BonkDAO has confirmed that its treasury was hit by a malicious governance proposal that moved nearly $20 million in BONK, or roughly 4.426 trillion tokens. The disclosure was made on July 7, 2026. This was not a smart contract exploit. The attacker obtained influence the old-fashioned on-chain way: buy enough tokens, dominate the vote, and pass the proposal.
A six-day proposal passed with only seven wallets voting
According to the reported details, the attacker spent about $4 million accumulating BONK on exchanges before the proposal closed. The proposal remained live for six days without drawing enough scrutiny. By the end of the vote, only seven wallet addresses had participated, and wallets tied to the attacker reportedly held about 99.878% of the total voting weight. That was enough to approve the proposal and authorize the treasury transfer.
The weakness exposed here was governance design, not code execution. In token-weighted DAO systems, concentrated buying can become decisive when voter turnout is thin and review safeguards are missing. BonkDAO’s setup, as described in the source material, did not have a timelock, a minimum quorum requirement, or a multisig checkpoint that could have slowed or blocked an abnormal proposal. In practice, that allowed a roughly $4 million token purchase to open the door to a treasury worth close to $20 million.
Recovery efforts now involve exchanges, bridges, and law enforcement
BonkDAO said it has traced exchange accounts used during the pre-proposal accumulation phase and is now working with exchanges, cross-chain bridges, the Solana Foundation, and law enforcement to recover the funds and identify those responsible. Blockchain security firm PeckShield also flagged that about $148,000 worth of stolen BONK has already been moved to OKX.
After the incident became public, BONK fell by as much as 9% to 10%. The market is now watching two things closely: whether trading venues and infrastructure providers can freeze or flag wallets before more funds move, and whether other Solana DAOs revisit the safety of relying on token-weighted governance alone for treasury decisions.
What BONK holders and DAO voters are watching next
The source material points to verified updates from BonkDAO and the Solana Foundation as the main channels to follow during the recovery process. For users of Realms and similar governance platforms, the practical questions are immediate: how proposal alerts are delivered, whether a quorum threshold exists, and whether timelocks or multisig review are built into execution.
Holders with BONK on exchanges may also need to watch for any trading pauses or listing-related notices tied to the investigation. Discussion inside the community has already shifted toward governance changes such as timelocks, multisig requirements, and minimum quorum thresholds, all of which could change how BonkDAO and similar projects handle future proposals.