BonkDAO Treasury Hit by Malicious Proposal: $3M in BONK Stolen

The BonkDAO community is currently addressing a significant security breach following a malicious governance proposal attack that resulted in the unauthorized withdrawal of approximately $3 million worth of BONK tokens from its treasury. On July 7, 2026, the decentralized autonomous organization confirmed the incident via its official social media channels, outlining the immediate steps being taken to mitigate the damage and track the perpetrator. This event highlights ongoing vulnerabilities within on-chain governance mechanisms where attackers can exploit voting systems to drain community-managed funds.

Investigation and Attacker Tracking

Following the discovery of the missing assets, BonkDAO launched a comprehensive forensic investigation into the Solana blockchain transactions. The team successfully identified an exchange wallet that the attacker utilized to acquire the necessary BONK tokens required to initiate the governance proposal. By securing a sufficient voting weight through these pre-proposal purchases, the actor was able to push through a mandate that authorized the transfer of treasury funds to an external wallet under their control.

Collaborative Recovery Efforts

To recover the stolen digital assets, BonkDAO is coordinating with several key entities within the ecosystem. The organization has established communication with:

• The Solana Foundation to analyze network-level data.
• Major centralized exchanges to freeze accounts associated with the identified wallet.
• Cross-chain bridge providers to prevent the laundering of funds to other networks.
• International law enforcement agencies to initiate formal criminal proceedings.

The exchange wallet used by the attacker to purchase BONK before initiating the proposal has been identified, and we are currently cooperating with exchanges, cross-chain bridges, and the Solana Foundation.

Future Governance Security

This exploit serves as a critical case study for DeFi protocols regarding the risks of "governance attacks", where capital is used to manipulate democratic processes. BonkDAO has indicated that they will continue to provide updates as the investigation progresses. While the immediate focus remains on asset recovery, the community is expected to discuss new guardrails, such as extended delay periods for fund transfers or veto powers for security committees, to prevent similar occurrences in the future.

The incident has caused temporary fluctuations in the market value of BONK as investors assess the impact on the treasury's long-term sustainability. However, the proactive involvement of the Solana Foundation suggests a unified front in addressing security breaches within the ecosystem. For now, the BonkDAO treasury remains under heightened surveillance while the tracing of the stolen $3 million continues.