BONK DAO Loses $20 Million After Governance Attack

The attack moved through Solana’s Realms governance system rather than a smart contract. BONK is now working with exchanges, the Solana Foundation, and law enforcement to track the stolen tokens.

Key Takeaways

• BONK DAO said a malicious governance proposal drained about $20 million worth of BONK from its treasury.
• The attacker reportedly bought around $4 million worth of BONK first to gain enough voting power, then pushed the proposal through Solana’s Realms platform.
• BONK is now coordinating with exchanges, the Solana Foundation, and law enforcement to trace the stolen tokens and try to recover them.

BONK DAO has confirmed that a malicious governance proposal was used to drain roughly $20 million (€17.5 million) worth of BONK from its treasury. The project said some of the stolen tokens have already been routed toward exchanges, and its team is now working with exchanges, the Solana Foundation, and law enforcement to track the funds and explore recovery options.

How the Attack Worked

Early onchain analysis suggests the attacker first spent about $4 million (€3.5 million) on BONK to build enough voting power to get the proposal across the line. Once it passed through BONK DAO’s governance process on Solana’s Realms platform, an estimated $20 million (€17.5 million) was transferred out of the treasury into wallets controlled by the attacker.

So this does not appear to be a traditional smart contract exploit. Instead, it looks like a governance attack, where token-weighted voting is used to make a proposal seem legitimate while still draining funds from the DAO.

Why This Matters

For crypto investors, the incident is a reminder that DAO risk is not only about code. The decision-making process itself can also become the weak point. Earlier cases, including the 2016 DAO hack and the 2022 Beanstalk DAO attack, showed how concentrated voting power and quick execution can make these problems even worse.

That is why timelocks, quorum rules, and multisignature wallets are back in the conversation. These safeguards can slow things down and add extra approval steps, which makes it harder for a harmful proposal to slip through without being noticed.

What’s Next for BONK

BONK said the investigation is still active and recovery efforts are already underway. For now, the priority is to follow the moved tokens, stay in sync with the relevant parties, and decide whether the governance system needs changes to better protect the treasury from a repeat attack.