en

Someone Stole $21M From BonkDAO Without Hacking Anything

image
rubric logo Security
like moon 5

An attacker has stolen $21.2 million from the BonkDAO treasury without hacking anything. He purchased $BONK tokens for $4.4 million, proposed via the governance forum that nobody checked for seven days. He voted yes for the proposal with his own tokens, and watched the funds move to his wallet automatically. Once executed, it was irreversible.