# BONK DAO Drained of $20 Million in Governance Attack **BonkDAO**, the decentralized autonomous organization (DAO) governing the dog-themed memecoin **BONK** on the **Solana** blockchain, has confirmed a sophisticated attack resulting in the loss of an estimated $20 million in cryptocurrencies. The incident, disclosed by **BonkDAO** on social media, involved a novel exploitation method known as a 'malicious governance proposal.' ## How the Attack Unfolded Unlike typical smart contract exploits, this attack leveraged the very democratic principles of DAOs. Attackers reportedly accumulated a substantial amount of **BONK** tokens — some reports suggest around $4 million worth — enabling them to gain significant voting power within the **BonkDAO** governance system. With this leverage, they pushed through a malicious proposal that effectively allowed them to transfer a large quantity of **BONK** from the project's treasury into their own wallets. **BonkDAO** stated it has identified the exchange wallets used to acquire the **BONK** tokens leading up to the proposal, indicating a pre-meditated strategy by the perpetrators. ## Immediate Repercussions and Response In the wake of the incident, the price of **BONK** experienced a dip of approximately 7%, impacting its overall market capitalization, which stands around $400 million. Authorities have been notified, and **BonkDAO** is actively collaborating with relevant parties in an effort to recover the stolen funds and identify those responsible. The South Korean cryptocurrency exchange **Upbit** has temporarily suspended deposits and withdrawals of **BONK** as a precautionary measure. ## A Growing Threat: Governance Exploits This incident highlights a critical vulnerability in the DAO model, where concentrated voting power can be weaponized. While smart contract hacks typically target code flaws, a malicious governance proposal corrupts the decision-making process itself. This isn't an isolated event. A notable precedent occurred in 2022 when an attacker drained approximately $180 million from the **Beanstalk** platform through a similar governance exploitation. U.S. authorities have been increasingly investigating and prosecuting various cryptocurrency-related thefts, including those involving smart contracts, like the **Uranium Finance** incident where $54 million was stolen. In some cases, platforms have successfully recovered assets, as seen with the **Nomad** platform, which was ordered by the **Federal Trade Commission (FTC)** to distribute $37.5 million in recovered crypto after a 2022 incident. The **BonkDAO** attack serves as a stark reminder for IT security professionals and privacy-conscious users of the evolving threat landscape in decentralized finance, emphasizing the need for robust governance frameworks and vigilant community participation.