BonkDAO says attackers drained about $20M in BONK after malicious governance proposal
BonkDAO has disclosed that roughly $20 million worth of BONK tokens were removed from its treasury after an attacker exploited a malicious governance proposal on the Solana blockchain. The DAO announced the breach on X and said the unauthorized proposal enabled an unknown actor to transfer the funds from the project’s treasury.
What happened
- BonkDAO’s initial investigation identified exchange wallets that purchased BONK ahead of the proposal, suggesting premeditation, but the organization has not yet released technical details explaining how the proposal passed or how treasury controls were bypassed.
- The DAO said it has reported the incident to law enforcement and is working to recover the assets while continuing its probe. Additional information will be published as the investigation progresses.
Market impact and context
- The disclosure hit market sentiment: BONK fell about 8.5% in the 24 hours after the announcement, trading near $0.0000044 as investors reacted to the breach.
- The incident adds to a recent wave of governance and smart-contract attacks on DeFi and memecoin projects. Security breaches and front-running of governance processes have become an increasingly common vector for large token drains.
Background on BONK and the memecoin market
- Launched in December 2022, BONK is one of Solana’s most recognisable memecoins. Its early popularity stemmed from an airdrop that distributed half of the token’s supply, helping BONK join the ranks of prominent assets in the memecoin sector alongside Dogecoin, Shiba Inu and Pepe.
- The memecoin category has been under pressure: CoinMarketCap showed the combined market cap of leading memecoins (DOGE, SHIB, PEPE and others) fell to about $22 billion before recovering above $26 billion in July. At publication the sector’s market cap was roughly $25.3 billion — down more than 54% over the past 12 months.
Other recent exploits
- The BonkDAO breach follows a string of security incidents. In May, memecoin launch platform DxSale reported losing about $7.3 million after a cyberattack that impacted liquidity providers on BNB Chain. Blockchain investigators tracked the attacker’s wallet, but experts warned that the infrastructure used to launder funds can complicate recovery efforts.
- Security firm Blockaid recently detected an active exploit hitting Summer.fi, a DeFi yield aggregation and vault-management platform, reporting roughly $6 million drained at the time of its alert. Blockaid has also issued early warnings for attacks affecting ShapeShift’s FOX Colony on Arbitrum, highlighting how detection firms can catch active exploits before full forensic reports are released.
Why it matters
- The BonkDAO incident underscores ongoing vulnerabilities in decentralized governance and treasury management. With attackers increasingly leveraging governance mechanisms and smart-contract gaps, DAOs and DeFi projects face growing pressure to harden proposals, multisig setups, timelocks and monitoring to protect communal funds.
BonkDAO says it will continue to update users as investigations proceed and authorities work to trace and recover the stolen tokens.
Read more AI-generated news on: undefined/news
