SOL memecoin DAO suffers $20M theft

TLDR

BonkDAO, the maker/">DAO behind Solana memecoin Bonk (BONK), has confirmed a malicious governance attack that drained about $20 million worth of BONK tokens from its treasury.

1. An attacker used a malicious governance proposal to move roughly 4.4 trillion BONK (about $20 million) out of BonkDAOs Solana treasury, with law enforcement now involved.
2. BONK has fallen around 9% over 24 hours, with market cap near $385.17 M and 24h volume at $126.28 M, highlighting both price and governance risk for Solana memecoins.
3. BonkDAO is working with exchanges, bridges, and the Solana Foundation to trace funds, while users should watch token flows, listing status, and any governance security upgrades.

Deep Dive

1. Attack Details And Mechanism

Multiple reports, citing BonkDAOs own X post, say the DAO was hit by a malicious governance proposal that drained about $20 million worth of BONK from its treasury on Solana, roughly 4.426 trillion tokens in total. In Bonk Improvement Proposal #76 (Sowellian BonkDAO), the attacker accumulated enough BONK via exchanges to control the vote, then passed a proposal that instructed the treasury to send the tokens to their wallet, later moving them to additional addresses and toward exchanges, as detailed in coverage such as this exploit report.

BonkDAO says it has identified exchange wallets used to accumulate BONK ahead of the vote and has notified law enforcement, while also coordinating with centralized exchanges, bridges, and the Solana Foundation to try to freeze or recover the stolen assets.

Confidence: high because the incident comes directly from BonkDAOs verified communications and is corroborated by several major crypto news outlets.

2. Market And Governance Fallout

On market data, Bonk (BONK) currently trades around 0.0000043772 USD, with percent_change_24h at -8.88%, market_cap at 385.17 M and volume_24h at 126.28 M, and ath_drawdown_pct reported as +92.6%, indicating it is over 90% below its all-time high. Following the theft, news outlets report a 79% daily drop, with memecoins broadly under pressure and sector market cap down more than 50% year over year.

The exploit did not use a smart contract bug but the DAOs token-weighted voting system, underlining a governance risk: buying voting power can be enough to capture a treasury if safeguards like time locks and emergency multisig controls are weak. Some exchanges, including Upbit and Kraken, have temporarily paused BONK deposits and withdrawals for user protection, which can affect short-term liquidity and confidence around Solana memecoins.

3. Recovery Efforts And Next Signals

BonkDAO is working with law enforcement, centralized exchanges, bridges, and the Solana Foundation to trace the stolen BONK and potentially freeze funds once they hit KYC venues, according to multiple reports. The attackers key wallets have been flagged, but whether a meaningful portion of funds can be recovered remains uncertain.

Going forward, the most important signals to watch are:

1. Whether exchanges announce freezes or seized BONK tied to the attackers wallets.
2. Any BonkDAO proposals that add execution delays, stricter quorum rules, or multisig overrides to governance.
3. Changes in BONK liquidity and listing status on major Solana-aligned venues.

Conclusion

The BonkDAO theft is not just a $20 million loss; it exposes how token-weighted voting can be weaponized to seize a DAO treasury when safeguards are weak. For BONK and other Solana memecoins, the market impact will hinge on whether stolen tokens are frozen or sold into thin liquidity and on how quickly governance security is hardened to restore confidence.