Attackers Use Malicious Governance Proposal to Drain $20 Million in BONK Crypto
What Happened — Attackers leveraged a malicious governance proposal on the BONK DAO to vote themselves $20 million worth of BONK tokens, effectively draining the project’s treasury. The DAO identified exchange wallets used to acquire BONK ahead of the vote, reported the incident to law enforcement, and the South Korean exchange Upbit temporarily halted BONK deposits and withdrawals.
Why It Matters for Compliance & Audit Readiness
- SOC 2 CC6.1 (Logical Access) requires continuous monitoring of privileged actions; unauthorized voting power shifts are a classic access‑control failure.
- Immutable logs of governance decisions provide defensible audit evidence and demonstrate due‑diligence in a SOC 2 audit.
- Verisq’s SOC 2 Access Controls capability automates the collection and monitoring of such logs, helping you maintain a ready‑to‑audit posture.
Who Is Affected — Cryptocurrency projects, blockchain platforms, and any organization that relies on token‑based voting or decentralized governance mechanisms.
Recommended Actions — Review and tighten logical‑access policies for governance functions; implement continuous monitoring of voting activity and enforce multi‑factor controls for large‑stake holders; collect immutable logs as audit evidence for SOC 2 compliance. Source: https://therecord.media/attackers-vote-themselves-20-million-bonk-crypto
Technical Notes — Attack vector: malicious governance proposal exploiting token‑weight voting on the Solana blockchain; no specific CVE but a process‑level flaw in DAO governance design. Source: same link