BonkDAO Loses $20 Million After Attacker Buys Governance Control for $4.4 Million

BonkDAO lost an estimated $20 million in BONK tokens on June 30 after an anonymous wallet spent roughly $4.4 million buying just over 1% of BONK's total supply, enough to single-handedly meet the DAO's quorum requirement and pass a governance proposal that redirected its treasury to a wallet the attacker controlled.

The proposal, titled "BIP #76 – Sowellian BonkDAO," called for transferring BonkDAO's treasury holdings to a new address. To take effect it needed yes votes equal to only 1% of BONK's circulating supply, the minimum turnout threshold built into the DAO's governance system. It passed with 99.9% approval from just seven wallets, against more than 18,000 DAO members who did not participate, a turnout of 2.9%. With no timelock, no minimum multisig sign-off and no anomaly check on proposals before execution, the vote went through and the treasury transfer executed automatically.

BonkDAO confirmed the exploit in a statement posted to X , saying it was "the target of a malicious governance proposal resulting in an estimated $20M worth of BONK tokens being drained from the BonkDAO treasury." The DAO said it had identified the exchange wallets used to purchase BONK ahead of the proposal and was working with exchanges, bridges and the Solana Foundation to manage the fallout, and that law enforcement had been notified. BONK's token price fell as much as 10% following the disclosure.

The mechanics of the attack point to a structural weakness common to token-weighted DAO governance rather than a code exploit. Quorum thresholds are meant to prevent a handful of holders from steering a vote, but when turnout is chronically low, as it was here with 97% of BonkDAO's membership not voting, the effective bar to hit quorum can be far lower than the threshold suggests on paper. Buying enough tokens to clear a 1% quorum cost the attacker $4.4 million against a treasury worth roughly $20 million, a return that made the trade profitable even before accounting for whether the tokens could later be resold.

BonkDAO's next moves will center on whether it can trace and freeze the stolen BONK before it clears through exchanges or bridges, and whether it adds safeguards such as timelocks, proposal review periods or multisig checks that would have caught an anomalous treasury transfer before it executed. The episode is likely to renew scrutiny of quorum design across other token-voting DAOs that hold large treasuries but see low participation in governance votes.