BonkDAO, the decentralized governance body behind the Solana-based memecoin BONK, has lost approximately $20 million worth of treasury assets after attackers successfully manipulated the project’s governance process rather than exploiting a smart contract vulnerability.
The incident, disclosed by the Bonk Inu team on July 7, is being described as one of the most significant decentralized governance attacks of 2026. The exploit did not involve compromised user wallets or flaws in the protocol’s smart contracts. Instead, the attacker gained enough voting power to push through a malicious governance proposal and authorize a transfer of treasury funds.
According to the project, the proposal was submitted on Solana’s Realms governance platform under the misleading title “Sowellian BonkDAO” reforms. While appearing routine, the proposal ultimately granted control over treasury assets once approved.
Investigators say the attacker accumulated sufficient BONK voting power by purchasing tokens on exchanges and borrowing additional tokens through decentralized finance platforms. Reports indicate the operation cost roughly $4 million, allowing the attacker to reach the voting threshold required to pass the proposal.
The proposal succeeded amid exceptionally low community participation. Only about 2.9% of eligible wallets voted, enabling the attacker to secure approval with relatively little opposition.
Once executed, the proposal transferred approximately 4.426 trillion BONK tokens, valued at around $20 million at the time, from the DAO treasury into wallets controlled by the attacker.
BonkDAO has since labeled the proposal malicious and said it is working with centralized exchanges and law enforcement agencies to recover the funds. Several exchanges, including Upbit and Kraken, temporarily suspended BONK trading while the incident is investigated. Blockchain data suggests a portion of the stolen tokens has already been moved toward exchanges, while most remain in a multisignature wallet.
Governance Weaknesses Come Into Focus
The incident has renewed concerns about governance security across decentralized autonomous organizations.
Unlike traditional smart contract exploits, governance attacks target voting systems by allowing well-funded participants to accumulate enough influence to approve proposals that benefit themselves. Low voter participation significantly reduces the cost of executing such attacks.
Security experts have increasingly warned that many DAOs remain vulnerable unless governance mechanisms are strengthened through higher quorum requirements, proposal time locks, delegated voting systems and improved community oversight.
The attack on BonkDAO demonstrates how treasury governance can become a critical point of failure even when underlying smart contracts remain secure.
BONK Slides While Solana Holds Firm
The governance exploit triggered an immediate market reaction, with BONK falling between 8% and 10% following disclosure of the attack as investor confidence weakened.
Despite the sharp decline in BONK, the broader Solana ecosystem has remained relatively resilient. SOL has shown limited impact from the incident, while activity across the network has continued without major disruption.
BonkDAO said user funds on Bonk.fun and related platforms were not affected by the governance exploit and remain secure.
As recovery efforts continue, the incident is expected to influence governance standards across the decentralized finance sector, with developers likely to revisit treasury protections and voting frameworks designed to prevent similar attacks in the future.
