‘Incentivize democracy’ at the cost of security? Inside Bonk’s $20M exploit

ambcrypto发布于2026-07-07更新于2026-07-07

文章摘要

BonkDAO, the governance body for the memecoin BONK, suffered a $20 million exploit due to a malicious governance proposal. The attacker acquired enough BONK to create a proposal with a 1% vote threshold, which then authorized transferring 4.4 trillion BONK to their wallet. Security analysts criticized the low approval threshold and lack of safeguards like lock periods for treasury transfers, calling it an operational security failure. The incident fueled debate about balancing decentralized governance with security. Following the news, BONK's price dropped 10%, though on-chain data indicated continued accumulation by large holders since June. The project is collaborating with law enforcement and exchanges to mitigate the situation.

BonkDAO has become the latest crypto hack victim, after suffering a $20 million loss. The memecoin project confirmed that the exploit was enabled by a “malicious governance proposal.”

It added that it was collaborating with law enforcement, the Solana Foundation, bridges, and exchanges to mitigate the situation.

The BonkDAO exploit adds to a growing list of crypto stolen funds that hit a record high in H1 2026.

Source: X

However, security analysts have flagged the exploited weakness as the failure of the memecoin project.

Community blames Bonk for the exploit

The BonkDAO attacker acquired enough BONK to create a new governance proposal (Sowellian BonkDAO). With only a 1% community vote threshold, the attacker was able to create a proposal that added ‘metadata’ and sent 4.4 trillion BONK (approximately $20 million) to the hacker’s wallet.

One security analyst slammed the 1% community threshold configuration. He highlighted that direct treasury transfers should have a lock period or require multiple approvals. He added that,

Kinda silly, to be honest, to have such configurations, but yeah sad to see one of the OG projects.

For Taylor Monahan, another renowned Web3 security researcher, the update underscored how useless the broader DAO (decentralized autonomous organization) model is. For her, there is no need to “incentivize democracy” through DAOs at the expense of security.

In other words, the hack is part of the broader ‘operational security’ failures that have been the major driver of the record number of exploits in 2026.

BONK memecoin dumps 10%

BONK memecoin price crashed 10% following the exploit update. The losses could extend to the June range low of $0.0000040, which also doubled as the October crash dip.

Source: BONK/USDT, TradingView

Since June, bulls have been able to defend the support. Whether it will hold after the exploit remains to be seen.

On the demand front, especially from whale wallets, there was a negligible change. Only two whale wallets with over 1T BONK reduced their spot exposure to the memecoin. Overall, whale wallets with over 10M BONK have been accumulating since mid-June.

Source: Santiment

If the spot accumulation by whales continues, the June price range could be extended. However, if the exploit and broader market sentiment worsen into Q3, the memecoin could print a new yearly low on the price chart.


Final Summary

  • The $20M Bonk treasury exploit was another operational security failure, according to analysts.
  • On-chain data showed whales have been accumulating since June, and the exploit didn’t taper the demand.

热门币种推荐

相关问答

QWhat was the main cause of the $20M BonkDAO exploit according to security analysts?

ASecurity analysts attributed the exploit primarily to operational security failures, specifically criticizing the configuration that allowed a governance proposal to pass with only a 1% community vote threshold and execute a direct treasury transfer without sufficient safeguards like a lock period or multi-signature approval.

QHow did the attacker manage to steal funds from BonkDAO?

AThe attacker acquired enough BONK tokens to create a new governance proposal called 'Sowellian BonkDAO'. With BonkDAO's low 1% community vote threshold, the attacker successfully passed a proposal that added malicious metadata, enabling the transfer of 4.4 trillion BONK (worth approximately $20 million) to their own wallet.

QWhat was the immediate impact on BONK's price following the exploit news?

AFollowing the announcement of the exploit, the price of the BONK memecoin crashed by 10%.

QWhat is Taylor Monahan's criticism regarding DAOs in the context of this hack?

ATaylor Monahan, a Web3 security researcher, criticized the broader DAO model as 'useless' in this context, arguing that there is no need to 'incentivize democracy' through DAOs at the expense of security.

QWhat does on-chain data indicate about whale activity for BONK around the time of the exploit?

AOn-chain data from Santiment showed that whale wallets holding over 10 million BONK had been accumulating the token since mid-June. The exploit did not significantly dampen this demand, with only two wallets holding over 1 trillion BONK reducing their spot exposure.

你可能也喜欢

您会惊讶地发现,WeChat 和 Telegram 在架构层面竟如此不同

微信与Telegram在架构层面有着根本性的差异,主要体现在数据存储、功能设计和生态开放度上。 **数据存储方式**:Telegram提供无限云端存储,所有消息历史在各设备间自动同步。微信则采用本地存储,消息在服务器交付后不保留,因此更换设备需通过特定功能迁移,且桌面版必须依赖手机在线确认才能登录。 **功能设计差异**:在频道讨论方面,Telegram为帖子自动关联评论区,实现一体化讨论。微信的公众号文章评论需经发布者审核才可显示,缺乏与文章直接关联的讨论系统,用户交流需跳转至聊天或小程序。文件传输上,Telegram支持最大2-4GB的文件,微信则限制为200MB,大文件需借助“文件传输助手”或第三方服务。 **开发与生态**:Telegram的Bot API完全开放免费,开发门槛低。微信小程序生态庞大(活跃数量超480万),但属于封闭系统,需经过审核、认证,甚至提供商业许可才能使用部分API,准入要求更高。 **支付整合**:微信支付深度融入中国日常生活,覆盖绝大多数线下场景及公共服务,替代了现金和银行应用。Telegram没有内置的法定货币支付系统,主要通过第三方机器人实现支付功能,尤其侧重加密货币,这反映了其去中心化理念,但在传统金融基础设施完善的地区,限制了其作为日常金融工具的应用。 **安全考量**:文章未深入讨论加密机制。Telegram提供端到端加密的私密聊天选项,而微信聊天信息不采用端到端加密。值得注意的是,微信将通讯与支付高度集成于单一界面,理论上扩大了潜在的攻击面。有数据显示,仅2025年初新加坡就记录了数百起涉及仿冒微信等支付平台员工的诈骗案件,损失巨大。这引出一个技术问题:当通讯与支付功能在同一个应用内结合得越紧密,聊天安全漏洞可能带来的代价就越高。 总结而言,两者代表了不同的平台哲学:微信构建了一个深度融入现实经济的封闭但高度集成的生态系统;而Telegram则围绕开放协议、灵活数据存储和低开发者门槛进行设计。这种架构选择决定了各自的目标用户和使用场景。

cryptonews.ru4小时前

您会惊讶地发现,WeChat 和 Telegram 在架构层面竟如此不同

cryptonews.ru4小时前

交易

现货

热门文章

如何购买BONK

欢迎来到HTX.com!我们已经让购买Bonk(BONK)变得简单而便捷。跟随我们的逐步指南,放心开始您的加密货币之旅。第一步:创建您的HTX账户使用您的电子邮件、手机号码注册一个免费账户在HTX上。体验无忧的注册过程并解锁所有平台功能。立即注册第二步:前往买币页面,选择您的支付方式信用卡/借记卡购买:使用您的Visa或Mastercard即时购买Bonk(BONK)。余额购买:使用您HTX账户余额中的资金进行无缝交易。第三方购买:探索诸如Google Pay或Apple Pay等流行支付方法以增加便利性。C2C购买:在HTX平台上直接与其他用户交易。HTX场外交易台(OTC)购买:为大量交易者提供个性化服务和竞争性汇率。第三步:存储您的Bonk(BONK)购买完您的Bonk(BONK)后,将其存储在您的HTX账户钱包中。您也可以通过区块链转账将其发送到其他地方或者用于交易其他加密货币。第四步:交易Bonk(BONK)在HTX的现货市场轻松交易Bonk(BONK)。访问您的账户,选择您的交易对,执行您的交易,并实时监控。HTX为初学者和经验丰富的交易者提供了友好的用户体验。

1.7k人学过发布于 2024.05.09更新于 2026.06.02

如何购买BONK

相关讨论

欢迎来到HTX社区。在这里,您可以了解最新的平台发展动态并获得专业的市场意见。以下是用户对BONK(BONK)币价的意见。

活动图片