A $20M memecoin treasury drain — how a 'governance attack' turns votes into a weapon

The team behind Bonk, one of the best-known dog-themed memecoins on the Solana blockchain, said an attacker drained about $20 million from its community treasury by pushing through a malicious governance proposal. Roughly 4.4 trillion BONK tokens were moved out of the treasury early Monday, and the project says it has notified law enforcement and is working with exchanges to trace the funds.

Many crypto projects are run partly through what is called governance, where people who hold a project's token can submit and vote on proposals that decide how a shared treasury is spent. In this case, a proposal numbered BIP-76 and titled 'Sowellian BonkDAO' passed a community vote, and one of its instructions sent the treasury's tokens to an address controlled by the attacker.

The proposal reportedly dangled a reward: anyone who voted yes would be eligible to receive BONK tokens. That kind of promise is a classic lure. It nudges holders to approve something quickly without reading the fine print, and it can help an attacker gather enough votes to push a harmful proposal over the line. The stolen tokens were later shuffled to a second wallet, a common step used to make funds harder to follow.

Exchanges reacted fast. Upbit in South Korea and Kraken in the United States both paused deposits and withdrawals of BONK, citing user protection while the incident is investigated. BONK's price fell about 7% over the following day.

The lesson for beginners is that governance is not a formality. A project's treasury is only as safe as the rules for who can propose and pass a vote. When a proposal offers free tokens in exchange for a yes, treat it as a red flag, not a gift. And remember that a token being popular, or having a big community, does not mean its money is safely locked away.