Key Highlights
BonkDAO, the community governance body behind Solana-based memecoin BONK, says it has lost an estimated $20 million worth of BONK tokens after a malicious governance proposal was approved, allowing funds to be drained from the DAO’s treasury.
In an X post on Monday, the Solana-based project said that it is coordinating with exchanges, blockchain partners, and law enforcement as it investigates the attack and attempts to recover the stolen assets.
According to BonkDAO, the attacker used a malicious governance proposal that ultimately resulted in the unauthorized transfer of approximately $20 million in BONK tokens from the DAO treasury.
The project did not disclose technical details of how the proposal passed or whether the governance mechanism itself was compromised. However, it confirmed that the incident is being treated as an active investigation.
Governance systems allow token holders to vote on proposals that determine how decentralized organizations manage funds and protocol changes. When compromised, they can become a pathway for attackers to gain control over treasury assets.
BONK came under selling pressure after news of the governance exploit became public. According to CoinMarketCap, the token was trading at $0.0000543, down 9.37% over the previous 24 hours, while its market capitalization declined to approximately $380 million.
The token initially attempted to recover earlier in the trading session before reversing sharply as reports of the estimated $20 million treasury drain spread. Trading volume also climbed more than 48% during the same period, indicating heightened market activity as investors reacted to the incident. Despite the daily decline, BONK remained 2.62% higher over the past week, suggesting the token had recovered some ground before the governance attack.
BonkDAO said investigators have already identified exchange wallets that were used to purchase BONK before the governance proposal was submitted. The project said it is working with cryptocurrency exchanges, cross-chain bridge operators, and the Solana Foundation to track the movement of funds and limit further transfers where possible.
BonkDAO added that law enforcement agencies have been notified and that it is cooperating with relevant parties to identify those responsible and pursue fund recovery.
The incident adds to a growing list of governance-related attacks targeting decentralized autonomous organizations (DAOs), where attackers exploit voting mechanisms rather than vulnerabilities in smart contract code.
While BonkDAO has not announced whether governance procedures will change following the incident, the attack is likely to renew discussion around safeguards for treasury management, voting thresholds, and proposal review processes across decentralized governance systems. The investigation remains ongoing, and BonkDAO said it will continue working with ecosystem partners as efforts to trace and recover the funds continue.
DeFi security remains a critical concern in 2026 as the sector experiences a sharp rise in exploits despite growing maturity. Hackers continue to exploit smart contract vulnerabilities, governance loopholes, flash loan attacks, and oracle manipulations, resulting in hundreds of millions in losses across various chains.
High-profile incidents this year include a $292 Kelp DAO attack, $45M breach of the Aave V3 lending protocol via oracle manipulation in March, an exploit on the Solana-based DEX Jupiter in April, and others.
These events underscore the persistent gap between rapid innovation and robust security practices.
Also Read: AVAX One Changes CEOs as Crypto Treasury Stocks Struggle
Key Highlights CYBERLEEK crashed after its contract owner reportedly cashed out more than $250,000. The…
Key Highlights The tokenized real-world assets market reached $44.7 billion as of August 26, 2026,…
Key Highlights Chainalysis estimates at least $457 billion in potentially taxable on-chain crypto activity occurred…
Key Highlights Nigeria’s Federal High Court in Abuja granted Usie Otukpa Osang ₦500 million bail…
Key Highlights Saitama CEO Manpreet Kohli lost his latest UK challenge against extradition to the…
Key Highlights Coinbase CPO Faryar Shirzad pushed back against the American Bankers Association’s concerns over…
This website uses cookies.
Read More