/p>\n

BonkDAO has not yet detailed a formal remediation plan for preventing similar governance capture in the future, though its coordination with the Solana Foundation and multiple exchanges suggests recovery efforts remain active as of this writing.<\/span><\/p>\n<\/div>\n

A governance exploit has cost the BonkDAO treasury an estimated $20 million, after an attacker spent roughly $4.4 million acquiring enough BONK tokens to push through a malicious proposal that automatically transferred the funds to a wallet under their control. The incident, which unfolded over the course of a week and culminated early Monday, has […]<\/p>\n","protected":false},"author":1,"featured_media":24267,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[16],"tags":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/nftplazas.com\/wp-content\/uploads\/2026\/07\/1-8.jpg","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/posts\/24266"}],"collection":[{"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/comments?post=24266"}],"version-history":[{"count":0,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/posts\/24266\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/media\/24267"}],"wp:attachment":[{"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/media?parent=24266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/categories?post=24266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nft.runfyers.com\/index.php\/wp-json\/wp\/v2\/tags?post=24266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

BONK Price Performance on 07\/7\/2026 (Source: <\/span><\/i>CoinMarketCap<\/span><\/i><\/a>)<\/span><\/i><\/p>\n