BonkDAO treasury hit by a malicious governance proposal attack. The attacker exploited a loophole in the on-chain voting mechanism's design, manipulating the proposal process to successfully extract approximately $20 million worth of BONK tokens from the BonkDAO treasury. Preliminary investigations show that before the malicious proposal was officially initiated, the attacker had already purchased and hoarded a massive amount of BONK tokens through wallets on several centralized cryptocurrency exchanges. Since BonkDAO's on-chain voting power is typically tied directly to token holdings, the attacker leveraged their overwhelming token position and voting weight acquired in advance to forcefully push through the malicious proposal to distribute treasury assets, effectively transferring decentralized assets within the rules.