Attacker Follows Every Rule of Crypto System, Drains $20M Treasury, May Still Face Prison
An attacker followed every rule of a crypto system perfectly, drained $20 million from its treasury, and may still go to prison. The incident highlights vulnerabilities in decentralized governance mechanisms.
An attacker followed every rule of a crypto system perfectly, drained $20 million from its treasury, and may still go to prison. The incident highlights vulnerabilities in decentralized governance mechanisms.
On July 6, 2026, the attacker spent approximately $4 million to buy BONK tokens, which granted them enough voting power to approve their own proposal. The proposal allowed them to drain the treasury, all while following the system's rules to the letter. The exact details of the proposal and the code used are available on a provided link.
This incident underscores the risks associated with decentralized governance. While such systems aim to be transparent and rule-based, they can be manipulated by those who understand the rules better than the system's creators. For everyday users, this serves as a reminder to be cautious when participating in decentralized finance (DeFi) projects and to thoroughly understand the risks involved.
The attacker may still face legal consequences, despite following the system's rules. This raises questions about the legal implications of such exploits and the need for better safeguards in decentralized systems. Users should watch for updates on any legal actions and consider the security measures of the platforms they use.