CEXs pause memecoin after $20M DAO hack

TLDR

BonkDAO, which governs Solana memecoin Bonk (BONK), has suffered a $20 million governance attack, and centralized exchanges are moving to contain the fallout.

1. An attacker used token-weighted voting to pass a malicious proposal, draining around $20 million in BONK from the maker/">DAO treasury into attacker-controlled wallets.
2. BonkDAO says it is working with centralized exchanges, bridges, and the Solana Foundation to track and freeze stolen BONK, with some venues reportedly restricting flows.
3. The incident highlights governance attacks as a major risk for DAO treasuries and could push memecoin projects toward tighter safeguards and clearer legal accountability.

Deep Dive

1. Malicious Vote Drains $20M

Reports from BonkDAO and multiple outlets confirm that a single governance proposal emptied roughly $20 million in BONK from the DAO treasury on Solana by exploiting token-weighted voting, not a code bug. In the week before the vote, the attacker bought about $4 million in BONK on major exchanges to gain near-total control of a low-turnout vote, then passed a proposal that legitimately transferred roughly 4.426 trillion BONK into their wallets via the DAOs governance system.

Because every step (buying tokens, voting, executing the proposal) followed on-chain rules, this is classified as a governance attack, where the system behaves exactly as designed but is used for theft, as explained in a detailed governance attack explainer. BonkDAO publicly acknowledged the loss and notified law enforcement in its own statements and in coverage such as the BonkDAO treasury loss report.

2. CEX Coordination And Liquidity Impact

BonkDAO says it has identified exchange wallets used to accumulate BONK ahead of the attack and is actively working with exchanges, bridges and Solana Foundation to best manage the situation, including attempts to freeze stolen assets as they move toward trading venues. Some reports note BONK being sent to platforms like OKX and that exchanges are cooperating to block attacker-linked addresses, which can slow down liquidation of the stolen tokens and reduce immediate sell pressure.

At the same time, any temporary restrictions on BONK deposits or trading pairs would directly affect user liquidity, especially for a memecoin that relies heavily on CEX access. This coordination is framed as a necessary containment step in analyses of memecoin treasury risk such as this treasury risk analysis.

3. Governance And Legal Fallout

Security analysts are already pointing to the BonkDAO case as a textbook example of why token-weighted voting, low quorum, and instant execution are dangerous for treasuries, especially in volatile memecoin ecosystems. Commentators note that BonkDAO is considering tighter controls such as timelocks, higher quorum thresholds, vote concentration alerts, and multisig or council checks on large treasury moves.

Legal voices are also weighing in. Ripple CTO emeritus David Schwartz argues the exploit amounts to corporate fraud and that unregistered DAOs can be treated as general partnerships, making participants jointly liable, as discussed in a legal commentary on the exploit. This raises the stakes for anyone voting on proposals that move significant funds.

Confidence: moderate - exploit mechanics and DAO statements are well documented, but specific exchange pause policies may still be evolving.

Conclusion

A single well-capitalized attacker used centralized exchange liquidity to buy BONK, seize BonkDAO governance, and drain its treasury, forcing the project to rely on those same exchanges to help freeze and contain the stolen funds. For crypto users, especially around memecoins, this is a clear signal that DAO governance design and venue-level controls belong in the core risk checklist, not as afterthoughts, and that upcoming changes in BONKs governance and legal handling are worth watching closely.