# BonkDAO loses $20 million in governance attack after $4 million token

**Published:** 2026-07-14T21:53:01.651Z  
**Topic:** Dao Crypto  
**Sentiment:** neutral  
**Publisher:** TrendWatcher — https://www.trendwatcher.in/article/62719b2b-d1d2-4c0f-89ba-1cbbc8fe557a

BonkDAO governance breach saw attacker spend $4 M on BONK to pass a proposal that drained $20 M from the treasury, pushing the token 7% lower.

A single malicious proposal approved on July 6 2026 siphoned roughly $20 million in BONK from the DAO’s Solana treasury after an attacker bought enough voting power for the 1 % quorum with about $4 million of tokens [1].

**At a glance**
| At a glance | |
|---|---|
| Treasury loss | ~$20 M (≈4.4 trillion BONK) |
| Token purchase cost | ~$4 M to acquire 1 % of supply |
| Quorum margin | 882.38 bn BONK vs. 879.95 bn threshold |
| Price reaction | BONK down ~7 % in 24 h |

## How the proposal passed
The attacker submitted proposal “BIP #76 – Sowellian BonkDAO” on June 30, instructing the DAO to transfer 4.4 trillion BONK to a wallet they controlled. To meet the 1 % quorum, they bought exactly that share of the token over July 4‑5 on Bybit and Binance, spending about $4 million [1]. When voting closed, only seven wallets cast votes, achieving a 99.9 % “yes” result that barely cleared the quorum—882.38 bn BONK in favor versus the 879.95 bn threshold [1]. The DAO’s automatic execution then moved the treasury funds to the attacker’s address.

## Aftermath and market impact
The stolen BONK was quickly shuffled through multiple addresses, with $148 k later spotted on OKX, indicating attempts to obscure the trail [1]. BONkDAO flagged the incident as an attack, notified law enforcement, and is cooperating with the Solana Foundation and exchanges to recover assets [1]. Despite the scale, the token’s price fell only about 7 % in the following 24 hours, and exchanges such as Upbit and Kraken halted BONK deposits and withdrawals as a protective measure [1].

## Governance design flaw
No smart‑contract bug or private‑key compromise occurred; the breach stemmed from the DAO’s lack of safeguards—no timelock, insufficient quorum, and no multisig override [1]. This design allowed an attacker to “buy” voting power and legally approve a treasury drain, highlighting a broader risk for DAOs that rely solely on token‑based voting without additional controls [3].

## What to watch
- **Quorum thresholds** – Any change to the 1 % quorum or addition of timelocks could affect future proposal security.  
- **Token concentration** – Monitoring the distribution of BONK holdings may reveal whether a single entity can again amass near‑total voting power.  
- **Exchange activity** – Large BONK movements on Bybit, Binance, or other platforms could signal further attempts to relocate the stolen funds.

The BonkDAO incident underscores that a DAO’s financial security can be compromised without any code exploit, raising urgent questions about how governance mechanisms must evolve to protect sizable treasuries in the rapidly expanding memecoin space.

## Sources
1. Cryptoticker — [BONK DAO Lost $20 Million Without a Hack — Here's How a ...](https://cryptoticker.io/en/bonk-dao-governance-attack-20-million-treasury-drain/)
2. Cointelegraph — [BonkDAO reports $20M theft from ‘malicious governance proposal’](https://cointelegraph.com/news/bonk-dao-malicious-governance-proposal)
3. Crypto — [What is a governance attack? How BonkDAO lost $20M in a single vote](https://crypto.news/what-is-a-governance-attack-how-bonkdao-lost-20m-in-a-single-vote/)

---
Cite as: TrendWatcher, "BonkDAO loses $20 million in governance attack after $4 million token", https://www.trendwatcher.in/article/62719b2b-d1d2-4c0f-89ba-1cbbc8fe557a