BonkDAO Suffers Governance Exploit as About $20M in BONK Is Drained From Treasury

BonkDAO reported that roughly $20 million worth of BONK tokens was siphoned from its treasury after an attacker pushed through a malicious governance proposal on Solana. In a post on X, the DAO said the unauthorized proposal allowed an unknown party to transfer funds out of the project's treasury. BonkDAO's preliminary review flagged exchange wallets that accumulated BONK ahead of the proposal, pointing to potential pre-planning. The organization has not yet shared technical details on how the proposal was approved or how treasury safeguards were circumvented. BonkDAO said it has notified law enforcement and is working to recover the assets while its investigation continues. The DAO added that it will publish further updates as more information becomes available. The disclosure weighed on sentiment. BONK fell about 8.5% over the 24 hours following the announcement, trading around $0.0000044. The incident lands amid a broader uptick in governance and smart contract attacks across DeFi and memecoin ecosystems. Exploits that manipulate governance processes—including frontrunning proposals—have increasingly been used to facilitate large token drains. BONK, launched in December 2022, is among Solana's best-known memecoins. Early momentum was driven by an airdrop that distributed half of the token's supply, helping it join the memecoin leaders alongside Dogecoin, Shiba Inu and Pepe. The memecoin sector has also been under pressure. CoinMarketCap data showed the combined market cap of major memecoins (DOGE, SHIB, PEPE and others) slipped to about $22 billion before rebounding above $26 billion in July. At publication, the category stood near $25.3 billion, down more than 54% over the past 12 months. The BonkDAO breach follows a series of recent incidents. In May, memecoin launch platform DxSale said it lost about $7.3 million in a cyberattack that affected liquidity providers on BNB Chain. Investigators tracked the attacker's wallet, though analysts cautioned that laundering infrastructure can hinder recovery. Separately, security firm Blockaid said it detected an active exploit targeting Summer.fi, a DeFi yield aggregation and vault management platform, with roughly $6 million drained at the time of its alert. Blockaid has also issued early warnings related to attacks impacting ShapeShift's FOX Colony on Arbitrum, underscoring how monitoring firms can surface live exploits ahead of full forensic reports. BonkDAO's disclosure highlights persistent weaknesses in decentralized governance and treasury management. As attackers increasingly weaponize governance mechanics and smart contract gaps, DAOs and DeFi projects face mounting pressure to strengthen proposal controls, multisig configurations, timelocks and real-time monitoring to better protect shared funds.