BONK Treasury Drain Exposes DAO Governance Risk After $20M Proposal Attack

2h fa•

rialzista:

ribassista:

The Bonk treasury drain incident is now considered to be one of the hottest governance issues in the cryptocurrency space for 2023. Unlike previous examples, such as the Wormhole Bridge exploit or Ronin Network hack, the Bonk treasury drain was caused by neither a vulnerability in the smart contract nor any hacking activity. This issue revealed the vulnerability of governance through tokens because purchasing sufficient influence and controlling the treasury worth millions of dollars were enough to do that.

Weakness Revealed in Token-based DAO Governance System due to Bonk Treasury Drain

Bonk treasury drain started when the attackers had supposedly used $4.4 million in buying just over 1% of the circulating BONK tokens. This move enabled the wallet to meet the quorum requirement for passing the governance proposals in BONK DAO.

In view of the small number of participants in the voting process, the proposal was accepted unanimously with BONK tokens valued at $20 million moving automatically from the treasury to the attacker’s wallet. This situation has been considered one of the major DAO governance exploits of a Solana meme coin.

Bonk treasury drain after $20M BONK governance attack. — BONK Treasury Drain Exposes DAO Governance Risk After $20M Proposal Attack 5

How a $4.4 Million Purchase Became a $20 Million Treasury Drain

While many cryptocurrency scams take advantage of flaws in the code of the smart contract, this particular BONK governance hack did not exploit any vulnerability in the protocol’s code. In its attempt to manipulate the platform, the hacker simply obtained enough voting power in accordance with the governance principles. The treasury funds were automatically drained after the proposal was approved.

The case of the Bonk treasury drain shows how vulnerable decentralized governance models can be when there is insufficient voter engagement and one party can obtain sufficient influence to impact the decision regarding treasury management.

Why BONK Governance Attack is Unique in Comparison with Other Cryptocurrency Attacks

The BONK treasury drain is unique compared with other forms of cryptocurrency attacks due to the fact that in this case, the attackers did not manage to breach any blockchain security measure or hack any vulnerable code within the smart contract. The attack was carried out based on how governance rules work.

In the case of the BONK proposal attack, the attackers managed to obtain temporary voting power sufficient to manipulate the result of the governance decision. Because of that, many blockchain experts are now saying that governance systems need to be reviewed for security just like smart contracts.

Bonk treasury drain sparks $20M DAO security crisis. — BONK Treasury Drain Exposes DAO Governance Risk After $20M Proposal Attack 6

Comparison Between the BONK Treasury Drain and Other DAO Governance Attacks

The recent BONK treasury drain has been compared to various other governance attacks in the realm of decentralized finance. Unlike in previous attacks, which mostly utilized flash loans or governance attacks involving borrowed tokens, the most recent BONK attack seems to have involved buying tokens directly.

What makes this particular incident especially interesting is that it clearly shows that, despite the lack of complex mechanisms employed in previous attacks, governance systems are exploitable when voter participation is low. This is yet another incident that brings attention to the issues with Solana DAO governance security.

Reaction to Market Post Bonk Treasury Drain

The instant reaction to the Bonk treasury drain was negative market sentiment which drove the price of BONK down as there was growing concern about the governance model of the project. As of reporting time, the price of BONK was $0.000004, down by more than 8% from the price 24 hours ago, with the daily trading volume being more than $130 million.

Although trading is still happening, there have been some concerns among parts of the Solana ecosystem news cycle if something similar can happen to other decentralized projects because of their governance models. It has already become one of the most watched BONK token news.

Bonk treasury drain pushes BONK price down 8% on CoinGecko. — BONK Treasury Drain Exposes DAO Governance Risk After $20M Proposal Attack 7

What’s Coming After BONK Treasury Drain?

This problem of BONK treasury drain has put tremendous pressure on the BONK DAO to regain community trust and improve their governance model. Both developers and token owners will need to look into better quorum restrictions, prolonged voting processes, and protections from concentrated voting.

This event, known as BONK governance attack drains $20 million treasury, is just an example showing that decentralization governance needs improvement alongside the increasing values of treasury. Otherwise, such attacks will continue to occur in other blockchain systems that use voting based on tokens.

Bonk treasury drain wipes $20M from BONK DAO treasury. — BONK Treasury Drain Exposes DAO Governance Risk After $20M Proposal Attack 8

Importance of the BONK Treasury Drain to the Whole Cryptocurrency Ecosystem

It is important to note that the Bonk treasury drain is not an isolated incident but represents a problem that the concept of decentralized governance poses to the entire blockchain ecosystem. As the size of treasuries continues to expand to hundreds of millions of dollars, it becomes more attractive to be hacked by malicious actors.

It has led to greater discourse about crypto governance attack prevention, crypto governance security audits, and increased voting participation. The case shows why all projects in the Solana ecosystem and other blockchain platforms need to take the issue of governance seriously.

Conclusion

The Bonk treasury drain is among the best-known examples demonstrating how governance failures may result in significant financial losses for decentralized organizations without the need for smart contract hacking. The attack, which involved an expenditure of roughly $4.4 million to gain sufficient voting power, allegedly triggered a proposal draining roughly $20 million out of the DAO’s treasury.

With further increases in treasury sizes in decentralized organizations, enhanced governance protection measures, more voter involvement, and regular security assessments will become crucial. Investors will need to stay on top of governance developments prior to considering opportunities with decentralized organizations’ crypto assets management.

Appendix: Glossary of Key Terms

BONK DAO is an organization that helps make decisions and manages money within the BONK ecosystem.

The Bonk treasury drain was an incident where around $20 million worth of BONK tokens was taken from the DAO treasury because of a fake proposal.

A Governance Proposal is like a vote on the internet that lets people with BONK tokens agree or disagree on changes to the protocol.

DAO Governance Exploit is when someone manipulates the voting system by using the rules against the system not by finding a bug in the code.

Frequently Asked Questions About Bonk Treasury Drain

What is meant by “Bonk treasury drain”?

Bonk treasury drain stands for a case when an attacker allegedly had enough votes in order to pass a malicious proposition that moved around $20 million out of the BONK DAO treasury.

How did the attacker take control of the voting process?

According to reports, the attacker invested around $4.4 million in buying enough BONK tokens needed to meet the governance quorum to pass a proposal on a low turnout vote.