BONK DAO Lost $20 Million Without a Hack — Here's How a Governance Attack Drained the Treasury

There was no code exploit. No compromised private key. No phishing link. And yet BonkDAO says attackers stole about $20 million in BONK through a malicious governance proposal targeting its Solana treasury. 

The attacker didn't break the rules — they bought them.

What happened to BONK DAO?

$BONK is a Solana-based memecoin, and BONK DAO is the community body that governs it. Token holders vote on proposals, and if a vote passes, it executes automatically on-chain. That design is exactly what got weaponized.

The sequence began on June 30, when an anonymous wallet submitted a proposal to transfer the treasury's holdings to a wallet it controlled. That proposal was titled "BIP #76 – Sowellian BonkDAO," and it read more like a pitch than a heist: it sought to "implement Sowellian governance, install new members and council, rebuild from the ashes, monetize holdings, and stop the bleeding," and dangled a reward promising all "yes" voters would be eligible to receive BONK tokens. 

Buried underneath the marketing language sat the only line that mattered — an instruction to transfer roughly 4.4 trillion BONK straight to the attacker's wallet.

How did the attacker pass a fake propos...