BONK, one of Solana’s most recognizable memecoins, is facing a major governance crisis after an attacker reportedly spent roughly $4 million to push through a malicious proposal that could drain approximately $20 million from the project’s treasury. The incident has raised urgent concerns about DAO governance security, token-based voting manipulation, and the growing risks facing community-controlled crypto treasuries.
The attack highlights a major weakness in decentralized governance: when voting power can be bought quickly, well-funded attackers may be able to influence protocol decisions even if the broader community opposes them. For BONK, the situation threatens not only treasury funds but also community trust in one of Solana’s most active memecoin ecosystems.
A Malicious Proposal Targets BONK’s Treasury
According to reports, the attacker accumulated enough voting power to pass a proposal designed to move funds from BONK’s community treasury.
The proposal could potentially redirect around $20 million worth of assets if executed successfully. Rather than exploiting smart contract code directly, the attacker appears to have used the project’s own governance system as the attack vector.
This makes the incident especially concerning because the threat came through the same voting process intended to give the community control over the project.
Attacker Reportedly Spent $4 Million to Gain Voting Power
The attack reportedly involved spending approximately $4 million to acquire enough BONK-related governance influence to push the proposal through.
That strategy reflects a form of economic governance attack, where an attacker calculates that the cost of acquiring voting power is lower than the value they can extract from the treasury.
In this case, the potential reward was estimated at roughly five times the attacker’s upfront cost, making the exploit financially attractive if the transaction could be completed.
DAO Governance Faces Another Stress Test
The BONK incident adds to a growing list of governance attacks and attempted treasury takeovers across crypto.
Many decentralized organizations rely on token-weighted voting, where users with more tokens or delegated voting power have greater influence. While this model can be efficient, it can also create vulnerabilities when voting power is concentrated or easily purchased.
If a treasury contains tens of millions of dollars, attackers may be incentivized to temporarily acquire voting influence, pass a malicious proposal, and extract funds before the community can respond.
Community Response Becomes Critical
After the proposal passed, BONK community members and ecosystem participants began working to prevent the treasury drain from being executed.
In governance attacks, timing becomes extremely important. If a proposal includes a delay before execution, developers, multisig signers, exchanges, and community members may have a window to coordinate defensive action.
The outcome will likely depend on whether BONK’s governance structure includes sufficient safeguards to pause, cancel, or neutralize malicious proposals before funds are moved.
Solana Memecoin Ecosystem Under Pressure
BONK has played a major role in Solana’s resurgence over the past several years.
Originally launched as a community-driven memecoin, BONK became one of Solana’s most widely recognized tokens and helped fuel renewed activity across the network’s DeFi, NFT, and consumer app ecosystems.
A successful treasury drain would be a major setback not only for BONK holders but also for confidence in Solana-based community tokens and DAO-managed treasuries.
Why Treasury Security Matters
Crypto treasuries are becoming increasingly valuable.
Many projects now hold millions—or even hundreds of millions—of dollars in assets used for grants, ecosystem development, liquidity incentives, marketing, and long-term operations. As those treasuries grow, attackers are increasingly targeting governance mechanisms rather than only smart contracts.
The BONK situation shows that even if a project’s code is secure, its treasury can still be vulnerable if governance rules allow a determined attacker to buy enough influence.
