Breaches and incidentsBriefChecked against a primary source
BonkDAO: treasury drained by a governance proposal
6 Jul 2026, Solana: about 4.43T BONK (about USD 20.5M per Hypernative; USD 21.2M per QuillAudits) moved from the community treasury.
- Disclosed
What happened
- Root cause per Hypernative: governance parameters, not code. Realms (SPL Governance) with a 1% approval threshold, no execution timelock, and quorum set as a share of supply. The attacker bought about 882.3B BONK (about 1.003% of supply, about USD 4.09M), passed proposal BIP #76 created 30 Jun, and withdrew the staked BONK afterwards.
- Attribution: none.
- Response: no recovery reported. Nothing flagged the proposal during the six days it was open.
Sources
- https://www.hypernative.io/insights/blog/the-bonk-dao-governance-drain-the-same-attack-reserve-already-stopped
- https://theblock.co/post/407343/bonkdao-loses-20-million-following-malicious-governance-proposal-attack
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.