Blockchain security firm Specter has published a preliminary investigation into the BONK DAO governance attack. According to the firm, its review of on-chain fund flows identified several notable red flags, including a suspected connection between wallets tied to the Realms founder and the attacker.
Specter focuses on tracing the on-chain funding path
Based on the information disclosed so far, Specter’s analysis centers on the movement of funds across wallets involved in the BONK DAO governance attack, rather than relying only on static wallet attribution. The firm described its findings as a preliminary investigation, suggesting the current disclosure should be read as an early-stage set of leads and suspicious linkages, not a final conclusion.
The key point in Specter’s disclosure is the tracing of wallet-to-wallet flows. After reviewing transfers, interactions, and possible funding sources among relevant addresses, the firm said it found relationships that warrant closer examination. Among them, the possible funding-path overlap involving wallets associated with the Realms founder has become the most closely watched element of the case.
Attention shifts from the attack result to deeper governance risks
The BONK DAO incident had already raised concerns about the resilience of DAO governance mechanisms and voting security. With Specter now publishing an investigative update, the discussion is moving beyond the immediate impact of the governance attack and toward questions about where the attacker’s funds originated, how the addresses were coordinated, and whether broader on-chain identity links may have played a role.
Importantly, the material currently available reflects a preliminary on-chain assessment from a security organization. The source text does not include a full evidentiary package, a complete reconstruction of the attack sequence, or a definitive attribution. For the market and the community, the significance of this update lies in the direction it points: governance attacks may involve not only technical exploitation, but also more complex relationships among governance participants, infrastructure builders, and ecosystem actors.
As of publication, the source material did not include any further response from BONK DAO or Realms. If additional on-chain evidence, official statements, or governance actions emerge, the scope and implications of the incident could expand further.