Solana Governance Risk Exposed as $20M is Drained from BonkDAO Treasury

A Solana-based decentralized autonomous organization (DAO) called BonkDAO suffered a treasury drain of approximately $20 million after a malicious governance vote was passed through Realms, a widely used tool for DAO governance on the Solana blockchain.

The incident highlights the risk of governance attacks, which can be just as damaging as smart contract exploits. In this case, the attacker manipulated voter weight mechanics to pass a proposal and move treasury assets, resulting in a significant loss for BonkDAO.

The issue is not with the Solana blockchain itself but rather with the governance design and treasury control within the DAO. The incident serves as a warning that governance systems can become attack surfaces if not properly designed or secured.

BonkDAO's community will need to review their configurations, including quorum thresholds, voting periods, treasury execution limits, emergency pause powers, and how voting weight is calculated. The incident also raises questions about the trustworthiness of the $BONK ecosystem and the ability of its community to respond effectively in times of crisis.