‘Incentivize democracy’ at the cost of security? Inside Bonk’s $20M exploit

ambcryptoОпубліковано о 2026-07-07Востаннє оновлено о 2026-07-07

Анотація

BonkDAO, the governance body for the memecoin BONK, suffered a $20 million exploit due to a malicious governance proposal. The attacker acquired enough BONK to create a proposal with a 1% vote threshold, which then authorized transferring 4.4 trillion BONK to their wallet. Security analysts criticized the low approval threshold and lack of safeguards like lock periods for treasury transfers, calling it an operational security failure. The incident fueled debate about balancing decentralized governance with security. Following the news, BONK's price dropped 10%, though on-chain data indicated continued accumulation by large holders since June. The project is collaborating with law enforcement and exchanges to mitigate the situation.

BonkDAO has become the latest crypto hack victim, after suffering a $20 million loss. The memecoin project confirmed that the exploit was enabled by a “malicious governance proposal.”

It added that it was collaborating with law enforcement, the Solana Foundation, bridges, and exchanges to mitigate the situation.

The BonkDAO exploit adds to a growing list of crypto stolen funds that hit a record high in H1 2026.

Source: X

However, security analysts have flagged the exploited weakness as the failure of the memecoin project.

Community blames Bonk for the exploit

The BonkDAO attacker acquired enough BONK to create a new governance proposal (Sowellian BonkDAO). With only a 1% community vote threshold, the attacker was able to create a proposal that added ‘metadata’ and sent 4.4 trillion BONK (approximately $20 million) to the hacker’s wallet.

One security analyst slammed the 1% community threshold configuration. He highlighted that direct treasury transfers should have a lock period or require multiple approvals. He added that,

Kinda silly, to be honest, to have such configurations, but yeah sad to see one of the OG projects.

For Taylor Monahan, another renowned Web3 security researcher, the update underscored how useless the broader DAO (decentralized autonomous organization) model is. For her, there is no need to “incentivize democracy” through DAOs at the expense of security.

In other words, the hack is part of the broader ‘operational security’ failures that have been the major driver of the record number of exploits in 2026.

BONK memecoin dumps 10%

BONK memecoin price crashed 10% following the exploit update. The losses could extend to the June range low of $0.0000040, which also doubled as the October crash dip.

Source: BONK/USDT, TradingView

Since June, bulls have been able to defend the support. Whether it will hold after the exploit remains to be seen.

On the demand front, especially from whale wallets, there was a negligible change. Only two whale wallets with over 1T BONK reduced their spot exposure to the memecoin. Overall, whale wallets with over 10M BONK have been accumulating since mid-June.

Source: Santiment

If the spot accumulation by whales continues, the June price range could be extended. However, if the exploit and broader market sentiment worsen into Q3, the memecoin could print a new yearly low on the price chart.


Final Summary

  • The $20M Bonk treasury exploit was another operational security failure, according to analysts.
  • On-chain data showed whales have been accumulating since June, and the exploit didn’t taper the demand.

Трендові криптовалюти

Пов'язані питання

QWhat was the main cause of the $20M BonkDAO exploit according to security analysts?

ASecurity analysts attributed the exploit primarily to operational security failures, specifically criticizing the configuration that allowed a governance proposal to pass with only a 1% community vote threshold and execute a direct treasury transfer without sufficient safeguards like a lock period or multi-signature approval.

QHow did the attacker manage to steal funds from BonkDAO?

AThe attacker acquired enough BONK tokens to create a new governance proposal called 'Sowellian BonkDAO'. With BonkDAO's low 1% community vote threshold, the attacker successfully passed a proposal that added malicious metadata, enabling the transfer of 4.4 trillion BONK (worth approximately $20 million) to their own wallet.

QWhat was the immediate impact on BONK's price following the exploit news?

AFollowing the announcement of the exploit, the price of the BONK memecoin crashed by 10%.

QWhat is Taylor Monahan's criticism regarding DAOs in the context of this hack?

ATaylor Monahan, a Web3 security researcher, criticized the broader DAO model as 'useless' in this context, arguing that there is no need to 'incentivize democracy' through DAOs at the expense of security.

QWhat does on-chain data indicate about whale activity for BONK around the time of the exploit?

AOn-chain data from Santiment showed that whale wallets holding over 10 million BONK had been accumulating the token since mid-June. The exploit did not significantly dampen this demand, with only two wallets holding over 1 trillion BONK reducing their spot exposure.

Пов'язані матеріали

Tiger Research: Three Strategies for Financial Institutions to Keep Up with the Tokenization Wave

Tiger Research's in-depth report analyzes the strategic choices for financial institutions entering the rapidly growing Real-World Asset (RWA) tokenization market. With the market projected to be worth $25-36 billion and a lack of complete regulatory frameworks in many jurisdictions, institutions face three options: waiting for domestic legislation, using regulatory sandboxes for limited experiments, or moving first into established overseas markets to gain a competitive edge. Tokenization is not magic; it requires meticulous preparation. Before entry, institutions must strategically plan across six core areas: choosing a jurisdiction, obtaining necessary licenses, defining the asset type, targeting the appropriate investor base, selecting settlement currencies, and designing operational requirements like custody and governance. The report outlines two main operational paths. The first is a direct jurisdictional path, establishing a legal presence in mature markets like Hong Kong, Singapore, or the U.S., often leveraging local licensed platforms to accelerate market entry. The second is a chain-native path, using platforms like Ondo or Plume that are built with regulatory compliance embedded, allowing for faster, more flexible market access without being tied to a specific jurisdiction. Ultimately, the report advises against waiting for perfect regulation. The preparation process can take 6-12 months and requires thorough legal review. Using the example of a mid-sized securities firm, it details steps from evaluating existing entities to final execution. The core message is that accumulating real-world operational experience is paramount, as the market is moving ahead and will not wait for latecomers.

Foresight News23 хв тому

Tiger Research: Three Strategies for Financial Institutions to Keep Up with the Tokenization Wave

Foresight News23 хв тому

Zoomex X Space Recap With David James and the World Cup Trading Panel

Zoomex hosted a World Cup-themed X Space featuring England goalkeeper David James and a panel of traders. The discussion, part of a charity pledge, drew parallels between goalkeeping and trading, focusing on preparation, psychology, and execution. James emphasized that pressure for a goalkeeper comes during periods of inactivity, not sustained attack, and highlighted the importance of concentration. He described two modes for penalty saves: meticulous preparation using data on shooters, and instinct, which is improved by information—a concept traders directly related to market analysis. He discussed how elite preparation turns instinct into trained execution, making spectacular saves feel like practiced outcomes rather than miracles. Errors are now treated as data for correction, not lingering ghosts. James analyzed tournament threats, noting France's exceptional speed across the pitch and suggesting that teams like Mexico and Spain, yet to concede, face a psychological test. On England's chances, James was unequivocal, predicting they would win and nominating the UEFA Foundation for the associated charity donation. The session consistently linked thorough preparation in both football and trading to controlling emotions and executing under pressure, with the core lesson being that preparation eliminates nervousness by replacing unknowns with a plan.

TheNewsCrypto1 год тому

Zoomex X Space Recap With David James and the World Cup Trading Panel

TheNewsCrypto1 год тому

Unitree's IPO Frenzy: The Real Mystery is How It Will Spend the 42 Billion Raised

Unitree, a Chinese robotics company, is set for a public listing after its IPO registration was approved by regulators. The company, which started with quadruped robots and has expanded into humanoids, plans to raise approximately 4.2 billion yuan through its offering. The article traces Unitree's rapid growth from its founding in 2016 to its current status. It highlights key milestones like the 2021 CCTV Spring Festival Gala performance, the 2023 launch of its affordable Go2 robot dog and the H1 humanoid robot, and a series of subsequent product launches. By 2025, the company reported revenue of 1.71 billion yuan, profitability, and sales exceeding 5,500 humanoid robots. As the first publicly-listed humanoid robot company on China's STAR Market, Unitree's main challenges are sustaining growth and deploying its newly raised capital effectively. The humanoid robot sector in China is crowded, with over 140 companies. Competitors include UBTech (focusing on industrial and consumer markets), Fourier, and international players like Tesla Optimus and 1X NEO. The article outlines three critical challenges for Unitree: establishing a strong second product line beyond its quadruped robots, maintaining its price advantage while ensuring quality, and successfully advancing its embodied AI capabilities through partnerships like the one with NVIDIA for the H2 Plus platform. Unitree's likely strategy involves a "developer tools + industry benchmarks" approach: using low-cost models like the R1 and G1 to build developer adoption and volume, leveraging high-end platforms for AI training, and securing pilot projects in sectors like logistics and manufacturing to build case studies. The company's future success hinges on converting its current momentum in shipments and pilot programs into sustainable, large-scale commercial contracts as the broader market evolves.

marsbit1 год тому

Unitree's IPO Frenzy: The Real Mystery is How It Will Spend the 42 Billion Raised

marsbit1 год тому

Examining the Open USD Partner Lineup: Follow Who's Joining to See Where the Money Flows

**Title: Deciphering the Open USD Partner Roster: Following the Money** The launch of Open USD is notable less for the stablecoin itself and more for its expansive list of over 140 founding partners, which reads like a "who's who" of global finance and tech. This coalition, including asset managers like BlackRock, card networks Visa and Mastercard, banks (BNY Mellon, Standard Chartered, etc.), tech giants (Google, IBM), merchants (Shopify), and crypto firms (Coinbase, Ripple, Aave, MetaMask), signals a strategic shift. The diverse membership reveals that stablecoins are increasingly viewed not as products to compete over, but as shared infrastructure too critical to be left to any single entity. Each partner category has distinct motives. Asset managers like BlackRock seek to manage the large, sticky cash reserves, a lucrative fee-generating opportunity. Merchants like Shopify aim for lower-cost settlement and potential yield on balances. Banks join defensively to retain custody and settlement roles, fearing deposit outflows to stablecoins. Tech companies bet on programmable money for future machine-to-machine commerce. Crypto firms gain mainstream legitimacy and distribution channels. Remarkably, the consortium includes direct competitors (Visa vs. Mastercard, Coinbase vs. Ripple), indicating that the fear of exclusion from this emerging financial layer outweighs competitive rivalries. However, this shared governance could also lead to slow decision-making. The roster's composition is the real message: it represents a collective bet that a widely accepted, consortium-owned stablecoin is preferable to proprietary versions or having none at all. For incumbents like Circle and Tether, this alliance poses a significant threat, as potential clients have collectively chosen to build their own alternative. The absence of major U.S. retail banks (busy with their own tokenized deposit networks) is equally telling. In essence, the partner list maps where the industry believes value and risk will flow in a tokenized dollar future, marking stablecoin's evolution from a product to a utility.

Foresight News2 год тому

Examining the Open USD Partner Lineup: Follow Who's Joining to See Where the Money Flows

Foresight News2 год тому

Торгівля

Спот

Популярні статті

Як купити BONK

Ласкаво просимо до HTX.com! Ми зробили покупку Bonk (BONK) простою та зручною. Дотримуйтесь нашої покрокової інструкції, щоб розпочати свою криптовалютну подорож.Крок 1: Створіть обліковий запис на HTXВикористовуйте свою електронну пошту або номер телефону, щоб зареєструвати обліковий запис на HTX безплатно. Пройдіть безпроблемну реєстрацію й отримайте доступ до всіх функцій.ЗареєструватисьКрок 2: Перейдіть до розділу Купити крипту і виберіть спосіб оплатиКредитна/дебетова картка: використовуйте вашу картку Visa або Mastercard, щоб миттєво купити Bonk (BONK).Баланс: використовуйте кошти з балансу вашого рахунку HTX для безперешкодної торгівлі.Треті особи: ми додали популярні способи оплати, такі як Google Pay та Apple Pay, щоб підвищити зручність.P2P: Торгуйте безпосередньо з іншими користувачами на HTX.Позабіржова торгівля (OTC): ми пропонуємо індивідуальні послуги та конкурентні обмінні курси для трейдерів.Крок 3: Зберігайте свої Bonk (BONK)Після придбання Bonk (BONK) збережіть його у своєму обліковому записі на HTX. Крім того, ви можете відправити його в інше місце за допомогою блокчейн-переказу або використовувати його для торгівлі іншими криптовалютами.Крок 4: Торгівля Bonk (BONK)Легко торгуйте Bonk (BONK) на спотовому ринку HTX. Просто увійдіть до свого облікового запису, виберіть торгову пару, укладайте угоди та спостерігайте за ними в режимі реального часу. Ми пропонуємо зручний досвід як для початківців, так і для досвідчених трейдерів.

342 переглядів усьогоОпубліковано 2024.12.11Оновлено 2026.06.02

Як купити BONK

Обговорення

Ласкаво просимо до спільноти HTX. Тут ви можете бути в курсі останніх подій розвитку платформи та отримати доступ до професійної ринкової інформації. Нижче представлені думки користувачів щодо ціни BONK (BONK).

活动图片