BonkDAO Treasury Drained of $20 Million in Governance Vote Exploit

An anonymous actor spent roughly $4.4 million to purchase just over 1 % of the BONK token supply on Binance and Bybit, reaching the quorum required to submit a proposal on Solana’s Realms governance platform. On June 30, the attacker filed a malicious governance proposal (BIP‑76) to transfer 4.426 trillion BONK – valued at about $20 million – to a wallet they controlled. Only seven of more than 18,000 token holders voted, resulting in a 2.9 % turnout and a 99.9 % “yes” vote, which automatically executed the transfer on July 6, 2026.

The funds were split between an exchange address (approximately $188 k) and a multisignature wallet. The incident caused BONK’s price to fall 9–12 % and prompted exchanges such as Upbit, Kraken, and others to suspend deposits and withdrawals of the token. BonkDAO has reported the breach, identified the exchange wallets used for the token purchases, and is cooperating with the Solana Foundation, major exchanges, bridge operators, and law‑enforcement agencies to trace and recover the assets. Analysts highlight governance design flaws – low quorum, lack of a time‑lock, and absence of an emergency multisig – that allowed the treasury to be emptied through a perfectly legal vote.

The event underscores the risks inherent in token‑weighted DAO voting systems where active participation is minimal, prompting calls for stronger safeguards in decentralized governance structures.