Anonymous attacker purchased $4.4M in BONK to gain voting control and drained $21.2M from BonkDAO treasury, securing $16.8M profit via legitimate governance mechanism.
Security & Exploits ·
An anonymous wallet acquired $4.4 million in BONK tokens to accumulate sufficient voting power and pass a proposal that transferred $21.2 million from the BonkDAO treasury, netting the attacker $16.8 million in profit. The transaction exploited the DAO's governance mechanism rather than a technical vulnerability, raising questions about whether the action constitutes theft or legitimate governance participation. CryptoPotato reported that BonkDAO confirmed the treasury loss and is coordinating with law enforcement and exchanges on the matter.
The incident has fractured community sentiment. Some participants view the withdrawal as unauthorized theft of DAO assets, while others argue the attacker operated within the established rules of the governance system. The distinction hinges on whether using voting power acquired through token purchase—without protocol manipulation—should be considered legitimate, even when the outcome harms the organization.
In the aftermath, BONK's price fell 7.4%. BonkDAO faces unresolved questions: whether governance safeguards were adequate, whether any on-chain actions can recover the funds, and what enforcement options exist if the attacker remains anonymous.