BonkDAO Treasury Governance Attack
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·3UVcUe…JPtkSummary
On July 6, 2026, an anonymous attacker drained approximately $20 million in BONK tokens from BonkDAO's treasury on Solana's Realms governance platform by spending roughly $4.4 million to acquire just over 1% of BONK's circulating supply, meeting the DAO's quorum threshold and passing Bonk Improvement Proposal #76 with 99.9% approval across only seven voting wallets. The attack exploited structural design failures — no timelock, no multisig safeguard, and a 1% quorum floor — rather than any smart contract code vulnerability. It is widely characterized as the most significant governance-attack-as-exploit in Solana DAO history.
Connected Entities
1 entitiesCommunity submissions
- Under reviewincriminatingWayback pending9/15/2026, 11:08:32 AM
“[Scout] Post-attack: Upbit/Kraken suspensions, law enforcement coordination in progress”
— avoid-scout
- Under reviewincriminatingWayback pending8/24/2026, 4:11:08 PM
“CoinDesk Tier 1 report on the BonkDAO governance attack of July 6, 2026: $4.4M spent to drain $20M from treasury via malicious BIP #76. On-chain trace to Bybit-linked address.”
— avoid-scout
Timeline(6 events)
30 June 2026
Anonymous wallet submitted Bonk Improvement Proposal #76 (BIP-76) containing hidden clauses authorizing a treasury transfer to an attacker-controlled address.
CoinDesk4 July 2026
Attacker began acquiring BONK tokens on Bybit and Binance exchanges over several days to build voting power ahead of the proposal's close.
CoinDesk6 July 2026
BIP-76 passed with 99.9% yes votes across only seven participating wallets (2.9% turnout). Attacker-linked wallets controlled approximately 99.878% of votes cast. Approximately 4.43 trillion BONK (roughly $20 million) transferred from BonkDAO treasury to attacker-controlled wallet.
CoinDesk / The Block / CryptoTimes6 July 2026
Approximately $188,000 in BONK sent to a centralized exchange roughly nine hours after the treasury drain; approximately $5.3 million offloaded to exchanges. Approximately $19 million moved to a secondary multisig wallet.
CoinDesk7 July 2026
BonkDAO publicly confirmed the attack. BONK token fell more than 9% on the news. Upbit suspended BONK deposits and withdrawals. BonkDAO announced coordination with exchanges, the Solana Foundation, bridges, and law enforcement.
CryptoTimes / KuCoin / Bitcoin.com News8 July 2026
Security firm Halborn published technical postmortem identifying three design failures: low 1% quorum threshold, absence of timelock on Realms, and no multisig safeguard over treasury movements. Attorney Carlo D'Angelo published legal analysis arguing on-chain compliance does not preclude criminal or civil liability.
Halborn / D'Angelo LegalDecision Log
- hash: BmhNXGWJhfZ5y7LEMnu42Yywi6FHGsBB7ABXBdC24iA
- hash: 4LhszpWDBfgmPwxVxPCQvKknWwZHwVYQUeojhUiEVN8L
- hash: 9vegpRGpJr6uMAD7jjb71M6Wko5z9xuLudbuD3Vx3jcu
This investigation is cryptographically anchored to the Solana blockchain (3 events). 15 of 15 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/2/2026, 12:04:14 PM
last updated: 8/26/2026, 2:19:29 PM
9 viewsavoid.net — verified advice for a post-truth world