BonkDAO, the decentralized autonomous organization tied to the Solana-based memecoin BONK, said Monday it was the target of a malicious governance proposal that drained an estimated $20 million worth of BONK tokens from its treasury, according to a post on its official X account.

The DAO said the attack routed through a governance vote rather than a smart-contract bug, a vector that has hit other protocols this year, including a June governance takeover at Balancer-linked TOP token pools that drained $1.58 million.

BonkDAO said it has already identified the exchange wallets used to buy BONK ahead of the proposal being submitted, a pattern suggesting the attacker positioned tokens before pushing the malicious vote through. The DAO is “actively working with exchanges, bridges and Solana Foundation to best manage the situation,” per its statement.

Law Enforcement Notified

BonkDAO said law enforcement has been notified and that it continues working with “relevant parties to recover funds and identify those responsible,” according to the same post. The DAO did not name a suspect or disclose the specific governance mechanism exploited to pass the proposal.

The disclosure came directly from BonkDAO’s verified X account, with no on-chain transaction hash, security-firm tracing report, or third-party confirmation yet available. BONK is among the largest Solana memecoins by market capitalization, and a governance-level treasury drain of this size marks one of the larger DAO exploits reported this year via the proposal-attack vector rather than a code vulnerability.