BonkDAO Details $20M Theft Allegedly Linked to Malicious Proposal

The DAO behind the Bonk (BONK) memecoin says an unknown actor drained $20 million in tokens from its Solana treasury, claiming the theft was carried out via what it describes as a “malicious governance proposal.” BonkDAO says it has contacted law enforcement and is working to recover the funds and determine who is responsible.

On Monday, the Bonk project posted on X that it reported the incident to authorities after the attack, which it says resulted in the transfer of $20 million worth of BONK tokens from the DAO’s treasury. The project did not identify the attacker, but framed the event as an abuse of its governance process rather than a simple compromise of its wallet or infrastructure.

Key takeaways

• BonkDAO claims $20 million in BONK tokens were removed from its Solana treasury through a “malicious governance proposal.”
• The project says it has informed law enforcement and is pursuing a fund-recovery effort while investigating the responsible party.
• BONK’s price reportedly fell about 7% over 24 hours following the reports, while broader memecoin market capitalization has been volatile.
• The incident echoes other recent memecoin-related compromises where attackers exploited on-chain mechanics around liquidity or governance.

What BonkDAO alleges happened

According to Bonk’s announcement on X, the DAO’s treasury on Solana was drained by an entity the project says it cannot yet identify. BonkDAO specifically points to a governance proposal that it characterizes as malicious, suggesting that the attacker used the protocol’s decision-making mechanics to move funds.

The project stated that the parties involved drained $20 million in tokens from the BonkDAO treasury. As part of its response, Bonk said it has already contacted law enforcement, and it is focused on two immediate goals: recovering funds and identifying those behind the proposal.

While the company’s exact internal controls and the timing of the proposal were not detailed in the post, the core claim—that the theft route involved governance—matters for token holders because governance systems are typically designed to be resilient to single points of failure. If a malicious proposal can pass or execute successfully, it raises questions about how proposals are validated, how voting authority is distributed, and what safeguards exist against fraudulent or coercive actions.

Market reaction and broader memecoin fragility

The reporting of the attack coincided with weakness in the BONK market. The article notes BONK was down roughly 7% over 24 hours and trading around $0.05 at the time of publication.

That move occurred during a period when memecoins broadly have struggled. The market capitalization of major memecoins—including Dogecoin (DOGE), Shiba Inu (SHIB), and Pepe (PEPE)—hit a reported two-year low last week, falling to roughly $22 billion before recovering to more than $26 billion in July. Based on CoinMarketCap data, total memecoin market capitalization stood at about $25.3 billion at the time of publication, down more than 54% compared with the prior 12 months.

For investors, incidents like this tend to amplify existing concerns about risk management and operational security across the memecoin sector. Even where the affected token is not the only one linked to memecoin sentiment, governance-driven treasury drains can quickly affect confidence in how safely community-controlled funds are managed.

Security pattern: governance and liquidity attacks

BonkDAO’s framing aligns with a wider pattern seen in the memecoin ecosystem, where attackers have targeted the mechanisms that make token economies function—especially liquidity and permissions.

Earlier coverage cited in the article described how the memecoin launch platform DxSale reported losing $7.3 million in tokens after a cyberattack connected to liquidity providers on the BNB Chain. In that case, sleuths were said to have identified the attacker’s wallet, but an expert also warned that tracing can be complicated by the infrastructure used to move stolen funds.

Taken together, these episodes highlight a recurring asymmetry: even when analysts can identify wallets or link activity on-chain, recovering assets may remain difficult if funds are transferred rapidly across multiple addresses or through tools that obscure the trail. BonkDAO’s statement that it is working to recover funds suggests the project expects the process to be complex, potentially involving coordination with exchanges, chain analysis efforts, and legal processes.

Related pressure on memecoin investors

The article also points to reporting about losses among holders of Official Trump (TRUMP), a memecoin associated with U.S. President Donald Trump. The New York Times, the article says, reported that about 1 million investors holding TRUMP had collectively lost $3.8 million as of June 30, citing data from blockchain analytics provider Nansen.

While that report focused on performance and holder outcomes rather than theft, it underscores a key reality for memecoin participants: the sector can deliver sharp drawdowns quickly. When governance incidents and broader volatility overlap, traders and long-term holders alike may face heightened uncertainty, especially around treasury actions, token distribution, and the transparency of risk controls.

Readers should watch next for whether BonkDAO can publish additional technical details about the governance proposal—such as the voting pathway, approval mechanism, and the steps taken to prevent similar actions—as well as for any updates from law enforcement or chain-monitoring efforts tied to the stolen funds. Until the investigation clarifies how the malicious proposal succeeded and whether any assets can be recovered, the incident remains a reminder that memecoin “community control” still depends heavily on robust smart-contract and governance safeguards.