Bonk Governance Exploit Drains $20 Million From DAO Treasury

• BonkDAO lost approximately $20 million in tokens due to a governance attack that exploited token-weighted voting mechanisms on July 6, 2026.20m governance attack rattles.
• The attacker accumulated voting power by spending roughly $4.4 million, passing a malicious proposal that drained the treasury without any code vulnerabilities.drained the treasury without vulnerabilities.
• ENS DAO recently implemented a two-year veto council to prevent similar governance exploits, citing the Bonk incident alongside the Beanstalk and Tornado Cash attacks as evidence of systemic risks.prevent similar governance exploits.
• BONK has fallen 93% from its all-time high, trading near $0.0000028, as stolen tokens create persistent sell pressure on major exchanges .

BonkDAO confirmed a severe governance exploit on July 6 that resulted in the draining of approximately $20 million in BONK tokens . The attacker did not exploit a code vulnerability but instead manipulated the governance process by accumulating voting power across Bybit and Binance wallets . Security analysis by Halborn revealed that the attacker spent roughly $4 million to acquire enough voting power to force the passage of Bonk Improvement Proposal 76 . This proposal contained a hidden clause that transferred 4.43 trillion tokens to a wallet controlled by the attacker, effectively hijacking the protocol's treasury .

The incident highlights critical structural vulnerabilities in meme coin governance where token-weighted voting makes it cheaper to buy influence than to find technical vulnerabilities . Following the initial drain, the attacker dumped another 800 billion BONK tokens, worth approximately $2.48 million, onto exchanges on July 18 and 19 . The attacker currently holds roughly 2.4 trillion BONK, creating persistent selling pressure that the community cannot eliminate through code alone . This overhang will likely suppress price action until the tokens are fully liquidated or recovered .

The market reaction has been severe, with BONK trading near $0.0000028, roughly 93% below its November 2024 all-time high of $0.00005825 . South Korean exchanges Upbit and Bithumb have suspended deposits entirely, cutting off a key liquidity channel . The stolen tokens have begun appearing on major exchanges including Binance, Coinbase, and OKX, creating direct sell pressure that complicates any price recovery . While DigitalCoinPrice had previously projected a year-end range of $0.0000056 to $0.0000097, the attack has rewritten the risk profile, making price predictions fragile and headline-driven .

How Is ENS DAO Mitigating Governance Risks?

ENS DAO has activated a two-year veto council designed to remove council members who operate outside approved authority . This move was prompted by recent high-profile governance attacks in the crypto space, specifically citing the BonkDAO incident where a malicious proposal drained approximately $20 million from its treasury . Analysis of that attack revealed that BonkDAO lacked critical safeguards such as a timelock and emergency multisig veto, leaving it exposed to governance capture .

ENS cited the BonkDAO incident alongside the 2022 Beanstalk exploit, where an attacker used a flash loan to temporarily gain voting control, to justify the new framework . The ENS mandate specifically allows intervention when documentary evidence proves a proposal was passed via exploited flash loans or similar manipulation . The protocol’s approach introduces a two-day delay between proposal approval and execution, during which five council members can act if emergency rules are met .

Additionally, the ENS council addresses threats like the 2023 Tornado Cash governance takeover, where an attacker submitted seemingly legitimate code that changed behavior post-approval . This highlights the risk that token holders may approve compromised code without detecting hidden malicious intent . While ENS notes that stronger delegation and higher voter participation can increase the cost of attacks, it acknowledges these measures cannot fully prevent issues stemming from compromised credentials, coordinated token purchases, bribery, or malicious code embedded in proposals .

What Is the Current Market Status of BONK?

BONK, a Solana-based token project, has launched Circus, a new launchpad designed to make newly issued tokens available on the Robinhood platform.new launchpad on Robinhood. This initiative aims to broaden access to token launches for retail investors, a demographic traditionally served by Robinhood through stocks and ETFs . The launch expands BONK's existing product ecosystem, which has grown rapidly with BONKtrade recording over $400 million in monthly volume in June . Additionally, BONKBot, an automation layer for executing trades via chat, processes approximately $1.5 million in daily transactions .

Core contributors describe the launch as a way to bring BONK's energy to a new stage, targeting the "next wave of investors" already present on Robinhood . However, specific details regarding supported tokens, allocation structures, and listing criteria have not yet been published . The open question remains how a Web3-native launchpad will function within a platform built around traditional financial assets and how regulators will treat early-stage token distribution to a mainstream retail audience .

The DAO is currently collaborating with the Solana Foundation and exchanges to trace the stolen funds . Recovery now hinges on the speed of the DAO's response and the freezing of stolen assets . Market analysis indicates that BONK is trading near $0.000003030 in July 2026, down from above $0.0000044 prior to the incident . Support levels are identified near $0.0000027, with a break below potentially opening a path toward $0.0000020 .