BONK faces $20 million treasury drain after attacker spends $4 million to pass malicious proposal
An attacker drained $20 million from the BONK DAO treasury by purchasing enough tokens to force a malicious governance proposal through a vote. The exploit leveraged the DAO's automated execution rules, highlighting a critical vulnerability where the cost of acquiring a voting majority was significantly lower than the treasury's value.
Why it matters
This incident underscores the systemic risks inherent in decentralized governance models, where automated on-chain execution can be weaponized if quorum requirements are poorly calibrated against treasury assets.
BONK DAO was drained of $20 million late Monday, the culmination of a week-long scheme in which an opportunistic attacker spent about $4.4 million buying up the project's bonk tokens to force through a vote. Every step was a legitimate transaction — such as the buying, the vote, the payout — and together they carried out a theft.
The article provides a factual, chronological account of the event using multiple data sources (Chainalysis, Lookonchain) and presents both sides of the 'theft vs. exploit' debate without taking a definitive stance.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in