‘Incentivize democracy’ at the cost of security? Inside Bonk’s $20M exploit

ambcryptoDipublikasikan tanggal 2026-07-07Terakhir diperbarui pada 2026-07-07

Abstrak

BonkDAO, the governance body for the memecoin BONK, suffered a $20 million exploit due to a malicious governance proposal. The attacker acquired enough BONK to create a proposal with a 1% vote threshold, which then authorized transferring 4.4 trillion BONK to their wallet. Security analysts criticized the low approval threshold and lack of safeguards like lock periods for treasury transfers, calling it an operational security failure. The incident fueled debate about balancing decentralized governance with security. Following the news, BONK's price dropped 10%, though on-chain data indicated continued accumulation by large holders since June. The project is collaborating with law enforcement and exchanges to mitigate the situation.

BonkDAO has become the latest crypto hack victim, after suffering a $20 million loss. The memecoin project confirmed that the exploit was enabled by a “malicious governance proposal.”

It added that it was collaborating with law enforcement, the Solana Foundation, bridges, and exchanges to mitigate the situation.

The BonkDAO exploit adds to a growing list of crypto stolen funds that hit a record high in H1 2026.

Source: X

However, security analysts have flagged the exploited weakness as the failure of the memecoin project.

Community blames Bonk for the exploit

The BonkDAO attacker acquired enough BONK to create a new governance proposal (Sowellian BonkDAO). With only a 1% community vote threshold, the attacker was able to create a proposal that added ‘metadata’ and sent 4.4 trillion BONK (approximately $20 million) to the hacker’s wallet.

One security analyst slammed the 1% community threshold configuration. He highlighted that direct treasury transfers should have a lock period or require multiple approvals. He added that,

Kinda silly, to be honest, to have such configurations, but yeah sad to see one of the OG projects.

For Taylor Monahan, another renowned Web3 security researcher, the update underscored how useless the broader DAO (decentralized autonomous organization) model is. For her, there is no need to “incentivize democracy” through DAOs at the expense of security.

In other words, the hack is part of the broader ‘operational security’ failures that have been the major driver of the record number of exploits in 2026.

BONK memecoin dumps 10%

BONK memecoin price crashed 10% following the exploit update. The losses could extend to the June range low of $0.0000040, which also doubled as the October crash dip.

Source: BONK/USDT, TradingView

Since June, bulls have been able to defend the support. Whether it will hold after the exploit remains to be seen.

On the demand front, especially from whale wallets, there was a negligible change. Only two whale wallets with over 1T BONK reduced their spot exposure to the memecoin. Overall, whale wallets with over 10M BONK have been accumulating since mid-June.

Source: Santiment

If the spot accumulation by whales continues, the June price range could be extended. However, if the exploit and broader market sentiment worsen into Q3, the memecoin could print a new yearly low on the price chart.


Final Summary

  • The $20M Bonk treasury exploit was another operational security failure, according to analysts.
  • On-chain data showed whales have been accumulating since June, and the exploit didn’t taper the demand.

Kripto yang Sedang Tren

Pertanyaan Terkait

QWhat was the main cause of the $20M BonkDAO exploit according to security analysts?

ASecurity analysts attributed the exploit primarily to operational security failures, specifically criticizing the configuration that allowed a governance proposal to pass with only a 1% community vote threshold and execute a direct treasury transfer without sufficient safeguards like a lock period or multi-signature approval.

QHow did the attacker manage to steal funds from BonkDAO?

AThe attacker acquired enough BONK tokens to create a new governance proposal called 'Sowellian BonkDAO'. With BonkDAO's low 1% community vote threshold, the attacker successfully passed a proposal that added malicious metadata, enabling the transfer of 4.4 trillion BONK (worth approximately $20 million) to their own wallet.

QWhat was the immediate impact on BONK's price following the exploit news?

AFollowing the announcement of the exploit, the price of the BONK memecoin crashed by 10%.

QWhat is Taylor Monahan's criticism regarding DAOs in the context of this hack?

ATaylor Monahan, a Web3 security researcher, criticized the broader DAO model as 'useless' in this context, arguing that there is no need to 'incentivize democracy' through DAOs at the expense of security.

QWhat does on-chain data indicate about whale activity for BONK around the time of the exploit?

AOn-chain data from Santiment showed that whale wallets holding over 10 million BONK had been accumulating the token since mid-June. The exploit did not significantly dampen this demand, with only two wallets holding over 1 trillion BONK reducing their spot exposure.

Bacaan Terkait

Anda Akan Terkejut Betapa Berbedanya Arsitektur WeChat dan Telegram

**Ringkasan Perbandingan Arsitektur WeChat vs. Telegram** Pada kuartal kedua 2026, WeChat mencapai 1,428 miliar pengguna bulanan. Sebagai platform digital utama, arsitektur WeChat berbeda tajam dengan Telegram dalam beberapa aspek kunci: **Penyimpanan Data:** * **Telegram:** Menyimpan percakapan secara tak terbatas di cloud dengan sinkronisasi otomatis di semua perangkat. Versi desktop dapat berjalan mandiri. * **WeChat:** Riwayat chat disimpan secara lokal di perangkat. Transfer ke perangkat baru memerlukan migrasi manual via kode QR, dan versi desktop selalu membutuhkan konfirmasi dari ponsel. **Fitur Komentar & Diskusi:** * **Telegram:** Komentar di channel terintegrasi langsung dalam antarmuka yang sama melalui grup diskusi terpisah. * **WeChat:** Komentar di artikel akun resmi dimoderasi terlebih dahulu dan tidak memiliki sistem diskusi otomatis yang terikat ke artikel tertentu. **Platform Pengembang:** * **Telegram:** Bot API bersifat terbuka, gratis, dan dokumentasinya tersedia untuk publik. * **WeChat:** Mini-program beroperasi dalam ekosistem tertutup, memerlukan verifikasi, sertifikasi berbayar, dan seringkali lisensi bisnis untuk akses API. **Batas Pengiriman File:** * **Telegram:** Batas unggah 2 GB (umum) dan 4 GB (Premium), tanpa batas kecepatan. * **WeChat:** Batas umum 200 MB untuk file dalam chat. File lebih besar memerlukan "File Transfer Assistant" dan memiliki masa simpan terbatas di server. **Sistem Pembayaran & Ekosistem:** * **WeChat:** WeChat Pay terintegrasi sangat dalam di kehidupan sehari-hari di Tiongkok, menggantikan uang tunai di banyak aspek. * **Telegram:** Tidak memiliki sistem pembayaran fiat terintegrasi skala serupa. Fungsi keuangan lebih banyak melalui bot pihak ketiga dan berfokus pada pembayaran crypto. **Analisis Keamanan (Sudut Pandang AI):** Perbandingan juga menyoroti perbedaan dalam enkripsi. Telegram menawarkan enkripsi end-to-end untuk "Secret Chats", sementara WeChat tidak. Integrasi yang sangat erat antara chat dan pembayaran di WeChat (tanpa enkripsi end-to-end) dapat memperluas permukaan serangan. Misalnya, otoritas Singapura mencatat ratusan kasus penipuan terkait WeChat pada awal 2025. **Kesimpulan:** Kedua platform merepresentasikan filosofi berbeda: WeChat dibangun sebagai ekosistem tertutup yang terintegrasi sangat dalam dengan ekonomi nyata, sedangkan Telegram berfokus pada protokol terbuka, penyimpanan data fleksibel, dan hambatan rendah bagi pengembang. Pilihan arsitektur ini menentukan audiens dan skenario penggunaan masing-masing platform.

cryptonews.ru4j yang lalu

Anda Akan Terkejut Betapa Berbedanya Arsitektur WeChat dan Telegram

cryptonews.ru4j yang lalu

Trading

Spot

Artikel Populer

Cara Membeli BONK

Selamat datang di HTX.com! Kami telah membuat pembelian Bonk (BONK) menjadi mudah dan nyaman. Ikuti panduan langkah demi langkah kami untuk memulai perjalanan kripto Anda.Langkah 1: Buat Akun HTX AndaGunakan alamat email atau nomor ponsel Anda untuk mendaftar akun gratis di HTX. Rasakan perjalanan pendaftaran yang mudah dan buka semua fitur.Dapatkan Akun SayaLangkah 2: Buka Beli Kripto, lalu Pilih Metode Pembayaran AndaKartu Kredit/Debit: Gunakan Visa atau Mastercard Anda untuk membeli Bonk (BONK) secara instan.Saldo: Gunakan dana dari saldo akun HTX Anda untuk melakukan trading dengan lancar.Pihak Ketiga: Kami telah menambahkan metode pembayaran populer seperti Google Pay dan Apple Pay untuk meningkatkan kenyamanan.P2P: Lakukan trading langsung dengan pengguna lain di HTX.Over-the-Counter (OTC): Kami menawarkan layanan yang dibuat khusus dan kurs yang kompetitif bagi para trader.Langkah 3: Simpan Bonk (BONK) AndaSetelah melakukan pembelian, simpan Bonk (BONK) di akun HTX Anda. Selain itu, Anda dapat mengirimkannya ke tempat lain melalui transfer blockchain atau menggunakannya untuk memperdagangkan mata uang kripto lainnya.Langkah 4: Lakukan trading Bonk (BONK)Lakukan trading Bonk (BONK) dengan mudah di pasar spot HTX. Cukup akses akun Anda, pilih pasangan perdagangan, jalankan trading, lalu pantau secara real-time. Kami menawarkan pengalaman yang ramah pengguna baik untuk pemula maupun trader berpengalaman.

802 Total TayanganDipublikasikan pada 2024.12.11Diperbarui pada 2026.06.02

Cara Membeli BONK

Diskusi

Selamat datang di Komunitas HTX. Di sini, Anda bisa terus mendapatkan informasi terbaru tentang perkembangan platform terkini dan mendapatkan akses ke wawasan pasar profesional. Pendapat pengguna mengenai harga BONK (BONK) disajikan di bawah ini.

活动图片