An attacker transferred approximately $20 million worth of BONK tokens from the BonkDAO community treasury. The token is now down more than 9%.
There is now a large portion of the total token supply in the thieves’ wallet until they decide to sell.
How was BonkDAO attacked?
BonkDAO confirmed through its official
The attack occurred on Solana’s Realms platform, which runs BonkDAO’s token-weighted voting system.
The perpetrator first accumulated a large amount of BONK token through exchange wallets, and then made an offer. Using this concentrated voting power, the proposal passed easily. Once the proposal was approved, the treasury was allowed to be moved.
Blockchain investigators estimate that the attacker spent approximately $4 million to buy enough BONK codes for this attack.
Similar attacks on other Solana and cross-platform protocols occurred between 2025 and 2026. Sometimes, administrators used flash loans to borrow enough tokens to win a majority vote within a single transaction.
Although it has not been confirmed whether this attacker borrowed the tokens or patiently accumulated them through exchanges.
What is Punk doing now?
After the incident, the stolen BONK coin began trending on exchanges, and the token fell by more than 9%. South Korean company Upbit has since done so Token frozeTo inform exchange users that BONK deposits and withdrawals have been “temporarily suspended.”
BonkDAO said in statement They identified the exchange wallets used to purchase their tokens before the proposal went live. It is also said to be working with exchanges, other bridges and the Solana Foundation to track down the stolen funds and try to freeze them before they disappear.
The project has not yet provided any timeline for recovering the funds.
