BonkDAO Loses $20 Million in Malicious Governance Proposal Attack

Attacker drains $20 million from BonkDAO treasury

On 6 July 2026, an attacker drained an estimated $20 million worth of BONK tokens from the BonkDAO treasury. More than 4.4 trillion BONK, valued near $19.3 million, moved from the treasury wallet to a single address ending in "JHvQ." BonkDAO confirmed the loss the same day. BONK is a Solana-based meme coin launched in December 2022.

Malicious proposal passed through token-weighted voting

The incident was a governance attack, not a smart-contract bug. The attacker submitted a proposal named "Sowellian BonkDAO" that passed on the project's own governance platform. Token-weighted voting let the attacker approve the treasury transfer, using the DAO's own rules against it. The proposal offered BONK rewards to everyone who voted yes, which helped it gather support. According to security researchers, about $4 million in BONK was used to vote for moving roughly $21 million out of the DAO.

BONK price fell after the treasury drain

BONK traded at about $0.0000044 at the time of publication, down 8.5% over the past 24 hours (CoinPaprika, 7 July 2026). Its market value stood near $339 million, and 24-hour trading volume jumped sharply. Portions of the stolen tokens began moving toward exchanges. Both Upbit and Kraken paused BONK deposits and withdrawals in response.

BonkDAO notifies law enforcement over the theft

BonkDAO said it had identified the exchange wallets used to buy BONK before the vote. The team continues to work with outside parties to recover the funds and trace those responsible. The theft has renewed debate over DAO safeguards such as timelocks and multi-signature approvals that delay treasury transfers.

"Law enforcement has been notified. BonkDAO continues to work with relevant parties to recover funds and identify those responsible.", 6 July 2026. — Bonk, official statement