Tools Crypto Exploit Tracker exploit-0025
Exploit record
BonkDAO
- Loss
- $20M
- Attack vector
- Governance Attack
- Chain
- Solana
- Sector
- DeFi
What happened
On 6 July 2026 an attacker drained roughly $20 million in BONK tokens from BonkDAO's treasury by passing a malicious governance proposal; BONK fell around 8–10%.
The attacker accumulated an estimated $4 million of BONK to dominate token-weighted voting on Solana's Realms platform, then pushed through 'BIP #76', submitted on 30 June and dressed as a governance renewal plan, whose operative clause transferred 4.43 trillion BONK to an attacker-controlled wallet; only 7 of more than 18,000 eligible wallets voted, and the attacker cast 99.878% of votes. The DAO coordinated with the Solana Foundation, law enforcement and exchanges, with Upbit, Bithumb and Kraken suspending BONK deposits and withdrawals; no recovery had been confirmed by mid-July.
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026