An attacker exploited BonkDAO's voting system to drain roughly $20 million in BONK tokens from the treasury. The incident shows how governance mechanisms—designed to democratize decision-making—can become targets for sophisticated theft.

How the Attack Unfolded

BonkDAO, a decentralized autonomous organization tied to the BONK meme coin, was compromised through a governance attack. According to 99Bitcoins, an attacker submitted a malicious governance proposal that drained approximately $20 million in BONK tokens from the DAO's treasury. The attacker spent roughly $4 million to force the governance vote through—a cost justified by the much larger prize.

Market Fallout and Exchange Response

BONK's price dropped 9% following the attack. South Korean exchange Upbit temporarily suspended deposits and withdrawals for BONK, likely to prevent further outflows while the situation stabilizes.

What This Reveals About DAO Design

Governance attacks expose a real vulnerability in decentralized systems. DAOs shift power away from central authorities to token holders who vote on proposals. But that structure can be exploited if an attacker acquires enough voting power or if governance mechanisms lack adequate safeguards. The $4 million cost to steal $20 million illustrates the asymmetric risk: modest upfront spending can unlock massive payouts. For investors holding BONK or participating in other DAOs, tokenomics and governance design matter as much as the underlying project. If voting power is concentrated or thresholds are too low, a treasury becomes vulnerable to similar attacks. The incident underscores why governance frameworks deserve scrutiny before participation.