{"id":"bonkdao-governance-proposal-drain-jul-2026","category":"breach","status":"closed","title":"BonkDAO treasury drained of about US$20 million through malicious governance proposal BIP #76","tldr":"An attacker bought about 1% of BONK supply, passed proposal BIP #76 and drained roughly US$20M of BONK from BonkDAO's treasury on 6 July 2026. No recovery or charges found. Nothing to patch; BONK holders should expect no refund and ignore \"recovery\" offers.","summary":"On 6 July 2026 an attacker emptied about US$20 million of BONK from the treasury of BonkDAO, the community organisation behind the Solana memecoin BONK. No software bug was involved. The attacker spent about US$4.4 million buying just over 1% of BONK's supply, enough to pass a governance proposal on its own. The proposal, BIP #76, was submitted on 30 June and billed as a reward for YES voters, but it also moved about 4.43 trillion BONK to a wallet the submitter controlled. Analysts say the DAO had no delay between a vote passing and the proposal running, and the 1% quorum let the attacker's own votes carry it, so nobody had time to stop it. BonkDAO said it told law enforcement and is working with others to recover funds. Upbit and Kraken paused BONK deposits and withdrawals. The latest coverage we found, from mid-July, reports no funds recovered or frozen and no one charged. Later developments are not known.","action":"Nothing to update. If you hold BONK, treat any message offering to recover funds, a refund or a \"YES voter\" reward as a likely scam, and check news from Bonk's official account only.","product":"BonkDAO treasury and governance (BONK token, Solana)","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["crypto","solana","bonk","dao","governance-attack","crypto-theft","data-breach"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"news","title":"BonkDAO loses $20 million following malicious governance proposal attack","url":"https://www.theblock.co/news/ecosystems/2026-07-06-bonkdao-loses-20-million-following-malicious-governance-proposal-attack-407343","by":"The Block","date":"2026-07-06"},{"kind":"news","title":"Attackers vote themselves $20 million in BONK crypto","url":"https://therecord.media/attackers-vote-themselves-20-million-bonk-crypto","by":"The Record","date":"2026-07-06"},{"kind":"research","title":"BonkDAO - Rekt","url":"https://rekt.news/bonkdao-rekt","by":"Rekt","date":"2026-07-10"},{"kind":"research","title":"Explained: the BonkDAO hack (July 2026)","url":"https://www.halborn.com/blog/post/explained-the-bonkdao-hack-july-2026","by":"Halborn","date":"2026-07-13"}],"started":"2026-07-06","closed":"2026-07-13","created":"2026-11-03T21:25:25.617Z","updated":"2026-11-03T21:25:25.617Z","cve_notes":[],"timeline":[{"at":"2026-07-13","added":"2026-11-03T21:23:52.346Z","kind":"other","text":"Halborn's analysis gave the cause as no timelock and a quorum of only about 1% of supply, so the attacker's own votes carried the proposal with about 99.878% of votes cast. It mentioned no recovery or arrests.","url":"https://www.halborn.com/blog/post/explained-the-bonkdao-hack-july-2026","by":"Halborn","patch":null},{"at":"2026-07-10","added":"2026-11-03T21:23:52.346Z","kind":"other","text":"Rekt reported the stolen funds had been moved to a new three-signer multisig, not a mixer. It said no funds had been frozen or recovered, no one had been charged, and Upbit and Kraken had paused BONK deposits and withdrawals.","url":"https://rekt.news/bonkdao-rekt","by":"Rekt","patch":null},{"at":"2026-07-06T09:42Z","added":"2026-11-03T21:23:52.346Z","kind":"wider-attacks","text":"The vote closed and the treasury was drained in the same block. Rekt reports 4,426,104,450,305 BONK moved, worth roughly US$19.3 million at the time. The attacker had spent about US$4.4 million buying just over 1% of supply, and the rules had no delay between approval and execution.","url":"https://rekt.news/bonkdao-rekt","by":"Rekt","patch":"na"},{"at":"2026-07-06","added":"2026-11-03T21:23:52.346Z","kind":"other","text":"The Record reported the attackers voted BONK into their own wallets. It noted BonkDAO had not confirmed the amount the attackers gathered beforehand, and that no recovery had been reported.","url":"https://therecord.media/attackers-vote-themselves-20-million-bonk-crypto","by":"The Record","patch":null},{"at":"2026-07-06","added":"2026-11-03T21:23:52.346Z","kind":"other","text":"Bonk's official account announced a malicious governance proposal had drained an estimated US$20 million. BonkDAO said it had told law enforcement and identified the exchange wallets used to buy BONK beforehand. Upbit temporarily suspended BONK deposits and withdrawals.","url":"https://www.theblock.co/news/ecosystems/2026-07-06-bonkdao-loses-20-million-following-malicious-governance-proposal-attack-407343","by":"The Block","patch":"na"},{"at":"2026-06-30","added":"2026-11-03T21:23:52.346Z","kind":"disclosed","text":"A proposal called BIP #76, \"Sowellian BonkDAO\", was submitted to BonkDAO's governance system on Solana. It was presented as a reward for YES voters but contained a hidden instruction to move about 4.43 trillion BONK from the treasury to a wallet the submitter controlled.","url":"https://www.halborn.com/blog/post/explained-the-bonkdao-hack-july-2026","by":"Halborn","patch":null}],"url":"https://hard.fyi/live/bonkdao-governance-proposal-drain-jul-2026/","json":"https://hard.fyi/api/live?id=bonkdao-governance-proposal-drain-jul-2026"}