- How the $20 million BonkDAO exploit became possible
- Why voting in a DAO is a legal trap, David Schwartz breaks down
An official vote to withdraw funds from the treasury of a decentralized organization does not exempt participants from criminal and civil liability. That is the conclusion reached by Ripple CTO Emeritus David Schwartz while commenting on the $20 million loss suffered by BonkDAO.
The expert explained in detail why, from a legal standpoint, this incident is classified as corporate fraud, and why the concept of "code is law" is not recognized by state courts when it comes to the distribution of shared assets.
How the $20 million BonkDAO exploit became possible
Earlier, the decentralized treasury of the BONK meme coin on the Solana blockchain lost 4.42 trillion tokens through an official proposal, BIP #76, on the Realms platform. What happened was not a hacker attack: no smart contracts were broken, and the attacker used the token-weighted voting mechanism built into the system.
HOT Stories Ripple Exec: Washington Can't Ignore Crypto Dogecoin (DOGE) Uptrend Attempt Is Fuelless, XRP Paints Severe RSI Divergence, Bitcoin (BTC) Recovery Rally Is Premature: Crypto Market Review
The scheme was carried out in several steps:
- The manipulator spent about $4.4 million on Binance and Bybit, buying around 1% of the total BONK token supply.
- A malicious proposal, BIP #76, was launched on Realms, instructing the transfer of 4.42 trillion BONK tokens from the treasury to an external address.
- Out of 18,500 wallets eligible to vote, only seven participated in the process.
- By depositing the tokens 25 hours before the voting pool closed, one wallet secured 99.9% of the entire voting power. The quorum was reached, and 5% of the asset's total circulating supply was transferred to the manipulator's wallet.
Why voting in a DAO is a legal trap, David Schwartz breaks down
Schwartz rejected claims by decentralization advocates that the transaction was legitimate simply because it followed the rules of the smart contract.
He explained that this precedent qualifies as corporate fraud because the absence of DAO registration as a legal entity, such as an LLC, automatically makes the structure equivalent to a general partnership under common law.
If you and I go into business together and don't make any special legal arrangements, you cannot take joint funds and convert them to personal funds even if we agree that you can outvote me. You are automatically, by law, a fiduciary when you vote on shared funds.
Advertisement— David 'JoelKatz' Schwartz (@JoelKatz) July 7, 2026In this format, all participants bear joint and several liability, and everyone who voted in favor of the malicious proposal violated their fiduciary duty to the other holders. Schwartz also separately emphasized that courts evaluate only economic damage, and there are no "meme coin exceptions" in law.
You Might Also Like
Tue, 07/07/2026 - 00:01 Dogecoin (DOGE) Uptrend Attempt Is Fuelless, XRP Paints Severe RSI Divergence, Bitcoin (BTC) Recovery Rally Is Premature: Crypto Market ReviewByArman Shirinyan
At the moment, BonkDAO representatives have officially notified law enforcement agencies about the theft. The project team, together with the Solana Foundation and centralized exchanges, is conducting analytical work to track and block the withdrawn assets.
Legal experts note that this precedent marks the end of the era of legal nihilism in DeFi. In this case, the blockchain did not serve as a protective shield for the attacker, but as a transparent tool for recording the offense.
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
