BONK Treasury Loses $20M to Malicious Governance Vote

BONK News

South Korea's three largest digital-asset exchanges — Upbit, Bithumb and Coinone — placed BONK, the Solana-based meme coin, under a formal trading-caution designation on July 7. The exchanges' official announcements state the flag took effect at 4:00 p.m. local time and runs through the first week of August, citing an unresolved security incident and the inadequate disclosure of material information. The coordinated action followed the draining of roughly 20 million dollars in BONK from the project's decentralized treasury. Under the designation, each platform will conduct an additional review that could end in reinstatement or a full delisting, leaving holders facing weeks of uncertainty around the token's exchange standing.

On-chain data shows the exploit was executed entirely through legitimate transactions. An anonymous actor spent roughly 4.4 million dollars accumulating BONK across Bybit and Binance, and borrowed additional tokens through DeFi venues such as automated market makers, to amass enough voting weight to control the outcome. Rather than breaching any smart contract, the attacker exploited a structural weakness in on-chain governance: voting power that can simply be purchased. Because meme-coin communities often ignore routine proposals, the buyer needed only a small share of the circulating supply to seize control of the treasury vote and trigger its automatic execution.

The proposal, filed on June 30 and labeled BIP #76, asked BonkDAO to transfer 4.426 trillion BONK to a wallet the proposer controlled. To pass, it required backing from at least 1% of the roughly 88 trillion token supply — a threshold near 879.95 billion tokens. The attacker cleared it narrowly, voting 882.285 billion BONK in favor. On-chain records show just seven wallets participated, producing a turnout of about 2.9% while more than 18,000 DAO members abstained. The lopsided tally underscored how thin participation can let a single, well-funded voter approve a treasury transfer without scrutiny — an on-chain echo of blind signing.

Once the vote closed on July 6, the smart contract automatically released the funds, and roughly 21 million dollars in BONK left the treasury. On-chain data indicates the attacker routed about 188,000 dollars to a centralized exchange, with security researchers putting that figure closer to 148,000 dollars, while the remainder moved into a multi-signature wallet and a newly created entity dubbed BONK 2.0. The exploiter later sold roughly 5.3 million dollars of the BONK bought to finance the attack, yet retained the treasury tokens. Analysts estimate the net profit at about 16.8 million dollars, a return that has drawn scrutiny to how the funds were laundered through fresh on-chain structures.

BonkDAO confirmed the breach in a July 6 statement, describing it as a malicious governance proposal that drained an estimated 20 million dollars from its treasury. The organization said it had identified the exchange wallets used to buy BONK ahead of the vote and had notified law enforcement. It added that it is coordinating with exchanges, cross-chain bridges and the Solana Foundation to contain the damage and pursue recovery. Separately, Upbit temporarily suspended BONK deposits and withdrawals as stolen tokens began moving toward trading venues, a precaution aimed at limiting the attacker's ability to liquidate the proceeds before they could be traced or frozen.

The episode has split observers over whether it constitutes theft or a legitimate use of the rules. Every step — buying tokens, casting votes and executing the transfer — complied with the protocol's on-chain logic, prompting some to frame it as governance arbitrage rather than a hack. BonkDAO and the analytics firms tracking the flows classify it as an attack, a view reinforced by law-enforcement involvement. BONK, an altcoin launched on Solana in December 2022, built its profile through large airdrops and had gained credibility after inclusion in several exchange-traded products, making the governance failure a notable setback for the project.

Our reading of COINOTAG's proprietary 42-indicator composite support-and-resistance scoring engine places BONK's primary support band at a strong 74/100, a level whose weight comes from the confluence of a Fibonacci retracement, the lower Donchian channel and ATR-based volatility bounds. Immediate overhead resistance scores 71/100, anchored by the previous daily close and the R1 pivot. Momentum is muted: the 14-period RSI sits at 41.55 and MACD reads neutral, consistent with a sideways trend and a 6.49% daily decline. Perpetual funding at -0.0137% shows traders leaning modestly short, while a market-wide Fear & Greed reading of 27 signals Fear. A close below the 74/100 support would invalidate the stabilization case and risk a deeper bear market leg; reclaiming the 71/100 resistance is the bulls' first hurdle.